/srv/irclogs.ubuntu.com/2016/08/09/#juju.txt

bjfi'm trying to bootstrap a juju 2.0 controller behind a firewall. how do i specify a proxy to use?00:32
bjfthe bootstrap is stuck trying to get the tools (i think)00:53
thumperbjf: there is config for proxies, http_proxy, https_proxy, ftp_proxy no_proxy01:03
thumperetc01:03
thumperalso apt_http_proxy01:03
* thumper looks for docs01:03
thumperbjf: https://jujucharms.com/docs/2.0/juju-misc#configure-proxy-access01:04
bjfthumper, juju 2.0 doesn't recognize "juju set-env"01:19
bjfthumper, if i set that in the environments.yaml file do i set it under "environments:" or under the next level "maas:" ?01:23
=== wolverin_ is now known as wolverineav_
=== natefinch-afk is now known as natefinch
thumperbjf: set-model now02:10
thumperbjf: also there is no environments.yaml for 2.0 now02:10
thumperbjf: but clouds, accounts etc02:10
bjfthumper: so that doc is pretty much completely wrong :-)02:10
thumperwallyworld: do you know where the docs are now?02:10
thumperbjf: damn...02:11
bjfthumper, meh, it's fast moving .. i'm sure it will get fixed up02:12
bjfthumper, so, i have a fairly recent 2.0 install on this system, never a 1.x and yet there is a .juju/environments.yaml file02:13
thumperhmm...02:13
thumperweird02:13
bjfthumper, there is no set-model either02:14
* thumper looks02:14
thumperset-model-config02:14
thumper`juju help commands` is helpful02:14
bjfthumper, ok, lots more there than i thought02:15
bjfthumper, that can only be used after i already have a controller02:16
thumperbjf: look at `juju help bootstrap`02:16
thumperyou need to pass in some config yaml02:17
bjfthumper, and that config.yaml can just be name=value pairs?02:17
thumperlook like --config=somefile.yaml works02:18
thumperand in there you have you keys and values, like:02:18
thumperdefault-series: xenial02:18
thumperapt-http-proxy: http://10.250.171.1:800002:18
thumperetc02:18
bjfthumper, ack, thanks, will give is a try02:18
thumperkk02:18
thumperlet us know how it goes02:18
bjfwill do02:19
bjfbootstrapping .. will take a while02:20
bjfthumper, i must not have it right. it's been sitting at "Fetching tools" for some time03:02
bjfmy config file:03:02
bjf$ cat juju-bootstrap-config.yaml03:02
bjfhttp-proxy: http://squid.internal:312803:02
bjfhttps-proxy: http://squid.internal:312803:02
bjf 03:02
bjfthe command line: juju bootstrap kernel-controller kernel --constraints tags=juju-controller --debug --config=~/juju-bootstrap-config.yaml03:03
thumperhmm....03:05
thumperwallyworld: thoughts ^^^^?03:05
wallyworldum03:06
bjfthumper, ok, may be my problem03:07
wallyworldlooks ok, assuming there's a custom cloud called kernel03:07
wallyworldif the proxies are not working as expected, then tools will not be fetched03:07
bjfwallyworld, thumper yeah, i think i don't have the proxy right .. debugging03:09
bjfthumper, wallyworld thanks for the help. got it bootstrapped. had nothing to do with the proxy, maas config issue i hadn't noticed before03:50
thumperbjf: sweet03:50
wallyworldgreat03:51
=== jamespag` is now known as jamespage
kjackalHello Juju World!08:43
babbageclunkMorning!08:43
=== mwhudson_ is now known as mwhudson
lazyPowerMornin #juju o/13:19
magicaltroutahoyu13:20
magicaltrout-u13:20
lazyPowerohaiyu magicaltrout13:20
lazyPowerspeaking of... We still need to do that sync13:21
magicaltroutyeah we do13:21
magicaltroutnext week would actually be good because i'll be post op eye surgery and pretty incapacitated but with a bunch of spare time for talking13:21
lazyPoweroh!13:23
lazyPoweri scheduled for friday, any specific day next week? I'm happy to move13:23
magicaltroutyeah friday is actually op day, so that wont be happening ;)13:23
