| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2021-03-12 | |||
| 19:04:11 | stephenfin | or PCI device counts in the DB | |
| 19:04:37 | stephenfin | just create a port, create a server, and then try your various and see that they're correctly rejects, I guess? | |
| 19:04:44 | sean-k-mooney | and i should not need to pass the libvirt and qemu version explictly either | |
| 19:05:01 | sean-k-mooney | since you are passing the default | |
| 19:05:20 | stephenfin | you will | |
| 19:05:32 | stephenfin | the FakeLibvirtFixture defaults to the minimums | |
| 19:05:34 | stephenfin | which are too low | |
| 19:05:40 | sean-k-mooney | oh ok | |
| 19:05:53 | stephenfin | sean-k-mooney: btw, the 'test_vtpm' module has examples you can use | |
| 19:05:54 | sean-k-mooney | i though it was max | |
| 19:06:04 | stephenfin | e.g. test_live_migrate_server | |
| 19:06:08 | stephenfin | test_shelve_server | |
| 19:06:11 | sean-k-mooney | i have some working | |
| 19:06:13 | sean-k-mooney | ya | |
| 19:06:20 | sean-k-mooney | ill take a look | |
| 19:06:20 | stephenfin | great :) | |
| 19:06:30 | sean-k-mooney | im trying to use/extend the integrated helpers | |
| 19:06:55 | sean-k-mooney | so added attach/detach interface with calls to the fakenotifier to wait | |
| 19:07:10 | sean-k-mooney | that kind of thing | |
| 19:07:21 | sean-k-mooney | for shelve i think we already have that there | |
| 19:14:55 | openstackgerrit | Merged openstack/nova stable/ussuri: Prevent archiving of pci_devices records because of 'instance_uuid' https://review.opendev.org/c/openstack/nova/+/760977 | |
| 19:16:28 | gibi | stephenfin: thanks for the update of the vdpa func test, it looks good now | |
| 19:22:46 | sean-k-mooney | stephenfin: what did you fix between v3 and v4 | |
| 19:23:01 | sean-k-mooney | i might need to rebase my patch to pick up the v4 changs | |
| 19:25:59 | sean-k-mooney | ya you changed enough that i should | |
| 19:28:13 | sean-k-mooney | one thing that is confusiton me is i am seeing different pci address then i expect to see | |
| 20:04:45 | sean-k-mooney | .... stephenfin before i rebased on v4 of you patch my 2 test passed and my first test failed | |
| 20:04:58 | sean-k-mooney | after my first test passed and my second test failed | |
| 20:05:22 | sean-k-mooney | and i did not notice fo the last hour and was editing the wrong thing | |
| 20:38:07 | openstackgerrit | Merged openstack/nova master: apidb: Compact Train database migrations https://review.opendev.org/c/openstack/nova/+/771420 | |
| 20:47:23 | lbragstad | sean-k-mooney gmann not that you need to do anything with this now, but i had to start getting ideas on paper from today's discussion - https://etherpad.opendev.org/p/consuming-system-scope | |
| 20:47:54 | sean-k-mooney | cool ill book mark it | |
| 20:48:42 | sean-k-mooney | one thing i tought about afer is when issuing the token we might also want to list the roles | |
| 20:49:11 | sean-k-mooney | so you had openstack token issue --os-cloud system-admin --for-project foo | |
| 20:49:47 | sean-k-mooney | but we might want "openstack token issue --os-cloud system-admin --for-project foo --roles project_member" | |
| 20:49:52 | openstackgerrit | Merged openstack/nova stable/train: replace the "hide_hypervisor_id" to "hw:hide_hypervisor_id" https://review.opendev.org/c/openstack/nova/+/768736 | |
| 21:20:11 | sean-k-mooney | ok i now have the block patch written jsut need to add doc and releasenote then ill push | |
| 21:45:14 | openstackgerrit | sean mooney proposed openstack/nova master: block unsupported actions with vdpa. https://review.opendev.org/c/openstack/nova/+/780333 | |
| 21:45:42 | sean-k-mooney | gibi: stephenfin ^ proably need more work but that is basicly the blocker patch | |
| 21:46:16 | sean-k-mooney | i think i might be able to rewrite it to use the network info cache in some cases instead | |
| 21:46:39 | sean-k-mooney | of calling neutron but that is more or less what it will look like | |
