dustymabe changed the topic of #fedora-coreos to: Fedora CoreOS :: Find out more at https://getfedora.org/coreos/ :: Logs at https://libera.irclog.whitequark.org/fedora-coreos
mheon has quit [Ping timeout: 260 seconds]
ravanelli has quit [Remote host closed the connection]
ravanelli has joined #fedora-coreos
ravanelli has quit [Ping timeout: 256 seconds]
ravanelli has joined #fedora-coreos
jpn has joined #fedora-coreos
ravanelli has quit [Remote host closed the connection]
jpn has quit [Ping timeout: 260 seconds]
ravanelli has joined #fedora-coreos
mnguyen has quit [Ping timeout: 260 seconds]
ravanelli has quit [Remote host closed the connection]
hotbox has quit [Ping timeout: 260 seconds]
jpn has joined #fedora-coreos
jpn has quit [Ping timeout: 260 seconds]
jpn has joined #fedora-coreos
gursewak has joined #fedora-coreos
jpn has quit [Ping timeout: 256 seconds]
b1000s has joined #fedora-coreos
paragan has joined #fedora-coreos
rishi` has joined #fedora-coreos
rishi has quit [Ping timeout: 260 seconds]
hotbox has joined #fedora-coreos
b1000s has quit [Remote host closed the connection]
b1000s has joined #fedora-coreos
saschagrunert has joined #fedora-coreos
Betal has quit [Quit: WeeChat 3.7.1]
jpn has joined #fedora-coreos
Gentoli[m] has quit [Quit: You have been kicked for being idle]
c4rt0 has joined #fedora-coreos
b1000s has quit [Ping timeout: 260 seconds]
bytehackr has joined #fedora-coreos
b1000s has joined #fedora-coreos
b1000s has quit [Ping timeout: 260 seconds]
fifofonix has joined #fedora-coreos
c4rt0 has quit [Remote host closed the connection]
jpn has quit [Ping timeout: 268 seconds]
saschagrunert has quit [Remote host closed the connection]
ravanelli has joined #fedora-coreos
jpn has joined #fedora-coreos
ravanelli has quit [Remote host closed the connection]
ravanelli has joined #fedora-coreos
b1000s has joined #fedora-coreos
mnguyen has joined #fedora-coreos
b100s has joined #fedora-coreos
b1000s has quit [Ping timeout: 256 seconds]
bytehackr has quit [Quit: Leaving]
vgoyal has joined #fedora-coreos
c4rt0 has joined #fedora-coreos
c4rt0_ has joined #fedora-coreos
b100s has quit [Ping timeout: 268 seconds]
jpn has quit [Ping timeout: 260 seconds]
<fifofonix> wanted to seek some clarification on rpm-ostree / ostree native container behaviour.
<fifofonix> if i layer a pacakge via rpm-ostree (eg. open-vm-tools) and then an auto-os upgrade happens, it is re-layered, with potentially a newer rpm version, right?
ravanelli has quit [Remote host closed the connection]
jpn has joined #fedora-coreos
nalind has joined #fedora-coreos
plarsen has joined #fedora-coreos
<walters> fifofonix: You're asking about where the origin is a container, but you're still doing client side layering?
<walters> If so, then yes - basically everything that works with "native ostree" *continues to work* with the container flow, and that was done very intentionally
<fifofonix> well, first i want to confirm my undertstanding with rpm-ostree and then i wanted to extend questioning to ostree native.
<walters> If you have a bunch of servers for which you want to use a standard "base image", except one gateway machine needs some extra VPN software, if you want you can client-side layer on just that one machine (or, you can build a derived image from the base...both work!)
mheon has joined #fedora-coreos
<fifofonix> so, the end question, is if i'm rebasing to ostree container image and that has a tag 1.0....and then that image changes on the registry....do i get the new 1.0 applied on the next os upgrade?
<walters> yes
<fifofonix> that's awesome. perhaps this is obvious but i couldn't figure this out from the documentation.
<fifofonix> yes, it is parity with rpm-ostree layering behaviour (which is great). i think i'm going to try and create an fcos-gpu ostree native.
