/srv/irclogs.ubuntu.com/2019/03/20/#ubuntu-server.txt

coreycbjamespage: looks like tempest commit 8d94885df02ea0a4826a1f271f011dfefd2c2ca9 is where the get_domain failure started01:07
jonfatin-Ubuntu 16.04 netinstalls are broken with archive mirror. here is my kickstart (hasn't changed in a year or so)  https://pastebin.com/raw/3k7STH8M04:17
jonfatin-https://imgur.com/a/azXDjn904:19
jonfatin-Confirmed existing bug yay... https://bugs.launchpad.net/ubuntu/+source/linux-base/+bug/182075504:31
ubottuLaunchpad bug 1820755 in linux-base (Ubuntu) "Netboot install fails due to linux-image-4.4.0-143-generic.postinst linux-update-symlinks not found" [Undecided,Confirmed]04:31
jamespagecoreycb: bah - UCA qemu does not have the patch I thought it had - that's my bad06:07
jamespageit was in ca-patches but that had not refreshed when I ran the backport I think06:07
lordievaderGood morning07:28
=== dpawlik_ is now known as dpawlik
blackflowany suggestions on how to shut up the php-fpm warnings about "server reached max_children setting"? google isn't helpful. Yes, I know what the error means, no I'm not gonna raise the number of PHP procs. The requests should queue up, as is expected, by nginx. Yes, I'm monitoring it and will decide when to upgrade based on too many accepts waiting in the queue. So... there apparently isn't a08:43
blackflowconfig to shut that warning up, or I'm missing it from docs, google.08:43
blackflowother than completely dropping warnings for the pool, with ~E_WARN in error_reporting, which I don't really want to08:45
blackflownvm, asking in ##php, thanks.09:00
kstenerud@cpaelzer if you have time, I'd like your comments on whether I'm on the right track wrt https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/181058309:32
ubottuLaunchpad bug 1810583 in keepalived (Ubuntu) "Daily cron restarts network on unattended updates but keepalived .service is not restarted as a dependency" [High,Triaged]09:32
cpaelzerkstenerud: the bug has no recent updates, where would an update be to think about it?09:41
kstenerudI'm trying to tackle it, since I'm doing ha stuff now. There's a post here https://chr4.org/blog/2019/01/21/make-keepalived-play-nicely-with-netplan-slash-systemd-network/ which talks about an upstream fix, which is talked about https://github.com/acassen/keepalived/issues/836#issuecomment-38201155209:43
kstenerudbut it's a huge merge: https://github.com/acassen/keepalived/commit/8ecbb591994a567375d78239d075ed032d9f9b0709:44
kstenerudI can tease out the individual commits, but it will take awhile, so I'm wondering if this is the best way to deal with this issue? The problem is that keepalived doesn't play nice with systemd-networkd. It drops virtual IPs, which renders the entire HA stack useless09:45
cpaelzerkstenerud: a lot to read ... still reading10:05
kstenerudyeah, sorry.10:06
kstenerudFrom what I've read, the fixes were put in place a year ago, but it's a huge merge, so there's a ton of little commits, most not directly related to the problem. I'm thinking that maybe I can find one or two commits that deal specifically with this problem, or at the least get a list of anyhing that touches vrrp_whatever.c10:07
kstenerudThe only other mitigations people have found so far were to force reload of multiple daemons on a trigger, which can cause other problems...10:08
cpaelzerkstenerud: lets sort out what these things do please10:10
cpaelzerkstenerud:  the referenced git entry does a lot of things as it is a whole fixes branch10:10
kstenerudyes, that's what I'm saying. I'm in the process of sifting through all the little commits to find the ones that are actually relevant10:11
cpaelzerkstenerud: and eventually all it provides in regard to the issue is that keepalived will realize that it "lost" its VIP to then action on it10:11
kstenerudI just want to make sure I'm going about this the right way10:11
cpaelzer can't promise to know the right way, but I can try to help :-)10:11
cpaelzerkstenerud: that feature we will get with keepalived 2.010:11
kstenerudYeah that's cool. I just wanted your gut reaction to this, as in "oh god no you're doing this all wrong" :P10:12
cpaelzerbut since we care on this issue on >=Bionic we need a solution for pre keepalived-2.0 anyway10:12
cpaelzermy gut reaction seems to make what we found in the blog a best practise - if it is seconded by a bunch of people to apply to all their problems10:12
kstenerudok, then I'm going to dive deeper into the PR and find the commits that touch the vrrp stuff10:13
cpaelzerthen I'd put it into the Readme file and maybe even a hint to the issue (bug) and recommended solution (ref to the Readme) in a NEWS update10:13
cpaelzerkstenerud: consider this from the blog (if that is true) "I came to the conclusion that this actually wouldn’t fit the actual problem, as keepalived would just note the removed VIP and failover to another machine. But I wanted to fix the underlying problem itself, instead of just coping with the symptoms"10:14