| 22:42:10 | openstackgerrit | Merged openstack/nova master: Add generate schemas tool https://review.opendev.org/c/openstack/nova/+/769796 | |
| 23:21:43 | openstackgerrit | melanie witt proposed openstack/nova master: Add --task-log option to nova-manage db archive_deleted_rows https://review.opendev.org/c/openstack/nova/+/780395 | |
| 23:38:35 | openstackgerrit | Merged openstack/nova master: nova-next: Start testing the q35 machine type https://review.opendev.org/c/openstack/nova/+/708701 | |
| #openstack-nova - 2021-03-13 | |||
| 01:27:17 | openstackgerrit | Merged openstack/nova stable/stein: [stable-only] gate: Pin CEPH_RELEASE to nautilus in LM hook https://review.opendev.org/c/openstack/nova/+/780277 | |
| 01:30:33 | openstackgerrit | Merged openstack/nova master: Support per port numa policies with SR-IOV https://review.opendev.org/c/openstack/nova/+/773792 | |
| 03:24:44 | openstackgerrit | Takashi Natsume proposed openstack/nova master: doc: mark the max microversion for wallaby https://review.opendev.org/c/openstack/nova/+/780401 | |
| 04:36:18 | openstackgerrit | Takashi Natsume proposed openstack/nova-specs master: Create specs directory for Xena https://review.opendev.org/c/openstack/nova-specs/+/772878 | |
| 05:57:20 | kinpaa12389 | Hi, | |
| 05:57:21 | kinpaa12389 | 1. Added [service_user] and all fields in nova.conf as https://docs.openstack.org/cinder/latest/configuration/block-storage/service-token.html | |
| 05:57:21 | kinpaa12389 | i am testing service_token between nova and glance on devstack. | |
| 05:57:22 | kinpaa12389 | 3. Add delay in snapshot as https://review.opendev.org/c/openstack/nova/+/419666 | |
| 05:57:22 | kinpaa12389 | 2. Add expiration 100 seconds in keystone.conf [token] and restart keystone, nova, glance | |
| 05:57:23 | kinpaa12389 | ideally it should have taken service_token and continue/finish the snapshot operation. Am I missing something ? | |
| 05:57:23 | kinpaa12389 | 4. trigger snapshot.. it fails with 401 after expiration seconds. | |
| 12:28:23 | openstackgerrit | Merged openstack/nova master: trivial: Clarify purpose of 'Host.supports_*' properties https://review.opendev.org/c/openstack/nova/+/778739 | |
| 13:51:30 | gmann | lbragstad: thanks | |
| 15:48:03 | openstackgerrit | Merged openstack/nova stable/train: Use subqueryload() instead of joinedload() for (system_)metadata https://review.opendev.org/c/openstack/nova/+/761811 | |
| #openstack-nova - 2021-03-14 | |||
| 06:19:39 | openstackgerrit | Merged openstack/nova master: add constants for vnic type vdpa https://review.opendev.org/c/openstack/nova/+/770474 | |
| 08:13:52 | openstackgerrit | Merged openstack/nova master: hardware: Start parsing 'os_secure_boot' https://review.opendev.org/c/openstack/nova/+/682628 | |
| 08:14:25 | openstackgerrit | Merged openstack/nova master: compute: Report COMPUTE_SECURITY_UEFI_SECURE_BOOT https://review.opendev.org/c/openstack/nova/+/776679 | |
| 08:15:03 | openstackgerrit | Merged openstack/nova master: scheduler: Translate secure boot requests to trait https://review.opendev.org/c/openstack/nova/+/776680 | |
| 08:22:49 | openstackgerrit | Merged openstack/nova master: libvirt: Add parsing of firmware metadata files https://review.opendev.org/c/openstack/nova/+/779302 | |
| 08:23:22 | openstackgerrit | Merged openstack/nova master: libvirt: Move some host arch checks to guest checks https://review.opendev.org/c/openstack/nova/+/779303 | |
| 15:31:07 | openstackgerrit | Merged openstack/nova master: objects: Add 'VDPA' to 'PciDeviceType' https://review.opendev.org/c/openstack/nova/+/777481 | |
| #openstack-nova - 2021-03-15 | |||
| 01:57:33 | openstackgerrit | Jinsheng Zhang proposed openstack/nova stable/victoria: Add nova support ironic instance port group network metadata https://review.opendev.org/c/openstack/nova/+/780209 | |
| 02:17:10 | openstackgerrit | Wenping Song proposed openstack/nova-specs master: Trival change: correct some nits https://review.opendev.org/c/openstack/nova-specs/+/780443 | |
