/srv/irclogs.ubuntu.com/2018/02/21/#ubuntu-server.txt

naccrbasak: MPs approved. Please land at your convenience.00:40
lawhey all, when installing Xenial over net-install (iPXE) in UEFI mode, the installer seems to run just fine, but I get a black screen post-boot (right where GRUB should be)01:27
lawis there a preferred way to net-install Xenial in UEFI?01:27
lawI don't believe it's a hardware problem, because I can BIOS-compat-mode  install just fine01:27
lawthis is on a Dell R630, fwiw01:27
patdk-lapheh?03:54
sarnoldhey patdk-lap :)03:54
patdk-lapheh03:55
cpaelzergood morning06:38
lordievaderGood morning07:02
cpaelzerhi lordievader, how are you doing?07:20
cpaelzerhad you coffee already?07:20
lordievaderNot yet. Waiting for a few collegues.07:22
=== led2 is now known as led1
jamespagetobasco: sorry its take a while but queens-proposed will have a python-gnocchi package by the end of the day (probably lunchtime)09:14
xnoxcpaelzer, imho open-iscsi test should set timeouts on qemu execution binary, as the autopkgtest hangs for 3h doing nothing11:14
xnoxalso it hangs in the initramfs right now, that can't be good.11:14
xnoxi'm confused about this test -> it doesn't test any of the triggered by packages, as it effectively tests if the latest maas image is iscsi root bootable....11:15
xnoxshouldn't that be part of the MAAS ci, rather than an autopkgtest?!11:15
xnoxe.g. i do not see the test trying to upgrade, or install triggered-by packages inside the maas image.11:16
xnoxsmoser, highlight as well, i guess.11:16
cpaelzeryes smoser highlight for the initial test  thoughtsis correct11:17
cpaelzerI've seen that it hangs atm11:17
cpaelzerblocking your systemd just as much as my qemu atm11:17
cpaelzerhad no time yet to take a look11:17
=== mgagne is now known as Guest20946
=== Cyrus is now known as Guest9258
=== Ussat-1 is now known as Ussat
tobascojamespage: cool, thanks! i will check it out14:04
smoserxnox: it does install the triggered-by packages15:09
smoserand i've pinged you explicitly asking for your help on the initramfs hangs before.15:10
smoseri can get those bug numbers for you.15:10
smoserxnox: where is the fail you were looking at ?15:10
smoser https://git.launchpad.net/~usd-import-team/ubuntu/+source/open-iscsi/tree/debian/tests/README-boot-test.md15:10
smoserthat describees the test15:10
xnoxsmoser, http://autopkgtest.ubuntu.com/running#pkg-open-iscsi hanging in initramfs busybox for 7h now.15:13
xnoxsmoser, we must add timeouts on the qemu subcall.15:13
xnoxsmoser, is that test retriggered each time, maas image changes?15:14
smoseri dont think i've sen this failure15:14
smoseri agree that we could / should put a 2h timeout or something on it.15:14
xnoxthe whole test used to pass in under 30min, back in zesty15:15
xnoxthus e.g. timeout on the qemu call of 30minutes should be enough.15:15
smoserits nested virt15:15
smoserand by design we disabled kvm15:16
xnoxyeah, i know.15:16
smoserbecause netsted kvm is prone to arbitrary failure15:16
xnoxsmoser, as in call $ timeout 30m qemu-system-x86_64.... rather than just $ qemu-system-x86_6415:16
smoserso yeah, so it passes in ~ 20 minutes.15:17
smoserok. so that will just make it fail faster. it would seem that something actyually broke this ~ 2018-02-0815:17
smoser http://autopkgtest.ubuntu.com/packages/o/open-iscsi/bionic/amd6415:18
xnoxyeah it no longer looks "racy" just "broken"15:18
smoserok. i know what it was.15:20
smoserBOOTIF15:20
smoserit relies on cloud-initramfs-dyn-netconf that i removed from the image.15:20
smoserwell, i removed from server seed15:20
xnox=/15:20
xnoxseed into maas image?15:21
smoserit doesnt use the mass image15:21
smoserit uses the cloud image15:21
smoserwe did add it back to the maas image. i will add it back to the server seed.15:21
xnoxshould we be seeding cloud-initramfs-dyn-netconf into cloud-images? did we used to?15:21
smoserits in the server seed15:22
smoserewll, will be15:22
xnoxsigh, so this is regression in the image.15:22
