/srv/irclogs.ubuntu.com/2013/11/01/#juju-dev.txt

wallyworld__jcastro: that bucket is his control bucket, created on demand at bootstrap time; it's not a public bucket which we could break00:45
wallyworld__maybe ec2 was being particularly slow at that time - sadly stuff can take time to propagate through after an action is performed from what I understand00:47
wallyworld__juju does wait for ec2 to "catch up"; maybe it didn't wait long enough this time. or maybe there was another error which went unnoticed in the output00:48
sinzuithumper-afk, that mysql on lxc bug is very erratic. I just deployed it twice on lxc successfully.  My successful runs are between the hours of 0 an 6 UTC00:57
adam_ghmph01:03
adam_gtrying to use 2 different juju environments in one maas (two different maas users/keys)01:04
adam_ghttp://paste.ubuntu.com/6338725/01:04
adam_gone fails to start01:04
=== thumper-afk is now known as thumper
wallyworld__adam_g: 1.16 has a bug in this area - 1.16.2 is being packaged now and will allow maas to better support juju with multiple users. but i'm not sure if the symptoms you are seeing exactly relate to the problem as i've not run into the issue myself01:32
bigjoolslooks different to me01:32
adam_gwallyworld__, ssory, should have mentioned. im using 1.16.201:32
thumperadam_g: that's weird, not seen that before01:33
wallyworld__adam_g: in that case, my maas foo is not good enough. maybe bigjools  can help01:33
adam_gtried re-bootstrapping again, this time with only one environment. was the same thing01:33
adam_gtrying again on another cluster01:33
sodreadam_g: what is exactly the issue you're facing?01:34
bigjoolsit doesn;t look anything to do with maas to me, there's a mongo connection error01:35
sinzuiadam_g, tools are in canonistack and aws, your tests might be different now01:35
adam_gsodre, with two separate maas users, each with their own juju environment, only one bootstraps01:35
adam_g2013-07-15 00:35:38 DEBUG juju.state open.go:88 connection failed, will retry: dial tcp 127.0.0.1:37017: connection refused01:35
adam_g2013-07-15 00:35:38 ERROR juju.state open.go:93 TLS handshake failed: x509: certificate has expired or is not yet valid01:35
sodreis one of them *not admin* ?01:35
adam_gsodre, neither of them are01:36
sodreone sec.01:36
adam_ghmm. ive gotten further on another maas cluster (with the same versions of both juju and maas)01:37
sodrecan you see if the workaround in #1245092 works for you ?01:38
wallyworld__sodre: you can revert your rev 110 to remove the json fix using a cherry pick - bzr merge -r 110..10901:38
_mup_Bug #1245092: environ-provisioner fails to start <admin> <bootstrap> <Go MAAS API Library:Triaged> <https://launchpad.net/bugs/1245092>01:38
adam_gsodre, make both users admin?01:39
sodrewallyworld__: okay I'll do that. but at the moment I can't test with my live deployment without the json fix :(01:39
sodreadam_g: or at least one of them and see if that one bootstraps.01:40
wallyworld__you can add the json fix when you tst but just not commit it01:40
sinzuiWe need to support sync or sum checking with gwacl to upload tools01:40
adam_gsodre, fwiw, i was able to bootstrap 2 environments with non-admin users on another cluster01:40
wallyworld__sinzui: you saying tools upload is unreliable on Azure?01:41
sodreadam_g: okay... then maybe that is a different bug.01:41
sinzuiwallyworld__, Iam saying I have been uploading tools for 20 minutes, most of them are already in azure.01:42
wallyworld__ah right01:42
sinzuibigjools, Do to accidents in team organisation, I can create series in charms. Does your tarmac charm really need to be in saucy? Would you be willing to skip to trusty?01:42
wallyworld__i noticed yesterday Azure is really, really sloooooooow01:43
sinzuiwallyworld__, tools check sums will change we regenerated, so checksum is a requirement01:43
wallyworld__yeah. we calculate checksums anyway, so makes sense to short circuit upload if possible01:44
bigjoolssinzui: it is series-agnostic01:46
bigjoolsI pushed it to precise for now01:46
thumperaxw: morning01:50
axwthumper: ahoy01:50
thumperaxw: I'd like to point you at https://bugs.launchpad.net/juju-core/+bug/124690501:50
_mup_Bug #1246905: status for manual provider hangs <manual-provider> <juju-core:Triaged> <https://launchpad.net/bugs/1246905>01:50
