2018-01-21T00:20:47 *** Fraser_Bell has joined #opensuse-admin 2018-01-21T00:20:47 *** Fraser_Bell has joined #opensuse-admin 2018-01-21T00:35:01 *** a-865 has joined #opensuse-admin 2018-01-21T00:35:13 *** a-865 is now known as a-a865x 2018-01-21T00:35:20 *** a-a865x is now known as a-865x 2018-01-21T00:45:50 *** thomic has quit IRC 2018-01-21T00:50:21 *** cboltz has quit IRC 2018-01-21T01:15:40 *** Fraser_Bell has quit IRC 2018-01-21T02:25:09 *** default__ has joined #opensuse-admin 2018-01-21T02:28:15 *** cthugha has quit IRC 2018-01-21T02:47:33 *** BManojlovic has quit IRC 2018-01-21T03:13:24 *** plinnell has quit IRC 2018-01-21T03:19:50 *** okurz has quit IRC 2018-01-21T03:21:01 *** okurz has joined #opensuse-admin 2018-01-21T03:22:08 *** cthugha has joined #opensuse-admin 2018-01-21T03:25:23 *** default__ has quit IRC 2018-01-21T03:49:46 *** plinnell has joined #opensuse-admin 2018-01-21T05:33:21 *** plinnell has quit IRC 2018-01-21T05:38:07 *** plinnell has joined #opensuse-admin 2018-01-21T05:38:07 *** plinnell has joined #opensuse-admin 2018-01-21T08:04:29 *** BManojlovic has joined #opensuse-admin 2018-01-21T08:58:25 *** tigerfoot has joined #opensuse-admin 2018-01-21T10:36:55 *** fvogt has joined #opensuse-admin 2018-01-21T11:10:44 *** cboltz has joined #opensuse-admin 2018-01-21T11:52:45 cboltz: what do you mean in 159 about other roles? 2018-01-21T12:31:23 well, the script does (extremely shortened) 2018-01-21T12:31:32 for role in $WEB_ROLES; do 2018-01-21T12:31:47 mv /etc/nginx_orig /etc/nginx 2018-01-21T12:31:48 done 2018-01-21T12:32:08 when this loop runs the second time, there's no /etc/nginx_orig left to move around 2018-01-21T12:32:42 ah yes 2018-01-21T13:02:16 *** sven15 has joined #opensuse-admin 2018-01-21T13:38:46 *** fvogt has quit IRC 2018-01-21T14:31:30 *** cthugha has quit IRC 2018-01-21T14:32:33 tampakrap: is there a reason why 160 is still marked as WIP? 2018-01-21T14:32:46 from what I can see, the preconditions are all merged 2018-01-21T14:37:01 cboltz: I added one more commit for an upcoming website, and now it's ready for review 2018-01-21T14:37:57 *** okurz has quit IRC 2018-01-21T14:44:20 I don't know much about nginx, but didn't see an obvious error - and you also found a nice way to avoid the duplication :-) 2018-01-21T14:44:29 so please take my +1 as a rounded +0.6 ;-) 2018-01-21T14:45:03 the good thing is that the generated configs won't override the old ones so we can have backups and switchover fast 2018-01-21T14:46:49 indeed, that makes things a bit more boring ;-) 2018-01-21T15:12:34 heya guys, cboltz are you on fb? 2018-01-21T15:14:19 no, I prefer not to give my private data to so-called social networks ;-) 2018-01-21T15:15:29 ok :) how bout signal then? :) 2018-01-21T15:17:10 cboltz: https://gitlab.infra.opensuse.org/tampakrap/salt/-/jobs/2144 this hit production 2018-01-21T15:17:19 I'm fixing it and submitting MR now 2018-01-21T15:19:59 https://gitlab.infra.opensuse.org/infra/salt/merge_requests/163 2018-01-21T15:21:02 katnip: signal has a much better privacy when compared to fb, is ad free and much more useful 2018-01-21T15:21:44 yes i prefer it, i do use it, which the reason i asked you 2018-01-21T15:34:27 tampakrap: a question about 162: I assume "listen: 3001" means that nginx will listen on port 3001. If so - why / why not port 80? 