xnoxsmoser, we really ought to somehow trigger this test case on image build/publication time too. as part of the cloud-image-test-framework maybe?15:22
smoserxnox: :)15:22
xnoxcause we (as in cpc/foundations) should not be publishing image which will regress this in the release pocket and fuck with me for weeks of not migrating systemd from proposed.15:23
smoseryes. that is queued for a discussion in budapest.15:23
xnoxsmoser, i see less value in this test as an autopkgtest, and more as a gating test of image publication.15:23
smoserhttps://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-bionic/bionic/amd64/o/open-iscsi/20180208_022540_31690@/log.gz15:23
smoserthat one shows the failure15:23
smoserthat i want to see fixed15:23
smoserthat one is the transient failure ... the only one left to my knowledge15:23
smoseri know i filed a bug, but could not find15:24
xnoxack15:25
Odd_Blokexnox: smoser: What should we be testing?15:29
xnoxOdd_Bloke, src:open-iscsi ships a magical python script that tests that a cloud image is bootable as an iscsi-root. to replicate what maas (?!) does; apart from not using maas images (?!). And we should not release maas images (?!) that stop working for said use-case.15:30
xnoxsmoser, please double check ^15:30
xnoxps. currently above is racy, and we know that, and plan to fix any day now (no ETA)15:31
jamespagecoreycb: where did you get to with percona-xtrabackup ? I'd like to try move forwards with uploads today if poss15:49
coreycbjamespage: hey, trying to test it now15:50
Odd_Blokexnox: (It's still not particularly clear to me what we should be testing on cloud images.)15:50
xnoxOdd_Bloke, i think cloudimagetest framework, should boot cloud image, as an iscsi root target, and that should work. (it means setting up iscsi server, and booting qemu, pointing at that, more or less)15:51
xnoxOdd_Bloke, the full test-case is a python script already, but needs to be integrated into testing, somehow.15:52
Odd_BlokeWe do all of our image testing on ScalingStack.15:52
xnoxOdd_Bloke, it should be enough.15:52
xnoxOdd_Bloke, as it uses nested qemu at the moment, without kvm, on a localhost.15:52
xnox(it = the test case)15:52
xnoxOdd_Bloke, it is currently run as an autopkgtest on scalingstack15:52
xnoxbut should be run on each image publication.15:53
* xnox thinks i need a card for it15:53
smoserxnox: while open-iscsi uses an image to accomplish its test of itself, it is quite valid in attempting to test open-iscsi functionality in an open-iscsi autopkg test15:57
xnoxsmoser, yes, i know agree that it has dual-intent.15:58
smoserhttps://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/175085115:58
ubottuLaunchpad bug 1750851 in ubuntu-meta (Ubuntu) "re-add cloud-initramfs-dyn-netconf to ubuntu-server" [Undecided,New]15:58
smoseri will fix that with a change to ubuntu-meta15:58
smoserand will also upload a open-iscsi with a timeout15:58
smoseri'll ask you to review the timeout change here shortly, xnox15:58
xnoxsmoser, or at least could be used as a dual-intent too. I think it runs not often enough, to catch image regressions, and image can regress easily and fail to suppor this use case.15:58
smoserhm..15:59
smoserhow would the regress ?15:59
xnoxand then we have open-isci "regressed" in release.15:59
xnoximage missbuilt and published; open-iscsi in bionic-release is triggered as an autopkgtest by reverse dependencies; blocking migrations of src:qemu, src:systemd, so on and so forth. Despite none of them "causing" regression. Rerruning src:open-iscsi in bionic-release against itself, continues to be broken, if the image published is broken.16:00
xnoxat the same time, if the image is good, and everything is otherwise good, and simply updating one of the reverse-deps and upgrading it in the image, makes the test fail, it should block migrations of said packages. as well.16:01
xnoxsmoser, as a strawman, open-iscsi autopkgtest, should be re-triggered each time cloud-images are updated. i.e. daily =)16:01
smoseri dont understand.16:02
smoserhow would image regress16:02
