13:01:00 #startmeeting rolekit (2015-09-15) 13:01:00 Meeting started Tue Sep 15 13:01:00 2015 UTC. The chair is sgallagh. Information about MeetBot at http://wiki.debian.org/MeetBot. 13:01:00 Useful Commands: #action #agreed #halp #info #idea #link #topic. 13:01:00 #meetingname rolekitweekly 13:01:00 #chair sgallagh twoerner nilsph 13:01:00 #topic init process 13:01:00 The meeting name has been set to 'rolekitweekly' 13:01:00 Current chairs: nilsph sgallagh twoerner 13:01:08 Hello, folks 13:01:14 hi 13:01:21 .hello twoerner 13:01:23 twoerner: twoerner 'Thomas Woerner' 13:01:28 .hello sgallagh 13:01:29 sgallagh: sgallagh 'Stephen Gallagher' 13:01:36 .hello 13:01:36 nilsph: (hello ) -- Alias for "hellomynameis $1". 13:01:42 ah 13:01:48 .hello nilsph 13:01:49 nilsph: Sorry, but you don't exist 13:01:53 (FAS account) 13:01:57 oh thanks, I can go home now 13:02:02 .hello nphilipp 13:02:03 nilsph: nphilipp 'Nils Philippsen' 13:02:03 /me grins 13:02:12 OK, we have quorum 13:02:19 #topic Fedora 23 Status 13:02:23 zodbot: you stupid g*t, you know my IRC nick 13:02:41 nilsph: It's not that clever with the .hello 13:02:48 obviously 13:03:15 ok, so first up. We're in Beta Freeze and (wonder of wonders) we actually closed all the Beta targeted issues! 13:03:34 #info All issues targeted for Fedora 23 Beta were fixed. 13:03:43 yay! 13:04:10 #info Current issues targeted for Fedora 23 Final have patches under review on Review Board 13:04:29 #link http://reviewboard-fedoraserver.rhcloud.com/r/ 13:05:26 Once the current reviews land, I'm going to declare 0.4.0 final. Additional bugs discovered after that will go to 0.4.1 13:06:12 twoerner: What are your thoughts on the D-BUS changes; I'm leaning towards keeping them on master rather than putting them in 0.4.0 13:06:17 sgallagh: NB that the unit files cleanup thingy is only partially solved by the review I submitted yesterday 13:06:18 Since it's potentially-risky 13:06:31 nilsph: ok, good to know 13:06:51 sgallagh: the D-Bus changes should be fine even for 0.4.1 13:06:56 in my opinion 13:07:01 sgallagh: I did put that into the description :) 13:07:11 twoerner: Well, if we're going to make that change, I'd rather do it in a .0 13:07:19 since there is only limited amount of new code 13:07:28 0.4.0? 13:07:30 :-) 13:07:31 (In my mind, that's the right place for architecture stuff) 13:07:52 .oO(...0.4.1.0...) 13:07:59 twoerner: If we test it well enough and are comfortable it doesn't break anything, we can get it in 0.4.0, yes 13:08:07 I'm just overly-wary at the end of a dev cycle 13:08:23 /me *really* doesn't want to be the reason for a slip 13:08:41 do you think there will be no slip this time? 13:09:08 that would be surprising somehow 13:09:47 it does not matter if it will make it into 0.4.0 13:10:22 but with the ongoing discussions, it might be good to at least review and push it before .... 13:10:24 twoerner: Right now, we're on track (I think) to release Beta on time 13:10:30 Hopefully that carries through 13:10:49 But yes, I'm going to review it immediately. If you're confident enough, I'll trust you. 13:11:19 just give it some tries.. 13:11:21 It would be nice if we could tell the python-dbus maintainer that they don't have to carry the properties patch any longer either 13:11:29 Of course 13:11:34 ohh yes 13:11:51 this is the reason I wanted to have this patch ready sooner than later 13:12:03 /me nods 13:12:25 OK, I'll do my best to get that patch reviewed after this meeting, before the Server SIG meeting. 13:12:36 thanks 13:12:48 (After that, I'm booked solid for the next four hours) 13:12:51 please have a look at the dependencies in reviewboard 13:12:54 Yes 13:13:13 OK, shall we do a quick bug triage? 