| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2019-11-06 | |||
| 21:04:42 | efried | sean-k-mooney: | |
| 21:04:54 | sean-k-mooney | add -4 | |
| 21:04:59 | mriedem | start about 3 minutes in | |
| 21:05:04 | mriedem | ignore all of the volume multiattach stuff | |
| 21:05:06 | sean-k-mooney | unless you have routable ipv6 | |
| 21:05:27 | sean-k-mooney | if you do you need to change teh --remote-ip to allow ipv6 trafic | |
| 21:05:56 | sean-k-mooney | efried: you cans also just use ssh directly if you know the ip | |
| 21:06:06 | efried | ah, but I can ssh to the IP... yes | |
| 21:06:22 | efried | I don't think I can ipv6 at all | |
| 21:06:49 | ioni | g like lxd/openvz | |
| 21:06:49 | ioni | hello guys, i'm using openstack in production and also sadly still use openvz and i plan to move away from it in the near future. is there a project that i can use with openstack to orchestrate containers like openvz. lxd seems the same but nova-lxd is not maintained anymore and everything that i can find related to openstack and containers is mostly related to docker and kubernets but not somethin | |
| 21:07:01 | efried | adding -4 also made the openstack command work | |
| 21:07:11 | sean-k-mooney | efried: the firewall is blocking all ipv6 into the vm by default | |
| 21:07:19 | mriedem | ioni: zun | |
| 21:07:31 | efried | sokay, I'm pretty sure ipv6 is never going to catch on anyway. I'll just use v4 | |
| 21:07:34 | efried | thanks for the help, again. | |
| 21:08:09 | sean-k-mooney | haha i spend like a full weekend getting it working at home like a month ago | |
| 21:08:48 | sean-k-mooney | i dont have native ipv6 at home so had to set up tunneling and then route it into openstack so that my vms get public ipv6 adresses | |
| 21:08:55 | mriedem | "how do i ssh into a guest in devstack" <3 days later> "wait, you don't need ipv6 with numa and dpdk? oh, well then..." | |
| 21:09:35 | sean-k-mooney | :) | |
| 21:09:47 | sean-k-mooney | mriedem: actully regarding multi attach | |
| 21:09:51 | mriedem | stop | |
| 21:09:56 | sean-k-mooney | what file system do you use? | |
| 21:10:08 | mriedem | in this demo? | |
| 21:10:12 | sean-k-mooney | in general | |
| 21:10:18 | mriedem | i don't | |
| 21:10:22 | sean-k-mooney | i dont think we mention it in the docs | |
| 21:10:24 | sean-k-mooney | ok | |
| 21:10:33 | mriedem | multiattach docs are mostly in cinder | |
| 21:10:47 | sean-k-mooney | ah o should read those at some point | |
| 21:11:04 | mriedem | https://docs.openstack.org/cinder/latest/admin/blockstorage-volume-multiattach.html | |
| 21:11:07 | mriedem | doesn't really go into details either | |
| 21:11:15 | ioni | mriedem, zun seems that it uses docker and is not something that i can replace openvz with | |
| 21:11:29 | sean-k-mooney | i was thinking of using it for k8s on openstack but it seamed complicated | |
| 21:11:30 | mriedem | efried: so about 9 minutes into that demo i'm creating a floating ip for the port attached to the server | |
| 21:13:00 | mriedem | might be useful if i just wrote this up into devstack docs | |
| 21:13:27 | sean-k-mooney | mriedem: i think there used to be an exersie that coverd it | |
| 21:13:36 | sean-k-mooney | but i cant find it | |
| 21:14:00 | mriedem | ioni: nova isn't really big on containers, it's basically vms and a front end for ironic baremetal, | |
| 21:14:24 | mriedem | nova-lxd is a thing out of tree as you know, openvz is in who knows what kind of maintenance state, and then there is libvirt+lxc which is also - who really knows if it works very well right now | |
| 21:15:22 | mriedem | of course with cirros you can just login with a password | |
| 21:15:25 | efried | sean-k-mooney: presumably I could have done all that dhcp and security group nonsense before creating the vm | |
| 21:15:41 | sean-k-mooney | efried: yes and you only have to do it once | |
| 21:15:54 | sean-k-mooney | efried: also i normally do it all via horizon as its faster | |
| 21:15:54 | efried | k, writing myself a cheat sheet | |
| 21:16:10 | efried | ew, gui | |
| 21:16:21 | sean-k-mooney | the cli is faster for most things but security groups are a pain on the cli | |
| 21:16:46 | efried | cheat sheet line for that: | |
| 21:16:47 | efried | openstack security group list -f value -c ID | xargs -n1 openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 | |
| 21:17:02 | sean-k-mooney | efried: anyway as i said once you have the command you need to run. just put them in a file called local.sh and it will be run at the right time | |
| 21:17:44 | sean-k-mooney | oh is in the default local.sh in samples/local.sh | |
| 21:17:53 | sean-k-mooney | just copy that up one directory | |
| 21:18:48 | efried | hm, I thought I did all the right things on my other setup, but I'm still getting no route to host. | |
| 21:18:55 | efried | aaand gotta run get a kid | |
