/srv/irclogs.ubuntu.com/2016/10/17/#juju-dev.txt

veeberswallyworld: you have a moment? WOuld like help deciphering an error message I'm seeing in the failed tests.01:26
wallyworldok01:26
veeberswallyworld: I'm seeing:"cannot add unit to application "memcached": getting instance types: listing VM sizes: azure.ServicePrincipalToken#Refresh:" for 3 tests, is it possible that it's the azure side that's failed or juju?01:26
veeberswallyworld: the logs are at:01:27
veebershttp://reports.vapour.ws/releases/4490/job/azure-arm-deploy-bundle-lxd/attempt/68701:27
veeberswell, that's one of them at least01:27
wallyworldnot too sure about azure, i'll look01:27
veeberswallyworld: thank you01:27
wallyworldveebers: the error in the logs seems to be x509: certificate signed by unknown authority01:33
wallyworldnot sure off hand the root cause; azure deploys seem to work in general01:34
veeberswallyworld: ok thanks, I'll keep looking01:43
wallyworldveebers: andrew would know probably but he's out till thursday. seems strange though it's just one test out of many. there may be some difference in test set up or something01:44
anastasiamacveebers: what u r describing may be related to an exisiting bug 1629759?...01:48
mupBug #1629759: azure subscriptions api throws x509 error "certificate signed by unknown authority" <arm64> <bootstrap> <ci> <deploy> <juju:Triaged> <https://launchpad.net/bugs/1629759>01:48
veebersanastasiamac: awesome thanks, I'll check that bug is similar and file the issue away etc.01:50
anastasiamacveebers: \o/01:50
veeberswallyworld: ack, I'll file or +1 the bug at this point01:51
mupBug #1633554 changed: juju ssh uses old/invalid known_hosts data <juju-core:Invalid> <https://launchpad.net/bugs/1633554>02:12
=== rmcall_ is now known as rmcall
anastasiamacthumper: or anyone: trivial https://github.com/juju/juju/pull/645703:36
thumperlgtm03:37
anastasiamac\o/03:48
anastasiamacwallyworld: PPTAL https://github.com/juju/juju/pull/6458 ? should b trivial :D04:12
wallyworldok04:13
anastasiamacwallyworld: and another :D https://github.com/juju/juju/pull/645904:24
wallyworldwhat bug is that?04:26
anastasiamacbug 163360704:33
mupBug #1633607: juju grant help text puts examples before valid inputs <juju:In Progress by anastasia-macmood> <https://launchpad.net/bugs/1633607>04:33
anastasiamaci'll add it to the pr.. sorry.. it's in the name but not in prose :D04:33
wallyworldah, i just didn't ee it04:36
frobwareaxw: ping08:02
hoenircould anyone take a look on this PR https://github.com/juju/juju/pull/6414 ?08:57
babbageclunkmenn0: ping?09:26
menn0babbageclunk: pong09:31
dooferladfrobware / dimitern / voidspace / babbageclunk: https://github.com/juju/juju/pull/6460 is short and has a nice big positive impact.09:31
babbageclunkmenn0: hey, just going through the redirect after migration task09:31
dooferladreview please!09:31
* dooferlad goes for coffee09:31
voidspacedooferlad: looking09:32
dooferladvoidspace: thanks09:32
dimiterndooferlad: looking09:32
frobwaredooferlad: does this work with LXD on Y?09:32
dimiternbtw I still need a review on https://github.com/juju/juju/pull/6454 please << dooferlad, voidspace, babbageclunk, frobware09:32
frobwaredooferlad: or, put another way, is the domain name still the same in LXD 2.4?09:32
voidspacedooferlad: LGTM09:33
babbageclunkmenn0: So basically Login just needs to return a CodeRedirect if there's a successful migration, and RedirectInfo returns the addresses and cert from the TargetInfo?09:33
voidspacedimitern: I will look at it in a bit09:33
menn0babbageclunk: that's what I was thinking09:33
=== tinwood_ is now known as tinwood
babbageclunkmenn0: Cool - seems pretty straightforward!09:33
menn0babbageclunk: at a hand-wavey level anyway09:33
dimiternvoidspace: cheers!09:34
menn0babbageclunk: yep, hopefully. I was very glad when I saw rog doing the initial work for this and what he did was very similar to what I was thinking09:35
menn0babbageclunk: I assigned you a card for this on a a-team board btw09:37
babbageclunkmenn0: Yeah, saw an email about that - I'll move it to in-progress then09:38
menn0babbageclunk: sweet09:38
frobwaredimitern: taking a look09:39
frobwaredimitern: personally I think selecting the fastest based on duration is a step too far. why? it so depends on what the machines are doing _at_ that _moment_ in time. And that may be totally different when you come to initiate the SSH connection.09:47
frobwaredimitern: as a first pass do we not just care for something that is listening?09:47
dimiternfrobware: we do care for those we can connect to, and if one takes >100ms while another takes <10ms, we should pick the latter09:48
frobwaredimitern: this is all noise, IMO.09:49
frobwaredimitern: the numbers are noise 100 vs 10?09:49
dimiternfrobware: sorry, I'm not sure I follow :/09:54
frobwaredimitern: if you open and stare at a document for 5 mins. would it matter that it took 100ms or 10ms to open?  If you initiate and do stuff over an SSH connection for 5 mins would it make any difference if the initial connection was 100ms or 10ms. IMO, nope.09:55
dimiternfrobware: ok, I see that, but I'm not sure why do you think picking the lowest-latency endpoint is wrong09:56
frobwaredimitern: it's code that we don't need. to test. to document. or grok.09:56
dimiternfrobware: what do you suggest instead?09:57
frobwaredimitern: probe for a listening connection. if it is "open" just record that fact. I don't think it matters how long it took. there should/would be an overall timeout on the overall probe anyway.09:58
