/srv/irclogs.ubuntu.com/2017/12/12/#cloud-init.txt

cpaelzeronce one of you is up please help me to look at bug 173770410:20
ubot5`bug 1737704 in cloud-init (Ubuntu) "Cloud-init seems not run on today's bionic images (20171211)" [Undecided,New] https://launchpad.net/bugs/173770410:20
cpaelzerI'm not sure when you get online, but around now seems about right so doing a shotgun ping for the bug above13:10
cpaelzersmoser: rharper: blackboxsw: ^^13:10
tellingHas anyone succesfully managed to make systemd stop using apt at boot? At random my cloud-init scripts will fail because apt is locked14:13
smosercpaelzer: i'll take a look14:17
cpaelzersmoser: thank you, let me know if you need any debug data from me14:20
smoserrharper: or blackboxsw when you're in if you want to review15:40
smoser https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/173770415:40
ubot5`Launchpad bug 1737704 in cloud-init (Ubuntu) "Cloud-init fails if iso9660 filesystem on non-cdrom path in 20171211 image." [High,In progress]15:40
smoser http://paste.ubuntu.com/26170810/15:40
smoserthat'd be good.15:40
smoserlaunchpad git is down, so no merge proposal that way right now. but if you can review then we can do that quicker when lp returns15:40
smoserhttps://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/33508616:09
smoserblackboxsw: ^16:09
smoserpowersj: if you kill https://jenkins.ubuntu.com/server/view/cloud-init/job/cloud-init-integration-nocloud-kvm-x/3/console16:19
smoserwill it collect artifacts ?16:19
smoserhm..16:19
powersjsmoser: not normally16:19
smoserpowersj: fyi, i just ran this successfully:16:38
smoser tox-venv citest python3 -m tests.cloud_tests run  --platform=nocloud-kvm --preserve-data --data-dir=results --verbose --os-name=xenial --repo ppa:cloud-init-dev/daily --test=tests/cloud_tests/testcases/modules/locale.py16:38
smoser2017-12-12 16:36:12,825 - tests.cloud_tests - DEBUG - after setup complete, installed cloud-init version is: b'17.1-1723-g05b2308-0ubuntu1+1343~trunk~ubuntu16.04.1'16:38
smoser(i do have a patch locally to allow it to accept ppa:)16:39
powersjsmoser: there is a --ppa option ;)16:39
powersjI'll go play with torkoal and see if it is something going on locally16:40
smoseroh funy. i migth submit a patch to remove it then and just support ppa in --repo16:40
powersjok16:40
smoserblackboxsw: ^ https://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/335086 please16:47
smoserpowersj: http://paste.ubuntu.com/26171272/17:00
smoserthat is "launch stuff on clouds" that i have.17:00
smoserblackboxsw: where do you think that should go? we said qa-scripts, but im' not sure if it fits ther... maybe in a doc/ dir ?17:00
powersjsmoser: thx17:01
blackboxswsmoser: I was thinking qa-scripts/doc17:01
powersjI was able to launch xenial nocloud-kvm test with built in cloud-init, so now building the tree and trying that one17:01
blackboxswthen we can adapt those docs into scripts as we have cycles17:01
torontoyescan anyone point me to documentation to use cloud-init for deploying windows 10 on bare metal?17:11
* blackboxsw gueses that's going to be https://cloudbase.it/cloudbase-init/ not cloud-init17:12
powersjsmoser: looking at centos failures, I think that was a temporary connectivity/DNS issue and as a result we were unable to update our yum sources. Wasn't able to reproduce locally or on torkoal and the re-run seems to be working17:14
powersjsmoser: now triaging why the nocloud-kvm xenial test is failing with the built deb.17:14
torontoyesblackboxsw: thanks17:16
powersjsmoser: using the cloud-init-dev/daily ppa with xenial is not going to give you an up to date deb. Looks like Xenial hasn't been built in 5 days17:21
powersjhttps://launchpad.net/~cloud-init-dev/+archive/ubuntu/daily17:21
powersjhere is the xenial build failure: https://launchpadlibrarian.net/348862957/buildlog.txt.gz17:23
powersjds-identify-behavior-xenial.patch does not apply17:24
powersjsmoser: it looks like your ds-identify fix will unbreak nocloud-kvm tests17:40
powersjapplied it and re-ran locally and tests can run17:41
