/srv/irclogs.ubuntu.com/2013/01/21/#juju-dev.txt

wallyworld__jam: hello, meeting time?06:02
jamwallyworld__: it was, but I have to run to the grocery store for my wife. Will be back in a bit. Sorry I missed my alarm earlier.06:14
wallyworld__jam: ok, ping me when you get back06:26
jamwallyworld__: back06:31
wallyworld__ok06:31
TheMueMorning all.08:07
rogpeppeTheMue, jam. wallyworld__: mornin'08:12
jammorning rogpeppe08:12
rogpeppejam: how're you doing for snow?08:13
jamrogpeppe: here in Dubai, the low is about 10deg C. Not much snow here :)08:14
rogpeppejam: ha, i thought you were in the uk...08:14
jam(well, weather reports says low of 17 this week)08:14
jamI used to be in NL08:14
jammgz is in UK08:15
rogpeppejam: doh, why did i think you were in the UK?08:15
rogpeppejam: i've no idea08:15
jami've been there for conferences and such, but I've never lived in UK08:15
rogpeppejam: anyway, lots of snow here, and more coming... definite advantages to working at home08:17
jamrogpeppe: you usually still have to make it out for food. but yeah, not having hours of commuting in the snow is a good thing.08:17
rogpeppejam: still got a few carrots in the garden :-)08:18
jamrogpeppe: ready frozen carrots :)08:19
rogpeppejam: mmm08:19
TheMueWe had some centimeters fresh snow this morning, but in south it seems to be more. The major airport yesterday also had ice rain.08:29
* TheMue likes new technology, his boarding pass for his flight tomorrow to MUC is now in passbook on his iphone.08:32
=== openpercept is now known as mohits
jamdimitern: cfx3ac2..09:54
jamugh09:54
jamignore that :)09:55
dimiternjam: :) ok09:55
TheMuelunchtime10:53
niemeyerGood morning!11:15
dimiternniemeyer: morning!11:18
TheMueniemeyer: Morning.11:19
rogpeppeniemeyer, dimitern: yo!11:28
dimiternrogpeppe: hiya11:29
niemeyerdimitern, TheMue, rogpeppe: Heya!11:29
niemeyerGood weekends?11:29
dimiterngood :) and lazy11:30
rogpeppeniemeyer: yes thanks - went to see some old friends in the Lake District11:30
rogpeppeniemeyer: i now ache from too much energetic sliding around on an iced over pond11:31
rogpeppeniemeyer: quick question about mgo11:31
niemeyerrogpeppe: Wow, sounds fun :)11:31
niemeyerrogpeppe: Sure11:32
rogpeppeniemeyer: if a connection to mgo is broken, will mgo retry by making a new connection, or will that (and subsequent) requests just give an error?11:32
rogpeppeniemeyer: it was. their kids loved it, after some initial trepidation (the ice did crack alarmingly!)11:33
niemeyerrogpeppe: An on going request returns an error, since assumptions about that specific connection may change, but post-Refresh sessions will block until the connection is back11:34
jammgz: poke for great mumbling11:34
niemeyerrogpeppe: Ugh, sounds dangerous :-)11:34
mgzjam: I'm on11:34
rogpeppeniemeyer: the subtext is: i want to test what happens in the machine agent if the different independent parts die, so i'm wondering about a good way to provoke that11:34
rogpeppeniemeyer: it would have been dangerous... if the pond was more that 6 inches deep :-)11:35
rogpeppes/that/than/11:35
niemeyerrogpeppe: Haha :)11:35
niemeyerrogpeppe: Yeah, not a big deal :)11:35
niemeyerrogpeppe: So11:35
niemeyerrogpeppe: Provoke what, specifically?11:36
niemeyerrogpeppe: Break the connection?11:36
rogpeppeniemeyer: yeah11:36
niemeyerrogpeppe: It's a normal TCP connection, so the usual goes.. mgo tests stop the server for a moment, for example11:36
rogpeppeniemeyer: thanks. i might try that (i was thinking setting up a proxy address, but just stopping the server would probably be easier)11:39
niemeyerrogpeppe: Yeah. In theory we actually already do that, just at a different time11:40
niemeyerrogpeppe: ping11:58
rogpeppeniemeyer: pong11:58
niemeyerrogpeppe: Have you seen my previous messages, or was my connection broken already?11:59
rogpeppeniemeyer: last message i saw was:11:59
