/srv/irclogs.ubuntu.com/2014/03/04/#maas.txt

=== CyberJacob is now known as CyberJacob|Away
rvbagmb: ping01:16
gmbrvba: Did you just ping me and then ask me out loud?01:17
jtvYes.  Yes, he did.01:17
rvbagmb: ping!01:20
gmbrvba: bzr shelve --all; bzr pull; bzr unshelve01:59
rvbarvb@leaf:~/canonical/api-power-type$ bzr pull ../maas02:00
rvbabzr: ERROR: These branches have diverged. Use the missing command to see how.02:00
rvbaUse the merge command to reconcile them.02:00
rvba^ lie02:00
roaksoaxrvba: o/02:32
roaksoaxbigjools: o/02:32
roaksoaxbigjools: how are things going? How's the progress?02:32
roaksoaxanything I can look at?02:32
bigjoolsroaksoax: slow02:33
rvba\o roaksoax02:33
roaksoaxbigjools: can you or one of the team please review the UEFI stuff?02:33
bigjoolsroaksoax: gavin did02:34
rvbaroaksoax: question for you: why isn't this returning anything? http://paste.ubuntu.com/7030441/.  Looks like the beta1 ephemeral for trusty hasn't been released yet…?02:34
roaksoaxbigjools: ok great02:35
roaksoaxrvba: looking02:35
rvbaTa02:35
roaksoaxrvba: can you try daily;'s? that's weird trusty ephemeral were available02:36
roaksoaxsmoser: ?02:36
roaksoax/query/win 1002:44
rvbaroaksoax: I tried with the daily url but I still get no results.02:44
roaksoaxrvba: maybe there's an error somewhere02:45
roaksoaxor maybe something happened02:45
rvbaI don't know. http://maas.ubuntu.com/images/ephemeral/releases/trusty/ says alpha-2 is there but not beta-102:46
roaksoaxrvba: so images have not yet been generated then02:48
rvbaroaksoax: any idea when this is supposed to happen then?02:48
roaksoaxrvba: nope, but will lookinto that tomorrow02:48
rvbaOkay, ta.02:48
Settitejtv? roaksoax? either of you around?03:26
=== edamato is now known as edu-afk
jtvSettite: hi, just out getting lunch.  We're a bit pressed for time on this end.03:53
SettiteI know. Just need quick help manually uninstalling MAAS03:54
bigjoolsSettite: you might want to ask in #ubuntu-server as this is a dpkg problem not a maas problem03:55
SettiteAlright03:55
bigjoolsalthough03:55
SettiteDidn't realize that03:55
bigjoolsthe  maas package has a problem, but the result of the problem is a dpkg problem :)03:55
bigjoolsbasically the failed install is preventing removal03:56
SettiteI will hit up #ubuntu-server first and see where i can get04:02
=== CyberJacob|Away is now known as CyberJacob
mwhudsonbigjools: has anyone talked about running maas on arm64 yet?04:45
bigjoolsmwhudson: not that I heard04:47
bigjoolsare you talking deploying or running on?04:47
mwhudsonbigjools: deploying on04:47
mwhudsonbigjools: is that even a sensible question, or does it depend on how a particular device boots/does ipmi/whatever04:48
mwhudson?04:48
bigjoolsmwhudson: well AFAIC there's no difference to arm04:52
bigjoolsuboot has to tftp a specific location to get the right loader04:52
mwhudsonright04:52
SettiteSo in #ubuntu-server they told me to remove the entries in /var/lib/dpkg/status for MAAS and just install it again... to me that doesn't seem right.05:11
SettiteOr am i missing something/05:11
Settite?05:11
bigjoolsuhm05:11
bigjoolsI am no expert so try it05:12
SettiteI will and report the results05:12
=== Settite is now known as Lord_Set2
=== CyberJacob is now known as CyberJacob|Away
Lord_Set2bigjools: That method worked FYI to reinstall.08:29
Lord_Set2The MAAS installer found some of the old stuff but regenerated passwords fine and migrated everything else08:30
Lord_Set2No issues yet08:30
Lord_Set2So I got some new dell blade servers to play around with and test with MAAS09:01
Lord_Set2Will be interesting to see how they enlist and commission09:01
Lord_Set2They are Dell C6100s09:02
Lord_Set22 of them with all intel quad core 5600 series processors, 3 of them with AMD 6-core processors. 192GB of ram in each.09:02
jtvall otp here :)09:03
Lord_Set2otp?09:03
jtvOn The Phone.09:03
Lord_Set2Oh09:03
jtvReference for TLAs: http://xs4all.nl/~jtv/gtf/09:04
Lord_Set2fml, with a fresh install of the daily maintainers build of MAAS it is still having ilo/ipmi detection problems09:05
Lord_Set2I watched the boot of one of the servers and it isn't able to open the device at /dev/ipmi0 or /dev/ipmi/o or /dev/ipmidev/009:06
Lord_Set2But I am able to access to control the servers via ipmipower manually09:07
