Thursday, 2019-02-14

*** jamesmcarthur has quit IRC00:03
jlkclarkb: corvus: I also got confirmation that the people working on our slack integration (not sure if it's the public one or internal) do the caching method we've talked about00:03
jlkclarkb: corvus: and they'd be interested in the new API too!00:04
corvusjlk: thanks!00:04
*** openstackgerrit has joined #zuul00:09
openstackgerritMerged openstack-infra/zuul master: web: remove build and job_name filter from the buildset route  https://review.openstack.org/63650400:09
*** jamesmcarthur_ has joined #zuul00:10
*** jamesmcarthur_ has quit IRC00:12
*** rlandy is now known as rlandy|bbl00:13
openstackgerritClark Boylan proposed openstack-infra/zuul master: Add Fake Github Review object to test suite  https://review.openstack.org/63678800:15
clarkbcorvus: if ^ works you can just squash that down into the change that has the as_dict problem00:16
*** jamesmcarthur has joined #zuul00:17
*** jamesmcarthur has quit IRC00:19
*** jamesmcarthur has joined #zuul00:20
*** jamesmcarthur has quit IRC00:22
daniel2So I learned that the version of nodepool I have to work with is actually 0.3.0, and I've been given no chance of upgrading it.00:27
daniel2This feels so counter productive.00:27
daniel2When it builds the images, it can't actually login because its not actually setuping up the jenkins user.  That's using the prepare_node_bare.sh script that was installed00:28
*** jamesmcarthur has joined #zuul00:31
*** jamesmcarthur has quit IRC00:33
clarkbdaniel2: you are making snapshot builds then?00:38
daniel2I believe so, nodepool-builder is building an image, uploading it to openstack and then spinning up an instance00:38
clarkbdaniel2: for the initial ssh on a snapshot build nodepool generated a key and set that as metadata on the instance iirc. So you need something like cloud-init to bootstrap that login, then you should be able to run your setup script00:38
daniel2clarkb: Is that key suppose to be inside of nova?00:39
clarkbdaniel2: oh that is the disk image builder workflow in which case disk image builder elements should set up the user00:39
daniel2thats the case00:39
clarkbin that case your image build needs to configure the user iirc00:39
daniel2thats done with the setup script?00:40
clarkbwith diskimage builder it would be done by your disk image builder elements (one of them). setup script impies to me that you are doing a snapshot not diskimagebuilder build though00:41
daniel2https://github.com/a10networks-ci/project-config/tree/master/nodepool This is the nodepool config I'm working with.00:41
clarkbdaniel2: basically there are two ways nodepool can build an image. The newer more modern method is via local diskimage builder process then uploading into the cloud. The older way is to boot an image already in the cloud, run a setup script or whatever in it, then snapshot that00:41
daniel2clarkb: no its building an image using nodepool-builder and dick-image-creator00:42
daniel2disk*00:42
clarkbok, in that case one of the elements listed at https://github.com/a10networks-ci/project-config/blob/master/nodepool/nodepool.yaml#L44-L53 should create the user and set up the key00:43
clarkbnewer nodepool knows how to manage this with metadata and cloud-init/glean, but I don't think that version of nodepool does00:43
daniel2But it isn't.00:43
daniel2Thats the problem.00:43
clarkbit isn't creating the user and setting the authorized key?00:44
daniel2No, it's not.00:44
clarkbok you'll want to modify an element or add an element to do so then00:44
daniel2Apparently this used to work 2 years ago, but now I'm questioning how it ever did.00:45
clarkbI think we have a simple example in the nodepool devstack plugin let me dig that up00:45
openstackgerritMonty Taylor proposed openstack-infra/zuul-preview master: Update gitreview file with correct project name  https://review.openstack.org/63679100:46
openstackgerritMonty Taylor proposed openstack-infra/zuul-preview master: Add perf testing framework  https://review.openstack.org/63679200:46
openstackgerritMonty Taylor proposed openstack-infra/zuul-preview master: Reimplement in Rust  https://review.openstack.org/63679300:46
openstackgerritMonty Taylor proposed openstack-infra/zuul-preview master: Remove C++ version  https://review.openstack.org/63679400:46
openstackgerritMonty Taylor proposed openstack-infra/zuul-preview master: Use rust:slim base image  https://review.openstack.org/63679500:46
openstackgerritMonty Taylor proposed openstack-infra/zuul-preview master: Use slice matching for hostname unpacking  https://review.openstack.org/63679600:46
clarkbdaniel2: https://git.zuul-ci.org/cgit/nodepool/tree/devstack/plugin.sh#n473 we use the devuser element there (built in to disk image builder) then just below that the DIB_DEV_USER... Var sets the key value00:48
*** jamesmcarthur has joined #zuul00:49
mordredSpamapS: ^^ there's your stuff - and a little more - but I'm not really here00:49
daniel2clarkb: yeah but like I said, we are using 0.3.0, which is severally outdated and different.00:49
