-@gerrit:opendev.org- Guillaume Chauvel proposed: [zuul/zuul] 838208: Check quick-start result through zuul-web https://review.opendev.org/c/zuul/zuul/+/838208 | 08:34 | |
-@gerrit:opendev.org- Albin Vass proposed: [zuul/zuul-jobs] 839225: mirror-workspace-git: urlencode src_dir https://review.opendev.org/c/zuul/zuul-jobs/+/839225 | 14:07 | |
-@gerrit:opendev.org- Albin Vass proposed: [zuul/zuul-jobs] 839225: mirror-workspace-git: urlencode src_dir https://review.opendev.org/c/zuul/zuul-jobs/+/839225 | 14:09 | |
-@gerrit:opendev.org- Albin Vass proposed: [zuul/zuul-jobs] 839225: mirror-workspace-git: urlencode src_dir https://review.opendev.org/c/zuul/zuul-jobs/+/839225 | 14:11 | |
-@gerrit:opendev.org- Matthieu Huin https://matrix.to/#/@mhuin:matrix.org proposed: [zuul/zuul] 796270: Tests: add non-voting unit testing for Python 3.10 https://review.opendev.org/c/zuul/zuul/+/796270 | 14:11 | |
-@gerrit:opendev.org- Joshua Watt proposed: [zuul/nodepool] 839226: Do not reset quota cache timestamp when invalid https://review.opendev.org/c/zuul/nodepool/+/839226 | 14:24 | |
-@gerrit:opendev.org- Joshua Watt proposed: [zuul/zuul] 837879: gerrit: Fix 'form' auth https://review.opendev.org/c/zuul/zuul/+/837879 | 14:31 | |
-@gerrit:opendev.org- Guillaume Chauvel proposed: [zuul/zuul] 839231: Check quick-start result through zuul-web (less strict) https://review.opendev.org/c/zuul/zuul/+/839231 | 15:54 | |
-@gerrit:opendev.org- Guillaume Chauvel proposed: | 19:30 | |
- [zuul/zuul] 838208: Check quick-start result through zuul-web https://review.opendev.org/c/zuul/zuul/+/838208 | ||
- [zuul/zuul] 839231: Check quick-start result through zuul-web (less strict) https://review.opendev.org/c/zuul/zuul/+/839231 | ||
-@gerrit:opendev.org- Joshua Watt proposed: [zuul/nodepool] 839226: Do not reset quota cache timestamp when invalid https://review.opendev.org/c/zuul/nodepool/+/839226 | 19:53 | |
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: | 22:06 | |
- [zuul/zuul] 839265: Add base_sha support to gitlab driver https://review.opendev.org/c/zuul/zuul/+/839265 | ||
- [zuul/zuul] 839266: Add more files tests to Pagure driver https://review.opendev.org/c/zuul/zuul/+/839266 | ||
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed on behalf of Dong Zhang: [zuul/zuul] 834857: Fix bug in getting changed files https://review.opendev.org/c/zuul/zuul/+/834857 | 22:06 | |
@jkt_:matrix.org | I'm writing a job which publishes something to a static webserver. It's a one-of-a-kind special project, so I'd like to not modify my `project-config` repo. When I try to call the `add-fileserver` role on `localhost`, it gets rejected | 23:14 |
---|---|---|
@jkt_:matrix.org | I wonder what I'm doing wrong | 23:14 |
@clarkb:matrix.org | Jan Kundrát: looks like that role uses a secret. Is the secret accessible to the project using the role? IF so the other thing to check for the secret is that you are using it in a post merge context. | 23:29 |
@clarkb:matrix.org | if the secret isn't the issue them maybe the tempfile the private key gets written to is running afoul of the untrusted context checking | 23:30 |
@jkt_:matrix.org | Clark: passing secret is not the problem; the problem is that I apparently need to run this on the executor, and I'm stopped by zuul-ansible's module filtering | 23:30 |
@jkt_:matrix.org | yup, the second part | 23:30 |
@jkt_:matrix.org | let me try to use the per-project's SSH private key, perhaps that's gonna be enough | 23:31 |
@clarkb:matrix.org | ya so either the tempfile or the ssh-add are the problem | 23:31 |
@jim:acmegating.com | i really like the per-project key for this use case. | 23:31 |
@jim:acmegating.com | alternatively, wait a few days and we may have lifted the ansible restrictions :) | 23:32 |
@jim:acmegating.com | (work on this spec is about ready to merge: https://zuul-ci.org/docs/zuul/latest/developer/specs/unrestricted-ansible.html ) | 23:33 |
@jkt_:matrix.org | I'm currently on 3.19.1 :) | 23:34 |
@jim:acmegating.com | then soon there will be useful new features in addition to the security fixes as motivations to upgrade! :) | 23:36 |
@jkt_:matrix.org | Before I upgrade :, I ended up invoking `rsync` directly as a part of the playbook which already runs on a build node. I don't really need Ansible for that. (and yeah, it's a kludge of course) | 23:59 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!