Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2019-01-04
23:28:32 openstackgerrit Merged openstack/nova master: libvirt: Add workaround to cleanup instance dir when using rbd https://review.openstack.org/618478
#openstack-nova - 2019-01-05
03:05:34 sunnaichuan Hello, anyone know when does openstack init its database and create tables when it startup?
10:14:54 openstackgerrit Lee Yarwood proposed openstack/nova stable/rocky: libvirt: Add workaround to cleanup instance dir when using rbd https://review.openstack.org/627958
10:20:06 openstackgerrit Lee Yarwood proposed openstack/nova stable/queens: libvirt: Add workaround to cleanup instance dir when using rbd https://review.openstack.org/628726
11:05:04 openstackgerrit Lee Yarwood proposed openstack/nova master: fixtures: Return a mocked class instead of method within fake_imagebackend https://review.openstack.org/619804
13:14:19 openstackgerrit Merged openstack/nova stable/rocky: Migrate nova v2.0 legacy job to zuulv3 https://review.openstack.org/620571
#openstack-nova - 2019-01-06
07:43:03 openstackgerrit OpenStack Proposal Bot proposed openstack/nova stable/rocky: Imported Translations from Zanata https://review.openstack.org/628109
10:44:57 openstackgerrit garyk proposed openstack/nova master: Improve metadata performance https://review.openstack.org/615435
12:51:01 ahmadoo Hello all
12:51:22 ahmadoo I have a problem
13:17:54 openstackgerrit Merged openstack/nova stable/queens: Ensure rbd auth fallback uses matching credentials https://review.openstack.org/627010
19:02:56 openstackgerrit Matt Riedemann proposed openstack/nova stable/pike: Ensure rbd auth fallback uses matching credentials https://review.openstack.org/627011
19:27:45 openstackgerrit garyk proposed openstack/nova master: Improve metadata performance https://review.openstack.org/615435
#openstack-nova - 2019-01-07
00:14:36 openstackgerrit Takashi NATSUME proposed openstack/os-resource-classes master: Update author-email in setup.cfg https://review.openstack.org/624885
01:01:50 openstackgerrit Hesam Chobanlou proposed openstack/nova master: Hyper-v - unused images are always deleted (add to in-tree hper-v code) https://review.openstack.org/628793
01:42:58 openstackgerrit Hesam Chobanlou proposed openstack/nova master: unused images are always deleted (add to in-tree hper-v code) https://review.openstack.org/628793
01:47:56 openstackgerrit Yongli He proposed openstack/nova-specs master: add spec "show-server-numa-topology" https://review.openstack.org/612256
02:04:10 openstackgerrit Yongli He proposed openstack/nova-specs master: add spec "show-server-numa-topology" https://review.openstack.org/612256
02:04:48 openstackgerrit Yongli He proposed openstack/nova-specs master: add 'show-server-group' spec https://review.openstack.org/612255
02:58:38 openstackgerrit Takashi NATSUME proposed openstack/nova stable/queens: Add description of custom resource classes https://review.openstack.org/619125
02:59:10 openstackgerrit Takashi NATSUME proposed openstack/nova master: Remove mox in virt/test_block_device.py https://review.openstack.org/566153
03:04:46 openstackgerrit weizj proposed openstack/os-vif master: Update hacking version https://review.openstack.org/628603
03:06:32 openstackgerrit Brin Zhang proposed openstack/nova-specs master: Specifying az when restore shelved server https://review.openstack.org/624689
03:45:41 openstackgerrit Merged openstack/python-novaclient master: Update hacking version https://review.openstack.org/627726
04:32:39 openstackgerrit Merged openstack/nova stable/queens: Exclude build request marker from server listing https://review.openstack.org/626585
04:45:50 openstackgerrit Takashi NATSUME proposed openstack/nova master: Add descriptions of numbered resource classes and traits https://review.openstack.org/621494
05:18:15 openstackgerrit jiang wei proposed openstack/nova master: Update host_state's limits when specified AZ https://review.openstack.org/625755
