| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2018-09-18 | |||
| 14:12:32 | bauzas | dansmith: my point is, we could model pGPUs as resource providers, but it will need a reshape anyway once we have NUMA nodes | |
| 14:12:43 | sean-k-mooney | mriedem: yes i know its just the loger we have partial mox removal and the more releases we have this in the longer we will have mox backport issues | |
| 14:13:00 | dpawlik | dansmith: http://paste.openstack.org/show/730274/ | |
| 14:13:15 | bauzas | dansmith: yup, because if I begin to model NUMA nodes as children and pGPUs as grand children, placement wouldn't find all the resources or would constraint the query | |
| 14:13:50 | dansmith | bauzas: you don't have to do that, you can just make them children of the compute.. reparenting is easier than a full reshape | |
| 14:13:52 | dansmith | but whatever | |
| 14:13:52 | bauzas | that's the whole purpose of the later spec I have to write for describing queries when it's all about chidren and grand-children relationship | |
| 14:14:01 | mriedem | sean-k-mooney: we could have just, oh idk, never done it... | |
| 14:14:05 | sean-k-mooney | mriedem: we are going to have them either way so there is not much we can do unless nova is going to make mox a deliverable of the project and maintain it going forward | |
| 14:14:23 | mriedem | sean-k-mooney: which i believe dansmith said he'd do if it became a problem, | |
| 14:14:24 | mriedem | which it never has | |
| 14:14:28 | dansmith | dpawlik: looks like only one mapping in there, so I guess you're good | |
| 14:14:37 | bauzas | dansmith: yup, that's my thoughts, I'm just about to model pGPUs as children, then they would just be parented to a NUMA node in a reshape | |
| 14:14:48 | dansmith | mox3 has never broken, so yeah I signed up to fix breakages :) | |
| 14:14:58 | dansmith | bauzas: okay | |
| 14:15:18 | bauzas | just wanted to follow-up on the situation since you made a valid point :) | |
| 14:15:50 | sean-k-mooney | i guess going against a openstack wide goal did not seam to be a vailable option to me but ya if it was i guess we could have never started it | |
| 14:16:10 | mriedem | it was always a viable option | |
| 14:16:20 | dpawlik | dansmith: but what if I have in [database] coonection set cell0 DB so after creating cell1 they are duplicatd? | |
| 14:16:59 | mriedem | dansmith: re the queens release question, i think mel was holding up on some fixes for queens regressions but i don't have a list handy, so would just have to go through what's been proposed and see if there is anything critical we should target | |
| 14:17:18 | sean-k-mooney | mriedem: it was always a technical option i just didnt think it was an option to explcitly go against a openstack release goal from a governance point of view | |
| 14:17:26 | dansmith | mriedem: it's just been a really long time (three months it seems) | |
| 14:17:33 | mriedem | yeah i know | |
| 14:17:51 | sean-k-mooney | mriedem: anyway i guss that ship has sailed. | |
| 14:17:54 | dansmith | we're missing things like the compute disable -> weigher thing | |
| 14:19:00 | dansmith | mriedem: are you saying you think I shouldn't just propose one to unblock us because there may be things pending that need to be merged first? | |
| 14:19:42 | mriedem | dansmith: yes, i'd want to go through the open reviews first to see if there is anything we really need to get in | |
| 14:19:58 | dansmith | sigh | |
| 14:20:38 | dansmith | I don't really understand.. all the things proposed are likely things we want to get in.. is there some reason not to just cut one and then cut another? | |
| 14:21:11 | dansmith | kinda seems like we should just cut one any time the delta hits 10 or the delta is >1mo old or something.. not sure why it needs more thought than that | |
| 14:21:24 | dansmith | lyarwood says the delta is 55 patches right now which is.. a lot | |
| 14:22:26 | mriedem | i realize we haven't done stable releases in a while, it was a known thing, mel was holding up for something, i can't remember what atm, if i can get out from under the other 3 things people asked me to do before we started talking about this i can take a look | |
| 14:22:39 | mriedem | my butt is starting to hurt | |
