/srv/irclogs.ubuntu.com/2017/02/10/#juju.txt

sfeolehello juju world, quick question.  When writing layered charms can I write multiple functions for 1 decorator?01:27
sfeole@when(foo)01:27
sfeole    def runme():01:27
sfeole  def runmetoo():01:27
sfeoleif anyone knows ?01:28
stokachusfeole, im guessing you'd put @when(foo) before both of those functions01:45
sfeolestokachu, yea, but the 2nd function did not appear to run01:45
stokachuinteresting maybe reactive is just one state per function01:46
stokachuwhy not just write several functions and include them under a parent function that runs when that state is emitted?01:47
sfeolestokachu, yea, i can do that01:47
sfeolestokachu, thanks for that advice01:47
stokachusfeole, sorry i know it's not what you were asking01:47
sfeolei'll try it01:47
stokachubut i can't think of another way01:47
sfeolestokachu, no, but it should work now that I think about it01:47
stokachuok cool01:48
sfeolestokachu, :)01:48
sfeolestokachu, all the examples online always show 1 Decorator for 1 Function01:48
surfHi all, I want to deploy services using juju on the cloud (openstack). Is juju deploys services on linux containers on the top of openstack instance (or) it will directly deploy services on openstack instance.04:31
AnkammaraoHi juju world!!!05:29
Ankammaraowhen i try to push the charm to the charm store i am getting error"ERROR cannot post archive: unauthorized: access denied for user"05:30
Ankammaraoand also charm whoami only showing the user name05:30
stubskayskay: oh, so what is the environment? Its coming from an update to the snap-layer, which ensures squashfuse is installed so snaps work under lxd (it is in process of becoming a required dependency of snapd, but I needed the work around yesterday)07:48
stubskayskay: hmm... so trusty. I guess I'll need to detect the release and only install under xenial07:49
stubat least until the snapd backports are all sorted07:49
kjackalGood morning Juju world!07:54
stubskayskay: Not that that should discourage you from updating to Xenial :-P08:01
=== frankban|afk is now known as frankban
Ankammarao#ubuntu09:24
deanmankwmonroe, hey, are you around ?09:28
AnkammaraoHi , is there any command to revoke or hide the old verions of th charm in the charm store10:10
=== frankban is now known as frankban|afk
=== frankban|afk is now known as frankban
iceyapparently is-leader cannot be called from within the collect-metrics hook? https://bugs.launchpad.net/charms/+source/ceph-mon/+bug/166358412:57
mupBug #1663584: metrics collection hook fails <ceph-mon (Juju Charms Collection):New> <https://launchpad.net/bugs/1663584>12:57
anita_Hi, is there any method to delete any particular version of a charm from charm store? or the full charm itself?13:22
magicaltrouti don't believe you can remove them, but you can grant them unavailable to users13:26
magicaltroutyou couldn't delete them a while ago, but i've not looked recently13:26
anita_magicaltrout_: I tried to revoke a particular version13:28
anita_but i can still read that charm versoin13:28
anita_magicaltrout_: could you please let me know the command?13:29
magicaltroutthats it13:29
magicaltroutbut you will be able to see it, did you check by logging out of the charmstore?13:29
anita_let me try, i remember I tried that way, but still able to read13:30
anita_let me recheck13:30
anita_Yeah, with sign out not able to see the charm13:32
anita_but with sign-in able to read that charm :(13:32
magicaltroutyeah you can13:32
magicaltroutbut no one else can13:32
anita_oh is it?13:32
magicaltroutso thats as close to it being deleted as you can get13:33
anita_ok13:33
anita_Thanks a lot13:33
magicaltroutno probs13:33
gaurangthi, how do we specify resources in the bundle file?13:38
anrahgaurangt: From my knowledge that is not possible13:45
anrahhttps://bugs.launchpad.net/juju/+bug/1623217 is filed for that issue13:45
mupBug #1623217: juju bundles should be able to reference local resources <juju:Triaged> <https://launchpad.net/bugs/1623217>13:45
gaurangtanrah, yeah, this looks to be the same requirement.13:51
gaurangtthanks for pointing out13:51
lazyPowerZic o/13:52
gaurangtanrah, one more thing , if I have already deployed the charm and I need to add a relation to that charm in my bundle (which will be subsequently deployed), is that possible?13:53
magicaltroutno gaurangt13:55
magicaltroutbut you could just take that bundle and add your charm to it and post a new bundle to the charm store13:55
gaurangtmagicaltrout, oh ok.13:56
ZiclazyPower: \o13:56
lazyPowerZic - awesome. glad you're about. I'm about to push the proposed changes for your multi-master scenario13:57
gaurangtI've a specific requirement where I need to deploy one charm manually first and then do some manual stuff on the machines and then deploy the next bundle.13:57
lazyPowerZic - however, there's a bit of complexity for me to get it from my hands to yours. a) the kubedns addon template was updated, and its breaking deployments if i rebuild the charms from teh current source tree.13:57
ZiclazyPower: cool! I have some hours in front of me to test13:58
lazyPowerb) its non-retroactive, so it would require a fresh deploy... or we would need to riff out how to approach this in a sensible manner for your existing deployment.13:58
ZicI can reinstall it, sure13:58
lazyPowerZic ok, sorry about the inconvenience there. I think before this goes GA, we might want to talk about if this should have some auto-magic behind it.13:59
lazyPoweri still have to sort A before i can get it in your hands though. CDK will fail to complete the setup while that KubeDNS addon template has the optional config map bits added, i might just try to fetch the 1.5.2 release addon template and munge it in there after a manual build14:00
lazyPowerZic - however, this tested well in my initial tests. So i'm kind of excited to see if this resolves the multi-master crypto issues for you14:00
lazyPowermagicaltrout o/14:01
magicaltroutnow then squire14:02
lazyPowermagicaltrout  glad to see you made it somewhere safely :)  I'm looking forward to the next summit/conference. Those gents @ the pub were ww1 actors, and were doing re-enactments. I got a nickle tour of Gent + free phillofal for the trouble.14:02
lazyPower\o/14:02
magicaltroutlol14:02
magicaltroutthat was very weird14:03
lazyPoweri also suddenly realize i have no idea how to spell fallafel14:03
