Thursday, 2020-07-09

*** harrymichal has quit IRC00:08
*** harrymichal has joined #zuul00:08
*** hamalq has quit IRC00:09
*** rfolco has quit IRC00:26
*** wuchunyang has joined #zuul00:33
*** wuchunyang has quit IRC00:38
corvustristanC: haha :) that's not me -- i open so many emacs sessions i'm constantly stealing locks from myself :)00:42
*** gouthamr_ has quit IRC00:59
*** gouthamr_ has joined #zuul01:05
*** Goneri has quit IRC01:18
*** gouthamr_ has quit IRC01:25
*** gouthamr_ has joined #zuul01:37
*** swest has quit IRC01:48
*** rlandy|bbl is now known as rlandy01:49
*** swest has joined #zuul02:02
*** rlandy has quit IRC02:04
mnaserhmm02:49
*** gouthamr_ has quit IRC02:52
*** bhavikdbavishi has joined #zuul02:54
*** gouthamr_ has joined #zuul02:56
*** bhavikdbavishi1 has joined #zuul03:01
*** bhavikdbavishi has quit IRC03:03
*** bhavikdbavishi1 is now known as bhavikdbavishi03:03
*** wuchunyang has joined #zuul03:18
*** gouthamr_ has quit IRC03:26
*** gouthamr_ has joined #zuul03:32
*** saneax has joined #zuul03:35
*** saneax has quit IRC03:40
*** saneax has joined #zuul03:41
*** bhavikdbavishi has quit IRC03:52
*** bhavikdbavishi has joined #zuul03:56
*** bhavikdbavishi1 has joined #zuul03:58
*** gouthamr_ has quit IRC04:00
*** saneax has quit IRC04:00
*** bhavikdbavishi has quit IRC04:00
*** bhavikdbavishi1 is now known as bhavikdbavishi04:00
*** saneax has joined #zuul04:01
*** saneax has quit IRC04:03
*** saneax has joined #zuul04:03
*** wuchunyang has quit IRC04:04
*** bhavikdbavishi has quit IRC04:05
*** wuchunyang has joined #zuul04:10
*** gouthamr_ has joined #zuul04:12
*** wuchunyang has quit IRC04:16
*** saneax has quit IRC04:17
*** saneax has joined #zuul04:18
*** saneax has quit IRC04:22
*** saneax has joined #zuul04:22
*** bhavikdbavishi has joined #zuul04:23
*** saneax has quit IRC04:24
*** saneax has joined #zuul04:25
*** bhavikdbavishi has quit IRC04:26
*** bhavikdbavishi has joined #zuul04:28
*** gouthamr_ has quit IRC04:29
*** gouthamr_ has joined #zuul04:30
*** evrardjp has quit IRC04:33
*** evrardjp has joined #zuul04:33
*** gouthamr_ has quit IRC04:35
*** gouthamr_ has joined #zuul04:40
*** wuchunyang has joined #zuul04:44
*** wuchunyang has quit IRC04:48
*** saneax has quit IRC04:52
*** saneax has joined #zuul04:53
*** saneax has quit IRC04:55
*** saneax has joined #zuul04:55
*** ysandeep|away is now known as ysandeep|rover05:03
*** saneax has quit IRC05:03
*** saneax has joined #zuul05:03
*** saneax has quit IRC05:17
*** saneax has joined #zuul05:19
*** saneax has quit IRC05:20
*** wuchunyang has joined #zuul05:20
*** marios has joined #zuul05:39
*** reiterative has quit IRC05:42
*** reiterative has joined #zuul05:42
*** vishalmanchanda has joined #zuul06:05
*** bhavikdbavishi1 has joined #zuul06:15
*** saneax has joined #zuul06:15
*** bhavikdbavishi has quit IRC06:17
*** bhavikdbavishi1 is now known as bhavikdbavishi06:17
openstackgerritGuillaume Chauvel proposed zuul/zuul master: tutorial: Add "job dependencies"  https://review.opendev.org/73207106:29
openstackgerritGuillaume Chauvel proposed zuul/zuul master: Rename quick-start to zuul-tutorial-quick-start  https://review.opendev.org/73765606:29
openstackgerritGuillaume Chauvel proposed zuul/zuul master: [DNM] TEST run zuul tutorials to test stream+callback (+ zuul-jobs change)  https://review.opendev.org/73547706:29
openstackgerritGuillaume Chauvel proposed zuul/zuul master: [DNM] TEST run zuul tutorials to test stream+callback and multiple nodes  https://review.opendev.org/73548306:29
*** sanjayu_ has joined #zuul06:49
*** gouthamr_ has quit IRC06:50
*** saneax has quit IRC06:52
*** gouthamr_ has joined #zuul06:52
*** iamweswilson has quit IRC06:54
*** dcastellani has quit IRC06:54
*** PrinzElvis has quit IRC06:55
*** dcastellani has joined #zuul06:56
*** bhavikdbavishi has quit IRC06:56
*** iamweswilson has joined #zuul06:56
*** PrinzElvis has joined #zuul06:56
*** gouthamr_ has quit IRC07:04
*** gouthamr_ has joined #zuul07:05
*** gouthamr_ has quit IRC07:15
*** jcapitao has joined #zuul07:20
*** gouthamr_ has joined #zuul07:22
avasstobiash: I added the changes we discussed yesterday on top of your change: https://review.opendev.org/#/c/740110/107:23
*** bhavikdbavishi has joined #zuul07:23
*** zbr7 is now known as zbr|ruck07:23
*** sugaar has joined #zuul07:26
tobiashavass: cool :)07:31
tobiashzuul-maint: I have two test stability fixes for unstable tests that I observed recently: https://review.opendev.org/#/q/status:open+project:zuul/zuul+branch:master+topic:test-fixes07:32
*** sanjayu__ has joined #zuul07:34
*** sanjayu_ has quit IRC07:36
*** sanjayu__ has quit IRC07:40
*** saneax has joined #zuul07:43
*** hashar has joined #zuul07:45
*** gouthamr_ has quit IRC07:46
*** sanjayu_ has joined #zuul07:47
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Update synchronize-repos  https://review.opendev.org/74011007:47
*** saneax has quit IRC07:50
*** sanjayu__ has joined #zuul07:51
*** ysandeep|rover is now known as ysandeep|lunch07:52
*** gouthamr_ has joined #zuul07:52
*** ysandeep|lunch is now known as ysandeep07:53
*** ysandeep is now known as ysandeep|lunch07:53
*** sanjayu_ has quit IRC07:54
*** sshnaidm has joined #zuul07:55
*** sanjayu_ has joined #zuul07:55
*** gouthamr_ has quit IRC07:57
*** sanjayu__ has quit IRC07:59
*** gmann has quit IRC08:03
*** erbarr has quit IRC08:03
*** erbarr has joined #zuul08:04
*** gmann has joined #zuul08:06
*** nils has joined #zuul08:09
*** gouthamr_ has joined #zuul08:09
*** iurygregory has quit IRC08:10
*** sanjayu_ has quit IRC08:19
*** iurygregory has joined #zuul08:24
*** tumble has joined #zuul08:24
*** tobiash has quit IRC08:26
*** tobiash has joined #zuul08:28
*** tobiash has quit IRC08:30
*** ysandeep|lunch is now known as ysandeep|rover08:34
*** tobiash has joined #zuul09:03
*** tosky has joined #zuul09:10
*** wuchunyang has quit IRC09:12
*** saneax has joined #zuul09:13
*** wuchunyang has joined #zuul09:17
*** bhavikdbavishi has quit IRC09:19
*** wuchunyang has quit IRC09:34
*** bhavikdbavishi has joined #zuul09:42
*** wuchunyang has joined #zuul09:48
openstackgerritTobias Henkel proposed zuul/zuul master: Make test_playbook more stable  https://review.opendev.org/73983509:54