rogpeppe[11:40:25] <niemeyer> rogpeppe: Yeah. In theory we actually already do that, just at a different time11:59
niemeyerrogpeppe: Okay12:00
niemeyerrogpeppe: So I sent you a message about a SSL change coming in MongoDB12:00
niemeyerrogpeppe: The only thing relevant there is the link, actually12:00
rogpeppeniemeyer: ah, sounds useful12:00
niemeyerrogpeppe: It says client certificates will be enforced in 2.4, and that we can actually force them with a flag explicitly before that12:01
niemeyerrogpeppe: We should probably enable that flag12:01
niemeyerrogpeppe: I'm slightly unsure of the consequences, though.. I don't know what OpenSSL does when one asks to verify the peer certificate, without actually providing any client CAs12:01
rogpeppeniemeyer: hmm12:02
rogpeppeniemeyer: who do we want to sign the client certificate?12:02
niemeyerrogpeppe: I don't know.. I suppose the same CA would actually be fine.. but the question is really how validation occurs in this case. I'm unsure12:03
rogpeppeniemeyer: i thought we were using passwods to verify the client12:03
niemeyerrogpeppe: That's something else..12:03
rogpeppeniemeyer: perhaps it's not a good idea to use the same CA, otherwise any of our clients can masquerade as a server, no?12:03
niemeyerrogpeppe: It realliy depends on what approach we used12:04
rogpeppeniemeyer: oh, perhaps i'm understanding something different by client-cert verification12:04
niemeyerrogpeppe: Exactly.. I don't know what that really means for Mongo either.. the code looks pretty simplistic12:04
niemeyerrogpeppe: It just calls SSL_get_verify_result on whatever cert was provided by the peer12:04
rogpeppeniemeyer: the peer (as in the mongodb peer server)? or the client?12:05
dimiternjam, mgz: so when you can PTAL https://codereview.appspot.com/7098074/ - landing this and the other branch https://codereview.appspot.com/7133043/ will unblock my bootstrap work12:05
rogpeppeniemeyer: if it's going to do this by default, we definitely want to enable it early though, to see what effect it has on our stuff.12:07
niemeyerrogpeppe: The client12:07
niemeyerrogpeppe: I actually think we shouldn't worry by now12:08
niemeyerrogpeppe: We should really focus on the API stuff so we can obsolete that stuff on our usage ASAP12:08
rogpeppeniemeyer: yeah. i wonder what it does if the client doesn't present a cert12:08
niemeyerrogpeppe: It fails12:09
rogpeppeniemeyer: yeah, we defnitely want to get the API going properly before that's enabled. it makes sense for the way we'll be using mongo after we've got the API (the api server can make its own client cert for connection, if it wants)12:10
niemeyererror: cannot upload tools: cannot write file "tools/juju-1.9.7-precise-amd64.tgz" to control bucket: Please re-send this request to the specified temporary endpoint. Continue to use the original request endpoint for future requests.13:08
niemeyerI thought we had fixed this13:08
niemeyerOh, hmm13:08
niemeyerNo.. still broken13:16
niemeyerYeah, for some reason I can't make it work on sa-east-113:19
niemeyerWill ask David13:19
rogpeppeniemeyer: i haven't seen that error before13:22
niemeyerrogpeppe: Happens only when I try to use the local region13:25
rogpeppeniemeyer: ah. i should probably try different regions.13:25
rogpeppeniemeyer: BTW TestBootstrapWithDefaultSeries fails every time for me live13:25
rogpeppeniemeyer: i've been meaning to get around to looking at it13:26
rogpeppeniemeyer: because it's the only thing that consistently stops all the live tests passing13:26
niemeyerrogpeppe: Would be great to know what's up with it13:28
rogpeppeniemeyer: yeah. do you see the same problem, BTW?13:28
niemeyerrogpeppe: No, I haven't run it13:28
rogpeppeniemeyer: (i only get it when running all live tests)13:28
niemeyermachines:13:29
niemeyer  "0":13:29
niemeyerThat's a backwards incompatible change, I guess13:29