frobwaredimitern: in terms of latency, your sample size is 1.09:59
frobwaredimitern: which is not huge. :)09:59
dimiternfrobware: not necessarily - you could have multiple equally good endpoints10:00
dimiternfrobware: but then it shouldn't matter I guess10:00
frobwaredimitern: I think less is more in this case. all we want to know is if the addr/port is reachable.10:00
dimiternfrobware: so you're saying "quit trying as soon as you connect successfully" ?10:02
frobwaredimitern: if there was more than one answer would we connect on more than one addr:port? If not, then isn't the first enough?10:04
frobwaredimitern: that was the approach I was playing with. http://178.62.20.154/~aim/portscan.go10:05
dimiternfrobware: the way it's currently implemented, I think we'll only connect to one endpoint at a time10:06
frobwaredimitern: right. so first open port would be good enough. true?10:06
dimiternfrobware: but otherwise, with a goroutine-per-hostport it's possible to connect to more than one endpoint10:06
dimiternfrobware: yeah10:06
frobwaredimitern: but would we do that as part of bootstrap?10:06
frobwaredimitern: previously we would blindly connect to the first addr:port. Now we at least verify there's something on the other end.10:07
frobwaredimitern: my take on commits. It should be so obviously simple that I would be nuts not to accept it...10:08
dimiternfrobware: ok, fair enough - will change that and push10:09
frobwaredimitern: appreciated. ty10:09
babbageclunkoops, missed this discussion, I might have reviewed an obsolete PR. Hopefully there are still some useful comments in it dimitern!10:25
voidspacedimitern: ping10:34
dimiternbabbageclunk: thanks! I'm changing it to simplify the logic10:34
dimiternvoidspace: pong10:34
babbageclunkdimitern: :)10:34
voidspacedimitern: do you know how to get juju bootstrap to use ssh (particularly a specific ssh key)?10:35
voidspacedimitern: I have the juju-ci ssh key and can ssh to the machine I want access to10:35
voidspacedimitern: but I can't bootstrap10:35
dimiternvoidspace: that's a manual bootstrap?10:35
voidspacedimitern: is it?10:35
dooferladfrobware, dimitern: re-ping https://github.com/juju/juju/pull/646010:36
voidspacedimitern: no, I just want "juju bootstrap vsphere vsphere" to work10:36
voidspacedimitern: I have the vsphere credentials and configuration10:36
dimiternvoidspace: ah, ok10:36
dooferladfrobware: I haven't tried a public cloud. I put some notes in about detecting the correct domain in a follow up.10:37
voidspacedimitern: mgz says I should be able to do this just using the juju-ci ssh key, but spelunking through the juju-release-tools to work out the right incantation is painful10:37
voidspacedimitern: I can see the code paths that bootstrap, but working out exactly what arguments / environment it is using will take a pen and paper and some time...10:37
dimiternvoidspace: then I think it's up to ~/.ssh/config - if you have a Host section with IdentityFile and Username, etc. set up correctly and you can do 'ssh <IP>' OK (without any args)10:37
voidspacedimitern: and I thought you might "just know"...10:37
frobwaredooferlad: yep, looking10:37
voidspacedimitern: I have that setup10:37
=== gnuoy` is now known as gnuoy
frobwaredooferlad: I think we  need to try at least AWS10:38
voidspacedimitern: so it *should* "just work" if my ssh config is correct?10:38
voidspacedimitern: I wonder if I have some conflicting rules10:38
dimiternvoidspace: I expect so10:39
dimiternvoidspace: as juju's ssh during bootstrap tries effectively `ssh <IP>:22`10:39
voidspacedimitern: I definitely *can* ssh to the IP I want10:39
voidspacebut the bootstrap times out10:39
dimiternvoidspace: without specifying username and key?10:40
voidspacedimitern: correct10:40
dimiternvoidspace: hmm - well, try bootstrap --debug ?10:40
voidspacedimitern: ah, it's trying *my* ssh key - not the juju-ci one10:41
dimiternvoidspace: is the juju-ci ssh key in ~/.ssh ?10:41
dimiternvoidspace: it should try all keys it finds (IIRC)10:41
voidspaceit is10:42
voidspaceI terminated that one when I saw the wrong key - I'll try again10:42
voidspacenope, doesn't seem to try more than the one key10:43
mgzvoidspace: if you just go to the box, su to jenkins10:44
mgzand do the steps as written in the job10:45
mgzthat's all you need10:45
mgzso, set JUJU_HOME=~jenkins/cloud-city and so on10:45
mgzto just repo something on a ci machine, you should do exactly what ci does10:45
voidspacemgz: I want to be able to make a custom build - bootstrap and debug - change and repeat10:46
mgzyou don't need to do your own config unless you're trying to do something else10:46
voidspacemgz: so I *really* want to do it from my box, not from the CI box if possible10:46
mgzyou can just scp a new binary onto the box10:46
voidspacemgz: but I think at this point I have to give up, and do that10:46
voidspaceok10:46
voidspacemgz: dimitern: thanks10:46
voidspacefrustrating, but such is life10:47
voidspacemgz: by the way, deploy_job.py has no reason to exist (juju-ci-tools) - just add that main stanza to deploy_stack.py10:49
mgzyeah, there's a bunch of minor things that could be cleaned up with the older scripts10:49
voidspacemgz: ping11:18
mgzvoidspace: hey11:19
frobwaredooferlad: LGTM as long as we have a sanity bootstrap test for AWS and MAAS. As you mention, should be a change to the LXD provider only.11:36
