| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2020-10-29 | |||
| 17:42:43 | legochen | okay, will do in the morning, it is about 2:00am in my time :) | |
| 17:42:49 | legochen | ttyl | |
| 17:43:23 | legochen | and thank you! | |
| 19:59:53 | openstackgerrit | Ade Lee proposed openstack/nova master: Replace md5 with oslo version https://review.opendev.org/756434 | |
| 20:38:58 | openstackgerrit | Lee Yarwood proposed openstack/nova-specs master: WIP/DNM - Image defined ephemeral storage encryption https://review.opendev.org/752284 | |
| 20:55:01 | openstack | bugzilla.redhat.com bug 1884920 in openssh "Cannot ssh into CentOS 6 using ssh key authentication" [Low,Closed: notabug] - Assigned to jjelen | |
| 20:55:01 | lyarwood | PSA for anyone upgrading to F33, you will need https://bugzilla.redhat.com/show_bug.cgi?id=1884920#c2 | |
| 20:57:56 | openstackgerrit | Lee Yarwood proposed openstack/nova master: WIP image_meta: Add ephemeral encryption properties https://review.opendev.org/760454 | |
| 20:57:56 | openstackgerrit | Lee Yarwood proposed openstack/nova master: WIP Add encryption fields to BlockDeviceMapping https://review.opendev.org/760453 | |
| 20:57:57 | openstackgerrit | Lee Yarwood proposed openstack/nova master: WIP scheduler: Add an ephemeral encryption pre filter https://review.opendev.org/760456 | |
| 20:57:57 | openstackgerrit | Lee Yarwood proposed openstack/nova master: WIP virt: Add ephemeral encryption flag https://review.opendev.org/760455 | |
| 22:20:06 | sean-k-mooney | lyarwood: wait why are rsa keys not accepted | |
| 22:21:58 | sean-k-mooney | oh its just rsa with sha1 | |
| 22:22:59 | sean-k-mooney | rsa-sha2-512/256 should be accpeted | |
| 22:23:15 | openstack | bugzilla.redhat.com bug 1881301 in openssh "openssh-clients do not accept PubkeyAcceptedKeyTypes rsa-sha2-512/256" [Unspecified,Post] - Assigned to jjelen | |
| 22:23:15 | sean-k-mooney | https://bugzilla.redhat.com/show_bug.cgi?id=1881301 really does seam like a bug | |
| 22:24:39 | sean-k-mooney | ECDSA isnt nessisarlly more secure then rsa dpening on the key lenght | |
| 22:30:41 | sean-k-mooney | NIST SP800-90 Dual Ec for example should not be used https://en.wikipedia.org/wiki/Dual_EC_DRBG | |
| 22:38:39 | sean-k-mooney | https://en.wikipedia.org/wiki/EdDSA#Ed25519 and https://en.wikipedia.org/wiki/Curve448 are secure and standraised in https://tools.ietf.org/html/rfc7748 i assume fedora has disabled the orginil nist algortiom | |
| #openstack-nova - 2020-10-30 | |||
| 03:05:49 | openstackgerrit | Shi Yan proposed openstack/nova master: Remove unused bindir config option https://review.opendev.org/760331 | |
| 03:52:24 | openstackgerrit | wu.shiming proposed openstack/os-vif master: Remove the unused coding style modules https://review.opendev.org/760491 | |
| 04:33:49 | openstackgerrit | Shi Yan proposed openstack/nova master: Remove unused bindir config option https://review.opendev.org/760331 | |
| 07:30:47 | openstackgerrit | Xinran WANG proposed openstack/nova-specs master: SRIOV Enabled Nic Support Specification https://review.opendev.org/742785 | |
| 08:00:33 | bauzas | good morning Nova | |
| 08:10:12 | gibi | good morning | |
| 09:12:31 | openstackgerrit | Balazs Gibizer proposed openstack/nova master: Prevent starting services with older than N-1 computes https://review.opendev.org/738482 | |
