Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2020-10-12
11:27:09 openstackgerrit zhanghao proposed openstack/nova master: Fix virsh domifstat to get vhostuser vif statistics https://review.opendev.org/757448
11:42:24 openstackgerrit Wenping Song proposed openstack/python-novaclient master: Remove Babel requirement https://review.opendev.org/757541
12:33:44 openstackgerrit Merged openstack/python-novaclient master: Cleanup py27 support https://review.opendev.org/757513
12:50:23 openstackgerrit Wenping Song proposed openstack/python-novaclient master: Remove Babel from lower-constraints.txt https://review.opendev.org/757541
13:20:32 gibi dansmith, melwitt, gmann: responded in https://review.opendev.org/#/c/731396
14:01:52 openstackgerrit Andrew Bonney proposed openstack/nova master: Handle disabled CPU features to fix live migration failures https://review.opendev.org/757577
14:02:23 sean-k-mooney does anyone remember why we use psycopg2 and not psycopg2-binary in our test requirements
14:03:06 sean-k-mooney its come up a few times before but it would be nice if we could swap to the binary wheel instead of having to instlal postgress dev libs to build the python bindingsx
15:46:18 openstackgerrit Merged openstack/python-novaclient master: Remove Babel from lower-constraints.txt https://review.opendev.org/757541
15:53:52 openstackgerrit Mark Goddard proposed openstack/nova master: Fix PCI passthrough race on reschedule (claims) https://review.opendev.org/710847
16:13:26 openstackgerrit melanie witt proposed openstack/nova stable/victoria: Follow up for cherry-pick check for merge patch https://review.opendev.org/757613
16:14:06 openstackgerrit Balazs Gibizer proposed openstack/nova master: Allow extending an existing instance allocation https://review.opendev.org/757109
16:14:06 openstackgerrit Balazs Gibizer proposed openstack/nova master: Refactor _claim_pci_device_for_interface_attach to prepare for qos https://review.opendev.org/756895
16:15:30 openstackgerrit Balazs Gibizer proposed openstack/nova master: Make remove allocation symmetric with add allocation https://review.opendev.org/757110
16:15:31 openstackgerrit Balazs Gibizer proposed openstack/nova master: Support interface attach with qos ports https://review.opendev.org/756530
16:15:31 openstackgerrit Balazs Gibizer proposed openstack/nova master: Factor out port resource deallocation https://review.opendev.org/757111
16:15:32 openstackgerrit Balazs Gibizer proposed openstack/nova master: Remove unused Instance method https://review.opendev.org/757615
16:15:32 openstackgerrit Balazs Gibizer proposed openstack/nova master: Refactor update_pci_request_spec_with_allocated_interface_name https://review.opendev.org/757614
16:16:54 openstackgerrit Stephen Finucane proposed openstack/nova stable/victoria: libvirt: 'video.vram' property must be an integer https://review.opendev.org/757616
16:17:46 openstackgerrit Stephen Finucane proposed openstack/nova stable/ussuri: libvirt: 'video.vram' property must be an integer https://review.opendev.org/757617
16:18:24 openstackgerrit Stephen Finucane proposed openstack/nova stable/train: libvirt: 'video.vram' property must be an integer https://review.opendev.org/757618
16:59:45 openstackgerrit Balazs Gibizer proposed openstack/nova master: Support interface attach with qos ports https://review.opendev.org/756530
20:31:29 openstackgerrit melanie witt proposed openstack/nova master: Add note about setting CONF.compute.max_disk_devices_to_attach = 0 https://review.opendev.org/755360
20:48:42 openstackgerrit melanie witt proposed openstack/nova master: Disallow CONF.compute.max_disk_devices_to_attach = 0 https://review.opendev.org/755360
22:47:09 openstackgerrit melanie witt proposed openstack/nova master: Prevent archiving of pci_devices records because of 'instance_uuid' https://review.opendev.org/757656
22:53:52 openstackgerrit melanie witt proposed openstack/nova master: Prevent archiving of pci_devices records because of 'instance_uuid' https://review.opendev.org/757656
#openstack-nova - 2020-10-13
01:02:20 openstackgerrit zhanghao proposed openstack/nova master: Fix virsh domifstat to get vhostuser vif statistics https://review.opendev.org/757448
07:18:05 openstackgerrit zhanghao proposed openstack/nova master: Fix virsh domifstat to get vhostuser vif statistics https://review.opendev.org/757448
08:30:43 openstackgerrit Jorhson Deng proposed openstack/nova master: add task state for attach volume and detach volume https://review.opendev.org/754258
09:37:31 lyarwood this might be the 4am baby feed but shouldn't we be able to run individual func tests using `tox -e functional $path.to.test.file` ?
