/srv/irclogs.ubuntu.com/2015/12/16/#juju.txt

=== prabhugs is now known as prabhugs_
=== prabhugs_ is now known as prabhugs
jamespagegnuoy, hows the barbican charm looking?08:58
gnuoyjamespage, well, from a using layers to build a charm perspective: great! from a functioning service pov: less great08:59
jamespagegnuoy, packaging issues?08:59
gnuoy 5 barbican package bugs so far ( http://paste.ubuntu.com/14047472/ )08:59
gnuoyand even working around those the token from keystone is still be rejected by barbican08:59
gnuoyjamespage, tbh, I'm conflicted on how much time to spend working on barbican itself as opposed to charm/layers stuff09:01
jamespagegnuoy, I can have that lot fixed in two shakes of a stick...09:04
gnuoyjamespage, they are not blocking me, they are easy to work around09:04
jamespagegnuoy, what's the right way to run barbican then?09:04
gnuoyjamespage, Using the previous version of barbican (2014.2) the charm works and you can retrieve and store secrets. With the liberty package I'm still trying to get it to work at all09:06
gnuoyjamespage, https://github.com/cloudkeep/barbican/wiki/Integration-with-Apache2 is what the charm should probably do eventually but right now I'm trying to get it to work at all09:07
jamespagegnuoy, https://launchpad.net/~james-page/+archive/ubuntu/liberty-testing09:32
jamespageupdates for liberty will appear here once they build09:32
gnuoyjamespage, fantastic, thanks09:35
jamespagegnuoy, btw I'd add python-pymysql to the package list for barbican09:54
gnuoyyep, I wont rely on recommends09:54
jamespagegnuoy, that's a nice example of release specific behaviour - python-mysqldb -> python-pymysql09:56
jamespagekilo -> liberty09:57
jamespagegnuoy, ok prep done for sru as well; once we're ok with my ppa package I'll upload10:07
jamespageokay all built10:19
jamespagegnuoy, ^^10:19
gnuoyjamespage, yep, I'm giving it a spin at the moment, thanks for all your fixes10:20
jamespagegnuoy, np we'd have todo them anyway for the MIR10:20
=== verterok-away is now known as verterok
gnuoyjamespage, barbican  charm is now functional with liberty rc1, thanks13:23
jamespagegnuoy, oooo13:24
jamespageawesome13:24
icezimma quick question, how do I create a database on juju mysql? I've searched but found nothing… is it possible to create only via charms relationships?13:50
rick_h_icezimm: it's setup to do that automatically on the charm relations.13:51
marcoceppiicezimm: at the moment, yes. the MySQL charm will only create database schemas when a realtion is made13:51
rick_h_icezimm: you could juju ssh to it and run normal mysql commands13:51
marcoceppiicezimm: however, the root password is available if you wish to use it out of band of Juju13:51
icezimmI understand I can juju ssh mysql/0 then mysql -u root -p `sudo cat …`13:51
icezimmhummmm13:51
icezimmso I'd never find how to create using juju heheh13:52
icezimmthank you very much rick_h_ and marcoceppi :)13:52
rick_h_icezimm: it might make an interesting juju action to support creating on the fly dbs13:52
marcoceppiicezimm: well, it's not available yet, but you could add an action to do this13:52
marcoceppirick_h_: man, I'm slow today ;)13:52
icezimmhahahha13:52
icezimmrick_h_ is fast like bullets flying ;)13:52
rick_h_marcoceppi: :P13:52
icezimmjust to make sure, you're talking about this:  https://jujucharms.com/docs/1.25/actions right?13:53
Iceyicezimm yes13:54
icezimmhummm great, I'm new to juju… just started this week, getting used heheh13:54
icezimmIcey: thank you13:54
marcoceppiicezimm: yes, so ideally you'd do something like this `juju action do mysql/0 create-db name=<name-you-want>` and it would reply back with all the details you need13:55
marcoceppiicezimm: welcome!13:55
Iceymarcoceppi another use case for synchronous actions :)13:55
marcoceppiicezimm: however, someone would have to create that action and add it to the charm13:55
icezimmI deployed a mysql, but running `juju action defined mysql` as described on documentation shows `No actions defined for mysql`13:55
icezimmmarcoceppi: thank you :)13:55
marcoceppiicezimm: yeah, so the action doesn't exist yet, someone would have to create it, but that's the mechanism you'd use13:55
icezimmI mean13:55
icezimmnot the create db action13:56
icezimmhttps://jujucharms.com/docs/1.25/actions#action-commands13:56
marcoceppiicezimm: yes, mysql doesn't have any actions defined at the moment13:56
