/srv/irclogs.ubuntu.com/2017/05/26/#cloud-init.txt

smoserrharper, i'd appreciate your thoughts.01:24
smoserhttps://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/32463901:24
smoserpowersj, askb the ubuntu user will be used probalby if he installs from a trunk created rpm01:25
smoserhttps://code.launchpad.net/~harlowja/cloud-init/+git/cloud-init/+merge/30748501:26
smoserwould fix that01:26
askbsmoser, would this fix the original issue with bug filed ?01:30
* askb 1821: Operation in progress 02:12
=== sambetts|afk is now known as sambetts
smoseraskb, i'm sorry, did you ever get a /var/log/cloud-init.log ?12:48
smoserfrom the trunk built one would be helpful.12:48
askbsmoser, updating the logs now13:00
askbsmoser, wondering if the bug you mentioned above is expected to fix the original issue ?13:01
=== rangerpbzzzz is now known as rangerpb
smoseraskb, logs where ?13:31
smosersorry for not following above.13:32
askbsmoser, oh sorry! my bad ... have updated the logs on the bug filed here: https://bugs.launchpad.net/cloud-init/+bug/169242413:45
ubot5Ubuntu bug 1692424 in cloud-init "util.py[WARNING]: Failed to disable password for user centos" [Undecided,Incomplete]13:45
askbI noticed earlier today, you mentioned that 307485/324639 may fix ubuntu user issue caused while running the passwd command13:48
askbWas curious if that fixes the issue in question and if I could help with testing the fix on our env13:49
rharpersmoser:  on the udev-settle MP,  I'm still confused about the previous comment on removing blkdev re-readpt, and when I look at the diff on launchpad, line 13 still does util.subp(blkdev_cd) ?  what am I missing?13:57
rharperals, this is the link removal;  with a build of that cloud-init, I'm now passing the vlan tests that failed before13:57
rharperhttps://code.launchpad.net/~raharper/cloud-init/+git/cloud-init/+merge/32467513:58
smoserrharper, see lsat comment right now14:08
smoseri think you'll understand :)14:08
smoseraskb, i think selinux must be stopping cloud-init from invoking 'passwd -l'14:09
smosersee14:09
smoser Stderr: passwd: Libuser error at line: 124 - error creating `/etc/shadow+': Permission denied.14:09
rharpersmoser: ack14:10
smoserrharper, do you recal something about selinux and systemd services....14:10
rharperyes14:10
smoserthere was something. maybe larsks ?14:10
rharperwhen I was debugging some centos7 issues14:10
larskssmoser: what where when?14:10
smoserthanks.14:10
rharperrestorecon14:10
rharperfailures14:10
rharperIIURC14:10
smoserlarsks, https://bugs.launchpad.net/cloud-init/+bug/169242414:10
ubot5Ubuntu bug 1692424 in cloud-init "util.py[WARNING]: Failed to disable password for user centos" [Undecided,Incomplete]14:10
* larsks looks14:10
smosercloud-init is running passwd -l14:10
rharperif it failed to restore a file in a path, it quit recursing14:10
smoserand failing with permission denied.14:11
smoseri think i joked that the solution was to turn of enforcing :)14:11
smoserand i think larsks took me seriously14:11
larskssmoser: no, that was a "what is the topic of this discussion" as opposed to a "what are you thinking?"14:12
sauloaislansmoser i find this erro in my cloud-init log route info failed14:12
larsksWhy do we think this is a restorecon failure? I don't see that in the bug anywhere.14:13
rharperthere was an update to the library needed but wasn't released into 7.3 at the time14:13
sauloaislanthis test with the ironic.conf  network interface = neutron14:13
larsksThere was a bug in python-selinux, yeah.14:13
smoserrharper, or larsks could you fill some info in on that bug if that is what you think it is ? i think you're saying there might be a bug in python-selinux ? (but cloud-init doesn't use that for invoking passwd -l to my knowledge)14:18
smoserso i'm kind of confused.14:18
rharperI don't know that your passwd -l is related14:18
smosersauloaislan, more info needed. paste a cloud-init.log somewhere ? and if its openstack an network_data.json14:18
larskssmoser: *I'm* confused.  Looking briefly at the bug I'm not sure where selinux comes up.14:18
rharperI saw log messages on a centos7 boot related to the restorecon14:19
