| *** maxamillion has quit IRC | 00:06 | |
| *** maxamillion has joined #zuul | 00:06 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/nodepool master: Consolidate status results https://review.openstack.org/548134 | 00:15 |
|---|---|---|
| openstackgerrit | Ian Wienand proposed openstack-infra/nodepool master: Consolidate node_list, add generic filter https://review.openstack.org/548135 | 00:15 |
| openstackgerrit | Ian Wienand proposed openstack-infra/nodepool master: webapp: use content detection for return https://review.openstack.org/548440 | 00:15 |
| openstackgerrit | Ian Wienand proposed openstack-infra/nodepool master: Add label-list webapp endpoint https://review.openstack.org/548442 | 00:15 |
| *** xinliang has joined #zuul | 01:08 | |
| *** xinliang has quit IRC | 01:08 | |
| *** xinliang has joined #zuul | 01:08 | |
| *** Guest20946 is now known as mgagne | 01:10 | |
| *** mgagne has joined #zuul | 01:10 | |
| fungi | corvus: tobiash: fyi, this is what the pyca/cryptography docs have to say about cryptographically strong (pseudo-)random number generation: https://github.com/pyca/cryptography/blob/master/docs/random-numbers.rst | 01:16 |
| fungi | tl;dr: "just use os.urandom()" | 01:16 |
| fungi | oh, nevermind... now i remember that we need to be able to seed a deterministic prng | 01:22 |
| fungi | we can probably just feed a secret plus a known salt (the repo name?) into a kdf, but i'll do some more digging | 01:24 |
| fungi | finding some confirmation that using a block cipher to encrypt a known value (the repo name?) should provide a new key equally as strong as the master key you used for the cipher | 01:33 |
| *** rlandy|bbl is now known as rlandy | 01:53 | |
| *** harlowja has quit IRC | 02:45 | |
| *** harlowja has joined #zuul | 04:02 | |
| *** harlowja has quit IRC | 04:18 | |
| *** AJaeger has quit IRC | 04:51 | |
| *** AJaeger has joined #zuul | 04:51 | |
| *** openstackstatus has quit IRC | 06:13 | |
| *** openstack has joined #zuul | 06:17 | |
| *** ChanServ sets mode: +o openstack | 06:17 | |
| *** hashar has joined #zuul | 07:53 | |
| *** sshnaidm|ptg has quit IRC | 08:23 | |
| *** bhavik has joined #zuul | 08:52 | |
| *** yolanda has quit IRC | 08:54 | |
| clarkb | tobiash: https://webcache.googleusercontent.com/search?q=cache:mMZ147hMZ_YJ:https://cryptography.io/+&cd=2&hl=en&ct=clnk&gl=ie google found a cached version of the docs | 09:07 |
| clarkb | ptg attendees you will need your badges this morning | 09:08 |
| *** sshnaidm|ptg has joined #zuul | 09:08 | |
| *** electrofelix has joined #zuul | 09:19 | |
| rbergeron | clarkb: ah, good to know | 09:23 |
| rbergeron | though also, may just be staying at hotel i am thinking -- not sure what corvus or mordred decided on that front | 09:24 |
| *** yolanda has joined #zuul | 09:24 | |
| clarkb | rbergeron: I have not heard from either of them | 09:26 |
| clarkb | weather forecasting is saying your ability to get "home" will be worse than your ability to get here | 09:27 |
| rbergeron | yeah, precisely | 09:36 |
| rbergeron | it looks deceiving currently but being stuck sucks | 09:37 |
| rbergeron | clarkb: and at this point coming over for two hours seems silly | 09:37 |
| rbergeron | if having to ditch out later | 09:38 |
| *** bhavik has quit IRC | 09:41 | |
| openstackgerrit | Dirk Mueller proposed openstack-infra/zuul-jobs master: DNM: Set fail_mode to standalone for multi-node-bridge https://review.openstack.org/547779 | 09:43 |
| *** jpena|off is now known as jpena | 09:44 | |
| *** patriciadomin has quit IRC | 10:04 | |
| jlk | tristanC: no release yet. | 10:18 |
| openstackgerrit | Andrea Frittoli proposed openstack-infra/zuul-jobs master: Add known hosts for all users https://review.openstack.org/548642 | 10:22 |
| mordred | clarkb, rbergeron: I'm still at the hotel | 10:23 |