cpaelzerconsidering that, would identifying and backporting the changes (if even possible) help a lot?10:15
kstenerudIt's still not a complete solution, but it does prevent the vrrp from going down and never coming back10:15
cpaelzerinstead - if confirmed really good - we should make the config approach that the blog had best practise10:15
kstenerudtrue10:16
kstenerudwe'll probably need both10:16
cpaelzerkstenerud: I think the two things are not mutually exclusive10:16
cpaelzeryeah10:16
cpaelzeridentify the changes and evaluate if they are backportable at all10:16
cpaelzerget in touch with people reporting the bugs if the proposed configuration would work for them10:16
cpaelzerif backportable it seems a win to do so10:16
kstenerudyeah10:17
cpaelzerIf not then it is to some extend your call - if keepalived without the fixes it totally broken then we might consider backporting keepalived-2.0 at some point10:17
cpaelzerbut that is a despareate measure that has to be considered only later if needed10:17
cpaelzeras e.g. upgraders still have ifupdown and are probably happy10:17
cpaelzerkstenerud: if the config style mentioned in the blog really turns out to be superior that is mostly communication - as I said readme/news also whatever docs that we ahve on the net about it, maybe a blog post on your own10:18
cpaelzerkstenerud: TL;DR to me it seem the right way is going both ways and decide then10:19
kstenerudok sounds good10:19
cpaelzerand there semes to be a lot of communication involved, so make sure you are in touch with people affected by the issue and also others running keepalived but not being affected10:19
cpaelzerwe don't want to break one of these groups in favor for the other10:19
cpaelzerkstenerud: there is the sad truth that sometimes a fix has so much regression risk that even thou it would be nice to have we are not doing it and instead have to kindly ask to move to a newer version10:20
cpaelzerI love to fix issues for our users, but not breaking all other users sometimes wins - so consider "making 19.10/20.04 a great working solution" and then recommending an upgrade an alternative fallback10:21
cpaelzerand the new recommended config style that avoids the issue could be the documented and recommended solution for 18.04-19.04 then10:21
cpaelzerkstenerud: ^^10:21
kstenerudok10:22
coreycbjamespage: ohh do you think that explains tobias-urdin's issue?11:54
ahasenackgood morning12:06
rbasakcpaelzer: in https://code.launchpad.net/~paelzer/ubuntu/+source/qemu/+git/qemu/+merge/36476012:16
rbasakrmdir "$NEWCONFFILE" || echo "failed to remove $NEWCONFFILE"12:16
rbasakIf that fails, the preinst will succeed. Is that intentional?12:16
cpaelzerrbasak: yes12:33
cpaelzerintentional12:33
cpaelzerI listed the output in the testcase12:33
cpaelzerthat is when people have made customizations to the extend that we can't cover them all (e.g. placed other things in that dir)12:33
cpaelzerthe intention is there to have the errors shown but NOT fail the package upgrade itself12:34
cpaelzerrbasak: feel free to convince me otherwise, we could as well make it a "please clean DIR foo to make this upgrade smoothly" + exit 112:34
cpaelzerI'd be fine with that as well12:34
rbasakAh, I missed your bug comment, sorry. I see it now.12:35
rbasakThere doesn't seem to be an obviously correct answer to what the behaviour should be.12:35
cpaelzeryeah but are imperfect, but we could come up with "more edgy cases" of something already being a very rare use case all day12:37
cpaelzertherefore this was the line I decided to draw12:37
rbasakYeah12:37
rbasakI think what you've done is fine.12:37
rbasakI just wanted to check that the || echo failed was intentional. From your bug comment that I missed it's clear that it was and that you've thought this through.12:38
rbasakI think what you've done is fine> in intended behaviour I mean. I still need to check again that the code does as intended :)12:38
rbasakcpaelzer: so is that the last time you'll accidentally put a filename in to the target of a dh_install file? :-)12:39
brektymeHi, I'm getting a segfault when pxebooting the installer on 16.04, at the dectect disks step, I'm not really sure what the issue is and I've not seen it before it started yesterday. Does anyone have an idea of what I sould look at or what the issue could be?12:43
cpaelzerrbasak: no promises13:09
cpaelzerbut it certainly reduces the chances that I'll do so13:10
brektymeI found a workaround on https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1817358, that got me past the segfault but the installer is failing while installing the kernel, looks like a dependancy problem with linux-modules-extra13:14