axwlooking01:50
thumperaxw: I've not dug into it any more than my comment says01:51
axwokey dokey. I'll dig in. thanks01:51
axwthumper: if you have a moment later, I replied to the thread about interfaces... keen to hear if you have any suggestions, as I know you went through something similar not too long ago01:52
thumperaxw: heh, you mean that world of hurt?01:52
axwcan't remember if you had to deal with this particular problem01:52
axwheh :)01:52
adam_gbigjools, 2013-07-15 00:56:15 ERROR juju.state open.go:93 TLS handshake failed: x509: certificate has expired or is not yet valid  <- any idea?01:55
bigjoolsadam_g: none at all, sorry.  this looks like a connection problem to mongo, which is nothing to do with maas01:58
bigjoolswe tested that multi-user worked already so maybe an env issue for you?01:58
adam_gbigjools, yeah, looks lthat way. multi-user stuff is working fine in another environment01:59
bigjoolssorry I can't help more :(01:59
adam_gcls02:00
adam_gwhat  is reponsible for /var/lib/juju/server.pem ?02:02
* thumper -> school run02:02
wallyworld__adam_g: that is generated by cloud init based on the ca-private-key in the environment settings as far as i know02:12
wallyworld__or ca-cert perhaps02:12
sinzuiDamn. I cannot upload public tools to hp02:16
sinzuiI can see my test from this afternoon, but now my creds don't work02:16
* sinzui uploads tools using the gui02:18
sinzuiOh something has cursed me. sync-tools fails, swift fails, js errors using Hp's gui02:23
* sinzui drinks more02:24
adam_gwallyworld__, cloud-config contains: http://paste.ubuntu.com/6338969/02:26
adam_gmongo is running: usr/bin/mongod --auth --dbpath=/var/lib/juju/db --sslOnNormalPorts --sslPEMKeyFile /var/lib/juju/server.pem --sslPEMKeyPassword xxxxxxx --bind_ip 0.0.0.0 --port 37017 --noprealloc --syslog --smallfiles02:26
adam_gbut02:26
adam_gOct 31 20:21:47 ewing mongod.37017[14138]: Thu Oct 31 20:21:47.025 [conn2326] end connection 10.246.8.3:37271 (0 connections now open)02:27
adam_gOct 31 20:21:47 ewing mongod.37017[14138]: Thu Oct 31 20:21:47.204 [initandlisten] connection accepted from 127.0.0.1:35146 #2327 (1 connection now open)02:27
adam_gOct 31 20:21:47 ewing mongod.37017[14138]: Thu Oct 31 20:21:47.205 [conn2327] ERROR: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate02:27
adam_g(^ from syslog)02:27
adam_gand02:27
adam_g2013-10-31 20:22:09 ERROR juju.state open.go:93 TLS handshake failed: x509: certificate has expired or is not yet valid02:27
adam_gcloud-init-output02:27
wallyworld__adam_g: sadly i'm not very familiar with issues pertaining to certificate generation etc.  i have no idea how to debug your issue. if you are around in about 4 hours, the folks from europe will come online and will be able to help a lot more02:29
wallyworld__the mechanics all seem ok, but the content must be wrong and i don't know why02:29
sinzuiI think Hp Cloud is in flames02:39
sinzuiI cannot eve talk to my deployed env, or create a new env02:39
sodrewallyworld: when you have time, can you help me with the cherry picking. I am getting an error saying revision 110 does not exist02:44
wallyworld__sodre: are you working from the same branch you pushed to lp?02:45
wallyworld__ 110. By Patrick Carlos 8 hours ago02:45
wallyworld__    Closes #1246827. GOOSE asks for swift.list to be in json format.02:45
_mup_Bug #1246827: swift List expects JSON output but does not pass format=json in http request <Go OpenStack Exchange:New> <https://launchpad.net/bugs/1246827>02:45
sodreyeah. that is what happened.02:46
wallyworld__in any case, so long as your current copy of the branch only has the fixes for that branch that's all that matters02:46
thumperwallyworld__: you firefighting?02:46
wallyworld__thumper: no, just helping on irc02:47
wallyworld__and doing a review02:47
thumperwallyworld__: work in progress that I'm considering landing ... https://code.launchpad.net/~thumper/juju-core/kvm-container-interface/+merge/19353302:47
thumperstart of the kvm bits02:47
sodreokay, maybe I need to make a new branch and check-pick from there.02:47
thumperwork I had in a pipeline02:47
wallyworld__thumper: that's a lot of green :-)02:48
thumpersure is02:48
thumperand here you just thought that I sat on my thumb all day02:48