| mordred | clarkb, rbergeron: also - I got a bit too clever in booking travel to and from here - and my leg from DUB-AMS is not connected to the AMS-MSP-DFW legs - so if I don't escape the island not only will I be snowed in (the fun part) I will no longer have a transatlantic flight home | 10:25 |
| openstackgerrit | Dirk Mueller proposed openstack-infra/zuul-jobs master: DNM: Set fail_mode to standalone for multi-node-bridge https://review.openstack.org/547779 | 10:27 |
| mordred | clarkb, rbergeron: so my plan is to fly out in a couple of hours (SAS is still flying) and be remote as best I can tomorrow from the mainland | 10:27 |
| AJaeger | tobiash: could you review https://review.openstack.org/548406, please? - that's needed to remove process-test-results | 10:37 |
| tobiash | AJaeger: yes, in a few minutes | 10:39 |
| clarkb | mordred: sound slike you need a travel agent | 10:39 |
| mordred | clarkb: yah. tell me about it | 10:40 |
| rbergeron | mordred: what time is your flight? i was looking for things and some airlines were cancelling for after 3pm today.. sadly my flight is through lhr and thus is screwed anyhow if i.could get out of here now | 10:41 |
| mordred | rbergeron: I got booked on to a 12:45 flight - so I'm about to head to the airport - and yeah, it's a flight to amsterdam by way of stockholm (thank god for swedes and their experience with flying and blizzards) | 10:42 |
| rbergeron | lol | 10:42 |
| rbergeron | oh - beep when leaving for hugs. also, its taking them forever to get taxis downstairs, fyi | 10:43 |
| openstackgerrit | Andreas Jaeger proposed openstack-infra/zuul-jobs master: Replace sphinx_check_warning_is_error.py with ini lookup https://review.openstack.org/528812 | 10:45 |
| AJaeger | mordred: safe travels! | 10:45 |
| openstackgerrit | Dirk Mueller proposed openstack-infra/zuul-jobs master: DNM: Set fail_mode to standalone for multi-node-bridge https://review.openstack.org/547779 | 10:49 |
| tobiash | AJaeger: +3 | 10:51 |
| *** yolanda has quit IRC | 10:51 | |
| AJaeger | thanks | 10:52 |
| corvus | i'm at croke park | 10:54 |
| openstackgerrit | Andrea Frittoli proposed openstack-infra/zuul-jobs master: DNM Test change https://review.openstack.org/548911 | 10:57 |
| openstackgerrit | Merged openstack-infra/zuul-jobs master: Fix lookup of subunit files in fetch-subunit-output https://review.openstack.org/548406 | 11:03 |
| rbergeron | corvus: you are brave :) just keep an eye out outside for if it gets ugly! | 11:10 |
| AJaeger | mordred: was my last change to your https://review.openstack.org/#/c/548871/ wrong? Is the extra }} needed? I'm puzzled that it worked before but not anymore. | 11:11 |
| *** yolanda has joined #zuul | 11:12 | |
| corvus | tristanC: are you around now? maybe we can talk about the dashboard in the next few mins? | 11:13 |
| tristanC | corvus: good morning, i'm here now | 11:33 |
| corvus | cool... | 11:33 |
| corvus | how about i start a bluejeans session | 11:34 |
| tristanC | sure, i can join | 11:35 |
| corvus | https://bluejeans.com/4753634019 | 11:35 |
| corvus | anyone feel free to join that | 11:35 |
| corvus | tristanC: ^ | 11:35 |
| tristanC | corvus: the sound is quite saturated | 11:37 |
| tristanC | corvus: actually can't here what you say... :) | 11:39 |
| corvus | https://imgur.com/a/5etfM | 11:49 |
| Shrews | corvus: morning. i am present. trying to wake up enough to find a voice | 11:53 |
| * Shrews makes some coffee | 11:53 | |
| *** sshnaidm|ptg has quit IRC | 12:00 | |
| *** yolanda has quit IRC | 12:01 | |
| corvus | http://git.openstack.org/cgit/openstack/gertty/tree/gertty/search/parser.py | 12:03 |
| corvus | http://git.openstack.org/cgit/openstack/gertty/tree/gertty/search/tokenizer.py | 12:03 |
