Monday, 2022-04-25

-@gerrit:opendev.org- Guillaume Chauvel proposed: [zuul/zuul] 838208: Check quick-start result through zuul-web https://review.opendev.org/c/zuul/zuul/+/83820808:34
-@gerrit:opendev.org- Albin Vass proposed: [zuul/zuul-jobs] 839225: mirror-workspace-git: urlencode src_dir https://review.opendev.org/c/zuul/zuul-jobs/+/83922514:07
-@gerrit:opendev.org- Albin Vass proposed: [zuul/zuul-jobs] 839225: mirror-workspace-git: urlencode src_dir https://review.opendev.org/c/zuul/zuul-jobs/+/83922514:09
-@gerrit:opendev.org- Albin Vass proposed: [zuul/zuul-jobs] 839225: mirror-workspace-git: urlencode src_dir https://review.opendev.org/c/zuul/zuul-jobs/+/83922514:11
-@gerrit:opendev.org- Matthieu Huin https://matrix.to/#/@mhuin:matrix.org proposed: [zuul/zuul] 796270: Tests: add non-voting unit testing for Python 3.10 https://review.opendev.org/c/zuul/zuul/+/79627014:11
-@gerrit:opendev.org- Joshua Watt proposed: [zuul/nodepool] 839226: Do not reset quota cache timestamp when invalid https://review.opendev.org/c/zuul/nodepool/+/83922614:24
-@gerrit:opendev.org- Joshua Watt proposed: [zuul/zuul] 837879: gerrit: Fix 'form' auth https://review.opendev.org/c/zuul/zuul/+/83787914:31
-@gerrit:opendev.org- Guillaume Chauvel proposed: [zuul/zuul] 839231: Check quick-start result through zuul-web (less strict) https://review.opendev.org/c/zuul/zuul/+/83923115:54
-@gerrit:opendev.org- Guillaume Chauvel proposed:19:30
- [zuul/zuul] 838208: Check quick-start result through zuul-web https://review.opendev.org/c/zuul/zuul/+/838208
- [zuul/zuul] 839231: Check quick-start result through zuul-web (less strict) https://review.opendev.org/c/zuul/zuul/+/839231
-@gerrit:opendev.org- Joshua Watt proposed: [zuul/nodepool] 839226: Do not reset quota cache timestamp when invalid https://review.opendev.org/c/zuul/nodepool/+/83922619:53
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed:22:06
- [zuul/zuul] 839265: Add base_sha support to gitlab driver https://review.opendev.org/c/zuul/zuul/+/839265
- [zuul/zuul] 839266: Add more files tests to Pagure driver https://review.opendev.org/c/zuul/zuul/+/839266
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed on behalf of Dong Zhang: [zuul/zuul] 834857: Fix bug in getting changed files https://review.opendev.org/c/zuul/zuul/+/83485722:06
@jkt_:matrix.orgI'm writing a job which publishes something to a static webserver. It's a one-of-a-kind special project, so I'd like to not modify my `project-config` repo. When I try to call the `add-fileserver` role on `localhost`, it gets rejected23:14
@jkt_:matrix.orgI wonder what I'm doing wrong23:14
@clarkb:matrix.orgJan Kundrát: looks like that role uses a secret. Is the secret accessible to the project using the role? IF so the other thing to check for the secret is that you are using it in a post merge context.23:29
@clarkb:matrix.orgif the secret isn't the issue them maybe the tempfile the private key gets written to is running afoul of the untrusted context checking23:30
@jkt_:matrix.orgClark: passing secret is not the problem; the problem is that I apparently need to run this on the executor, and I'm stopped by zuul-ansible's module filtering23:30
@jkt_:matrix.orgyup, the second part23:30
@jkt_:matrix.orglet me try to use the per-project's SSH private key, perhaps that's gonna be enough23:31
@clarkb:matrix.orgya so either the tempfile or the ssh-add are the problem23:31
@jim:acmegating.comi really like the per-project key for this use case.23:31
@jim:acmegating.comalternatively, wait a few days and we may have lifted the ansible restrictions :)23:32
@jim:acmegating.com(work on this spec is about ready to merge: https://zuul-ci.org/docs/zuul/latest/developer/specs/unrestricted-ansible.html )23:33
@jkt_:matrix.orgI'm currently on 3.19.1 :)23:34
@jim:acmegating.comthen soon there will be useful new features in addition to the security fixes as motivations to upgrade!  :)23:36
@jkt_:matrix.orgBefore I upgrade :, I ended up invoking `rsync` directly as a part of the playbook which already runs on a build node. I don't really need Ansible for that. (and yeah, it's a kludge of course)23:59

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!