xnoxsmoser, like the one currently, which removed packages.16:03
xnoxsmoser, or has new netplan which doesn't do something, etc.16:03
xnoxsmoser, normally, all cloud images are gated on testing before publication. Which test-suites do you run, against maas image to be published; before it is published? As in, you do try it out with xenial/trusty/bionic MAAS to make sure all current stable MAAS manage to deploy it, right?16:04
xnoxsmoser, similarly like we boot test $BigCloud1 image before publishing that image into the streams for $BigCloud116:04
xnoxsmoser, an individual image probably doesn't regress; but we can build a new image which is broken. E.g. 20190208 might be good and 20190209 might be bad, for the src:open-iscsi boot test; without any packages moving in the archive. Due to e.g. changes in the livecd-rootfs branches.16:05
xnoxand whilst no packages have moved in the bionic-release pocket, the image may have significantly different content / boot properties / kernel / etc16:06
xnoxbreaking the world, where world is the src:open-iscsi autopkgtest16:06
smoserxnox: yeah, image build changes can break things. you are correct.16:08
xnoxsmoser, hence gating is needed.16:11
xnox(of images that is - e.g. cloud test framework / automatic promotion / jenkins ci build pipeline, we gate packages with autopkgtests)16:12
xnoxsmoser, hmmm, are you seeding that package into cloud images just because of the test; or because that functionality should be provided by the cloud image?16:21
xnoxsmoser, my understanding was that it is only MAAS image that does this iscsi root thing, and thus this extra package for iscsi root should be in the maas image; but not all cloud images; and the test then should also probably use a maas image, no?16:22
xnoxsmoser, cause we are trying to mimick / make sure that MAAS iscsi root boot is not regressing in ubuntu, right?16:22
xnoxor am i missing details, as to which features/products are under test here?16:23
sdezielfreshly created containers contain the unneeded libfreetype6 package. I feel like this should be removed/purged before the image is published to save everyone time. Any idea where I can fill a bug for this request?16:24
xnoxsdeziel, https://bugs.launchpad.net/cloud-images/+filebug might be a good place to start.16:25
sdezielxnox: thx16:25
xnoxsdeziel, do give details as to _which_ images/ containers you are trying to use; which built timestamps; which release; where from.... all the details.16:25
sdezielsmoser beat me to it https://bugs.launchpad.net/cloud-images/+bug/172103516:26
ubottuLaunchpad bug 1721035 in cloud-images "unnecessary packages in images / please run autoremove" [Medium,New]16:26
xnoxsmoser, should we bad-test current open-iscsi; until image is fixed up & we at least add the timeout to the test?16:49
xnoxsmoser, at the moment it is blocking up almost a dozen packages from migrating -> cryptsetup transition and all reverse dependencies; systemd; qemu; snapd16:50
xnoxeven if we need further fixes in all of that stack, to get open-iscsi test working again.16:51
smoserxnox: bad-test is fine with me. for it is currently knonw-broken17:06
smoserxnox: https://bazaar.launchpad.net/~ubuntu-core-dev/ubuntu-seeds/ubuntu.bionic/revision/263417:08
smoserdo you know how long that has to sit before i can upload the ubuntu-meta ?17:08
xnoxsmoser, arghuh.... not sure. I typically try to run the update and check if changes i expect make it into the update. Usually 24h hours. Let me run it now, to see if that "works" straight away or not17:10
xnox? Unknown server package: cloud-initramfs-dyn-netconf17:10
xnoxhm... maybe snakefruit needs to update first, or some such.17:10
xnoxnot a typo, it does exist.17:11
xnoxi'd wait 24h17:11
smoserxnox: thanks.17:15
=== Guest9258 is now known as Cyrus
wolflarsonHello, is this a good place for a ufw question?17:55
masonwolflarson: That depends on who's around at any particular time.17:58