blackboxswsmoser I see your ds-identify branch properly fixed the issue https://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/335086.17:45
blackboxswtrivial branch update for droping an unsupported modules cmdline param https://code.launchpad.net/~chad.smith/cloud-init/+git/cloud-init/+merge/33509417:50
blackboxswdropping even17:50
blackboxswok merging https://code.launchpad.net/~powersj/cloud-init/+git/cloud-init/+merge/335052 and  https://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/335086.  to master17:53
smoserblackboxsw: https://github.com/cloud-init/qa-scripts/blob/master/doc/launching.md18:07
blackboxswgood good. almost done w/ a merge-tool for cloud-init.18:11
blackboxswwanted to test it on powers' branch18:12
blackboxswwaiting on tox18:28
smoserblackboxsw: let me know when you land and i will pull and upload to ubuntu18:32
blackboxswsmoser: the script I hvae needs work. I'm merging now. and will test on the next branch post this release.18:33
blackboxswsmoser: do we still want to do a revision bump in cloud-init master18:33
blackboxswprior to next upload18:33
blackboxsw?18:33
dojordan@blackboxsw, what else is needed to land my PR?18:34
blackboxswdojordan: I think you are good on your branch. in trying to limit deltas I don't think we are landing it for this release. but right afterward. So it should land just after the 17.2 cut. I was able to test and exercise both the markerfile path and non-marker path and watch expected behavior (like camping on an infinite polling loop for IMDS  or and not taking that path on normal installs)18:36
blackboxswdojordan: my expectation is that it will be in ubuntu bionic images within the week. Just not at official upstream 17.2 cut.18:37
blackboxswit'll be 17.2.X18:37
blackboxswdojordan: you also mentioned it's Xenial-only to start right?18:37
blackboxswI expect we'll have an Ubuntu SRU into xenial with that shortly into the new year18:38
blackboxsweven stuff that's landing right now in master isn't going to make it into xenial until we go through our first SRU of the new year.18:39
blackboxswand our next SRU to xenial will take an upstream snapshot which would include whatever is landed in master. (post 17.2 cut).18:40
dojordanCorrect, but any Azure image will unblock us until we GA18:41
blackboxswdojordan: sorry that went over my head, or didn't jive with my understanding of your branch. Do azure xenial images currently ship with the marker file or ovf PreprovisionedVM content setting?18:45
blackboxswdojordan: ohh you mean that markerfile or configuration won't exist in azure images until your team GA's on the IMDS service?18:46
dojordanno, sorry let me try again. As long as my changes land in an azure image it will help unblock our testing. But when we go GA (middle of next year hopefully), we will start only preprovisioning (using the ovf setting) 16.04 LTS. The purpose of the marker file is incase we occur a VM reboot in the middle of the process18:47
dojordan@blackboxsw yes18:47
blackboxswok undrestood. thanks for clarification dojordan18:48
dojordan@blackboxsw, does that make sense?18:48
blackboxswok so from my understanding, your branch not landing today doesn't block your testing currently right? The cut of 17.2 upstream release from ubuntu perspective won't change the speed at which xenial images get your branch because of the following:18:49
blackboxsw-  ubuntu's policy for cloud-init updates to non-bionic (xenial, zesty, artful) is we take latest snapshot from master.18:50
blackboxsw - I'm currently waiting on the last SRU to land per https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/173365318:50
ubot5`Launchpad bug 1733653 in cloud-init (Ubuntu Artful) "sru cloud-init (17.1-27-geb292c18) update to 17.1.46-g7acc9e86-0ubuntu1" [Medium,Fix committed]18:50
blackboxsw which will update xenial ,zesty, artful to pre-17.2 upstream release18:51
blackboxsw - If we perform a 17.2 sru to xenial, zesty artful (takes a week or two to test/publish), we can still land new merges into master after that snapshot is taken18:53
blackboxsw - anything that lands in master will be available in ubuntu bionic series within a day18:53