icezimm`juju action defined mysql` was supposed to return backup, benchmark, dump, restart… no?13:56
icezimmhummmm…13:56
marcoceppiicezimm: hum, maybe13:57
marcoceppiicezimm: looking at the charm, there are no actions13:57
marcoceppiicezimm: I see how this is confusing, since the documentatoin says so13:58
icezimmhahahah no problem13:58
marcoceppiicezimm: those are theoretical responses, not actually what is reality.13:58
icezimmi understand13:58
* marcoceppi opens a bug13:58
icezimmwhere are you opening so I can follow?13:59
bloodearnestmarcoceppi, hey there. So, I want a charm to use the python cryptography library, which wraps openssl, but trying to figure out how to install in the charms virtualenv13:59
bloodearnest. The latest charm build does source only wheels, so I can't include in wheelhouse.txt, as it won't install correctly.13:59
marcoceppiicezimm: https://github.com/juju/docs/issues/75913:59
icezimmI have a background on debian and puppet… no evaluating ubuntu/autopilot/juju so I'm really lost atm heheheh13:59
icezimmGH workflow… great!13:59
marcoceppiicezimm: yeah, most of the Juju stuff is on github, with everything making it's way over slowly14:00
marcoceppiicezimm: if you have any questions please feel free to let us know here :)14:00
bloodearnestmarcoceppi, Ideally, I'd like to install from archives and use that (to support multiple arch). Is there a way to do that with the charm virtualenv (i.e. include system site packages)14:01
marcoceppibloodearnest: the source wheel should be unpacked and installed on the remote unit, you'll just need to make sure openssl-dev, etc are installed14:01
bloodearnestmarcoceppi, ah, k14:01
marcoceppibloodearnest: well, no, but you don't need to include it in the wheel at all14:01
marcoceppibloodearnest: the wheel is just charms hook deps, tbh14:01
marcoceppibloodearnest: you can just, in the method you've wrapped with @hook('install') call out to charmhelpers.fetch.apt_install('yo-pkg')14:01
bloodearnestmarcoceppi, my charm hooks use cryptography to generate a self signed certificate14:02
icezimmmarcoceppi: I'd like to add another provider to juju deploy, could you point me on the direction? a documentation link, github link to code… anything can help ;)14:02
lazypowerbloodearnest - wait14:02
lazypowerbloodearnest - we have a layer to help you with that14:02
marcoceppiicezimm: I'll dig up some docs, wwitzel3 might be able to help while I look. Providers are written in Golang. Which are you looking to add (for curiosity)14:02
icezimmhummm great14:03
lazypowerbloodearnest - give this a look and see if its what you're looking for. we have the interface impl for peering, which sets up a CA and does PKI / CSR for a service pool https://github.com/mbruzek/layer-tls14:03
marcoceppiicezimm: https://github.com/juju/juju/wiki/Implementing-environment-providers14:04
lazypowerhttps://github.com/mbruzek/interface-tls - and this is the interface repository14:04
icezimmI found the implementations14:04
icezimmhttps://github.com/juju/juju/tree/master/provider/ec214:04
icezimmthis doc is amazing… thank you very much marcoceppi14:05
wwitzel3icezimm: don't use ec2 as a reference, use gce https://github.com/juju/juju/tree/master/provider/gce14:05
wwitzel3icezimm: also hi :)14:05
icezimmhello wwitzel3!14:06
marcoceppiicezimm: no worries, you may want to join the juju and juju-devel mailing lists (https://lists.ubuntu.com/mailman/listinfo/juju and https://lists.ubuntu.com/mailman/listinfo/juju-dev) if you haven't already14:06
wwitzel3icezimm: that overview doc covers most of what you'll need, you should be able to fill in the holes referecing the gce provider. You'll also want to join the juju-devel list as marcoceppi mentioned.14:06
bloodearnestlazypower, so, that looks like a different tools from what I'm working on. AIUI, it's for distributing a cert between service units, so they can tls there traffic to each other, right?14:07
icezimmmarcoceppi: now I'm in14:07
icezimm:)14:07
bloodearnestI'm working on public facing tls certs14:07
bloodearnestthe kind you put in apache14:07
lazypowerbloodearnest: this works for that as well, as they are self signed either way they are going to raise an issue w/ a browser.14:08
lazypowerbloodearnest: and these certs generated here will work in an apache vhost14:08