wallyworld__sodre: no need to start again i don't think - the diff looks ok actually, so you must have removed the code02:48
wallyworld__thumper: well......02:49
wallyworld__no comment02:49
sodreyeah, got it :(02:50
sodre:)02:50
sodrethe code needs testing with pure Swift like canonistack or hp cloud, just to be safe.02:51
wallyworld__sodre: i tested with canonistack and it's ok02:53
wallyworld__after i made a change02:53
wallyworld__but the unit tests need fixing also02:53
sodrecool. I tested with radosgw and it works as well.02:53
wallyworld__thumper: just started; so for lxc, there's a golxc lib. no gokvm equivalent? also, container/interface.go contains "kvm" in the docstrings02:55
thumperhmm... yes no gokvm02:55
thumperI though we'd just wrap it in the container/kvm bit02:55
thumperit isn't complicated02:56
wallyworld__on the surface, it would be good to implement this consistently02:56
sodrewalyworld__: I fixed the unit test. and I've added the StatusNoContent  to requestdata.  let me know if you need anything else.02:56
thumpermuch simpler interface than lxc02:56
wallyworld__ok02:56
wallyworld__sodre: will do, thanks02:56
thumperthe container/lxc or container/kvm is the juju interface to the containers02:56
thumperso in that respect, it is consistent02:56
wallyworld__ok. will read more02:56
sinzuidoes anyone have an hp cloud envs that they can get the status of now02:57
thumperI'm not going to add a new top level project for the hell of it02:57
thumpernot yet, anyway02:57
sinzuioh brilliant, I think someone took away my access to hp while I was deploying02:58
thumperhaha02:58
sinzuiI am in the console and watching the feature disappear02:59
sinzuiCI is DEAD02:59
* thumper calls it a day a little earlier than normal03:00
thumpergiven the late night antics03:00
thumperhave a good weekend everyone03:00
wallyworld__sodre: because you have this : "-params.Add("format", "json")" in the diff, it looks like someone has already added that change in and you would now be removing it. so add it back toyour branch and re-push03:00
sodre:)03:00
wallyworld__sinzui: well that suck donkey balls :-(03:00
wallyworld__sinzui: want me to try and log in?03:01
sinzuiyeah. because someone not me may have just broken all juju deploys. that is to say I had to jack hammer the tools into place and I cannot verofy they work03:01
sinzuiwallyworld__, If you bootstrap on HP, do you get 1.16.203:02
wallyworld__sinzui: i'll look, just a sec03:02
sinzuioh, fuck I still need to copy those packages to the public PPA03:02
wallyworld__sodre: you want to remove 50+ fmt.Sprintf("%s", bodydata)03:03
sodreohhh... sorry03:03
wallyworld__np :-)03:03
sodrewhat do I do with bodydata ?03:04
wallyworld__sodre: well, i this case i think you can ignore it. this is just a test mock and we don't implement container acl, so we just want to return an ok response03:05
sodrealright I'll take away the entire ioutiol.ReadAll03:05
wallyworld__sinzui: my wallyworld login on hp cloud still have access to the accounts for the public bucket and also another account with compute resources etc03:05
wallyworld__sodre: what is the content of the body?03:06
wallyworld__sodre: maybe we want to just assert that looks sensiblw03:06
wallyworld__sinzui: did you want to use that for anything till your access can be sortedout?03:06
sodrewallyworld__: I think it is just the header with X-Container-Read03:07
sinzuiwallyworld__, I want confirmation that a bootstrap gets the tools I uploaded via the gui03:07
wallyworld__sinzui: ok, checking now03:07
sinzuiwallyworld__, have you deployed using the juju-public-tools region?03:08
wallyworld__sinzui: yes, the required url is baked into juju for 1.1603:08
wallyworld__so no need for tools-url or anything else03:09
sinzuihmm. I was told not to do that03:09
wallyworld__you were told wrong :-)03:09
wallyworld__well, i believe so03:09
sinzuiHey the console lets me see juju-scale test again and I can see my three machines are still up03:09
wallyworld__sinzui: was a reason given?the whole idea of hpcloud in 1.16 was to remove the need for public-bucket-url and tools-url ie make it config free. and that's also in the release notes03:10
sinzuiwallyworld__, hey I am in, I have access from the command line again03:10
wallyworld__\o/03:10
sinzuilog says it selected 1.16.2 for upgrade03:11
wallyworld__great03:11