frobwaredooferlad: I do wonder whether we should query for the domain as it is the LXD provider.11:37
frobwaredooferlad: otherwise at some point this will bite us11:38
frobwaredooferlad: so, a little contradictory to our call. :/11:38
mupBug #1420996 changed: Default secgroup reset periodically to allow 0.0.0.0/0 for 22, 17070, 37017 <canonical-is> <juju-core:Won't Fix> <juju-core 1.25:Won't Fix> <https://launchpad.net/bugs/1420996>11:56
mupBug #1559062 changed: ensure-availability not safe from adding 7+ nodes, can't remove stale ones <ensure-availability> <juju-core:Won't Fix> <https://launchpad.net/bugs/1559062>12:02
hackedbellinihi guys! I'm trying to bootstrap a lxd environment but I'm having a problem. It seems that it bootstraps fine, the lxd container gets online, but at some point it tries to get a client, but it sends the request to my gateway machine and not the machine that I'm running juju itself12:19
hackedbellinihere are the logs: http://pastebin.ubuntu.com/23326644/12:19
hackedbellinithis is my /etc/network/interfaces http://pastebin.ubuntu.com/23326622/ and this is my /etc/default/lxd-bridge http://pastebin.ubuntu.com/23326614/12:20
hackedbellinias you can see, the machine that I'm tying to bootstrap has an ip of 192.168.99.3. There's another machine on the network, the gateway, that has 192.168.99.4, but it has nothing to do with juju. In fact, the only place that I put its ip was on /etc/network/interfaces file. So I'm very confused on why it is trying to do that request on that machine12:21
hackedbelliniam I doing something wrong? I saw the same problem reported in this comment, but I don't think it is related to the bug it was reported: https://bugs.launchpad.net/juju/+bug/1547268/comments/1912:23
mupBug #1547268: Can't bootstrap environment after latest lxd upgrade   <2.0-count> <juju:Triaged by rharding> <https://launchpad.net/bugs/1547268>12:23
mupBug # changed: 1379882, 1383492, 1384350, 1384353, 1384359, 1384363, 1384565, 1384572, 1384725, 1384803, 1385098, 1387751, 1388983, 1389656, 1390525, 1391387, 1391966, 1392340, 1393879, 1393932, 1396159, 1399310, 1399322, 1399604, 1399606, 1400193, 1400207, 1403032, 1403674, 1408307, 1412720,12:29
mup1413653, 1414021, 1414890, 1416406, 1418325, 1419715, 1423278, 1423548, 1424837, 1425137, 1425680, 1429864, 1433244, 1435543, 1435999, 1438258, 1438721, 1438798, 1441749, 1442541, 1444537, 1445053, 1447390, 1449617, 1451616, 1452393, 1452490, 1454627, 1454661, 1455284, 1455646, 1457895, 1458447,12:29
mup1458452, 1459082, 1459148, 1459761, 1461358, 1461534, 1461889, 1461954, 1466272, 1466951, 1467590, 1468187, 1468855, 1474386, 1474892, 1475341, 1475425, 1475641, 1477709, 1480942, 1483987, 1484718, 1484833, 1485017, 1485145, 1490947, 1490977, 1491451, 1492396, 1498518, 1498575, 1498859, 1499332,12:29
mup1503039, 1503449, 1508392, 1508595, 1512191, 1516077, 1524089, 1536838, 1557302, 1568654, 1593855, 161137912:29
rogpeppe1This fixes an intermittent test failure in juju; reviews appreciated, thanks: https://github.com/juju/juju/pull/646112:35
mupBug # changed: 1282025, 1282211, 1284167, 1284734, 1285082, 1285422, 1285685, 1287662, 1287665, 1287669, 1288302, 1288900, 1288950, 1290654, 1290727, 1292344, 1293686, 1295682, 1296515, 1297094, 1298120, 1298141, 1299027, 130063712:38
frobwarehackedbellini: what's in your LXD profile? Run: lxd profile show default13:07
mupBug # changed: 833064, 862418, 945862, 998238, 1009687, 1015637, 1026422, 1029976, 1037027, 1037045, 1043076, 1050245, 1057650, 1057652, 1083558, 1086670, 1089297, 1089298, 1089304, 1096840, 1097018, 1100076, 1122135, 1122889, 1129218, 1129219, 1130771, 1131409, 1137902, 1144355, 1149889, 1156654,13:08
mup1161919, 1163983, 1164601, 1168754, 1169773, 1170419, 1172811, 1174190, 1176740, 1185143, 1191418, 1194869, 1197365, 1197372, 1199888, 1201117, 1202175, 1204851, 1206759, 1208292, 1209044, 1209155, 1209313, 1210035, 1210076, 1210449, 1210484, 1211498, 1212177, 1212936, 1214178, 1214949, 1214952,13:08
mup1214954, 1214957, 1214959, 1214961, 1214967, 1214968, 1215052, 1215252, 1215402, 1215777, 1217282, 1217508, 1217742, 1217768, 1217860, 1218167, 1218176, 1218834, 1219630, 1220260, 1220705, 1220816, 1221834, 1223325, 1224057, 1224368, 1224456, 1224492, 1224515, 1226460, 1226652, 1226786, 1227142,13:08
mup1227586, 1228241, 1228311, 1229199, 1229506, 1229883, 1230053, 1230131, 1230289, 1230370, 1230702, 1231526, 1231551, 1233371, 1233938, 1234217, 1234687, 1234715, 1237304, 1237518, 1238938, 1239368, 1239509, 1239908, 1240461, 1242237, 1243811, 1244760, 1245649, 1247688, 1248839, 1250104, 1250115,13:08
mup1250153, 1250965, 1251118, 1251697, 1252781, 1253056, 1253704, 1254237, 1255502, 1256053, 1256852, 1257758, 1257975, 1258116, 1258644, 1258889, 1259490, 1261324, 1262175, 1266476, 1266729, 1267387, 1267518, 1267541, 1268550, 1269014, 1270543, 1274455, 1277048, 1277116, 1277139, 1278734, 1279986,13:08
mup1300882, 1301352, 1302119, 1302561, 1303455, 1303942, 1304863, 1305385, 1307101, 1308088, 1308491, 1309434, 1309449, 1310453, 1311976, 1312068, 1312173, 1312201, 1313793, 1314754, 1316174, 1316593, 1316602, 1317917, 1319346, 1320080, 1322705, 1322747, 1324904, 1328151, 1329483, 1331694, 1336542,13:08
mup1340483, 1340836, 1341264, 1345848, 1347994, 1358227, 1359573, 1364847, 1364866, 1365623, 1366027, 1366793, 1368362, 1368981, 1372566, 1372759, 1374159, 1445093, 1445658, 1446159, 1446168, 1447235, 1449613, 1449633, 1450729, 1453297, 1453890, 1455089, 1455368, 1455445, 1455703, 1455840, 1456258,13:08
