- service-announce - lists.opendev.org

Mailing lists maintenance 2025-09-19 at 20:00-21:00 UTC
by Jeremy Stanley 19 Sep '25

19 Sep '25

Mailing list services will be offline briefly for all hosted domains (lists.airshipit.org, lists.katacontainers.io, lists.opendev.org, lists.openinfra.org, lists.openstack.org, lists.starlingx.io, lists.zuul-ci.org) between 20:00 and 21:00 UTC on Friday, 2025-09-19 in order to address recent performance degradation related to the rise in automated crawler traffic. Inbound E-mail deliveries should queue temporarily in the MTA, which is not being taken offline, so at worst posts to the lists will be delayed until shortly after maintenance concludes. Web access to archives and subscription management will be unavailable while this work is in progress. -- Jeremy Stanley on behalf of the OpenDev Collaboratory Sysadmins

1 1

OpenDev python-builder, python-base, and uwsgi-base container images moved to quay.io/opendevorg
by Clark Boylan 11 Sep '25

11 Sep '25

OpenDev has been moving the container images it builds to quay.io/opendevorg. The time to move the three python base images we build (python-builder, python-base, and uwsgi-base) to quay.io/opendevorg is now. These changes [0][1] just merged and you can see the image updates on quay.io [2][3][4]. Users of these images should start pulling the images from their new home at this time. You can see examples of what that involves in these related OpenDev changes [5][6][7]. You may remember that we attempted to do this in the past and had to revert. Since then we've identified and fixed the problems with speculative image building in zuul using both podman and docker. We have also addressed the use of speculative container images at runtime by moving OpenDev's python based deployments to podman. Fixing speculative testing was the last major blocker for hosting the images on quay.io. Doing so should help us reduce overall reliance on docker hub and as a result reduce chances of hitting API limits there. We will not be deleting the existing images on docker hub at this time, but those images will not receive updates. Our goal is to followup in approximately 3 months and delete the images from docker hub at that time. This should give everyone plenty of time to switch to the new location. Then deletion will provide signal to anyone who is using the images and missed this email that they need to update before the images become very stale. Note this means that quay.io/opendevmirror/python-builder, quay.io/opendevmirror/python-base, and quay.io/opendevmirror/uwsgi-base will also stop getting updates. Any use of these images should pull from the new quay.io/opendevorg/ locations. [0] https://review.opendev.org/c/opendev/system-config/+/957277 [1] https://review.opendev.org/c/opendev/system-config/+/960644 [2] https://quay.io/repository/opendevorg/python-builder?tab=tags [3] https://quay.io/repository/opendevorg/python-base?tab=tags [4] https://quay.io/repository/opendevorg/uwsgi-base?tab=tags [5] https://review.opendev.org/c/opendev/lodgeit/+/958602 [6] https://review.opendev.org/c/opendev/system-config/+/958593 [7] https://review.opendev.org/c/opendev/system-config/+/958597 Clark

1 0

Updating OpenDev Zuul's default Ansible version to Ansible 11
by Clark Boylan 13 Aug '25

13 Aug '25

Currently OpenDev Zuul's default Ansible version is Ansible 9. Zuul has recently added support for Ansible 11. The Zuul and OpenDev Zuul tenants switched to Ansible 11 by default last week. So far we have seen no problems with jobs run in these two tenants related to the Ansible version change. We intend on switching the default Ansible version for all Zuul tenants in OpenDev's Zuul installation to Ansible 11 on August 18, 2025. The reason for this is Zuul will update the default Ansible version to Ansible 11 in Zuul itself. Not long after that change we can expect Zuul to drop support for Ansible 9. Changing things in OpenDev first allows us to do these changes in a controlled manner and get ahead of any potential problems. If you would like to test your jobs before the tenant configuration updates go into effect you can do so by setting `ansible-version: '11'` in the configuration of a job [0], push the resulting change to Gerrit, and then wait for Zuul to run the job and provide you with results. It is not necessary to merge the change; Zuul will speculatively test this setting. If you discover any problems through this process please let us know. Similarly, after the tenant defaults roll out next week, you can roll back to Ansible 9 using the same job level override if problems arise. You will need to correct these problems to ensure Ansible 11 compatibility before Ansible 9 is dropped from Zuul. [0] https://zuul-ci.org/docs/zuul/latest/config/job.html#attr-job.ansible-versi… Clark

1 0

Removal of CLA enforcement and configuration in Gerrit
by Jeremy Stanley 10 Jul '25

10 Jul '25

The configured contributor license agreements in our Gerrit refer to the old Open Infrastructure Foundation, which is in the process of being dissolved after its operations joined the Linux Foundation. As such, they are no longer valid for future contributions to projects (and it's questionable whether they were ever valid for non-OpenInfra projects anyway). OpenInfra projects which were previously relying on these have since switched to the DCO with a different enforcement mechanism. On July 18 we're planning to merge a change removing CLA enforcement from all remaining repositories in the OpenDev Collaboratory Gerrit. If you want to make adjustments to your project's ACLs in the meantime, please propose changes into Gerrit for their files under https://opendev.org/openstack/project-config/src/branch/master/gerrit/acls so there won't be any gap in enforcement (for example, if you prefer to switch them to DCO enforcement by swapping the requireContributorAgreement control over to requireSignedOffBy instead). Feel free to reply on the service-discuss mailing list or find us in the #opendev channel on the OFTC IRC network if you have any questions about this. -- Jeremy Stanley on behalf of the OpenDev Collaboratory Sysadmins