Lord_Set2*access and controll09:07
Lord_Set2control09:07
bigjoolsLord_Set2: good to hear09:10
bigjoolsthe first thing, not the recent thing :)09:11
Lord_Set2lol09:11
bigjoolsso the ipmi things are actively getting looked at, they will get a fix soon, maybe in a day or two09:12
Lord_Set2Alright. I guess for now I will manually boot the servers between installation phases. Should this cause any issues in the OS install?09:13
bigjoolsno09:17
Lord_Set2Awesome and thanks.09:17
bigjoolshttps://bugs.launchpad.net/bugs/1287512 is prob the bug09:17
ubot5Ubuntu bug 1287512 in MAAS "OCPv3 roadrunner detects IPMI as 1.5, which isn't supported." [Critical,In progress]09:17
Lord_Set2I don't think so. This isn't detecting any IPMI at all at the end of the enlistment.09:19
Lord_Set2Current errors in maas.log09:24
Lord_Set2http://pastebin.ubuntu.com/7032086/09:24
bigjoolsLord_Set2: what client is connecting when it does that?09:26
bigjoolsit's basically not authed09:27
Lord_Set2I am logged in with 2 different current API keys09:27
bigjoolsis this the api cmd line client?09:27
bigjoolsyou need to re-login09:27
Lord_Set2Yes09:27
bigjoolsyou deleted your install and lost the auth keys09:28
Lord_Set2I did logout of the old logins and re-logged in with the newly generated keys09:28
Lord_Set2Those are the ones currently logged in09:28
bigjoolsright we're all EODing09:30
Lord_Set2I am just trying to figure out if it is a configuration issue or a bug I should report09:30
bigjoolsyou need to log in again09:31
Lord_Set2Ok I will09:31
Lord_Set2More good news... MAAS loves the Dell C6100 blades.09:57
Lord_Set2No issues with ipmi detection or enlistment at all09:58
Lord_Set2If anyone is still available... how difficult is to to modify the installation of Ubuntu via MAAS to install LAMP as part of the base install?11:38
smoserrvba, why do you care about something called "beta1" ?13:24
smoserplease don't get stuck on names. i'm sure we can/should get a newer thing there, but why are you explicitly looking for something named 'beta-1' ?13:24
smoser:q13:34
=== CyberJacob|Away is now known as CyberJacob
manjirihello. I replaced /var/lib/maas/tftp/amd64/generic/precise/install/* by passing a different MAIN_ARCHIVE to import-pxe-files. The intent was to install Ubuntu 12.04.3 (3.8.0-29-generic). MAAS still install 12.04.4 (3.2.0-59-generic). Any idea what I need to do differently?19:37
Lord_Set2So... any specific reason why nodes are prompting for a password when I have had a ssh key generated and trying to ssh from the maas controller?20:33
bigjoolsLord_Set2: you need to alter preseeds or pass cloud-init userdata for post-install actions22:07
roaksoaxmanjiri: 12.04.4 is now default so there's really nothing you can do there22:07
bigjoolshey roaksoax22:07
bigjoolsLord_Set2: is your key registered in maas for the same account that you used to start the node and are now sshing with?22:08
roaksoaxbigjools: howdy!22:08
roaksoaxbigjools: early start today?22:10
bigjoolsmeeting22:10
bigjoolsthat is if the other party shows up :)22:10
roaksoaxhaha22:10
Lord_Set2bigjools: yes, I ended up modifying the preseed master for now to use a static user/pass across all nodes22:16
bigjoolsurgh22:17
bigjoolsthat's horrible22:17
Lord_Set2I agree but no choice right now22:26
bigjoolsroaksoax/jhobbs: is this related to any of your recent work? https://bugs.launchpad.net/bugs/128782822:26
ubot5Ubuntu bug 1287828 in MAAS "IPMI power driver setting is reset/overriden by commissioning" [Undecided,New]22:26
bigjoolsLord_Set2: can you check that once you are in, you can see the public key in they ubuntu user dir?22:31
bigjoolsthe*22:31
bigjoolsyou *are* sshing with ubuntu@ right?22:31
bigjoolsas that is the default user name22:31
jhobbsbigjools: i don't think so, i think that's always been the behavior22:33
jhobbsbigjools: ipmi autodetect, when it runs during commissioning, will supply all of the settings it applies/discovers back to metadataserver22:35
jhobbsbigjools: bigjools i think the bug they reference as the underlying reason for needing to do so (autodetect doesn't work) should be fixed by recent work though22:36
bigjoolsjhobbs: well we autodetct in enlistment, but didn't think we did it during commissioning22:43
