=== bigjools-afk is now known as bigjools | ||
rbasak | smoser: maas-import-ephemerals uses https, which can go through a proxy but cannot be cached. maas-import-pxe-files currently uses http so caching does work. Thoughts? | 11:15 |
---|---|---|
lifeless | rbasak: https is cachable. | 11:15 |
smoser | rbasak, https_proxy | 11:16 |
smoser | at least i think i've tested that. | 11:16 |
smoser | rbasak, the reason it goes through https was a shortcut. | 11:16 |
rbasak | It is? | 11:16 |
rbasak | I mean cached by a proxy | 11:16 |
lifeless | rbasak: yes, two ways. You can talk https to the proxy, you can have a MITMing proxy. | 11:16 |
lifeless | either will get the proxy visbility into the requests and let it cache. | 11:16 |
smoser | i didn't have time to implement any signature checking of hashsums. | 11:16 |
rbasak | lifeless: sure, I understand that. But is there a trivial way of making this work with wget? | 11:17 |
smoser | so i had to transfer securely. | 11:17 |
rbasak | smoser: OK. I'm just wondering if this has any implications that haven't been considered | 11:17 |
smoser | rbasak, does 'https_proxy: http://your.proxy:3128/ wget https://foo.bar' not work? | 11:17 |
rbasak | smoser: yes, it does - but the proxy can't cache anything then | 11:17 |
smoser | i'm assuming you tried that, and assuming that i'm looking incredibly ignorant to lifeless. | 11:17 |
smoser | :) | 11:17 |
rbasak | it just passes the tcp connection thruogh | 11:17 |
smoser | i have to run for a bit. | 11:17 |
rbasak | ok | 11:18 |
smoser | rbasak, i want to get checking done though. | 11:18 |
smoser | gpg checking signatures. | 11:18 |
smoser | cloud-utils now has the public key installed. | 11:18 |
rbasak | Yes. | 11:18 |
smoser | of the cloud build system. | 11:18 |
rbasak | But what about the pxe files? | 11:18 |
smoser | later. | 11:18 |
smoser | have to look more. dont know off top of my head. | 11:18 |
smoser | talk later. | 11:18 |
rbasak | OK enjoy your run :-P | 11:18 |
roaksoax | allenap: howdy | 14:10 |
allenap | roaksoax: Hello! | 14:11 |
allenap | roaksoax: How is the package looking? | 14:12 |
roaksoax | allenap: looking good | 14:12 |
roaksoax | was just wondering whether there are any other config options that need to be updated | 14:12 |
roaksoax | allenap: And if there's any new files that need to be installed, have they been added to setup.py? | 14:14 |
allenap | roaksoax: pserv.yaml grew tftp options, but that was a while ago. Check celeryconfig.py perhaps? | 14:14 |
allenap | roaksoax: I would hope they're in there. I'll have a look. | 14:14 |
roaksoax | allenap: right but I meant if any of the config options need to be changed on package configuration | 14:15 |
allenap | roaksoax: Can you give an example of what you mean? | 14:15 |
allenap | I have to reboot; biab. | 14:15 |
allenap | Back. | 14:20 |
roaksoax | allenap: stuff that gets modified on maas.postinst file | 14:23 |
allenap | roaksoax: Anything relating to cobbler can be removed. This is probably the wrong way to do it, but here's a start: http://paste.ubuntu.com/1159210/ | 15:29 |
roaksoax | allenap: heh, I alread have that removed :) at least most of it | 15:31 |
roaksoax | allenap: am testing it though | 15:33 |
allenap | roaksoax: Cool :) | 15:34 |
roaksoax | allenap: maas_local_settings has changed right? | 15:37 |
roaksoax | allenap: ah so -PSERV_URL = "http://maas:password@localhost:5241/api" was cobbler specifig? | 15:38 |
roaksoax | allenap: wasn't that the user/password to access pserv itself? | 15:39 |
roaksoax | as in, authenticated provisioning server API access | 15:39 |
allenap | roaksoax: Yeah, but the original purpose of pserv was as a not-insane wrapper around cobbler. That part has now gone, but pserv lives on as the dynamic tftp server. | 15:40 |
roaksoax | allenap: gotcha, so the user/pass features for pserv.yaml are gone too | 15:41 |
allenap | roaksoax: Yep. | 15:41 |
roaksoax | alright then | 15:41 |
roaksoax | that's something that you did remove and I didn';t :) | 15:41 |