sinzuiso maybe someone was messing with me or HP  got paralytic for 2 hours03:12
sinzui\o/ upgrade is perfect03:12
wallyworld__whoohoo03:13
sinzuiI guess in theory, I could run the script to republish the tools. It will tell me if I did something wrong03:13
sodrewallyworld__: I pushed the code to lp:~psodre/goose/radosgw-acl03:13
sodrenow I need to fix the swift-jason branch I just messed up.03:14
wallyworld__sodre: i see what may have happened - i didn't notice the prereq branch. can you please resubmit the mp and leave out the prereq. you can choose to keep history so existing comments are retained03:18
wallyworld__for some reason, the preview diff is now messed up also. hopefully resubmit will help03:19
sodreokay...03:19
wallyworld__sodre: in case you don't know, use the Resubmit proposal link03:22
sodreahhh03:23
sodreI really need to get used to lp03:23
wallyworld__it's good once you know all the features03:23
sodresorry, where is the resubmit03:23
wallyworld__top right03:23
sodreon the bug page ?03:24
wallyworld__no, the mp page03:24
sodregot it.03:24
sodreso no prereq.03:24
wallyworld__yep03:24
wallyworld__that's better03:25
wallyworld__except the json line is still there03:26
sodreargh.03:26
sodrehow do I see that ?03:26
wallyworld__look t the preview diff03:26
sodreokay okay...03:26
wallyworld__on the mp page03:26
wallyworld__i'd say you added it to get stuff working03:26
sodreI can take it out.03:27
wallyworld__sodre: normally it would be ok to leave in, but because someone else is supposed to have a fix in progress, it's best not to overlap03:28
sodreI am the one assigned the json bug03:28
wallyworld__oh?03:28
sodreyeah, sinzui set it to me.03:28
wallyworld__ok. it was discussed yesterday that someone in our team would start on it. but since you have the bug, go for it03:29
wallyworld__link the bug to your branch03:29
wallyworld__so now you have 2 bugs linked03:29
sodreI had a branch just for that bug03:29
sodreit is already linked.03:29
sodremaybe the best would be to approve/merge that first.03:29
sodrethen merge the radosgw-acl03:30
wallyworld__sure. that's the more "correct" way03:30
wallyworld__although for one line... :-)03:30
sodrei know03:30
sodreokay... let me just link the entire branch to both bugs.03:30
wallyworld__since you have the branch, propose it and i'lllook03:30
wallyworld__argh. whatever works :-)03:31
sodrealright its proposed and linked to the bug03:32
wallyworld__sodre: i've approved, thanks. next step is to set the commit message (usually copy the description) and mark as approved. then the landing bot will take over03:37
sodreokay. is that in the Merge Proposal page as well ?03:38
sodrecool03:39
wallyworld__yep03:40
wallyworld__sodre: update the descption to reference both bugs also :-)03:41
sodreis it just a matter of writing #XXXX ?03:41
sodreor is there a special markup ?03:41
wallyworld__If you write bug XXXXX it will be hyperlinked. I think lp:XXXX works also03:43
wallyworld__it's been a while so i can't recall with 100% certainty03:44
sodrealright. all done.03:46
wallyworld__right, so bug #XXXworks also :-)03:46
wallyworld__sodre: i've marked a approved at the top of the mp. it should land in trunk in about 5 minutes03:47
sodre:) that is so coo03:47
sodrecool03:47
sodreonce that is done, can I delete the branches ?03:48
wallyworld__you can delete them off your local disk yes. but not on launchpad03:49
wallyworld__you can always get them off lp again if needed03:49
sodreokay.03:49
wallyworld__sodre: merged already :-)03:49
wallyworld__you fixed two bugs. thank you03:50
sodre\o/03:50
wallyworld__now i'll update the dependencies in juju-core so your work gets included in the next release03:50
sodreI see. Do these changes ever make it back to saucy ?03:51
wallyworld__long story. they will go into juju 1.18 (next release). that will be available via a ppa. i don't believe we are allowed to put 1.18 in saucy backports03:52
sodreI see. I know that we had a release today, 1.16.2 ( or something) is that available through PPA as well ?03:53
wallyworld__yes03:56
wallyworld__if not now, then very soon03:56
wallyworld__release smoke testing happening as we speak03:56
sodrealright, I'll just tell people at work to update their juju version.03:57