Zicfalafel :p14:03
lazyPower^14:03
lazyPowerthat14:03
jrwrenwell, now I know what I want for lunch.14:03
lazyPowerYeah, they were some cool dudes. I thought for sure they were luring me away from the hotel to do nasty things... but nope. they fed me and gave me a history lesson and sent me back on my way14:04
admcleodphillofaldelphia14:06
MmikeHi, lads. I'm trying to run some amulet tests on trusty, but I can't install amulet because it depends on python3-amulet which depends on python3-libcharmstore, which is no more in trusty14:17
ZiclazyPower: hmm, some bad news sorry: my customer is actively working right now on the cluster to prepare their apps to be "k8s-ified", so I can't reinstall it today as they will work to the end of the day and this night (deadlines approach...) monday I'm out of office and I will be back only on tuesday :/14:21
lazyPowerMmike - Sorry you've hit that. Have you filed a bug? It would be good to capture that feedback so I can shop it with the maintainers14:21
lazyPowerZic - ah, that is a bit troubling but not an ultimate blocker. this jsut releives some of the pressure I put on myself to get this in your hands -today-14:21
MmikelazyPower: nope, was hoping I did something wrong - will file one shortly14:22
lazyPowerZic - by then we might even have a sensible approach to updating the existing deploy so its just juju upgrade-charm14:22
MmikelazyPower: I'm filing that against amulet, right?14:22
lazyPowerMmike correct - https://github.com/juju/amulet14:23
Mmikeha!14:24
ZiclazyPower: sorry :( I expected that I can reinstall the cluster this afternoon (it's 15:23 here o/) and let the cluster operational for this night and the week-end, but the customer is actively working this afternoon :(14:24
lazyPowerZic  no problem, no problem at all14:24
MmikelazyPower: so, just to make clear - no bug in launchpad, but create issue in github?14:24
lazyPoweri was just trying to haul tail to get you un-blocked on this14:24
lazyPowerMmike - yeah, i'm fairly certain they dont look at launchpad for amulet bugs (they might, but i'm erring on what i know)14:25
ZiclazyPower: I poweroff-ed my two extra-master for now, as it's not in prod and only one master is ok to let them k8s-ified their apps14:25
lazyPowerZic - good plan14:25
MmikelazyPower: ack, thnx14:25
Zicso they are not hurt by the bug for now14:25
lazyPoweryeah that crypto bug was fairly simple to squash i think in how i approached it14:26
ZicI can power-on them if you want to test your patch on an already deployed cluster14:26
lazyPowerZic - just FYI, there's a notion of leadership in charms. I used the leader to generate those files and push them to the followers.  So teh leader is only the one that generates, and the followers just vaccume that in from the leader-data, and blindly write the contents to the correct filepaths.14:26
lazyPowerits a sort of nieve approach, but i think it's elegant enough that we can fix your deployed units with a simple state toggle14:27
lazyPowerhowever, if you have a beefy machine, it might be good to test this in a LXD environment before we go mucking with your deployed units14:27
lazyPowers/environment/model/14:27
ZicI can pop some VMs on the same ESX which host the current control plane of the k8s cluster, yes14:29
lazyPowerfantastic14:29
lazyPowerZic - ok, lets plan on doing that, and we'll do some testing there before we touch your deployed cluster. I'd like to white glove that deployment as much as possible as it would be your n'th re-deploy at this time.14:30
lazyPoweri dont enjoy making extra work for my users14:30
lazyPower^ you heard it here first folks14:31
Zic:D14:31
ZicI'm preparing the new VM, just one is needed?14:32
lazyPowerZic - yeah, make it beefy. You'll want bare minimum 4 cores 8gb of ram and ~ 50gb of disk space if you're going to deploy CDK in LXD14:33
magicaltroutdon't believe it for a second14:33
Zicoki14:35
ZiclazyPower: it's fun to do things reversely -> I directly began to test CDK on VMs and baremetal, it will be the first time I test it in LXD :)14:47
Zic(will be the first time I use LXD anyway)14:47
lazyPowerZic - its great :) you'll have some shuffling to do14:47
ZicI read about LXD and what differences it exposes to docker or rkt14:47
lazyPoweri'll give you instructions when its ready, you'll have to use conjure-up to deploy initially then intercept and update teh charms14:47
lazyPowerZic - apples and pineapples my friend. machine containers vs app containers14:48
Zicit seems to be the common choice for who only works with VMs the last years14:48
lazyPoweryou get a full init system and the containers look/act just like a "real" linux14:48
Zicthe migration seems to be easier for VM -> microservice with LXD14:48
lazyPowerso its more than just a process with an ip address14:48
lazyPowerYES14:48
lazyPowerexactly14:48
lazyPowerlift and shift is the primary value proposition14:48
ZicI read right \o/14:48
lazyPowerthere's more but we'll leave it at that :)14:48
magicaltroutwhy can't C++ code just resolve its dependencies properly in any IDE :sob:14:50
Zicmagicaltrout: to make you Go? (I'm a C/C++ guy, but it will be the answer of my pro-Go teamworker)14:55
magicaltrouthehe14:55
magicaltrouti've never really done anything in either, they all make me sad14:55
Zicmaybe I will be part of the Go-sect (oh, I mean Gopher!) this year if I can free some time after the K8S project :p14:55
magicaltrouti blame kjackal_14:56
kjackal_good call!14:56
magicaltroutthanks14:56
lazyPowerZic - here's the magic if you're interested https://github.com/chuckbutler/kubernetes/commit/3320fc04015411cdc9ad44d98210ada5137537e315:07
Zicoh this part is in Python ?15:08
lazyPowerZic - yep, the entirety of the kubernetes charms are python15:12
Zicinteresting, so I can actually reading it and understand the entire charm :p15:15
Zicthought it was Go too, or a specific YAML descriptor15:15
magicaltroutna most charms are python15:16
magicaltrouta few in bash15:16
magicaltroutjuju core is Go15:16
Zicyeah, the first time I discovered Juju, it was also in Pytho IIRC15:16
Zicbut the first time I used it, it was recoded to Go :)15:17
Zicand as all new tools of Canonical seems to be in Go this day...15:17
Zic(LXD, snappy, juju, ...)15:18
magicaltroutyeah but they aren't crazy enough to get the public to develop in Go ;)15:25
Zicmagicaltrout: hehe :p15:25