openstackgerritTobias Henkel proposed zuul/zuul master: Join command thread on exit  https://review.opendev.org/73983809:55
*** wuchunyang has quit IRC10:18
*** wuchunyang has joined #zuul10:18
*** wuchunyang has quit IRC10:20
*** hashar has quit IRC10:27
*** ysandeep|rover is now known as ysandeep|afk10:42
*** ysandeep|afk is now known as ysandeep|rover10:58
*** wuchunyang has joined #zuul11:01
*** wuchunyang has quit IRC11:01
*** jcapitao is now known as jcapitao_lunch11:06
*** harrymichal has quit IRC11:14
*** bschanzel has joined #zuul11:25
avasstobiash: I think I found some more problems with the windows ssh things. it won't work unless the privatekey is added to an ssh-agent or stored in ~/.ssh.11:52
zbris there a way to combine tox_environment defined in parent and add new values in child job?11:52
zbri do have a base job that defines a set of variables, but I need to add one more in the child, without rewriting all of them.11:53
avasswe're still storing the private key in /var/ssh, so ssh gets stuck waiting for a password.11:53
zbrand these are under "vars:".... no idea how to make it happen.11:53
tobiashavass: we add the pubkey of the zuul master key to the windows image11:54
avasstobiash: yeah it works if I use the private key. the problem is that the localhost shell command doesn't use it11:54
tobiashwe probably want to enable windows for the build-sskkey rokle as well to solve this problem11:54
tobiashthey should use it (zuul loads it to the job local ssh agent)11:55
avasswe need something like 'ssh -i {{ nodepool_private_key_file }} ...' for the add-build-sshkey role11:55
avasstobiash: ah yeah that role adds the build key, but the original master key isn't11:56
tobiashavass: ssh should use the agent though (which at first contains the master key and later the build key)11:58
avassthe official images doesn't seem to do that though11:58
tobiashavass: just saw we have a windows wrapper for build-sshkey as well, I'll upload it later today11:59
avasstobiash: I think you already did :)12:00
mordredzbr: they should just combine naturally - we merge dicts12:00
avasstobiash: anyway that's ^ what I mean.12:00
avassuh, I guess I was too quick12:00
zbrwow, that was unexpected. ansible does not do that.12:00
zbra pleasant surprise in that case, i will find out soon.12:01
zbri still have some doubts that this merging is nested12:01
zbrif is nested it would be impossbile to override some vars from parent job that are declared as dicts.12:01
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Use ansible_ssh_private_key_file when setting up windows  https://review.opendev.org/74025412:02
avasstobiash: that ^12:02
*** jcapitao_lunch is now known as jcapitao12:02
*** swest has quit IRC12:02
tobiashavass: we should rely on the ssh agent instead, zuul sets up one for each job on purpose12:03
avasstobiash: then I don't understand why it doesn't work12:03
*** bhagyashris is now known as bhagyashris|brb12:04
tobiashavass: I think we should try to find that out, can you try with ssh -vvv?12:04
avasstobiash: it get's timed out so I'm not getting any logs. But I think it's because it's waiting for a password12:04
avassbut I have another idea12:05
zbri could also use some help generating a custom event with react, mainly for https://review.opendev.org/#/c/739482/12:05
*** zbr_ has quit IRC12:05
tobiashavass: ok, we should enforce batch mode at least12:05
avassyeah exactly12:06
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Enforce BatchMode when setting up ssh for windows  https://review.opendev.org/74025412:08
avassactually I missed one12:09
*** swest has joined #zuul12:09
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Enforce BatchMode when setting up ssh for windows  https://review.opendev.org/74025412:10
avasstobiash: how about that?12:10
tobiash++12:12
avassmordred: wanna +3 that? pretty please? :)12:12
*** wuchunyang has joined #zuul12:19
*** rlandy has joined #zuul12:23
*** wuchunyang has quit IRC12:23
*** rlandy is now known as rlandy|ruck212:24
avasstobiash: I keep hitting pre-run failures because winrm isn't running yet so I'm thinking that it might be good idea for nodepool to verify that somehow. sort of how it doesn't hand over a node until it can get an ssh-key12:28
tobiashavass: nodepool can do that (wait for specific port open)12:29
tobiashlet me dig up the config12:29
avasshmm, so maybe just adding some user-data that doesn't open the winrm port in the firewall until winrm is running12:30
tobiashadd connection-port: 5986 and connection-type: winrm to the diskimage config12:31
tobiashthen it waits until the winrm port is open12:31
avasswell, that's already configured. so maybe it's something else going on12:31
*** bhavikdbavishi has quit IRC12:31
tobiashwhat's not possible though is to wait for winrm AND ssh ports open12:31
mordredavass: done12:32
avassbecause sometimes I'm getting a 503 respose in ansible. I'm mostly guessing that it's because winrm hasn't started completely12:32
avassmordred: thanks!12:32
avasstobiash: during "Running ansible setup" that is12:33
tobiashavass: hrm, I'd assumed that winrm is up and running once the port is open12:33
tobiashavass: can it be that in your setup winrm is restarted during boot?12:34
avasstobiash: could be12:34
tobiashthat might explain that issue12:34
tobiashin that case one would need to add a winrm login check into nodepool and add the winrm master key to nodepool (optionally)12:35