wallyworld__if they want your fix, they will need to grab trunk and compile themselves03:58
wallyworld__we will be releasing 1.17 as a beta to iron out any issues prior to 1.1803:59
sodreGot it,  compiling juju with go is fairly straightforward as well. so it should not be an issue.03:59
wallyworld__sodre: just got the release email for 1.16.2. ppa is at https://launchpad.net/~juju/+archive/stable04:06
sodrethanks. I'll add that. I was looking forward to the MAAS/lxc fix04:08
rogpeppe1mornin' all07:41
=== rogpeppe1 is now known as rogpeppe
axwmorning08:04
rogpeppeaxw: you might be interested to have a look at some stuff i've been doing to make it easy (hopefully) to write charms in Go: http://godoc.org/launchpad.net/juju-utils/cmd/gocharm09:49
axwrogpeppe: looks cool :)10:19
rogpeppeaxw: thanks10:20
axwI like the thought of having go-gettable "charm helpers"10:20
axwmakes them feel a bit more first class10:20
rogpeppeaxw: did you see launchpad.net/juju-utils/charmbits/httpserver ?10:20
axwrogpeppe: didn't get that far yet, but I did see it in hte imports10:20
rogpeppeaxw: i'm trying to come up with a scheme that lets people build charms modularly10:21
rogpeppeaxw: it seems to be working ok so far, although i'm slightly concerned that people might find the abstractions hard to deal with10:22
axwrogpeppe: so that charmbits/httpserver package is used in a charm that is also the application?10:22
axwI mean.. service10:22
rogpeppeaxw: yes10:23
rogpeppeaxw: the idea is that you can write an entirely self-contained charm in Go if you want10:23
axwyup10:23
rogpeppeaxw: the awkward piece being you want to be able to tell upstart to run a piece of your charm as a service and you don't really want to make another binary for that10:24
axwyeah I was just thinking about that.. you haven't got to that part yet? I don't see anything to do with running the binary outside of a hook10:25
rogpeppeaxw: actually that bit is done10:25
axwah yeah10:26
axwI see now.10:26
rogpeppeaxw: see http://bazaar.launchpad.net/+branch/juju-utils/view/head:/charmbits/httpserver/server.go#L11210:26
rogpeppeaxw: and hook.Context.RegisterCommand10:26
rogpeppeaxw: there's a standup in 7 minutes if you fancy coming along BTW10:38
axwrogpeppe: sure, wife's out so I may as well10:38
axwta10:38
fwereade_mgzh, meeting10:47
mgzhta10:48
=== mgzh is now known as mgz
rogpeppefrickin' new hangouts11:25
=== BradCrittenden is now known as bac
rogpeppenatefinch: ping13:06
* fwereade_ has to go to the shop while it's open, bbiab13:08
sodre!on-call13:24
rogpeppe i like the fact that i can reboot and my local juju environment is still running just fine13:44
rogpeppei like the fact that i can reboot and my local juju environment is still running just fine13:44
* rogpeppe gets some lunch13:47
natefinchrogpeppe: let me know when you're back from lunch'13:55
=== BradCrittenden is now known as bac
abentleysinzui: When mysql dies for you, does mysql/1 go into an error state?14:27
sinzuiabentley, install error14:28
abentleysinzui: For me, it just went to 'error', not 'install-error', so I guess it's because Jenkins only has mem=2G.14:29
sinzuioh14:30
natefinchfwereade_: you around?14:36
fwereade_natefinch, hey dude, sort of14:37
fwereade_natefinch, explaining juju to anold colleague14:37
natefinchfwereade_: heh... possibly quick question (if not, that's ok).  The server API for set was already written, with part of the implementation having this comment:14:38
natefinch/ parseSettingsCompatible parses setting strings in a way that is14:38
natefinch/ compatible with the behavior before this CL based on the issue14:38
natefinch/ http://pad.lv/1194945. Until then setting an option to an empty14:38
natefinch/ string caused it to reset to the default value. We now allow14:38
natefinch/ empty strings as actual values, but we want to preserve the API14:38
natefinch/ behavior.14:38
natefinchfwereade_: this makes the API implementation retain the behavior of setting a value to "" causing the value to get unset.14:39
natefinchfwereade_: The comment makes it seem like that's on purpose... but that just totally breaks the expected functionality of set if we always go through the API, so I'm not really sure what the correct course of action is.14:39
fwereade_natefinch, I think we need parallel implementations for now, that's just a compatibility thing for the gui14:39