icezimmjust curiosity, why gce and not ec2? (using deprecated api, code not so clear?)14:08
bloodearnestlazypower, one particular use case I'm trying to solve is multiple tls certs, doesn't look like this supports that?14:08
marcoceppiicezimm: the ec2 was one of the first providers we wrote, since then we've gotten better at coding them, so it kind of uses a lot of older, outdated environment designs14:08
icezimmahhhh what I suspected heheh14:09
lazypowerbloodearnest: lets hop on a hangout and riff over your use cases14:09
marcoceppiicezimm: GCE was written against that document so it'll line up better14:09
bloodearnestlazypower, plus, it git clones easyrsa, which means we can't use it atm14:09
bloodearnestlazypower, sure14:09
icezimmmy idea is to work on softlayer provider14:09
icezimmbut I know zero of go lang hahah (a good reason to start learning)14:10
icezimm;)14:10
lazypowerbloodearnest:  https://plus.google.com/hangouts/_/canonical.com/container-cats14:10
marcoceppiicezimm: I was under the impression that softlayer was moving to OpenStack?14:10
bloodearnest43464414:11
icezimmmarcoceppi: no14:11
icezimmibm acquired blue box to provide "openstack as a service" for hybrid workloads14:12
icezimmbut softlayer public cloud has its own api, and no intention to change on near future (afaik)14:12
marcoceppiicezimm: ah, that's where I'm confused. Well it looks like there's a few golang softlayer APIs already, so at least that work is already done14:13
icezimmI'm the maintainer for fog-softlayer and have my own softlayer client… but in ruby hahah14:13
marcoceppiicezimm: awesome!14:14
icezimmat least I'm very used to the api14:14
marcoceppiicezimm: yeah, so you only just need to wrap your head around golang and marry the two ;)14:15
icezimmyeah hahah14:15
icezimmhttps://github.com/sudorandom/softlayer-go14:16
icezimmsudorandom is softlayer staff14:16
icezimmI'm gonna check this, play a little then check how to marry with juju heheh14:16
marcoceppiicezimm: awesome, well if you have any questions or need help, feel free to ping in here!14:17
icezimmawesome.. thank you very much14:17
icezimmtoo many information/new stuff, need to study and learn a little bit more to come with new questions… hehehe14:18
icezimmmarcoceppi rick_h_ wwitzel3 lazypower thank you for the help14:18
bloodearnestlazypower, lp:~bloodearnest/charms/trusty/x509-cert14:18
icezimmlazypower: I work arounded in the network problem14:19
icezimmbut juju is still only configuring and up the private network on machines14:19
icezimmgoing lunch… brb14:20
marcoceppicory_fu kwmonroe admcleod1 bigdata-devs apache-hadoop-plugin, that's just a charm we created, it's not really a apache/hadoop service, right?14:24
cory_fuCorrect14:25
admcleod1right14:25
marcoceppicool, thanks guys14:25
=== admcleod1 is now known as admcleod
cory_fuWhy do you ask?14:25
marcoceppicory_fu: I'm documenting the benchmarking in apache-hadoop-plugin and am trying to get a description for it14:25
cory_fumarcoceppi: Also, we're going to be phasing it out with the conversion to layers, because layers provide a better solution to the problem it was addressing14:26
cory_fuThough that does mean we'll need a new home for the benchmark actions, hrm.14:26
admcleodclient14:26
marcoceppicory_fu: http://8e421f99.ngrok.io/benchmarks/#apache-hadoop-plugin that's fine, I'm just trying to fill this in like the other examples14:27
cory_fuadmcleod: Yeah, probably.  Though I could also see them living on ResourceManager14:27
marcoceppicory_fu: we can updtae the page when it finds a new home14:27
admcleodcory_fu: hm yes that would be better actually, that is more intuitive14:27
marcoceppicory_fu admcleod I'd also love to put spark-bench on here :)14:27
cory_fumarcoceppi: "Apache Hadoop Plugin subordinate is provides both a connection point for the Apache Hadoop cluster as well as installation and management of the Apache Hadoop libraries and configuration for its principal service."14:29
cory_fus/is//14:30
marcoceppicory_fu: awesome, thanks!14:30
marcoceppiway better than what I was cobbling together14:30
cory_fu:)14:30
bloodearnestlazypower, https://github.com/bloodearnest/plugins/tree/juju-local-dns14:36
Muntanerhello to everyone!14:54
MuntanerI had a juju bootstraped openstack environment, amazingly working.14:54
icezimmMuntaner: I know how is this sensation… just got mine working today ;)14:54
