Revision as of 17:23, 30 September 2024

Weekly Project Infrastructure team meeting

The OpenDev Team holds public weekly meetings in #opendev-meeting on OFTC, Tuesdays at 1900 UTC. Everyone interested in infrastructure and process surrounding automated testing and deployment is encouraged to attend.

Please feel free to add agenda items (and your IRC nick in parenthesis).

Agenda for next meeting

• Announcements
  • https://www.socallinuxexpo.org/scale/22x/events/open-infra-days CFP for Open Infra Days event at SCaLE is open until November 1

• Actions from last meeting

• Specs Review

• Topics
  • Rocky Package Mirror Creation (clarkb 20240924)
    • No rsync script change pushed yet but one is expected soon.
  • Rackspace's Flex Cloud (clarkb 20240604)
    • Next up is figuring out how to use this cloud for swift storage of CI job logs.
  • Implementing DNS over TLS on Test Nodes (clarkb 20240924)
    • OVN MitMs DNS traffic made in the clear this has created problems for some users
      • https://serverfault.com/questions/1134180/how-to-disable-or-fix-openstack-intercepting-dns-ptr-queries
    • We should be able to mitigate this using DNS over TLS now that some clouds appear to be using OVN
    • https://review.opendev.org/c/opendev/base-jobs/+/929960 Adds this to configure-unbound role in base-jobs
    • If that approach seems reasonable clarkb can split things up to go through a full round of base-test base job testing
  • Etherpad 2.2.5 Upgrade (clarkb 20240820)
    • Just wanted to close this out. We upgraded to a proper 2.2.5 release and meetpad seems to work.
    • There is a new v2 API we can look into using but our tests indicate v1 still works for now.
  • Updating ansible+ansible-lint versions in our repos (clarkb 20240827)
    • https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/926970 is the last current open change related to this work
  • Zuul-launcher image builds (corvus 20240910)
    • Configs are going in opendev/zuul-jobs
    • https://review.opendev.org/c/opendev/zuul-jobs/+/929141 Build a debian bullseye image with dib in a zuul job
  • OpenStack OpenAPI spec publishing (fungi 20240924)
    • https://review.opendev.org/921934
  • Gitea 1.22.2 Upgrade (clarkb 20240924)
    • https://review.opendev.org/c/opendev/system-config/+/930217 Change to upgrade to 1.22.2
  • Upgrading Old Servers (clarkb 20230627)
    • https://etherpad.opendev.org/p/opendev-bionic-server-upgrades
      • wiki.openstack.org: https://etherpad.opendev.org/p/opendev-mediawiki-upgrade
      • tonyb looking at cacti after wiki
    • https://etherpad.opendev.org/p/opendev-focal-server-upgrades
  • Docker compose plugin with podman service for servers (corvus 20241001)
    • https://review.opendev.org/923084 is a demo (in the Zuul repo) of using docker compose v2 plugin with system podman service
    • This would let us host opendev images on quay.io (or any non-dockerhub site) and use speculative images
    • Some caveats (seen in the change):
      • unconfined apparmor profile to work around https://bugs.launchpad.net/ubuntu/+source/libpod/+bug/2040483
      • buildx startup probably not an issue since we don't use docker compose image builds: https://github.com/docker/buildx/issues/344
      • need to set DOCKER_HOST env variable (system-wide bashrc? maybe a docker context? other options?)
    • Do we want to proceed? Any blockers?

• Open discussion

Upcoming Project Renames

(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit) Changes should have their topic set to project-rename.

• Rename example/foo -> example/bar: https://review.opendev.org/c/openstack/project-config/+/123456

Previous meetings

Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/