[08:33:38] that's weird [09:03:30] patches to fix the nova certificate/migration issue: https://gerrit.wikimedia.org/r/c/operations/puppet/+/990724 https://gerrit.wikimedia.org/r/c/operations/puppet/+/990948 [09:09:18] \o/ [15:00:50] an update on running lima-kilo on ARM cpus: I'm not finding a clear documentation page, but everything points to the fact that Rosetta (the super-fast AMD emulation for M1/M2 Apple CPUs) is not able to run an AMD _kernel_ but only AMD _binaries_ [15:01:57] what I think this means, is that me and other people with M1/M2 Macs have to run an ARM-based Linux VM, but inside that VM we can easily run AMD binaries, including AMD Docker containers [15:02:50] the alternative would be to run a full AMD-based Linux VM with QEMU emulation, but that's just tooooo slow to be usable [15:05:19] ugh, the world needs to catch up to ARM :) [15:05:48] were you ever able to run the vagrant version on the arm mac? [15:06:21] never tried Vagrant, but I expect similar issues, I was reading VMware had some optimized emulation, but not sure how fast that was [15:07:27] IMHO it's not too bad: my lima-kilo VM is now working fine with lima-vm. yes it has a different kernel (ARM kernel) and it's running the ARM version of Debian, but all the k8s, Docker containers, etc. are exactly the same that we are using in production (AMD binaries/containers) [15:14:58] good to know [15:25:44] dcaro: would it be useful to run the playbook incrementally to see which tasks causes it? [15:26:14] maybe, you can use `-t ` to run only a specific role [15:26:27] or --step, though that might be too much (will ask for each task iirc) [15:28:22] can probably tag several tasks, do some sort of binary search? [15:34:50] maybe, though I think that k8s, and kind might be the most suspicious [15:35:04] ok [15:47:37] dcaro: it's the userconfig role [15:47:54] oh sweet, that one should be kinda simple [15:50:42] there we only add the profile script to set the path/harbor_ip, ohhh, maybe the local path [15:50:54] https://www.irccloud.com/pastebin/Jb9xv5kt/ [15:51:33] that sets the permissions to 777, and the lima_kilo_local_path is the user home now, so ssh might be refusing to allow the user to login when the home dir permissions are too permissive [15:51:33] ? [15:59:59] dcaro: hmm, I'll have to call it a day for now but will keep exploring [16:00:23] I'll give it a try also when I have some time, have you pushed your changes somewhere? [16:00:43] nope, they are... messy xd [16:01:10] I'll try to clean them up and push a bit later [16:01:20] okok, no rush, can be tomorrow [16:22:39] dcaro: ˆthis restores ssh access, so it seems the permissions were too permissive, as you said https://www.irccloud.com/pastebin/vw7KLcSR/ [17:13:48] \o/ [17:14:03] * dcaro off