15544 Commits

Author SHA1 Message Date
Zuul
e75802864f Merge "nodepool config: remove builder template, fix base template" 2020-03-19 01:29:43 +00:00
Zuul
b0f81dc7b9 Merge "Update git.starlingx/git.airship redirects" 2020-03-19 01:21:21 +00:00
Zuul
51a5f5488f Merge "Update git.zuul-ci.org redirects" 2020-03-19 01:21:20 +00:00
Zuul
927072831b Merge "Fix URLs after OpenDev rename" 2020-03-19 01:19:16 +00:00
Zuul
a54baada30 Merge "Make Advisory Board a proper noun" 2020-03-19 01:02:19 +00:00
Zuul
3709d0a39b Merge "Restart gitea more cleaner" 2020-03-18 23:56:10 +00:00
Ian Wienand
dd489067a9 nodepool config: remove builder template, fix base template
Change I9ca77927046e2b2e3cee9a642d0bc566e3871515 updated the
nodepool-builder_opendev group to deploy it's config into
/etc/openstack, but updated the wrong template.

The nodepool_builder_clouds.yaml.j2 file was an old, unreferenced copy
from left-over from Id1161bca8f23129202599dba299c288a6aa29212 when we
wanted to use nodepool to manage control-plane clouds.  That didn't
work out so well and I think we just missed cleaning it up with
I5e72928ec2dec37afa9c8567eff30eb6e9c04f1d.

Remove it now, and port the path changes into the correct config file.

Change-Id: I37af69b342b413df94435e59a7c16bb218183399
2020-03-19 10:20:07 +11:00
Monty Taylor
77fb33f5d5 Restart gitea more cleaner
Gerrit replication plugin is good about retrying replication if its
connectivity to the remote fails. It however thinks everything is happy
if it can connect and push even when gitea-web isn't running.

Make the whole replication system happier by stopping gitea-ssh before
other services and starting it after other services. This way gerrit
should fail to replicate until gitea is ready for it to ssh in.

Change-Id: I3440d8dd8a01a3aaf5d18c9c2ca48e7ead63856f
2020-03-18 15:40:40 -07:00
Zuul
dc1848d804 Merge "Replace nb01.opendev.org with nb04" 2020-03-18 21:57:28 +00:00
Zuul
e79b6f4090 Merge "Don't run make generate for gitea" 2020-03-18 21:48:36 +00:00
Zuul
69ae0766db Merge "Remove the Rackspace Cloud repo" 2020-03-18 21:14:21 +00:00
Zuul
12b8723794 Merge "launch-node.py : use new(?) image name" 2020-03-18 21:07:03 +00:00
Ian Wienand
ba5d9547c8 Replace nb01.opendev.org with nb04
We are starting over with the container nodepool host, and also moving
it to "nb04" to avoid any possibility of conflicting with the
short-hostname of nb01.openstack.org.

Story: #2007407
Task: #39064

Depends-On: https://review.opendev.org/713575
Depends-On: https://review.opendev.org/713571

Change-Id: I18ab9834ad4da201774e0abef56f618cd7839d36
2020-03-19 07:41:56 +11:00
Clark Boylan
6c7f7de55f Don't run make generate for gitea
Upstream stopped running make generate in order to fix their static file
builds [0]. Our static file builds have stopped working with our bump to
1.11.3. Apply the corresponding fix to our dockerfile.

Note that we also use clean-all instead of clean to be sure we clean all
the js and css files first.

[0] 48be1889cd (diff-3254677a7917c6c01f55212f86c57fbf)

Change-Id: I40f0449ae29e185ba7082f2f5a27dc96acf58e31
2020-03-18 12:57:38 -07:00
Zuul
e3f7c8cee8 Merge "Update references to IRC channels" 2020-03-18 18:55:57 +00:00
Zuul
ede78327de Merge "Update to gitea 1.11.3" 2020-03-18 18:45:44 +00:00
Andreas Jaeger
eecf3e71fc Update git.starlingx/git.airship redirects
After the big OpenDev rename, these repos got renamed again. Update the
redirects for git.airshipit.org and git.starlingx.io to point to the
current location.