magicaltrouttuesday or wednesday would be good13:23
lazyPowerlol! how dare you take care of yourself13:23
lazyPowersame approx time work? I wanted to catch the UK/US overlap as best i could13:23
magicaltrout3pm UK would suit13:24
lazyPowerUpdated for Tuesday, 8/1613:26
lazyPowerthanks tom :)13:26
magicaltroutno probs13:26
magicaltroutshould be good13:27
lazyPowerjust lmk if you need to resched. eye surgery... oi13:27
lazyPoweri've thought about going down that path to get rid of the spectacles... i'm still iffy about having someone cut on my eye13:27
magicaltroutshould be 5 days unable to see properly cause i have to wear pretective contacts post op because of a thin cornea or something13:28
magicaltroutso i have a bit more recovery time and annoyance, but should be good to get rid of the glasses13:28
lazyPowerI'm going to live vicariously through you, and then goad myself into doing the same13:28
magicaltroutthey said the op takes about 30 seconds an eye?!13:29
lazyPowerassuming you dont grow eye gremlins13:29
lazyPowerif you grow eye gremlins all bets are off13:29
magicaltroutlol13:29
magicaltroutyeah well i might go blind13:29
magicaltroutyou never know13:29
lazyPoweri sincerely hope thats not the case13:29
magicaltrouthehe13:29
lazyPoweri'm sure you'd pick up TTD pretty quick, but i digress13:29
lazyPoweri'd rather not test the state of accessability in the world13:30
magicaltroutwell everyuone i spoke to have said it was the best thing they've had done13:30
magicaltroutso I figured what the heck13:30
lazyPowerLooking forward to derailing the meeting over the download from the experience :)13:31
lazyPower#destroyallmeetings13:32
magicaltrouthehe13:32
magicaltroutdynamic UID and GID on containers where root access isn't allowed14:29
magicaltroutin docker14:29
magicaltroutwhat a bloody hack14:29
lazyPoweryup14:29
lazyPowerthe new security paradigm in docker confuses me14:29
magicaltroutwe have a bunch of NFS backed containers and the UID/GID for dev/staging/prod have to be different which is fair enough, so I had a semi hack with gosu in place14:31
magicaltroutbut that doesn't stop exec /bin/bash giving you a root shell14:31
magicaltroutwhich makes security folks sad14:31
magicaltroutadmittedly the person would already have broken into your host, but thats beside the point14:32
magicaltroutso now I have a hack that creates a user in the docker file, does its stuff, then in the entrypoint sudo's(sadface) modifies itself to set the new UID/GID, chowns a bunch of stuff then removes its own root access.....14:33
lazyPowerhttps://www.minio.io/  -- neat14:39
D4RKS1D3Hi people, we have in juju some funny command to change the public ip in one charm?15:17
lazyPowerD4RKS1D3 - not sure what you mean by "some funny command ot change the public ip"15:39
lazyPowerare you asking if you can change the units public-address?15:40
D4RKS1D3yes lazyPower15:40
lazyPowerD4RKS1D3 - i may be incorrect, but as i understand it, the public-address is auto-discovered by the agent, and is fed by metadata from your cloud. You could reasonably remote into the unit and manually change this in the agent config, but i dont know that I would advise doing that, as i'm not sure what unintended side effects it may have15:41
lazyPowerD4RKS1D3 i do believe that our openstack provider has the notion of a floating ip. and I would urge you to mail the list about that15:41
D4RKS1D3I have my lxc working to run openstack15:42
D4RKS1D3I mean this lxc public ip15:42
D4RKS1D3these*15:42
balloonsrogpeppe, any concerns with migrating https://launchpad.net/gnuflag over to using git instead of bzr? I'm asking because we're encountering a bzr issue trying to build a juju snap using launchpad.16:22