mup1456398, 1456703, 1456728, 1456857, 1457089, 1458758, 1459327, 1459610, 1461339, 1461605, 1461961, 1462097, 1462423, 1462874, 1464235, 1467873, 1467964, 1468359, 1468637, 1496188, 1496221, 1496975, 1497653, 1497788, 1498511, 1498577, 1499400, 1499570, 1501084, 1501093, 1501203, 1502016, 1505309,13:08
mup1505435, 1505460, 1506865, 1506866, 1506994, 1509099, 1510333, 1511543, 1511944, 1514616, 1516698, 1517391, 1517428, 1519081, 1519848, 1521017, 1523837, 1524021, 1527595, 1530992, 1533790, 1534289, 1537586, 1537731, 1540580, 1546492, 1546795, 1550033, 1554060, 1554807, 1564018, 1565196, 1567179,13:08
mup1568161, 1572022, 1583409, 1585750, 1590958, 1599129, 1620830, 162083213:08
frobwarehackedbellini: also, using the defaults I'm surprised to see the .3 for LXD_IPV4_ADDR="192.168.99.3". This would normally be .113:09
mupBug # changed: 1391941, 1392229, 1392379, 1392407, 1392684, 1392810, 1392876, 1393452, 1393883, 1393892, 1394668, 1395900, 1396096, 1396474, 1396862, 1397171, 1398055, 1399303, 1399506, 1399722, 1399730, 1468639, 1468756, 1469318, 1469731, 1470345, 1471138, 1471237, 1474411, 1475386, 1475635,13:14
mup1477281, 1477712, 1478706, 1478762, 1478934, 1478936, 1479278, 1479653, 1481366, 1482876, 1482939, 1483525, 1483932, 1484177, 1484930, 1489217, 1489484, 1490665, 1491608, 1492232, 1492598, 1494782, 1494831, 1495952, 149612713:14
perrito666wow13:14
hackedbellinifrobware: lxd profile? How can I see it?13:15
frobwarehackedbellini: $ lxd profile show default13:16
frobwarehackedbellini: lxc profile show default13:16
frobwarehackedbellini: not lxd, lxc13:16
hackedbellinifrobware: ahh ok, here:13:16
hackedbellinihttps://www.irccloud.com/pastebin/eVgPQz7R/13:17
frobwarehackedbellini: looks fine13:17
hackedbelliniand the .3 is because this machine should have this ip. We have 3 machines here, one that servers nfs, one that provides dhcp and acts as the network firewall (the .4) and this one that runs our services. We were using juju 1.x in it for some time with this bridge configuration without any problems13:18
frobwarehackedbellini: did you run `sudo dpkg-reconfigure lxd` and accept the defaults. Note: you must not have IPv6 enabled in your lxd-bridge setup.13:18
hackedbellinifrobware: what do you mean by defaults?13:19
frobwarehackedbellini: if you run `sudo dpkg-reconfigure lxd` it will ask you questions about your IPv4 (and 6) network setup13:19
frobwarehackedbellini: in general, you can just accept the defaults with the proviso you should not accept any IPv6 setup13:20
hackedbellinifrobware: yeah, but the defaults means "no bridge"? Because I need the bridge on this machine13:20
mupBug # opened: 1391941, 1392229, 1392379, 1392407, 1392684, 1392810, 1392876, 1393452, 1393883, 1393892, 1394668, 1395900, 1396096, 1396474, 1396862, 1397171, 1398055, 1399303, 1399506, 1399722, 1399730, 1468639, 1468756, 1469318, 1469731, 1470345, 1471138, 1471237, 1474411, 1475386, 1475635,13:20
mup1477281, 1477712, 1478706, 1478762, 1478934, 1478936, 1479278, 1479653, 1481366, 1482876, 1482939, 1483525, 1483932, 1484177, 1484930, 1489217, 1489484, 1490665, 1491608, 1492232, 1492598, 1494782, 1494831, 1495952, 149612713:20
frobwarehackedbellini: ah, good point. because you're bridged on br0. (the .3)13:20
hackedbellinifrobware: yeah. But answering your question, I did not accept IPv613:21
frobwarehackedbellini: what's files are in /etc/network/interfaces.d/13:23
hackedbellinifrobware: nothing, just /etc/network/interfaces (http://pastebin.ubuntu.com/23326622/)13:24
frobwarehackedbellini: and the output of `ifconfig -a` and `ip route` ?13:25
hackedbellinihttps://www.irccloud.com/pastebin/DFGS6yFn/13:28
hackedbellinifrobware: ^13:28
frobwarehackedbellini: thanks. going to try and reproduce this.13:29
hackedbellinifrobware: thank you so much! Please tell me if you need more info and/or want me to test anything else13:30
frobwarehackedbellini: one more thing: sudo lsof -i:844313:30
hackedbellinihttps://www.irccloud.com/pastebin/eE1VSqxN/13:31
mupBug # changed: 1332049, 1332221, 1332545, 1333496, 1334390, 1336313, 1336353, 1337318, 1337804, 1340077, 1340133, 1340184, 1340749, 1342738, 1343318, 1343569, 1345440, 1345541, 1349908, 1350008, 1351426, 1353239, 1353482, 1353571, 1354039, 1355216, 1356806, 1356857, 1358376, 1358474, 1359925,13:38
mup1360607, 1361365, 1361723, 1361759, 1363183, 1364013, 1365604, 1365621, 1365633, 1391941, 1392229, 1392379, 1392407, 1392684, 1392810, 1392876, 1393452, 1393883, 1393892, 1394668, 1395900, 1396096, 1396474, 1396862, 1397171, 1398055, 1399303, 1399506, 1399722, 1399730, 1400559, 1400782, 1401568,13:38
mup1402763, 1403955, 1408191, 1408467, 1408472, 1408848, 1409104, 1409381, 1409746, 1409806, 1409856, 1412020, 1412917, 1413052, 1413424, 1414027, 1414710, 1417874, 1418608, 1419864, 1421262, 1423364, 1423626, 1424901, 1425245, 1425506, 1425930, 1426127, 1426217, 1426458, 1426730, 1426940, 1427510,13:38
mup1427770, 1428893, 1429353, 1430220, 1430839, 1430943, 1431401, 1433589, 1434246, 1436766, 1436961, 1438590, 1440445, 1441899, 1441915, 1442046, 1445078, 1468639, 1468756, 1469318, 1469731, 1470345, 1471138, 1471237, 1474411, 1475386, 1475635, 1477281, 1477712, 1478706, 1478762, 1478934, 1478936,13:38
mup1479278, 1479653, 1481366, 1482876, 1482939, 1483525, 1483932, 1484177, 1484930, 1489217, 1489484, 1490665, 1491608, 1492232, 1492598, 1494782, 1494831, 1495952, 149612713:38