dojordansorry, what is SRU?18:53
blackboxswwhich would unblock testing if you have the ability to use bionic images18:53
dojordangreat, that works for us18:53
blackboxswsorry acronym nightmares18:53
blackboxsw"sru" = stable release update18:54
blackboxswhttps://wiki.ubuntu.com/StableReleaseUpdates ubuntu stable updates18:54
blackboxswspecifically for cloud-init we have to do the following  additional verification work: https://wiki.ubuntu.com/CloudinitUpdates18:54
blackboxswso that's the only long-pole for publishing to xenial18:55
blackboxswand that process we've gotten down from about 4-6 weeks to about 2 weeks as we are trying to perform these SRUs more frequently18:55
robjosmoser: Sorry, about being thick headed about this, but I still fail to see the point of http://paste.ubuntu.com/26166233/18:58
robjoI really have no intentions on spending much more time on writing additional tests for the "old network config path"18:59
robjoI have no problem with the changes, I am just missing the point19:00
dpb1is it covered at all?19:01
smoserrobjo hm.. well i dont knwo. I'm not bent on it if you're going to drop that code.  But if you're going to do so, then adding a test of it immediately before you do so doesn't help much.19:02
smoserright ?19:02
smoserbut if you're going to fix it (as one of your MPs) was doing,t hen it makes sense to add a test and make the code more testable.19:02
smoserthat patch is fairly simple code motion.19:03
robjoyes and no, since the test is already written and covers what was recently broken it does do the trick19:03
smoseri didntthink it *did* cover what was recently broken19:04
robjoyes, and I guess the light in my head is not coming on about the advantage of moving the code out of the class19:04
blackboxswsmoser: https://code.launchpad.net/~chad.smith/cloud-init/+git/cloud-init/+merge/335099 for ubuntu/devel snapshot update w/ your and powersj changees19:04
smosertesting via 'distro.apply_network' is just more complexity, which required you to use the filesystemmocking test.  this just seemed easier.19:04
smoserblackboxsw: oh nice. thanks. i'll pull19:04
robjotwo things broke recently, when I built and released 17.1 in openSUSE w.r.t. networking, 1.) there is a path where network was set to "manual" for start up, that's obviously not useful in a cloud environment and 2.) there was no path from v1 to the translation of the network config19:07
robjoThe latter was addressed in "netV1ToTranslate" branch and if I remember correctly the comment there was "this should be tested"19:09
robjoAnyway it's sufficiently aged that I do not remember all the details19:10
smoser:-).19:10
smoseri think all your mp are generally in reasonable shape, there were just things we wanted to take care of to make them more maintainable.  the state things are in isnt your fault, but we want things to get better.19:11
smoserblackboxsw: uploaded.19:12
blackboxswthx smoser19:14
robjoI am in support for making things better, from my perspective that means in the not too distant future rip out _write_network() and figure out how to get to the sysconfig renderer19:14
robjoIs there a way to banish ijw for the rest of the day, may the network trouble on that end will resolve itself tomorrow?19:19
smoseri dont think so :)19:19
smoserat least not that i'm aware of19:19
rharpersmoser: well, we've ops, we can kickban19:32
blackboxswrobjo: what IRC client do you use?19:33
robjopidgin19:33
blackboxswfrom xchat I can disable join/departure messages. ahh used to use pidgin, wasn't sure if that was a config option.19:34
smoserwow. pidgin19:34
blackboxswfor a moment I was wondering if you were talking about some network software stack ... didn't realize it was the re-join irc messages19:34
smoseri used pidgin because it was the nicest chat client with IBM/Lotus sametime support.19:35
rharperyes19:35
rharpermeanwhile19:35
smoserand i think it allowed you to change your user agent19:35
rharpersneaky19:35
rharpercheat the sametime servers19:35
rharperblamed the clients for crashing the server19:35
smoserso that you could avoid being shutoff for identifying yourself as using an unapproved client.19:35