| clarkb | PTG attendees should read their email again. The PTG has to be out of the stadium by 2pm. More info at lunch. We will also not be back tomorrow but they are working to set up space for us at the croke park hotel | 12:10 |
| clarkb | I will likely not be headed back to the infra room after lunch and instead move to the hotel to see what our options are | 12:10 |
| corvus | tristanC: let's call this done, i think we need to head to lunch then leave now... | 12:15 |
| corvus | tristanC, Shrews: i think we'll need to talk about retries some other time | 12:15 |
| Shrews | corvus: ack | 12:15 |
| tristanC | corvus: alright, thanks for having me! | 12:15 |
| tristanC | have a safe trip ptg folks | 12:17 |
| *** jpena is now known as jpena|off | 12:21 | |
| *** yolanda has joined #zuul | 12:32 | |
| *** Jesserd has quit IRC | 12:43 | |
| *** xinliang has quit IRC | 13:14 | |
| *** xinliang has joined #zuul | 13:15 | |
| *** sshnaidm|ptg has joined #zuul | 13:17 | |
| *** jpena|off is now known as jpena | 13:53 | |
| *** dkranz has joined #zuul | 14:44 | |
| openstackgerrit | Dirk Mueller proposed openstack-infra/zuul-jobs master: Avoid stateful ssh connection tracking for Kernel 4.15 https://review.openstack.org/548967 | 15:04 |
| *** haint_ has joined #zuul | 15:36 | |
| *** haint has quit IRC | 15:39 | |
| *** jpena is now known as jpena|off | 15:46 | |
| *** sshnaidm|ptg has quit IRC | 15:51 | |
| *** sshnaidm|ptg has joined #zuul | 15:52 | |
| kklimonda | hmm, I can't get Depends-On to work between project A and project B that has changes to CI code (jobs, roles, playbooks). I'm not sure if that's supposed to be working, and I'm missing something (probably a patch) or is that just not supported | 16:15 |
| dmsimard | kklimonda: can you link the reviews in question ? | 16:16 |
| kklimonda | dmsimard: it's a separate zuul installation, but I can give you links | 16:16 |
| kklimonda | (it's all public) | 16:16 |
| dmsimard | kklimonda: sure, just curious to see if there's anything standing out | 16:18 |
| kklimonda | https://review.opencontrail.org/#/c/40198/ - that's a review I've used, it depends-on a change that modifies role used by it | 16:18 |
| kklimonda | one of the jobs is still running but the one I'm interested in has finished and I can see that the old code was used (http://logs.opencontrail.org/98/40198/1/check/contrail-vnc-build-package-centos74/ae50ed2/ara/) | 16:19 |
| *** haint_ has quit IRC | 16:21 | |
| dmsimard | kklimonda: where is the main zuul config located ? | 16:21 |
| kklimonda | https://github.com/Juniper/contrail-project-config | 16:22 |
| kklimonda | the job itself is here: https://github.com/Juniper/contrail-zuul-jobs/blob/master/zuul.d/contrail-jobs.yaml and its parent is still in our project-config due to secrets usage: https://github.com/Juniper/contrail-project-config/blob/master/zuul.d/jobs.yaml#L164 | 16:26 |
| dmsimard | kklimonda: hmm, in OpenStack's implementation we log a folder called zuul-info with different files for information purposes, ex: http://logs.openstack.org/46/548046/1/check/openstack-zuul-jobs-linters/bdd2852/zuul-info/ | 16:26 |
| dmsimard | kklimonda: the inventory file is particularly interesting because it shows the data the job ran with: http://logs.openstack.org/46/548046/1/check/openstack-zuul-jobs-linters/bdd2852/zuul-info/inventory.yaml | 16:27 |
| kklimonda | http://logs.opencontrail.org/98/40198/1/check/contrail-vnc-build-package-centos74/ae50ed2/zuul-info/ | 16:27 |
| dmsimard | kklimonda: ah, the windows job on the review you linked doesn't have those | 16:27 |
| kklimonda | yeah, it's running old zuul | 16:28 |
| dmsimard | that explains a lot :D | 16:28 |
| dmsimard | The zuul jobs review seems to have been taken into account if you look at the inventory file: http://paste.openstack.org/show/688756/ | 16:29 |
