Wednesday, 2020-06-10

*** zbsarash1 has quit IRC00:17
*** yaawang has quit IRC04:04
*** yaawang has joined #starlingx04:04
*** rcw has quit IRC04:21
*** sgw has quit IRC04:34
*** yaawang has quit IRC04:40
*** yaawang has joined #starlingx04:41
*** yaawang has quit IRC05:00
*** yaawang has joined #starlingx05:01
*** cheng1 has quit IRC06:00
*** cheng1 has joined #starlingx06:02
*** cheng1 has quit IRC06:25
*** cheng1 has joined #starlingx06:28
*** cheng1 has quit IRC07:02
*** cheng1 has joined #starlingx07:04
*** bengates has joined #starlingx07:22
*** bengates_ has joined #starlingx07:24
*** bengates_ has quit IRC07:25
*** bengates_ has joined #starlingx07:25
*** bengates has quit IRC07:28
*** bengates has joined #starlingx08:08
*** bengates_ has quit IRC08:08
*** bengates has quit IRC08:18
*** bengates has joined #starlingx08:18
*** bengates has quit IRC08:50
*** bengates has joined #starlingx08:51
*** bengates has quit IRC08:51
*** bengates has joined #starlingx08:51
*** thorre has quit IRC10:07
*** thorre has joined #starlingx10:34
*** thorre has quit IRC10:35
*** thorre has joined #starlingx10:45
*** ijolliffe has joined #starlingx12:13
*** sgw has joined #starlingx13:03
sgwmorning all13:04
*** cheng1 has quit IRC13:31
*** cheng1 has joined #starlingx13:36
*** cheng1 has quit IRC13:50
*** cheng1 has joined #starlingx13:52
*** billzvonar has joined #starlingx14:05
*** zbsarash1 has joined #starlingx14:09
*** cheng1 has quit IRC14:38
*** cheng1 has joined #starlingx14:41
*** cheng1 has quit IRC15:29
*** cheng1 has joined #starlingx15:33
*** dpanech has joined #starlingx15:43
dpanechso https://review.opendev.org/#/c/734779 may need to be reverted. It references centos RPMs that don't exist in centos vault, which is where we are pulling from.15:46
*** rcw has joined #starlingx15:47
mthebeauHi dpanech; since I participate in the generation of security bug reports, I'm interested in the subject. Are these two locations ok: http://vault.centos.org/7.7.1908/os/Source/SPackages/ http://mirror.centos.org/centos/7/os/x86_64/Packages/15:49
mthebeaumost binary packages not in "vault" as such, that I am aware of.15:50
dpanechWe use neither of these locations. For binary packages we use http://vault.centos.org/7.7.1908/os/x86_64/Packages/ . See here https://opendev.org/starlingx/tools/src/branch/master/centos-mirror-tools/yum.repos.d15:56
*** cheng1 has quit IRC16:08
*** cheng1 has joined #starlingx16:09
*** bengates has quit IRC16:17
ildikovhi All16:28
ildikovIs there any decision/update regarding integrating OpenStack Ussuri into 4.0?16:28
ildikovWe have a few news material that highlights items from the upcoming 4.0 release and wanted to be sure we only refer to items that are already implemented or confirmed to be included16:29
mthebeaudpanech, review is posted at 6pm, existence of RPMs on vault asserted at 9:20am, assertion the RPMs are absent asserted at 11:48am.16:32
dpanechmthebau: sorry how was it asserted?16:40
sgwdpanech: mthebeau: Looks like I looked in the wrong place, maybe the better answer is to add the repo that contains the correct version16:40
sgwildikov: the plan is to get the "custom" cengn build tested and if that goes well today/tomorrow we will be merging Ussuri for 4.016:41
dpanechsgw: the only place that contains that binary is the non-snapshot mirror, I think its content is not stable. Ie it exists here: http://mirror.centos.org/centos/7.8.2003/os/x86_64/Packages/ , but not in the corresponding vault URL, which only contains the source package and not binaries. Maybe the vault is not synced yet? Not really sure how the process works at centos. Maybe it will appear in the vault in a16:44
dpanechbit.16:44
mthebeauhttp://mirror.centos.org/centos/7.8.2003/os/x86_64/Packages/16:44
ildikovsgw: cool, thank you for clarifying16:45
sgwdpanech: I will have to check with poornima how she actually tested this then, and I am sorry I looked in the wrong place, we just changes from mirror to vault a few weeks ago I think so my brain did not fully remember that.16:46
dpanechmethebau: yeah, but I'm pretty sure that location will be moved to vault by centos guys at some point.16:46
dpanechsgw: ok, let me know if there's anything else I can help with16:47
sgwI guess we need to revert that temporarily then or manually populate that.  I will update my comment on the other CVE that I +2'ed16:48