clarkbdaniel2: this requirement hasn't changed much unti lrecentl when we added support for the metadata based keys00:49
daniel2So you're saying I have to create a new element00:51
*** jamesmcarthur has quit IRC00:51
clarkbor use devuser and set the variable like we do in the plugin00:53
clarkbsomething needs to set the ssh key00:53
daniel2I dont have the devuser element00:53
clarkbit is built into disk image builder00:53
clarkbhttps://git.openstack.org/cgit/openstack/diskimage-builder/tree/diskimage_builder/elements/devuser00:53
openstackgerritClark Boylan proposed openstack-infra/zuul master: Add Fake Github Review object to test suite  https://review.openstack.org/63678800:54
*** ruffian_sheep has joined #zuul01:03
ruffian_sheepHi,zuul01:04
ruffian_sheepAre you here?SpamapS01:05
*** jamesmcarthur has joined #zuul01:12
*** jamesmcarthur has quit IRC01:17
*** jamesmcarthur has joined #zuul01:20
*** jamesmcarthur has quit IRC01:24
SpamapSmordred: :-D01:37
*** bhavikdbavishi has joined #zuul01:38
*** jamesmcarthur has joined #zuul01:40
SpamapSruffian_sheep: unfortunately I am just signing off for the day. Might be back later.01:41
*** jamesmcarthur has quit IRC01:46
*** jamesmcarthur has joined #zuul01:52
*** jamesmcarthur has quit IRC02:00
*** jamesmcarthur has joined #zuul02:15
*** jamesmcarthur has joined #zuul02:16
*** jamesmcarthur has quit IRC02:21
*** jamesmcarthur has joined #zuul02:42
*** jamesmcarthur has quit IRC02:46
*** jamesmcarthur has joined #zuul02:52
*** ruffian_sheep has quit IRC02:55
*** jamesmcarthur has quit IRC03:00
*** jamesmcarthur has joined #zuul03:02
*** rlandy|bbl is now known as rlandy03:10
*** rlandy has quit IRC03:13
daniel2clarkb: thank you for that info, it helped me get past that one issue finally.03:31
*** jamesmcarthur has quit IRC03:33
*** jamesmcarthur has joined #zuul03:54
*** jamesmcarthur has quit IRC03:59
*** jamesmcarthur has joined #zuul04:04
*** jamesmcarthur has quit IRC04:10
*** jamesmcarthur has joined #zuul04:27
*** jamesmcarthur has quit IRC04:31
*** bjackman__ has joined #zuul04:46
*** jamesmcarthur has joined #zuul04:48
*** jamesmcarthur has quit IRC04:52
*** jamesmcarthur has joined #zuul05:09
*** jamesmcarthur has quit IRC05:13
*** jamesmcarthur has joined #zuul05:30
*** saneax has joined #zuul05:30
*** jamesmcarthur has quit IRC05:35
*** jamesmcarthur has joined #zuul05:51
*** jamesmcarthur has quit IRC05:56
*** jamesmcarthur has joined #zuul06:12
*** jamesmcarthur has quit IRC06:17
*** snapiri has joined #zuul06:29
*** ruffian_sheep has joined #zuul06:30
ruffian_sheepSpamapS:Get06:31
ruffian_sheepCan anyone tell me how to solve this problem?zuul-web: zuul-web: error: unrecognized arguments: stop06:33
ruffian_sheepzuul-web: usage: zuul-web [-h] [-c CONFIG] [--version] [-d]06:33
ruffian_sheepI try to restart the zuul-web06:33
*** jamesmcarthur has joined #zuul06:33
*** swest has joined #zuul06:38
*** jamesmcarthur has quit IRC06:38
*** saneax has quit IRC06:38
*** quiquell|off is now known as quiquell|rover06:47
*** jamesmcarthur has joined #zuul06:54
*** jamesmcarthur has quit IRC07:00
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Implement a Runc driver  https://review.openstack.org/53555607:04
*** jamesmcarthur has joined #zuul07:05
*** jamesmcarthur has quit IRC07:09
openstackgerritTobias Henkel proposed openstack-infra/zuul-jobs master: Optionally silence git push in mirror-workspace-git-repos  https://review.openstack.org/63516607:16
*** bhavikdbavishi has quit IRC07:17
openstackgerritTobias Henkel proposed openstack-infra/zuul-jobs master: Optionally silence git in mirror-workspace-git-repos  https://review.openstack.org/63516607:21
openstackgerritTobias Henkel proposed openstack-infra/zuul-jobs master: Optionally silence git in mirror-workspace-git-repos  https://review.openstack.org/63516607:21
*** jamesmcarthur has joined #zuul07:25
*** jamesmcarthur has quit IRC07:30
*** quiquell|rover is now known as quique|rover|brb07:31
*** bjackman__ has quit IRC07:35
quique|rover|brbtobiash: good morning07:35
quique|rover|brbtobiash: one vote to go https://review.openstack.org/#/c/633930/07:36
*** bjackman__ has joined #zuul07:36
*** jamesmcarthur has joined #zuul07:46
*** jamesmcarthur has quit IRC07:51
openstackgerritTobias Henkel proposed openstack-infra/zuul-jobs master: Optionally silence git in mirror-workspace-git-repos  https://review.openstack.org/63516607:52
*** mnasiadka has joined #zuul08:03
tobiashcorvus: not sure if you got an answer regarding that !unsafe tag. quique|rover|brb pointed out in an earlier review comment that this seems to be the correct way in ansible: https://docs.ansible.com/ansible/latest/user_guide/playbooks_advanced_syntax.html#unsafe-or-raw-strings08:04
mnasiadkaHello, does zuul support two changes with cross Depends-On each other (trying to fix failing zuul jobs of two types, don't really want it in one patchset)? Or do I need to include both changes in one Patchset?08:06
*** saneax has joined #zuul08:06
tobiashmnasiadka: no, cyclic dependencies are currently not supported08:07