SimonKLBif ~/charms/deps/layer/X is already populated and the repository is updated the new commits don't seem to be pulled when running charm build, am i doing something wrong?15:26
lazyPowerSimonKLB - allow me to introduce you to the best flag ever when having these issues15:26
lazyPowerSimonKLB - when building, pass --no-local-layers15:26
SimonKLBhehe one step ahead of you :)15:26
lazyPower`charm build --no-local-layers`15:26
SimonKLBsame thing then15:26
lazyPowerargh15:27
lazyPowerok i'm no help then15:27
* lazyPower dies a little inside15:27
SimonKLBhaha, ive never had the issue before, so i wonder if its something introduced recently15:27
SimonKLBeither that or im doing something odd15:27
Zicmagicaltrout: few years back, I was not curious about Go at all for two reason 1) I have skills in C, Python, and it seems enough to me for "system programming language" 2) The only well-known project in Go was Docker and, as a sysadmin, not huge fan of it (even if I didn't try, I tend to prefer the LXD approach for my PoV)15:28
Zicmagicaltrout: but as more and more tools in Ubuntu seems to go to Go (...), I'm planning to really take a look at Go this year :)15:29
SimonKLBlazyPower: this isnt something youve stumbled upon before btw?15:29
SimonKLBif youve had a long-running charmbox15:29
magicaltrouti'll learn it, as soon as I've got LXD into Mesos, completed my machine learning course, onboarded my new employee, got some more work in the pipeline and taken a holiday15:29
SimonKLBand build a charm with a layer that has been updated15:30
lazyPowerSimonKLB - nah, i ran into stale stuff because i had local paths when i was building15:30
lazyPowerbut that flag fixed me up, and also, i always map in my charm/layer repo15:30
SimonKLBlazyPower: yea ive had that problem as well, thats why i knew about the --no-local-layers flag15:30
lazyPowerso its whatever i have on the host. so the length of the session of charmbox isn't so much a factor15:30
Zicmagicaltrout: my last concern is that, it seems Go is much loved when C/C++ hurts you15:30
Zicfor personal development, I really love C, as I'm not a dev, just a sysadmin so when I'm developing, it's mainly for myself15:31
SimonKLBlazyPower: yea right, i think i actually have it mounted as a volume as well, still though, its never been any problem getting it up to date when building15:31
Zicno deadline, no teamworker code unreadable :)15:31
magicaltrout"i really love C as I'm not a dev...." said 1 person ever15:31
SimonKLBlazyPower: i just tried deleting the docker folder from deps/layers and then it was cloned fresh15:31
Zicmagicaltrout: :D15:33
lazyPowerSimonKLB - thats weird15:33
Zicmagicaltrout: I'm saying that because I know that, all I'm developing can easily be in Go (or even in Python) without any downside15:34
magicaltroutaye Zic I know what you mean15:34
magicaltroutI do java cause its what they taught us at uni15:34
magicaltroutthats pretty much the only reason15:34
lazyPowerall that java15:34
Zicmagicaltrout: I just did it in C because I like it, and I know it's not a good reason :)15:34
Zic(for profesionnal PoV)15:34
magicaltroutmy boss chew me out a few weeks ago for mocking PHP developers15:35
magicaltroutso I'm no longer allowed to mock languages15:35
Zic:p15:35
magicaltroutI still think PHP developers need to get out more15:35
lazyPowermagicaltrout - you should replace your boss with a very intricate webservice (in your language of choice) (i'm only half kidding)15:36
magicaltrouthe is a webservice15:36
magicaltrouti got chewed out over email15:36
mbruzekNothing wrong with Java15:36
Zicfor what I'm doing, Go (or Python) seems to be a better choice than C in fact, but as I'm developing for myself and not profesionally, I have more fun in developing in C, as it really feels low-level speaking to the machine15:36
* magicaltrout will happily go as abstracted as required for it to be easy :P15:37
magicaltroutbut for machine learning stuff its all python these days15:37
magicaltroutand charms15:37
lazyPower^15:37
lazyPowerThat15:37
magicaltroutso my python fu is slowly growing15:37
lazyPower"and charms"15:38
lazyPowerthats what i like to hear15:38
Zicyeah, it's the TL;DR : I now know that I can code Juju charm in Python or Bash :)15:38
Zicso my Go's learning can wait a little more :p15:38
magicaltroutwell when i get this mesos stuff building I'll have the best container stack on Jujucharms.com :15:38
magicaltrout:P15:38
lazyPowerZic - i'm happy to provide all the distraction of learning go that you require if its to charm stuff up15:39
lazyPowermagicaltrout - thats a pipedream sir, CDK is clearly > mesos. We'll do the pepsi challenge if you require15:39
magicaltrouthehe15:39
magicaltroutwe'll see15:39
magicaltroutwe'll see15:39
lazyPowerindeed15:39
SimonKLBlazyPower: another wierd one, after juju upgrade-charm im setting "could not download resource: HTTP request failed: resource "X" not found" in the logs15:40
magicaltroutthose who like following the crowd use CDK... those who like doing science and getting stuff done, use Mesos! ;)15:40
SimonKLBhowever, i do have the resource locally15:40
SimonKLBi.e, /var/lib/juju/agents/unit-charmname-1/resources/X exist15:41
ZiclazyPower: I didn't learn Go before because it was too "have a foot in each camp" : I have C for my self-pleasure to code, and I have Python/Bash for my work (as a sysadmin)15:41
ZiclazyPower: but today, as Go is more mature, I see it everywhere15:41
lazyPowerSimonKLB - when you upgrade a charm (if local or --switch) it will drop the resource from the controller15:41
lazyPowerSimonKLB - which means you need to re-attach15:41
Zicso... yeah, I plan to learn Go somewhere in 2017 :p15:41
ZicI heard that day will be switched to 27 hours instead of 24 this year15:42
SimonKLBlazyPower: ahaaa!15:42
Zic:>15:42
lazyPowerZic - dont torment me with a good time15:42
bryan_atthi all - looking for where I should go for conjure-up support. I've deployed it but cannot access horizon (it's unclear what the URL for horizon should be, and the default or "/dashboard" on the deployed host do not work)15:45
lazyPowerbryan_att - you're in the correct place, if not here then #openstack-charms. but stokachu and mmcc are the primary authors of conjure-up15:46
rick_hbryan_att: what substrate did you deploy to? bryan_att is the horizon exposed and have something of an address you can reach from where you're at?15:46
