Earlier  
Posted Nick Remark
#openstack-nova - 2019-07-16
13:27:24 efried kashyap: Yeah
13:27:49 kashyap Yeah, just double-confirming. Just checked with DanPB, he said he hasn't looked at the v5 libvirt series yet
13:27:49 efried like, the base design (what we have merged) could be completed any time somebody wanted to pick it up and run with it.
13:28:15 artom lyarwood, yeah, good point, lemme look into that
13:33:09 sean-k-mooney kashyap: has it been released in a libvirt version
13:33:22 kashyap sean-k-mooney: The vTPM state being encrypted?
13:33:26 kashyap No, it is still in review upstream.
13:33:35 kashyap (As noted above)
13:33:50 sean-k-mooney ok then we cant have a feature that depends on that untill its released. not just merged
13:34:00 sean-k-mooney or in this case still under review
13:34:17 sean-k-mooney but unencrypted vTPM can still proceed
13:34:59 kashyap Right, I know the rule. But as long as it is in an upstream libvirt release, it should damn well be fine to have a feature depend on a brand new upstream release
13:35:02 sean-k-mooney it shoudl hopefully be minor to extend unencypted vTPM to encyrpeted once the feature is released
13:35:16 sean-k-mooney yep
13:35:33 sean-k-mooney just need to be in a livirt releases tar
13:35:44 sean-k-mooney it doesnt need to be in a distro
13:36:10 kashyap Right. That's good. In the past there was an absolute bonkers discussion that libvirt release should "bake" in a distro for a month
13:36:18 kashyap ... and receive some "testing" and some such utter nonsense.
13:36:24 kashyap Glad we are doing away with that crap.
13:37:01 sean-k-mooney well the reason for "master is not enough" is like use other porject somtimes merge stuff and revert it before a release
13:37:19 sean-k-mooney so it has to be released but it does not need to be packaged
13:37:47 kashyap sean-k-mooney: Right, I'm with you on that -- so long as it's in a released tarball, we should be (and are) good.
13:41:13 tssurya thanks gibi :)
13:44:05 artom lyarwood, wrote some words on https://review.opendev.org/#/c/670645/2
13:44:19 efried artom: btw, I did *not* get around to opening that bug yesterday.
13:44:25 efried in case you had a yen to do it
13:45:29 artom lyarwood, if you agree with said words, I shall do the needful for that as well
13:46:58 lyarwood artom: I am if we can run A against stable/stein, I'm not sure that we can
13:47:21 lyarwood artom: A being OVS hybrid same host
13:47:25 sean-k-mooney artom: that is the backport
13:47:36 artom lyarwood, any reason we can't add it to stein's experimental job?
13:47:45 artom sean-k-mooney, yeah, lyarwood is concerned about testing
13:47:49 artom (rightfully so)
13:48:09 lyarwood artom: yeah I just don't know if we just inherit that all from master or if we need to change stuff
13:48:13 sean-k-mooney you should be able to backport the DNM test
13:48:21 lyarwood I'll try experimental first and go from there
13:48:46 sean-k-mooney and merge in the neutorn-iptabels job too if needed
13:49:23 artom And since https://review.opendev.org/#/c/670593/1 popped up when looking through my reviews trying to find the one where efried'd bug manifested itself, it'd be cool if someone could look at that as well, but there's no "natural" person for that area (simple change, but involved understanding SRIOV and device tagging)
13:49:50 sean-k-mooney lyarwood: we do not have teh iptables job in the experimental pipline on stable/*
13:50:23 lyarwood sean-k-mooney: kk so we need a DNM change right?
13:50:32 lyarwood sean-k-mooney: sorry I wasn't sure which part you were talking about above :D
13:51:12 sean-k-mooney i have https://review.opendev.org/#/c/664442/ but i need to add the neutron iptables jobs and backport it
13:51:49 artom sean-k-mooney, you have to split the 2 changes as well
13:52:03 artom Because we need to test multi-host both without and with hybrid plug
13:52:05 sean-k-mooney i can create a version that will drop the unneeded jobs and just have teh two we need and propsoe the backpor if ye want
13:52:29 artom sean-k-mooney, I'd really appreciated if you handled covering all the test cases, yeah :)
13:53:31 sean-k-mooney so we need 3 or 4 test jobs
13:54:37 artom sean-k-mooney, 3, for cases A, B, D
13:54:46 artom A = neutron-tempest-iptables_hybrid
13:55:20 artom D = first half of https://review.opendev.org/#/c/664442/ (run revert tests in nova-live-migration)
13:55:26 sean-k-mooney b and d is the neutorn multinode job with and without iptables?