MuntanerI bootstraped it from my laptop, and I cloud do "juju status", "juju deploy" and so on without problems. By the way, I was forced to format my laptop... now I don't have an ubuntu distro anymore, and I need to "talk" with the juju client with that environment another time14:55
MuntanerI backupped all the .juju folder - with all the ssh stuff, .jenv and so on - in order to do this on another VM which runs an Ubuntu distro14:55
Muntanerwhat should I do? simply install the juju client on this new virtual machine and then copy the .juju folder content which I backupped and should I see the environment again?14:56
icezimmabout networking with juju, I have a MAAS with eth0 192.168.0.0/24 (public unmanaged) and eth1 10.1.1.0/24 (private managed), when deploy a new node it configures the private network and juju-br0 on eth1, but I can access my services because they should be accessible via eth0 and juju is not handling it… is it ok?14:57
=== natefinch-afk is now known as natefinch
marcoceppiMuntaner: basically15:13
lazypowerIcey https://github.com/juju-solutions/charms.reactive/issues/3215:17
lazypowerMuntaner: the .juju directory is portable, so you should be able to just drop that in on any system, osx, ubuntu, et-al. and it should "just work"15:18
Muntanerlazypower, great!15:19
Muntaneryou gave me a great new15:19
=== natefinch is now known as natefinch-afk
icezimmI got landscape server running, but juju is exposing the service via my private network interface hahaha18:38
icezimmany suggestion on how handle to expose or via both, or via public one?18:39
lazypowerdpb1 - ^18:53
dpb1lazypower: you would probably know more than me there. :(18:56
lazypowerlast i saw the landscape server doesn't bind to any specific ip18:56
lazypowericezimm: did you juju expose the servie?18:58
lazypower*service18:58
icezimmlazypower: no… I'm following the instructions19:12
icezimmtheres nothing about exposing heheh19:12
icezimmlazypower: you can see my juju status19:12
icezimmhttps://gist.github.com/fernandes/71e36bb897d348b2f0b119:12
icezimmexposed: false19:13
icezimmhummmm19:13
icezimmmakes sense19:13
icezimmits not exposed19:13
lazypowericezimm: yeah, def juju expose landscape19:13
lazypowerthen give it a go19:13
icezimmlazypower: should I expose landscape-server or haproxy?19:17
lazypowericezimm: haproxy19:18
lazypowersorry this is off the cuff, i haven't looked @ the status output19:18
lazypowerbut iirc, landscape runs behind haproxy so you can scale it19:18
icezimmyeah19:18
icezimmhere we go19:18
icezimmnow I have haproxy as exposed19:19
icezimmbut still public-address: 10.1.1.110 is what maas provided from its dhcp (private network)19:19
icezimmI entered on machine-0 and enabled eth0 (public network)19:19
lazypowericezimm: i'm headed out for lunch, i can help troubleshoot in an hour when i get back.19:20
icezimmbut I think juju-br0 that connect to containers is only set on private19:20
icezimmlazypower: perfect… I do really appreciate, enjoy your lunch ;)19:20
lazypowerwell, juju-br0 isn't accessable outside the host unless the newer networking code landed19:20
lazypoweri know that dimitern has done work here, and i'm sketchy on the details of whats landed and what hasnt19:21
icezimmno problem, atm I put a ethernet cable from my machine to private switch (nasty work around hahahaha)19:21
lazypowerbut container networking, if its still in the state that i last checked, is only accessable on the host unless you use some SDN charm(s) to modify that. if the HAProxy node is deployed on a principal unit, and not a container, that is co-located with landscape, connectivity shouldn't be an issue.19:21
icezimmI can work next hour while you lunch… I'm pretty well19:21
lazypowersounds good icezimm, see you in a bit o/19:22
icezimmthank you! \o19:22
cory_fuQuestion for anyone.  The way reactive decorators work, @when(true, true) fires, but @when(true, false) and of course @when(false, false) do not.  @when_not(true, true) clearly should not fire, and @when_not(false, false) clearly should.  What do you expect @when_not(true, false) to do?19:28
jhobbswhen_all and when_not_all would be clearer19:29
jhobbsmaybe :)19:30
jhobbspython has all() and any(), and you can negate those. that makes sense.  when_all(), when_any(), when_not_all() and when_not_any(). when just when_not() there isn't enough information19:32