13:13:18 yes 13:13:25 #topic Bug Triage 13:13:40 #link https://github.com/libre-server/rolekit/issues?q=is%3Aopen+no%3Amilestone+no%3Alabel 13:13:58 We can start from the lowest issue number and work up 13:14:20 #topic https://github.com/libre-server/rolekit/issues/40 - Instance name should not contain "/" 13:14:21 hmm.. all opened by me 13:14:24 heh 13:14:30 all but onw 13:14:31 one 13:15:09 So, this one I think is going to be a problem eventually 13:15:25 why a problem? 13:15:29 I'd like to see this fixed for 0.4.0, if possible (But surely not a blocker) 13:15:47 twoerner: IIRC, it will actually cause additional directories to be created. 13:16:02 So it's possible that this could be used for an inode-exhaustion attack 13:16:15 (Though unlikely, since you already need to be root, I guess) 13:16:39 Still, input validation should be an easy thing to fix, yes? 13:17:00 I think this should be fairly simple to implement 13:17:19 but we need to define the allowed character set 13:17:24 Also, related to the question at the end: I'd propose limiting it to [A-Za-z_-] 13:17:32 err, add a dot as well 13:17:47 [A-Za-z._-] 13:17:53 and @? 13:18:03 No @ 13:18:10 That would actually cause problems for the systemd services 13:18:16 yes, right 13:18:35 but maybe we can reuse it there 13:18:42 Hmm? 13:19:25 twoerner: What did you mean by "reuse it there"? 13:20:24 the @ is used for services for example vncserver 13:20:43 for the display name 13:20:48 :1, :2, ... 13:21:17 it's for "unit factories" 13:21:20 Right, but I'm saying that allowing a user to specify @ in the role instance name would likely cause systemd to get confused. 13:21:23 not sure if wee need it 13:21:23 so a name of @:1 would be a good name for a vncserver role 13:21:28 sgallagh: yes 13:21:45 but we could do this also in adifferent way.. 13:21:54 If we wanted to implement that ourselves under the hood, that's fine. But I don't want to allow the user to make that decision 13:21:59 ok.. we can add it later on if needed 13:22:16 twoerner: but an instance has its own unit files, so it wouldn't need an @ -- it doesn't need a unit factory 13:23:31 ok.. forget about this 13:24:31 OK, so [A-Za-z._-] then? 13:24:55 Oops, [A-Za-z0-9._-] 13:25:13 +1 13:25:21 +1 13:25:36 #agreed We will restrict instance names to [A-Za-z0-9._-] 13:25:54 twoerner: Can you do that for 0.4.0/F23 Final? 13:26:50 I think that should be possible 13:26:57 what is the dead line for final? 13:27:00 Thanks 13:27:17 twoerner: Oct 10th 13:27:24 ok.. yes 13:28:12 #agreed Scheduled for Fedora 23 Final 13:28:17 Moving on 13:28:29 #topic https://github.com/libre-server/rolekit/issues/45 - Put instances in error state if it is transitional while roled starts 13:29:01 Short version is that no role should ever be in a transitional state when roled starts up. 13:29:12 yes 13:29:13 If it is, it indicates that roled must have crashed or been killed during execution. 13:29:40 So at startup we should forcibly move anything in "transitional" to "error" 13:29:53 Note: we have to do this before we start accepting requests from D-BUS or we might have a race 13:31:35 I will look into this one myself for Final. 13:31:54 Given that there's really no way to clean these up if they break right now, I think it's pretty important to have. 13:32:06 I agree 13:32:21 I'm prepared to call this a blocker also. 13:32:34 this is a blocker 13:32:42 in my opinion 13:33:03 yup 13:33:03 +1 13:33:07 +1 13:33:07 #agreed F23 Final Blocker , assigned to sgallagh 13:33:35 #topic https://github.com/libre-server/rolekit/issues/46 - Use accessors for name and type in roles 13:33:38 I've also seen instances being in "deploying" after restarting the machine, is that covered as well? 13:33:48 it should be simple to do in DBusRole.