09:37:45 lyarwood ERROR: InvocationError for command /home/lyarwood/redhat/devel/src/openstack/nova/.tox/functional/bin/stestr --test-path=./nova/tests/functional run nova.tests.functional.regressions.bug_az_vol
09:38:01 lyarwood is what I'm getting, did I miss a memo or is there likely something wrong in the test itself?
09:38:32 lyarwood ah wait, the filename needs to be test_
09:39:37 gibi lyarwood: don't be too hard on yourself (and the keyboard)
09:40:16 lyarwood gibi: ^_^
14:06:43 openstackgerrit Rodrigo Barbieri proposed openstack/nova stable/train: Allow tap interface with multiqueue https://review.opendev.org/757870
14:32:23 mnaser sean-k-mooney: have you played around with sriov + mlx cards?
14:32:33 mnaser i'm having instance creation failures with errors like this: `group 13 is not viable\nPlease ensure all devices within the iommu_group are bound to their vfio bus driver.`
14:32:45 sean-k-mooney mnaser: stephenfin has they are more work then intel
14:33:11 sean-k-mooney mnaser: both prots on the same physical card i think are in the same iommue group
14:33:28 sean-k-mooney you can check that with sysfs
14:33:39 sean-k-mooney mnaser:you need to have both port bound to the same driver
14:35:56 mnaser sean-k-mooney: not sure i follow, but, it seems like they are all in group 13 according to `/sys/kernel/iommu_groups/`
14:36:50 mnaser qemu-system-x86_64: -device vfio-pci,host=0000:41:00.5,id=hostdev0,bus=pci.0,addr=0x4: vfio 0000:41:00.5: group 13 is not viable\nPlease ensure all devices within the iommu_group are bound to their vfio bus driver.
14:37:07 mnaser i wonder if i need to setup vfio stuff, i've mostly only done that for pci passthrough but not sriov
14:58:05 openstackgerrit Rodrigo Barbieri proposed openstack/nova stable/stein: Allow tap interface with multiqueue https://review.opendev.org/757886
14:59:15 sean-k-mooney mnaser: if its a two port card both port will need to be bound to vfio-pci
14:59:55 sean-k-mooney libvirt can somethimes handel this for you but it gets complicated when you have multipel ports on teh same card
15:00:19 sean-k-mooney in somecase each physical port will get its own iommu group
15:00:26 sean-k-mooney on oder hardware it does not
15:00:35 sean-k-mooney older
15:14:03 mnaser sean-k-mooney: i think my issue was thta i should have been on https://docs.openstack.org/neutron/ussuri/admin/config-ovs-offload.html
15:21:28 sean-k-mooney are you using hardware offloaed ovs
15:21:34 sean-k-mooney or just sriov with the sriov nic agent
15:21:46 sean-k-mooney you can use it either way
15:25:28 openstackgerrit Lee Yarwood proposed openstack/nova master: compute: Don't detach volumes when RescheduledException raised without retry https://review.opendev.org/757894
15:25:28 openstack bug 1899649 in OpenStack Compute (nova) "Volume marked as available after a failure to build" [Undecided,New] https://launchpad.net/bugs/1899649 - Assigned to Lee Yarwood (lyarwood)
15:25:28 openstackgerrit Lee Yarwood proposed openstack/nova master: Add regression test for bug #1899649 https://review.opendev.org/757893
15:25:44 lyarwood stephenfin: ^ if you have time, going to spend some time on reviews of your stuff now btw.