bigjoolsso I am surprised at the behaviour22:43
jhobbsbigjools: yup, runs both times.  i'm still not 100% sure why it has to run during commissioning. roaksoax explained it at one point but it's not coming to the top of my head22:44
bigjoolsjhobbs: yeah it doesn't seem right to me at all22:45
* bigjools waits for roaksoax too :)22:45
jtvMaybe because the "commissioning snippets" infrastructure got re-used for enlistment?22:45
jhobbsit's good that it runs during enlistment, so we have the power parmeters to use to turn it on for commissioning22:49
manjiriroaksoax: is the preseed config used with the "fast installer"?22:52
jhobbsi guess one case autodetect in commissioning is useful is if the user manually added the nodes, but didn't add power info, and then manually powered on?22:55
jhobbsmaybe commissioning ipmi autodetect should only run if power isn't configured for the node22:55
bigjoolsmaybe22:59
roaksoaxmanjiri: there are different preseeds used23:04
roaksoaxbigjools: me what how when?23:04
bigjoolsroaksoax: que?23:04
bigjools:)23:04
roaksoaxbigjools: thge bug above should be fixed with the recent changes that just landed23:05
bigjoolsroaksoax: elmo's bug about overwriting power settings?23:05
bigjoolshttps://bugs.launchpad.net/bugs/128782823:05
ubot5Ubuntu bug 1287828 in MAAS "IPMI power driver setting is reset/overriden by commissioning" [High,Triaged]23:05
roaksoaxbigjools: yeah, since commissioning does the discovery again regardless23:05
bigjoolsroaksoax: so what changed?23:06
manjiriroaksoax: Which preseed config should I modify to see if I can specify a particular kernel-image during fast-installation?23:06
roaksoaxbigjools: we removed the aut0o-detect option23:06
roaksoaxbigjools: and improved the lan_2_0 detection23:06
roaksoaxbigjools: so it will either be lan_2_0 or lan23:06
roaksoaxand in this case, enlistment will detect lan_2_0 and he wont need to change it manually23:07
bigjoolsroaksoax: in either case I think we should not overwrite user settings23:07
roaksoaxbigjools: there's no way for us to determine that23:07
bigjoolsthere's always a way :)23:07
roaksoaxmanjiri: /etc/maas/preseeds/user_data23:07
roaksoaxbigjools: not really, so enlistment and commissioning both modify and update IPMI settings regardless of the user manually changing the setting23:08
manjiriroaksoax: curtin_userdata?23:08
roaksoaxbigjools: i.e. enlistment happens, then the user manually enters user/password, and in commissioning, whatever was entered by user, gets overwritten if maas can create user/pass23:09
roaksoaxmakes sense?23:09
roaksoaxmanjiri: yes! sorry23:09
jhobbsroaksoax: what if commissioning only made IPMI changes if the node didn't already have IPMI configuration?23:09
bigjoolsroaksoax: right, so I am saying we need to change that, we should never overwrite what the user put in unless they ask for it23:09
bigjoolsthat is the crux of elmo's bug23:09
bigjoolssee my last comment on it23:09
manjiriroaksoax: What format is that? How can I effectively add base-installer/kernel/image config?23:10
roaksoaxbigjools: so how can we determine wether e user changed this settings or not?23:10
roaksoaxmanjiri: it copies the kernel image being loaded23:10
roaksoaxso that would be 12.0423:10
roaksoaxno .01/0223:10
roaksoaxyou woul,d need to upgrade kernel23:10
roaksoaxin postinst23:10
roaksoaxi guess23:10
bigjoolsroaksoax: we can detect it on the server if we are able to see that the api request came from commissioning23:11
roaksoaxjhobbs: we cant.. it is based -on the sabe assumption. say IPMI user was created during enlistment, and user manually changes the password of the maas user, then on commissioning, it has no way of knowing that, and will generate new user/pass combination.23:12
roaksoaxjhobbs: and covers cases where things fail during enlistment23:12
manjiriroaksoax: what is a source of information that will help me understand the sentence "you would need to upgrade kernel in postinst". What context is postinst - so that I may google for more info23:12
jhobbsbigjools: it's too late then, the ipmi settings have actually changed then, and if the API doesn't update, the saved settings will be wrong23:12
bigjoolsroaksoax: perhaps you can comment on the bug then please, because it seems simple enough to me :)23:12
bigjoolsjhobbs: point23:12