stokachuo/15:46
lazyPowerand with a response time like that ^ you're in good hands15:46
bryan_attrick_h: not sure what a substrate is, but it's Xenial minimal server with updates/upgrades only15:47
Zicif I was a developer, I will take time to learn as many languages I found "cool"... as a sysadmin, I just sticked with "know one language for each task, C for system-programming, Python for scripting", but I revised my mind and will do an exception for Go, as I saw more and more employee with Go in their sysadmin skills15:47
rick_hbryan_att: did you go to lxd, maas, or something else?15:47
stokachubryan_att, did you select localhost?15:47
stokachubryan_att, openstack with novalxd?15:47
bryan_attrick_h: yes that was the only option15:47
bryan_attstokachu: yes, all the instructions as stated on the quickstart page15:48
stokachubryan_att, can you paste.ubuntu.com your `juju status` output15:48
bryan_attstokachu: http://paste.ubuntu.com/23967373/15:49
stokachubryan_att, looks like openstack-dashboard/0*    active    idle   14       10.0.8.149      80/tcp,443/tcp  Unit is ready15:50
stokachuso http://10.0.8.149/horizon15:50
stokachubut it also looks like some of the ceph stuff isn't up yet15:50
ZiclazyPower: my VM is ready by the way, ping me when I can begin the test :p15:51
ZicI'm here for the two next hours15:51
lazyPowerZic - i'm still waiting on a good build of bins from the master branch. we're blocked on https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/213 otherwise15:52
lazyPowerthe build routine since we're building all arch's and all components in a single job takes upwords of an hour and a half15:52
Zicok15:52
lazyPoweri'm 35 minutes into a 1.5 hour build15:53
lazyPowerso only 60 minutes to go \o/15:53
lazyPowerthen i'll be pending the upgrade test. this is likely to wait until Monday for you15:53
lazyPoweroorrrr15:53
lazyPoweryeah, probably monday now that i think about it more15:53
lazyPowerand i should have the upgrade logic sorted by then as well15:53
Zics/monday/tuesday/ actually :p but even if I'm on a weekend, I will take a look because I'm too curious even when I'm away from the PC :)15:54
ZiclazyPower: to a near subject, first I thought my kube-dns CLBO-ing sometime (~10th times, and then reteruning to normal state) was maybe not related to this issue, but since I poweroff-ed my two extramaster, I didn't have a single CLBO of kube-dns15:56
Zicmaybe this fix... will fix this too15:56
Zicas the kube-dns CLBO event is tied to the readyness/liveness check, which querying the API (and maybe get the certificate error? I don't find the way to confirm this)15:57
Zicwe'll see15:57
bryan_attstokachu: how do I access horizon at http://10.0.8.149/horizon is that is not a routable subnet on my local net? Also see the next paste which is the result on the host itself:15:58
bryan_attstokachu: attempt to access horizon https://www.irccloud.com/pastebin/EhMwXriO/15:59
stokachubryan_att, you can use sshuttle to setup a connection to that 10.0.8.0 subnet15:59
stokachubryan_att, so sshuttle -r user@hostmachine 10.0.8.0/2416:00
bryan_attstokachu: ok but to get this clearer, is it assumed that conjure-up is being deployed on a desktop host, or is it designed to be deployed on a server? If the latter and we need to use another tool to access it (e.g. sshuttle), that would be good to clarify in the docs.16:00
stokachubryan_att, yea that depends, if you're install openstack with novalxd on localhost it is assumed that it's running on your laptop16:01
stokachubryan_att, but we should document the sshuttle way b/c some users do ssh into another machine and test it16:01
bryan_attstokachu: ok, so for my use case, I'm deploying this on a Intel NUC5i7 with 16GB and xenial-server minimal install, then accessing it via other machines on mt local net to deploy workloads / tests etc using the OSC.16:02
stokachubryan_att, https://github.com/conjure-up/conjure-up/issues/67216:02
stokachubryan_att, yea you'll want to use sshuttle to access that openstack16:03
stokachuyou'll also need to setup a second sshuttle session to access the actual compute nodes deployed via openstack16:03
stokachuopenstack on novalxd is meant mostly for development16:03
stokachuwe have another one that runs on MAAS and is meant for production16:03
bryan_attstokachu: this is also for development, but I need an OpenStack deployment that is more "real" than devstack which cannot do what I need for tests, e.g. per the OPNFV Models project https://wiki.opnfv.org/display/models/Testing - e.g. I need to bring up 4 VMs, driven by Tacker as VNFM16:05
bryan_attstokachu: I am working with narindergupta to get the OPNFV JuJu installer (JOID) running on newton but also need something lighter, so I am trying conjure-up to see what it can and can't do.16:06
stokachubryan_att, ah ok16:06
stokachunarindergupta, can you walk bryan_att through using sshuttle to access his openstack environment?16:07
stokachubryan_att, im working on more openstack spells if there is something you need specifically let me know16:09
lazyPowerZic - makes sense to me. seems like whichever scheduler scheduled the kubedns pod doesn't always correlate with whichever api-server was handling the request. and when thats the case, if the crypto keys were mismatched it makes sense it failed because it uses teh default service token to do that auth request16:10
ZiclazyPower: just saw mbruzek comment on your fix : https://github.com/chuckbutler/kubernetes/commit/3320fc04015411cdc9ad44d98210ada5137537e3#commitcomment-2083488316:10
Zicdo you plan to migrate to snap instead of apt in future releases?16:10
lazyPowerZic - we're not using apt now ;) we're using tarball packages16:11
lazyPowerZic - but yeah, we're in the process of snapping up kubernetes16:11
mbruzekZic we are looking into snaps as the future yes.16:11
Ziccool16:11
ZiclazyPower: oh yeah, for k8s part, but for some other part like etcd, it fetch the package from the deb archive and you're sticked to the freezed archive version so16:12
lazyPoweryeah, sabdfl himself is actually working on the etcd snap16:12
Zic(except security/fix upgrade)16:12
lazyPoweri'm a bit concerned about the snap refresh happening under the charm and getting newer versions than the charm is ready for, but we'll jump off that bridge when we come to it i guess16:12
magicaltrouti like the fact your jump off bridges16:14