tobiash(but on the long term roadmap)08:07
*** jamesmcarthur has joined #zuul08:07
*** gtema has joined #zuul08:07
mnasiadkatobiash: so one patchset it is ;)08:08
tobiashquique|rover|brb: +2 from me, but I didn't approve as I saw that corvus had a question about that !unsafe tag08:09
*** jamesmcarthur has quit IRC08:12
*** quique|rover|brb is now known as quiquell|rover08:15
quiquell|rovertobiash: thanks, I will to contact corvus, to see if there are still some issues there08:16
ruffian_sheepCan anyone tell me how to solve this problem?zuul-web: zuul-web: error: unrecognized arguments: stop   zuul-web: usage: zuul-web [-h] [-c CONFIG] [--version] [-d]  .I try to restart the zuul-web08:26
*** jamesmcarthur has joined #zuul08:28
tobiashruffian_sheep: it tells you that 'zuul-web stop' won't work08:28
tobiashruffian_sheep: what are you trying to achieve?08:29
ruffian_sheepI try to build a third party CI for cinder of openstack.Now ,I follow the document:https://zuul-ci.org/docs/zuul/admin/zuul-from-scratch.html.08:30
ruffian_sheepI cannot  restart the zuul-web correctly.08:30
tobiashah you probably found a bug there08:31
ruffian_sheeptobiash:Do you see the document before?08:31
ruffian_sheepI didn't know what's wrong in my steps to do it.08:32
*** jamesmcarthur has quit IRC08:32
tobiashthe 'zuul-web stop' way of stopping the zuul components doesn't seem to work with zuul-web yet08:34
tobiashyou probably need to kill the process for nwo08:34
*** jpena|off is now known as jpena08:38
tobiashcorvus: looks like zuul-web has not command socket yet08:38
ruffian_sheeptobiash:for nwo?what is nwo?08:39
tobiashsnwo/now08:39
tobiashI meant 'now'08:40
tobiashsorry for that typo ;)08:40
*** electrofelix has joined #zuul08:43
ruffian_sheeptobiash:I had try to kill it for serveral times.But all of it failed.08:43
ruffian_sheeptobiash:lol08:43
tobiashthen remove the stop command for now from the zuul-web.service file, stop the service and manually kill the zuul-web process08:44
tobiashthat should hopefully work until we sorted that out08:44
tobiashor reboot ;)08:44
ruffian_sheeptobiash:I have learn som new words last day,including afk from SpamapS and ack from you08:44
ruffian_sheeptobiash:I thought this maybe another new word.08:45
ruffian_sheeptobiash:Sadly,all of the ways you said I had tried in the past08:46
*** jamesmcarthur has joined #zuul08:48
tobiashruffian_sheep: you could also remove the stop command from the service file and add ' -d' to the zuul-web command line. Then systemd should be able to kill it directly08:48
*** jamesmcarthur has quit IRC08:53
*** panda|off is now known as panda09:00
*** jamesmcarthur has joined #zuul09:06
ruffian_sheeptobiash:Sorry, I am not very clear about this operation. Are you saying to delete this?http://paste.openstack.org/show/745076/09:07
tobiashruffian_sheep: yes, remove this line: 'ExecStop=/usr/local/bin/zuul-web stop'09:08
tobiashand change 'ExecStart=/usr/local/bin/zuul-web' to 'ExecStart=/usr/local/bin/zuul-web -d'09:09
tobiashthen reboot and restarting zuul-web should probably work09:09
*** jamesmcarthur has quit IRC09:12
ruffian_sheeptobiash:Get09:12
ruffian_sheeptobiash:while wating for the reboot.Can you tell me what's wrong in this case?paste.openstack.org/show/745055/09:13
ruffian_sheeptobiash:while wating for the reboot.Can you tell me what's wrong in this case?http://paste.openstack.org/show/745055/  (correct ;))09:14
tobiashlooks like it cannot access gerrit09:14
ruffian_sheeptobiash:Is there anything wrong ?http://paste.openstack.org/show/745077/09:24
*** themroc has joined #zuul09:25
tobiashruffian_sheep: I don't see a user configured: https://zuul-ci.org/docs/zuul/admin/drivers/gerrit.html#attr-%3Cgerrit%20connection%3E.user09:25
tobiashand I doubt that you can connect to review.openstack.org as user zuul ;)09:26
ruffian_sheeptobiash:Ohh,I just remove it.I have set the user in the connection gerrit09:27
tobiashthen you should first check that you can access gerrit manually using that user and key09:27
*** jamesmcarthur has joined #zuul09:27
tobiashI also spotted a different error, you name the project 'test' in your main.yaml09:28
tobiashbut that doesn't exist on review.o.o09:28
ruffian_sheepI can see the gerrit event by the cmd ssh -p 29418 myname@review.openstack.org gerrit stream-events09:29
tobiashthen it's the non-existing project09:29
*** jamesmcarthur has quit IRC09:32
openstackgerritBrendan proposed openstack-infra/zuul-jobs master: Use zuul_workspace_root variable for Git workspace prep  https://review.openstack.org/63687009:32
openstackgerritBrendan proposed openstack-infra/zuul-jobs master: Use zuul_workspace_root variable for Git workspace prep  https://review.openstack.org/63687009:34
ruffian_sheeptobiash:Is the project should exist in the gerrit?09:40
tobiashyes, it must exist, otherwise zuul won't be able to work with the project09:40
ruffian_sheeptobiash:Emmm...I will check it later.Now I cat the messages http://paste.openstack.org/show/745078/.It exist time out09:45
ruffian_sheeptobiash:Do you know the reason?09:45