balloonsrogpeppe, you can see the details here: https://launchpadlibrarian.net/277983664/buildlog_snap_ubuntu_xenial_amd64_juju_BUILDING.txt.gz16:22
rogpeppeballoons: is that the only remaining bzr dependency?16:22
balloonsrogpeppe, if godeps could pull from a git source we would be a-ok. It's one of 2 remaining bzr depends. Interestingly enough the other is tomb, which I think could be updated to point to the git repo16:23
balloonsso, it may very well be the only one16:23
balloonsrogpeppe, it's interesting you still need a fork for the package after all these years16:28
rogpeppeballoons: i'll take a look. i don't think there'll be any problem moving gnuflag.16:28
balloonsrogpeppe, awesome. I'm happy to make the change in the dependencies.tsv and do a PR once it's done, or you can propose16:29
rogpeppeballoons: sure16:29
rogpeppeballoons: and it looks like we could move the tomb dep to gopkg.in/tomb.v1 without probs too16:30
rogpeppeballoons: i've created https://github.com/juju/gnuflag16:47
rogpeppeballoons: have fun :)16:47
balloonsrogpeppe, ty! :-)16:48
=== frankban is now known as frankban|afk
beisnertvansteenburgh, got a bit of a hot one here.  seeing test leaks (false passes) over this guy:  https://github.com/juju-solutions/bundletester/issues/5419:49
beisnerand a patch to accompany:  https://github.com/juju-solutions/bundletester/pull/5519:49
tvansteenburghbeisner: merged19:51
beisnertvansteenburgh, thx sir19:53
x58wg 1519:59
bdxkwmonroe: I'm going to be charming up a few grails apps over the next few days/weeks20:09
bdxkwmonroe: I'll be making use of openjdk charm quite a bit it looks like :-)20:10
lazyPowerbdx - how did your ES/Kibana deployment go? get them all charm upgraded?20:11
bdxerrr .. making use of the openjdk *layer20:11
magicaltroutdon't trust anything written by a texan20:12
bjfhttps://jujucharms.com/docs/2.0/authors-charm-writing seems to be completely out of date for JuJu 2.0 .. can anyone point me at more up-to-date docs for writing my first charm?20:13
bdxlazyPower: I barked up that tree for a while ... the app is being sold to a customer .... our project managers don't think it makes sense for our devs to spend cycles there I guess20:13
bdxat least I tried20:13
bdx:-(20:13
lazyPowerbjf - wow you found a really crutfy doc, have a look here20:14
lazyPowerhttps://jujucharms.com/docs/2.0/developer-getting-started20:14
bdxmagicaltrout: are you tex-ist?20:14
magicaltroutbjf: https://jujucharms.com/docs/2.0/authors-charm-building20:14
kwmonroecool bdx!!  let me know if you run into things that you'd like.  eg, we could make jvm params configurable and pass them on the relation.. so charms that required java could do @when(java.ready), function start_me_up(), java {java.get_tuning} myJar20:14
lazyPowerbdx - no worries :) was just curious since we spent some time troubleshooting a really ancient tutorial20:14
lazyPowerer, s/tutorial/installation20:14
magicaltroutno bdx just kwmonroe-ist ;)20:14
bjflazyPower, magicaltrout thanks20:14
lazyPowermagicaltrout - stop linking to the author docs, they're basically deprecated at this point.20:15
lazyPowerbjf - feedback / bugs / et-al welcome on the developer guide20:15
lazyPowerbjf - if you do enounter any head scratchers - https://github.com/juju/docs/issues20:15
magicaltroutlazyPower: i just googled charm layer writing20:15
magicaltroutand that was top20:15
magicaltroutsurely that one can't be that out of date20:15
lazyPoweri cannot change google :( i'm sadly not a panda20:15
bdxmagicaltrout: hes going to get you for that one20:15
bdxlike the boogieman20:16
magicaltroutat a scan it looks current lazyPower what am I missing?20:16
