Earlier  
Posted Nick Remark
#openstack-nova - 2019-11-06
19:46:50 openstackgerrit Archit Modi proposed openstack/nova stable/train: Revert "openstack server create" to "nova boot" in nova docs https://review.opendev.org/693241
19:47:14 openstackgerrit Archit Modi proposed openstack/nova stable/stein: Revert "openstack server create" to "nova boot" in nova docs https://review.opendev.org/693242
19:47:30 sean-k-mooney ha proxy is dumb and know nothing about the request id. iw we are seeing multipel request with the same request id its form heat/novaclient reusing the request id i woudl suspect
19:48:10 sean-k-mooney its a vm create so it might use the same request id to poll for its completion
19:48:11 artom sean-k-mooney, wait, so heat would be creating the whole stack with a single request ID?
19:48:12 artom Fun
19:48:14 mriedem nobody calls haproxy dumb and gets away with it
19:48:30 artom sean-k-mooney, but... OPTIONS / ?
19:48:38 artom That's obviously health check stuff
19:48:56 artom I've like we've gotten sidelined :)
19:49:03 sean-k-mooney well a http options request is use to discover info about the endpoint
19:49:15 mriedem heh, oh boy, someone just reply-all'ed to 400 people internally
19:49:59 sean-k-mooney yes we may have internal maining lists that people dont understand how to unsubsribe form
19:50:29 melwitt unsubsquirrel
19:50:36 sean-k-mooney and they may or may not like to reply all to them to ask for help to the point ^ is now a thing
19:51:04 sean-k-mooney as is http://www.unsubsquirrel.com/
19:52:19 artom Oh common
19:52:31 mriedem great now i'm playing that game
19:52:40 sean-k-mooney https://scratch.mit.edu/projects/327361863/ is the beeter version
19:52:48 artom I can't believe the obvious "Unsubscribe you? That's nuts!" pun
19:52:52 artom *they missed
19:53:28 melwitt open a PR
19:54:52 artom Ah no, if you refresh enough times you get it
19:55:20 melwitt oh yeah, I see https://github.com/joellord/subsquirrel/blob/master/index.html#L33
20:13:01 openstack bug 1849657 in OpenStack Compute (nova) " allocation key is missing from the binding:profile of the neutron qos port when the server is created by a non-admin user" [Medium,In progress] https://launchpad.net/bugs/1849657 - Assigned to Balazs Gibizer (balazs-gibizer)
20:13:01 openstackgerrit Matt Riedemann proposed openstack/nova master: Regression test for bug 1849657 https://review.opendev.org/693248
20:24:30 efried artom: paste?
20:26:25 efried sean-k-mooney: So the one where I added --with-apparmor_profiles and --prefix=/usr failed, but the one where I added that symlink and rebooted succeeded.
20:27:04 sean-k-mooney efried: ok so i need to work on proper apparmor support in a follow up
20:27:51 sean-k-mooney i may have spent the last 3 hour fixing my openstack that i broke but im testing it on a clean vm right now
20:28:11 efried [75800.085042] netlink: 'ovs-vswitchd': attribute type 5 has an invalid length.
20:28:11 efried sean-k-mooney: the symptoms are all the same, except dmesg in addition to those apparmor="DENIED" messages also shows things like
20:28:11 efried [75800.085251] device br-int entered promiscuous mode
20:28:54 sean-k-mooney the other message are normal
20:29:16 sean-k-mooney but you still got the denie message with the profiles comipled in ya
20:29:46 efried well, I'm taking it on faith that "profiles are compiled in".
20:30:05 efried + ./configure --prefix=/usr
20:30:05 efried and
20:30:05 efried - ./autogen.sh --system
20:30:05 efried - ./configure
20:30:05 efried + ./autogen.sh --system --with-apparmor_profiles
20:30:07 sean-k-mooney im not sure if you have to pass that flage to autogen or configure
20:30:27 efried iiuc either one of those should have worked by itself, no?
20:30:51 sean-k-mooney the profies are hardcoded to no
20:30:55 efried because apparmor's snit was with libvirt not being in the right dir?
