| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2019-11-06 | |||
| 19:48:14 | mriedem | nobody calls haproxy dumb and gets away with it | |
| 19:48:30 | artom | sean-k-mooney, but... OPTIONS / ? | |
| 19:48:38 | artom | That's obviously health check stuff | |
| 19:48:56 | artom | I've like we've gotten sidelined :) | |
| 19:49:03 | sean-k-mooney | well a http options request is use to discover info about the endpoint | |
| 19:49:15 | mriedem | heh, oh boy, someone just reply-all'ed to 400 people internally | |
| 19:49:59 | sean-k-mooney | yes we may have internal maining lists that people dont understand how to unsubsribe form | |
| 19:50:29 | melwitt | unsubsquirrel | |
| 19:50:36 | sean-k-mooney | and they may or may not like to reply all to them to ask for help to the point ^ is now a thing | |
| 19:51:04 | sean-k-mooney | as is http://www.unsubsquirrel.com/ | |
| 19:52:19 | artom | Oh common | |
| 19:52:31 | mriedem | great now i'm playing that game | |
| 19:52:40 | sean-k-mooney | https://scratch.mit.edu/projects/327361863/ is the beeter version | |
| 19:52:48 | artom | I can't believe the obvious "Unsubscribe you? That's nuts!" pun | |
| 19:52:52 | artom | *they missed | |
| 19:53:28 | melwitt | open a PR | |
| 19:54:52 | artom | Ah no, if you refresh enough times you get it | |
| 19:55:20 | melwitt | oh yeah, I see https://github.com/joellord/subsquirrel/blob/master/index.html#L33 | |
| 20:13:01 | openstack | bug 1849657 in OpenStack Compute (nova) " allocation key is missing from the binding:profile of the neutron qos port when the server is created by a non-admin user" [Medium,In progress] https://launchpad.net/bugs/1849657 - Assigned to Balazs Gibizer (balazs-gibizer) | |
| 20:13:01 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Regression test for bug 1849657 https://review.opendev.org/693248 | |
| 20:24:30 | efried | artom: paste? | |
| 20:26:25 | efried | sean-k-mooney: So the one where I added --with-apparmor_profiles and --prefix=/usr failed, but the one where I added that symlink and rebooted succeeded. | |
| 20:27:04 | sean-k-mooney | efried: ok so i need to work on proper apparmor support in a follow up | |
| 20:27:51 | sean-k-mooney | i may have spent the last 3 hour fixing my openstack that i broke but im testing it on a clean vm right now | |
| 20:28:11 | efried | [75800.085042] netlink: 'ovs-vswitchd': attribute type 5 has an invalid length. | |
| 20:28:11 | efried | sean-k-mooney: the symptoms are all the same, except dmesg in addition to those apparmor="DENIED" messages also shows things like | |
| 20:28:11 | efried | [75800.085251] device br-int entered promiscuous mode | |
| 20:28:54 | sean-k-mooney | the other message are normal | |
| 20:29:16 | sean-k-mooney | but you still got the denie message with the profiles comipled in ya | |
| 20:29:46 | efried | well, I'm taking it on faith that "profiles are compiled in". | |
| 20:30:05 | efried | + ./configure --prefix=/usr | |
| 20:30:05 | efried | and | |
| 20:30:05 | efried | - ./autogen.sh --system | |
| 20:30:05 | efried | - ./configure | |
| 20:30:05 | efried | + ./autogen.sh --system --with-apparmor_profiles | |
| 20:30:07 | sean-k-mooney | im not sure if you have to pass that flage to autogen or configure | |
| 20:30:27 | efried | iiuc either one of those should have worked by itself, no? | |
| 20:30:51 | sean-k-mooney | the profies are hardcoded to no | |
| 20:30:55 | efried | because apparmor's snit was with libvirt not being in the right dir? | |
| 20:31:12 | sean-k-mooney | so if you dont explcitly pass the flag they wont be generated | |
| 20:31:31 | sean-k-mooney | it was unhapy with qemu not being in the correct location | |
| 20:31:42 | sean-k-mooney | the --system puts libvirt in the correct place | |
| 20:32:04 | efried | so if I do that symlink thing and reboot, I just have to unstack and restack, not clean, right? | |
| 20:32:18 | sean-k-mooney | yep | |
| 20:32:31 | sean-k-mooney | you dont need to modify the build either | |
| 20:32:45 | sean-k-mooney | if you add the symlink that should be enough with the patch i have pushed up | |
| 20:33:02 | sean-k-mooney | and the local.conf i shared earlier | |
| 20:33:10 | sean-k-mooney | atleast that is what im testing | |
| 20:33:16 | efried | still at ps3 yah? | |
| 20:33:23 | sean-k-mooney | yep | |