bigjoolsso the preseed needs to prevent this in the first place23:12
bigjoolsI need to make coffee for the sprinters, back in 10m23:13
roaksoaxbigjools: hold on. If enlistment creates user/password, it works, but user changes these settings manually, how can commissioning successfully say "don't try to detect IPMI again because the user has changed user/password"?23:13
bigjoolsthey are looking at me like they are about to kill23:13
jhobbsroaksoax: we have to change the commissioning script to not call ipmi-autodetect if there is already ipmi credentials for the node23:14
bigjoolsthat ^23:14
jhobbsroaksoax: that way, no matter where they came from - enlistment or manual user entry - they aren't changed except via another enlistment, or via another manual user edit23:14
bigjools+123:14
roaksoaxjhobbs: right, but we *want* to change the password if it came from enlistment23:14
bigjools+1 again23:14
jhobbsroaksoax: why?23:14
bigjoolsthis just affects commissioning23:15
roaksoaxjhobbs: because enlistment is unsecure23:15
bigjoolswith enlistment, there is no node in maas23:15
roaksoaxit is anynomous add23:15
roaksoaxjhobbs: the noed was added to maas withpower parameters anonymously23:15
* bigjools goes barista-ing23:16
manjiriroaksoax: I was able to specify the specific kernel by modifying the preseed_master config. How can I get the same functionality for fast installer?23:16
roaksoaxin commissioning it actually authenticates with the server and we can trusty that the accepted the node, and new credentials are being generated23:16
roaksoaxmanjiri: i don't know unfortunately. this might help astokes.org/using-fastpath-installer-maas23:16
jhobbsroaksoax: ok - i think that makes sense23:17
roaksoaxmanjiri: see related posts / configuring vlans in MAAS node deployment or customizing fast path (curtin) installations in MAAS23:17
roaksoaxjhobbs: so the problem is, what if the user manually changes the password on the BMC and updates MAAS< and then it breaks things?23:18
jhobbshmm, maybe not, i don't really get where we can start trusting vs. where we can't23:18
jhobbswe can trust from commissioning because it has the API key that we gave via the PXE boot process, whereas anyone with IP access to MAAS can spam and enlist nodes23:19
roaksoaxjhobbs: correct23:19
roaksoaxjhobbs: this is why we generate a second set of credentials (another password) during commissioning, because those are the credentials that we know will be used for deployment23:20
manjiriroaksoax: http://maas.ubuntu.com/docs/development/preseeds.html says that there is a preseed_xinstall. But my MAAS controller does not have that file. (Only preseed_master is present). Any idea?23:24
bigjoolsdocs are probably for a newer version than what you have installed23:25
manjiribigjools: ah! thanks23:27
roaksoaxmanjiri: that has changed in latests23:32
roaksoaxcurtin is more recent than xinstall23:32
roaksoaxbigjools: so back on the above... I don't think we can effectively determine what to trust or not on enlistment/commissioning23:33
roaksoaxbigjools: i don't mind having commissioning not trying to re-do ipmi discovery23:33
bigjoolsroaksoax: I think that is best23:33
roaksoaxbigjools: but that would defeat the purpose of not trusting what came from enlistment to trusting what came from commissioning23:33
bigjoolsalthough we may have a certain dictator arguing the opposite at some point23:34
roaksoaxbigjools: well, we went thorugh this long ago with smoser23:34
roaksoaxand we both agreed it was better to do this23:34
roaksoaxin both cases23:34
bigjoolswell elmo has a valid point don't you think?23:34
jhobbsthere's nothing secure about ipmi and pxe booting23:34
roaksoaxbigjools: i do believe he does23:35
roaksoaxbigjools: wouldn't it be better to have someone to determine whether the changes were made by a user or by enlistment?23:35
roaksoaxto have something*23:35
bigjoolsmy thoughts are that the preseed template can turn on the commissioning detection if it knows there's no power set yet23:35
bigjoolsanyway - I'll let you guys talk it over, we have to sprint here!23:37
roaksoaxi'll wait for smoser  to chip in23:42
roaksoaxi'23:42
roaksoaxi'm out for lunch ... or should I say dinner23:42

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!