wolflarsonwell I'll just ask then and see if anyone can point me the right way. I have openvpn installed on a ubuntu 16.04 VPS using Nyr's openvpn-install script (https://github.com/Nyr/openvpn-install) I am able to connect clients jsut fine but they cant connect to the internet17:59
wolflarsonif I turn off ufw (ufw disable) then I can get to the internet over the VPN17:59
wolflarsonany advice about a ufw rule I could put in place that would allow [UFW BLOCK] IN=tun0 OUT=eth0 MAC= SRC=10.8.0.2 DST=172.217.0.238 to work?18:01
wolflarsonthats just google.com18:01
smoserxnox: still there ?18:11
wolflarsonI removed all my firewall rules and reran the installer seems to have fixed it. I wonder what changed my firewall rules.18:43
jdstrandwolflarson: sudo ufw route allow in on tun0 out on eth0 from 10.8.0.2 to 172.217.0.23818:57
jdstrandwolflarson: if you want masquerading, see 'man ufw-framework' and look in 'IP Masquerading'18:58
Ussatwhat version of php is in ubunti 16.04 LTS ?19:11
sdezielUssat: currently it's 7.0.25-0ubuntu0.16.04.119:12
UssatGreat, thanks......I have a dev who wanted to know19:15
UssatDebating putting him on 16.04 LTS or waiting till 18.04 LTS19:16
Ussatanyone know what the migration path  16.04LTS --> 18.04LTS will look like ?19:16
dpb1Ussat: it's supported, did you have a particular concern?19:17
UssatNope, just debating wether to put this guy on 16.04 or wait till 18.0419:18
Ussatno particular concerns19:18
UssatJust gonna be a LAMP stack w/php19:18
Ussatwhats the ETA on 18.04 release ?19:20
dpb1Ussat: o.O19:21
dpb1Ussat: 26 April. :)19:22
Ussatheh, sons Birthday :)19:22
Ussat\o/19:22
UssatThanks19:22
dpb1np19:27
coreycbjamespage: percona-xtrabackup tested ok19:28
Epx998Anyone know if the installer can generate a new interfaces file in late command?19:46
naccEpx998: i don't exactly see why not?19:47
naccEpx998: although i'm not sure what you mean by 'generate'? late command would imply (usually) you're running some script or tool19:47
Epx998I created a udev rule thats copied to /etc/udev/rules.d that renames the interface to a standard across different firmware names19:48
Epx998I am seeing the interfaces file being generated prior, so when the server comes up, I need to change the interfaces file to reflect eth0 vs the firmware name that was assgned19:48
TJ-Epx998: could you use as an alternative, the kernel command-line option "net.ifnames=0" to prevent the interface renaming in the first place?19:51
Sircle ANy advice on good vps providers?20:09
Sircle other than ramnode and ec220:09
sarnoldI hear decent things about scaleway and packet.net, hetzner is an old-timer, but I don't hear much about them any more .. wonder why20:12
Sircle_Any votes on which to go for a VPS   InmotionHostingBluehostLiquidwebHostgator  or Dreamhost?20:13
jamespagecoreycb: push your work I'll review am tomorrow :-)20:13
sarnoldI hear decent things about scaleway and packet.net, hetzner is an old-timer, but I don't hear much about them any more .. wonder why20:14
sarnoldSircle_: of those, I've only heard of gatorhosting by freeway billboards; but loads of folks I know use or have used dreamhost without complaint20:14
=== Sircle_ is now known as Sircle
Sirclesarnold,  ok  Any votes on which to go for a VPS   InmotionHosting Bluehost Liquidweb Hostgator  or Dreamhost?20:15
SircleDreamhost vote noted20:15
* dpb1 has deja vu20:15
coreycbjamespage: eh, thought i'd pushed that. pushed now! thanks.20:16
Sirclesarnold,  dream is managed vps. I need unmanaged20:18
=== Epx998- is now known as Epx998
Epx998Is it possible to make a change to udev that goes live right away?20:49
=== Sircle_ is now known as Sircle
Epx998like renaming a interface at the cli20:49
sdezielEpx998: it's not udev but this works: ip link set $OLD name $NEW20:59
Epx998thats it?21:03
SircleIf I have a VPS, and want to make a clone/backup of same VPS, how can I do it?21:07
smoserxnox: fyi, https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1732028 is the systemd bug that affects poen-iscsi21:08
ubottuLaunchpad bug 1732028 in systemd (Ubuntu) "transient boot fail with overlayroot" [Medium,Confirmed]21:08