mthebeauSorry, I am not providing much insight. the developer asserts build and test successful, so although sgw admits a mistake I do not understand what's happening.  I don't think a procedural change is order for security bug fixing.16:52
sgwYes, I just added a comment in the expat change, I trusted that she did do a download and build, based on her commit message, so we need to understand what she did in order to have a successful download occur.16:54
sgwThey are India based, so I will try to talk with her tonight, it's late evening there now.16:54
mthebeauI used to occasionally make the mistake of checking-in binary files...16:55
sgwdpanech: on another topic, how are you importing the jenkins jobs to your setup?  I am going through a jenkins tutorial, but don't see anything about export import.  I found one plugin to import, but I don't think it will work because of the jenkins firewall.16:58
dpanechsgw: I took the job definitions from /var/lib/jenkins on CENGN. That directory is source controlled (minus generated files & logs). But Scott has some uncommitted changes there, so beware.17:40
dpanechsgw: you can basically overlay those files on top of your local Jenkins install (with Jenkins stopped)17:40
dpanechsgw: oh, but make sure you don't have a mail server like postfix running on the same machine, otherwise it might send emails to starlingx mail lists. Also: some jobs have daily schedules configured, they should be disabled. I'll send you the list in a few mins.17:44
dpanechsgw: These are the jobs with schedules: STX_sanity_result_from_discuss_mailing_list delete_old_loads_master_feature STX_build_master_master mirror_repo_sync mirror_download_sync STX_build_layer_all_master_master17:47
sgwin a meeting back withyou shortly17:48
dpanechsgw: ok. Also: some jobs will try to publish docker images to dockerhub. But I think that step will fail because it needs a password file to exist on the filesystem, which you wouldn't have.17:49
*** cheng1 has quit IRC17:50
*** cheng1 has joined #starlingx17:50
sgwdpanech: so we we need to install a specific version of jenkins?  When you sent me the plugins list (thanks btw) I tried to install them on my instance but some are not available18:09
dpanechI installed latest Jenkins. I think trying to match Jenkins versions is pretty hard, because its plugin downloader always tries to download latest (compatible) plugins anyway. Also: I followed the plugins list from the README file in /var/lib/jenkins. And yes, some of them disappeared and/or got renamed.18:13
dpanechsgw: should I add a new repo for centos 7.8? It's not in the vault, so we will have to update that URL at some point.18:13
sgwYes, I think we should add the 7.8 repo18:14
sgwI am headed out for a break and a swim, back later.18:15
sgwI will try tar'ing up /var/lib/jenkins and see what happens!18:16
sgwAll that should be in the git repo though, but I guess scott is behind in pushing those change.18:16
dpanechsgw: it might be very large with log files and everything... I took the .git repo from there and applied uncommitted changes on top18:18
*** cheng1 has quit IRC19:48
*** cheng1 has joined #starlingx19:49
admin0i have used windriver before .. how is stx compared to windriver openstack ?20:02
admin0and is this all open source or it plans to have enterprize editions for the paid ones ?20:02
sgwWindRiver and Intel joined open sourced StarlingX from the Titanium product which will remain open source project.  Companies such as WindRiver are creating products based on the Open Source StarlingX project.  I will let others like ijolliffe or billzvonar speak to that.20:11
*** slittle1 has quit IRC20:40
*** cheng1 has quit IRC20:43
*** cheng1 has joined #starlingx20:44
*** slittle1 has joined #starlingx20:45
sgwslittle1: since your going to off-line tomorrow, is there something that dpanech and I can do to fire off the build if they resolve the merge conflicts?21:05
sgwI am sure I could create branches someplace that we can then point jenkins to, I just know that jenkins UI is unusable for me.21:06
*** billzvonar has quit IRC21:13
*** dpanech has quit IRC23:19
*** cheng1 has quit IRC23:57
*** cheng1 has joined #starlingx23:59

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!