| 14:24:11 | dansmith | sorry, I'm not trying to dump on you, I'm just saying... I'm not sure what the point of waiting is | |
| 14:25:46 | mriedem | the release team asked me to review the open stable release requests, so let me get through that first and then i'll take a look at our stable releases to come | |
| 14:25:47 | sean-k-mooney | dansmith: i mean to your point if there was something we were waiting for and we cut now without it its not hard to have another z stream in a week when we rememeber what it was | |
| 14:26:06 | mriedem | sean-k-mooney: yes i get it | |
| 14:26:50 | sean-k-mooney | mriedem: sorry i was not trying to take a dig at you. | |
| 14:27:55 | mriedem | it probably doesn't help that this rotated in just now https://www.youtube.com/watch?v=0XoyDqFy5pU | |
| 14:28:07 | sean-k-mooney | release automation is one of the tings that infra/release team desgined really well. its alot less of a pain then it was when you had to manually push and sign everything to pypi by hand | |
| 14:28:55 | sean-k-mooney | haha it certenly set a tone | |
| 14:32:00 | mriedem | dansmith: you wanna wade through some of the +2d rocky backports while waiting https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/rocky ? | |
| 14:32:26 | dansmith | mriedem: you know I'm asking about queens right? | |
| 14:32:30 | mriedem | yes | |
| 14:32:37 | dansmith | looks like there is a lot on queens that needs just a +W | |
| 14:32:43 | dansmith | but yeah I can try to hit both | |
| 14:33:21 | dansmith | ah, maybe some are still pending on the rocky ones | |
| 14:33:37 | dansmith | like the service list thing | |
| 14:37:50 | lyarwood | yeah sorry that's my bad, I +2'd a few waiting on stable/rocky so I wouldn't block anything while I was offline yesterday | |
| 14:39:50 | dansmith | gdi lyarwood, stop being proactive! | |
| 14:41:56 | dansmith | okay I just sent a raft of rocky stuff to meet its maker | |
| 14:54:49 | openstackgerrit | Vlad Gusev proposed openstack/nova stable/queens: WIP libvirt: Reduce calls to qemu-img during update_available_resource https://review.openstack.org/603358 | |
| 14:55:31 | mriedem | btw, i think that's part of the ordering, we want to make sure stuff we release in queens is also released in rocky, so someone doesn't upgrade from queens to rocky in that window and lose some fixes - probably rare that would happen though | |
| 14:55:54 | mriedem | so we'll do a rocky->queens->pike->ocata release stack | |
| 14:58:41 | dansmith | if we release by the clock, frequently enough, and keep the deps in gerrit, | |
| 14:58:44 | dansmith | then it should never really happen | |
| 14:58:51 | dansmith | but if we have three-month windows, it's far more possible | |
| 15:11:49 | openstackgerrit | Chen proposed openstack/nova master: doc trivial: additional info to admin-password-injection https://review.openstack.org/603414 | |
| 15:20:29 | openstackgerrit | Stephen Finucane proposed openstack/nova-specs master: Add 'disallow-isolcpus-with-overcommit-vcpus' spec https://review.openstack.org/603417 | |
| 15:32:04 | openstackgerrit | Stephen Finucane proposed openstack/nova-specs master: Specify doctree directory https://review.openstack.org/603421 | |
| 15:57:36 | stephenfin | mriedem, bauzas, dansmith: Can one of you put this python3-first patch through, please? https://review.openstack.org/#/c/601373/ | |
| 15:58:32 | bauzas | stephenfin: easy review, thanks to your help | |
| 15:59:01 | stephenfin | bauzas: Cheers :) | |
| 15:59:32 | bauzas | stephenfin: no, ``Cheers`` | |
| 15:59:43 | bauzas | it's a string, dude | |
| 16:00:08 | stephenfin | Think I've found my presentation topic for Denver 2019 | |
| 16:00:42 | bauzas | :) | |
| 16:02:11 | stephenfin | bauzas: If you're game, there are also these. Think it's the last of them https://review.openstack.org/#/q/topic:python3-first+status:open+(project:openstack/os-traits+OR+project:openstack/os-vif) | |
| 16:04:16 | openstackgerrit | Surya Seetharaman proposed openstack/nova master: Merge extended_volumes extension response into server view builder https://review.openstack.org/596285 | |