cory_fuSo you would expect @when_not(true, false) to fire, because at least one is false?19:32
jhobbsi would have to look it up19:33
mbruzektvansteenburgh: is there a way to find the leader in Amulet code?19:33
=== BradCrittenden is now known as bac
marcoceppiicezimm: I think you need to enable a new feature, let me check20:11
marcoceppiicezimm: since you're on MAAS, expose has no real affect since MAAs doesn't have a firewaller20:11
icezimmhummm interesting20:13
icezimmexpose if just a iptables accept?20:13
icezimmexpose is just like a iptables accept?20:13
marcoceppiicezimm: yes, but we don't use local iptables, instead we use the providers firewaller, ie security groups20:14
marcoceppiicezimm: I think you need to enable a special networking feature for MAAS which makes containers addressable20:15
marcoceppiicezimm: yeah, it's "EXPERIMENTAL" in 1.25, but check out the 1.25.0 section here https://jujucharms.com/docs/devel/reference-release-notes specifically "Support "devices" on MAAS 1.8+"20:17
marcoceppiicezimm: that's what you need20:17
lazypowermarcoceppi: ta, i was looking for that and didn't find it20:37
jrwrenmbruzek: thanks for the merge.20:56
mbruzekjrwren: Yeah it was a net gain, but the tests still appear to suffer from race conditions20:57
jrwrenmbruzek: indeed. I never set out to fix that or any of those tests ;_;20:58
tvansteenburghmbruzek: re amulet and leadership, not directly, although it would be a simple add. for now you could use something like this http://paste.ubuntu.com/14056416/20:59
tvansteenburgh(not tested)20:59
mbruzektvansteenburgh: thank you20:59
icezimmmarcoceppi lazypower interesting…I'm gonna try this21:02
icezimma little question… if I order bare metal machines on a provider, they have static ip address, is it possible to use under maas?21:02
icezimmwondering because on this container stuff I need to add a subnet routable to vlan on maas, so I can access the containers21:03
icezimmbut thanks for pointing me in this direction, I can make more tests here21:04
icezimmand btw, now I'm running openstack :) amazing!21:04
marcoceppiicezimm: not sure about the baremetal providers, you "should" be able to, but I think you'll still need them to set up a vlan, it might be easier to instead use the "manual" provider which would allow you to just "add" machines to juju by doing `juju add-machine ssh:user@ip` and then you can deploy to that machine21:13
marcoceppiicezimm: also, not sure where you're located, but we're having a Juju Charmer Summit the first week of February where a bunch of us, the community, and core developers will be http://summit.juju.solutions/ registration is free and is colocated with FOSDEM and cfgmgmtcamp21:13
marcoceppiicezimm: here's the Manual Provider: https://jujucharms.com/docs/stable/config-manual21:14
marcoceppiicezimm: ie: juju bootstrap -e manual; juju add-machine ssh:user@machine; juju deploy mysql --to lxc:1; since the user@machine will now be machine 121:15
marcoceppinot nearly as smooth as using a cloud provider, but it allows you to use "any old host" and as many or little servers as you want21:15
ancaemanuelHi21:42
marcoceppiancaemanuel hello, welcome!21:43
ancaemanueldo you have any plan for the next version of go ?21:43
marcoceppiancaemanuel: great question, I know we're discussing moving to 1.5 of golang, but there are some considerations there21:43
ancaemanuellike an ppa for testing ?21:43
marcoceppiancaemanuel: was there anything in particular you were looking for?21:44
ancaemanuelgo 1.6 beta 1 will be released tomorrow, https://groups.google.com/forum/#!topic/golang-dev/6Ga5o2Ao2WM21:44
marcoceppiancaemanuel: I don't think we're tracking that at all, so juju is being targeted for the golang version in Xenial, which is 1.521:46
ancaemanuelit will be nice to test it and report bugs, if any21:46
marcoceppiancaemanuel: well, we're not really responsible for golang packaging, I imagine someone will upload it somewhere though21:46
ancaemanuelthen who is responsible ? Michael Hudson-Doyle ?22:09
ancaemanuelok, I found him on twitter: https://twitter.com/ancaemanuel7/status/67725052270177894522:18
marcoceppiancaemanuel: yeah, we really just make use of golang, but we target whatever is in the stable LTS for Ubuntu, not really bleeding edge22:34

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!