smoserlarsks, well, 'selinux' is what i thought could make a process runnign as UID=0 not able to run 'passwd -l'14:19
smoserthe other thought was root was mounted ro, but that seemed less likely.14:19
larskssmoser: but I don't see 'passwd' in that bug either.  Am I looking in the right one?  #169242414:20
smoserwell. the last cloud-init.log he's posted there.14:20
rharperreading it now14:20
smoserthe title of the bug is "Failed to disable password"14:21
smoserwhich is done with 'passwd -l'14:21
smoserlog: https://launchpadlibrarian.net/321286768/cloud-init.log14:21
larsksThis is setting information for user "ubuntu"?  Is this actually an ubuntu system?14:21
smoserthe other errors in that log are a result of askb running with a cloud.cfg from trunk14:21
smoser(as the confusing user)14:21
larsksAnyway, if it is an selinux problem, then there would be corresponding denials logged in /var/log/audit/audit.log.14:22
* smoser is surprised that larsks's redhat system doesnt have a ubuntu user :)14:22
rharperheh, I think this rpm wasn't built right w.r.t centos14:22
smoserit was built from trunk14:22
larsksIt would be interested to see those to confirm the problem.14:22
rharperbut the centos config in the rpm (/etc/cloud/cloud.cfg)14:22
smoserhttps://code.launchpad.net/~harlowja/cloud-init/+git/cloud-init/+merge/30748514:22
rharperneed to check that; when I was hand building rpms for centos I got that error (ubuntu user in centos)14:23
smoserso... some history...14:23
larsksIt is also possible that if someone mucked about with the filesystem (e.g., file injection via virt-customize or something) that they simply forgot to relabel the filesystem.14:23
smoseraskb ran into a bug with 0.7.514:23
smoseri said "that is really old...."14:23
larsksSo: audit.log or it's something else14:23
rharperlarsks: ack;14:23
smoserhe went to try something newer by building trunk14:23
smoserand got cloud.cfg from trunk (which isn't really reasonable for redhat)14:23
rharperright14:23
rharperharlowja: had the split config patch14:23
rharperI used that in my branches14:24
rharperwe need to pull that back end config/cloud.cfg.<distro>14:24
rharpers/end/in14:24
smoserwe should get the merge above so that trunk-built cloud.cfg are good.14:24
rharperyes14:24
smosersee mp above ^14:24
rharperack14:24
rharperI used it about a month ago when I was doing initial passthrough testing14:24
rharperI still have some cloud-init rpms i hand built14:24
smoseraskb, so, the net of all the above.... can you grab a 'dmesg' and a /var/log/audit/audit.log14:25
rharperlet me see if I still have my rebase dir on that14:25
sauloaislanI dont have the cloud-init log but I have neutron-metadata-agent.log http://paste.ubuntu.com/24667212/14:27
smosersauloaislan, the log is inside the guest14:30
smoser /var/log/cloud-init.log14:30
larskssmoser: fyi, this is the selinux-python issue: https://bugzilla.redhat.com/show_bug.cgi?id=140652014:43
ubot5bugzilla.redhat.com bug 1406520 in libselinux "calling libselinux python restorecon fails on /var/lib/nfs/rpc_pipefs" [High,Verified]14:43
rharperyes14:44
smoserlarsks, thank youi14:46
=== sambetts is now known as sambetts|afk
smoserrharper, https://code.launchpad.net/~xnox/cloud-init/+git/cloud-init/+merge/32401017:23
smosercan you change your review there17:23
smoseras he updated test cases.17:23
smoseroh. wait. that wasnt your complaint.17:23
smoseror may be it was.17:23
smoseri have the larger set of improvement in my branch17:23
smoserbut his does fix an issue for him, at low regression risk and want to get that bug fix in17:24
smosermine is more invasive17:24
smoserrharper, https://code.launchpad.net/~farcaller/cloud-init/+git/cloud-init/+merge/324273 you could change your NEEDS fixing too17:27
paulmeyHi all, some team here on Azure is testing some changes and has an issue with Ubuntu core not starting cloud-init18:00
paulmeythey have modified the way they are generating the provisioning iso, but I don't exactly know how snappy/systemd pick that up in ubuntu core18:01
paulmeyIs this a good place for that question?18:01
smoserhey18:06