| 09:17:31 | gibi | dansmith: updated for W ^^ | |
| 09:44:51 | openstackgerrit | Balazs Gibizer proposed openstack/nova master: Add upgrade check about old computes https://review.opendev.org/760520 | |
| 09:46:00 | gibi | dansmith: and here is the related upgrade check ^ | |
| 10:20:56 | bauzas | lyarwood: interesting, got a publickey perm issue when trying to upload to gerrit after upgrading | |
| 10:21:01 | bauzas | lyarwood: to F33, I mean | |
| 10:21:18 | bauzas | I guess my pubkey was revoked because of the exposure | |
| 10:22:27 | bauzas | oh my fingerprint probably changeed | |
| 10:22:47 | openstackgerrit | Marcin Juszkiewicz proposed openstack/nova master: libvirt: check for AMD SEV only on x86-64 https://review.opendev.org/714425 | |
| 10:25:06 | bauzas | debug1: send_pubkey_test: no mutual signature algorithm | |
| 10:25:06 | bauzas | debug1: Offering public key: /home/sbauza/.ssh/id_rsa RSA SHA256:<something> agent | |
| 10:25:12 | bauzas | mmmmm | |
| 10:29:02 | bauzas | looks like it's a known issue https://twitter.com/dmsimard/status/1037354741959991296 | |
| 10:29:30 | bauzas | that's going to be fun | |
| 10:31:42 | bauzas | huzzah https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1790963 | |
| 10:31:43 | openstack | Launchpad bug 1790963 in openssh (Fedora) "Unable to connect with openssh 7.8 client and certificates" [Undecided,Confirmed] | |
| 10:32:04 | bauzas | my openssh client is more recent tho (8.4p1) | |
| 11:18:58 | bauzas | hmm, better explanation of the issue https://www.reddit.com/r/Fedora/comments/jh9iyi/f33_openssh_no_mutual_signature_algorithm/ | |
| 11:19:00 | bauzas | lyarwood: ^ | |
| 11:23:41 | bauzas | okay, got the workaround by setting the ssh-rsa keytype with PubkeyAcceptedKeyTypes | |
| 11:25:13 | bauzas | lyarwood: http://paste.openstack.org/show/799536/ | |
| 11:27:24 | openstack | bugzilla.redhat.com bug 1884920 in openssh "Cannot ssh into CentOS 6 using ssh key authentication" [Low,Closed: notabug] - Assigned to jjelen | |
| 11:27:24 | bauzas | hah https://bugzilla.redhat.com/show_bug.cgi?id=1884920 | |
| 11:29:30 | bauzas | while the move to remove SHA1 hashes is certainly understandable, I think there is a big user impact that I would have preffered to see better in the relnotes | |
| 12:26:24 | kashyap | stephenfin: Hey | |
| 12:27:07 | kashyap | stephenfin: On documentation: In the past you posted some notes somewhere about how Postgres (or is it some other?) has different kinds of documentation guides? | |
| 12:51:20 | gibi | nova PTG continues in 10 minutes | |
| 13:10:48 | tosky | gibi: in the "next W cycle goals" slot, are you going to talk also about "completing the V cycle goals"? :) (and in case, do I need to be around?) | |
| 13:17:04 | stephenfin | lyarwood: noddy nova-net-related patch here https://review.opendev.org/#/c/760331/ | |
| 13:17:16 | stephenfin | if you've a sec | |
| 13:58:09 | gibi | tosky: sorry I missed your comment | |
| 13:58:30 | gibi | tosky: I can circle back to this after the current topic | |
| 14:01:47 | bauzas | suffered a laptop crash, rejoining | |
| 14:02:05 | tosky | gibi: unless you have other topics of course (the list is huuuge); in case, feel free to ping me | |
| 14:02:28 | gibi | tosky: if you can join now then I think we can get to this in about 10 minutes | |