tobiashcorvus: something like that might possibly solve your hostkey issue as well without ignoring them ^12:36
*** ysandeep|rover is now known as ysandeep|afk12:37
*** bhagyashris|brb is now known as bhagyashris12:37
avasstobiash: yeah I was hoping there would be a way to just verify that it's running somehow. but I can't find anything that doesn't require you to actually login and set up a session12:38
tobiashthat's the only way I can imagine atm (assuming that an unconfigured winrm is running at first)12:39
*** tumble has quit IRC12:43
avasstobiash: oh actually I think it might not be winrm12:45
openstackgerritMerged zuul/zuul-jobs master: Enforce BatchMode when setting up ssh for windows  https://review.opendev.org/74025412:47
avasstobiash: looks like some no_proxy settings were slightly wrong and we haven't noticed that before since ssh isn't affected by it. so you might be right about the port12:50
openstackgerritBenjamin Schanzel proposed zuul/zuul master: [TEST DNM] Log streamer terminate time  https://review.opendev.org/74027112:57
*** ysandeep|afk is now known as ysandeep12:58
*** pabelanger has left #zuul13:01
tobiashavass: you're fighting with proxy as well all the time?13:01
openstackgerritMerged zuul/zuul-jobs master: emit-job-header: add inventory hostname  https://review.opendev.org/73896313:02
avasstobiash: yeah13:03
tobiashwe poor guys13:03
fungieventually people will learn to stop breaking the internet with proxies and address translation ;)13:04
tobiashin the last 8 years that proxy cost me probably several months of working time so far13:04
mordredtobiash: and provided no value in return13:06
avassmordred, tobiash: oh tell me about it.13:06
tobiashit took me literally weeks to find out how to run an openshift behind a proxy without breaking essential use cases13:08
avassyeah I hit similar issues trying to set up kubernetes behind a proxy13:09
mordredtobiash: what I love is when I work places that want me to install a corporate CA on my machine for internal ssl sites13:09
mordredwhich is always a hard "nope"13:09
mordrednow - if I could install one in my browser and tie it to a domain or a set of domains that I trust it to provide certs for - sure13:09
tobiashmordred: we can chose between internal and external certs13:10
mordredand they wonder why people just install stuff into public clouds without telling them ...13:11
avassmordred: I would never :)13:11
mordredtobiash: but do they ask you to install a custom CA onto your laptop so that the internal certs show as valid? that's the thing I refuse to do13:12
mordredavass: "of course not"13:12
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Update "fetching info ..." and refresh animation  https://review.opendev.org/73801013:13
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Update buildset result page (new layout and styling)  https://review.opendev.org/73801113:13
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Update build result page layout  https://review.opendev.org/73997213:13
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Add icons and empty state to artifacts section on build result page  https://review.opendev.org/73997313:13
tobiashmordred: custom CAs are preinstalled on all of our boxes, but services that are meant to be accessed by suppliers (like our CI) use real certs13:14
tobiashso no cert issue with 'my' services ;)13:14
mordredtobiash: :)13:17
*** Goneri has joined #zuul13:20
avasstobiash: looks like it still gets stuck even though it's in batchmode13:24
tobiashavass: that is surprising as it should either succeed or fail (except if there is a firewall issue or so)13:26
avasstobiash: yeah and I can ssh to the node from that executor using the private key13:26
tobiashavass: is the syntax for the batch mode right?13:27
tobiashthere it's slightly different: https://www.thegeekstuff.com/2009/10/how-to-execute-ssh-and-scp-in-batch-mode-only-when-passwordless-login-is-enabled/13:27
avasstobiash: yep, it fails if I give it a bad user13:28
avassinstead of prompting for a password if it's not using batchmode13:29
tobiashavass: maybe you could try it with -vvv and combine it with the timeout util so you might get debug logs despite it being blocked13:30
avasstobiash: oh! looks like it was able to get the host-key, so it's not the first command that fails13:31
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Update buildset result page (new layout and styling)  https://review.opendev.org/73801113:32
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Update build result page layout  https://review.opendev.org/73997213:32
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Add icons and empty state to artifacts section on build result page  https://review.opendev.org/73997313:32
avasstobiash: oh and actually I think I see another problem. we're running an administrator user so we would need to add the build-key to %programdata%\ssh\administrators_authorized_keys13:33
avassor just not use an administrator user I guess13:33
tobiashoh yeah, getting the authorized_keys right was the hardest thing getting to work13:34
tobiashwe use the administrator user btw13:34
tobiashavass: we do this during the image build: http://paste.openstack.org/show/795706/13:35
avasstobiash: I couldn't get the Repair-AuthorizedKeyPermission to work so we do something else13:37
avasstobiash: anyway, looks like scp <file> <user>@<host>:.ssh doesn't work13:37
avassbut that shouldn't lock it13:37
avasstobiash: actually I was stupid and used ssh instead of scp13:38
avassand yep that locks it13:38
avassI guess it's because the .ssh directory doesn't exist13:39
avassyup that's it, we need to make sure .ssh exists before adding the build-key, and maybe add a variable to configure which file to add it to13:40