magicaltroutnot cross them....16:14
magicaltroutyour/you16:14
lazyPowerintentional magicaltrout  ;)16:14
lazyPowerbecause the day i hit that issue, i'm going to commit seppuku16:14
ZiclazyPower: it's a bit offtopic here, but I don't track the news about snappy in Ubuntu -> is Ubuntu Desktop fully build on snappy and no .deb is part of the future?16:15
Zicor snap is just camp to "some packages which moves a lot"16:15
lazyPowerZic - we're not quite there yet, but yes, snaps are the future of ubuntu.16:15
magicaltroutautomated under the hood rollout of all your container tech where you can't yet peg versions... what could possibly go wrtong \o/16:15
lazyPowermagicaltrout precisely16:15
ZiclazyPower: with a total replace of deb or just as a "sidekick" for some packages?16:15
Zic(as it is actually used, in fact)16:15
lazyPowerZic - hard to say, but i think its where we'd like to go is fully snapped.16:15
lazyPowerwe've recently added classic-mode snaps to make making "unconfined" snaps much easier to build and an acceptable delivery pattern. Where teh strict confinement is like final-boss mode of snaps.16:16
lazyPowerthere are some corner cases that dont lend itself very nicely to strict-confinement, like the CNI plugin structure of kubernetes16:17
lazyPowerbut we're working through that and talking with the snappy developers to find a good path16:17
ZicI need to refresh me about all Ubuntu technologies :p it's quite a long time I didn't read about Mir, Snappy, ...16:18
Zicrecently I updated my info about Unity 8 and... *suspense* Juju \o/16:19
ZicI was quite impressed/worried that Ubuntu is going to JavaScript application (through Qt/QML) for desktop16:20
Zic</offtopic>16:20
lazyPowerZic - the best place to get info about snappy is from the snappy mailing list. There's many threads daily from developers integrating and making snap packages.16:20
lazyPoweryou'll find some neat tricks, future-talk, and get the scoop on all things snappy16:21
lazyPoweri really like the new format of ubuntu-core with the USSO centric bootstrap where on first boot it prompts for your user credentials and fetches ssh keys, so yoyu dont have an insecure default username/password, which  helps eliminate vectors that contribute to things like the mirai botnet16:21
lazyPowerits a *lot* like the cloud-init story where it fetches ssh keys on bootstrap and doesn't ship with default credentials. but has a fancy TUI for all of it16:22
MmikeHello, again! I've deployed my juju env on amazon AWS but the 'login with sso' button in juju-gui still yields with 'authentication failed: no credentials provided'. Do I need to configure something else for this to work?16:23
Mmikerick_h: ^^16:23
rick_hMmike: is this something you bootstrapped?16:23
Mmikerick_h: it is16:23
rick_hMmike: then the sso button doesn't do anything. I've filed a bug on the GUI on this and we're looking at updating that16:24
Mmikerick_h: I did 'add-credentials' for aws and ...16:24
Mmikeoh16:24
Mmikerick_h: thank you16:24
Mmikerick_h: do you have the bug url handy, maybe16:24
Mmike?16:24
rick_hMmike: https://github.com/juju/juju-gui/issues/236016:25
ZiclazyPower: I'm so attached to the APT/.deb architecture but ideas that snappy exposes seems so cool that yeah, I'm excited about how it will emerge in future Ubuntu releases16:25
lazyPowerZic its already availble by default in xenial+16:25
Mmikerick_h: thnx, much appreciated16:25
ZiclazyPower: yeah, but not so much integrated for GUI apps (the only case I used it for now :/)16:25
lazyPowerZic - as a test, you can sudo snap install charm16:26
lazyPowerthat will get you the latest/greatest charm-tools in snap format16:26
lazyPowerZic - and i dont know about that :) there's quite a few GUI apps in the snap store as well16:26
ZiclazyPower: the confinement of this GUI apps in snap break some Desktop integration like the Unity HUD, the GTK decorator, the clipboard, etc.16:27
lazyPowerah yeah16:27
Zicbut it's a work in progress I guess16:27
lazyPowerthat is a challenge16:27
lazyPowerhttps://uappexplorer.com/apps?type=snappy_application16:27
lazyPoweris what i was about to link as counter point16:27
Zicand the old XOrg is not helping on this part16:27
ZicI think it will be easier with Mir16:27
lazyPowerbut i cede to your findings16:27
Zicthe only technology I'm feared that Canonical push is Mir actually (instead of Wayland)16:28
ZicI know that they choose Mir instead of Wayland because of Ubuntu Touch16:28
Zicbut I feared that, in coming future, Ubuntu will be too different than other distribution who choose Wayland16:28
Zicfor all other tech (juju, snappy, LXD, Unity) I'm glad of choices made16:29
ZicI'm just a bit curious/worried about Mir16:30
magicaltroutooh nice16:35
magicaltroutkjackal_: got mesos master + slave running docker containers locally using the universal stuff16:35
magicaltroutdon't need marathon after all16:35
magicaltrouti'll take a stab at finding out what goes on under the hood next week.16:36
Zicmagicaltrout: (offtopic again, sorry) -> we never used Mesos directly at my company, only via DC/OS and... was not fan at all16:37
ZicI'm saying that because the customer which went with DC/OS in his mind is now currently migrating to K8S through CDK :)16:38
Zicnot the same techno at all, but he drops DC/OS after seeing K8S16:39
magicaltroutwell whatever works :)16:39
magicaltroutwe use a lot of Mesos at NASA as it allows us to deploy non containerised workloads to it16:40
Zicmagicaltrout: in fact, I think I had a bad experience with Mesos but it's DC/OS's fault, I never use "raw"-Mesos16:40
magicaltroutbut I'd also like to bring juju to Mesos as a "cloud" which is why I'm plugging LXD into it, but you know, Kubernetes has a lot of fans16:40
Zicused*16:40
magicaltroutbut I use DC/OS on my consultancy servers to deploy all my stuff16:40
magicaltrouti'm more than happy with it, but i think the earlier versions were a bit funky16:41
magicaltroutand TBH vanilla mesos is easy to stand up anyway16:41
Zicyeah, my main concern with DC/OS was, when it block or crash, it only prompt you with a "Give us a visit at Slack" in the first version16:41
magicaltroutlol16:41
magicaltroutokay its not that bad :P16:41
lazyPowerwho doesn't like joining private slack instances? *eyeballs the 10 orgs he's idling in and hasn't spoken to in 6+ days)16:42
magicaltroutindeed16:42
