[00:24] thumper, menn0: trunk also kills network. I've filed a bug: https://bugs.launchpad.net/juju-core/+bug/1349635 [00:24] <_mup_> Bug #1349635: Destroying a manually provisioned lxc container breaks network configuration on host computer. [00:42] waigani: agh, I got that too. I think worker/networker may be screwing with things that it shouldn't. [00:43] waigani: did you bootstrap your host? [00:43] I think that's what caused it for me. [00:43] pretty sure destroying a container has nothing to do with it [00:43] axw: oh really? [00:43] axw: so just "juju bootstrap" ? [00:44] waigani: bootstrapping the manual provider, yeah [00:44] ha [00:44] that's even worse [00:44] not entirely sure tho [00:45] I haven't attempted to narrow it down [00:45] I have to put digging into it on hold for now [00:59] thumper: can you mark bug 1349312 as in progress and assign it to someone so we can see it's being looked at? [00:59] <_mup_> Bug #1349312: Machine stuck in "down" state because "an upgrade is in progress"

[01:01] * wallyworld bbiab [01:21] thumper: i've been trying to carve up my names change [01:21] but it's hard [01:21] state.FindEntity requires that we parse the tag to a Tag [01:21] and that needs to happen in every api call [01:22] and also every api call also calls a common.AuthFunc [01:22] so I can carve my change up into just the change to state.FindEntity which requires parsing in every api endpoint [01:22] or I can carve it up into a change to common.AuthFunc to take a Tag [01:23] there is a lot of crossover in each PR [01:23] maybe I should just keep it together in one [01:23] i'm down to a few failing tests in the ./apiserver/... packages [01:23] which are all symtoms of the same thing; returning an error that isnt common.ErrPerm [01:23] and I've mostly got those fixed [01:46] katco: i moved you lxc card back to review until the merge to master is also done [01:46] ie until both branches of the bug are marked fix committed [02:07] wallyworld: thumper axw https://github.com/juju/juju/pull/411 [02:07] ^ this one is blocking my names branch [02:08] looking [02:09] davecheney: i don't have enough context - are you going to add real authenticators later? [02:09] likewise [02:09] davecheney: is the intention not to assign something meaningful to getCanWrite/getCanRead? [02:10] axw: no idea [02:10] but that logic was a time bomb [02:10] generally our api server endpoints need authenticators [02:11] the ones there were placeholders for sure [02:11] pending the real ones being added [02:11] i'm not sure it's valid to remove them and all the associated logic [02:12] maybe that's a question thumper needs to answer as you guys know the roadmap better than us [02:12] wallyworld: those checks are noops [02:12] when they are removed the code still passes [02:12] sure, now they are [02:12] when they are not noop's someone can add them back [02:12] but right now they are actively doing the wrong thing [02:13] like authenticating invalid tags [02:13] right now, they are saying "we do not offer authentication" [02:13] worse [02:13] "we say YES to anyone" [02:13] or anything [02:13] or "" [02:13] IMO they are worse than useless [02:15] isn't this wip though? [02:15] no one is using this yet [02:15] wallyworld: right, when they do we can revert this change [02:15] that is what source control is for [02:15] but given how much time we generall have to go back and clean up messes [02:16] i'd say the chances of that happening anytime this cycle are pretty low [02:16] i guess i'm just not across the roadmap/plans for usermanager so can't really offer an authorative comment [02:17] where's thumper when you need him [02:17] wallyworld: after a week in NZ with thumper [02:17] it'll be onxy doing the work [02:17] matty and green are moving back to the other thing they normally do [02:18] sure, but maybe he plans to add authentication for usermanager next week [02:18] that's the sort of planning i hav no visibility to [02:18] wallyworld: then we can revert this change then [02:18] but after spending a week in NZ with thumper [02:18] if the code is removed, the behaviour is the same as now right, everything gets through? [02:19] i an pretty confident that we're not working on that next week [02:19] wallyworld: yes, the athentuication logic is currently hard coded to accept any string and give it the thumbs up [02:19] so, why remove it? there's no change in behaviour after the removal, ahd the dummy auth is clearly labeled [02:20] and avoids code churn [02:20] wallyworld: because the logic only athenticates tags, not username strings [02:20] the tag commonly passed by the api is invalid [02:21] but the logic doesn't check that [02:21] the dummy auth code is wrong [02:21] because it always says true to anything [02:21] even when it is an invalid tag [02:21] but agian, there are no tests to even check this [02:21] I want to remove this code, it was a mistake [02:22] ok. so with the stuff removed, we will still allow invalid tags though just like now. why not jusy fix the dummy auth code? [02:22] then everything that uses it will benefit [02:22] wallyworld: i am fixing it [02:22] this is pulled out of my larger strings -> names.Tag branch [02:22] do you want to review a 40 line change, or a 3,000 line change :) [02:22] ah ok, sorry, as ai said, i have no contest for this [02:23] context [02:23] s'ok [02:23] the problem is that an invlida tag shouldn't even make it this far into the api [02:23] so long as "you" promise to fix it later, i'll got and +1 :-) [02:23] it's also complicated by the fact that the usermanager accepts both a username string and a tag [02:23] (a tag as a string that is) [02:24] yet, canRead/canWrite only validate the tag [02:24] which is completely broken [02:24] and only works currently because canRead("") returns true [02:24] even though "" is not a valid tag [02:24] yeah, sounds messy [02:24] in summary, the logic is all fucked up and these dummy functions are actively not helping [02:24] so, out they go [02:24] ok :-) [02:25] ta [02:25] anyone else for a second look ? [02:25] (i'll wait for thumper, he won't be far away) [02:29] axw: got time to talk? [02:30] wallyworld: sure [02:30] tanzanite hangout? [02:30] standup hangout [02:30] yup [02:31] davecheney: sup? [02:31] thumper: https://github.com/juju/juju/pull/411 [02:32] ^ from my larger names change [02:32] see the pasionate discussion I put forth in the backscroll [02:32] kk [02:34] davecheney: in other words, it is big and very hard to break apart, so please review the big one? [02:35] no, bertter than that, please review this https://github.com/juju/juju/pull/411 [02:35] which is a smaller one [02:35] which unblocks my larger one [02:36] ack, will get food and look while munching [02:44] * davecheney steps away from the keyboard [02:44] thumper: after munching can we have a chat [02:48] davecheney: I'm not sure about that change [02:48] davecheney: sure, right now the authenticators do nothing [02:48] but there is logic there for when we change them [02:49] that's what wallyworld said :-) [02:49] how does this unblock other work? [02:49] * thumper reads more of the scrollback [02:51] wallyworld: real authentication isn't slated for this cycle [02:51] but will likely be the start of next [02:51] ok, but i would have though we'd want *some* validity checks [02:53] thumper: do you have time to talk now? [02:53] wallyworld: sure [02:54] * wallyworld creates hangout [02:54] https://plus.google.com/hangouts/_/g5aavwaio7thqbiatwjbdtsdrma [02:54] wallyworld: it says the party is over [02:55] ffs [02:55] https://plus.google.com/hangouts/_/canonical.com/tanzanite-stand [03:33] thumper: 1. the authenticators are wrong [03:33] they authenticate INVALID data [03:34] not just say yes to VALID users [03:34] 2. they arent' tested [03:34] this code passes 100% without them [03:34] that alone is reason to remove them [04:19] thumper: can we do a hangout when you have a