Update test_static.py for this, change the test repo since
airship-in-a-bottle was first renamed to in-a-bottle and later to
airship-in-a-bottle.

Change-Id: I71b786cd528aac9ae68464618db02e22cd4c0b5b
2020-03-18 18:39:48 +01:00
Andreas Jaeger
a6480bcefb Update git.zuul-ci.org redirects
zuul and nodepool now life in opendev, avoid double redirects and
redirect directly to final location.

Change-Id: Ia55d76b24f07ec64cb55055955c4549f3706a95b
2020-03-18 18:28:42 +01:00
Andreas Jaeger
173118e471 Fix URLs after OpenDev rename
As part of OpenDev rename, a lot of links were changed.
A couple of URLs point to old locations, update them.

This list was done while grepping for "openstack-infra" and fixing
locations that are wrong.

Change-Id: I313d76284bb549f1b2c636ce17fa662c233c0af9
2020-03-18 18:23:17 +01:00
Dr. Jens Harbott
c86525ccd3 Update references to IRC channels
With the move from OpenStack governance to our own OpenDev team, we
should also move to use the #opendev IRC channel in preference to
the #openstack-infra channel which will remain in use for OpenStack
specific discussions.

Update the references in our docs accordingly.

Change-Id: I448704f5d2664fd233a69a2ad12578ca24d9878a
2020-03-18 17:33:08 +01:00
Ian Wienand
c54efaeeaa launch-node.py : use new(?) image name
The "PVHVM" image appears to have disappeared from RAX, replaced with
a "Cloud" image.

Maybe I haven't looked in the right place, but I can't find any info
on if, why or when this was updated.  But I started a server with the
"Cloud" image and it seems the same as the PVHVM image to me; hdparm
showed read speads the same as a older server and dd writes to a file
were the same speed (recorded below for posterity).

 ianw@nb04:~$ dd if=/dev/zero of=testfile bs=1G count=1 oflag=direct
 1+0 records in
 1+0 records out
 1073741824 bytes (1.1 GB, 1.0 GiB) copied, 5.21766 s, 206 MB/s

 ianw@nb04:~$ sudo hdparm -Tt /dev/xvda
 /dev/xvda:
 Timing cached reads:   16428 MB in  1.99 seconds = 8263.05 MB/sec
 Timing buffered disk reads: 752 MB in  3.00 seconds = 250.65 MB/sec

From looking at dmesg it has

 [    0.000000] DMI: Xen HVM domU, BIOS 4.1.5 11/28/2013
 [    0.000000] Hypervisor detected: Xen HVM
 [    0.000000] Xen version 4.1.
 [    0.000000] Xen Platform PCI: I/O protocol version 1
 [    0.000000] Netfront and the Xen platform PCI driver have been compiled for this kernel: unplug emulated NICs.
 [    0.000000] Blkfront and the Xen platform PCI driver have been compiled for this kernel: unplug emulated disks.

which, if [1] is anything to go by suggests it is in PVHVM mode
anyway.

tl;dr seems like the image name changed.

[1] https://xen-orchestra.com/blog/debian-pvhvm-vs-pv/

Change-Id: I4ff14e7e36f59a9487c32fdc6940e8b8a93459e6
2020-03-18 16:54:44 +11:00
Zuul
8e45f95748 Merge "Update project doc to reflect OpenDev changes" 2020-03-17 20:22:45 +00:00
Clark Boylan
08e2418e58 Make Advisory Board a proper noun
This fixes a small nit on the prior docs change.

Change-Id: Id408cf410e7fc50d418cc701d3b195ebcffd1b85
2020-03-17 13:03:37 -07:00
Monty Taylor
89b66c3851 Update to gitea 1.11.3
Change-Id: I6c52e5e99095b7178e9e94b9ca70ea697cce7464
2020-03-17 14:16:19 -05:00
Monty Taylor
06be60bc08 Drop version specifier for nodepool-builder compose
We don't actually need version 3. Mark it as version 2 to keep it
inline with everything else. In general we should only increase
past v2 if we need a specific feature.