smosersorry.18:06
smoserpaulmey, yeah.18:07
smoserso... there are some  issues still outstanding with getting ubutnu core to r un cloud-init.18:07
smoserrharper, has been fighting that fight and can fill you in.18:07
paulmey:-)18:07
smoserall the changes we think are necessary are in cloud-init currently and i intend to sru that to 16.0418:08
smoser(starting today)18:08
paulmeyyeah I saw a couple of commits in cloud-init in that direction18:08
smoserbut there are some changes in the image build process that have to be made (in addition to getting this newr version of cloud-init)18:08
paulmeywe have core 16 running on Azure...18:08
paulmeybut I'm trying to figure out what change causes it to break now...18:09
paulmeyI don't know enough about how snappy and systemd work together to get the system up...18:09
paulmeyfor some reason, the whole cloud-init.target doesn't get run...18:09
paulmeynot sure what that would be conditional on...18:10
smoserits explicitly disabled in the image.18:10
smoseri thikn they touch /etc/cloud/cloud-init.disabled18:10
paulmeyoh ok18:10
paulmeynah I checked that18:10
rharperoh *sigh*18:10
paulmeylol18:10
smoserfunny, eh.18:10
rharperwell, the second is the bug w.r.t detection of snappy18:10
rharperand then we may have other items that come up w.r.t. the network configuration that's baked in that we need to remove that was having some conflicts...18:11
rharperpaulmey: depending on which versions of the core.snap are included, we have to bake in a few cloud-init configurations that ensure that the cloud identification is found which will enable cloud-init units to run;18:12
paulmeyOdd_Bloke: you bake this image, right? :-)18:12
paulmeyhttps://www.irccloud.com/pastebin/RrttwRMj/18:13
rharperhrm, well, Odd_Bloke and I worked together getting something working;18:13
paulmeyI see a whole bunch of these "/usr/bin/snap[825]: cmd_auto_import.go:198: error: cannot mount /dev/..." errors in the journal...18:15
rharperthose should have patched parts which do the right thing;   well, then next I would suspect the cloud id bits; typically in that image if cloud-init doesn't run, you can still login to it via serial console interaction; not sure if that's possible in your case though.18:15
rharpernoisy warnings18:15
rharperif you can get into the image then getting to see /run/cloud-init/* would be useful to see if we didn't identify the platform18:16
paulmeyyeah, I've hacked my way in through the console18:16
rharperthe UC16 images run in strict mode18:16
rharperis it possible that your platform doesn't identify itself in the known way ?18:17
paulmeyhttps://www.irccloud.com/pastebin/TiZP9HLY/18:19
paulmeyyep, that;s the tip I needed, I think18:19
rharperpaulmey: ok18:19
rharperplease ping me if you run into any more of those18:19
rharperI've spent *way* more time that anyone should have18:19
rharperso I hopefully can prevent you from wasting any time18:20
paulmeyI'll see if I can find out why ds-identify has rc=118:20
rharperit's likely the mounts18:20
paulmeyit's the cdrom label...18:26
paulmeyin the error case it is labeled DVD_ROM18:26
paulmeyhas_fs_with_label "rd_rdfe_*" && _RET="$name" && return ${DS_FOUND}18:26
paulmeyok, thanks, I can tell them how to fix it now...18:26
rharpergreat18:31
smoserwait..18:41
smoserwas there a bug in ds-identify paulmey ?18:41
paulmeynot necessarily, that is how you look at it...18:41
paulmeythis team of ours is changing the way they generate the iso18:41
paulmeyand apparently they were not giving it the same label18:42
paulmeyif they can't maintain the same label, I'm sure we'll propose a change to ds-identify18:42
paulmeybut it will take time for that to percolate into the image in the gallery as well...18:43
smoserpaulmey, cool.18:52
smoseri'd definitely be open to more specific label... or any other way of identifying "You are running on azure"18:53
smoserblackboxsw, i'm running a integratino test on trunk, and then will prepare an upload to artful and x, y, z. so witth that i'll ahve a large list of sru bugs19:00
smoser(horay)19:00
smoserother requests, if you're bored19:00