openstackgerritTristan Cacqueray proposed zuul/zuul master: tests: use a more inclusive word for the default password  https://review.opendev.org/74029113:41
avasstobiash: we do this instead: http://paste.openstack.org/show/795707/ :)13:43
*** wuchunyang has joined #zuul13:43
tobiashprobably more lightweight13:43
*** felixedel has joined #zuul13:58
felixedelzuul-maint: I have a bunch of PF4 patches ready for review https://review.opendev.org/#/q/status:open+project:zuul/zuul+branch:master+topic:patternfly-413:59
felixedelI hope you like the new design :)13:59
*** saneax has quit IRC14:00
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Update buildset result page (new layout and styling)  https://review.opendev.org/73801114:01
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Update build result page layout  https://review.opendev.org/73997214:01
openstackgerritFelix Edel proposed zuul/zuul master: PF4: Add icons and empty state to artifacts section on build result page  https://review.opendev.org/73997314:01
mordredcorvus: oh - uhm. see email from han-wen about checks plugin and CI reboot on gerrit mailing list14:03
*** piotrowskim has joined #zuul14:04
mordredcorvus: I've left a comment on the design doc14:07
*** felixedel has quit IRC14:16
avassfelixedel: oh that's a pretty big difference14:17
*** harrymichal has joined #zuul14:20
tristanCfungi: for some reason, clicking on the site-preview for https://review.opendev.org/#/c/738010/7 builds result in `Index File Not Found`14:28
tristanCfungi: oops, that was meant for felixedel14:28
tobiashthe npm folder is empty14:31
tobiashon all three builds14:32
tobiashoh no, not another regression of https://review.opendev.org/663108 :/14:32
tristanCoh noes, could it be the keep fix that caused that?14:33
*** dennis_effa has joined #zuul14:33
tobiashyes, it is :/14:33
tobiashlet me see if I can fix forward with that14:33
tobiashwhat's weird is that the job doesn't fail14:34
tobiashtristanC, mordred: I think we need to create zuul/web/static and the link before building the page14:36
*** jamesmcarthur has joined #zuul14:39
bschanzelHello there, may I have another review on https://review.opendev.org/#/c/736019/ ?14:40
openstackgerritTobias Henkel proposed zuul/zuul master: Fix dashboard preview after keep file removal  https://review.opendev.org/74031314:41
tobiashtristanC, mordred: I think that might do it ^14:42
openstackgerritTobias Henkel proposed zuul/zuul master: Fix dashboard preview after keep file removal  https://review.opendev.org/74031614:46
tobiash and that might be an alternative ^14:46
corvusmordred: yeah, i feel like we're still struggling to tell them that we just need gerrit to store some really simple ci results for us14:47
mordredyeah14:47
corvusmordred: han-wen replied to your comment, and i don't think he understood.  i mean you said "we can't guarantee we can even reach the ci system" and he said "gerrit doesn't have to, just the user's browser"14:48
mordredyeah14:48
*** jamesmcarthur has quit IRC14:52
*** bhagyashris is now known as bhagyashris|dinn14:52
*** vishalmanchanda has quit IRC14:54
mordredcorvus: I have responded to his response14:55
mordredI hope I found the right balance14:55
corvusmordred: i'm throwing in a comment about the verify-status plugin14:56
mordredawesome14:56
*** mnasiadka has joined #zuul14:59
corvusmordred: it sounds like they want the 'parters' to implement an api of gerrit's specification14:59
mordredyeah15:00
corvusmordred: i don't get how asking them to implement a read api designed by gerrit is going to be more successful than implementing a write api designed by gerrit15:00
openstackgerritMerged zuul/zuul master: tests: use a more inclusive word for the default password  https://review.opendev.org/74029115:00
mordredor - perhaps they assume all partners have an api that can be called and they expect to be able to write per-partner plugins in gerrit to call them?15:00
corvusmordred: i'm trying to understand if the labels section describes something that's helpful for us?15:02
mordredcorvus: yeah "The Gerrit team will work with partners to make their existing frontend plugins use the new ingestion API. " - I think what that means is "the partners inside google all have UI plugins to display their ci results. the gerrit team at google will work with the partners at google to port their ui plugins to the new api"15:03
*** harrymichal has quit IRC15:03
corvusah yep i missed the "existing frontent plugins" part15:03
corvusmordred: maybe the labels section it will help with the 'comment spam' stream, but probably only the 'pluggable ci details' part is going to make an overview table15:04
mordredcorvus: also struggling to understand that. I feel like it's pretty vague15:04
mordredyeah15:04
mordredI'm starting to wonder if porting verify-status to notedb might not be a better path forward for us :(15:05
corvusyeah -- did you see the comment i left there?15:05
mordredI did15:05
corvusmaybe we should send something to the list and see if anyone else wants to collaborate on it15:06
corvus(cause i'm getting a very googly vibe from this effort)15:06
mordredlike - if they're abandoning checks, that means subchecks is never gonna get written - and we're certainly not going to pick up that torch15:06
corvusnope15:06
mordredyeah15:06
tobiashzuul-maint: this dashboard fixing variant works: https://review.opendev.org/740316 the other doesn't so I abandoned it15:06
mordredthis seems very much like google decided to give up and just solve google's problems15:06
corvusmordred: ^ leaving 316 for you to +315:07
mordredpaladox: do you think anyone at wikimedia would be interested in collaborating on updating verify-status to use notedb?15:08
mordredpaladox: (given the apparent abandonment of checks)15:09