| dmsimard | kklimonda: (unrelated bit: your version of ara is slightly out of date, it's missing a bugfix released to make permanent links work in firefox) | 16:33 |
| kklimonda | dmsimard: yes, upgrade of zuul and ara is on my plate - soon :D | 16:34 |
| dmsimard | so you're right, it doesn't seem like it ran with the updated version http://logs.opencontrail.org/98/40198/1/check/contrail-vnc-build-package-centos74/ae50ed2/ara/file/02670968-e33a-4e54-aa70-8d88e8387839/#line-21 | 16:34 |
| corvus | is contrail-zuul-jobs a trusted repo? | 16:36 |
| corvus | ie, is it a config-repo? | 16:36 |
| dmsimard | corvus: that's the first thing I checked -- no | 16:36 |
| dmsimard | corvus: https://github.com/Juniper/contrail-project-config/blob/master/zuul/main.yaml | 16:36 |
| corvus | is the playbook using that role in a config-repo? | 16:37 |
| kklimonda | corvus: the playbook is still in config-repo, the role is in contrail-zuul-jobs | 16:37 |
| corvus | kklimonda, dmsimard: that's likely it then -- playbooks in config repos run in the trusted context, which means they don't get speculative versions of roles they use | 16:38 |
| kklimonda | actually, the playbook is in both repos but I'm assuming zuul is picking the one from project-config | 16:38 |
| corvus | kklimonda: it uses playbooks from the repo where the job is defined | 16:39 |
| kklimonda | https://github.com/Juniper/contrail-zuul-jobs/blob/master/zuul.d/contrail-jobs.yaml - the job is defined here and the playbook is here https://github.com/Juniper/contrail-zuul-jobs/blob/master/playbooks/packaging/contrail-vnc-el.yaml | 16:40 |
| corvus | (the reason for this is so that someone can't propose a change to a role used by trusted job to trick it into exposing credentials) | 16:40 |
| kklimonda | yeah, that makes sense - it's possible that the job is still pulling playbook from project-config due to its parent being still defined in config-repo: https://github.com/Juniper/contrail-project-config/blob/master/zuul.d/jobs.yaml | 16:41 |
| corvus | kklimonda: this is all on a per-playbook basis; so a playbook that comes from a job in an untrusted-project will use speculative roles, but if it inherits a pre-playbook from a parent defined in a config-project, that pre-playbook won't get speculative roles. | 16:43 |
| kklimonda | what if both parent and the job define same run playbook? | 16:43 |
| corvus | kklimonda: only the child is used | 16:44 |
| corvus | kklimonda, dmsimard: the role/playbook paths that show up in the logs can help here... note in the link from dmsimard: | 16:49 |
| corvus | File: /var/lib/zuul/builds/ae50ed2fc7db469483eaefd3ca40eeef/trusted/project_2/review.opencontrail.org/Juniper/contrail-zuul-jobs/roles/packaging-build-el/tasks/main.yaml | 16:49 |
| corvus | the 'trusted' in that path is a giveaway (the alternative would be /work/ if it were untrusted) | 16:49 |
| corvus | or in the text log: | 16:50 |
| corvus | 2018-03-01 11:32:07.126197 | PRE-RUN START: [trusted : review.opencontrail.org/Juniper/contrail-project-config/playbooks/contrail/vnc-pre@master] | 16:50 |
| corvus | 2018-03-01 11:33:48.852656 | RUN START: [trusted : review.opencontrail.org/Juniper/contrail-project-config/playbooks/packaging/contrail-vnc-el@master] | 16:51 |
| corvus | in fact, it looks like every playbook in that job is trusted | 16:51 |
| kklimonda | mmm, thanks - I'll remove code from config-project and see how it behaves then. never noticed that "trusted" part of the logs | 16:52 |
| *** myoung|ruck is now known as myoung|ruck|food | 16:55 | |
| tobiash | clarkb: that should work now: https://review.openstack.org/#/c/548958/4 | 17:07 |
| tobiash | ups, wrong channel | 17:08 |
| SpamapS | so | 17:09 |
| SpamapS | enjoying .ie ? ;) | 17:09 |
| tobiash | yeah, being stuck till sunday is fun ;) | 17:10 |