05:51:28 openstackgerrit Takashi NATSUME proposed openstack/nova master: Follow up for "Add API ref guideline for body text" https://review.openstack.org/625454
05:51:35 openstackgerrit Takashi NATSUME proposed openstack/nova master: Follow up for "Add API ref guideline for body text" https://review.openstack.org/625454
05:58:05 openstackgerrit Takashi NATSUME proposed openstack/nova master: api-ref: Add descriptions for vol-backed snapshots https://review.openstack.org/615084
05:58:41 openstackgerrit Takashi NATSUME proposed openstack/nova master: api-ref: Body verification for the lock action https://review.openstack.org/622835
06:06:13 jayashri join masakari
07:33:25 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Force refresh instance info_cache during heal https://review.openstack.org/591607
07:33:25 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Add fill_virtual_interface_list online_data_migration script https://review.openstack.org/614167
08:20:07 adrianc melwitt, sean_k_mooney1: Hi, any chance we can approve the following spec before spec freeze ? https://review.openstack.org/#/c/605116/10 I believe most of the issues/comments were dealt with
08:20:52 adrianc sean-k-mooney1 ^
09:04:29 bauzas good morning Nova
09:04:39 sean-k-mooney1 bauzas: o/
09:05:04 bauzas :)
09:29:51 openstackgerrit Yikun Jiang proposed openstack/nova master: Per aggregate scheduling weight https://review.openstack.org/628163
11:47:52 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Force refresh instance info_cache during heal https://review.openstack.org/591607
11:47:52 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Add fill_virtual_interface_list online_data_migration script https://review.openstack.org/614167
13:04:25 openstackgerrit Daniel Pawlik proposed openstack/nova stable/rocky: Removing pip-missing-reqs from default tox jobs https://review.openstack.org/628952
13:05:24 openstackgerrit Matt Riedemann proposed openstack/nova stable/pike: Exclude build request marker from server listing https://review.openstack.org/628954
13:09:27 openstackgerrit Daniel Pawlik proposed openstack/nova stable/queens: Removing pip-missing-reqs from default tox jobs https://review.openstack.org/628956
13:12:31 openstackgerrit Daniel Pawlik proposed openstack/nova stable/queens: Removing pip-missing-reqs from default tox jobs https://review.openstack.org/628956
13:16:37 kashyap Anyone else seeing the "tempest.api.network.test_routers_negative" time-out failure, as part of 'tempest-full-py3'?
13:20:21 kashyap Hm, a socket timeout: http://logs.openstack.org/16/625216/2/check/tempest-full-py3/f007612/testr_results.html.gz
13:43:03 kashyap mdbooth_: Random ping, in your "copious free time", mind having a look at this? -- https://review.openstack.org/#/c/625216/
13:43:23 kashyap (Title of the change: "libvirt: Support native TLS for migration and disks over NBD")
13:43:32 kashyap Or anyone here, not just Matt :D
13:44:01 mdbooth_ kashyap: Looking.
13:44:24 kashyap I'm working out the unit test; so if you don't want to look at it without it, can understand.
13:44:36 mdbooth kashyap: Remind me, do we default to tunnelled? IIRC we don't?
13:44:58 kashyap No, we don't default to tunnelled; but damned if I remember, everytime I have to check
13:45:27 kashyap mdbooth: No we don't -- because live block migration won't work with tunnelled
13:45:43 kashyap I also have a slightly hairy TODO in the commit, if you squint:
13:45:45 kashyap TODO: - Figure out _which_ combination of migration flags are valid. I.e. work out how VIR_MIGRATE_TLS VIR_MIGRATE_NON_SHARED_INC, and VIR_MIGRATE_NON_SHARED_DISK interact together.
13:46:26 mdbooth kashyap: Shiny. Any idea what the performance penalty is for native qemu tls?
13:46:54 kashyap mdbooth: Good news -- there is no nenalty, instead it _removes_ the existing penalty
13:47:10 mdbooth kashyap: I mean over non-tunnelled, non-encrypted.
13:47:26 mdbooth kashyap: I assume it must be at least a bit slower?