paladoxI don't think so as we don't use verify-status :(. Though we are currently using a plugin that displays jenkins checks as a table15:09
paladoxsee https://gerrit.wikimedia.org/r/c/operations/puppet/+/55627015:09
mordreddarn15:10
paladoxhttps://github.com/wikimedia/puppet/blob/production/modules/gerrit/files/homedir/review_site/static/gerrit-theme.html#L16315:10
*** jamesmcarthur has joined #zuul15:11
paladoxmordred you should be able to use it with the mysql db.15:11
mordredpaladox: is that using the checks api on the backend/15:12
paladoxthe plugin? nope it's using comments15:12
mordred?15:12
mordredyeah - but once we update to 3.x I'd really prefer to not have to run a db anymore15:12
paladoxah i see, hmm15:13
mordrednod. so it's a plugin version of the thing we do with comment scraping15:13
paladoxyeh15:13
corvusmaybe that combined with the new labels stuff in the google doc would be sufficient for us?15:13
mordredI see: https://github.com/wikimedia/puppet/blob/production/modules/gerrit/files/homedir/review_site/static/gerrit-theme.html#L25815:13
*** jamesmcarthur has quit IRC15:14
paladoxyup15:14
mordredmaybe?15:14
mordredthat code seems a bit easier to read that our current thing - so I bet we could fork it and modify it for our purposes fairly easy-ish and then it might be slightly more maintainable15:15
*** jamesmcarthur has joined #zuul15:15
mordredcorvus: do we really need the new labels stuff?15:17
mordred(I mean - I don't know what the new labels stuff actually does)15:17
corvusmordred: i don't either, but i read that section as saying that there would be some facility for removing comment spam.  like hideci15:18
mordredah - nod15:18
mordredyeah15:18
mordredthat would be handy15:18
paladoxyeh, admins can erase comments i believe15:18
*** jamesmcarthur has quit IRC15:19
corvuspaladox: sorry i didn't mean that kind of spam; i meant something to deal with large numbers of huge comments from ci systems15:19
paladoxoh15:19
corvussomething to remove them from the normal stream of comments so humans can actually read comments from other humans15:19
paladoxah i see15:19
*** jamesmcarthur has joined #zuul15:25
mordredcorvus: well - if we're not going to be waiting on subchecks now - it makes me want to consider just doing 2.13->3.2 over a weekend15:27
corvusmordred: #opendev?15:28
mordredcorvus: yeah15:29
corvusmordred: i mean, can we move this to #opendev?  :)15:29
*** ysandeep is now known as ysandeep|away15:30
fungipaladox: for context, in opendev we have dozens of external ci systems operated by community volunteers, usually testing things like compatibility of drivers with proprietary software or hard to obtain hardware, so a change pushed to a project relevant to those might get 30+ different ci systems reporting results for a single change, drowning out the human discussion going on15:33
paladoxah15:35
fungiso we've long had a js overlay on the "new change screen" to toggle those comments on/off and present a concise results table parsed out of the comment text for them15:38
*** jamesmcarthur has quit IRC15:39
*** jamesmcarthur has joined #zuul15:40
*** jamesmcarthur has quit IRC15:41
*** jamesmcarthur has joined #zuul15:42
*** sgw1 has quit IRC15:44
*** sgw1 has joined #zuul15:44
*** jamesmcarthur has quit IRC15:48
*** bhagyashris|dinn is now known as bhagyashris15:49
*** marios has quit IRC16:00
*** bhavikdbavishi has joined #zuul16:00
*** jamesmcarthur has joined #zuul16:02
openstackgerritBenoĂ®t Bayszczak proposed zuul/nodepool master: [provider][aws] now performs a multi-describe at once  https://review.opendev.org/74032816:03
openstackgerritBenoĂ®t Bayszczak proposed zuul/nodepool master: [DNM][provider][aws] now performs a multi-describe at once  https://review.opendev.org/74032816:07
openstackgerritBenoĂ®t Bayszczak proposed zuul/nodepool master: [WIP][provider][aws] now performs a multi-describe at once  https://review.opendev.org/74032816:07
openstackgerritMerged zuul/zuul master: Fix dashboard preview after keep file removal  https://review.opendev.org/74031616:13
*** hamalq has joined #zuul16:18
*** hamalq_ has joined #zuul16:19
*** jcapitao has quit IRC16:20
*** bhavikdbavishi1 has joined #zuul16:20
*** bhavikdbavishi has quit IRC16:22
*** bhavikdbavishi1 is now known as bhavikdbavishi16:22
*** hamalq has quit IRC16:22
*** jamesmcarthur has quit IRC16:26
*** jamesmcarthur has joined #zuul16:42
*** andreaf has quit IRC16:48
*** jbryce_ has joined #zuul16:48
*** mnasiadka_ has joined #zuul16:48
*** mwhahaha_ has joined #zuul16:48
*** webknjaz has quit IRC16:55
*** mwhahaha has quit IRC16:55
*** mnasiadka has quit IRC16:55
*** ChrisShort has quit IRC16:55
*** jbryce has quit IRC16:55
*** mordred has quit IRC16:55
*** jbryce_ is now known as jbryce16:55
*** mwhahaha_ is now known as mwhahaha16:55
*** mnasiadka_ is now known as mnasiadka16:55
openstackgerritGuillaume Chauvel proposed zuul/zuul master: scheduler: Fix event process abide hasUnparsedBranchCache argument  https://review.opendev.org/73904216:55
openstackgerritGuillaume Chauvel proposed zuul/zuul master: Fix branch name and project name for ref-updated create/delete  https://review.opendev.org/73832016:56
openstackgerritGuillaume Chauvel proposed zuul/zuul master: FakeGerritChange: Add Change-Id in commit message  https://review.opendev.org/73919716:56
openstackgerritGuillaume Chauvel proposed zuul/zuul master: WIP: Scheduler: Reconfiguration ref-updated create/delete  https://review.opendev.org/73919816:56
openstackgerritGuillaume Chauvel proposed zuul/zuul master: WIP: Scheduler: Reconfiguration ref-updated oldrev+newrev  https://review.opendev.org/73907816:56
openstackgerritGuillaume Chauvel proposed zuul/zuul master: Fix github include/exclude unprotected cache  https://review.opendev.org/74033916:56