lazyPowermagicaltrout - it sure can, the author docs were the developer guide before we went through and re-wrote them as the dev guide. THey linger for purposes unknown to me20:16
magicaltroutbdx: he's too lazy to get any body20:16
bjfmagicaltrout, i got that by googleing "juju charm tutorial"20:16
kwmonroei feel like i should get somebody.. but i'm just gonna stay on the couch instead.20:17
magicaltroutlazyPower: you say that but20:17
magicaltrouthttps://jujucharms.com/docs/2.0/developer-layers20:17
magicaltroutthen you click on the Getting started link at the bottom20:17
magicaltroutand it 404s :)20:17
lazyPowerbecause it has a hard coded /devel link in there20:18
* lazyPower sighs20:18
* lazyPower resigns20:18
magicaltrouthehe20:19
kwmonroeheh20:19
magicaltroutadios lazyPower ! ;)20:19
kwmonroenoooooes20:19
magicaltroutgot my talk switched so i'm not clashing now lazyPower20:19
magicaltroutamsterdam on the 31st20:19
magicaltroutlondon on the 1st20:19
magicaltrouteye op on the 12th20:19
magicaltroutwhat could go wrong?! ;)20:20
lazyPoweryou could remind me that we have more work to do in the docs thanks to decisions that were made outside of anyone else knowing?20:20
lazyPowersome cowboy out there owes us an explanation20:20
magicaltroutdon't forget you have more  work to do on the docs due to decisions that were made outside of anyone else knowing20:20
magicaltroutI think som cowbory out there owes you an explanation20:21
magicaltroutkwmonroe: ?20:21
* lazyPower sets off explosions and walks away20:21
lazyPowercool guys never watch the explosion20:21
magicaltrouthehe20:21
lazyPowerthey're too busy walking away from it20:21
magicaltroutit've seen that in films20:21
magicaltroutso it must be true20:21
kwmonroeanyone know how to rewrite jujucharms.com/docs commit history?  asking for a friend.20:22
magicaltrouthehe20:22
magicaltrouthere you go if you want to see a treat http://pastebin.com/F7mP83AB20:22
magicaltroutthe biggest hack ever to get the security i need in my docker entrypoint20:22
magicaltroutjesus its taken all afternoon to figure out the correct order of hackage20:22
lazyPowerkwmonroe - first time caller, long time listener -  I hear its as simple as git rebase -i revno && git push upstream master --force20:23
kwmonroeheh magicaltrout, "/bin/rm -rf /etc/sudoers", what could possibly go wrong?20:26
kwmonroei'm gonna giggle when /etc/sudoers is a symlink to /20:26
magicaltroutlol i know20:26
magicaltroutwell i can clearly refine parts, but as I don't want sudo access any more20:26
magicaltrouti'm just like "f-it, blow it away"20:27
lazyPowermagicaltrout  - <<jackie face meme>>20:28
lazyPowery u do dis20:29
kwmonroeyeah magicaltrout, you not only said "f-it", you said "recursively f-it"20:29
magicaltroutrecursion is my life20:29
kwmonroeyou should totally do "rm -rf /${SUDOERS_FILE} || rm -rf /etc/sudoers".  for security.  make sure you get that leading slash in there.20:31
magicaltrouti think this is more  security by obscurity20:32
* magicaltrout doesn't do what kwmonroe says anyway :P20:32
kwmonroeanyway bdx, sorry for this trout spam, but i am really curious about your interactions with the java interface and openjdk layer.  we could go really nuts with (making jvm params configurable, emitting a changed state so principal charms know they need to restart to get new jvm bits, etc).  i feel it's a bit silly atm because it's just "install java... and done i guess."20:37
magicaltroutyou promised that when i said i was using jdk charm20:38
magicaltroutnever happened ;)20:38
kwmonroei remember magicaltrout.  but you were just learning python, so i didn't want to make things too complicated.  bdx can handle it.  :P20:42
magicaltrouthehe20:43