| 20:34:01 | sean-k-mooney | i littally created the sysmlink rebooted, cloned devstack, and created the local.conf http://paste.openstack.org/show/785846/ | |
| 20:34:10 | sean-k-mooney | and now im waiting for it to finish stacking | |
| 20:34:18 | sean-k-mooney | i think that should be all that is required | |
| 20:41:50 | efried | what's the incantation to create a VM I can actually ssh into (from the hypervisor, don't care about external stuff) | |
| 20:42:53 | sean-k-mooney | i normally use openstack or virt-manager to do it | |
| 20:43:39 | sean-k-mooney | what os do you want to do it on | |
| 20:44:22 | efried | I mean create via openstack. --network public doesn't seem to be sufficient, or I'm missing something else. Console log shows the big cirros splash, so I think the thing is up. But trying the IPs I see from `server show` is getting me nothing. | |
| 20:44:48 | sean-k-mooney | oh devsteack? | |
| 20:44:57 | sean-k-mooney | if so the public network has dhcp disabled | |
| 20:45:11 | sean-k-mooney | so you have to trun that on first | |
| 20:45:26 | efried | or get to the console. I don't really even need networking for what I'm doing. | |
| 20:45:37 | efried | (It's kind of embarrassing that I've basically never done this) | |
| 20:45:55 | sean-k-mooney | you have never done a nova boot? | |
| 20:46:12 | sean-k-mooney | or actully tried to ssh in after | |
| 20:46:58 | efried | the latter | |
| 20:47:04 | artom | efried, paste? | |
| 20:47:23 | efried | artom: As in, I might be able to help you with your paste/middleware | |
| 20:47:47 | efried | sean-k-mooney: never cared about the VM itself, just about the bits that get it to ACTIVE state. | |
| 20:49:08 | sean-k-mooney | to enable dhcp do "openstack subnet set --dhcp public" | |
| 20:49:29 | sean-k-mooney | you then need to open ssh in the security groups | |
| 20:51:42 | sean-k-mooney | "openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 default" | |
| 20:51:56 | sean-k-mooney | if you reboot the vm you should then be able to ssh in with | |
| 20:52:26 | sean-k-mooney | openstack server ssh --private -l cirros <vm name> | |
| 20:52:28 | artom | efried, ah, thanks! Tomorrow? If it's still bugging me then | |
| 20:52:34 | efried | artom: sure thing | |
| 20:52:35 | artom | I'm on the hook for the school run now | |
| 20:52:44 | efried | me too in 20 mins | |
| 20:53:06 | eandersson | Fighting heal_allocations is never fun | |
| 20:53:23 | eandersson | I almost wish it was out of tree | |
| 20:54:21 | efried | sean-k-mooney: is it gonna hurt me that my VM currently doesn't think it has an ipv4 address? | |
| 20:54:48 | sean-k-mooney | you dont see one in openstack server show our you cant ping it | |
| 20:57:10 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Use admin neutron client to gather port resource requests https://review.opendev.org/691005 | |
| 20:57:10 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Use admin neutron client to query ports for binding https://review.opendev.org/690999 | |
| 20:57:11 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Use admin neutron client to see if instance has qos ports https://review.opendev.org/691900 | |
| 20:57:31 | sean-k-mooney | efried: if you just want the console url you can do "openstack console url <vm name>" by the way | |
| 20:57:40 | efried | sean-k-mooney: per the console running ifconfig -a | |
| 20:58:01 | sean-k-mooney | oh did you enable dhcp like i said and reboot | |
| 20:58:09 | efried | yeah, the console via browser is pretty clunky, I could make do with that but would rather be able to ssh | |
| 20:58:27 | efried | for one thing, it seems to be bypassing my keyboard driver | |
| 20:58:33 | efried | I can't type qwerty to save my life | |
| 20:58:44 | sean-k-mooney | davorak? | |
| 20:59:05 | efried | there were three security groups, so I set that up for all of them, cause I didn't know which one was the right one. rebooting the vm now | |
| 20:59:08 | efried | yes, dvorak | |
| 20:59:13 | efried | for nearly 20 years. | |
| 20:59:25 | sean-k-mooney | ... i see | |
| 20:59:33 | sean-k-mooney | anyway am if your in the vm | |
| 20:59:42 | efried | can't imagine how a console through a browser is using its own kb driver | |
| 20:59:47 | mriedem | note that those 3 fixes above are gibi's and pretty straight-forward | |
| 20:59:48 | efried | but whatever | |
| 20:59:50 | mriedem | i'm +2 on all 3 | |