| 03:22:12 | prometheanfire | so... I have a server I migrated, it was powered off before the migration, it backend is cinder for all disks. I cannot confirm or revert the migration, openstackclient returns 'Instance has not been resized.' | |
| 03:38:41 | prometheanfire | I can probably recreate the error situation easilly if someone is interested | |
| 04:15:57 | openstackgerrit | Wenping Song proposed openstack/nova-specs master: Repropose vGPU support spec https://review.opendev.org/c/openstack/nova-specs/+/780452 | |
| 09:05:49 | lyarwood | Morning, I guess we need to leave the gate alone to allow the vDPA and secure-boot stuff to land right? | |
| 09:06:11 | gibi | lyarwood: hi! do you have a plan to disturb the gate somehow? :) | |
| 09:08:05 | lyarwood | gibi: I mean just in terms of load etc | |
| 09:08:12 | lyarwood | gibi: approving additional things | |
| 09:08:34 | lyarwood | like https://review.opendev.org/q/topic:bug/1552042 ;) | |
| 09:09:12 | gibi | I think bugfixes should go. I don't see how that can effectively slow down the vdpa and secure boot landing | |
| 09:09:33 | lyarwood | kk | |
| 09:19:26 | lyarwood | bauzas: https://review.opendev.org/c/openstack/nova/+/780286 - would you mind hitting this today to unblock stable/rocky? | |
| 09:22:13 | bauzas | lyarwood: sure, looking | |
| 09:23:26 | kashyap | lyarwood: gibi: I think it's not worth to backport anything that is _not_ a CVE fix for stable/train, is it? | |
| 09:23:37 | kashyap | Morning, BTW | |
| 09:24:38 | kashyap | lyarwood: gibi: What I have in mind is the "allow disabling CPU flags" feature -- it can potentially save people from lots of tricky positions. But, stable/train goes EOL in a couple of months | |
| 09:26:04 | gibi | kashyap: you called that a feature, that categorization already prevents backporting | |
| 09:26:05 | kashyap | So I'm ambivalent for upstream. If downstreams need it; they should maintain the backport on their own. | |
| 09:26:17 | kashyap | gibi: Fair enough :-) | |
| 09:28:44 | kashyap | gibi: For an imaginary case: you wouldn't object backporting a small "feature" (not a big one) to a long-term stable branch if it can potentially save a lot of future misery, would you? | |
| 09:29:27 | lyarwood | kashyap: https://docs.openstack.org/project-team-guide/stable-branches.html sets out the upstream policy | |
| 09:29:35 | kashyap | ("I would object" is a valid answer, though :-)) | |
| 09:31:33 | kashyap | lyarwood: I'm not going to backport it to stable/train, but for discussion's sake: the backport fits all criteria: it's small and self-contained; not invasive at all; not user-visible, but still can save your rear ... and so on | |
| 09:31:53 | kashyap | Thanks for the link. I'll stop theoretical discussions here :-) | |
| 09:32:25 | gibi | kashyap: allowing feature backports is a slippery slope | |
| 09:33:58 | kashyap | gibi: I fully agree; but the devil is in the details, right? If it's a tiny, targetted "feature", but can facilitate a security mitigation (which is a real possibility, BTW), then what? | |
| 09:34:24 | kashyap | The concrete example is: there can be a future CVE which can be mitigated only disabling a CPU flag fo rthe guest. | |
| 09:35:11 | kashyap | gibi: That said, I agree with you for the rest of the 98% of cases, it is a slippery slope. | |
| 09:35:42 | kashyap | Missing word earlier: s/only/only by/ | |
| 09:38:07 | gibi | when we have such CVE to mitigate then we have to decide how to mitigate that. | |
| 09:38:35 | gibi | if the only obvious way is to backport you change then we can consider that | |
| 09:39:44 | lucasagomes | sean-k-mooney, morning, if u have sometime mind taking a look at https://review.opendev.org/c/openstack/nova/+/776934, https://review.opendev.org/c/openstack/nova/+/776419 and https://review.opendev.org/c/openstack/nova/+/776944 ? Simple patches, all with +2's already | |
| 09:40:01 | lucasagomes | ops... last one has a merge conflict. Lemme fix it | |
| 09:40:13 | kashyap | gibi: Yep; fun fact: that's what we did when we introduced the config option :-) | |