*** tristan <tristan!tristan@223.38.8.144> has joined #buildstream | 08:50 | |
*** ChanServ sets mode: +o tristan | 08:50 | |
*** doras <doras!doras@2001:470:1af1:104:0:0:0:220b> has quit IRC | 09:10 | |
*** nanonyme <nanonyme!nanonyme@2001:470:1af1:104:0:0:0:45ea> has quit IRC | 09:10 | |
*** devcurmudgeon[m] <devcurmudgeon[m]!devcurmudg@2001:470:1af1:104:0:0:0:4be6> has joined #buildstream | 09:11 | |
*** MatrixTravelerbot[m] <MatrixTravelerbot[m]!voyagert2b@2001:470:1af1:104:0:0:0:2261> has joined #buildstream | 09:15 | |
*** doras <doras!doras@2001:470:1af1:104:0:0:0:220b> has joined #buildstream | 09:15 | |
*** robjh[m] <robjh[m]!~robjhm@2001:470:1af1:104:0:0:0:48ba> has joined #buildstream | 09:15 | |
*** abderrahim[m] <abderrahim[m]!abderrahim@2001:470:1af1:104:0:0:0:3558> has joined #buildstream | 09:15 | |
*** AdrianVovk[m] <AdrianVovk[m]!adrianvovk@2001:470:1af1:104:0:0:0:2e2a> has joined #buildstream | 09:15 | |
*** danigm[m] <danigm[m]!danigmgnom@2001:470:1af1:104:0:0:0:3a57> has joined #buildstream | 09:15 | |
*** vchernin[m] <vchernin[m]!vcherninfe@2001:470:1af1:104:0:0:0:49f6> has joined #buildstream | 09:15 | |
*** wsalmon[m] <wsalmon[m]!wsalmonmat@2001:470:1af1:104:0:0:0:5c0b> has joined #buildstream | 09:15 | |
*** SamThursfield[m] <SamThursfield[m]!ssssammatr@2001:470:1af1:104:0:0:0:220c> has joined #buildstream | 09:15 | |
*** nanonyme <nanonyme!nanonyme@2001:470:1af1:104:0:0:0:45ea> has joined #buildstream | 09:15 | |
*** jjardon[m] <jjardon[m]!jjardonmat@2001:470:1af1:104:0:0:0:224c> has joined #buildstream | 09:15 | |
*** TheMuso[m] <TheMuso[m]!themuso82m@2001:470:1af1:104:0:0:0:4d68> has joined #buildstream | 09:15 | |
*** WadeBerrier[m] <WadeBerrier[m]!wberrierma@2001:470:1af1:104:0:0:0:492d> has joined #buildstream | 09:15 | |
*** tristan <tristan!tristan@223.38.8.144> has quit IRC | 09:41 | |
*** tristan <tristan!tristan@223.38.8.144> has joined #buildstream | 09:41 | |
*** ChanServ sets mode: +o tristan | 09:41 | |
*** tristan <tristan!tristan@223.38.8.144> has quit IRC | 11:05 | |
*** tristan <tristan!tristan@223.38.8.144> has joined #buildstream | 11:05 | |
*** ChanServ sets mode: +o tristan | 11:05 | |
*** tristan <tristan!tristan@223.38.8.144> has quit IRC | 12:16 | |
*** tristan <tristan!tristan@223.38.8.144> has joined #buildstream | 12:17 | |
*** ChanServ sets mode: +o tristan | 12:17 | |
*** tristan <tristan!tristan@223.38.8.144> has quit IRC | 12:21 | |
*** tristan <tristan!tristan@223.62.175.54> has joined #buildstream | 14:34 | |
*** ChanServ sets mode: +o tristan | 14:34 | |
robjh[m] | I'm trying to setup a network cache server. I whipped up something with buildbox-casd and traefik but its not working. Imo it looks like a problem with ssl on the machine running buildstream, but i just wanted to check. | 14:39 |
---|---|---|
robjh[m] | testing with a browser; | 14:39 |
robjh[m] | https://cache.bst.tools/ <- works as expected, served with a cert from letsencrypt | 14:39 |
robjh[m] | https://cache.bst.tools:11001/ <- 404 page, served with the same certificate. and traefik logs a get request. (working as expected?) | 14:39 |
robjh[m] | but in buildstream, configured with the following; | 14:39 |
robjh[m] | ``` | 14:39 |
robjh[m] | artifacts: | 14:39 |
robjh[m] | servers: | 14:39 |
robjh[m] | - url: https://cache.bst.tools:11001/ | 14:39 |
robjh[m] | push: false | 14:39 |
robjh[m] | ``` | 14:39 |
robjh[m] | gives this error; | 14:40 |
robjh[m] | ``` | 14:40 |
robjh[m] | E0222 14:31:39.625517256 1015 ssl_transport_security.cc:1469] Handshake failed with fatal error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED. | 14:40 |
robjh[m] | [--:--:--][ ][ main:core activity ] WARNING Failed to initialize remote https://cache.bst.tools:11001/: Remote initialisation failed with status UNAVAILABLE: failed to connect to all addresses | 14:40 |
robjh[m] | ``` | 14:40 |
*** tristan <tristan!tristan@223.62.175.54> has quit IRC | 14:42 | |
robjh[m] | but curl from the host running buildstream doesnt have an ssl error, and neither does this test python script; | 14:43 |