voidspacemgz: ping13:46
natefinchanastasiamac: I blame you for this ^ :)13:50
=== coreycb` is now known as coreycb
anastasiamacnatefinch: u blame me for closing bugs? ;D13:53
frobwarehackedbellini: can you try the following for me:13:53
frobwarehackedbellini: juju bootstrap lxd lxd13:53
anastasiamacnatefinch: believe me, i'd rather not have any (would save me pain of some hate mail)13:53
frobwarehackedbellini: and in another window13:54
frobwarehackedbellini: lxc list13:54
frobwarehackedbellini: lxc exec <juju-name-from-lxc-list> bash13:54
hackedbellinifrobware: "bootstrap lxc" or "bootstrap localhost"?13:54
frobwarehackedbellini: cat /etc/network/interfaces.d/50-cloud-init.cfg13:54
frobwarehackedbellini: doesn't matter - whatever bootstrap command you are already using. I just want to bootstrap and then poke around in the image that lxd/juju creates.13:55
hackedbellinihttps://www.irccloud.com/pastebin/vPi7Gpvg/13:55
hackedbellinifrobware: this is the result:13:56
hackedbellini$ lxc exec juju-147208-0 bash13:56
hackedbelliniroot@juju-147208-0:~# cat /etc/network/interfaces.d/50-cloud-init.cfg13:56
hackedbellini# This file is generated from information provided by13:56
hackedbellini# the datasource.  Changes to it will not persist across an instance.13:56
hackedbellini# To disable cloud-init's network configuration capabilities, write a file13:56
hackedbellini# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg with the following:13:56
hackedbellini# network: {config: disabled}13:56
hackedbelliniauto lo13:56
hackedbelliniiface lo inet loopback13:56
hackedbelliniauto eth013:56
hackedbelliniiface eth0 inet dhcp13:56
hackedbelliniops, sorry, was going to pastenbin it but selected the wrong option13:57
frobwarehackedbellini: interesting. because mine 'inet manual'13:57
frobwarehackedbellini: which explains why my bootstrap will never complete. (it never gets an IP address)13:57
hackedbellinifrobware: so you are unable to reproduce the issue?13:58
voidspacemgz: successfully bootstrapping to vsphere from the jenkisn machine13:58
* frobware wonders how this can be13:58
voidspacemgz: using 2.0-beta17 which is the installed version on that box, but still bootstrapping a custom build should be straightforward from here13:58
frobwarehackedbellini: no. but there is mostly definitely an issue where we have 'iface eth0 inet manual'13:58
voidspacemgz: thanks for your help and patience13:58
hackedbellinifrobware: is there any workaround I can do here? I need to setup this to get our services up ASAP13:59
rick_h_voidspace: katco natefinch mgz ping for standup14:00
rick_h_dimitern: ^14:00
kjackalhey dimitern, first of all thank you for making sure local provider works! I still have a couple of questions. Can you spare some a few minutes?14:00
voidspacerick_h_: omw14:00
frobwarehackedbellini: in a conf. call - will work through this again in about 30 mins14:00
hackedbellinifrobware: ok, thanks!14:01
natefinchrick_h_: btw, show-controller only shows the current user even for admins14:14
rick_h_natefinch: ah, ok. That's the gap.14:17
rick_h_natefinch: k, let's punt this then please14:17
frobwarehackedbellini: is your client Mac OS X (sierra) or Linux?14:18
hackedbellinifrobware: Linux. Ubuntu Xenial to be more specifically14:19
frobwarehackedbellini: thx14:19
hackedbellinifrobware: going to launch now, brb in about 30 mins14:19
frobwarehackedbellini: ack14:20
rick_h_frobware: dooferlad http://jeffreifman.com/2016/10/01/fix-macos-sierra-upgrade-breaking-ssh-keys/ reads a lot more clear14:20
rick_h_natefinch: can you check that juju creates/uses RSA keys please as a quick card?14:20
rick_h_natefinch: looking to work out if that link above is an issue with Juju14:20
rick_h_natefinch: frobware dooferlad I'm going to guess we've not been using DSA keys for along time.14:21
dimiternkjackal: hey! can you send me those questions by mail please? too many things to fix today.. sorry :/14:21
kjackalyeap no problem dimitern I am trying to sort them out, let hope i will not send you any email :)14:22
dimiternkjackal: ;) np, I'll have a look later this evening14:22
natefinchrick_h_:  sure14:27
voidspacerick_h_: so I can repro the IPv6 bug on vsphere by the way14:53
voidspacerick_h_: preparing more logging14:54
hackedbellinifrobware: I'm back14:56
frobwarehackedbellini: on the phone still14:56
hackedbellinifrobware: np :)14:56
perrito666lazyPower: this is still a problem? https://bugs.launchpad.net/juju/+bug/1426728 ?15:10
mupBug #1426728: Windows Charms are unable to raise error state <juju-agent> <oil> <oil-2.0> <windows> <juju:Triaged> <https://launchpad.net/bugs/1426728>15:10
lazyPowerperrito666 tbh i dont know, that issue is quite old now. I haven't deployed a windows charm in some time15:10
* perrito666 is fishing for a bug to work on15:12
voidspaceso what I'm seeing is my logging never being hit and therefore machine addresses never being set!15:13
natefinchrick_h_: GenerateKey makes a 2048 bit RSA no-passphrase SSH capable key15:26
natefinchrick_h_: that's what we use for the bootstrap server15:27
natefinchrick_h_: and I verified that the comment matches the implementation ;)15:29
rick_h_natefinch: ty15:34
natefinchrick_h_: now what?15:36
rick_h_natefinch: look at the interive add-cloud and where we left off.15:40
rick_h_natefinch: maybe chat with katco back on the schema updares, i think she was out during some of tgat.15:41