| SpamapS | plenty of whiskey to keep you warm I suppose | 17:12 |
| *** patriciadomin has joined #zuul | 17:22 | |
| SpamapS | corvus: forgive me for asking again.. what's the thing you made to do rebases on git reviews without pulling in all of the origin branch changes? | 17:31 |
| *** sdoran has joined #zuul | 17:42 | |
| tobiash | SpamapS: you mean do the rebase and then change your change? | 17:44 |
| clarkb | SpamapS: gut restack iirc | 17:44 |
| SpamapS | if you want to edit a stack of patches, without rebasing on master, there's a tool that will find your original base commit and rebase -i on that. | 17:45 |
| clarkb | er git restack | 17:45 |
| SpamapS | restack | 17:45 |
| SpamapS | how do I get that? | 17:45 |
| clarkb | pypi I think | 17:45 |
| *** hashar has quit IRC | 17:45 | |
| rcarrillocruz | hey folks, been pinged by sdoran about https://github.com/ansible/ansible/pull/19113#issuecomment-369648881 | 17:45 |
| rcarrillocruz | it seems the job ran after recheck | 17:45 |
| rcarrillocruz | but bot never put that result back into the PR | 17:46 |
| rcarrillocruz | unsure why | 17:46 |
| rcarrillocruz | also, the status not pointing to the job result but rather zuul.opensatck.org , is that being worked on by somebody? gerrit change for it? | 17:46 |
| tobiash | rcarrillocruz: the status currently cannot point to the job because the status is for the buildset | 17:49 |
| tobiash | that's why zuul outputs the build result into a comment | 17:49 |
| rcarrillocruz | k, i vaguely remember that being a limitation | 17:49 |
| rcarrillocruz | which is why i enabled bot comments on my test zuul months back | 17:50 |
| rcarrillocruz | ok, any clue why the bot has not commented, despite the job had completed ? | 17:50 |
| tobiash | but with improvements on the builds dashboard we might be able to use that in the future | 17:50 |
| tobiash | infra-root: anybody there who can get the according logs for ^? | 17:51 |
| tobiash | I guess there probably was some exception when reporting | 17:52 |
| tobiash | I had various of these in my deployment | 17:52 |
| rcarrillocruz | oh, ok, then i'll follow up with tristanC , thx tobiash | 17:52 |
| tobiash | but In think most of my github related changed landed in the few weeks | 17:54 |
| *** myoung|ruck|food is now known as myoung|ruck | 17:59 | |
| electrofelix | mordred: doing some work today on an initial plugin for jenkins to allow it to be used by zuulv3, some thoughts/questions are bubbling up | 18:26 |
| electrofelix | mordred: want to plan a bluejeans/skype/etc chat on it next week (assuming you got your flight out today based on earlier comments?) | 18:27 |
| openstackgerrit | Dirk Mueller proposed openstack-infra/zuul-jobs master: Avoid stateful ssh connection tracking for Kernel 4.15 https://review.openstack.org/548967 | 19:14 |
| openstackgerrit | Dirk Mueller proposed openstack-infra/zuul-jobs master: Avoid stateful ssh connection tracking for Kernel 4.15 https://review.openstack.org/548967 | 19:36 |
| *** electrofelix has quit IRC | 19:59 | |
| openstackgerrit | Merged openstack-infra/zuul-jobs master: Remove process-test-results https://review.openstack.org/548395 | 20:16 |
| *** harlowja has joined #zuul | 20:27 | |
| *** sivel has joined #zuul | 21:32 | |
| *** sivel has left #zuul | 21:33 | |
| *** dkranz has quit IRC | 21:58 | |
| tobiash | tristanC: I added a comment on https://review.openstack.org/#/c/535560/ | 22:08 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul master: Update to Ansible 2.4 https://review.openstack.org/535781 | 22:21 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul master: Disable action and lookup plugins from 2.4 https://review.openstack.org/535839 | 22:22 |
| *** yolanda has quit IRC | 23:06 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!