roaksoax | allenap: did you make any further changes to python-tx-tftp in maas trunk? | 15:43 |
allenap | roaksoax: Not since 27th July. | 15:45 |
allenap | r780 | 15:45 |
roaksoax | allenap: could you please check the package in ubuntu quantal, (the patch in the package actually) | 15:45 |
roaksoax | allenap: the tftp configuration is not enabled by default on pserv.yaml | 15:50 |
roaksoax | ? | 15:50 |
roaksoax | or does it use default values? | 15:51 |
allenap | roaksoax: It uses default values. | 15:53 |
roaksoax | allenap: alright, now, was the DNS server disabled by default | 15:53 |
roaksoax | ? | 15:53 |
allenap | roaksoax: I don't have a quantal install available right now, and for this week at least we just need to get it working on precise. | 15:53 |
allenap | roaksoax: Ah, DNS, I don't know. Can you ask Julian and Jeroen via maas-devel? | 15:54 |
roaksoax | allenap: will do | 15:55 |
roaksoax | allenap: /usr/sbin/maas-import-pxe-files: line 38: MAAS_PROVISIONING_SETTINGS: parameter null or not set | 16:54 |
allenap | roaksoax: Ah, right, we have to wrap that script using maas-provision. Please can you file a critical bug about that? | 16:55 |
roaksoax | allenap: hold on, what do you mean :) | 16:55 |
roaksoax | allenap: maas-provision binary exists: http://paste.ubuntu.com/1159352/ | 16:56 |
allenap | roaksoax: I mean that maas-import-pxe-files is not suitable for being run by users any more; it should be called by maas-provision. | 16:56 |
allenap | roaksoax: Something like: maas-provision import-pxe-files ... | 16:56 |
roaksoax | allenap: ok | 16:56 |
roaksoax | allenap: that's packaging side then | 16:57 |
roaksoax | allenap: so are we looking into integrating maas-import-pxe-files inside maas-provision or just call it as a script | 16:59 |
roaksoax | allenap: ^^ | 17:07 |
roaksoax | allenap: another error: http://pastebin.ubuntu.com/1159370/ | 17:07 |
allenap | roaksoax: It'll just be called as a script, but by maas-provision, which will ensure that MAAS_PROVISIONING_SETTINGS is correct. | 17:07 |
roaksoax | allenap: ok | 17:08 |
allenap | roaksoax: That looks like dnssec-keygen is missing, from bind9utils. | 17:08 |
roaksoax | allenap: it is not :) | 17:09 |
roaksoax | allenap: and as far as i can recall we agreed with rvba to not do that on maas-installation | 17:09 |
roaksoax | cause that would need bind9utils installed | 17:09 |
roaksoax | when it is not needed | 17:09 |
roaksoax | allenap: ok, found the fix | 17:10 |
allenap | roaksoax: This is happening when Apache starts, isn't it? | 17:10 |
roaksoax | allenap: i thought rvba fixed it | 17:10 |
allenap | Oh good :) | 17:10 |
allenap | roaksoax: I guess not, and he's surfing for the next 10 days or so :) | 17:10 |
roaksoax | allenap: yeah it is lacking of full path for dnssec-keygen but we had a way to had that fix | 17:11 |
roaksoax | so rvba was gonna fix it ) | 17:11 |
roaksoax | :) | 17:11 |
allenap | roaksoax: Critical bug, unless the fix is okay. | 17:12 |
roaksoax | allenap: yeah I have ogt remember how we agreed to fix it | 17:13 |
roaksoax | allenap: for now i'll just patch the package | 17:14 |
allenap | roaksoax: I'll be back online later, probably. If you hit any more problems like those, file them as Critical. | 17:20 |
roaksoax | allenap: will do | 17:22 |
guimaluf | if I put a 'in-target wget http/.../' inside my preseed file, the node can't get my file. what should I do to make my files avaible? | 18:14 |
=== matsubara is now known as matsubara-afk | ||
robbiew | "Andres Rodriguez has proposed merging lp:~andreserl/maas/packaging_cobbler_removal into lp:~maas-maintainers/maas/packaging." \o/ | 19:41 |
allenap | \m/ | 19:45 |
=== lifeless_ is now known as lifeless | ||
=== matsubara-afk is now known as matsubara | ||
=== flacoste changed the topic of #maas to: 6 weeks until Final Freeze | Discussion of upstream development of Ubuntu's Metal as a Service (MAAS) tool | MAAS jenkins: https://jenkins.qa.ubuntu.com/job/maas-trunk/ |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!