2017-11-21T00:10:46 *** cboltz has quit IRC 2017-11-21T01:43:27 *** Son_Goku has quit IRC 2017-11-21T01:53:56 *** Son_Goku has joined #opensuse-admin 2017-11-21T02:27:16 *** Son_Goku has quit IRC 2017-11-21T02:31:48 *** Son_Goku has joined #opensuse-admin 2017-11-21T02:41:46 *** plinnell has quit IRC 2017-11-21T02:44:40 *** Son_Goku has joined #opensuse-admin 2017-11-21T03:02:27 *** Son_Goku has quit IRC 2017-11-21T03:03:09 *** Son_Goku has joined #opensuse-admin 2017-11-21T03:23:33 *** Son_Goku has joined #opensuse-admin 2017-11-21T03:40:47 *** okurz has quit IRC 2017-11-21T03:41:38 *** okurz has joined #opensuse-admin 2017-11-21T03:57:27 *** Son_Goku has joined #opensuse-admin 2017-11-21T04:18:29 *** Son_Goku has quit IRC 2017-11-21T05:00:30 *** plinnell has joined #opensuse-admin 2017-11-21T05:00:30 *** plinnell has joined #opensuse-admin 2017-11-21T07:13:43 *** tigerfoot has quit IRC 2017-11-21T07:59:11 *** asmorodskyi has joined #opensuse-admin 2017-11-21T08:07:59 *** kl_eisbaer has joined #opensuse-admin 2017-11-21T08:12:28 *** tigerfoot has joined #opensuse-admin 2017-11-21T08:17:41 *** fghariani has joined #opensuse-admin 2017-11-21T08:43:13 *** ldevulder has quit IRC 2017-11-21T08:53:05 *** ldevulder has joined #opensuse-admin 2017-11-21T08:56:42 *** matthias_bgg has joined #opensuse-admin 2017-11-21T09:09:09 *** mstrigl has quit IRC 2017-11-21T09:15:37 *** mstrigl has joined #opensuse-admin 2017-11-21T09:52:12 *** sven15 has joined #opensuse-admin 2017-11-21T10:13:08 *** asmorodskyi has quit IRC 2017-11-21T10:13:28 *** asmorodskyi has joined #opensuse-admin 2017-11-21T10:42:39 *** fghariani has quit IRC 2017-11-21T10:43:24 *** asmorodskyi has quit IRC 2017-11-21T10:43:49 *** asmorodskyi has joined #opensuse-admin 2017-11-21T10:50:25 tampakrap: at least anna is now querying itself for NTP data - can you fix that ? 2017-11-21T11:12:47 *** Son_Goku has joined #opensuse-admin 2017-11-21T11:13:24 *** cboltz has joined #opensuse-admin 2017-11-21T11:24:58 *** Son_Goku has quit IRC 2017-11-21T11:30:11 *** Son_Goku has joined #opensuse-admin 2017-11-21T11:38:09 *** asmorodskyi has quit IRC 2017-11-21T11:38:30 *** asmorodskyi has joined #opensuse-admin 2017-11-21T11:38:59 *** Son_Goku has quit IRC 2017-11-21T11:52:50 kl_eisbaer: sure, MR coming 2017-11-21T12:01:01 *** fghariani has joined #opensuse-admin 2017-11-21T12:17:09 *** Son_Goku has joined #opensuse-admin 2017-11-21T12:19:50 *** asmorodskyi has quit IRC 2017-11-21T12:20:14 *** megamaced has joined #opensuse-admin 2017-11-21T12:21:55 PROBLEM: Fail2Ban on status1.opensuse.org - CHECK FAIL2BAN ACTIVITYCRITICAL - non-zero exit code during testing fail2ban-client ping, check if the server is running and if you have the good permissions ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=status1.opensuse.org&service=Fail2Ban 2017-11-21T12:24:08 PROBLEM: SSL cert status2 on status2.opensuse.org - connect to address 130.57.72.11 and port 443: Connection refused ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=status2.opensuse.org&service=SSL%20cert%20status2 2017-11-21T12:25:02 *** asmorodskyi has joined #opensuse-admin 2017-11-21T12:26:11 *** cboltz has quit IRC 2017-11-21T12:43:40 *** megamaced has quit IRC 2017-11-21T13:06:26 *** matthias_bgg has quit IRC 2017-11-21T13:07:12 *** matthias_bgg has joined #opensuse-admin 2017-11-21T13:20:52 kl_eisbaer: https://gitlab.infra.opensuse.org/infra/salt/merge_requests/112 2017-11-21T13:21:29 kl_eisbaer: also I filed this