| 21:21:26 | melwitt | ioni: I see mention of openvz in the original proposal for the magnum project https://specs.openstack.org/openstack/magnum-specs/specs/pre-ocata/implemented/containers-service.html but I don't know if it supports it today | |
| 21:23:28 | sean-k-mooney | melwitt: ioni magnum is a different usage model | |
| 21:23:45 | sean-k-mooney | nova libvirt/lxc woudl be the closest | |
| 21:24:02 | melwitt | oh ok | |
| 21:24:10 | ioni | i just want to stop using openvz and migrate the current containers to something orchestrated by openstack with good support | |
| 21:24:28 | ioni | nova-lxd was something i could use but that was dropped recently by canonical | |
| 21:24:46 | sean-k-mooney | ioni: well there isnt really a good path forward if you also want the nova api | |
| 21:25:04 | sean-k-mooney | zun will work with docker style container but not system contianers | |
| 21:25:09 | sean-k-mooney | as far as i know | |
| 21:25:21 | ioni | right, that is want i found as well | |
| 21:25:32 | sean-k-mooney | nova libvirt wiht lxc could work but it does not have good support a the momemnt | |
| 21:25:51 | sean-k-mooney | if there was a lot of interest in it it would not take that much to get it working well again | |
| 21:26:26 | ioni | everybody told me that lxc support is not that great and was too scared to try it | |
| 21:26:48 | sean-k-mooney | its not but its not that far form being ok | |
| 21:27:31 | sean-k-mooney | the openvz driver is proably the best supproted fo all the nova conatiner drivers at the moment | |
| 21:27:43 | sean-k-mooney | it has not reaaly been a focus of nova of late | |
| 21:29:17 | openstackgerrit | Merged openstack/python-novaclient master: doc: Fix supported version descriptions https://review.opendev.org/693097 | |
| 21:29:29 | mriedem | i'm guessing the openvz 3rd party ci is still busted | |
| 21:30:33 | sean-k-mooney | was that the ci that had a hardcoded patch that is now in conclict because we fixed the bug | |
| 21:30:43 | mriedem | yes | |
| 21:31:17 | mriedem | looks like it doesn't even report anymore | |
| 21:31:26 | sean-k-mooney | ya i was just going to say that | |
| 21:31:32 | sean-k-mooney | i have not seen it in a while | |
| 21:31:43 | ioni | sean-k-mooney, alright thanks. i'll take a look at openvz 7 and nova | |
| 21:32:18 | sean-k-mooney | ioni: if you need contianer i would not bet on that long term | |
| 21:33:42 | ioni | sean-k-mooney, indeed, i mostly think that i'll do a container to full kvm migration, but that really sucks | |
| 21:34:39 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Use ListOfUUIDField from oslo.versionedobjects https://review.opendev.org/693258 | |
| 21:34:49 | sean-k-mooney | if you are interested in system contaienr there are afew other like donnyd who also share that interest | |
| 21:35:47 | sean-k-mooney | so we could try and fix/test libvit lxc upstream but its currntly on lifesupprot/hobbyist support | |
| 21:36:20 | sean-k-mooney | kvm will have less desitiny but its deffently the best tested solution | |
| 21:37:41 | sean-k-mooney | night all o/ | |
| 21:37:50 | ioni | thanks for your feedback sean-k-mooney | |
| 22:01:35 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Remove unused 'nova-dsvm-base' job https://review.opendev.org/688389 | |
| 22:03:34 | kisahm | HI together, i have the problem, that 'openstack availability zone list' receives no output. the error message is ConnectFailure: Unable to establish connection to https://nova-url:8774/v2.1/os-availability-zone/detail: ('Connection aborted.', BadStatusLine('No status line received - the server has closed the connection',)) | |
| 22:03:55 | kisahm | nova api/placement shows no errors. | |
| 22:04:13 | kisahm | the request timed out after 90 sec | |
| 22:05:19 | kisahm | openstack queens release, deployed with Juju | |
| 22:07:41 | mriedem | melwitt: dansmith: this isn't bad, but i'm not sure i want to pull the trigger on it - see if you have opinions https://review.opendev.org/#/c/688122/ | |
| 22:07:51 | mriedem | i like the idea of not hitting the synchronized stuff if we have the entry in the cache | |
| 22:10:22 | melwitt | I'm pretty sure Kevin_Zheng proposed the same thing in the past in a simpler way and got nacked. lemme see if I can find | |
| 22:12:11 | kisahm | the nova-api-os-compute.log shows this error: Timed out waiting for response from cell 79275f0e-86b1-4859-aeac-642382585ef4: CellTimeout: Timeout waiting for response from cell | |
| 22:12:57 | mriedem | kisahm: known http://status.openstack.org/elastic-recheck/#1844929 | |
| 22:13:13 | melwitt | mriedem: ^ https://review.opendev.org/#/c/595530/2/nova/context.py | |
| 22:16:00 | mriedem | uh oh, do i see dansmith talking about eventlet + locks in there?! | |
| 22:16:11 | mriedem | dropping that on booth might start a war | |
| 22:16:56 | melwitt | hah | |