openstackgerritGuillaume Chauvel proposed zuul/zuul master: Fix github branch protection while already unprotected  https://review.opendev.org/74034016:56
*** masterpe has quit IRC16:56
*** webknjaz has joined #zuul16:58
*** ChrisShort has joined #zuul16:58
openstackgerritGuillaume Chauvel proposed zuul/zuul master: scheduler: Fix event process abide hasUnparsedBranchCache argument  https://review.opendev.org/73904217:00
openstackgerritGuillaume Chauvel proposed zuul/zuul master: Fix github include/exclude unprotected cache  https://review.opendev.org/74033917:00
openstackgerritGuillaume Chauvel proposed zuul/zuul master: Fix github branch protection while already unprotected  https://review.opendev.org/74034017:00
openstackgerritGuillaume Chauvel proposed zuul/zuul master: Fix branch name and project name for ref-updated create/delete  https://review.opendev.org/73832017:00
openstackgerritGuillaume Chauvel proposed zuul/zuul master: FakeGerritChange: Add Change-Id in commit message  https://review.opendev.org/73919717:00
openstackgerritGuillaume Chauvel proposed zuul/zuul master: WIP: Scheduler: Reconfiguration ref-updated create/delete  https://review.opendev.org/73919817:00
openstackgerritGuillaume Chauvel proposed zuul/zuul master: WIP: Scheduler: Reconfiguration ref-updated oldrev+newrev  https://review.opendev.org/73907817:01
*** masterpe has joined #zuul17:02
*** bhavikdbavishi has quit IRC17:02
*** dennis_effa has quit IRC17:03
*** bhavikdbavishi has joined #zuul17:04
*** sshnaidm is now known as sshnaidm|afk17:12
*** nils has quit IRC17:25
*** mordred has joined #zuul17:25
*** jamesmcarthur has quit IRC17:29
*** jamesmcarthur has joined #zuul17:31
*** hashar has joined #zuul17:35
guillaumecmordred, I was reading the document “Gerrit CI Experience Reboot" and inadvertently closed your comment, sorry17:36
guillaumecreopened it !17:37
*** jamesmcarthur has quit IRC17:41
*** jamesmcarthur has joined #zuul17:43
*** jamesmcarthur has quit IRC17:54
*** jamesmcarthur has joined #zuul18:00
*** jamesmcarthur has quit IRC18:03
*** jamesmcarthur has joined #zuul18:10
*** jamesmcarthur has quit IRC18:16
corvusmordred: it looks like https://review.opendev.org/726263 may have caught a fish; i'll take a look18:17
corvusmordred: um, i set the wrong job name because i forgot we were in check not gate18:18
*** jamesmcarthur has joined #zuul18:20
openstackgerritJames E. Blair proposed zuul/zuul master: Add an icon next to result buttons on the console log  https://review.opendev.org/74034518:33
*** EmilienM is now known as EmilienM|PTO18:38
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: add-build-sshkey: Ensure .ssh exists, enable admin authorized_keys  https://review.opendev.org/74035019:02
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: add-build-sshkey: Ensure .ssh exists, enable admin authorized_keys  https://review.opendev.org/74035019:05
*** jamesmcarthur has quit IRC19:07
*** jamesmcarthur has joined #zuul19:14
*** jamesmcarthur has quit IRC19:14
*** jamesmcarthur has joined #zuul19:14
*** rlandy|ruck2 is now known as rlandy|brb19:15
*** y2kenny has joined #zuul19:26
*** tosky has quit IRC19:26
*** rlandy|brb is now known as rlandy19:36
*** bhavikdbavishi has quit IRC19:42
corvusmordred: okay, caught 2 this time19:47
*** jamesmcarthur has quit IRC19:47
*** jamesmcarthur has joined #zuul19:47
*** y2kenny has quit IRC19:48
tobiashbug fishing?19:48
corvusyeah, autoholding on https://review.opendev.org/726263 to try to figure out why we end up with docker images from the wrong architecture19:49
tobiashinteresting, I never did multi arch docker19:49
*** armstrongs has joined #zuul19:57
corvusmordred: inside the buildkit container, "buildctl du -v" shows the contents of the cache.  all of the layers from python-builder say they're pulled from the amd64 manifest, all the layers for python-base say they're pulled from the arm64 manifest.20:04
corvusthat makes me think that perhaps the buildkit cache is not able to hold both arches at the same time20:05
*** armstrongs has quit IRC20:05
corvusor, at least it doesn't know to pull a second copy of something it already has (in the case of needing a previous layer)20:05
corvusi don't see any arch information in the layer cache20:06
*** smyers has quit IRC20:11
tobiashhrm, so separate jobs for amd64 and arm64?20:13
tobiashor cleaning the caches after each arch20:14
tobiashor I just don't understand this multiarch stuff ;)20:14
corvustobiash: that's an option, but probably only for builds with different tags.  we're aiming for a single tag; buildkit is supposed to produce a single manifest list at the end of the build which contains the image manifests for all arches.  it may not be able to do that if we clear too much out20:16
tobiashah ok, I'll shut up :)20:16
corvusplease don't :)20:16
tobiashlooks like I have no idea how that multiarch docker stuff works :)20:17
corvusit's pretty new to all of us20:18
corvusi also see layers in the cache for things we've actually build; and in those cases, it does look like we may have one from each arch20:20
corvusso maybe the fault is in the 'pull' aspect of this20:20
corvusi wonder if we used multiple workers inside of a builder if that would behave differently?20:21
corvusi also wonder what would happen if we did a single build+push with --no-cache20:24
tobiashcorvus: could this be related? https://github.com/moby/buildkit/issues/105720:25
tobiashcorvus: the last sentence of the first answer sounds interesting: "Currently, it should always work correctly if you do docker build --pull ."20:26
corvustobiash: maybe?20:26
corvusand yeah20:26
corvusi'm going to try some reproduction20:27
corvusinterestingly, i just re-ran the command in the build and it succeeded; it also downloaded the other 2 missing images20:29