smoser- need unit test for19:00
smoser  https://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/32427419:00
smoser- need further review on smoser mask2cidr19:00
smoser  https://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/32467719:00
smoser- need further review on smoser aliyun19:00
smoser  https://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/32462519:00
powersj:)19:00
smoserpowersj, its ok if i can just push 'go' ?19:02
smoserhttps://jenkins.ubuntu.com/server/view/Cloud-init/job/cloud-init-integration-a/19:02
smoserand19:02
smoserhttps://jenkins.ubuntu.com/server/view/Cloud-init/job/cloud-init-integration-x/19:02
smosercan i do them at the same time ?19:02
powersjif you run -x it will autokick off y then z then a19:02
powersjif you want results faster than sure just kick off a and x19:02
powersjand a will get run twice, but that's ok19:03
powersjand yes running at the same time is fine19:03
smosero. cool19:04
smoseri'll just push 'x' then19:04
smoserlarsks, just an fyi, after blackboxsw and I both individually broke unit tests on centos6, i asked powersj to get c-i reporting on merge propsals with a run in a centos6 container. so that will hlpefully stop us from breaking you so  often.19:07
larskssmoser: also centos7?19:08
powersjI will do both19:08
smoserpowersj, ? i think we can do that. centos6 was the big one though as it is different in 2 ways19:08
smosera.) python2.619:08
smoserb.) not ubuntu19:08
powersjWe do have daily centos6/7 build and unit test runs19:08
powersjNeed to add that to our merge request reviews19:09
smoserright.19:09
larskspowersj: that would be awesome.19:09
powersjand not run as root :)19:09
smoserwe should point out.... its not "real" root.19:09
smoserruns in a unpriviledged container19:09
smoserbut the container thinks its root19:09
larsksbetter than nothing! should at least help highlight issues generating config files or path assumptions, etc.19:10
blackboxsw+1 smoser on sru work, I'm adding one more unit tests for ImportError of jsonschema and then my branch is out of the way. Moving on to your review requests right after19:25
blackboxswI restructured the auto-gen'd docs to include Examples for the schema19:25
smoser\o/19:34
rharperhttps://code.launchpad.net/~raharper/cloud-init/+git/cloud-init/+merge/32470219:36
rharperthat's needed for pass-through equivalency with curtin.net19:36
smoserhttp://paste.ubuntu.com/24670061/19:53
smoserblackboxsw, ^ there is our bug list19:53
paulmeysmoser: there are a couple of ideas floating around in Azure to change the source of the provisioning info and/or the recognizability (if that's a word) of the Azure environment...19:56
paulmeynone of these have solidified enough to take action, but I'll keep my eye on them...19:56
smoserpaulmey, yeah. thats good. it really does make sense from a cloud platform perspective to make yourself easily recognizable.20:00
blackboxswexcellent smoser want me to start on that now or reviews. I've just pushed final changes to cc-ntp-schema-validation20:00
smoserblackboxsw, well, i guess the bug list would be good to start on20:01
blackboxswstarting the bug list20:01
blackboxswhttps://trello.com/c/VxjOm2E5/109-upload-to-artful-and-srus or something else?20:01
smoserblackboxsw, twiddled all the ticky marks20:37
smoserhttps://bugs.launchpad.net/cloud-init/+bug/168593520:37
ubot5Ubuntu bug 1685935 in cloud-init "make deb breaks due to missing debuild script" [Medium,Fix committed]20:37
smoserthat one i referenced in the changelog but shouldnt have.20:37
blackboxswroger smoser20:54
smoseri'm heading out.20:54
smoserhave a nice weekend all.20:54
blackboxswhave a good one, thanks20:54
blackboxswsmoser: see you tuesday. forgot monday was a holiday20:56
=== rangerpb is now known as rangerpbzzzz
paulmeyrharper, smoser : I found a better way to identify Azure and created a tracking bug here: https://bugs.launchpad.net/cloud-init/+bug/169393922:57
ubot5Ubuntu bug 1693939 in cloud-init "Switch Azure detection to use chassis_asset_tag" [Undecided,New]22:57
paulmeyhave a great weekend all22:57

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!