Zicalso, we find that one of the GUI which was normally protected by the DC/OS oauth was actually accessible if you forge a special link that bypass the reverse-service...16:42
Zicwe drop it early in our PoC, don't know if it's better now :)16:43
magicaltroutZic: if you deploy on prem and don't lock down the ports there's a shit load open to the  world :)16:43
Zicyep16:43
magicaltroutdunno why they don't resolve that, but I'm not a Mesosphere dev, so I don't care :)16:43
Zic^^16:43
magicaltroutiptables < lock-downmesos.save :)16:43
magicaltroutanyway, I think the container orch landscape is big enough for a few platforms, clearly k8s is winning, but I don't think Mesos will go anywhere in the near future16:44
magicaltroutor maybe it will and something else will come along, but clearly there's a lot of scope for different platforms16:44
magicaltroutthey'll all do similar stuff at the end of the day16:45
Zicit's not the same abstraction of hardware, between k8s and Mesos, I think there is place for both of them16:45
lazyPower^16:45
lazyPowerthat16:45
ZicMesos presents you hardware like a "bunch of ressources"16:45
ZicK8S orchestrate containers16:45
Zicit's not same approach for me16:45
magicaltroutyup16:45
magicaltroutthats true16:45
lazyPowerZic - however k8s has support for resources, *and* cri will change that story16:45
magicaltroutpersonally, I like containers, but i like raw resource as well ;)16:45
lazyPowerassuming lxd makes its way into CRI16:45
lazyPowerwhich i heard once, but haven't heard anything about since16:46
lazyPowerso we cant really commit to heresay16:46
ZicFYI, I was not fan at all of container before K8S, because I saw containers as "devs wants to do silly things in my machines"16:46
magicaltroutwell everyone seems to think it will happen, without actually committing to it16:46
magicaltroutand your commander in chief was like "we'll build the stuff, and someone else will plug it in "16:46
magicaltroutwho knowa16:46
Zicwith K8S, container in prod is a viable thing16:46
magicaltrout -a +s16:47
Zicbut since K8S, I just embrace the philosophy of microservices in prod16:47
magicaltroutdepends what you deploy though doesn't it16:48
Zicbefore, it was just for me  a "lab for devs", and if docker image go in prod I was like "meh, it's running in the container, don't know, poke the dev"16:48
magicaltroutyou can't classify a 100 node hadoop cluster as a microservice :)16:48
lazyPower^16:48
lazyPowerthat16:48
Zicsince K8S, we're more in the devops approach here (full-collaboration between dev & ops)16:48
Zic(we don't wait K8S in fact :p but we envisage K8S to make things better to run container in prod)16:50
lazyPowermagicaltrout - and i get the point. Everyone wants it, and I'd love to have the time to work on that and get my hands dirty with the lxd team. but a) i'm not a go developer (yet) and b) without an official roadmap item, i cannot commit to anything happening anywhere. but i would suspect its brewing somewhere in the corners of canonical.  If not it'll be one of those "why haven't we done this yet? who's responsible" and then i'll get ot stand16:50
lazyPower on the carpet somewhere and answer to the bosses.16:50
magicaltroutindeed16:51
magicaltrouti don't doubt it16:51
ZiclazyPower: slap if I'm indiscret, but are you directly working at Canonical?16:52
ZicI thought so, but I saw in your slides that you put your @ubuntu.com mail, not the @canonical.com one :)16:52
lazyPowerZic - yep. I'm co-architect of CDK with mbruzek16:52
Zicso I'm asking :x16:52
lazyPowerZic - i value the community contribution more than teh company contribution. I will be an ubuntu community member longer htan I will be a canonical employee (is my justification for that)16:52
ZiclazyPower: like this kind of spirit :)16:53
Zic(as an Ubuntu Member too :p)16:53
lazyPoweri have no plans on going anywhere, but we are who we are because we have awesome community members16:53
lazyPowerlike yourself, who aren't afraid to break things and let us know how we can do better and even sometimes conetribute those better ideas16:53
lazyPower*contribute16:53
lazyPowerso, rather than identify via my job, i'll identify via our contributions16:54
lazyPoweri also chose the ubuntu membership cloak instead of the canonical cloak (if you /whois me)16:54
lazyPowerlittle things like that :)16:54
lazyPoweri mean magicaltrout is about as much of an ubuntu member as any of us employed here :)  speaking of magicaltrout  - have you applied for membership?16:55
magicaltroutdunno what you're talking about16:55
magicaltrouti did get a canonical rucksack yesterday though16:55
magicaltroutwhich was nice16:55
lazyPowerhttps://wiki.ubuntu.com/Membership16:55
ZiclazyPower: my company wants to buy official support from Canonical for CDK, it's cool (as it's the way Canonical can makes money and continue to support Ubuntu), but I prefer to directly chat with the Juju team than the commercial support :)16:55
magicaltroutyou can do both Zic16:55
ZicI will :p16:55
magicaltroutthat way lazyPower gets paid :P16:56
lazyPower\o/16:56
lazyPowerand i like getting paid16:56
lazyPowernot gonna lie16:56
magicaltroutpays for beer16:56
Zicbut in fact, I will reserve lazyPower for me, and let the Canonical support to my teamworker *evil laughing*16:56
bryan_attstokachu: if I get it up and running, let me see what services are included and I'll get back to you. Apart from the basics, I do need Heat at least.16:57
Zic(you can keep lazyPower's body, I'm just reserving his minds)16:59
lazyPowerthis got awkward fast16:59
Zic\o/16:59
Zicas it sounds awkward in French, it's even worse in English17:00
lazyPowerhttps://imgflip.com/i/1jdjzm17:01
magicaltroutdon't worry lazyPower Zic told us he uses C for self pleasure earlier....17:01
ZiclazyPower: even if I'm preferring IRC over Slack, /giphy miss in IRC :)17:01
ZiclazyPower: anyway, do you think that we can obtain commercial support for a multi-master environment? as it's not marked as production-ready officially17:05
ZicI don't even know if I will put multimaster in prod or just in preprod17:05
lazyPowerZic  - thats one of our line items for GA, is to have HA master sorted17:05
Zic(as we're planning to have a separate cluster for preprod)17:05
lazyPowerthe only thing we dont have that i'm aware will be a request is federated clusters17:06