2018-01-21T15:38:18 probably because there was no nginx before, and unicorn was listening to 3001 which was what the proxy was going to 2018-01-21T15:38:40 so we could change it to 80, but we'll need to adjust the proxy as well 2018-01-21T15:39:00 and it would be better also to use socket for unicorn instead of tcp port 2018-01-21T15:40:26 sounds like something for a follow-up change and/or for the new progress.o.o machine 2018-01-21T15:40:40 I'm doing the port change now 2018-01-21T15:45:58 I did the 3001->80 change in the haproxy and in the redmine host, I changed also the MR 2018-01-21T15:46:02 I'm doing the socket now 2018-01-21T15:51:55 162 +0.6'd ;-) 2018-01-21T15:52:35 PROBLEM: HTTP progress on redmine.infra.opensuse.org - connect to address 192.168.47.29 and port 3001: Connection refused ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=redmine.infra.opensuse.org&service=HTTP%20progress 2018-01-21T15:53:57 *** sven15 has quit IRC 2018-01-21T15:56:28 all done, including monitoring 2018-01-21T16:02:34 RECOVERY: HTTP progress on redmine.infra.opensuse.org - HTTP OK: HTTP/1.1 200 OK - 8450 bytes in 0.090 second response time ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=redmine.infra.opensuse.org&service=HTTP%20progress 2018-01-21T16:14:23 *** plinnell has quit IRC 2018-01-21T16:20:31 PROBLEM: HTTP rsync.o.o on widehat.opensuse.org - CRITICAL - Socket timeout after 10 seconds ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=widehat.opensuse.org&service=HTTP%20rsync.o.o 2018-01-21T16:40:22 RECOVERY: HTTP rsync.o.o on widehat.opensuse.org - HTTP OK: HTTP/1.1 200 OK - 1217 bytes in 1.164 second response time ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=widehat.opensuse.org&service=HTTP%20rsync.o.o 2018-01-21T16:56:41 tampakrap: how can 164 pass the tests? 2018-01-21T16:57:24 it should error out because you don't close the if and for in salt/profile/web/server/nginx.sls 2018-01-21T16:58:01 (BTW: the if is probably superfluous - if csr_dict is empty, the for loop should run exactly 0 times) 2018-01-21T17:00:07 checking 2018-01-21T17:01:36 no idea how it passes the tests, but it seems that it is actually valid 2018-01-21T17:03:23 IIRC highstate errors out on non-closed if and for, so that would surprise me 2018-01-21T17:04:15 fixed 2018-01-21T17:05:05 well it didn't so probably salt magically fixes it :) 2018-01-21T17:22:05 *** Son_Goku has quit IRC 2018-01-21T17:38:31 *** okurz has joined #opensuse-admin 2018-01-21T18:16:02 tampakrap: you'll love my comment on 165 ;-) 2018-01-21T18:16:47 hahahaha 2018-01-21T18:18:12 *** plinnell has joined #opensuse-admin 2018-01-21T18:18:12 *** plinnell has joined #opensuse-admin 2018-01-21T18:23:37 cboltz: https://gitlab.infra.opensuse.org/tampakrap/salt/commit/f0497a9bba58a0fc0bf6b6959c92285472237d0d 2018-01-21T18:23:43 any idea how to prevent this? 2018-01-21T18:23:59 I am thinking to check if /etc/nginx/vhosts.d has contents 2018-01-21T18:24:03 on test_nginx.sh 2018-01-21T18:24:40 indeed, your commit indicates that it would make sense ;-) 2018-01-21T18:25:46 I am not even sure how it passes show_highstate 2018-01-21T18:25:51 in production I get error 2018-01-21T18:26:16 at least that would match the non-detection of the open if and for 2018-01-21T18:26:44 http://paste.opensuse.org/85305912 2018-01-21T18:27:51 so the formula enforces to set "enabled" the hard way 2018-01-21T18:28:55 I'd prefer True as default - but that's something you'll need to discuss with upstream 2018-01-21T18:32:35 *** sven15 has joined #opensuse-admin 2018-01-21T18:59:33 tampakrap: are you interested in more useful tracebacks for cases like https://gitlab.infra.opensuse.org/tampakrap/salt/-/jobs/2234 ? 