Change-Id: Ie243da369ddec30e0eca4805434d572e12c40491
2020-03-17 13:11:25 -05:00
Monty Taylor
74b822f352 Use version 2 for docker-compose for review
Also - update the test job to use xenial nodes, since that's what
our gerrit servers are. docker-compose in xenial is too old for
version 3 file format - but we didn't get an error in the test
becuase we're running on bionic.

Change-Id: I855c3df241932098c95de84cf9f92383b335702f
2020-03-17 13:02:20 -05:00
Zuul
87db9b6ac6 Merge "nodepool-builder: put container configs in /etc" 2020-03-17 17:50:12 +00:00
Zuul
38220dbecf Merge "Added updates dir for Fedora 31 release" 2020-03-17 08:37:03 +00:00
Zuul
11f7e874c1 Merge "Switch back to docker for gerrit and nodepool-builder" 2020-03-17 00:02:22 +00:00
Monty Taylor
622c7ad0c9 Remove the Rackspace Cloud repo
There's this apt repo on the servers! It has nova-agent in it,
which we don't use - but there it is. Let's remove it, because
that's just really not what we do.

Change-Id: Id1fd4753a96829d3333ece3785246ad9bb141d54
2020-03-16 17:29:10 -05:00
Ian Wienand
b967495dc3 nodepool-builder: put container configs in /etc
Currently we deploy the openstacksdk config into ~nodepool/.config on
the container, and then map this directory back to /etc/openstack in
the docker-compose.  The config-file still hard-codes the
limestone.pem file to ~nodepool/.config.

Switch the nodepool-builder_opendev group to install to
/etc/openstack, and update the nodepool config file template to use
the configured directory for the .pem path.

Also update the testing paths.

Story: #2007407
Task: #39015
Change-Id: I9ca77927046e2b2e3cee9a642d0bc566e3871515
2020-03-17 07:37:00 +11:00
Monty Taylor
f875c7a73f Undo debian changes to openssl.cnf for python-base
Debian has decided to be a bit too aggressive in their openssl
defaults. Vendor in a copy of openssl.cnf with the changes in

https://salsa.debian.org/debian/openssl/-/blob/debian/unstable/debian/patches/Set-systemwide-default-settings-for-libssl-users.patch

reverted.

DEFAULT@SECLEVEL=2 breaks API interactions with Rackspace, but
it's not just them. https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html
indicates that 1 is defaut and setting higher is problematic.

Change-Id: Ida7e9a557b873c14c0bf474450508f42fe7a5ad2
2020-03-16 10:58:37 -05:00
danpawlik
ce73ffedaa Added updates dir for Fedora 31 release
Patch set [1] does not provide updates directory for
Fedora 31 which is required to run CI jobs.

[1] https://review.opendev.org/#/c/712680/

Change-Id: I01b9b50660f3c7a3b4eb05cc8a8c0847f47dc7ee
2020-03-16 09:08:41 +01:00
Zuul
149d591f1f Merge "nodepool-builder: add /opt/dib_cache" 2020-03-16 00:35:59 +00:00
Monty Taylor
e5e925d715 Switch back to docker for gerrit and nodepool-builder
We rolled out review-dev with podman and it worked fine for us. It
worked less fine for nodepool-builder, although we still might be
able to solve it. Maybe right now isn't the time to do this switch.
Gitea, gitea-lb and zuul-registry all use docker instead of podman.

The only thing running with podman right now is review-dev. We can
do a manual cleanup of podman there before runnign this to keep
things simple:

  - stop gerrit service
  - uninstall podman and podman-compose
  - uninstall podman ppa config
  - uninstall pip3

Then let ansible install docker and docker compose up.

