| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2019-09-05 | |||
| 09:45:59 | aspiers | it could be an extra spec on the flavor | |
| 09:46:10 | aspiers | hw_uefi_vars or something | |
| 09:46:26 | puiterwijk | Yeah, agreed that that sounds decent | |
| 09:47:07 | aspiers | kashyap: is it worth adding this to http://specs.openstack.org/openstack/nova-specs/specs/train/approved/allow-secure-boot-for-qemu-kvm-guests.html ? | |
| 09:47:14 | puiterwijk | (do note that I'm not too deeply integrated into how Openstack (Nova) do things, other than mostly operational and fixing my own bugs, so it might be that this is not in line iwth their design goals) | |
| 09:47:40 | aspiers | puiterwijk: Yeah I'm not sure about this either but I think it's worth suggesting at least | |
| 09:47:54 | puiterwijk | Yep, agreed. | |
| 09:49:21 | aspiers | OK I just managed to fix my broken devstack so maybe I can finally look inside tiano | |
| 09:49:22 | kashyap | puiterwijk: aspiers: Hmm, 'hw_uefi_vars' idea does sound reasonable -- but would need to tackle that _after_ adding initial SB support in the spec | |
| 09:49:30 | aspiers | kashyap: sure | |
| 09:49:48 | puiterwijk | Sure, that sounds fine | |
| 09:50:02 | kashyap | aspiers: And yeah, it does belong to that spec. Should we "extend" the spec later? Or have an additional BP for this? | |
| 09:51:32 | aspiers | kashyap: Very good questions... | |
| 09:52:09 | kashyap | Probably something additional on top will be simpler process-wise. | |
| 09:52:30 | puiterwijk | The problem with adding it on top is: how do the two work together then? | |
| 09:52:49 | puiterwijk | i.e. if I request secureboot per the current blueprint, and then in the later one I ask for another firmware that doesn't have secureboot? | |
| 09:53:00 | kashyap | Heh | |
| 09:53:37 | puiterwijk | (My suggestion would be "if the requested vars isn't secureboot, and secureboot is asked, return error due to invalid config") | |
| 09:53:42 | puiterwijk | or invalid request* | |
| 09:53:44 | kashyap | puiterwijk: I mean, they're _related_ topics, and will be designed to work together | |
| 09:54:06 | aspiers | kashyap: I think it might work as a flavor extra spec | |
| 09:54:15 | aspiers | so the admin controls exactly which templates are available | |
| 09:54:19 | puiterwijk | kashyap: sure. I'm just thinking of what would need to be thought about if talking about a new BP :) | |
| 09:54:51 | kashyap | puiterwijk: Ah, nod. | |
| 09:54:55 | aspiers | How do I get into the TianoCore settings? Escape doesn't work, goes straight to asking for the encrypted disk password | |
| 09:55:06 | puiterwijk | aspiers: boot without working boot options | |
| 09:55:17 | puiterwijk | i.e. detach the disk | |
| 09:55:36 | aspiers | Erm, not sure I can do that in nova | |
| 09:55:42 | puiterwijk | Oh, inside nova... | |
| 09:55:43 | aspiers | It's not a volume | |
| 09:55:49 | puiterwijk | Yeah, I'm not sure either. | |
| 09:55:53 | aspiers | I guess maybe boot from volume | |
| 09:55:55 | aspiers | kashyap: ideas? | |
| 09:56:14 | puiterwijk | aspiers: so... I know that in the Fedora grub, we have an option to "go to system setup" | |
| 09:56:28 | puiterwijk | (because "go to setup" is available as an UEFI call) | |
| 09:56:29 | aspiers | I can get to the grub commandline | |
| 09:56:42 | aspiers | and I can do chainloader (hd0,gpt2)/efi/... | |
| 09:56:43 | puiterwijk | I don't know the grub cmdline for that option right now, let me see in my config | |
| 09:57:07 | aspiers | I managed to get into mokmanager that way | |
| 09:57:10 | aspiers | or whatever it's called | |
| 09:57:20 | puiterwijk | Oh | |
| 09:57:21 | puiterwijk | "fwsetup" | |
| 09:57:26 | puiterwijk | that's the grub command | |
| 09:57:37 | puiterwijk | } | |
| 09:57:37 | puiterwijk | fwsetup | |
| 09:57:37 | puiterwijk | menuentry 'System setup' $menuentry_id_option 'uefi-firmware' { | |
| 09:57:46 | stephenfin | melwitt: Heh, sorry. That auto-topic thing was killing me downstream and like mriedem I always do 'git checkout -b bug/NNN' (or 'bp/foo') manually first. Also, it was broken with storyboard | |
| 09:58:12 | aspiers | IRC is awesome for apparent non-sequiturs | |
| 09:58:13 | stephenfin | melwitt: mordred reviewed it though so if you _really_ want to blame someone, I suggest blaming him. Everyone else does it :P | |
| 09:58:24 | aspiers | morning stephenfin | |