natefinchfwereade_: oh, the GUI, ok14:40
fwereade_natefinch, we want to express the cli functionality now14:40
fwereade_natefinch, and *that's* a job for aslightly neater ServiceSet call14:40
fwereade_natefinch, so we have halfachanceofoneday being able toset a bunch ofservice attributes transactionally14:40
fwereade_natefinch, eg, set charm and config at the same time14:40
natefinchfwereade_: so we  need two - the existing one for the GUI and a new one for the CLI14:41
fwereade_natefinch, yes please -- ask frankban if heeverstarted on the newserviceset thing14:41
natefinchfwereade_: cool, thanks for clearing that up14:42
rogpeppenatefinch: ping15:06
natefinchrogpeppe: howdy15:12
rogpeppenatefinch: fancy a chat about HA?15:12
natefinchrogpeppe: definitely15:12
rogpeppenatefinch: we could try G+ again - i've rebooted, so it *may* be ok again15:13
natefinchrogpeppe: might as well give it a second change15:13
natefinchchance15:13
rogpeppenatefinch: https://plus.google.com/hangouts/_/calendar/bWFyay5yYW1tLWNocmlzdGVuc2VuQGNhbm9uaWNhbC5jb20.09gvki7lhmlucq76s2d0lns804?authuser=115:13
fwereade_bbl16:15
sinzuirogpeppe, CI is failing for juju-core. One reason relates lxc-provisoner has no credentials for the user attribute. The test is not using lxc though. We are starting a caonistack instance. Also note that juju 1.16.0 client got the 1.16.2 agent. Do you have any insights https://pastebin.canonical.com/99724/16:25
rogpeppesinzui: on a call currently - will get back to you16:30
rogpeppeneed to reboot again :-(16:44
sinzuirogpeppe, I can elaborate about the error. I don't think the juju version is the issue because we see the same messages when using 1.16.2. The issue may be that the juju client is in a precise lxc bootstrapping precise on canonistack.16:50
sinzuiwe don't see this issue running saucy clients/client not in lxc16:51
rogpeppesinzui: looking now16:51
rogpeppesinzui: what is the CI actually trying to do?16:52
rogpeppesinzui: that error message is coming from the openstack provider16:53
sinzuirogpeppe, It is verifying I can deploy a simple stack to canonistack16:54
sinzuirogpeppe, jenkins in canonistack created an lxc to build juju-core tip, then from in the lxc, began bootstrapping canonistack, hp, and aws envs16:56
rogpeppesinzui: so the bootstrap worked ok?16:57
sinzuirogpeppe, no, bootstrap returned an error16:58
rogpeppesinzui: hmm, weird, then how come the bootstrap node is working ok?16:58
rogpeppesinzui: what error did bootstrap return?16:58
sinzuiabentley, what error did the bootstrap return for CI of canonistack?16:59
rogpeppesinzui: so the bootstrap returned an error, but it successfully started an instance running the machine agent? from the error returned, that seems quite odd, as the error should have stopped it bootstrapping before it got anywhere near that stage.17:01
sinzuirogpeppe, me network/ssh is busted. I cannot sshuttle this hour. I think I need to reboot to get into my 3rd test of this scenaro17:02
abentleysinzui, rogpeppe: bootstrap didn't error, but after bootstrap, nothing worked.  Not "status", not "deploy".  It just hangs.17:07
abentley(And occasionally emits ERROR TLS handshake failed: EOF)17:07
rogpeppeabentley: ah, that makes more sense17:07
rogpeppeabentley: could you paste (privately) the contents of the .jenv file for the environment? (elide private keys if you care)17:08
abentleyrogpeppe: https://pastebin.canonical.com/99730/17:10
abentleyrogpeppe: I can also add your public ssh key to the bootstrap node so you can log in, if you like.17:11
rogpeppeabentley: that would be useful, thanks17:11
sinzuiabentley, rogpeppe my third test did eventually let me in. all is good. I will go downgrade to 1.16.0 again17:11
abentleyrogpeppe: You should be able to ssh to ubuntu@10.55.60.105 now.17:13
rogpeppeabentley: thanks. does that still have the problem?17:14
abentleyrogpeppe: Yes.17:14
abentleysinzui: I am experiencing this issue with saucy.17:17
sinzuiabentley, I am not...17:17
sinzuiabentley, I downgraded to 1.16.0 on precise in an lxc. I deployed and got the 1.16.2 agent. I has just started. I am now deploying services17:18
abentleysinzui: This issue is not really related to juju CI.  I'm trying to create a jenkins node where I will eventually do CI.  I'm doing this because the existing jenkins node has 2G and that may not be enough.17:18