__init__ 13:33:50 nilsph: Yes 13:33:54 :) 13:34:01 after loading the role instance settings 13:34:17 twoerner: Mind adding that as a comment to the bug, so it's easy to recall? 13:34:35 sgallagh, sorry to interrupt but what's the timeline for F24? 13:34:50 OK, so 46 is already under review 13:35:14 alxgrtnstrngl: We're looking for major functionality to be testable by Jan. 1st 2016 13:35:37 And to be functionally complete by March 1st 13:35:50 sgallagh: Just out of curiosity, is the reason why we use accessor methods dbus? I mean instead of Python properties. 13:35:53 sgallagh, thanks 13:36:29 nilsph: Direct that one at twoerner. He wrote the accessors :) 13:36:36 heh 13:37:17 twoerner: So given that 46 is already under review, shall we just go with F23 Final, nice-to-have? 13:39:29 sgallagh: the patch for 46 made it in already 13:39:39 40ced6db15614063d15fbc4e82793d8cf9bac1d4 13:39:41 Oh, right. 13:39:46 I'll close it then 13:40:19 we can use python properties in the future for this.. 13:40:34 #info Already fixed. Closing issue. 13:40:46 but this needs more verification 13:40:56 #topic https://github.com/libre-server/rolekit/issues/47 - `rolectl list instances` should color-code instances 13:41:07 especially with the still to generate simplified property handling in the roles 13:41:25 This is firmly in the nice-to-have camp, but it would be *very* nice to have :) 13:41:41 (r 36) 13:42:01 yes.. 47 is nice to have 13:42:25 Certainly not necessary in the F23 timeframe though. 13:42:28 F24 Alpha? 13:42:31 +1 13:43:00 if there is still time left i the end, we could do it earlier 13:43:07 True enough 13:43:27 s/i the/in the/ 13:43:37 If we somehow finish up early, we can look at pulling some stuff in. 13:43:46 But I'd prefer to assume we'll have our hands full :) 13:43:55 yes, most likely 13:44:03 #agreed F24 Alpha, nice-to-have 13:44:25 #topic https://github.com/libre-server/rolekit/issues/48 - Use class name for RolekitErrors in the log 13:44:40 This one is also closed 13:44:57 #info Already pushed upstream 13:45:23 #49 also 13:45:34 #topic https://github.com/libre-server/rolekit/issues/49 - Create backup of settings in case of role deployment fails 13:45:36 #info Already pushed upstream 13:45:37 and #50 13:45:55 or not? 13:46:13 nope - #50 is open still 13:46:17 #topic https://github.com/libre-server/rolekit/issues/50 - Store last error in role instance settings 13:46:32 I'm on the cusp of marking that one ShipIt. 13:46:55 It passed visual inspection, but I couldn't test it because of the Vagrant kerfluffle 13:47:11 kerfluffle? 13:47:27 twoerner: "boondoggle"? 13:47:54 (Sorry, probably doesn't translate. Just colorful terms for an active mess) 13:50:02 OK, so F23 Final, nice-to-have? 13:50:31 sgallagh: I told twoerner of our issues yesterday 13:50:45 yes.. I have been there 2 weeks ago alrady 13:50:48 already 13:51:08 and messed up the image in the fist try 13:51:11 whee 13:51:24 but the second was successful 13:51:39 hopefully there is no need to do this dance again 13:51:51 s/fist/first/ 13:52:00 * twoerner misses some characters 13:52:02 twoerner: Well, unfortunately there's a bunch of stuff wrong with Vagrant on F23 it seems 13:52:12 I have to recreate the box often 13:52:13 I am on F-22 still 13:52:18 Yeah, I'm not :) 13:52:28 Anyway, F23 Final, nice-to-have? 13:53:11 the patch is submitted for review already .. but ok 13:53:46 twoerner: Right, this is bookkeeping :) 13:54:43 +1 for bookkeeping 13:54:50 #agreed F23 Final, nice-to-have 13:54:53 #topic Open Floor 13:54:57 Anything for open floor this week? 13:55:00 +1 13:56:13 I'm interpreting that as "no". 13:56:30 OK, thanks for coming folks. I'll get to work on those reviews right now before the meeting-storm hits. 13:56:46 thanks 13:57:30 thanks 13:58:48 #endmeeting