mo? [04:19] wallyworld: jcw4 just told me that the bot isn't runing gofmt checks anymore [04:31] jcw4: just pushed a branch to fix the problem [04:32] waigani: sure... [04:32] davecheney: tx! [04:36] thumper: https://plus.google.com/hangouts/_/gyvhagf6dafbd3piihpd5jtt5ia?hl=en === uru_ is now known as urulama [04:45] davecheney: might not be, i'll check with martin [04:47] wallyworld: it used to do this [04:47] i wonder where that check was lost [04:47] * davecheney ponders on the parable about the elephant and the piece of string [04:47] totally different scripts [04:48] we should be able to add it back in [04:48] wallyworld: eh ? the bot has nack'd changes before 'cos they aren't goformatted [04:49] github lander or tarmac? [04:50] wallyworld: github [04:51] hmmm, in that case i have no idea, i didn't realise it had changed [04:51] seems like a mistake [04:51] i'll get it fixed [06:02] is trunk broken? [06:03] hmm.. maybe a wierd cycle around updates, tags, and godeps [06:04] morning all [06:05] hmmm.. can't build 1.20.2 -> src/launchpad.net/gnuflag": bzr: ERROR: branch has no revision roger.peppe@canonical.com-20140716064605-pk32dnmfust02yab [06:06] I just did a pull and build ok [06:43] wallyworld: you're not planning on just changing the fslock code are you? I think you can only change the template management call site to use flock [06:43] axw: yep, not changing fslock at all [06:43] cool [06:43] just the template stuff [06:44] I think the charm locks need to outlive processes, but not entirely sure [06:44] yep, just making minimal changes for 1.20 [06:49] good mornings [06:49] morning [07:28] morning [07:34] fwereade: morning (from Romania) [07:34] TheMue: morning [07:35] voidspace: Romania? [07:35] TheMue: I'm in Romania for the next month [07:35] TheMue: it's where my wife is from [07:36] so I'm currently working from the balcony of a flat in the town where her parents live [07:36] Nice and sunny [07:36] TheMue: are you working on ipv6 container addressability? [07:36] voidspace: yep, I’m getting closer [07:37] TheMue: can I help or should I pick something else up?> [07:37] either way I need coffee first [07:37] voidspace: in my scenario two hosts see each other, see the containers they run, those containers can see each other, but a container on one host doesn’t reach a container on another host [07:38] ah, interesting [07:38] and confusing... [07:38] voidspace: hehe, yes [07:39] voidspace: will just update my doc with the latest scenario and share it with you then [07:41] TheMue: cool [07:41] I'm grabbing coffee - back in a bit [07:41] ok [07:41] voidspace, ah, nice [07:42] TheMue, would you describe your scenario a little more? [07:42] TheMue, AFAIK we haven't done the container-addressability work we'd need to get that working [07:42] TheMue, in MAAS it should work but not anywhere else [07:44] fwereade: currently it’s no development stuff, it’s simply the evaluation how an IPv6 network has to be configured to enable IPv6 traffic to/from/between containers [07:46] TheMue, what are you working against? [07:49] fwereade: in a first step against pure LXC. IPv6 is pretty new to me and I’m reading/trying a lot. next step has to be discussed with jam then [07:50] TheMue, yeah, to me too :) [07:50] fwereade: sure ;) [07:50] TheMue, what's the end goal of what you're doing? [07:50] fwereade: currently a proof of concept for IPv6 and LXC [07:51] TheMue, because I thought that the first ipv6 use case we were targeting was about just managing ipv6 *and* ipv4 addresses in dual-stack networks [07:51] fwereade: later, as I understood jam, the active setting of addresses on any kind of nodes (hosts and containers) [07:52] TheMue, sorry, cannot quite parse, restate please? [07:52] fwereade: hehe, yip [07:54] fwereade: if I understood jam right he talked about a change where at least containers don’t work with the address the infrastructure passes them (which is link-local) but ask the API for a public adress and use it [07:54] fwereade: hope I phrased it better now [07:55] TheMue, certainly, we will want that -- that's what I think of as "container addressability" and I agree it's important [07:56] fwereade: yep, that’s how I understood it [07:56] TheMue, I'm not sure that doing it for ipv6 alone is quite what we're looking for at the moment though -- I thought we were aiming at working with dual-stack networks in situations that already work first of all [07:57] fwereade: detailed task planning is still open, as we’re only have been us two the last week [07:57] TheMue, I'm not trying to seagull you, don't let me stop you -- but... ah ofc dimitern is on holiday in malta, probably on a boat, can't ask him right now [07:58] fwereade: hehe, yeah, diving. he worked on the topic too before he left [07:59] fwereade: but jam will be back tomorrow, so you can talk to him then [07:59] TheMue, cool, thanks [08:00] fwereade: yw [08:00] fwereade: how has your trip been? stressful? [08:02] TheMue, new zealand is lovely, travelling there not so much [08:02] TheMue, not so stressful really [08:02] TheMue, I actually wrote some code which made a nice change [08:02] fwereade: but surely a very long flight [08:03] TheMue, yeah, pretty much all weekend both ways [08:03] fwereade: would like to visit NZ once too [08:03] TheMue, 2 full working weeks of travel in 1 week :/ [08:04] fwereade: hard. with a stop in Hongkong or Singapure? [08:05] TheMue, dubai, bangkok, sydney, christchurch, dunedin [08:05] fwereade: ouch! so many? uuugh [08:06] TheMue, yeah, was a bit much :) [08:06] TheMue, at least I didn't have to stop in tripoli, which the original tickets had [08:06] TheMue, but emirates was kind enough to not send me through there while the airport was being actively bombarded [08:06] :o [08:07] stop over in libya, via ukraine [08:07] fwereade: eh, hey, it has been planned as a business trip, no adventure tour [08:07] axw: you forgot syria [08:08] haha [08:23] fwereade: you're in NZ now? [08:23] a sprint? [08:23] I understood the ipv6 work was to support our telco customer who required it [08:24] NZ is lovely, I was there last year. But I only explored the North Island. [08:25] voidspace, back now [08:25] voidspace, bit scrambled mentally still [08:25] fwereade: ah [08:25] fwereade: yeah, long journey. About as far as you can go in fact. [08:25] voidspace, yeah, which is why I raised a bit of an eyebrow at what TheMue was doing [08:25] voidspace, indeed :) [08:26] fwereade: ah right - because for that we need ipv6 support, but we don't yet need nested container support [08:26] hmmm [08:26] voidspace, I'd kinda expected that the ipv6 work that'd actually be delivering value is the stuff we talked about with jamespage and rbasak -- private-address and private-address-ipv6, and setting the right ones in the right situations [08:27] fwereade: that sounds right, although in an ipv6-only scenario I'd hope that juju would "just work" [08:28] if machines/providers report ipv6 addresses we use those without problem [08:28] and we've fixed some issues around that [08:28] voidspace, yeah, it turns out that what we actually need is dual-stack support for the relation addresses [08:29] (e.g. no longer explicitly dropping ipv6 addresses, passing the right flags to mongo) [08:29] fwereade: ok [08:29] and as you say, dimiterm is our real expert here [08:29] although I'd expect jam to be pretty clued up as to the roadmap [08:30] voidspace, yeah, mongo on ipv6is another of the details I keep forgetting about ;) [08:30] fwereade: that should be done [08:30] voidspace, brilliant [08:30] barring horrible mongo bugs - like the fact that mongo can't parse ipv6 addresses [08:30] :-) [08:31] so long as you stick to the format they don't manage to internally screw up you're alright though [08:31] (you must use ::1:port format, and not [::1]:port nor a bare address without a port) [08:34] eww :) [08:38] if anyone has a few minutes to rip up my code so I can make a semblance of