kwmonroeyou were all like "pyth... what comes next?"  and i was all like "on dude, just type o-n!"20:43
magicaltroutsad times20:43
kwmonroe:)20:43
bdxkwmonroe: I think the elastic stack services could greatly benefit from those mods20:53
bdxkwmonroe: for example elasticsearch - cloud greatly benefit from the configurability of JAVA_OPTS20:54
bdxES_HEAP_SIZE=10g20:54
bdxthat currently defaults to 2g20:55
kwmonroeglad you think so bdx, because that entitles me to ask you questions about the implementation.  so.. if a principal service is running, would you (as the operator) be upset if some admin changed an openjdk config value and it restarted your service?20:55
kwmonroeor would you rather that simply trigger a status update that sets the openjdk status to "settings changed, please restart the principal service"?20:55
kwmonroebecause, for example, restarting datanodes in a big data environment just because the heap size changed may not be a good idea for in-flight stuff.20:56
kwmonroeon second thought.. it would be up to the principal charm author to decide how to react to java states.. so i guess it's not a big deal.  java should tell/emit states and let whomever cares about it to deal with it.21:00
magicaltroutthey could check the config change21:00
magicaltroutand see if its worth a reboot21:00
kwmonroeyup, and the "worth" determination would be presented as a status change.. so the juju status would report "jdk settings changed; do something (or not)".  i think i like that.21:01
=== natefinch is now known as natefinch-afk
kwmonroestill, that's not on openjdk (or any java provider) to determine that.  the principals that consume java would wire that in.21:02
bdxkwmonroe: so, people are writing java web apps because they want the security of the strongly typed/compiled app (majorly) right21:10
bdxkwmonroe: I would say puting each app in a silo would be optimal21:10
bdxkwmonroe: or each unit of an application21:13
bdxI see how that makes implementing shared javaops difficult though21:13
kwmonroeyeah bdx, but we can't do each unit of an app.. or even each app in a silo.  if you have ES, tomcat, and some big data stuff all related to the 'openjdk' charm, and you update the openjdk config, that's going to update for *all* apps related to java.21:14
kwmonroewhich is not great, i agree.  you'd almost need to deploy openjdk as "es-jdk" and another for "bigdata-jdk" and another for "foo-jdk" and tweak the config as needed for each of those to get the silo'd config.21:15
bdxkwmonroe: yea .. I see that ... I think using it as a layer seems more reasonable in that scenario21:15
bdxbut also slightly defeats the purpose21:16
kwmonroeyeah, interesting.. i hadn't considered the java layer being a base layer for specific java apps.21:16
kwmonroei think i see what page you're on now.  note, we're not on the *same* page, but at least i see yours over there. ;)21:16
bdxyes!21:17
bdxsomeone understands me21:17
bdxbaha21:17
bdxits lonely overhere at creativedrive .... surrounded by php and rails devs21:18
kwmonroehaha21:18
bdxim the only python guy in the company21:18
bdxbringing it21:19
kwmonroe+1 bdx, i have faith in you!21:19
bdxkwmonroe: thx, I did too ... until I realized what one of our software projects was21:20
bdx-> https://www.morpheusdata.com/21:20
mayurisaprehello everyone..21:22
mayurisaprei am writing a charm and need help for the same21:23
kwmonroemayurisapre: is this related to https://askubuntu.com/questions/808638/juju-charm-how-to-get-ip-addresses-of-all-units-in-a-service-in-a-charm-hook-i/810156#810156?21:24
mayurisapreyes21:26
mayurisaprehi kwmonroe..21:27
mayurisaprei read your answer, bit still facing the same issue21:28