ubottuLaunchpad bug 1816846 in glibc (Ubuntu) "duplicate for #1817358 segfault in libc-2.23.so netinstall installation pxe" [Undecided,Confirmed]13:14
=== cryptodan_d is now known as cryptodan
jamespagecoreycb: might do13:36
jamespagecoreycb: I need to finish off some ceph SRU Testing and I'll take another test run at stein/proposed13:37
coreycbjamespage: ok. i'm still trying to figure out that tempest domains issue. i narrowed down on the commit. it seems we need to account for the switch of the test class inheritance from base.BaseIdentityV3AdminTest to base.BaseIdentityV3Test.13:39
coreycbnot sure how yet though13:39
jamespagecoreycb: oh I think I know what that is13:39
jamespagecoreycb: obs if you revert the commit its all good13:39
jamespageI think the problem is the test uses on of the pre-created users todo the get domain call13:40
jamespagethe users are in admin_domain, but the get domain call is for the default domain13:40
coreycbjamespage: ok, that's along the lines I was thinking as well. switching default_domain_id to admin_domain didn't seem to fix it.13:41
jamespagecoreycb: hmm13:44
kstenerudcpaelzer: All dependent packages of php7.2 now succeed, except rss-bridge, which failed due to being unable to connect to the deb archive: https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-disco/disco/armhf/r/rss-bridge/20190320_112057_9cf57@/log.gz13:56
kstenerudI tried restarting the build but I don't have permission13:56
jamespagecoreycb: its working ok for me - using the ID of the admin_domain13:59
coreycbjamespage: oh great! maybe i've got something residual hanging around in my deployment.14:00
cpaelzerkstenerud: rsyslog was built just this morning14:02
cpaelzerkstenerud: maybe there was a problem publishign it in time for armhf14:03
cpaelzerkstenerud: give it an hour and then run it again14:03
cpaelzerkstenerud: I'm almost sure it will resolve then14:03
kstenerudI don't have permission to run it14:03
cpaelzerok I can do that for you14:03
kstenerudok thanks!14:03
cpaelzerkstenerud: to me it looks like the metadata in the repo was updated but the ftp not yet fully synced (or something like ti)14:05
cpaelzerkstenerud: running again http://autopkgtest.ubuntu.com/running#pkg-rss-bridge14:05
cpaelzerlets see in ~1h14:05
cpaelzerkstenerud: it passed that step already14:06
jamespagecoreycb: it does indeed work14:07
kstenerudcool!14:07
jamespagecoreycb: https://github.com/openstack-charmers/openstack-charm-testing/pulls/javacruft if you have cycles14:08
coreycbjamespage: merged, thanks14:14
coreycbjamespage: are you ok with releasing keystone LDAP backend fixes early to rocky-updates? they've only been there since last night but testing successful and it's critical.14:21
coreycbjamespage: fyi bug 1798184 bug 182033314:21
ubottubug 1798184 in python-ldappool (Ubuntu Cosmic) "[SRU] PY3: python3-ldap does not allow bytes for DN/RDN/field names" [High,Fix committed] https://launchpad.net/bugs/179818414:21
ubottubug 1820333 in keystone (Ubuntu Cosmic) "[SRU] ldap search should not encode attributes" [Critical,Fix committed] https://launchpad.net/bugs/182033314:21
jamespagecoreycb: +114:21
jamespageits basically completely broken right now so a fast-track is appropriate14:22
coreycbjamespage: alright, i'll go ahead and release that then14:23
jamespagecoreycb: stein-proposed passes our tempest tests!15:02
jamespagepromoting all the things...15:02
=== dpawlik is now known as dpawlik_
coreycbjamespage: \o/15:33
genewitchis there any reason to use --user with "pip" command, i'm having issues with certain libraries (libgpuarray specifically) where if the main application is pip installed with --user it can't see a hand compiled libgpuarray17:57
tomreynmaybe you need to change PATH or LD_LIBRARY_PATH18:17
bin_bashhello, I want to change the values in /etc/apt/apt.conf.d/20auto-upgrades to be "0" using "echo" how is this possible?18:30
sarnoldit depends what's in that file. best is to just change whatever writes it to write whatever settings you need18:30
bin_bashwell usually i just manually change it, but i'm trying to put it in a quick bash script18:31
sarnoldsed -i is probably the better tool for the job18:31
bin_bashAPT::Periodic::Update-Package-Lists "1";18:31
bin_bashAPT::Periodic::Unattended-Upgrade "1";18:31
bin_bashthis is what the file has by default18:31
bin_bashi want 1 to become 018:31
bin_bashhm sed is a good idea, i didnt consider that18:32
bin_bashsarnold: im looking at the manpage, not sure i'm seeing how to do this18:34
tomreynhere's a simple example: sed -i 's/^APT::Periodic::Update-Package-Lists "1";$/APT::Periodic::Update-Package-Lists "0";/'18:41
tomreynhere's a simple example: sed -i 's/^APT::Periodic::Update-Package-Lists "1";$/APT::Periodic::Update-Package-Lists "0";/' /etc/apt/apt.conf.d/20auto-upgrades18:41
tomreyn^ I forgot the file to edit initially18:42