lazyPowerand i think once we finish our plumbing, get the upgrade story bulletproof, and have HA masters, we're basically at GA at that point.17:06
lazyPowerand our upgrades are looking pretty good so far, there's more work to be done17:06
lazyPowerbut the 1.5.x to 1.6.x upgrade will be teh final boss test of that, and then its time to rubberstamp17:06
Zicwill gladly any troubles I will run of course :D17:07
Zic+report17:07
lazyPower:) we appreciate it17:07
ZicI will let you know who is the customer when it will go prod :)17:12
Zic(I think some of you may already know it)17:13
=== frankban is now known as frankban|afk
=== fginther` is now known as fginther
stormmorehowdy juju world!19:04
lazyPowerhey stormmore19:07
lazyPowero/19:07
lazyPowerstormmore - also i know you were tracking this. HA master fixes incoming https://github.com/chuckbutler/kubernetes/commit/3320fc04015411cdc9ad44d98210ada5137537e319:08
stormmorelazyPower o/ good to have you back :)19:10
lazyPower:D glad to be back. even if only for half a day. i'm about to bounce to get my new glasses (no more orange tape!)19:10
stormmorelol I have http://www.clicmagneticglasses.com/ which freak some people out :)19:11
lazyPoweroh man i want some of these19:12
lazyPowernext year when the benefit has re-upped i might do this19:12
rick_hyea, at first those were crazy but then I thought...that's a damn good idea19:12
stormmorelazyPower, you will crack up at this. I am trying to architect a standalone master node!19:12
lazyPowerstormmore - why would i crack up at this? you can even do it as a phaux HA with lxd and a reverse proxy19:13
stormmorerick_k and lazyPower I love mine :) have to order direct if you want anything more than a pair of readers19:13
stormmoreoh really! I was just thinking of creating a base Ubuntu install with MaaS, and KVM. Then have VMs for Juju, and k8s master then add other hardware nodes for the workers19:14
stormmorelazyPower I am thinking of trying to make it useable for 1) air-gapped rooms and 2) to bootstrap additional data centers easily19:16
stormmorelazyPower do you have a link for phaux HA?19:17
lazyPowerstormmore - nah i just cooked it up in my head. the premise is deploying to LXD on the unit, and setting up a reverse proxy for the apiserver endpoint19:18
lazyPowerso you could in theory, poke individual containers with upgrades and what not, and lose a container and still remain online.19:18
lazyPowersimulated HA via a single point of failure19:18
stormmorea true DC in a box idea then :)19:18
lazyPowerstormmore - thats exactly what we did in Gent, ran a bunch of deployments in lxd19:19
lazyPowerpeople were kind of blown away that you can simulate network partitions and what not on a single box19:19
stormmoreI thought about that but I wasn't sure how to get the juju controller to handle the LXD and the ability to add hardware nodes through MaaS19:19
lazyPowerjuju deploy --to lxd:# kubernetes-master19:20
lazyPowerthe networkign there should work pretty well as spaces are fully supported on maas19:20
lazyPowerhowever we need to investigate extra bindings in the kube charms for that to be truly useful19:21
magicaltroutif i get lxd in mesos i'm going to name it.... Fauxpenstack19:21
stormmoreoh I get that part but how do you configure the local juju controller ... yes I could use manual for it but then how do I get juju to add-node using maas19:21
lazyPowernext cycle maybe, we're pretty up to the gills in terms of features for this cycle.19:21
stormmoreit is basically the 1 controller - 2 cloud problem19:21
lazyPoweryou could just juju deploy ubuntu to get a clean server install19:21
lazyPowerthen use that machine # to start colocating the lxd services19:21
lazyPowerand scale out using juju add-unit ubuntu19:22
lazyPowerits not directly straight forward, but would work19:22
stormmoreat least from my understanding you would have to manually add each node to juju19:22
lazyPowerstormmore - lets follow up on this next week for a "for fun" session19:22
stormmorelazyPower sounds "fun" ;-)19:23
lazyPoweri bet we can get you moving with minimal fuss modeling that as a distributed lxd service19:23
lazyPoweracross many physical units19:23
stormmorefor the time being I am going to have VM and Physical nodes handled by MaaS19:23
bdxlazyPower: "modeling that as a distributed lxd service" - I would love to know what you are talking about here19:23
bdx:-)19:23
lazyPowerbdx nobody poked you ;)19:24
lazyPower<319:24
bdxI heard distributed lxd service and I came running19:24
lazyPowerbdx yeah man, there's a lot we can do here, i'm sure we'll find an end of the sidewalk at some point but if we're as far along with networking in the MAAS substrate this should be completely doable with minimal mods to teh charms.19:24
lazyPowerand iirc, thats our furthest running story with regards to juju spaces networking19:24
stormmoreI am not sure if it would need to be a fully distributed lxd service (not that that wouldn't be cool too) but the ability to put all the management services on to the master node in lxds and add other k8s worker nodes that are hw / maas driven is basically want I am wondering about19:25
lazyPowerstormmore - completely doable. my manual environment is like that19:25
lazyPoweri have 3 workers that are just spare hardware, all the management/control-plane is either smashed on the metal or in lxd19:26
lazyPoweri dont recommend smashing on metal unless you like pain in the future19:26
stormmorelazyPower yeah but it is manual, would be nice to use MaaS for the hw nodes ;-)19:26
lazyPowersame principal19:26
lazyPowershould be a similar path to success19:26
lazyPowerif you *need* to have the metal unit represented first, you can juju deploy ubuntu, that will give you a clean metal ubuntu image and you can start modeling there19:27
* lazyPower checks the juju help-commands to see if there's one to just reuqest a machine via the provider19:27
lazyPoweradd-machine                Start a new, empty machine and optionally a container, or add a container to a machine.19:27
lazyPowerstormmore - juju add-machine --help19:28
lazyPowerabsolutely no schenangans needed. add-machine can reuqest clean metal from the provider.19:28
lazyPowerwell clean-metal being vm, container, metal, et-al19:28
stormmorelazyPower I got juju running on localhost using juju deploy manual/localhost my-cluster but I couldn't figure out how to then point that controller to a maas cloud19:29