13:47:36 kashyap Don't you want to read the "Why" section of my blueprint? I spent non-trivial amount of time writing it :D -- https://blueprints.launchpad.net/nova/+spec/support-qemu-native-tls-for-live-migration
13:47:58 kashyap So, on benchmarks--
13:49:15 kashyap mdbooth: Some moons ago DanPB did the benchmarks. Looking for the right info
13:49:56 mdbooth kashyap: afk, back shortly. Will read scrollback.
13:50:24 cdent scheduler/placement meeting in #opensack-meeting-alt in 10 minutes
13:50:33 cdent or rather in #openstack-meeting-alt
13:50:50 cdent my opensack back of holding is full
13:52:03 sean-k-mooney1 mdbooth: assuming the tls encryption is use aes for the cyper it should be able to offload to the cpu in hardware so the overhead should be minimal
13:53:38 kashyap mdbooth: When you're back, that's the IRC chat with DanPB on benchmarks: http://paste.openstack.org/show/740443/
13:54:11 kashyap mdbooth: That said, I don't have the exact overhead over non-tunnelled, non-encrypted, I'm afraid. But that info is something worth having
13:56:56 ShilpaSD gibi: Hi
13:57:05 gibi ShilpaSD: hi
13:58:51 ShilpaSD gibi: Need help in understanding of oslo_versionedobjects, actually TestObjectVersions.test_versions() is failing on my patch https://review.openstack.org/#/c/474423/
13:58:58 sean-k-mooney1 kashyap: i would be surprised if people are actully migrating over raw tcp in production. even for devstack the recomendation i was given and i give is to use ssh
13:59:13 kashyap Heh, yeah, indeed.
13:59:37 gibi ShilpaSD: give me couple of minutes... I will look at your patch
14:00:06 kashyap sean-k-mooney1: So, I don't know if I should spend time doing the comparison -- as that'll be comparing something not-recommended vs. something highly-recommended
14:00:11 ShilpaSD gibi: yup
14:01:51 sean-k-mooney1 kashyap: i think the security argment shoudl be enough honestly that said its not really much more secure the ssh
14:02:06 ShilpaSD gibi: referred Nova https://github.com/openstack/nova/blob/master/nova/tests/unit/objects/test_objects.py#L1199, and there notification related classes are not counted, similarly removed from my patch, but no sucess
14:02:25 sean-k-mooney1 kashyap: i would suspect over time however the native tls will be more secure and more efficent
14:02:49 kashyap sean-k-mooney1: Not only that, will completely deprecate the 'tunnelled'
14:03:05 mdbooth kashyap: Thanks.
14:03:20 kashyap sean-k-mooney1: See the blueprint, I the deprecation reason there
14:03:26 kashyap s/I the/I mentioned the/
14:03:31 sean-k-mooney1 kashyap: tls is still more annoying to deploy vs jsut exchaning ssh keys
14:03:41 kashyap sean-k-mooney1: Also your reviewer eyes are welcome, too
14:03:52 mdbooth kashyap: I was just thinking that if, as sean-k-mooney1 suggests, the overhead over the current default is negligible, we should default to it.
14:04:02 kashyap sean-k-mooney1: Tell me all about it :-) Let me show the document I wrote -- see the scrollbar for its setup
14:04:06 mdbooth If they have TLS correctly configured, that is.
14:04:22 kashyap sean-k-mooney1: That's from-scratch setup: https://kashyapc.fedorapeople.org/Native-TLS/Setup-for-NBD-and-migration-streams-over-TLS.rst.txt
14:04:25 kashyap See the side-bar
14:04:33 mdbooth kashyap: And you'd emit a warning if TLS isn't correctly configured.
14:04:51 kashyap mdbooth: We're not touching any defaults at all.
14:04:53 mdbooth kashyap: With perhaps a config option to turn that warning into an error.
14:05:02 sean-k-mooney1 kashyap: so as long a libvirt suppors ssh i think we shoudl support it in nova enven if we dont recommend it for new deployments
14:05:08 mdbooth kashyap: ack, understood.
14:05:41 kashyap Just to refresh your memory, today if a Nova user wants any encryption at all, they need to explicitly configure: live_migration_tunnelled

Earlier   Later