The Gatekeeper, or a project gating system
Go to file
James E. Blair 1c92165ab7 List process ids in bwrap namespace
If the kernel kills a process due to an out of memory error, it
can be difficult to track the process back to the build that triggered
it.  The kernel error just gives us a PID, but we don't know any of
the Ansible process ids.  Further, since they are in bwrap, Ansible
only knows its namespaced pid rather than the host pid, so we can't
simply output it in one of our callback plugins.

To aid in debugging, output all of the process ids within a namespace
right at the start of an ansible-playbook execution.  At this time,
it is certain that the Ansible process will have started, and it is
very likely that it is still running.  That should provide a way
to map from an OOM message back to an Ansible process id.

(Note that Ansible forks and this is unlikely to catch any forked
processes, so we will only see the main Ansible process id.  Typically
this is what the kernel should elect to kill, but if it does not,
we may need a futher change to repeat this process each time Ansible
forks.  Since that is more costly, let's see if we can avoid it.)

Change-Id: I9f262c3a3c5410427b0fb301cb4f1697b033ba2f
2023-06-28 13:31:06 -07:00
doc Require sphinx-rtd-theme >= 1.2.2 2023-06-23 16:06:39 -07:00
etc Remove "sql connection" backwards compatability for database 2022-01-25 16:07:08 -08:00
playbooks Replace docker by podman for quick-start 2023-05-22 06:54:41 -07:00
releasenotes/notes Merge "Allow duplicate queue definitions on same project branches" 2023-05-22 10:53:55 +00:00
tests Don't issue multiple merge requests for bundles 2023-06-26 10:42:17 +00:00
tools Revert "Test with MariaDB instead of MySQL" 2023-04-13 13:38:13 +00:00
web Web: remove config error drawer 2023-05-31 17:37:59 -07:00
zuul List process ids in bwrap namespace 2023-06-28 13:31:06 -07:00
.coveragerc Revert "Revert "Switch to stestr"" 2018-05-17 08:33:40 -07:00
.dockerignore Add web/node_modules to dockerignore 2019-01-27 11:23:45 +01:00
.gitignore Add noxfile and switch to nox 2022-12-20 08:57:53 -08:00
.gitreview OpenDev Migration Patch 2019-04-19 19:25:28 +00:00
.mailmap Fix pep8 E127 violations 2012-09-26 14:23:10 +00:00
.stestr.conf Revert "Revert "Switch to stestr"" 2018-05-17 08:33:40 -07:00
.zuul.yaml Use buildx to build images 2023-05-22 06:55:24 -07:00
COPYING Update README and add GPL license 2018-03-19 09:25:52 -07:00
Dockerfile Use bwrap --disable-userns if possible 2023-05-16 10:12:21 -07:00
LICENSE Initial commit. 2012-05-29 14:49:32 -07:00 Optimize canMerge using graphql 2020-02-28 09:43:56 +01:00
README.rst Update README to point to Matrix, not IRC 2022-11-08 22:25:10 -08:00
TESTING.rst Update unit test container setup and instructions 2022-08-05 21:00:02 +00:00
bindep.txt Revert "Test with MariaDB instead of MySQL" 2023-04-13 13:38:13 +00:00 Merge "Switch to sqlalchemy 2.0" 2023-02-14 14:55:16 +00:00
reno.yaml Add reno configuration settings 2020-07-22 08:45:46 -07:00
requirements.txt Switch to sqlalchemy 2.0 2023-02-01 09:18:59 -08:00
setup.cfg Add noxfile and switch to nox 2022-12-20 08:57:53 -08:00 Partial sync with OpenStack requirements. 2013-09-25 15:30:37 -07:00
test-requirements.txt github: more complete mocking for app setup 2021-09-23 19:53:48 +10:00
tox.ini Add noxfile and switch to nox 2022-12-20 08:57:53 -08:00



Zuul is a project gating system.

The latest documentation for Zuul v3 is published at:

If you are looking for the Edge routing service named Zuul that is related to Netflix, it can be found here:

If you are looking for the Javascript testing tool named Zuul, it can be found here:

Getting Help

There are two Zuul-related mailing lists:


A low-traffic announcement-only list to which every Zuul operator or power-user should subscribe.


General discussion about Zuul, including questions about how to use it, and future development.

You will also find Zuul developers on Matrix <>.


To browse the latest code, see: To clone the latest code, use git clone

Bugs are handled at:!/project/zuul/zuul

Suspected security vulnerabilities are most appreciated if first reported privately following any of the supported mechanisms described at

Code reviews are handled by gerrit at

After creating a Gerrit account, use git review to submit patches. Example:

# Do your commits
$ git review
# Enter your username if prompted

Join us on Matrix to discuss development or usage.


Zuul is free software. Most of Zuul is licensed under the Apache License, version 2.0. Some parts of Zuul are licensed under the General Public License, version 3.0. Please see the license headers at the tops of individual source files.

Python Version Support

Zuul requires Python 3. It does not support Python 2.

Since Zuul uses Ansible to drive CI jobs, Zuul can run tests anywhere Ansible can, including Python 2 environments.