natefinchrick_h_: ahh, cool, yeah, I'd like to get that done15:41
lazyPowerperrito666 - is this expected behavior when upgrading from rc-3 to 2.0.0? http://paste.ubuntu.com/23339291/16:04
lazyPoweri don't think its a problem, just double checking that i haven't managed to botch my controller by upgrading from rc's to 2.0 proper16:05
lazyPowerseems fine, disregard the question.16:08
frobwarehackedbellini: purged my system of LXD and other stale stuff. Get different result now.16:14
frobwarehackedbellini: in fact, I believe I see your error16:14
frobwarehackedbellini: http://pastebin.ubuntu.com/23339436/16:14
marcoceppinatefinch: I'm trying to update juju.fail since 2.0 is out, is 2.1 now "master?16:15
hackedbellinifrobware: yeah it looks like my error!16:16
natefinchmarcoceppi: hasn't been updated16:16
katcomarcoceppi: https://github.com/juju/juju/blob/master/version/version.go#L2216:16
katcomarcoceppi: https://github.com/juju/juju/blob/staging/version/version.go#L2216:17
natefinchmarcoceppi: oh.. hmm16:17
katcomarcoceppi: i think staging is what you want to track16:17
natefinchyeah16:17
natefinchjust figured that out16:17
katcomarcoceppi: master will remain last released version so that we can do hotfixes16:17
natefinchmarcoceppi: master lags behind staging, staging is what master used to be16:17
marcoceppiso I should track staging for blocking bugs?16:19
marcoceppior is juju.fail even needed anymore?16:19
frobwareOMG16:20
natefinchnot sure.... rick_h_ ? ^16:20
natefinchI think we must still have blocking bugs at some point... but we PR into development, so if anything is blocked, that's what would get blocked16:20
frobwarehackedbellini: I think I may have found at why.16:20
katcomarcoceppi: i'm not sure tbh. i think so bc we can once again have a concept of "blocking" for the staging branch; i.e. changes to develop can't land into staging if it's not blessed16:21
marcoceppigotchya, I'll try to sync up with the qa/release team on how blocking bugs are decided so I can update the site16:21
natefinchNew workflow is branch from staging, PR into development.  if/when development passes CI, it's merged into staging.  releases are cut from staging to master16:21
hackedbellinifrobware: really? Why? Is there a fix/workaround?16:24
frobwarehackedbellini: so I'm now back to no address on second bootstrap. still investigating.16:24
=== dames is now known as thedac
perrito666Brb lunch16:30
frobwarehackedbellini: OK, I see the problem now. https://github.com/juju/juju/blob/staging/provider/lxd/environ_raw.go#L15516:43
frobwarehackedbellini: on your bridged configuration this is going to be whatever your DNS deems the gateway (IIRC, .4 in your case). there is no LXD listening there.16:44
frobwarehackedbellini: the only unsatisfactory solution I have right now is reconfigure and use a NAT'd lxdbr0. :(16:48
frobwarerick_h_: ^^16:48
rick_h_frobware: :/ can we get the list of addresses that lxd is listening on and error/note when that's not legit?16:49
frobwarerick_h_: I think it's more fundamentally broken than that. in the case where you do not use a NAT'd lxd bridge we need to understand the network config and not return the gateway address (presumably associated with the DHCP lease).16:50
hackedbellinifrobware: hrm that is sad :(. What do you mean by "NAT'd lxdbr0"?16:53
rick_h_frobware: is this a case where we can say it's not supported? I mean if you don't have a NAT'd lxd bridge doesn't that have impact on getting agents/etc?16:53
rick_h_frobware: or am I mis-understanding things16:53
rick_h_frobware: oh nvm, non-nat'd as in dhcp so it's on the main netwokr16:53
frobwarehackedbellini: if you run dpkg-reconfigure you can say, "my bridge is lxdbr0", and when asked to configure IPv4 subnet, say "yes". This will detect an unused subnet and your containers will typically end up on 10.x.x.x/24.16:54
frobwarerick_h_: correct, it's on your local LAN16:54
frobwarerick_h_: this mode (use my hosts network bridge) is akin to the addressable containers we have on MAAS. The containers (nicely) end up on your local LAN.16:56
rick_h_frobware: right, gotcha. why does this not go boom on maas? because they're on a maas provider host vs being the provider?16:56
frobwarerick_h_: yep16:56
frobwarerick_h_: juju/provider/lxd/environ_raw.go16:57
frobwarerick_h_: this code was changed recently16:57
frobwarerick_h_: https://github.com/juju/juju/pull/607816:58
frobwarerick_h_: though it's not really clear whether it made it better/worse. I suspect many people don't use this setup by default. Clearly we don't in CI.16:58
dimiternfrobware: ping17:02
frobwaredimitern: need to EOD. quick?17:02
dimiternfrobware: I think I did all we discussed on https://github.com/juju/juju/pull/645417:02
dimiternfrobware: if you can +1 it, I'll set it to land17:02
dimiternfrobware: can wait till tomorrow ofc17:03
frobwaredimitern: I would like to cast a fresh eye in the morning. ok?17:03
dimiternfrobware: sure, np17:03
hackedbellinifrobware: I see. But I won't be able to access my containers on my lan, right?17:10
frobwarehackedbellini: not directly17:11
frobware:(17:11
hackedbellinifrobware: can I at least change it later after the bootstrap?17:11
hackedbelliniif not this is a _huge_ problem for me17:11
frobwarehackedbellini: thinking... you could add another NIC to your profile which DHCP's off your LAN...17:12
hackedbellinifrobware: hrmm, how can I do that?17:13