| 09:58:26 | aspiers | ;-p | |
| 09:58:31 | stephenfin | yo | |
| 09:58:44 | aspiers | puiterwijk: fwsetup is accepted but does nothing | |
| 09:59:18 | kashyap | aspiers: So you got into Grub command-line... | |
| 09:59:41 | stephenfin | I can see four new towers going up just from our window | |
| 09:59:53 | aspiers | kashyap: yes | |
| 09:59:58 | aspiers | stephenfin: try London for a bit | |
| 10:00:21 | stephenfin | once that legislation is passed, sure :) | |
| 10:00:23 | aspiers | I get "error: you need to load the kernel first." | |
| 10:00:48 | stephenfin | til then, I'll stay where food supplies aren't a concern | |
| 10:00:54 | aspiers | :'( | |
| 10:01:12 | aspiers | entirely understandable | |
| 10:01:36 | aspiers | well, more on principle | |
| 10:01:50 | aspiers | no a-hole is going to take away my EU membership | |
| 10:11:43 | sean-k-mooney | i think its funny that they keep talking about people in northerin ireland losing ther eu citizenship give that almost everyone born there is entitled to irish citizen ship grantign them full eu citizenship too | |
| 10:12:09 | aspiers | Yeah they have other things to worry about but not that | |
| 10:12:34 | sean-k-mooney | well not funny in the convnetional sense more tragic that politions in london dont know thats a thing | |
| 10:12:53 | aspiers | half our politicians are totally clueless | |
| 10:13:16 | aspiers | let's not drag this channel down that rathole though | |
| 10:13:32 | sean-k-mooney | quite so | |
| 10:13:59 | sean-k-mooney | its stressful enough watching the news | |
| 10:13:59 | cdent | half? | |
| 10:14:18 | aspiers | cdent: probably more, I was being generous off the back of yesterday | |
| 10:15:14 | cdent | somebody else was trying to tell me that yesterday was a spark of hope, but I'm not sure. But I agree, turning an openstack channel into the brexit-therapy-network is probably a misuse | |
| 10:15:28 | aspiers | it's definitely a spark of hope | |
| 10:15:34 | aspiers | not sure how big but we'll see | |
| 10:19:20 | openstackgerrit | sean mooney proposed openstack/nova master: multi numa nfv testing job https://review.opendev.org/679656 | |
| 10:24:10 | aspiers | kashyap, sean-k-mooney: turns out that my new q35 patch introduced a circular import loop https://review.opendev.org/#/c/680065/ | |
| 10:24:19 | aspiers | so I'm trying to figure out the best way of moving code around | |
| 10:24:33 | kashyap | aspiers: Did it? Will look in a bit; buried in untangling something :-( | |
| 10:25:02 | aspiers | see discussion with efried last night http://eavesdrop.openstack.org/irclogs/%23openstack-nova/%23openstack-nova.2019-09-04.log.html#t2019-09-04T20:57:14 | |
| 10:25:09 | sean-k-mooney | aspiers: between what | |
| 10:25:26 | aspiers | between virt.hardware and libvirt.utils | |
| 10:25:46 | aspiers | and also libvirt.driver in between which imports libvirt.utils | |
| 10:25:54 | sean-k-mooney | right virt.hardware cant call the libvirt code | |
| 10:26:06 | aspiers | so there are some options for how to fix this | |
| 10:26:34 | aspiers | hmm, need a cloud-based sequence diagram editor now to help discuss this | |
| 10:27:01 | sean-k-mooney | i see what your importing | |
| 10:27:25 | aspiers | sean-k-mooney: it affects the next apply-config patch too | |
| 10:27:48 | aspiers | one option is to move sev_enabled from utils to hardware | |
| 10:28:14 | sean-k-mooney | actully libvit.utils does not use teh hardware module | |
| 10:28:30 | sean-k-mooney | so you shoudl be able to import that form hardware.py | |
| 10:28:53 | sean-k-mooney | aspiers: well they should be in hardware.py anyway | |
| 10:28:58 | aspiers | sean-k-mooney: https://review.opendev.org/#/c/644565/51/nova/virt/libvirt/utils.py@38 | |
| 10:29:17 | sean-k-mooney | oh you adding it in another patch | |
| 10:29:25 | aspiers | another option is a new machine_types.py | |
| 10:29:35 | aspiers | a third option efried suggested is a new virt.libvirt.hardware | |
| 10:30:05 | openstackgerrit | Luyao Zhong proposed openstack/nova master: object: Introduce Resource and ResourceList objs https://review.opendev.org/678448 | |
| 10:30:06 | openstackgerrit | Luyao Zhong proposed openstack/nova master: Retrieve the allocations early https://review.opendev.org/678450 | |
| 10:30:06 | openstackgerrit | Luyao Zhong proposed openstack/nova master: Add resources dict into _Provider https://review.opendev.org/678449 | |