abentleyBut this is really just juju bootstrap not leading to to a working environment on canonistack.17:19
sinzuiabentley, ha ha, i just hit the max security groups/instances again17:20
abentleysinzui: That was fast!17:20
sinzuiabentley, I will tear this down. I don't think we need it since I misunderstood the scenario17:22
sinzuiabentley, or maybe no...I think missed the step where I go the the lxc. my machine is now angry that I have an out of date package installed17:25
sinzuialso. I need to work from OS X for sometime today. Once again I botched the homebrew pull request. I will never use githubs edit feature again. I will work with the real code and real tests17:27
sinzuinow apt is angry. I think I need to do one thing at a time to achieve something17:29
rogpeppeabentley: i can't connect to that machine17:33
abentleyrogpeppe: Does it refuse to authenticate you or can you not even connect to it?17:42
rogpeppeabentley: connection timed out17:42
abentleyrogpeppe: do you have your .ssh/config set up to allow you to ssh into canonistack machines?17:43
abentleyrogpeppe: I just sshed in successfully.17:43
rogpeppeabentley: ah, probably not17:44
abentleyrogpeppe: the crucial thing is to have chinstrap act as a proxy.17:45
rogpeppeabentley: sample config?17:45
abentleyrogpeppe: https://pastebin.canonical.com/99741/17:46
rogpeppeabentley: bingo!17:47
* sinzui interesting. githubs dimensions aren't broken in safari. Just chromium18:12
rogpeppeabentley: is the environment working now?18:13
rogpeppeabentley: i think i know what your problem was18:13
abentleyrogpeppe: Yes, it's working now.18:14
rogpeppeabentley: ha18:14
rogpeppeabentley: so there's an easy fix:18:14
rogpeppeabentley: run juju status18:14
abentleyrogpeppe: But juju status doesn't work.18:15
abentleyrogpeppe: I does now, but it didn't.18:15
abentleys/I does/It does/18:15
rogpeppeabentley: really? it worked for me when i copied your jenv file to your instance and ran juju status18:15
rogpeppeabentley: and that caused the secrets to be pushed to the environment which caused everything to start working18:16
abentley<abentley> sinzui, rogpeppe: bootstrap didn't error, but after bootstrap, nothing worked.  Not "status", not "deploy".  It just hangs.18:16
abentley(And occasionally emits ERROR TLS handshake failed: EOF)18:16
rogpeppeabentley: hmm, i wonder if that's an addressing problem18:16
rogpeppeabentley: where were you trying to run juju status from?18:17
abentleyrogpeppe: IME, that's what you get when the bootstrap node isn't responsing to API requests even at the http level.18:17
abentleyrogpeppe: I was running status from this laptop I'm typing on.18:17
rogpeppeabentley: the bootstrap node was responding to API requests - i have a feeling your juju client just had no connectivity to the bootstrap node18:17
rogpeppeabentley: but... you say it works now?18:18
abentleyrogpeppe: IME when there's no connectivity, nothing happens at all, not " ERROR TLS handshake failed: EOF"18:18
abentleyrogpeppe: I did restart sshuttle just now.18:19
rogpeppeabentley: i wonder if was an issue with that18:19
abentleyrogpeppe: I guess it's possible.  I took the "ERROR TLS handshake failed: EOF" messages as an indication that the sshuttle tunnel was working.18:20
rogpeppeabentley: basically, the API server seemed to be running just fine, which makes me think that the problem was elsewhere.18:20
rogpeppeabentley: if the tunnel was playing up, you might easily get an error like that (which is from the TLS negotiation taking place *within* the ssh tunnel)18:21
abentleyrogpeppe: When I restarted, I switch to using 10.55.60.105 itself as the tunnel endpoint.  I had previously been using 10.55.32.48.  Normally, that's not a problem, but these machines are in different regions.18:23
abentley10.55.60.105 is lcy01, 10.55.32.48 is lcy0218:24
rogpeppeabentley: ah, so that was the problem?18:24
abentleyrogpeppe: Yes, I had the same symptoms when I switched back to 10.55.32.4818:24
rogpeppeabentley: great.18:24
rogpeppeabentley: if you reported a bug, i guess we can mark it as invalid...18:25
rogpeppeabentley: we should probably fix things so that the provisioner doesn't constantly fall over while waiting for a valid environment, i guess18:25