ruffian_sheeptobiash:http://paste.openstack.org/show/745078/    correct09:47
tobiashruffian_sheep: the scheduler probably fails because of this missing repo and the other services cannot connect to the scheduler09:48
*** jamesmcarthur has joined #zuul09:49
ruffian_sheeptobiash:What is missing repo?0.009:52
*** jamesmcarthur has quit IRC09:53
tobiashas we discussed earlyer you reference a non-existing repo on gerrit which prevents zuul-scheduler from startup. The other zuul services need to connect to zuul-scheduler and thus fail to start too.09:54
tobiashrepo == git repository == project on gerrit09:54
ruffian_sheeptobiash:Get09:55
ruffian_sheeptobiash:Let me try to remove the project,just save the name of it.09:55
*** AJaeger has quit IRC10:01
ruffian_sheeptobiash:It's still not working.:http://paste.openstack.org/show/745080/10:02
ruffian_sheeptobiash:I found that the child process of the executor is not listening on port 4730.Is it right?10:03
*** AJaeger has joined #zuul10:04
*** jamesmcarthur has joined #zuul10:10
*** bhavikdbavishi has joined #zuul10:12
*** jamesmcarthur has quit IRC10:15
*** bhavikdbavishi has left #zuul10:17
*** bhavikdbavishi has joined #zuul10:17
*** jamesmcarthur has joined #zuul10:31
*** bhavikdbavishi has quit IRC10:34
*** jamesmcarthur has quit IRC10:36
*** jamesmcarthur has joined #zuul10:52
*** jamesmcarthur has quit IRC10:57
*** jamesmcarthur has joined #zuul11:14
*** jamesmcarthur has quit IRC11:18
*** bjackman__ has quit IRC11:34
*** jamesmcarthur has joined #zuul11:35
*** jamesmcarthur has quit IRC11:40
*** quiquell|rover is now known as quique|rover|r--11:53
*** jamesmcarthur has joined #zuul11:57
*** jpena is now known as jpena|lunch11:58
*** jamesmcarthur has quit IRC12:01
*** jamesmcarthur has joined #zuul12:18
*** jamesmcarthur has quit IRC12:23
*** bjackman__ has joined #zuul12:33
*** ruffian_sheep has quit IRC12:35
*** jamesmcarthur has joined #zuul12:39
*** jamesmcarthur has quit IRC12:44
*** jamesmcarthur has joined #zuul13:01
*** jamesmcarthur has quit IRC13:05
*** gtema has quit IRC13:06
*** themr0c has joined #zuul13:13
*** themroc has quit IRC13:14
*** jamesmcarthur has joined #zuul13:21
*** jamesmcarthur_ has joined #zuul13:22
*** jpena|lunch is now known as jpena13:24
*** jamesmcarthur_ has quit IRC13:29
*** bjackman__ has quit IRC13:39
*** gtema has joined #zuul13:40
*** rlandy has joined #zuul13:41
*** jamesmcarthur has joined #zuul13:49
*** jamesmcarthur has quit IRC13:52
*** jamesmcarthur has joined #zuul13:52
*** quique|rover|r-- is now known as quiquell|rover13:53
*** jamesmcarthur has quit IRC14:01
*** rfolco is now known as rfolco|off14:01
*** jamesmcarthur has joined #zuul14:22
jkttristanC: an update on that zuul-console thing with runc: I'm now seeing quite some non-determinism, these sleeps that I was adding earlier no longer help for some reason14:23
jkttristanC: one thing which might be relevant is that I've restarted the nodepool launcher many, many times, and the launched zuul-console might have been living for longer. Could that be relevant by any chance?14:24
*** jamesmcarthur has quit IRC14:26
tristanCjkt: zuul-console should be a noop if it's already running, i never seen such issue, one of our host has 80d uptime and the ansible_module_zuul_console.py is healthy14:30
tristanCjkt: it's getting late here, i'll have look tomorrow at executor/zuul-stream/zuul-console interaction to see what could be the culpit14:32
tobiashdo we have database (postgres) experts here?14:33
tobiashour build queries that combine tenant, project and pipeline are extremely slow14:33
*** gtema has quit IRC14:34
jkttristanC: thanks for your help, I really appreciate it14:34
*** gcutrini has quit IRC14:40
*** jamesmcarthur has joined #zuul14:43
*** gcutrini has joined #zuul14:46
*** jamesmcarthur has quit IRC14:47
*** nhicher has quit IRC14:48
*** nhicher has joined #zuul14:50
*** electrofelix has quit IRC14:53
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Implement a Runc driver  https://review.openstack.org/53555615:00
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Implement a Runc driver  https://review.openstack.org/53555615:02
tristanCjkt: perhaps it's because of that missing change: https://review.openstack.org/#/c/535556/19..20/nodepool/driver/runc/playbooks/init.yml15:03
*** jamesmcarthur has joined #zuul15:04
tristanCjkt: there needs to be one and only one zuul-console process running per ip, and it needs to use the same path as the job.15:04
tristanCjkt: thus if you apply the last PS, make sure to kill any ansible_module_zuul_console.py left-over process15:04
*** jamesmcarthur has quit IRC15:08
jkttristanC: doing that right now, good catch15:08
jkttristanC: I'll also limit everything to just one runc launcher for now15:08
jkttristanC: it would be nice if the init/cleanup playbooks killed the console process15:09
tristanCjkt: indeed, though i was hoping zuul console stream would have been refactored by then to not use that zuul-console service ;)15:11