lazyPowerlook at juju add-user/ juju grant19:29
lazyPoweryou can take the output there and add it to your other juju workstation to control the controller.19:29
stormmoreah you are still thinking that I would be managing this master from another system :)19:31
lazyPowerare you meaning a self hosted full stack juju bit?19:32
stormmorethe workflow I am looking at accomplishing is bootstrap juju on localhost and use that controller to hook into MaaS to add additional hosts. I believe there is only 1 controller per cloud rule19:32
lazyPoweroooo19:32
lazyPoweryeah your adds would be manual then19:32
lazyPowerand thats less than optimal19:32
lazyPowerat least if this is how i think it is19:33
stormmorethat is why I am thinking using MaaS and KVMs for the components other than k8s worker nodes19:33
stormmoreat least MaaS can handle both VMs and HW in the same controller19:34
stormmorethe end state (hopefully) will be the master node can act like a client as well when needed19:35
stormmoreor removed from the environment once the subservices have been hardened into the environment19:36
stormmorethe messy part is I am considering using Ansible to orchestrate the bootstrapping of this node as it doesn't need to bootstrapped itself19:43
lazyPoweryou could probably get away with a pretty short bash script19:50
lazyPowerbut i digress i need to jet to run some errands. keep me in the loop stormmore and i'm happy to lend a hand/input where applicable19:53
lazyPowercheers o/ have a great weekend everyone19:53
derekcatAnyone know where Juju keeps its known_hosts file?  It keeps telling me to delete the offending key in /tmp/ssh_known_hosts[numbers] when I try to juju ssh to a unit...  Machines originally added via: juju add-machine ssh:ubuntu@[ip address]19:58
derekcatThe /tmp/ssh_known_hosts file appears to be a very temporary file..  Gone by the time the ssh attempt fails.19:58
rahworkshey sup everyone, I can't seem to login to jujucharms.com. can someone help me out20:32
rahworksThis is what i see when i try to login to juju charms.com20:34
rahworkshttp://imgur.com/a/YZILS20:34
magicaltroutyeah i think the SSO is having a fit20:41
magicaltrouti can't get into the wiki either20:41
bdxlazyPower: we are trying to install deis on cdk and getting some crazy errors ...20:42
bdxlazyPower: have you installed deis on cdk successfully?20:42
bdxlazyPower: were hitting this https://github.com/conjure-up/conjure-up/issues/52020:47
bdxlazyPower: trying your workaround now20:47
stokachubdx, if you get it working can you post the steps in that bug?20:48
stokachuso i can automate it20:48
bdxstokachu: yes ... we are so close ...21:03
stokachuthanks21:04
bdxstokachu: `deis register deis.<mydomainname>.com` is whats failing us now ... I'll add to the bug21:04
stokachubdx, perfect21:05
derekcat: Anyone know where Juju keeps its known_hosts file for manual/local machines?21:42
derekcatIt works if I run juju ssh --no-host-key-checks postgresql/1422:00
derekcatbut otherwise, it spits this at me:22:01
derekcatAdd correct host key in /tmp/ssh_known_hosts736182584 to get rid of this message.22:01
derekcatOffending RSA key in /tmp/ssh_known_hosts736182584:722:01
derekcatVery similar to https://bugs.launchpad.net/juju/+bug/1646322  Except I'm using manual provider instead of openstack, hence the suggested solution is unrelated to this..22:03
mupBug #1646322: juju scp/ssh known hosts errors <landscape> <juju:New> <https://launchpad.net/bugs/1646322>22:04
derekcatmup: haha nice timing.  Everything is in the same VLAN/subnet in my case..22:04
mupderekcat: In-com-pre-hen-si-ble-ness.22:04
derekcatmup: lol22:04
mupderekcat: Roses are red, violets are blue, and I don't understand what you just said.22:04
derekcatmup: my problem machine, juju-controller, and the machine I'm running commands from are all in the same network space. The other 5 machines in the model are all working fine, so I'm not sure what happened here..22:06
mupderekcat: I apologize. I'm a program with a limited vocabulary.22:06
derekcatmup: well that's ok, maybe the extra verboseness will help other people ^_-22:08
mupderekcat: I really wish I understood what you're trying to do.22:08
derekcatAlso, no idea how the fingerprint could've changed as it doesn't appear to have been redeployed since I initially added the machine22:14
derekcat>_<22:14
lazyPowerbdx looks like you didn't apply the work around. if you see port 443 - you're using the api load balancer, which doesn't support SPDY which in turn will fail the deis setup.22:44
lazyPowerbdx - https://kubernetes.io/docs/getting-started-guides/ubuntu/troubleshooting/#common-problems22:48
bdxlazyPower: thanks ... we did apply the work around though ... it was failing the same way on 80 and 44322:49
lazyPowerbdx but the API endpoint should be 644322:49
lazyPowernot 44322:49
lazyPower80 will always fail, as the apiserver requires strict tls key authentication22:49
bdxahhhh22:49
lazyPower443 might have worked, but the layer7 load balancer would be the blocker there and yield unhelpful error messaging22:49
bdxI see that now22:49
lazyPowerso i suspect something didn't happen how we expected it to and that config is incorrect22:50
bdxI see, that would make perfect sense22:50
lazyPowerhttps://kubernetes.io/docs/getting-started-guides/ubuntu/troubleshooting/#common-problems <- has the steps to manually fix this using some jq kung-fu and editing your kubeconfig22:50
lazyPowersorry :( that should have worked, i did test it22:50
lazyPowerbut i haven't tested it recently22:50
lazyPowerso its likely that something has changed and its botched on "fixing" the config file22:50
lazyPowerif this works i'll file a bug to investigate the config regeneration path and see if somethings funky in there or if this is unrelated and we have something else at play here, but deis has been deployed successfully via helm on CDK. Ben was a wizard at that and stokachu has been working through this as well (but i'm not certain if it was successful as I haven't followed up)22:51
bdxlazyPower: I'll investigate this and get back to you22:52
bdxlazyPower: thanks for following up22:52
lazyPowernp :)22:52
lazyPoweri just happened to stop in before i head out for the night. glad i caught you before we missed each other22:52
bdxaha niccceeee22:53

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!