smoser:)19:35
rharperclassic IBM19:35
smoserhttps://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/33510019:35
rharper+119:36
rharpersmoser:  I think that upload to bionic that bothered cloud-init hit curtin's vmtest on bionic19:37
rharperit caused no network, right?19:37
* rharper will kickban next join19:37
smoserrharper: well, cloud-init disalbes itself.19:38
smoserbut it would only hit that path if you had an iso9660 filesystem on something not /dev/cdrom or /dev/sr019:38
rharperright, I think that's how we launch in xkvm19:38
rharperbut lemme check19:38
smoserso it doesnt seem likely, unless we're misunderstanding. no we seed rom url dont we ?19:39
rharperfor the boot19:39
rharperafter install19:39
rharperwe inject user data for collection19:39
rharpervi an nocloud seed19:39
rharperiso19:39
smoserah. yeah. then that is it.19:39
smoseryes.19:39
rharper-drive file=/var/lib/jenkins/slaves/torkoal/workspace/curtin-vmtest-devel-amd64/output/BionicTestBonding/boot/seed.img,id=disk02,if=none,format=raw,index=2,media=cdrom19:39
rharper-device virtio-blk,drive=disk02,serial=seed.img19:40
smoserhm... media=cdromn19:40
robjorharper: thanks19:40
rharperso, I think that trips it19:40
rharperit's not IDE19:40
rharperrobjo: sure19:40
rharperit's virtio device, with iso9660 filesystem19:40
rharperso, not /dev/sr*19:40
smoseri wondered how virtio cdroms would show up.19:40
rharperas a virtio device19:40
rharperthere are no virtio cdroms; just virtio block19:40
smoserthey just show as a /dev/vdx19:41
rharperright19:41
rharperwhich I think fails the uploaded check19:41
rharperright?19:41
rharperwell, before your fix19:41
smoserhm..19:42
smoseri'm just thinking. i knew it wasnt a great filter, but we are currently allowing OVF only on a /dev/sr? device or a /dev/sr[0-9]|/dev/hd[a-z]19:46
rharperwe do a blkid query for is9660 filesystem; do we also check sr ?19:51
smoseri guess if we get a bug for supporting OVF on virtio cdrom then we can just open that up a bit.19:52
smoserwe do blkid query yes. and filter ovf by iso9660 fs based on that.19:52
smoserbut the check for "is this an OVF iso transport" is19:52
smoser grep http://<dmtf>url<here> /dev/<path>19:52
rharperovf supports just iso9660, not where it comes from19:53
smoserso in order to avoid that as far as possible will only do that on a cd device19:53
smoserits not perfect19:53
rharperhrm19:53
rharperit seems to me that ovf is less reliable, but things like labels are better; can we order the higher quality "yes" answers first ?19:54
rharperfor example, OVF can only be a yest if we fail to find the cidata/config-2 labels ?19:54
smoserhttps://www.dmtf.org/sites/default/files/standards/documents/DSP0243_2.1.1.pdf19:54
rharperwhen dealing with iso9660 checks ?19:54
smoserit prety clearly says "cd-rom device"19:55
rharperwell, vmware fails that19:55
smoser?19:55
smoserthey attach a cdrom19:55
smoserno?19:56
rharperthere is an file in dir support19:56
rharperwe tested this via lxd19:56
smosersure. and that will get identified.19:56
smoserand that is fine.19:56
smoserwe only go down to  looking for a ovf on a cdrom if other measures fall out.19:56
smoserand we explicitly avoid known lables19:56
rharperok, then I'm not sure why you're worried about that gep on sr ?19:57
rharpergrep on sr*19:57
smoserhttp://paste.ubuntu.com/26172208/19:57
rharperoh, I see your question w.r.t virtio cdrom19:57
rharperit's not really a cdrom19:57
smoserbecause if you attach a iso9660 ovf via virtio it will not be found right now.19:57
rharperyeah19:57
smoserwhich is probably "oh well"19:58
rharperyeah19:58
rharperwell, they can always use a virtio-scsi cdrom device, whihc does show up as an sr019:58
rharperinstead of a virtio-disk19:58
rharpernot that they can tell19:59
rharperor know to do that19:59
smoserah. ok yeah.19:59
smoser:)19:59
smoseryeah, i was looking to do taht.19:59
blackboxswsmoser: rharper can you guys remind me again what https://launchpad.net/ubuntu/bionic/+queue?queue_state=3&queue_text=cloud-init a "proposed" pocket done means for cloud-init?20:13
blackboxsw 20:13