tristanCjkt: in anycase, you should have the task output in the job-output.json file, and i think another solution would be to display that instead in the build page15:12
tristanCjkt: though the console websocket stream is another story, but at least you have the data in the artifact15:13
tristanCjkt: one last thought before i leave, the driver could also be improved to setup a new ip for each container, then each would have their own zuul-console15:15
jkttristanC: confirming that the job-output.json is complete15:16
tristanCjkt: at the moment, the driver doesn't setup any netns or virtual ip per container15:16
jkttristanC: one more unrelated point, the console outputs in /tmp are not being removed once the job has finished15:16
jktit's handy for debugging, though :)15:17
jkttristanC: that would work for me just fine (assuming it can generate a random MAC and use SLAAC)15:17
jktI am not that familiar with runc, but I'll take a look15:17
tristanCjkt: runc doesn't do network setup iirc, but we could create the necessary namespace before and make the runc context share the new netns15:19
*** saneax has quit IRC15:24
*** jamesmcarthur has joined #zuul15:24
*** jamesmcarthur has quit IRC15:29
*** gtema has joined #zuul15:34
*** jamesmcarthur has joined #zuul15:45
*** jamesmcarthur has quit IRC15:50
*** jamesmcarthur has joined #zuul15:52
*** jamesmcarthur has quit IRC15:54
*** jamesmcarthur has joined #zuul15:54
*** gtema has quit IRC15:58
*** gtema has joined #zuul16:00
clarkbcorvus: https://review.openstack.org/#/c/636764/1 passes tests. I think the only thing missing (and this is relatively minor) is the removal of empty projects from the cache. Do we want to try to get that in first or should we take this as is and see if it helps?16:10
clarkbcorvus: for the reuse PR object change we keep hitting deeper errors now that the fake is removed. http://logs.openstack.org/88/636788/2/check/tox-py35/6f4c2b3/job-output.txt.gz#_2019-02-14_01_13_52_952926 I'll see if that is a simple fix like the review as_dict one16:16
openstackgerritClark Boylan proposed openstack-infra/zuul master: Add Fake Github Review object to test suite  https://review.openstack.org/63678816:24
clarkbI think that was an actual bug with the change ^ should confirm16:24
*** gcutrini has quit IRC16:28
*** gcutrini has joined #zuul16:31
*** gcutrini has quit IRC16:40
*** gcutrini has joined #zuul16:44
*** gcutrini has quit IRC16:54
*** quiquell|rover is now known as quiquell|off16:57
openstackgerritFabien Boucher proposed openstack-infra/zuul master: URLTrigger driver time based - artifact change jobs triggering driver  https://review.openstack.org/63556717:00
openstackgerritFabien Boucher proposed openstack-infra/zuul master: URLTrigger driver time based - artifact change jobs triggering driver  https://review.openstack.org/63556717:02
*** bjackman__ has joined #zuul17:04
*** ianychoi has joined #zuul17:06
*** gtema has quit IRC17:16
*** themr0c has quit IRC17:30
*** bjackman__ has quit IRC17:47
corvusquiquell|off, tobiash: yes, i saw that the commit message says that !unsafe is correct.  but raw/endraw is also correct.  i wanted to confirm why !unsafe is more correct than raw/endraw.17:52
corvusquiquell|off, tobiash: by deduction from various clues left around, i have concluded that the reason quiquell|off changed from raw/endraw to !unsafe is because raw/endraw can not be easily used to escape a string that itself has "endraw" in it.17:53
corvusquiquell|off, tobiash: is that correct?17:53
tobiashcorvus: with rae/endraw you could have problems if you have that endraw tag in the string if you don't additionally escape it17:53
tobiashso I think that's why ansible has this special tag17:54
tobiashcorvus: yes, this is correct17:55
clarkbcorvus: https://review.openstack.org/#/c/636788/ does pass tests now if you want to squash that into the parent17:58
corvustobiash, quiquell|off: 633930 +3 -- i did leave a comment on it -- we might want to do that in a followup.18:00
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Re-use the github PR object when fetching reviews  https://review.openstack.org/63670518:03
corvusclarkb: done thanks!18:03
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Add comment about extra issues request  https://review.openstack.org/63670618:03
*** jpena is now known as jpena|off18:08
tobiashcorvus: interesting, does this automatically hook itself into the yaml processing?18:09
corvustobiash: yes, we use that in configloader18:10
tobiashah I found and understood the magic :)18:16
clarkbcorvus: thoughts on how to move forward with https://review.openstack.org/#/c/636764/1 ?18:20
corvusclarkb: let's ask tobiash to look at it, and if we all think that's the way to go, figure out how we want to do expiration so it doesn't grow without bound18:21
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Make UnsafeTag self registering  https://review.openstack.org/63702318:21
tobiashcorvus, clarkb: looking18:22
corvustobiash: that change is designed to help reduce the event backlog we noticed 2 days ago18:23
tobiashcorvus: yeah, that was a looong backscroll to read ;)18:23