<fifofonix> but i guess it would really be a fedora-gpu (not just fcos)
<walters> Yeah...this is such a large fundamental change that I'm thinking it calls for a rebranding and entire refresh...basically what I'm thinking now is rpm-ostree → "dnf image" and ostree → bootc
<walters> the latter is started in https://github.com/ostreedev/ostree-rs-ext/pull/412 and if you dig in there are only a few very simple commands; no rpm stuff, no policykit, no daemon actually, no local kernel args...just upgrade to and switch between bootable container images (and we probably want local rollback)
<fifofonix> walters: +1
<walters> BTW https://github.com/coreos/coreos-layering-examples/blob/main/build-zfs-module/Containerfile just landed demoing an approach to 3rd party kmods
<fifofonix> that's very interesting. i thought i was just beginning to understand this but now i think my mind has been blown again.
<walters> 😃
<fifofonix> so, i've switched one of my hosts to ostree-unverified-registry:quay.io/fedora/fedora-coreos:next. now, for me to get another next update do you need to updated the quay image, or is that just a layer of nothing, so there is no work on your side?
<fifofonix> i'm confused in this case whether i'm still tracking real next, or whether i'm really tracking whatever the latest quay.io image is.
<walters> the idea is these containers are exactly in sync with the ostree repository and hence have the same behavior as systems which are fetching via ostree today
<walters> so yes when there's a new fcos next build, that tag will be updated
<walters> https://fedoraproject.org/wiki/Changes/OstreeNativeContainerStable aims to apply this same technique to other Fedora editions even...so for example, how we manage desktop/workstation and IoT systems (can) *also* become "container native"
<fifofonix> ok mental model reformulated (again). so, we expect zincati to poll quay.io for updates? (i am just looking at zincati logs on rebased ostree container machine and it seems to be failing - something to do with coreos-assembler.basearch.
<walters> right, zincati support is ongoing, see https://github.com/coreos/zincati/pull/878
<walters> There's a whole world of complexity introduced by the cincinnati stuff here, that's in https://github.com/coreos/fedora-coreos-tracker/issues/1263
<fifofonix> ok. wow. so, experimental for now with updates triggered by new rpm-ostree rebase but auto-updates coming. awesome.
<walters> you can turn off zincati and directly `rpm-ostree upgrade` today
<fifofonix> understood. this is just so amazing. thanks for all the hard work taking this all to the next level.
<fifofonix> post my mental reset i realize the oci container image i would be creating really is fcos-next-gpu or similar (can't do it for fedora-gpu generically because this is not a means to actually create an rpm-like layer. it also defines the base os. correct?
<walters> yes; what you build works the same as any other OCI container today. *However*...nothing really stops us from adding support for "dynamic linking" in the future
<walters> some overlap here with https://www.freedesktop.org/software/systemd/man/systemd-sysext.html which we may do some integration with
ravanelli has joined #fedora-coreos
<fifofonix> ok. thanks so much walters
b100s has joined #fedora-coreos
ravanelli has quit [Remote host closed the connection]
b100s has quit [Ping timeout: 256 seconds]
decfi[m] has quit [Quit: You have been kicked for being idle]
hotbox has quit [Ping timeout: 240 seconds]
<walters> jlebon: I can't access the hackmd
<jlebon> walters: can you try again?
<walters> works
<jlebon> +1
Betal has joined #fedora-coreos
siodor has quit [Quit: https://quassel-irc.org - Komfortabler Chat. Überall.]
siodor has joined #fedora-coreos
paragan has quit [Quit: Leaving]
ravanelli has joined #fedora-coreos
ravanell_ has joined #fedora-coreos
ravanelli has quit [Ping timeout: 260 seconds]
<jlebon> ughh, fell for the classic "markdown pasted in git tag will treat all # headers as comments" in the latest pushed rpm-ostree tag
<jlebon> oh well, at least the release page is good
<walters> yeah that's gotten me every time
c4rt0_ has quit [Quit: Leaving]
c4rt0 has quit [Quit: Leaving]
ravanell_ has quit [Remote host closed the connection]
ravanelli has joined #fedora-coreos
ravanelli has quit [Ping timeout: 260 seconds]
AdonisExberger has joined #fedora-coreos
AdonisExberger has quit [Excess Flood]
plarsen has quit [Remote host closed the connection]
plarsen has joined #fedora-coreos
gursewak has quit [Ping timeout: 256 seconds]
<anthr76[m]> 👋 (again) is there any known open issues to anyone's minds regarding ignition-live-apply not actually enabling systemd units?