*** smcginnis has joined #zuul20:30
smcginnisSome conversation with fungi in #opendev on this, but I am hoping to get some feedback on the approach in https://review.opendev.org/#/c/739272/220:30
smcginnisThis is to address an issue we're hitting with the nightly openstack/requirements update job that tries to use each version of python to generate updated requirements.20:31
corvusi thought there was some work for the roles to be able to use a bunch of python installations?20:31
avasssmcginnis: does it need to be a loop?20:32
smcginnisavass: Yes, it needs to install the package for each ensure_pip_from_upstream_interpreters specified.20:32
avasssmcginnis: I mean, you could probably add '-venv' to each item in the list and template the list instead of using a loop :)20:33
smcginnisSo for example here: https://packages.ubuntu.com/search?suite=bionic-updates&searchon=names&keywords=venv20:33
smcginnisavass: We may be running up against my ansible knowledge here. :)20:33
*** jamesmcarthur has quit IRC20:34
*** jamesmcarthur has joined #zuul20:35
smcginniscorvus: Do you mean this? https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/ensure-pip/defaults/main.yaml#L520:35
smcginnisI thought that was all in place.20:35
corvussmcginnis, avass: i thought there was talk about using some gnu util that does things with tarballs to have a bunch of python versions installed; but maybe that's an optimization that isn't relevant here yet?20:36
*** jamesmcarthur has quit IRC20:37
avasscorvus: do you mean pyenv?20:37
*** jamesmcarthur has joined #zuul20:37
corvusnope, wasn't python specific20:37
corvusstow20:37
corvusgnu stow20:38
corvusanyway, i think that was intended as an optimization; it seems like this is addressing functionality we expect to work without requiring that20:38
avassoh, haven't heard of that. taking a look20:38
corvusavass: basically the idea was to build images with a bunch of different pythons pre-installed from upstream (not distro) with stow, and be able to access all of them.  i think.  my memory is fuzzy on this.  :)20:39
smcginnisJust for context, the issue I'm trying to address is a nightly job that runs.20:39
avasscorvus: is this for things like we did with tox to symlink it to /usr/bin to appear in PATH?20:39
smcginnisWe use ensure-pip: https://zuul.opendev.org/t/openstack/build/50cfc14cc11f4ded8877438f78b8585a/log/job-output.txt#306-34220:39
corvusavass: yeah20:39
avassok I think I got it then20:39
corvussmcginnis: understood; just trying to bring up all relevant context :)20:39
smcginnisBut then end up erroring out here: https://zuul.opendev.org/t/openstack/build/50cfc14cc11f4ded8877438f78b8585a/log/job-output.txt#85020:39
smcginniscorvus: Yeah, same here. Don't want to be one of those people that pop in with no context and say hey, merge my code.20:40
smcginnis:)20:40
smcginnisI'm stumbling through this, so if I'm not on the right track, I'm very open to getting some direction.20:41
avasssmcginnis: I think it looks good but I think we can avoid the loop20:42
smcginnisavass: Do you have an example of what that looks like?20:42
smcginnisHappy to update it, but I don't think I've used that syntax yet.20:43
avasssmcginnis: I'm trying to figure out how to do it :)20:44
corvussmcginnis: i also agree that this seems reasonable; i left one minor ansible thing in there; i agree with avass that avoiding the loop should be more efficient, so worth doing20:44
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul master: Add user preferences dialog  https://review.opendev.org/73948220:44
corvussmcginnis: (a package command inside of a loop is basically a series of "apt-get update; apt-get install" commands in sequence, whereas doing a list is "apt-get update; apt-get install foo bar"20:44
smcginnisJust for my education because I'm curious, do loops in ansible have a lot of overhead?20:45
smcginnisAhh.20:45
smcginnisSo if we get rid of the loop, only one apt update, multiple apt installs.20:46
avasscorvus: actually for the 'package' module on debian it's just a apt-get install20:46
corvussmcginnis: a little, but generally not enough to worry; this is a special case worth avoiding :)20:46
avassit never runs apt-get update20:46
corvusavass: well, still install in series20:46
avassyeah20:46
smcginnisSo the idea is to change the list of [python3.6, python3.7] to one "apt install python3.6-venv python3.7-venv". Got it.20:46
smcginnisHmm, noticing one other thing.20:48
smcginnisavass, corvus: Should we have another _from_packages version of ensure_pip_from_upstream_interpreters?20:48
avasscorvus: templating in name is possible20:48
*** bolg has quit IRC20:48
smcginnisWill it be too confusing to have an upstream list used for installing packages?20:48
corvusavass: never works for me :)20:49
avasscorvus: huh20:49
corvusavass: at least in loops20:49
corvusi think the task itself sits outside the loop20:49
corvusanyway, it's a moot point if we drop the loop :)20:50
avasscorvus: yeah, can't template the the loop_var in name20:51
avassin my opinion it's better to not template the name so it's easier to find the task :)20:51
corvustrue20:51
corvusi have increased the accuracy of my comment for posterity :)20:53
smcginnisDoes a jinja file need to be added to do the templating? Or is there a way to specify that inline?20:53
avasscorvus: :)20:54
corvussmcginnis: can all be done inline with something vaguely resembling a list comprehension20:54
corvus(a filter chain)20:54
corvusavass maybe working on that?  if not, i can20:55
avassokay I think I got it20:55
corvuscool20:55
avassbut there must be an easier way to do this20:55
corvussome days i think embedded postscript would be easier than jinja20:56
avassI commented20:56
corvusavass: i like that, and i think there's probably not an easier way20:57