blackboxswrmadison still shows cloud-init rev ....58 instead of 60. I wonder how long we wait for updates in bionic when we our updates hit the proposed pocket20:13
smoserblackboxsw: https://launchpad.net/ubuntu/+source/cloud-init20:14
smoserit is in -proposed, or pending a publisher runwill be20:14
blackboxswso is the publisher run only daily, or more frequently20:15
smoserhourly-ish ?20:16
smosersomething on that order20:16
smoserblackboxsw: when i was testing resolvconf things adn was impatient20:19
smoseri did this20:19
smoser http://paste.ubuntu.com/26172361/20:19
smoseroh. /me updates gist. forgot i put it there20:19
* blackboxsw reads that. and nice tracking gist comment :)20:20
blackboxswI was curious per a discussion in #ubuntu-release.  I wanted to tell folks around what time they could expect fixes to be seen20:20
blackboxswok SRU looks unblocked20:22
smoseranyway, what you can do is:20:22
smoserPOCKET=bionic wait-for-package cloud-init 17.1-60-ga30a3bb5-0ubuntu1 && mpg321 ~/Music/22-Andrew_Lloyd_Webber-Joseph_Megamix.mp320:22
smoseri'm not exactly sure how often things get copied. i think proobably more frequently for development releases.20:23
blackboxswhehe will have to spin up the "Amazing technicolor deamcoat mix" as general policy20:29
blackboxswapproved https://code.launchpad.net/~powersj/cloud-init/+git/cloud-init/+merge/335051 with unrelated question about direction for ec2.21:13
* powersj looks21:15
blackboxswI'm guessing with EC2, we'd probably also have a ec2.publish_keys method or something in the EC2Instance.start method to ensure we've upoaded the known key to EC2.21:19
powersjblackboxsw: for ec2 you can take a sneak peak at https://git.launchpad.net/~powersj/cloud-init/commit/?id=2d5c6d156cb4506260cb1abef54daefb7a0ffe0521:22
powersjspecifically tests/cloud_tests/platforms/ec2/platform.py21:22
powersjand  def _upload_public_key(self, config):21:22
dpb1powersj burning down the AWS infra21:41
blackboxswhttps://code.launchpad.net/~powersj/cloud-init/+git/cloud-init/+merge/335053 questions about where we ultimately should be controlling/documenting integration test deps21:42
blackboxswthx for the peek powersj looking21:42
powersjblackboxsw: agreed on tox discussion21:43
powersjI was a little confused why it even came up given paramiko has been in there for a while. All I thought I did was move it from one file to another21:43
blackboxswpowersj: maybe we need to extend tools/read-dependencies to also handle these one-off integration test deps... as I'd really like to see make ci-deps-ubuntu work for everything (not just unit test deps)21:44
smoserblackboxsw: i'm interested in thoguhts on https://code.launchpad.net/~smoser/cloud-init/+git/cloud-init/+merge/33510821:57
blackboxswchecking it out smoser21:59
blackboxswhrm I thought oauth-key was based on the user client connecting to maas. accessing a maas instance to peek at the metadata now22:01
smoserblackboxsw: well, maas sends to curtin the credentials for this node. and those get written into /etc/cloud/cloud.cfg.d22:02
smoserand then cloud-init uses those to talk to maas.22:03
blackboxswohh these are cloud-init's keys to talk back to maas. ok so they'd be unique per node22:03
smoserwell, they are unique per install22:04
smoserafter https://bugs.launchpad.net/maas/+bug/150758622:04
ubot5`Launchpad bug 1507586 in MAAS "previous owner of node can use oauth creds to retrieve current owner's user-data" [Critical,Fix released]22:04
blackboxswwho is that smoser guy, he sure finds a lot of bugs22:05
smoserthat bug was really just a sneaky way of me trying (unsuccessfully) to get bug 944325 fixed.22:05
ubot5`bug 944325 in MAAS "no separation of instance id from node id" [Wishlist,Triaged] https://launchpad.net/bugs/94432522:05
smoser"maybe if i find a security vulnerability they'll add a feature for me"22:05
blackboxswsmoser: just responded, on your branch. I know the approach you are taking looks like it makese sense for how cloud-init currently looks like it will work,  but I wonder about a couple of things noted in the comments22:23

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!