frobwarehackedbellini: let me futz for 5 mins or so... :)17:13
hackedbellinifrobware: k =P17:14
frobwarehackedbellini: how much manual hackery could you put up with?17:14
hackedbellinifrobware: as much as needed, as long as this works :)17:15
perrito666lazyPower: you are not upgrading to 2.0 but to whatever your local working copy of the repo is seems to me17:15
frobwarehackedbellini: my /etc/default/lxd-bridge - http://pastebin.ubuntu.com/23339686/17:21
hackedbellinifrobware: you want me to try to use it?17:32
frobwarehackedbellini: I don't have any quick solution atm17:33
frobwarehackedbellini: I was about to paste some more stuff, but it won't work with juju17:33
hackedbellinifrobware: I see. Let me explain how things are setup here so maybe you can suggest an alternative solution for me:17:36
hackedbelliniThat gateway pc that provides dhcp (the .4) has apache running on it. All accesses to our services will go into it first, and apache will do a reverse proxy to the service in the container17:37
hackedbellinibut the containers are running inside a second machine, the .3, the one that I'm trying to bootstrap juju17:37
hackedbelliniso, that is the reason that the containers need to have access to my lan17:38
frobwarehackedbellini: the containers are doing DHCP, correct?17:38
hackedbellinior more specifically, my lan has to have access to the containers17:38
hackedbelliniyeah17:38
cory_fuI'm hitting a strange issue with the 2.0 GA release and lxd.  xenial instances come up fine, but trusty units get stuck in 'waiting for machine' even though the lxd image is up and running.  If I try to 'juju ssh' to the machine number or unit name, it says that the keys for that unit are not found, if that's useful.  I don't see anything regarding that unit in the debug-log17:55
cory_fuThis only started after upgrading to the GA17:55
cory_fuCould someone please offer some advice?17:55
rick_h_cory_fu: can you check for anything interesting in the lxc logs?17:57
rick_h_cory_fu: do they have network interfaces that can talk to the controller?17:57
frobwarehackedbellini: so this may work...17:58
frobwarehackedbellini: are you still about?17:58
hackedbellinifrobware: so lets try it :)17:59
frobwarehackedbellini: http://pastebin.ubuntu.com/23339861/ - a new LXD profile17:59
cory_furick_h_: They do have network interfaces and networking seems to be working from what I can tell17:59
cory_furick_h_: Any particular lxc log I should be looking in?17:59
frobwarehackedbellini: lxd profile create fix-up18:00
frobwarehackedbellini: use that content, ^^ substituting your bridge name (IIRC, br0)18:00
rick_h_perrito666: going to be a min late18:00
perrito666rick_h_: no worries18:00
perrito666It would feel very weird if one of my meetings started on time these days18:00
rick_h_perrito666: it's getting them to end on time that's hard :P18:01
hackedbellinifrobware: and then I try to bootstrap using that profile?18:01
frobwarehackedbellini: not quite. a little more involved unfortunately.18:02
frobwarehackedbellini: you need to use the lxd-bridge config I gave you earlier18:02
frobwarehackedbellini: sudo service stop lxd18:02
frobwarehackedbellini: sudo service lxd stop <--- CORRECTION18:03
frobwarehackedbellini: sudo service lxd-bridge-stop18:03
frobwarehackedbellini: copy in my /etc/default/lxd-bridge18:03
frobwarehackedbellini: there's no magic here - this one was autogenerated by dpkg-reconfigure lxd18:03
frobwarehackedbellini: then start the lxd and lxd-bridge services18:03
frobwarehackedbellini: kill any juju bootstraps before you do18:04
hackedbellinifrobware: done!18:04
frobwarehackedbellini: lxc profile list --< that lists our fix-up profile?18:05
hackedbelliniyep!18:05
frobwarehackedbellini: ok, I'll repeat my steps and cut+paste them18:05
frobwarehackedbellini: juju bootstrap lxd lxd18:06
frobwarehackedbellini: that will first use the internal 10.67.x/24 network18:06
frobwarehackedbellini: juju switch controller18:06
cory_furick_h_: Actually, while the trusty image has eth0 and external networking appears to work, it doesn't have lxdbr018:06
frobwarehackedbellini: juju ssh status18:06
hackedbellinifrobware: juju ssh status doesn't resolve. I imagine you mean just "juju status"?18:08
rick_h_perrito666: omw18:09
hackedbellinihttps://www.irccloud.com/pastebin/Ae6uBE82/18:09
frobwarehackedbellini: yay18:09
frobwarehackedbellini: and, juju ssh 0 works?18:09
hackedbellinifrobware: it works!18:10
frobwarehackedbellini: we're now going to apply the profile and copy a new .cfg for eth1 into the container.18:10
frobwarehackedbellini: what's in your: lxc profile show fix-up18:10
hackedbellinifrobware: here:18:11
hackedbellinihttps://www.irccloud.com/pastebin/BCLY2tWs/18:11
frobwarehackedbellini: create this on your host/desktop: http://pastebin.ubuntu.com/23339928/18:11
frobwarehackedbellini: run `lxc list` to find the juju container name18:12
frobwarehackedbellini: lxc profile apply juju-2c7439-0 default,juju-controller,fix-up18:12
frobwarehackedbellini: juju switch controller18:13
frobwarehackedbellini: juju scp ~/lan.cfg 0:18:13
frobwarehackedbellini: juju ssh 018:13
frobwarehackedbellini: sudo cp lan.cfg /etc/network/interfaces.d/18:14
frobwarehackedbellini: sudo reboot18:14
frobwarehackedbellini: wait 10s. then `lxc list`. You should see your LAN turn up.18:14
frobwarehackedbellini: http://pastebin.ubuntu.com/23339951/18:15
hackedbellinifrobware: it works! :)18:16
frobwarehackedbellini: Huzzah! \o/18:17