*** jamesmcarthur has quit IRC20:57
openstackgerritSean McGinnis proposed zuul/zuul-jobs master: Install venv for all platforms in ensure-pip  https://review.opendev.org/73927220:57
smcginnisI think I got that. ^20:57
corvussmcginnis: drop the '-' so it's just "name: {{ ... }}"20:58
avasscorvus: I just wanted a regular list comprehension instead of creating a list of lists then joining the inner lists together :(20:58
smcginnisStill the earlier question I threw in the middle though - should a _for_upstream variable be used in a _for_packages task.20:58
*** jamesmcarthur has joined #zuul20:58
corvussmcginnis: (the result of the jinja filter chain will itself be a list)20:58
fungitrying to follow along while cooking dinner, i think the gnu stow work was going on in the ensure-python role20:58
openstackgerritSean McGinnis proposed zuul/zuul-jobs master: Install venv for all platforms in ensure-pip  https://review.opendev.org/73927220:58
avasssmcginnis: I think you need to have the string on the same line as 'name: '21:01
corvussmcginnis: maybe a new var makes sense?  i'd probably defer to others on that21:01
corvusand should we ask ianw to review this?21:01
avassor is that valid jinja?21:01
avassuh, *yaml21:01
* smcginnis hovers over :wq21:01
corvusi think that's valid yaml, but not 100%.  i've never done it.  :)21:02
smcginnisSafer if I change it?21:02
corvusmore consistent if that helps :)21:02
openstackgerritSean McGinnis proposed zuul/zuul-jobs master: Install venv for all platforms in ensure-pip  https://review.opendev.org/73927221:02
avasslgtm21:03
smcginnisI guess it's probably good keeping with ensure_pip_from_upstream_interpreters rather than adding another pretty much identical variable. Or going through deprecation of the one for a common variable.21:04
smcginnisI would expect this isn't something that is going to be needed often.21:04
fungiseems likely to be needed by any job which uses more than one python interpreter version over the course of the build21:05
*** jamesmcarthur has quit IRC21:06
smcginnisAt least there's a way to do it, even if the choice of variable name might be slightly confusing.21:07
*** jamesmcarthur has joined #zuul21:07
*** jamesmcarthur has quit IRC21:11
*** jamesmcarthur has joined #zuul21:11
fungiwe might ought to consider making that variable an alias for a better name and deprecating the old name21:13
avasssmcginnis: deprecating ensure_pip_from_upstream_interpreters should be too hard. you could add something like ensure_pip_from_python_interpreters that defaults to ensure_pip_from_upstream_interpreters if it's set otherwise ansible_python.executable21:14
avassshouldn't be too hard*21:15
*** yolanda has quit IRC21:16
*** yolanda has joined #zuul21:17
smcginnisavass: Do you think I should do that in this patch?21:17
avasssmcginnis: I'd rather do it sooner than later, but I don't think it's necessary21:21
smcginnisYeah, doesn't look too bad. I'll just add it here.21:22
avassbut if it's just changing the name of a variable it shouldn't be hard. unless someone else can tell me that I'm wrong :)21:22
smcginnisavass: I guess the tricky part could be that I can default them to be the same, but then someone may be using one or the other. So I think I would have to check both vars?21:23
avassensure_pip_from_python_interpreters: "{{ ensure_pip_from_upstream_interpreters | default(ansible_python.executable) }}"21:24
avasssmcginnis: I think that should be all, and remove the default value of ensure_pip_from_upstream_interpreters :)21:24
avasssmcginnis: in roles/ensure-pip/defaults/main.yaml if that wasn't clear21:25
smcginnisAh, I was thinking the defaults would get loaded first, then overwritten by what someone sets in their own variables.21:26
avasssmcginnis: that's the idea :)21:26
smcginnisavass: Wait, I want to make sure I have that right. Are you saying what I was thinking is actually the right order?21:27
avassyeah21:28
avassthe idea is that if the old variable is set it will be used, if it's not set it will use the default variable. but the new variable is prioritized21:29
smcginnisOK, so then my concern was valid. So initially _from_python and _from_upstream are set the same, and all is good. Then someone locally sets _from_upstream to the list of interpreters they want. Now they are no longer the same. And in the task we use the newer _from_python variable, which is still defaulted to the initial value and not the new value they have specified.21:29
avasssmcginnis: oh yeah you're right, that could be a problem if both are set.21:32
smcginnisI guess if we default ensure_pip_from_upstream_interpreters to be empty, then we could do that conditional check?21:32
avassI think it might actually be harder than I thought :)21:34
smcginnisThings always look too easy at first. ;)21:35
smcginnisI'll leave my patch as is then. If there's anything I can change to make it better, I'll watch for comments. Maybe someone has a good idea how to handle that.21:35
smcginnisBut at least I think it's just a little non-obvious with the variable name. It's just a cosmetic issue.21:36
corvusoh, the other shas i got running it the second time aren't the other arches, they are the shas from dockerhub since the buildset registry is gone21:39
corvusthis may be hard to reproduce without also holding the registry21:40
*** avass has quit IRC21:53
corvusrunning buildx one platform at a time, it still seems to download only one sha; there must be more going on that we can't see21:58
fungipay no attention to the whale behind the curtain22:02
*** hashar has quit IRC22:13
*** smyers has joined #zuul22:34
*** piotrowskim has quit IRC22:54
*** rfolco has joined #zuul23:03
*** rfolco has quit IRC23:07
*** harrymichal has joined #zuul23:35
*** dmellado has quit IRC23:39
*** rlandy has quit IRC23:58

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!