niemeyerAn unnecessary one at that13:29
rogpeppeniemeyer: i guess that happened when we moved to string machine ids. i'd presumed the tests remained the same.13:30
rogpeppeniemeyer: hmm, i'm not sure how TestBootstrapWithDefaultSeries can ever have worked in combination with the other tests - it doesn't destroy the environment before bootstrapping13:36
rogpeppeniemeyer: actually, it can't do that either. more thought required.13:37
TheMueAaaah, back again, my MAAS server stolen my network connection. Sh*t.13:47
rogpeppeultra-trivial CL anyone? (code move only) https://codereview.appspot.com/717504314:05
rogpeppeTheMue, niemeyer: %14:06
rogpeppe^14:06
niemeyerrogpeppe: Hmm.. -1 in principle..14:08
niemeyerrogpeppe: They're close to the only location where the methods are used right now14:08
niemeyerrogpeppe: Aren't they?14:09
rogpeppeniemeyer: no, they're used by the tests for all agents that use agentSuite14:09
rogpeppeniemeyer: that's why i made them methods on agentSuite - i just didn't move them in the original CL so that i minimised code churn14:09
niemeyerrogpeppe: I see.. LGTM14:10
rogpeppeniemeyer: after checking, they're not *all* used by all agents, but each one is used by at least one test outside upgrade_test.go14:11
rogpeppeniemeyer: which i think makes it worth it14:12
rogpeppeniemeyer: thanks14:12
=== TheRealMue is now known as TheMue
niemeyerrogpeppe: Any luck with the test?14:32
rogpeppeniemeyer: yes, i've got a fix. it's not right, but it's ok for now i think - it's certainly no worse14:32
rogpeppeniemeyer: one mo, i'll propose it14:32
rogpeppeniemeyer: https://codereview.appspot.com/717904314:36
rogpeppeniemeyer: the comment is a bit hopeful BTW - i have no way of verifying that it works on openstack.14:36
niemeyerrogpeppe: This seems crackful14:41
niemeyerrogpeppe: The goal of the test was to not affect the real environment from the suite14:43
niemeyerrogpeppe: I probably screwed that up14:43
niemeyerrogpeppe: I think we should just remove that test for now14:47
niemeyerrogpeppe: The amount of hackery going on there and the amount of time we've spent on this outweights its benefits14:47
niemeyerrogpeppe: I was silly to propose this14:47
niemeyerrogpeppe: We should have a functional test that runs that kind of verification from outsie14:47
niemeyeroutside14:47
niemeyerrogpeppe: Instead of trying to build a complete environment within the suite that includes multiple distros, multiple environments, and whatnot14:48
rogpeppeniemeyer: i think you're right14:49
rogpeppeniemeyer: do you want to redo the test?14:49
niemeyerrogpeppe: redo?14:49
rogpeppeniemeyer: i'm just going for lunch, BTW14:49
rogpeppeniemeyer: oh, sorry, i thought you'd written it14:50
niemeyer<niemeyer> rogpeppe: I think we should just remove that test for now14:50
niemeyerrogpeppe: Yes, I did14:50
rogpeppeniemeyer: i was referring to your "we should have a function test" remark14:50
rogpeppeal14:50
rogpeppeniemeyer: ok, i'll remove it for now.14:51
niemeyerrogpeppe: Thanks14:51
niemeyerI'll go for lunch too14:51
rogpeppeniemeyer: slightly longer lunch break today if that's ok - back in a couple of hours14:52
dimiternfwereade: hey! arrived ok and ready for sprinting? ;)14:56
mgzdimitern: is there anything else you need reviewing today to keep moving forward?16:40
dimiternmgz: no, until those branches land and I propose my changes16:41
mgzdimitern: ace, poke me if you need anything else16:42
dimiternmgz: sure, thanks16:43
rogpeppeback17:02
niemeyerHmpf18:38
* niemeyer curious about the sprint activities18:48
rogpeppeniemeyer: actually running the API server now (not yet connecting to it though) https://codereview.appspot.com/717804419:51
rogpeppeand that's me for the day19:52
rogpeppeg'night all19:52
niemeyerrogpeppe: Sweet, have a great night19:53

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!