13:55:42 artom B = second half of https://review.opendev.org/#/c/664442/ (iptables in nova-live-migration/nova-multinode)
13:55:46 sean-k-mooney ok i can go do that now
13:56:24 sean-k-mooney *nova-multinode which was nova-live-migration
13:58:50 mdbooth Folks, I'm undecided on https://review.opendev.org/#/c/671023/ . It looks to me like a customer actually hit this race in practise while running a heat stack. However, in general I suspect it's fairly uncommon. My preference is generally to fix this stuff, but this kind of cleanup also tends to go ignored. Is a fix for this likely to be of interest?
14:00:27 openstackgerrit Merged openstack/nova master: Remove Rocky-era min compute trusted certs compat check https://review.opendev.org/669539
14:01:05 sean-k-mooney assuming your runit test actully repoduced the race then it should be fairly staitforwad to show your patch is correct
14:01:37 sean-k-mooney so as long as the fix is not too invasive i dont see why this would be contovertial
14:01:45 sean-k-mooney but i dont know
14:03:10 sean-k-mooney its a race that is proably not hard to debug so if we dont fix it now it will proably bite us later
14:04:05 mdbooth sean-k-mooney: It will require a refactor of a method in libvirt.guest. Nobody likes refactors.
14:04:29 sean-k-mooney mdbooth: can you do it without changing the api signiture
14:04:42 mdbooth Of course, it's internal to the libvirt driver.
14:05:08 sean-k-mooney by api signiture i ment the signiture of the funtion
14:05:30 mdbooth Yes, probably, although the function signature does also need to be fixed.
14:06:51 sean-k-mooney as you said the guest stuff shoudl be internal to the libvirt driver so your e not modifying the virt direver api so it should be fine to backport
14:07:27 artom efried, hah, see where else that error popped up: http://logs.openstack.org/09/666409/8/check/tempest-full-py3/38bf84e/job-output.txt#_2019-07-14_17_19_10_677555
14:07:42 mdbooth sean-k-mooney: That's fine. I'm more interested to know if anybody cares. If nobody cares I'm not going to fix it.
14:07:53 yonglihe efried: per the run queue, there is 2.75 ahead my patch, seems i better moving to 2.76 in advance?
14:07:56 efried artom: okay, so we should sort this out.
14:08:01 mdbooth sean-k-mooney: It's bad for my mental health ;)
14:08:08 sean-k-mooney mdbooth: well at least we have the bug and a repoducer unit test
14:08:19 efried yonglihe: You mean in the runway queue?
14:08:23 sean-k-mooney so if you dont fix it someone else can at a later date
14:08:33 artom efried, there aren't that many hits, but yeah, our theory from last night is pretty much confirmed
14:08:43 yonglihe efried, yeah.
14:09:19 efried yonglihe: Tough call. Just because it's ahead of you in the runway queue doesn't mean it'll get reviewed first. If you go to 2.76, you'll also need to stack yours on top of the 2.75 one, which is pretty weird since there's no actual dependency.
14:09:19 yonglihe 'power-update' might take the 2.75
14:09:31 efried probably just best to ride it out.
14:09:47 yonglihe ok, let's see what happens then.
14:10:08 artom efried, in my experience it was basically a race to see which one lands first, and then the other person is stuck rebasing
14:10:10 efried artom: test_delete_server_while_in_building_state sounds like a test designed to expose this bug.
14:10:16 mdbooth artom: Is that holding up your revert resize change, btw?
14:10:18 artom efried, for serious
14:10:23 artom mdbooth, what is?
14:10:34 mdbooth artom: I don't know, that's what I'm asking.
14:10:36 sean-k-mooney mdbooth: the revert resize change has merged
14:10:45 yonglihe btw, the corresponding novaclent patch realse released: https://review.opendev.org/#/c/670790/
14:10:46 mdbooth sean-k-mooney artom: \o/
14:10:47 artom mdbooth, no, this is unrelated, something that efried noticed last night
14:11:06 sean-k-mooney mdbooth: on master. im working on creating a DNM patch to test stable
14:11:18 artom sean-k-mooney, patch_ES_ :)
14:11:26 sean-k-mooney artom has the backport alreay up
14:11:42 sean-k-mooney artom: im going to do 1 patch with 3 jobs
14:12:05 mdbooth [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid
14:12:21 sean-k-mooney its a dnm patch so i have no issue with copy pasting the job definiton and just not seting iptabels in one of them
14:12:22 mdbooth I bet I'm the only person to see that regularly :)
14:13:32 sean-k-mooney mdbooth: are you doing multi node but have not syncted your clock on each of the hosts
14:14:03 openstack Launchpad bug 1836754 in OpenStack Compute (nova) "Conflict when deleting allocations for an instance that hasn't finished building" [Undecided,New]
14:14:03 artom efried, https://bugs.launchpad.net/nova/+bug/1836754 Should I also propose something for elastic-recheck?

Earlier   Later