20:31:12 sean-k-mooney so if you dont explcitly pass the flag they wont be generated
20:31:31 sean-k-mooney it was unhapy with qemu not being in the correct location
20:31:42 sean-k-mooney the --system puts libvirt in the correct place
20:32:04 efried so if I do that symlink thing and reboot, I just have to unstack and restack, not clean, right?
20:32:18 sean-k-mooney yep
20:32:31 sean-k-mooney you dont need to modify the build either
20:32:45 sean-k-mooney if you add the symlink that should be enough with the patch i have pushed up
20:33:02 sean-k-mooney and the local.conf i shared earlier
20:33:10 sean-k-mooney atleast that is what im testing
20:33:16 efried still at ps3 yah?
20:33:23 sean-k-mooney yep
20:34:01 sean-k-mooney i littally created the sysmlink rebooted, cloned devstack, and created the local.conf http://paste.openstack.org/show/785846/
20:34:10 sean-k-mooney and now im waiting for it to finish stacking
20:34:18 sean-k-mooney i think that should be all that is required
20:41:50 efried what's the incantation to create a VM I can actually ssh into (from the hypervisor, don't care about external stuff)
20:42:53 sean-k-mooney i normally use openstack or virt-manager to do it
20:43:39 sean-k-mooney what os do you want to do it on
20:44:22 efried I mean create via openstack. --network public doesn't seem to be sufficient, or I'm missing something else. Console log shows the big cirros splash, so I think the thing is up. But trying the IPs I see from `server show` is getting me nothing.
20:44:48 sean-k-mooney oh devsteack?
20:44:57 sean-k-mooney if so the public network has dhcp disabled
20:45:11 sean-k-mooney so you have to trun that on first
20:45:26 efried or get to the console. I don't really even need networking for what I'm doing.
20:45:37 efried (It's kind of embarrassing that I've basically never done this)
20:45:55 sean-k-mooney you have never done a nova boot?
20:46:12 sean-k-mooney or actully tried to ssh in after
20:46:58 efried the latter
20:47:04 artom efried, paste?
20:47:23 efried artom: As in, I might be able to help you with your paste/middleware
20:47:47 efried sean-k-mooney: never cared about the VM itself, just about the bits that get it to ACTIVE state.
20:49:08 sean-k-mooney to enable dhcp do "openstack subnet set --dhcp public"
20:49:29 sean-k-mooney you then need to open ssh in the security groups
20:51:42 sean-k-mooney "openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 default"
20:51:56 sean-k-mooney if you reboot the vm you should then be able to ssh in with
20:52:26 sean-k-mooney openstack server ssh --private -l cirros <vm name>
20:52:28 artom efried, ah, thanks! Tomorrow? If it's still bugging me then
20:52:34 efried artom: sure thing
20:52:35 artom I'm on the hook for the school run now
20:52:44 efried me too in 20 mins
20:53:06 eandersson Fighting heal_allocations is never fun
20:53:23 eandersson I almost wish it was out of tree
20:54:21 efried sean-k-mooney: is it gonna hurt me that my VM currently doesn't think it has an ipv4 address?
20:54:48 sean-k-mooney you dont see one in openstack server show our you cant ping it
20:57:10 openstackgerrit Matt Riedemann proposed openstack/nova master: Use admin neutron client to gather port resource requests https://review.opendev.org/691005
20:57:10 openstackgerrit Matt Riedemann proposed openstack/nova master: Use admin neutron client to query ports for binding https://review.opendev.org/690999
20:57:11 openstackgerrit Matt Riedemann proposed openstack/nova master: Use admin neutron client to see if instance has qos ports https://review.opendev.org/691900
20:57:31 sean-k-mooney efried: if you just want the console url you can do "openstack console url <vm name>" by the way
20:57:40 efried sean-k-mooney: per the console running ifconfig -a
20:58:01 sean-k-mooney oh did you enable dhcp like i said and reboot
20:58:09 efried yeah, the console via browser is pretty clunky, I could make do with that but would rather be able to ssh
20:58:27 efried for one thing, it seems to be bypassing my keyboard driver
20:58:33 efried I can't type qwerty to save my life
20:58:44 sean-k-mooney davorak?
20:59:05 efried there were three security groups, so I set that up for all of them, cause I didn't know which one was the right one. rebooting the vm now
20:59:08 efried yes, dvorak
20:59:13 efried for nearly 20 years.

Earlier   Later