tomreynbut you'll really need to understand regular expressions, or you won't know what you need to escape.18:42
tomreyntry #bash18:42
bin_bashthanks18:43
bin_bashideally i'd just replace 1 with 0 in that file18:43
bin_bashrather than the whole line18:43
tomreynif you just want to replace any 1 by one character, that's also possible, but i think that's most likel ynot what you actually want.18:44
tomreyn*any 1 character by a 0 character18:45
sarnoldyou definitely want to make sure you know which exact config settings you're changing18:45
bin_bashit'd be weird if there was another 1 in the file18:45
sarnoldapt has something like nine thousand config choices18:46
bin_bashnot in this one file18:46
sarnoldand there's no saying what other admins or tools have put in which files18:46
tomreynor removed from them, or whether edited to be in a different format, or commented in or out18:47
tomreyneven regular expressions mey be unsuitable to help you there.18:48
bin_bashthere shouldn't be anything else in this file except these two lines...18:48
sarnoldyeah if the settings are set via the APT { Periodic { Update-Package-Lists } } } style, it'll be harder to edit18:48
sarnoldbin_bash: maybe today .. who knows what'll be there in six months18:49
tomreynpeople like you probably wrote software for boeing 737 max 818:50
bin_bash...18:50
bin_bashwow18:50
tomreyni'm not meaning to blame you there, just pointing out such things can really matter18:51
bin_bashthat's gotta be one of the worst false equivalency attempts i've ever had lobbed against me.18:51
bin_bashI can't imagine how a single personal-use script is even comparable in your thought process18:52
sarnoldman if you're upgrading your planes in flight .. something is way wrong :)18:52
lordcirthbin_bash, that was excessive. But if a thing is worth doing, it's worth doing right.18:52
bin_bashif you're running ubuntu on a plane, there's some serious fucked up shit going on18:52
lordcirthbin_bash, point is, don't hack something together poorly, do it right the first time18:53
bin_bashlordcirth: i'm really just trying to reduce having to manually change this in a deployment script for dev usage. i never suggested hacking it together, i'm  simply looking for the easiest implementation for the specific use-case18:54
tomreynyes, that was excessive, sorry bin_bash. but you should try to get into this kind of thinking - how risky is it if i do it wrong, and can i actually measure that reliably, or should i just try to make it reliable no matter what.18:55
bin_bashi'm only ever modifying THIS file. i'm only changing the values from 1 to 0, and was therefore askined the best way to implement this. even if more lines were added i would /still/ want them to change from 1 to 0 because i want to disable any automatic upgrades18:55
sarnoldbin_bash: I still think you'd be better served by figuring out what's putting that file in place and using the correct values from the start18:55
tomreynbin_bash: you mention deployment. many deployment frameworks provide a way to edit configuration files in a better way.18:56
sarnoldif it's copying /usr/share/unattended-upgrades/20auto-upgrades into place, it might as easy as asking those scripts to copy /usr/share/unattended-upgrades/20auto-upgrades-disabled instead18:57
bin_bashsarnold: what?18:57
sarnoldbin_bash: I don't have /etc/apt/apt.conf.d/20auto-upgrades on my systems; there *is* a /usr/share/unattended-upgrades/20auto-upgrades though18:58
sarnoldbin_bash: so I'm curious if your deployment script is copying that file over..18:58
sarnoldbin_bash: in which case it'd be as easy as asking it to copy a *different* file ..18:58
bin_bashsarnold: which version?18:58
sarnoldbin_bash: which would be way more reliable than copying the wrong file, and then editing it :)18:58
sarnoldii  unattended-upgrades 1.1ubuntu1.18.04.9 all          automatic installation of security upgrades18:59
bin_bashsarnold: your setup sounds weird...19:00
tomreyni see /etc/apt/apt.conf.d/20auto-upgrades on 14.04, not on anything newer19:00
bin_bashthe unattended upgrades file has always been in etc19:00
bin_bashthis is 18.0419:00
bin_bashand i found this stack overflow for 16.04, which has a similar sed command to what was suggested above: https://askubuntu.com/questions/1059971/disable-updates-from-command-line-in-ubuntu-16-0419:01
tomreyndpkg -S /etc/apt/apt.conf.d/20auto-upgrades19:01
tomreynok, ignore this, that's maybe misleading19:01
bin_bashthis even says the same file too:19:02
bin_bashhttps://linuxconfig.org/disable-automatic-updates-on-ubuntu-18-04-bionic-beaver-linux19:02
tomreynyes the file is created via postconf apparently19:04
bin_bashhm interesting19:05
=== englishm_ is now known as englishm
tomreyns/postconf/postinstall/ oops22:11

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!