sarnoldSircle: rsync -avz isn't a bad place to start21:09
Sirclesarnold,  I have used that but don't you think a running vps will not be able to copy all files (some are not even visible to root unless made visible to it) and the other vps will not be able to write files to itself (while running)?21:10
Sirclesarnold,  there?21:18
sarnoldSircle: yeah21:19
Sircleany clues?21:19
sarnoldSircle: sorry, insufficient time to describe how to use rsync ..21:19
Sirclehm.. I know how to use it. but is it my solution?21:20
sarnoldSircle: the full details are .. a bit involved. just test tiny directories first, and be sure you get the trailing / on the end of directory names correct21:20
Sirclehm21:20
Epx998does ip link set name only work if the device isnt in use?21:26
sarnoldhah, "This operation is not recommended if the device is running or has some addresses already configured."21:28
Epx998well fiddlesticks21:28
sarnoldit's a bit vague about the consequences ;)21:28
* sdeziel takes a sacrificial VM to test NIC renaming21:29
sarnoldsweet21:29
Epx998if only off board nics worked well during provisioning21:29
sarnoldmy *guess* is that applications that try to do NIC binding rather than wild-card binding or address binding will be seriously unhappy21:29
sdeziel# ip l set eth0 name foo21:29
sdezielRTNETLINK answers: Device or resource busy21:29
naccEpx998: note that the systemd naming pattern, if it's bothering you, is really mean tto solve a class of problems related to multiple NICs, and remote systems (imo)21:30
naccEpx998: if you don't have that complicated of a hardware config, then you might just disable it?21:30
Epx998yeah thats what we do now, but it burns of lot of cycles to disable onboard nics so that offboards get named eth0 during provisioning21:31
sdezielEpx998: how about blacklisting the onboard NIC driver from loading?21:31
Epx998since we use different distros and hardware, the leads indicated having a standard interface name across the board.21:31
sarnoldEpx998: .. like, people having to *visit* every machine and fiddle with BIOS kinds of expensive?21:32
Epx998im not sure how to do that21:32
Epx998sarnold: exactly21:32
sarnoldEpx998: ew.21:32
sarnoldhonestly I would have expected systemd's nic renaming to be your friend here21:32
Epx998we can WAR it thru ipmi, but my manager loves buying different hardware and testing21:32
sarnoldheh21:33
Epx998my job is to make it all work with unattended21:33
Epx998one recipe that works across everything, thats why im always asking these questions lol21:33
Epx998blacklisting the onboard driver might be the answer21:34
sdezielEpx998: something along those line: drv="$(ethtool -i enp3s0 | awk '/^driver:/ {print $2}')"; echo "install $drv /bin/true" > /etc/modprobe.d/blacklist-$drv.conf21:35
Epx998nope it work work, not every builder uses these ixgbe drivers21:35
Epx998the issue manifested when we started adding these offboard intel nics that use the ixgbe driver, not all our hosts have them so a good number would still need the standard network module21:36
sdezielEpx998: with systemd naming, you can figure if a NIC is offboard and when you detect one such NIC, you can blacklist the other NICs' drivers21:38
Epx998Beyond my skillset21:40
Epx998reading up on it21:41
sdezielhttps://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/21:41
Epx998thats the page i found21:42
Epx998lol21:42
sdezielhttps://paste.ubuntu.com/p/kGNNfTpkWK/ is from a machine with 4 onboard and a dual NIC card offboard21:44
sdezielhttps://github.com/systemd/systemd/blob/master/src/udev/udev-builtin-net_id.c#L20 has more details about the naming scheme21:44
Epx998the problem that caused this was offboard nics having the link, say on eth4 and the debian-installer falling on its face21:49
Epx998might have a work around21:55
Epx998nope didnt work, early_command is not early enough, id need to rebuild my images and im not going to do that.22:22

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!