/srv/irclogs.ubuntu.com/2015/09/03/#cloud-init.txt

=== zz_natorious is now known as natorious
=== natorious is now known as zz_natorious
=== zz_natorious is now known as natorious
=== natorious is now known as zz_natorious
=== gamename is now known as gamename[away]
=== gamename[away] is now known as gamename
Seth_KarloHey all, I'm having an odd issue. Does Cloud-Init usually run as the root user or a sub-user?10:06
Seth_KarloI'm strace-ing a run and I see it downloading the chef omnibus installer into /tmp/ with permissions 0700, but then getting a permission denied on the script a second later and failing10:07
Odd_BlokeSeth_Karlo: Hmm, that is strange; does the file end up with the expected permissions?10:20
Seth_KarloFile is deleted before I can take a look at it10:20
Seth_KarloThis is what I see: [pid 11304] execve("/tmp/tmpfpIQua/chef-omnibus-install", ["/tmp/tmpfpIQua/chef-omnibus-install"], [/* 21 vars */]) = -1 EACCES (Permission denied)10:22
Odd_BlokeSeth_Karlo: What version of cloud-init are you using (and on what distro)?10:32
Seth_Karlocloud-init 0.7.5 on CentOS 7.10310:32
Odd_BlokeSeth_Karlo: So the code that is running is in cloudinit/config/cc_chef.py; if you add a sleep at around line 114 wherever that file is installed, then you'll have some time to check the file looks sensible.10:35
Seth_KarloOdd_Bloke: Understood, testing now10:36
Odd_BlokeSeth_Karlo: "import time; time.sleep(N)", if you aren't a Python person. :)10:36
Seth_KarloOdd_Bloke: Perfect, thanks!10:38
Seth_KarloOdd_Bloke: Is N in seconds or ms?10:43
Odd_BlokeSeth_Karlo: Seconds.10:43
Seth_KarloOdd_Bloke: Seemed to completely ignore it at line 114 in /usr/lib/python2.7/site-packages/cloudinit/config/cc_chef.py10:44
Odd_BlokeSeth_Karlo: Can you pastebin your modified bit of the file?10:45
Seth_KarloOdd_Bloke: https://gist.github.com/Seth-Karlo/96e129c004e63d5cc33110:45
Odd_BlokeSeth_Karlo: Ah, put it a line up.10:47
Odd_BlokeSeth_Karlo: util.subp is what's running the file.10:47
Seth_KarloOdd_Bloke: In between the util. ones?10:47
Odd_BlokeSeth_Karlo: Yep.10:48
Seth_KarloDone, testing now :)10:48
Seth_KarloOdd_Bloke: Aaaaaah, I see the issue!10:49
Seth_KarloOdd_Bloke: My /tmp is mounted noexec!10:49
Seth_KarloOdd_Bloke: Now working, thank you very very much for your help. Kudos and my gratitude10:51
Odd_BlokeSeth_Karlo: I'm always happy to help when it turns out there isn't a bug for me to fix. ;)10:52
Seth_KarloOdd_Bloke: Haha, I'll let you know if I find more! :P10:52
Odd_Bloke:D10:52
openstackgerritClaudiu Popa proposed stackforge/cloud-init: Add a draft spec for the parallel discovery of data sources  https://review.openstack.org/22009511:51
openstackgerritClaudiu Popa proposed stackforge/cloud-init: Add a draft spec for the parallel discovery of data sources  https://review.openstack.org/22009511:54
=== alexpilotti_ is now known as alexpilotti
Odd_Blokeclaudiupopa: I think you might have done an incomplete naming change in the "FacadaParallelSearch" example in that spec.14:34
Odd_Blokeclaudiupopa: (Also Facada is a typo :p)14:34
claudiupopaOh, yep. :p14:34
smoserclaudiupopa, are you going to tokyo ?14:44
smoserfor openstack su mmit ?14:44
claudiupopaNope.14:44
smoserOdd_Bloke, didnt you do something wrt testing bin/cloud-init in 0.7 ?14:46
=== zz_natorious is now known as natorious
Odd_Blokesmoser: I did, yeah. Why do you ask?14:47
smoserwhere is it ?14:48
Odd_Blokesmoser: http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/view/head:/tests/unittests/test_cli.py14:49
smoserthanks14:49
Odd_Bloke:)14:49