tobiashcorvus: using the change cache that we already have is no option?18:24
clarkbthe existing cache caches different data18:24
clarkbit caches the post mangled data only for changes in pipelines18:25
corvustobiash: could be, it's not indexed the right way though, it's pr->sha, we need sha->pr18:25
tobiashah ok18:25
clarkbits also only for PRs being tested aiui18:25
corvusand what clarkb says is theoretically true, though, i think at the moment we don't expire it very well.  but still, we shouldn't violate it's documented behavior :)18:25
clarkb(which is good because it keeps it small and active but bad when many other PRs could have status updates)18:25
tobiashdo we expire the change cache at all?18:26
clarkbtobiash: my read of it was that the intent was to expire contents when they are no longer in a pipeline18:27
tobiashI think I remember an issue with maintain cache?18:27
corvushttps://git.openstack.org/cgit/openstack-infra/zuul/tree/zuul/scheduler.py#n87318:27
clarkbfwiw https://docs.python.org/3/library/functools.html#functools.lru_cache might be another option here18:27
clarkbapply that to getPRbySha ?18:27
clarkbit won't warm up as quickly though18:27
tobiashah yeah, so we still don't expire changes18:27
corvusclarkb: we need external invalidation though -- when a pr's sha updates, we need it removed from the cache.18:28
clarkbah18:28
clarkbright a PR can have updatign shas18:28
jlkI know y'all aren't GitHub fans, but this is a feature I'm really excited about: https://github.blog/2019-02-14-introducing-draft-pull-requests/18:28
clarkbjlk: I like that that makes it clear the drafts aren't intend to be secret18:29
jlkyeah18:29
clarkb(this was Gerrit's problem with drafts they were this weird semi secret state that created lots of confusion)18:29
jlkit delays triggering CI stuff too, and required reviews18:29
jlkuntil the submitter is ready18:29
corvusclarkb: well, gerrit added real WIP a while ago18:29
corvuswe just haven't upgraded18:29
clarkbya18:29
tobiashjlk: cool, and, I know you won't tell me, but when will this be available in ghe? ;)18:30
clarkbcorvus: though i think draft still exists?18:30
SpamapSjlk: hah cool. I have a label called 'do-not-merge' that prevents things from entering gate. We can retire that ;)18:30
jlkyup!18:30
clarkbtobiash: corvus if we don't invalidate the other cache maybe its ok to not really expire things from this cache?18:30
corvusclarkb: it gets cleared periodically due to reconfigurations18:31
jlkwait I'm not sure it'll delay CI trigger. I could be wrong on that18:31
clarkbcorvus: ah18:31
openstackgerritMerged openstack-infra/zuul master: Mark as unsafe commit message at inventory  https://review.openstack.org/63393018:32
clarkbcorvus: tobiash what if we did a naive thing and set the per project cache size limit to say 4k entries18:33
* clarkb does some napkin math for how big that would be for openstack assuming its gerrit was a github18:33
corvusclarkb: when we hit the limit, what do we expire?18:33
tobiashI guess we can at least remove the sha's of merged prs?18:33
corvusdo we want to make it an lru?  if so, i think the limit can be much smaller18:34
corvustobiash: we do that18:34
clarkb~200MB napkin math for that size of catch. Ya I was thinking lru18:34
corvustobiash, clarkb: maybe removing closed prs makes it okay to have no limit?18:34
tobiashprobably18:34
* corvus imagines clarkb reeling in a 200MB fish18:34
clarkbcorvus: oh thats a good point, it will only be open PRs that have seen activity while zuul is running18:35
tobiashthe changes we don't clean are probably larger ;)18:35
clarkbconsidering that ansible is ~1.7k open changes thats smaller than my guestimated cache math above and there is only one of those projects currently. I think if tobiash thinks it is safe for his zuul it is probably safe for all zuuls18:37
corvusat least safe enough for the forseeable future, and easy enough to improve later if needed.18:37
tobiashlol18:37
jlkfwiw, having not read the backlog, I think it would be safe to expire a cache entry for any PR that moves to closed, and update the cache when a push event or a reopen event happens (which would change the head18:39
clarkbjlk: I think the existing code already does that? basically it says if the state is open then add to cache otherwise remove it18:41
openstackgerritFabien Boucher proposed openstack-infra/zuul master: URLTrigger driver time based - artifact change jobs triggering driver  https://review.openstack.org/63556718:42
tobiashclarkb, corvus: I think that cache implementation is good as is for now18:42
clarkbso ya this may be ready as is18:42
corvusok, i will verify it's being tested and cleanup18:42
tobiashand my napkin math tells estimates a worst case of around 100mb for us18:42
tobiashtyping is hard...18:42
tobiashI think a cleanup of the change cache is probably more important in the medium term18:43
corvustests.unit.test_github_requirements.TestGithubRequirements.test_trigger_on_status  tests this code path already.18:44