hackedbellinifrobware: so, for now, I need to do that for each container that I need external access, right?18:17
* frobware says, don't try this at home folks... :)18:17
frobwarehackedbellini: yes. though the controller is arguably special.18:17
hackedbellinifrobware: hahaha yeah! When do you think I'll be able to use my lxd-bridge config directly?18:17
frobwarehackedbellini: if you do `lxc profile list` you'll see there's another profile juju-default'18:18
frobwarehackedbellini: but they look identical to me18:18
hackedbellinihrmm interesting18:18
frobwarehackedbellini: are you now in a state you can make progress?18:19
hackedbellinifrobware: yeah finally! Thank you very much for this18:20
frobwarehackedbellini: I will raise this as a bug - no immediate answer as for when it will be fixed, but 2.0.1 IMO18:20
hackedbellinifrobware: great! Please, if you can, ping me with the bug link when you open it so I can subscribe to it18:20
frobwarerick_h_: a devious workaround ^^ for wanting to use your own bridge with the LXD provider.18:21
* frobware needs to EOD for real now. :-D18:21
hackedbellinifrobware: one last question. I'm migrating some stuff from the old juju installation (1.x) to this new machine. The problem is that the machine failed very hard, but I have a backup of it. Where can I find the charms configurations that I was using?18:51
=== alexisb is now known as alexisb-afk
redirgreat work frobware19:11
=== alexisb-afk is now known as alexisb
natefinchman, I wish we were using 1.7 with the standard testing framework... the new subtests are wicked slick.19:58
redirnatefinch: +120:07
natefinchI bet one could revamp gocheck to use subtests20:09
redirpretty easy review https://github.com/juju/juju/pull/6462 PTAL20:09
perrito666natefinch: the issue would be to find that one :p20:10
perrito666redir: looking20:10
natefinchperrito666: I *was* very careful to use a non-specific pronoun there :)20:11
redirtx perrito66620:11
perrito666redir lgtm now you need the tests to pass20:14
redirperrito666: tx. hopefully the QA checks out;)20:16
* redir lunches20:25
alexisbwallyworld, ping, when you come online20:28
wallyworldalexisb: hey21:27
perrito666alexisb: ?21:27
alexisbwallyworld, perrito666, hey sorry guys, will have to wait when I get back21:27
perrito666cliffhanger21:27
mupBug #1634289 opened: new AWS region: us-east-2 <juju-core:New> <https://launchpad.net/bugs/1634289>22:12
thumperpoo22:40
perrito666very mature22:40
thumperwallyworld: seems the the blobstore changed an index between b7 an dnow22:40
anastasiamacthumper: "juju wait" plugin is not part of our codebase... do u know whose it is?22:40
thumperno, but lazyPower probably does22:41
thumperhmm...22:44
wallyworldthumper: it could have done but i don't recall22:44
thumperwell... fuck22:44
thumperboth b7 and master use the same hash for juju/blobstore22:44
thumperbut I'm getting this:22:45
thumperndex with name: files_id_1_n_1 already exists with different options22:45
thumpergopkg.in/juju/blobstore.v2/gridfs.go:69: failed to flush data22:45
thumpergopkg.in/juju/blobstore.v2/managedstorage.go:259: cannot add resource "buckets/1b69fe07-8ce5-40b2-8e08-24eaf5c91e41/tools/2.0.0-xenial-amd64-3ce84f9af0e163f5188d1355dc2dc9fb43a1e992d58dc8af874b98bcccc3c0da" to store at storage path "a76d021e-505a-468a-878f-0ce3a4e9e918"22:45
thumperindex with name22:45
thumperhmm...22:45
wallyworldthumper: i was not aware of anything but i know folks poked around a little in that area, but am not across why and what23:00
thumperI'm following things down the rabbit hole into mgo23:00
thumperit is possible that the gridfs impl there changed23:00
thumperwallyworld: clucking bell23:06
thumpergridfs file index changed23:07
thumperbetween b7 and rc versions of mgo23:07
thumperand it seems it has no way to migrate...23:07
thumperthe code just says "Endure Index, and has unique flag set"23:07
thumperold version didn't have unique23:07
thumperand the result is: sorry23:07
thumperalready exists with other options23:07
thumperso ensure index fails23:08
thumperwrite file to gridfs fails23:08
thumperbugger23:08
wallyworldthumper: what about delting the index23:09
wallyworlddeleting23:09
thumperI may have to manually delete the index23:09
thumperyes23:09
thumperjust investigating23:09
wallyworldand then letting it be recreated23:09
thumperseems a bit fucked up though23:09
thumperthat the mgo gridfs doesn't manage it's own upgrades23:09
thumpersomething to be aware of23:09
thumpermakes me wonder what other time bombs we have hidden23:11
mupBug #1634289 changed: new AWS region: us-east-2 <juju:Triaged> <juju-core:Won't Fix> <https://launchpad.net/bugs/1634289>23:31
perrito666alexisb: ping me when/if you are back23:37
rediroh look a bless on develop23:42
anastasiamacredir: \o/23:43
alexisbperrito666, pong23:50
perrito666alexisb: pong23:50
perrito666what did you need?23:50
perrito666(the ping part was so the computer would make a noise)23:50
alexisbI wante to check in, do you have a few minutes to meet?23:50
perrito666alexisb: certainly23:51
alexisbperrito666, we can meet in the morning if that is better, if you are eod23:51
perrito666pick the communication form23:51
perrito666alexisb: I am never eod23:51
alexisblol23:51
alexisbtha tis not good23:51
alexisbperrito666, will meet you in our 1x123:52
wallyworldanastasiamac: a small one https://github.com/juju/juju/pull/646323:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!