15:25:51 stephenfin lyarwood: sure
15:26:16 stephenfin Reminds me, I've to review a regression fix from gibi too
15:30:05 jrosser has this sort of thing ever come up for nova? https://cloud.google.com/compute/docs/instances/verifying-instance-identity
15:31:07 lyarwood not that I'm aware of but it sounds like a valid feature for us to look into
15:31:27 jrosser i have messed with a small POC for that today and can share it if there is interest
15:32:26 lyarwood jrosser: I'd think there would be ahead of the PTG
15:32:57 lyarwood jrosser: https://etherpad.opendev.org/p/nova-wallaby-ptg - feel free to add it to the list if you have time to discuss it there in a few weeks
15:35:15 sean-k-mooney jrosser: im not sure if that is realted to what nova-join does
15:35:24 sean-k-mooney nova-join is not part of the nova project
15:35:34 jrosser it's sort of like that
15:35:46 sean-k-mooney https://opendev.org/x/novajoin
15:36:14 jrosser thats quite heavyweight though for something kind of simple
15:36:41 sean-k-mooney the google docs seam quite heavy too
15:36:50 sean-k-mooney do you have a simpel example
15:37:02 jrosser yeah, let me paste something
15:38:45 sean-k-mooney adding some form of identidy verifcaiotn or signigure to the instance metadata for apps to check shoudl be doable im just not sure what woudl be required
15:38:59 sean-k-mooney is the instance uuid enough or does it need to be cyptograpicaly secure
15:40:32 sean-k-mooney actully it sound like adding a signiture to the metadata for an isntace might me enough?
15:40:54 sean-k-mooney " Your applications can verify the signature against Google's public Oauth2 certificates to confirm the identity of the instance with which they have established a connection."
15:41:12 openstackgerrit Ghanshyam Mann proposed openstack/nova master: DNM: testing tempest copy-image test https://review.opendev.org/742547
15:41:29 sean-k-mooney if we were to sign the metadata for the instance you could retrive it before connecting and validate its correct
15:41:33 jrosser i did this http://paste.openstack.org/show/798996/
15:41:54 jrosser and i could validate the generated JWT against the public key after retrieving it from the metadata service
15:42:49 sean-k-mooney the publick keey the user provided
15:42:58 sean-k-mooney for the key pair for the instance
15:43:29 jrosser the cloud provider publishes the public key somewhere
15:43:41 sean-k-mooney oh you want to use a common one
15:43:45 jrosser and the private key belongs to the compute service
15:43:47 sean-k-mooney ya
15:43:50 sean-k-mooney that looks resonable
15:44:10 sean-k-mooney its not really intrusive its just anothe pice of metadata
15:44:20 sean-k-mooney and presuably a new config for the key
15:44:37 jrosser i arrived at this looking at automated cert issuance
15:45:02 jrosser there are tools which will cut certs based on validating instance identity documents
15:45:03 sean-k-mooney lets-encrypt-style
15:45:28 sean-k-mooney we have pyjwt in the upper-constriats file too
15:45:37 mnaser sean-k-mooney: hardware offloaded ovs is the goal
15:45:50 sean-k-mooney so while this might be a new reqruirement for nova it not a new one for openstack
15:46:08 jrosser https://smallstep.com/blog/embarrassingly-easy-certificates-on-aws-azure-gcp/
15:46:19 sean-k-mooney jrosser: so ya i hitnk you sould almost do this as a specless blueprint if you bring it up at the ptg with that example
15:46:40 jrosser ok, that would be cool

Earlier   Later