<anthr76[m]> At least symlinks to `multi-user.target`
gursewak has joined #fedora-coreos
<dustymabe> hmm - that sounds like something for IoT - anthr76[m] do you have a link to ignition-live-apply info?
<anthr76[m]> dustymabe: As in logs? I can produce them. I’m doing a live-apply via a butane in a Dockerfile for ostree native containers
<dustymabe> ahh
<dustymabe> cc jmarrero
<dustymabe> anthr76[m]: while I have you - did you want to try that aarch64 gcp image I created a month back
<anthr76[m]> dustymabe: Yes!
<dustymabe> let me see if I can share it with you somehow
<dustymabe> try with the fedora-coreos-37-20221019-dev-5-gcp-aarch64 image inside the fedora-coreos-devel project
<anthr76[m]> Sure taking a look. One moment
npcomp has quit [Ping timeout: 260 seconds]
gursewak has quit [Ping timeout: 252 seconds]
gursewak has joined #fedora-coreos
npcomp has joined #fedora-coreos
<dustymabe> jlebon: I think this should take care of it
<dustymabe> jlebon: great - the code is trying to run `oc get secret -n null -o json slack-api-token`
<dustymabe> somehow ${env.PROJECT_NAME} is evaluating to `null`
<jlebon> dustymabe: oh? that's weird
<jlebon> hmm, i wonder if it's only defined when running on the controller
<jlebon> as a test, can you try a rerun with https://paste.centos.org/view/5a9c4cb8
<dustymabe> jlebon: yeah that worked
<jlebon> dustymabe: cool. now let's see if we can make it better
<dustymabe> k
nalind has quit [Quit: until next time]
<jlebon> will try a replay of your replay
<dustymabe> ↻
<dustymabe> ↺
<dustymabe> also FTR when I run the oc get secret | jq on a non existant annotation I don't get null
<dustymabe> jlebon: I see what you tried. Did you mean to use `\${PROJECT_NAME}` ?
<dustymabe> alternatively we could use shwrapCapture('''
<dustymabe> oh nvm - it looks like it got the right project name
<jlebon> i think it worked, but uncovered a larger issue. trying another tactic now
<jlebon> ok cool, that worked
<jlebon> let me PR that
ccha has quit [Ping timeout: 248 seconds]
ccha has joined #fedora-coreos
gursewak_ has joined #fedora-coreos
gursewak has quit [Read error: Connection reset by peer]
<jlebon> ok i think i found another less hacky approach
<dustymabe> k
c4rt0 has joined #fedora-coreos
c4rt0 has quit [Client Quit]
<jlebon> dustymabe: re. non-existent annotation, that's weird. i'm testing locally with:
<jlebon> oc get secret -o json slack-api-token | jq -r '.metadata.annotations["enoent"]'
<jlebon> null
<dustymabe> jlebon: hmm
<jlebon> what command did you run?
<dustymabe> jlebon:
<dustymabe> oc get secret -o json slack-api-token | jq '.metadata.annotations["jenkins.io/emoji-prefic"]'
<dustymabe> maybe differences in jq version?
<dustymabe> i'm still on the old f35 (soon to be replaced)
<jlebon> yeah i get `null` for your command
<jlebon> damn, that's ancient
<dustymabe> jq-1.6-10.fc35.x86_64
<jlebon> :)
<jlebon> jq-1.6-13.fc36.x86_64
<jlebon> probably not it?
<dustymabe> yeah I'm not sure. As long as it's working in the pipeline I'm happy
<jlebon> gonna head out. have a good weekend all!
<dustymabe> i'm going to head out - have a good weekend jlebon, all
<jlebon> o/
gursewak_ has quit [Ping timeout: 256 seconds]
plarsen has quit [Remote host closed the connection]
mheon has quit [Ping timeout: 268 seconds]
vgoyal has quit [Quit: Leaving]