| 14:03:43 | tosky | gibi: oh, jumping in | |
| 14:03:48 | gibi | tosky: ack | |
| 14:11:01 | kashyap | gibi: /me was participating in KVM Forum BoFs and sessions; so been away here | |
| 14:11:19 | kashyap | (Too many things happening at the same time...) | |
| 14:11:24 | gibi | kashyap: ack | |
| 14:13:44 | gibi | kashyap: I think we haven't encountered any topics from you yet | |
| 14:14:17 | kashyap | gibi: The main thing I have is the long-running Secure Boot spec -- for repproval -- I put it on the back burner due to other things | |
| 14:14:28 | kashyap | So it should be fairly uncontroversial | |
| 14:15:35 | kashyap | We have various infra bits in-tree, and in-flight. (Aside: I have another conflict in an hour or so ... if I'm not around, please leave questions for me in the Etherpad) | |
| 14:15:40 | kashyap | (I'll come back and answer) | |
| 14:17:24 | gibi | kashyap: OK. I it good if we bring the secure boot up right after the current break? | |
| 14:20:42 | kashyap | gibi: Current break is how long? I have a hard-break at 16:20 CET | |
| 14:21:26 | kashyap | I can pay more attention back here again at 17:30 CET | |
| 14:21:58 | gibi | we are back at 14:26 UTC | |
| 14:22:03 | gibi | so in like 4 minutes | |
| 14:23:08 | kashyap | Ah, sure; that works | |
| 14:23:23 | kashyap | gibi: But I feel like I'm cheating by moving a topic up | |
| 14:23:29 | kashyap | So feel free to say "no" | |
| 14:24:06 | kashyap | (I don't mean, I literally moved it on the Etherpad :)) | |
| 14:25:08 | gibi | kashyap: not cheating, it is dynamic scheduling of the topic based on availability :) | |
| 14:25:23 | kashyap | Hehe, reframing, is it | |
| 14:25:26 | kashyap | Thanks a lot! | |
| 14:26:06 | gibi | I moved your topic up in the etherpd | |
| 14:27:02 | openstackgerrit | Lee Yarwood proposed openstack/nova master: zuul: Merge nova-evacuate into nova-multinode-live-migration https://review.opendev.org/755309 | |
| 14:36:39 | sean-k-mooney | im having issue with zoom ill try and rejion as soon as i can | |
| 14:42:33 | gibi | melwitt, dansmith: fyi, we are delaying the NUMA discussion on the nova PTG so that you can join. let me know if we should not wait | |
| 14:43:07 | dansmith | gibi: I'm triple-booked today | |
| 14:43:13 | dansmith | gibi: this is numa and placement? | |
| 14:43:16 | gibi | dansmith: yes | |
| 14:44:00 | dansmith | ack, well, I'm in the camp of doing this in placement of course | |
| 14:44:18 | dansmith | I think melwitt is too, so she can probably just say everything twice to pretend I'm there :) | |
| 14:44:37 | gibi | dansmith: OK. thanks. | |
| 14:55:51 | lyarwood | mgoddard: https://www.openstack.org/ptg/rooms/liberty - about to talk about https://bugs.launchpad.net/nova/+bug/1895848 if you're free btw | |
| 14:55:51 | openstack | Launchpad bug 1895848 in OpenStack Compute (nova) "Migration and evacuation fails with encrypted volumes" [Medium,Confirmed] - Assigned to Lee Yarwood (lyarwood) | |
| 14:56:03 | lyarwood | mgoddard: apologies for the late ping, failed at scrolling down. | |
| 14:56:23 | lyarwood | mgoddard: https://etherpad.opendev.org/p/nova-wallaby-ptg is the pad btw | |
| 14:56:35 | mgoddard | lyarwood: o/ | |
| 14:56:40 | mgoddard | just joined. Thanks for the ping | |
| 14:56:53 | lyarwood | np | |
| 14:56:59 | lyarwood | just finishing the previous topic | |