some time ago https://gitlab.infra.opensuse.org/infra/salt/merge_requests/95 2017-11-21T13:21:36 for syslog 2017-11-21T13:21:50 it sets up syslog server on monitor.i.o.o as well, is it fine? 2017-11-21T13:21:55 RECOVERY: Fail2Ban on status1.opensuse.org - CHECK FAIL2BAN ACTIVITY - OK - 1 detected jails with 0 current banned IP(s) ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=status1.opensuse.org&service=Fail2Ban 2017-11-21T13:24:08 RECOVERY: SSL cert status2 on status2.opensuse.org - OK - Certificate status.opensuse.org will expire on Wed 10 Jan 2018 10:51:39 AM GMT +0000. ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=status2.opensuse.org&service=SSL%20cert%20status2 2017-11-21T13:34:50 *** kl_eisbaer1 has joined #opensuse-admin 2017-11-21T13:47:12 *** asmorodskyi1 has joined #opensuse-admin 2017-11-21T13:48:28 *** Son_Goku has quit IRC 2017-11-21T13:49:37 *** asmorodskyi1 has quit IRC 2017-11-21T13:51:34 *** asmorodskyi1 has joined #opensuse-admin 2017-11-21T13:52:16 *** asmorodskyi1 has quit IRC 2017-11-21T14:36:07 *** Son_Goku has joined #opensuse-admin 2017-11-21T14:41:06 *** asmorodskyi has quit IRC 2017-11-21T14:52:21 *** kl_eisbaer1 has quit IRC 2017-11-21T14:53:10 *** asmorodskyi has joined #opensuse-admin 2017-11-21T14:55:47 *** kl_eisbaer has quit IRC 2017-11-21T14:55:47 *** Son_Goku has quit IRC 2017-11-21T15:00:45 *** Son_Goku has joined #opensuse-admin 2017-11-21T15:10:12 *** Son_Goku has quit IRC 2017-11-21T16:06:22 *** marxin has quit IRC 2017-11-21T16:12:21 *** fghariani has quit IRC 2017-11-21T16:16:38 *** asmorodskyi has quit IRC 2017-11-21T16:21:19 *** matthias_bgg has quit IRC 2017-11-21T16:24:53 *** cboltz has joined #opensuse-admin 2017-11-21T16:24:53 *** cboltz has joined #opensuse-admin 2017-11-21T16:25:23 *** mcaj has quit IRC 2017-11-21T16:47:42 cboltz, are you here? 2017-11-21T16:49:21 * cboltz hides under a pile of mails ;-) 2017-11-21T16:57:36 * katnip waits for cboltz to emerge 2017-11-21T17:01:40 *** asmorodskyi has joined #opensuse-admin 2017-11-21T17:13:27 *** sven15 has quit IRC 2017-11-21T17:16:05 *** asmorodskyi has quit IRC 2017-11-21T17:18:42 *** tigerfoot has quit IRC 2017-11-21T17:23:45 one of the mails confirmed that tampakrap is evil 2017-11-21T17:23:58 "You now have access to merge this MR and to update the formula" 2017-11-21T17:28:05 *** cthugha has joined #opensuse-admin 2017-11-21T17:30:09 tampakrap: I just tried to update elasticsearch-formula, and get 2017-11-21T17:30:15 GitLab: You are not allowed to push code to this project. 2017-11-21T17:31:27 *** ldevulder has quit IRC 2017-11-21T17:37:22 this: xzcat openSUSE-42.3-JeOS.raw.xz > vmname.raw ; got stuck and hung in 2 different terms, would not complete 2017-11-21T17:38:15 but ill be back in a few, i need to hide for a bit :) 2017-11-21T17:39:37 hmm, works here (runtime: maybe 10 seconds) - vmname.raw is about 1.1 GB 2017-11-21T17:45:00 is that a file inside the file i downloaded? 2017-11-21T17:45:49 admin-openSUSE-Leap-42.3.x86_64-0.2.0-Build1.3.raw.xz 2017-11-21T17:46:05 xzcat uncompresses the *.xz file and writes it to stdout, and the redirection puts it into vmname.raw 2017-11-21T17:46:36 that's an easy way to get a new VM image while keeping the compressed one - you'll need it again sooner or later ;-) 2017-11-21T17:47:13 if your *.xz file isn't named openSUSE-42.3-JeOS.raw.xz, you'll obviously have to adjust the filename 2017-11-21T17:54:02 xzcat: openSUSE-42.3-JeOS.raw.xz: No such file or directory 