robjh[m] | ``` | 14:43 |
robjh[m] | #!/usr/bin/env python3 | 14:43 |
robjh[m] | import requests | 14:43 |
robjh[m] | requests.get('https://cache.bst.tools:11001/') | 14:43 |
robjh[m] | ``` | 14:43 |
abderrahim[m] | robin: It's down now, right? I can test here when it comes back up | 15:00 |
robjh[m] | its supposed to be up abderrahim , i dont see any additional log entries | 15:02 |
abderrahim[m] | Doesn't seem to answer from here | 15:02 |
robjh[m] | most interesting | 15:03 |
abderrahim[m] | it's just hanging, whether with curl or firefox | 15:04 |
robjh[m] | very strange. its "accessible" from my lan but connecting to those ports on my phone behaves as you say. I'll go inspect my gateway | 15:06 |
*** tristan <tristan!tristan@223.62.175.54> has joined #buildstream | 15:09 | |
*** ChanServ sets mode: +o tristan | 15:09 | |
robjh[m] | abderrahim: could you check now? it turns out the firewall rule for port 11001 was wrong. I can connect now from my phone but buildstream is still unhappy | 15:10 |
abderrahim[m] | ok, I get the 404 now | 15:15 |
robjh[m] | and traefik logs them | 15:17 |
abderrahim[m] | seems to have initialized successfully with bst | 15:18 |
abderrahim[m] | I mean I didn't get any errors, I'm yet to try pulling | 15:19 |
robjh[m] | pulling wont work, its totally empty | 15:19 |
abderrahim[m] | it could work, even if it says the artifacts aren't there | 15:20 |
robjh[m] | im seeing some interesting things in the log though, it looks good :) | 15:20 |
robjh[m] | thanks abderrahim , I'll see about updating buildstream/debian | 15:21 |
abderrahim[m] | :) | 15:22 |
robjh[m] | can buildstream-modern and buildstream-classic use the same caches these days? | 16:29 |
*** tristan <tristan!tristan@223.62.175.54> has quit IRC | 16:36 | |
*** tristan <tristan!tristan@223.62.175.54> has joined #buildstream | 16:36 | |
*** ChanServ sets mode: +o tristan | 16:36 | |
*** tristan <tristan!tristan@223.62.175.54> has quit IRC | 16:40 | |
*** tristan <tristan!tristan@223.62.175.54> has joined #buildstream | 16:44 | |
*** ChanServ sets mode: +o tristan | 16:44 | |
jjardon[m] | @robin:robjh.com yes | 16:48 |
*** tristan <tristan!tristan@223.62.175.54> has quit IRC | 16:48 | |
jjardon[m] | any remote-apis based one | 16:48 |
jjardon[m] | buildbox-casd, buildbarn, buildgrid should always work | 16:50 |
robjh[m] | i tried buildbarn, but got overwhelmed by its configuration and gave up on it | 16:52 |
*** tristan <tristan!tristan@223.62.175.54> has joined #buildstream | 16:55 | |
*** ChanServ sets mode: +o tristan | 16:55 | |
jjardon[m] | yeah, in fdsdk we use buildbox-casd intead, even it is not specifically design for that | 16:59 |
robjh[m] | the current thing im running with is largely based on that, but modified to work with podman. | 17:01 |
robjh[m] | https://gitlab.com/freedesktop-sdk/infrastructure/artifacts/-/tree/master/artifacts | 17:01 |
jjardon[m] | ncie | 17:01 |
* jjardon[m] is suprised the buildstream documentation is not updated to document what remove caches we can use | 17:02 | |
robjh[m] | there's this, which points you towards buildbarn, but the configuration for it is incomplete; | 17:03 |
robjh[m] | https://docs.buildstream.build/2.0/using_configuring_cache_server.html | 17:03 |
abderrahim[m] | I filed this some time ago https://github.com/apache/buildstream/issues/1684 | 17:12 |
abderrahim[m] | it would be nice if someone could document it | 17:12 |
*** tristan <tristan!tristan@223.62.175.54> has quit IRC | 17:24 | |
robjh[m] | if i can get this cache working, i can put the config on the wiki either replacing the buildbarn one, or the placing it along side it | 17:32 |
robjh[m] | right now though, buildstream is not being my friend | 17:32 |
abderrahim[m] | Are you installing via pip? | 17:45 |
abderrahim[m] | And btw, it's most likely grpcio rather than buildstream | 17:45 |
robjh[m] | this particular install would have been installed (a while ago) via pip in a git checkout | 17:46 |
robjh[m] | since it was a while ago and this vm is disposable, im just going to do a fresh install | 17:47 |