| 16:06:46 | openstackgerrit | Merged openstack/nova master: Merge security groups extension response into server view builder https://review.openstack.org/585475 | |
| 16:06:54 | openstackgerrit | Merged openstack/nova master: Merge extended_status extension response into server view builder https://review.openstack.org/592092 | |
| 16:12:48 | openstackgerrit | Merged openstack/nova-specs master: import zuul job settings from project-config https://review.openstack.org/601373 | |
| 16:35:37 | cburgess | dansmith Apparently you made a few people thing something bad had happened to me. :) | |
| 16:35:44 | cburgess | I guess it nice to know people still care. | |
| 16:36:20 | cdent | you were missed | |
| 16:37:00 | cburgess | cdent I missed you all. Its weird not attending the summits and PTGs. I've been doing it since 2012 so yeah... makes the whole "I don't work with OpenStack anymore" thing real. | |
| 16:42:01 | openstackgerrit | Vladyslav Drok proposed openstack/nova stable/pike: Fix resize_instance rpcapi call https://review.openstack.org/603439 | |
| 17:38:39 | mriedem | dansmith: would be good to get this into pike before we release https://review.openstack.org/#/c/594184/ | |
| 17:39:36 | openstackgerrit | Surya Seetharaman proposed openstack/nova master: Merge extended_volumes extension response into server view builder https://review.openstack.org/596285 | |
| 17:39:37 | openstackgerrit | Surya Seetharaman proposed openstack/nova master: Making instance/migration listing skipping down cells configurable https://review.openstack.org/592428 | |
| 17:41:06 | mriedem | we have a few pike backports with +2s actually https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/pike+label:Code-Review=2 | |
| 17:45:25 | openstackgerrit | Surya Seetharaman proposed openstack/nova master: Add get_by_cell_and_project() method to InstanceMappingList https://review.openstack.org/591656 | |
| 17:46:37 | mhen | hello guys, I'm from the same team as Luzi and would like to pick up on her topic regarding the image signature checking again, hoping that some of the core members are present right now. | |
| 17:49:06 | openstack | Launchpad bug 1793159 in OpenStack Compute (nova) "no signature check for cached images" [Undecided,New] | |
| 17:49:06 | mhen | we created a launchpad entry as advised: https://bugs.launchpad.net/nova/+bug/1793159 | |
| 17:49:47 | mriedem | dansmith: actually i'll just push a pike release since we have a lot of stuff unreleased in there http://paste.openstack.org/show/730308/ | |
| 17:52:07 | mhen | so we propose to do an additional image signature verification for signed images after retrieving it from a local compute's cache while spawning an instance. Any opinions on this? | |
| 17:52:18 | mriedem | mhen: i left a question in the bug | |
| 17:52:32 | mriedem | i believe this is also a duplicate of https://bugs.launchpad.net/nova/+bug/1785668 | |
| 17:52:33 | openstack | Launchpad bug 1785668 in OpenStack Compute (nova) "nova-compute doesn't check image signature if imagecache exists" [Undecided,New] | |
| 17:53:08 | mriedem | also, mdbooth is probably the person to talk with about image cache stuff, but he's not around right now | |
| 17:53:16 | mriedem | i'll subscribe him to the bugs | |
| 17:54:21 | mhen | mriedem, thank you for your input! You are right about the duplicate. Should I answer your question in our bug entry or is it gonna be closed as a duplicate now anyway? | |
| 17:56:53 | mriedem | mhen: might as well reply and then we'll duplicate it | |
| 17:57:22 | mriedem | it wasn't clear to me that the other bug had sufficient recreate details | |
| 17:57:22 | mhen | mriedem, roger that! | |
| 17:59:15 | mhen | the other bug actually follows a different reasoning | |
| 18:00:24 | mhen | they are talking about the image signature check should fail in their scenario, since the user in question should not be able to retrieve the corresponding validation certificate from Barbican due to the user's permissions | |
| 18:01:01 | mhen | since a cached image is not checked in Nova, the cert retrieval is not even attempted and the permission problem does not surface | |
| 18:01:50 | mhen | our reasoning is more about the possibility of tampering with the cached image data, but I'll elaborate on that in our bug entry | |