jlkokay just got confirmation. PR webhooks are growing a 'draft' status, as is the GET on pull requests via the REST API.18:44
jlkso, zuul will have to decide how it wants to react to draft PRs18:44
jlk..... which could be a project by project decision (lots o work) or a blanket decision.18:45
corvusif we follow what we do with gerrit in openstack, we'd treat them as 'open'18:45
jlknod18:45
jlkthey're unable to be merged though, so couldn't go to gate.18:45
corvusoh, i guess these could be pipeline requirements18:45
corvusso probably people can decide already :)18:45
tobiashyes18:46
tobiashjlk: is it possible to switch a pr back to draft?18:47
jlkI don't know18:47
corvusi think we have a couple of 'open' literals that we'll need to change to ['open', 'draft']18:47
*** sshnaidm is now known as sshnaidm|off18:47
jlkcorvus: so..18:47
tobiashand does the hub tool support it?18:47
tobiashI almost never create a pr via the ui18:47
tobiash;)18:47
jlkcorvus: I think the PR state will be `open` even if it's draft. The draft status would be a new key in the json18:47
jlktobiash: there's an open PR to add it to hub18:47
corvusjlk: ok, i like that18:47
tobiashah cool18:47
jlkcorvus: adding an additional PR state would be pretty disruptive18:48
jlkhttps://github.com/github/hub/issues/203818:48
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Cache github PR shas  https://review.openstack.org/63676418:51
corvustobiash, clarkb: ^ i'm satisfied that's tested by existing tests.  we might want to add more explicit unit testing though.  i could go either way.18:52
clarkbI'm happy with it being exercised by existing tests18:52
tobiashcorvus: posted an idea ^18:56
tobiashwhat do you think?18:56
clarkbtobiash: ya I left a similar note on my original change18:57
clarkbI think that would be a good improvement but not necessary to start seeing if this helps18:57
corvustobiash: oh, wow, how did i miss that19:00
corvustobiash: i think that's a swell idea -- i think it's simple enough we can get it in now19:00
corvusclarkb: i think it will make a big difference for us and we should include it in the first round of testing19:00
clarkbok I'm happy to implement it too19:01
tobiash:)19:01
clarkbI had just left it out of my original change too because it potentially introduced more complexity, but I definitely thin kit is something we want19:01
corvusi have to afk for 30m now, so if you have time to write that... :)19:01
* clarkb takes a look19:03
*** jamesmcarthur has quit IRC19:03
clarkbtobiash: corvus I think there may be a small bug in the existing code too. in getPullBySha we use 'project' as the project_name but I think we really want owner/project?19:09
clarkboh wait I see it nevermind19:09
clarkbthat chagne ahppens after the existing code uses it19:09
jlkre draft PRs, https://github.com/sigmavirus24/github3.py/issues/92619:10
jlkgottta get it in github3.py before seeing it in zuul19:10
openstackgerritClark Boylan proposed openstack-infra/zuul master: Cache github PR shas  https://review.openstack.org/63676419:13
clarkbtobiash: corvus ^ something like that maybe19:13
*** jamesmcarthur has joined #zuul19:18
*** jamesmcarthur has quit IRC19:21
tobiashclarkb: despite some naming confusion between project_name and project in getPullBySha lgtm19:22
clarkbtobiash: ya that is what I was reasoning about before in IRC. we rename project to mean the project suffix in that method19:23
tobiashclarkb: I think we should clean that up (maybe as a followup)19:23
tobiashthe function argument should be project_name as functions that take 'project' mostly take a project object in zuul19:24
clarkbthat would read a lot better I think19:24
tobiashso changing this will make it clear and avoid confusion about that19:25
*** jamesmcarthur has joined #zuul19:30
corvusclarkb, tobiash: +319:37
*** jamesmcarthur has quit IRC19:41
*** jamesmcarthur has joined #zuul19:41
*** rlandy is now known as rlandy|afk19:47
openstackgerritJames E. Blair proposed openstack-infra/zuul-preview master: Update gitreview file with correct project name  https://review.openstack.org/63679119:54
corvusi'm going to self-approve that as being trivial and necessary19:55
openstackgerritJames E. Blair proposed openstack-infra/zuul-preview master: Update gitreview file with correct project name  https://review.openstack.org/63679119:55
openstackgerritMerged openstack-infra/zuul-preview master: Update gitreview file with correct project name  https://review.openstack.org/63679119:56
openstackgerritJames E. Blair proposed openstack-infra/zuul-preview master: WIP: test docker registry  https://review.openstack.org/63703720:02
*** jamesmcarthur has quit IRC20:19
*** jamesmcarthur has joined #zuul20:21
openstackgerritJames E. Blair proposed openstack-infra/zuul-preview master: WIP: test docker registry  https://review.openstack.org/63703720:23
*** jamesmcarthur has quit IRC20:24
corvusinfra-root: \o/ http://38.108.68.64/ is running 1.6.3 -- our automatic upgrade driven by git and ansible worked!20:24
corvusthat was changes https://review.openstack.org/629942 and https://review.openstack.org/63501620:25