usefulness tomorrow, would be much appreciated! https://github.com/juju/juju/pull/415 [08:38] (4:30am est right now -- I need to sleep the sleep of the dead) [08:53] TheMue: you got the link to your doc? [08:55] voidspace: one moment [08:58] sure [09:36] morning folks [09:40] brb, back soon [09:40] TheMue: I may be a couple of minutes late to standup [09:40] TheMue: not long though [09:43] voidspace: we’re only we both ;) [09:43] TheMue: oh! [09:43] TheMue: where is jam ? [09:46] voidspace: national holiday [09:46] ah [10:04] good morning [10:07] perrito666: morning === nate_ is now known as natefinch [10:36] hazmat: you around? [10:37] whelp, it's gonna be another long day. Had totally reinstall the OS this morning... recopying my home directory now, but hello reinstalling everything. [10:47] natefinch: ouch [10:48] for next time this happens, there is a dpkg invocation that might be of help there [10:48] in theory you should be able to reinstall on top of the old installation and it'll keep your home directory, but the installer said there was no OS installed, which is.... interesting [10:50] I think my OS was f'ed up somehow. No idea how, but if the installer can't even tell there's an OS there... something is pretty screwy [10:51] now I have to figure out if I overwrite all my dot files, if it'll muck up this install [11:20] current status: restoring my backed up trash folder. Sigh. I wonder how much of my backed up data is just filecaches, trash, and downloaded installers [11:29] wallyworld: running late again tonight. if you can hold off for 30 mins I can probably make the standup [11:29] otherwise: I did more mongo 2.6 stuff [11:29] couple of PRs in the queue [11:30] axw: it's my wife's birthday today so i want finish the stand up and have a drink [11:30] but any other time i could delay [11:31] is katco on yet? we could do it early instead [11:31] might be too early [11:31] wallyworld: fair enough :) [11:42] hey, reinstalling made workspaces work on my machine finally [11:45] lol [12:04] hopefully copying over all my dotfiles will mean I don't have to reconfigure everything to work the way it used to.... but I'm not too optimistic [12:04] wallyworld, am now [12:05] hazmat: could you reply to the email about the api endpoint changes as per the bug you want backported? [12:05] like... how the hell do you turn off sound effects on Ubuntu? That's always my first stop when installing Windows... turn off all the damn sounds. Computers should be seen and not heard [12:05] hazmat: i'm not 100% across the exact changes as i didn't do the work [12:06] wallyworld, sure [12:06] ty [12:14] natefinch: which sounds? [12:15] natefinch: I think you installed the wrong OS :p [12:23] natefinch: dconf-editor will let you disable most sounds that annoy you. [12:23] wwitzel3: natefinch also there is a mute button :p [12:24] perrito666: the startup sound, for one.... there's also an annoy ploink sound that happens occasionally and I don't exactly know what causes it. [12:24] perrito666: mute only works so long as I don't actually want to hear music or videos or hangouts [12:25] you said you did not want to hear your computer :p [12:25] natefinch: /usr/share/sounds/ubuntu is where the files are, you can always just rename the ones you don't want with .mute [12:25] TheMue: I'd still love a link to your doc [12:25] TheMue: plus any suggestions as to what I might usefully work on [12:25] that's not the computer, that's media. Things ploinking is hearing my *computer* [12:26] TheMue: none of the things in the kanban queue looked plausible for me to start [12:26] voidspace: you should have get a mail [12:26] wwitzel3: natefinch: morning from Romania [12:26] wwitzel3: natefinch: actualy 3:30pm more or less [12:26] TheMue: ah, ok - I'll check [12:26] voidspace: when I shared the doc with you [12:26] TheMue: thanks [12:26] hi voidspace, seems that moonstone in romania is becoming a trend :p [12:26] voidspace: o/ [12:26] voidspace: howdy.... how was your vacation? [12:26] TheMue: hmmm... no [12:26] natefinch: EuroPython, it was cool [12:27] voidspace: currently I changed the setup below a bit [12:27] natefinch: lots of love for logstash backed by Elasticsearch for distributed logging [12:27] yeah, people love some ELK [12:31] wallyworld, also the fix in trunk for that issue is broken.. it turned a list into a scalar. [12:32] wallyworld, http://pastebin.ubuntu.com/7894639/ [12:35] wallyworld: happy birthday to your wife! [12:36] katco: in my country that is practically an insult :p [12:36] perrito666: lol [12:36] all things are impermanent. no use in fighting it :) [12:49] * perrito666 's chair armrest breaks apart while he was using it to get up and now he has 2 hurting fingers bc his hand landed on a very hard 5mm steel piece [12:50] that hurts [12:51] ouch =/ [12:51] * perrito666 tries to shop online for a chair not made of plastic [12:51] * perrito666 fails [12:57] wallyworld: https://pbs.twimg.com/media/BtQnfw2CYAIh123.jpg [13:04] TheMue: you around? [13:04] katco: yep [13:05] TheMue: i've been tasked with backporting https://bugs.launchpad.net/juju-core/+bug/1311227 [13:05] <_mup_> Bug #1311227: juju api-endpoints has no way to distinguish public and private addresses

[13:05] just want to double-check; this looks like the PR for that? https://github.com/juju/juju/pull/208 [13:05] katco: yes, exactly [13:06] TheMue: great, i'll cherry that and be on my way :) thank you! [13:06] katco: yw, it’s a small change [13:12] katco: it seems to need a change [13:13] TheMue: ? [13:13] katco: if I understand hazmat correct (see last comment), we have to return [0:1] instead of [0] [13:14] katco: so that the rendering as JSON or YAML would have the correct format [13:14] katco: see http://pastebin.ubuntu.com/7894639/ [13:15] TheMue: ah. not sure what the thing to do is. wallyworld pretty urgently wanted this backported so we could cut 1.20.3 [13:16] do we usually fix further bugs before backporting? [13:16] katco: the current change only returns one string, the former one returned a slice with one string [13:16] katco: in this case the renderings are different [13:17] TheMue: yeah i see that. so i guess you're saying we wouldn't want to backport before fixing this issue? [13:18] katco: I would change the backport in a way that it returns the slice and change the current trunk to it in a second issue for the 1.21 again [13:19] TheMue: gotcha. i'll see what i can do. thanks for the guidance :) [13:20] katco: has been an interesting feedback by hazmat for me too [13:21] katco: absolutely missed that beside the data we also changed the type and that this influences the rendering [13:24] katco: shall I quickly do the change on trunk? [13:30] TheMue: sure, if you feel like it! i'm still getting going (still earlyish here) [13:31] katco: ok [13:31] TheMue: sounds like it should be a 2-char change? [13:33] katco: exactly ;) [13:36] TheMue, correct [13:37] TheMue, katco as long as your doing that per state server [13:37] and extending the result slice [13:38] yep [13:59] sinzui: want to go to Romania? [14:00] I have somewhere to stay if you do... [14:01] sinzui: http://i1.kym-cdn.com/photos/images/facebook/000/001/384/Atrapitis.gif [14:02] hah :-) [14:02] perrito666: haha [14:02] sinzui: natefinch says you have to go see this guy http://upload.wikimedia.org/wikipedia/en/0/00/CountDracula6.jpg [14:02] TheMue: I *just* got an email saying you shared the doc with me :-) [14:03] voidspace: heya, only hours later [14:03] right :-) [14:03] perrito666, I understand Dracula's Castle is for sale. It could be a new Disney attraction [14:03] who is OCR today? [14:03] TheMue: fwereade [14:04] there are lots of "dracula's castle" [14:04] I’ve got https://github.com/juju/juju/pull/417, a quick change. [14:04] fwereade: ^^^ [14:04] sinzui: if disney keeps buying things we will soon see a crossover of avengers + jedis vs vampires [14:05] natefinch: standup [14:05] :) [14:05]