1 0

Enabling Gerrit Hashtags For All Registered Users
by Clark Boylan 28 May '25

28 May '25

For some time now Gerrit has supported HashTags as an alternative to Change Topics. Over time Change Topics have evolved for most Gerrit installations to indicate common sets of work that should be merged together when submitWholeTopic is enabled. In these situations the expectation is that you would use HashTags to annotate Changes with information that we have often used Change Topics for within OpenDev. To catch up with the rest of the Gerrit community OpenDev will enable HashTags by default for all Registered Users on June 3, 2025. This will allow you to edit HashTags on any change as long as you are logged in. Some projects have already enabled this feature for specific groups of users. This change will override those existing rules enabling HashTags for all Registered Users on those projects too. The number of projects this affects is quite small, but let us know if you have any questions or concerns. Clark

1 0

review.opendev.org Gerrit Outage April 21, 2025
by Clark Boylan 11 Apr '25

11 Apr '25

The OpenDev team will shut down Gerrit services on review.opendev.org at 16:00 UTC April 21, 2025 in order to migrate and upgrade the underlying server instance. The work is expected to take about an hour and should largely be transparent to users other than the required outage. One thing users may notice is the IP Addresses for review.opendev.org will change. If you need to update your firewall rules you can do so by allowing TCP port 443 and TCP port 29418 to: 162.253.55.233 2604:e100:1:0:f816:3eff:fe31:926a These IPs belong to the new review03.opendev.org server which will replace review02.opendev.org. Let us know if you have any questions or concerns. Clark

1 0

bindep 2.12.0
by Jeremy Stanley 25 Jan '25

25 Jan '25

I've released bindep 2.12.0 just now. These are the highlights: New Features ------------ * Basic support for PopOS is now included. Upgrade Notes ------------- * Python 2.7 and 3.5 are no longer supported. * Bindep now depends on the distro python library to determine details about the current platform. This library looks at both /etc/os-release and lsb_release to find platform info. The os-release file data is preferred and at times has slightly different data than lsb_release. Every effort has been made to make this transition backward compatible but some things may have been missed. The motivation for this change is that not all distros have lsb_release available and we can let the distro library sort that out for us. -- Jeremy Stanley

1 0

Planned outage for mailing lists on Monday 2024-12-02 15:00-17:00 UTC
by Jeremy Stanley 27 Nov '24

27 Nov '24

The OpenDev Sysadmins will be performing maintenance on our mailing list server between 15:00 and 17:00 UTC on Monday, 2024-12-02. During this time, messages to and from the lists for all our sites will be held temporarily while we make adjustments in the backing database for renaming one of the domains in use. Web archives may be unavailable for part of the time as well. The outage should start some time around 15:00 UTC and is not expected to last more than two hours (but will hopefully conclude far more quickly). Please follow up (either to the service-discuss(a)lists.opendev.org mailing list or to me personally) with any questions you may have on this activity. -- Jeremy Stanley, OpenDev Systems Administrator

1 0

Upgrading OpenDev's Gerrit Server on December 6, 2024 at 16:00 UTC
by Clark Boylan 13 Nov '24

13 Nov '24

The OpenDev team will be upgrading the Gerrit server on review.opendev.org on December 6, 2024 at 16:00 UTC. This will require a short downtime of the service if everything goes well and a longer downtime if we need to revert. We are allocating an hour (16:00 - 17:00 UTC) for this work. We will upgrade from Gerrit 3.9 to 3.10 remaining approximately one release behind the latest Gerrit release as long as the Gerrit 3.11 release happens on time this month. Gerrit 3.10 brings a number of changes including many performance improvements and fewer email notifications. The upstream release notes [0] cover these updates in much more detail if you are interested. Let us know if you have any questions or concerns. [0] https://www.gerritcodereview.com/3.10.html Clark

1 0

Pruning OpenDev's Intermediate Registry on insecure-ci-registry.opendev.org November 15, 2024
by Clark Boylan 06 Nov '24

06 Nov '24

The OpenDev team will begin some long overdue pruning of the storage system behind the intermediate container registry running on insecure-ci-registry.opendev.org on November 15, 2024. The last time we tried this we believe container image client errors were due to the pruning. Unfortunately, we don't have enough information to know if this will happen again. For this reason we will be prepared to replace the entire Swift container on the backend and start over fresh if necessary. We ask that you report any unexpected client behaviors with the intermediate registry on or after November 15, 2024. Additionally, if we do end up replacing the entire backend storage container we will lose all intermediate container image state. If this happens, jobs relying on state in the intermediate registry may fail. In those cases you may need to recheck jobs that build the images or merge additional changes to refresh the content in the intermediate registry. Clark

1 0