*** jamesmcarthur has joined #zuul20:25
corvusnow, on to 1.7.120:26
fungiooh!20:27
clarkbyay20:33
corvusoh, sorry that was the wrong channel20:47
corvustobiash, fungi, quiquell|off: i'll note that by using !unsafe, we have made the ansible inventory file slightly more difficult to load in some yaml parsers.  if we find that problematic we could consider base64 encoding the commit message.20:52
corvus(ansible has built-in b64decode jinja filters, so that's still easy to work with)20:53
fungithat seems like a reasonable alternative20:53
tobiashcorvus: do you have a use case in mind where this is problematic?20:54
corvustobiash: anything that involves post-processing inventory files from jobs (maybe someone wants to analyze runs).  also perhaps javascript on the build page.20:56
corvusnothing concrete20:57
tobiashhrm, I think we should decide this soon as the commit message is pretty new atm20:58
tobiashChanging this later could break many jobs20:58
corvusyep20:59
tobiashSo better safe than sorry and change to base64?20:59
corvusi'd like more input20:59
tobiashSure21:00
corvusmaybe worth asking on the mailing list?21:00
tobiashI think so21:00
openstackgerritJames E. Blair proposed openstack-infra/zuul-jobs master: Enable logging on registry/push/pull jobs  https://review.openstack.org/63704921:01
corvusclarkb, tobiash: ^ those roles, unsurprisingly, didn't work.  i'd like to enable logging there, even though it may expose the credential for our intermediate registry.  i'll just change the password after we figure out the problem.21:02
clarkbok21:04
*** jamesmcarthur has quit IRC21:19
*** jamesmcarthur has joined #zuul21:27
*** calebb has joined #zuul21:27
*** jamesmcarthur has quit IRC21:31
pabelangerHmm21:33
pabelangerException: Project key directory /var/lib/zuul/keys must be mode 0700; current mode is 77021:33
pabelangerany reason we cannot support 0770?21:33
-openstackstatus- NOTICE: Jobs are failing due to ssh host key mismatches caused by duplicate IPs in a test cloud region. We are disabling the region and will let you know when jobs can be rechecked.21:33
clarkbpabelanger: those keys are pretty important21:33
pabelangerclarkb: yah, agreed. I have a backup user, that is part of zuul group, which I was hoping could read them.21:34
pabelangercurrently /var/lib/zuul is zuul:zuul21:34
pabelangerand backup user is backup:zuul21:34
pabelangerbut, zuul won't start now21:35
fungipabelanger: i think 0770 ought to be fine with appropriate precautions. we could also consider setting a safe umask for the keys21:36
fungialso you likely need setgid for that scenario?21:37
clarkbya and maybe documentation on the dangers21:37
fungibut main concern is if you chgrp the files to, say, www-data and that tree is somehow accessible from a misconfigured apache docroot... that sort of thing21:38
pabelangeryah21:39
fungialso possible that paramiko may freak out on us even if zuul decides its okay?21:42
*** jamesmcarthur has joined #zuul22:00
*** jamesmcarthur has quit IRC22:08
openstackgerritMerged openstack-infra/zuul-jobs master: Enable logging on registry/push/pull jobs  https://review.openstack.org/63704922:08
*** rlandy|afk is now known as rlandy22:09
*** jamesmcarthur has joined #zuul22:14
-openstackstatus- NOTICE: The test cloud region using duplicate IPs has been removed from nodepool. Jobs can be rechecked now.22:15
*** jamesmcarthur has quit IRC22:18
*** jamesmcarthur has joined #zuul22:18
openstackgerritMerged openstack-infra/zuul master: Cache github PR shas  https://review.openstack.org/63676422:42
fungii have a few spare minutes before i have to jump on a conference call. what was the current state of the github pr cache changes? happy to review some22:46
clarkbfungi: line above yours, change just merged22:47
clarkbfungi: now up to us to install it and restart scheduler with it22:47
fungioh, hah22:47
fungii should have looked closer. today has been a blur22:47
*** jamesmcarthur has quit IRC22:51
openstackgerritJames E. Blair proposed openstack-infra/zuul-jobs master: Fix pull-from-intermediate-registry artifacts error  https://review.openstack.org/63707223:01
*** jamesmcarthur has joined #zuul23:01
openstackgerritJames E. Blair proposed openstack-infra/zuul-jobs master: Fix undefined attrs in registry push/pull roles  https://review.openstack.org/63707223:03
corvusclarkb, fungi: ^ can you +3 that pls?23:04
*** jamesmcarthur has quit IRC23:05
*** jamesmcarthur has joined #zuul23:06
*** cognifloyd has joined #zuul23:10
cognifloydHas anyone worked on a Bitbucket driver for zuul? I couldn't find anything in storyboard about it.23:10
cognifloydGeneric git can trigger, but it doesn't have the reporter + requirements integrations that github or gerrit has.23:11
openstackgerritJan Kundrát proposed openstack-infra/nodepool master: Implement a Runc driver  https://review.openstack.org/53555623:12
clarkbcognifloyd: there has been interest expressed, but I don't think anyone has gotten as far as code23:14
*** rlandy is now known as rlandy|bbl23:44

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!