kwmonroemayurisapre: relation-list -r {id} should be returning all units in that relation. where are you calling relation-list?21:30
=== menn0 is now known as menn0-exercise
mayurisaprei am calling it from myCharm21:30
mayurisaprerelation-changed hook21:31
kwmonroemayurisapre: what's the relation name that you're calling?21:33
kwmonroemayurisapre: relation-ids {name} <-- what's {name}?21:33
mayurisaprehalbaas21:33
bdxicey, kwmonroe: possibly you could hear me out on layer-consul21:35
bdxhttps://github.com/jamesbeedy/layer-consul21:35
mayurisapreI have also tried this with mysql and wordpress21:35
mayurisaprewith db relation21:36
mayurisaprein that case as well i got the same result21:36
bdxicey, kwmonroe: I immagine layer-consul could/should be used for the base layer for charm-consul, and subordinate charm-consul-agent21:36
bdximagine*21:36
bdxthe primary differences in charm-consul and charm-consul-agent is https://github.com/jamesbeedy/layer-consul/blob/master/templates/consul.json.tmpl#L1221:38
bdxwould be true for consul, and false for consul-agent21:38
bdxconsul-agent wouldn't need to do any custom config on consul-relation-joined, it would be the consul server(s) that would run the `consul join <consul-agent-ip-address>` on consul-agent-relation-joined21:41
bdxright?21:41
bdxhere, let me finish whipping this together, then I'll ping you21:42
kwmonroemayurisapre: i deployed mysql and 3 wordpress charms and got this: http://paste.ubuntu.com/22850696/21:46
kwmonroemayurisapre: the important bit is that last relation-list call that shows 3 values that correspond to the 3 wordpress units connected to the mysql charm21:47
mayurisaprethis is juju 2.0 right?21:48
kwmonroecorrect21:48
mayurisaprei am currently using 1.2521:50
mayurisapredo you think this is causing the issue?21:50
kwmonroei don't think so mayurisapre, but i'll deploy on 1.25 and check21:51
kwmonroebdx: is charm-consul a principal and charm-consul-agent a subordinate?21:53
kwmonroebdx: if not, could you use leadership so the leader in a multi consul deployment set server: true and the rest false?21:54
kwmonroemayurisapre: what does this return for you? juju run --unit mysql/0 'relation-ids db'22:08
mayurisaprei just tried it again22:15
mayurisaprewith juju run --unit mysql/0 'relation-ids db' it listed all three unit22:15
mayurisaprebut in debug mode22:15
mayurisaprein db-relation-changed it listed just 1 unit22:16
kwmonroemayurisapre: how are you invoking debug mode?22:17
=== menn0-exercise is now known as menn0
mayurisaprewith debug-hooks command22:18
kwmonroemayurisapre: how are you calling debug-hooks?  juju debug-hooks mysql/0?22:18
mayurisapreyes22:19
kwmonroemayurisapre: when you do that, the db-relation-changed hook will fire once for each connected unit.  so it's possible you're only seeing the 1st wordpress unit.22:20
mayurisaprebut if I don't use debug mode even then in execution i get same results..22:21
mayurisaprei checked that from logs22:21
kwmonroemayurisapre: if "juju run --unit mysql/0 'relation-list -r db:x'" is showing multiple results (one for each connected unit), then it's working as it should22:24
kwmonroein a debug-hooks terminal, you'd have to run ./hooks/db-relation-changed, then exit, then let the debug-hook proceed to the next db-relation-changed hook for a subsequent unit22:25
mayurisapreyes..things are clear to me now.22:27
mayurisaprethanks a lot for your time.22:28
mayurisaprei really appreciate it.22:28
kwmonroenp mayurisapre, i'm glad you got it figured out!  let us know if you have any other questions.22:31
mayurisapreyes. It was really helpful.22:32
mayurisaprethanks a lot again.22:32

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!