robjh[m] | so im trying to build parts of gnome-build-meta (bst 1.6). I changed their cache url over to mine for testing. | 19:20 |
robjh[m] | ``` | 19:20 |
robjh[m] | artifacts: | 19:20 |
robjh[m] | - url: https://cache.bst.tools:11001 | 19:20 |
robjh[m] | - url: https://cache.bst.tools:11002 | 19:20 |
robjh[m] | push: true | 19:20 |
robjh[m] | server-cert: /home/r/certificate_authority/authority.crt | 19:20 |
robjh[m] | client-cert: /home/r/certificate_authority/moop.crt | 19:20 |
robjh[m] | client-key: /home/r/certificate_authority/moop.key | 19:20 |
robjh[m] | ``` | 19:20 |
robjh[m] | but this isnt working | 19:20 |
robjh[m] | ``` | 19:20 |
robjh[m] | [--:--:--][][] START Initializing remote caches | 19:20 |
robjh[m] | E0222 19:19:54.797505598 6723 hpack_parser.cc:1218] Error parsing metadata: error=invalid value key=content-type value=text/plain; charset=utf-8 | 19:20 |
robjh[m] | [--:--:--][][] WARNING Failed to initialize remote https://cache.bst.tools:11001: Received http2 header with status: 502 | 19:20 |
robjh[m] | E0222 19:19:55.589352702 6742 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED. | 19:20 |
robjh[m] | [--:--:--][][] WARNING Failed to initialize remote https://cache.bst.tools:11002: failed to connect to all addresses; last error: UNKNOWN: ipv4:141.0.157.203:11002: Ssl handshake failed: SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED | 19:20 |
robjh[m] | [00:00:01][][] SUCCESS Initializing remote caches | 19:21 |
robjh[m] | ``` | 19:21 |
robjh[m] | but the gnome cache does work. so my cache is borked | 19:21 |
robjh[m] | that being the case, abderrahim ; how were you connecting to it earlier? | 19:24 |
abderrahim[m] | Pretty much like you did. Using the user config | 19:34 |
abderrahim[m] | robin: note that you have http 502 which is a server error | 19:34 |
robjh[m] | it is getting to buildbox-casd though | 19:35 |
robjh[m] | 10.0.2.100 - - [22/Feb/2023:19:19:55 +0000] "POST /build.bazel.remote.execution.v2.Capabilities/GetCapabilities HTTP/2.0" 502 11 "-" "-" 36 "storagepull@file" "h2c://192.168.9.17:11000" 186ms | 19:35 |
robjh[m] | okay! good news. I changed nothing and restarted the buildbox program. pulling started to work. | 19:40 |
robjh[m] | but pushing; ``` [--:--:--][][] WARNING Failed to initialize remote https://cache.bst.tools:11002: failed to connect to all addresses; last error: UNKNOWN: ipv4:141.0.157.203:11002: Ssl handshake failed: SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED ``` | 19:44 |
robjh[m] | if i understand that this is supposed to be encrypted via a self-signed certificate. I'm going to make sure ive specified it correctly in the traefik config | 19:44 |
robjh[m] | * but pushing; `[--:--:--][][] WARNING Failed to initialize remote https://cache.bst.tools:11002: failed to connect to all addresses; last error: UNKNOWN: ipv4:141.0.157.203:11002: Ssl handshake failed: SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED` | 19:44 |
robjh[m] | if i understand this right, it supposed to be encrypted via a self-signed certificate. I'm going to make sure ive specified it correctly in the traefik config | 19:44 |
robjh[m] | * but pushing; `[--:--:--][][] WARNING Failed to initialize remote https://cache.bst.tools:11002: failed to connect to all addresses; last error: UNKNOWN: ipv4:141.0.157.203:11002: Ssl handshake failed: SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED` | 19:44 |
robjh[m] | if i understand this right, its supposed to be encrypted via a self-signed certificate. I'm going to make sure ive specified it correctly in the traefik config | 19:44 |
robjh[m] | push is working \o/ | 21:25 |
robjh[m] | I've seen a couple of these;... (full message at <https://gnome.modular.im/_matrix/media/v3/download/gnome.org/eea2fc50cfd910d8444e0bb49b4753b342d3137c>) | 21:37 |
robjh[m] | you just need to "retry" the failed task, but should this really be stopping the build? and why might it be doing it | 21:39 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!