smoserOdd_Bloke, do you happen to know...15:08
smoserhttp://paste.ubuntu.com/12263593/15:09
smoserprobably easier to read15:10
smoser http://paste.ubuntu.com/12263608/15:10
Odd_Blokesmoser: In a meeting right now, will look in a bit. :)15:13
=== alexpilotti_ is now known as alexpilotti
j^2hey smoser i sent you a response :D15:27
smoserj^2, thnks15:27
j^2we can sync later today?15:27
smosersure. ping me here is fine15:27
j^2perfect15:27
smoserwhere'd you send rsponse ?15:28
Odd_Blokesmoser: Given that those are all in the HTTP request, I would assume that they can all be logged.15:32
Odd_BlokeBecause the NSA has them anyway. :p15:32
Odd_BlokeBut I don't know that for sure.15:32
smoserthats what i thought too, Odd_Bloke15:32
smoserthey're its supposed to work over http/ untrusted.15:33
smoserso you'd think it'd bad if there was secrets there15:33
Odd_BlokeYeah.15:34
smoserj^2, stuff for cloud-init 0.7.X is still on launchpad16:06
smoserso your review was at the correct place16:06
j^2ah, which is the one that shipped “in general” now-a-days?16:15
Odd_Blokej^2: 0.7.x is still shipped in general, 2.0 is still in early development.16:16
j^2Odd_Bloke: ah cool, then i’ll keep with 0.7.0 then16:16
j^2thanks16:17
harlowjasmoser whatever happened to enabling the launchpad + git stuff17:38
harlowjais that possible still?17:38
smoserharlowja, yes. still possible.17:39
harlowja+2 :)17:39
harlowjacan u press a button somewhere to make that happen ;)17:39
harlowjaye-olde button17:40
smoserthe button i'd rather push is 'make harlowja work enough on cloud-init 2.0 that he stops caring about 0.7'17:43
smoserdo you have one of those buttons?17:43
harlowjasmoser ya, mainly this is for the y! CI system, that still pulls from 0.7, but really only knows how to interface with git :-P17:43
harlowjait doesn't quite know bzr, and nobody seems willing to add bzr support :-P17:53
harlowjaclaudiupopa in regard to https://review.openstack.org/#/c/220095/ let me know if u have any questions on how this got pulled off in taskflow (the parallel running based on dependencies ...)20:01
harlowjabecause its awfully similar i think, ha20:01
claudiupopaSo they're similar?20:05
* harlowja makes an example, but yes20:05
claudiupopaLooking right now in the link.20:05
harlowjak20:06
harlowjaclaudiupopa http://paste.openstack.org/show/444643/20:09
harlowjaoutput from running that20:09
harlowjahttp://paste.openstack.org/show/444646/20:10
harlowjasoooo it does something like u want i think, ha20:10
harlowjaand it can run in parallel as well :-P20:10
harlowjau can run that by just cloning https://github.com/openstack/taskflow and making a venv and installing its requirements, then running it locally...20:10
claudiupopaNicee, why don't we use it for cloud-init v2 then?20:11
harlowjacould be done :-P20:11
harlowjai am top maintainer/creator of that lib, so maybe we could, ha20:11
harlowjabut depends on others thoughts, ha20:11
harlowjabb20:12
claudiupopaThe capabilities are represented by default_provides?20:12
harlowjaclaudiupopa correct, or they could be20:54
harlowjajust something to think about, taskflow might be to big of a dependency, idk20:55
Odd_Blokesmoser: So my HTTP friend tells me that in theory we should be able to store all the OAuth info in the log, but that assumes a good OAuth server implementation.22:04
Odd_Blokesmoser: So we're probably better off not logging it.22:04
=== natorious is now known as zz_natorious
=== zz_natorious is now known as natorious

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!