Story: #2007407
Task: #39062
Change-Id: I9bf99b18559d49d11ba99a96f02a4a45a4f65a86
2020-03-15 23:26:49 +00:00
Zuul
b1576b6020 Merge "Set up LE certs for docs.airshipit.org static site" 2020-03-15 16:19:49 +00:00
Jeremy Stanley
69d0b85775 Set up LE certs for docs.airshipit.org static site
Start installing Let's Encrypt SSL certs on static01 for a new
docs.airshipit.org it will be hosting.

Change-Id: Ia5089515cd02d78267827840521cbee4f71ceb0b
2020-03-15 14:10:28 +00:00
Ian Wienand
e79f555bbd nodepool-builder: add /opt/dib_cache
This was missing but is part of the required runtime directories for
the container (for now, until we maybe move all this to volumes).

Change-Id: I9e173eb799026520588722caaf60a160abc6b130
2020-03-13 13:53:04 -07:00
Ian Wienand
44335ab2be pip3: Add python3-distutils
This is a requirement, otherwise get-pip.py fails to install

Change-Id: If8dc87d3755056af52f7f7415f6596071ac5feef
2020-03-13 10:38:52 +11:00
Zuul
f89e89afaf Merge "Added new Fedora release to mirroring" 2020-03-12 21:36:42 +00:00
Zuul
09444f065f Merge "Add nb01.opendev.org" 2020-03-12 21:36:40 +00:00
Dr. Jens Harbott
8bdc4a8404 Increase timeout for goaccess report jobs
Seems it can take about an hour to build the report for our largest site
(docs.openstack.org), so having a timeout of 2 hours should keep us on
the safe side.

Change-Id: I848f75f6eb7bbf1986e19e6d35173fe4dddeef94
2020-03-12 15:47:49 +00:00
danpawlik
b5bb9790b4 Added new Fedora release to mirroring
Some jobs are using Fedora 29 release, which is deprecated.
Create new mirror with release 31 and wait for changing job
rules.

Change-Id: I418f4c815d337c2b1edd0df1aa065536d992cb62
2020-03-12 14:46:31 +01:00
Zuul
f534c57474 Merge "Add goaccess reporting to more static.o.o sites" 2020-03-12 10:49:09 +00:00
Zuul
9e14fcfd35 Merge "Remove old 404 checker job" 2020-03-12 10:16:36 +00:00
Clark Boylan
3acfcccd9e Add goaccess reporting to more static.o.o sites
This skips sites that redirect to other sites. This will give us data
that can be used to fix broken links (HTTP 404s), improve documents that
are retrieved often, and more.

Change-Id: I5838464c379b9f0906f1ebe3a91726838ada3508
2020-03-12 09:42:56 +00:00
Zuul
c24853076d Merge "Add statusbot to #opendev" 2020-03-11 23:50:21 +00:00
Clark Boylan
68f740faf8 Remove old 404 checker job
This is being replaced with goaccess report jobs.

Change-Id: Ia22d847bfc1a9e450bd8c8e7fab77dd08bd1dfd0
2020-03-11 15:15:00 -07:00
Monty Taylor
2513a1b519 Go back to using find with ansible-lint
ansible-lints ability to find ansible files is less than
good. Go back to find - but leave the config in the .ansible-lint
file since that does clean up the command invocation.

While we're there - turn off quiet - let's be loud.

Change-Id: Ie495e3d9ff1b82e84069e07c60c7217fc8399a1c
2020-03-11 16:30:33 -05:00
Clark Boylan
9e394d24d0 Return goaccess html as zuul artifact
This will give us a nice link to the goaccess reports on the zuul
dashboard build pages.

Move ansible-lint config into config file

As of 4.2.0 we can configure ansible-lint with a config file. It's
also apparently now smart enough to only find ansible yaml. Let's
see how that goes.

Add a fake zuul_return module

This should let us fake out ansible-lint without having to install
all of zuul.

Change-Id: Ib233eb577a8ca2aabfe3a49b2cd823dd4a00bd82
2020-03-11 14:28:28 -05:00