rogpeppeabentley: actually, that should be fixed in trunk already18:26
abentleyrogpeppe: I didn't file a bug, but the whole episode only increases the importance of bug #1224057 to me.18:26
_mup_Bug #1224057: Juju needs more than SSH access <addressability> <canonistack> <improvement> <ssh> <juju-core:Triaged> <https://launchpad.net/bugs/1224057>18:26
rogpeppefwereade_: current status of my HA discussion with nate: https://docs.google.com/a/canonical.com/document/d/1hGa2PNz6JyGFc7FjA-gX2_UnXRUGAZbS8O9TiS51bl8/edit18:28
rogpeppefwereade_: you'll probably want to bikeshed a bit on names etc18:29
abentleysinzui: Has there been a bug reported that 1.16.0 deploys agent 1.16.2?18:32
* sinzui no18:32
* sinzui abentley: I know version mismatch is discussed in bugs, but I don't see a specific bug about the mismatch18:32
rogpepperight, that's me done18:35
rogpeppehappy weekends all18:35
abentleyrogpeppe: thanks!18:41
abentleysinzui: Bug #124723218:44
_mup_Bug #1247232: Juju 1.16.0 deploys agent version 1.16.2 <juju-core:Triaged> <https://launchpad.net/bugs/1247232>18:44
sinzuithank you abentley19:18
hazmatjam, how do we trigger the support for untrusted certs?19:20
jamhazmat: set "ssl-hostname-verification: false" in the environment config.19:22
hazmatah.. found it. ssl-hostname-verification19:22
hazmatjam, thanks19:22
jamrogpeppe1: if you're around https://codereview.appspot.com/2094004319:23
jamIt turns out that Uniter didn't share the common code that you fixed to use the cached addresses19:23
rogpeppe1jam: oops. looking.19:52
jamrogpeppe1: not really your fault, the code *should* have been shared19:52
abentleysinzui: I am seeing a bug deploying wordpress on the local provider (on precise): https://pastebin.canonical.com/99751/19:58
rogpeppe1jam: reviewed20:00
jamrogpeppe1: it doesn't include CACert because Uniter doesn't use it20:01
jamUniter grabs APIAddresses to pass to the hook context20:01
jambut it doesn't give them the cert20:01
rogpeppe1jam: hmm, maybe it should20:01
rogpeppe1jam: i think we *should* pass the cert to the hook context (i think there's an existing issue about that)20:01
rogpeppe1jam: so i think it's worth providing in the API so we can easily do that later20:02
rogpeppe1jam: but don't bother if it's a hassle20:02
jamrogpeppe1: when it comes to that point, then we can easily move the function from Addresser to APIAddresser, I'd like to keep the change focused20:02
rogpeppe1jam: ok20:02
jamrogpeppe1: I'm not worried (particularly much) about the memory overhead. Just that every place that used to include Addresser now has to grow 2 lines to do the same thing.20:03
rogpeppe1jam: there are only two such places AFAICS20:04
abentleysinzui: from cgroup-lite.log: https://pastebin.canonical.com/99753/20:05
rogpeppe1jam: i kinda think it would make both of those places more readable (more explicit that they make both state and API addresses available)20:05
rogpeppe1jam: but i don't mind much - i just had to think quite hard when reading the code in common20:05
jamrogpeppe1: do you think they should be renamed to StateAddresser and APIAddresser then ?20:11
abentleysinzui: The problem appears to be cgroups-lite being upgraded.  If I remove the package manually, the installs complete successfuly.20:11
rogpeppe1jam: that would be inclination, yes20:11
rogpeppe1s/be/be my/20:11
abentleysinzui: It affected both mysql and wordpress.20:12
abentleysinzui: I suspect removing apt-get upgrade from the install scripts would also fix it.20:12
sinzuiabentley: I am still swimming in the ramifications of this news20:14
sinzuiabentley: Does this relate to cloud-archive?20:15
abentleysinzui: I don't know if it's packaged there.20:15
abentleysinzui: The cloud archive is an apt source in the lxc containers.20:18
sinzuiI see20:19
abentleysinzui: I do not see groups-lite in http://ubuntu-cloud.archive.canonical.com/ubuntu/pool/main/c/20:19
* sinzui yep, that is where I am20:19
abentleys/groups-lite/cgroups-lite/20:19
sinzuiI wonder if a dep in the archive uses it though20:19
abentleysinzui: I bet it's installed in the cloud images, but not an up-to-date version.20:20
abentleysinzui: It was attempting to upgrade it, not to install it.20:20
=== gary_poster is now known as gary_poster|away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!