2017-11-21T17:55:22 bbiab 2017-11-21T17:57:15 *** default__ has joined #opensuse-admin 2017-11-21T18:00:41 *** cthugha has quit IRC 2017-11-21T18:05:29 *** fvogt has joined #opensuse-admin 2017-11-21T18:31:53 *** paka has quit IRC 2017-11-21T18:40:50 *** paka has joined #opensuse-admin 2017-11-21T19:55:49 cboltz: still here? 2017-11-21T20:01:40 *** tigerfoot has joined #opensuse-admin 2017-11-21T20:05:48 cboltz: try it again please 2017-11-21T20:14:40 now it gets rejected because gitlab has commits that are not in the upstream repo (probably my version of the changes) 2017-11-21T20:14:50 looks like I'll need to push -f 2017-11-21T20:15:03 yes 2017-11-21T20:15:33 worked for master 2017-11-21T20:15:45 but master:production is a protected branch and refuses push -f 2017-11-21T20:16:00 you can unprotect it 2017-11-21T20:20:20 *** fghariani has joined #opensuse-admin 2017-11-21T20:22:19 done, worked 2017-11-21T20:40:31 hmm... 2017-11-21T20:40:49 I just did a highstate test=True on my local wikisearch VM, and see 2017-11-21T20:41:05 Package repo 'elasticsearch_repo' will be configured. 2017-11-21T20:41:21 any idea why this happens? 2017-11-21T20:42:21 your master has been updated? 2017-11-21T20:42:38 yes, I pulled the updated formula and the updated salt repo 2017-11-21T20:42:56 local files or gitfs? 2017-11-21T20:43:03 local files 2017-11-21T20:44:59 I get the same on water (also with test=True), so my local setup is innocent ;-) 2017-11-21T20:45:40 I don't know 2017-11-21T20:45:44 the code looks correct 2017-11-21T20:47:57 I tried editing map_jinja and changed it to use_repo: False and it starts to do what I expect 2017-11-21T20:48:58 I don't know 2017-11-21T20:49:02 aboe[m]: ^^ any idea? 2017-11-21T20:49:56 found it 2017-11-21T20:50:11 map.jinja does merge=salt['pillar.get']('elasticsearch:lookup', {}), 2017-11-21T20:50:19 note the :lookup part 2017-11-21T20:50:47 so setting the pillar elasticsearch:lookup:use_repo = False works 2017-11-21T20:51:00 but that's unexpected and doesn't match what pillar.example says 2017-11-21T20:51:14 correct 2017-11-21T20:59:57 so - what's the best way to fix this? Remove the :lookup from map.jinja? 2017-11-21T21:00:46 grep says that's the only mention of "lookup" in the formula, but I have no idea if it causes any side effects 2017-11-21T21:03:42 I believe you can remove it yes 2017-11-21T21:04:54 so we'll be back to a pending pull request :-/ 2017-11-21T21:05:24 yes but you don't have to fork, you can fix the pillar for the time being 2017-11-21T21:05:40 right 2017-11-21T21:05:49 I'll include both ways to make it future-proof ;-) 2017-11-21T21:07:28 yes, and you can add the PR as pending as well 2017-11-21T21:07:32 I have a few to add as well 2017-11-21T21:15:30 aboe[m]: please check and accept https://github.com/saltstack-formulas/elasticsearch-formula/pull/48 2017-11-21T21:22:53 https://gitlab.infra.opensuse.org/infra/salt/merge_requests/115 2017-11-21T21:23:46 *** asmorodskyi has joined #opensuse-admin 2017-11-21T21:25:22 will be merged when pipeline suceeds 2017-11-21T21:27:26 aboe[m]: you were too fast, the first commit I didn't want it actually, it was wrong 2017-11-21T21:27:38 the identation "fix" I mean, it was breaking the identation, not fixing it 2017-11-21T21:27:52 oops should I revert 2017-11-21T21:28:19 yes please 2017-11-21T21:28:21 OR 2017-11-21T21:28:30 fix the identation as it was yourself directly in master? 