2018-01-21T19:00:20 (things like seeing the value of involved variables etc.) 2018-01-21T19:01:32 afterwards, I triggered a show_highstate run that prints the output 2018-01-21T19:01:36 to see what it is doing 2018-01-21T19:03:48 you can have this in an easier way 2018-01-21T19:03:58 try http://paste.opensuse.org/10261817 2018-01-21T19:04:26 (that's a little demo script showing the error handler I have in mind) 2018-01-21T19:08:21 cboltz: https://gitlab.infra.opensuse.org/tampakrap/salt/-/jobs/2247 2018-01-21T19:10:36 I don't understand it 2018-01-21T19:17:49 that's indeed interesting[tm] 2018-01-21T19:17:50 cboltz: https://gitlab.infra.opensuse.org/tampakrap/salt/-/jobs/2251 2018-01-21T19:17:57 add set -x to see what it does 2018-01-21T19:18:02 that's the show_highstate output 2018-01-21T19:18:32 there is no nginx stuff there 2018-01-21T19:22:57 HA FOUND IT!!! 2018-01-21T19:24:52 {% set roles = salt['pillar.get']('grains:roles', []) %} 2018-01-21T19:25:20 there is no such pillar on the tests 2018-01-21T19:25:45 so it would make sense to write in pillar/id/$host what we write in /etc/salt/grains 2018-01-21T19:26:57 *** ancorgs has quit IRC 2018-01-21T19:27:02 *** Son_Goku has joined #opensuse-admin 2018-01-21T19:28:15 *** ancorgs has joined #opensuse-admin 2018-01-21T19:28:26 that, or get the {% set roles = ... in pillar/top.sls and salt/top.sls in sync 2018-01-21T19:29:03 what do you prefer? 2018-01-21T19:29:16 get top.sls in sync 2018-01-21T19:29:31 using two different ways to do basically the same is calling for trouble 2018-01-21T19:33:27 *** sven15 has quit IRC 2018-01-21T20:00:04 PROBLEM: HAProxy on mufasa.infra.opensuse.org - HAPROXY CRITICAL - Active service narwal4 is DOWN on static proxy ! Active service riesling is DOWN on riesling proxy ! ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mufasa.infra.opensuse.org&service=HAProxy 2018-01-21T20:31:36 cboltz: https://gitlab.infra.opensuse.org/tampakrap/salt/-/jobs/2258 much better 2018-01-21T20:34:39 *** fvogt has joined #opensuse-admin 2018-01-21T20:40:51 *** tigerfoot has quit IRC 2018-01-21T20:43:54 *** tigerfoot has joined #opensuse-admin 2018-01-21T20:49:26 *** plinnell has quit IRC 2018-01-21T21:44:59 *** Son_Goku has quit IRC 2018-01-21T22:05:04 it would even be better not to see those salt errors - but good to know that the nginx stuff gets tested now :-) 2018-01-21T22:09:57 *** fvogt has quit IRC 2018-01-21T22:17:33 BTW: I just checked the editor vote on helios, and it turned out that you can see what each person voted 2018-01-21T22:17:36 voters: 3 2018-01-21T22:17:48 votes for vim: 3 - emacs 0 - other 0 2018-01-21T22:17:51 ;-) 2018-01-21T22:18:16 lol 2018-01-21T22:26:34 *** thomic has joined #opensuse-admin 2018-01-21T22:41:29 *** Son_Goku has joined #opensuse-admin 2018-01-21T23:50:02 *** plinnell has joined #opensuse-admin 2018-01-21T23:50:02 *** plinnell has joined #opensuse-admin 2018-01-21T23:51:32 *** Son_Goku has quit IRC 2018-01-21T23:58:09 *** plinnell has quit IRC