2017-11-21T21:28:59 *** asmorodskyi has quit IRC 2017-11-21T21:30:52 done fixed 2017-11-21T21:35:07 thanks a lot, sorry for the confusion 2017-11-21T21:35:47 not fully fixed though, lines 14/15 need two extra spaces 2017-11-21T21:40:53 tampakrap: ok now it is fixed 2017-11-21T21:41:18 good 2017-11-21T21:43:21 tampakrap: for !112 - I don't really like adding ntp2 and ntp3 roles just to avoid that a ntp server checks with itsself 2017-11-21T21:43:27 I'd have two alternative options: 2017-11-21T21:44:03 a) 2017-11-21T21:44:05 {% if grains.get('id') != 'anna.infra.o.o' %} 2017-11-21T21:44:09 - ntp2.infra.o.o 2017-11-21T21:44:14 {% endif %} 2017-11-21T21:44:27 and a similar condition for elsa 2017-11-21T21:45:07 b) 2017-11-21T21:45:14 add a grain ntp_name: ntp2 to anna (and a similar grain to elsa) 2017-11-21T21:45:28 and then use 2017-11-21T21:45:47 {% for server in ['ntp1', 'ntp2', 'ntp3'] %} 2017-11-21T21:46:00 {% if server != grains.get['ntp_name'] %} 2017-11-21T21:46:08 - {{ server }}.infra.o.o 2017-11-21T21:46:12 {% endif %} 2017-11-21T21:46:15 {% endfor %} 2017-11-21T21:46:34 how do you like these solutions? 2017-11-21T21:52:28 I don't like them sorry 2017-11-21T21:52:37 cboltz: merged your elasticsearch 2017-11-21T21:52:42 I prefer using roles and pillars, and avoid using jinja on pillar states 2017-11-21T21:53:00 the first one hardcodes hostnames, I don't like that at all 2017-11-21T21:53:18 the second is something that I did in the past for such cases, I was naming them subroles 2017-11-21T21:53:49 and I was defining subroles such as proxy: master/slave, dns: master/slave, dhcp: primary/fallback, ntp: ntp1/2/3 etc 2017-11-21T21:54:30 but it was harder to maintain an extra grain instead of just using the normal roles list, and use $role_$subrole or $roleX (X is number) as subroles instead 2017-11-21T21:56:15 the problem is that you'll need 10 ntpX roles if we setup 10 ntp servers - one for each server 2017-11-21T21:56:36 maybe there's another option, but I would be surprised if you like it: 2017-11-21T21:56:51 move the peer list to pillar/id/anna.infra.o.o and elsa.infra.o.o 2017-11-21T21:57:16 the peer list is machine-specific, so at least it wouldn't be totally wrong ;-) 2017-11-21T21:57:32 why is a problem to use 10 ntpX roles? 2017-11-21T21:57:57 I'd like also to keep the pillar/id/* files as empty as possible 2017-11-21T21:58:43 the problem is that it "floods" the role directory ;-) 2017-11-21T21:58:48 so what? 2017-11-21T22:02:40 it's probably a matter of taste, but IMHO the ntpX roles clutter up the directory 2017-11-21T22:04:40 *** fvogt has quit IRC 2017-11-21T22:04:42 BTW: I just updated our fork of the elasticsearch formula 2017-11-21T22:04:52 and now there is https://gitlab.infra.opensuse.org/infra/salt/merge_requests/116 ;-) 2017-11-21T22:07:21 *** fghariani has quit IRC 2017-11-21T22:11:50 merged 2017-11-21T22:17:38 http://paste.opensuse.org/99070356 2017-11-21T22:17:44 cboltz: ^^ how about this? 2017-11-21T22:17:46 untested 2017-11-21T22:18:37 the role remains, but it will be empty 2017-11-21T22:18:41 you'll still need dummy files in salt/role/ 2017-11-21T22:18:55 that's an upstream bug that has been accepted though 2017-11-21T22:20:56 that doesn't make things better for us ;-) 2017-11-21T22:21:29 besides that, having the ntp role handle ntpX is at least surprising 2017-11-21T22:22:37 let's discuss it tomorrow then, I'm off for today 2017-11-21T22:22:48 good night 2017-11-21T22:22:52 good night! 2017-11-21T22:22:54 good night 2017-11-21T23:30:36 *** cboltz has quit IRC