| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2021-03-12 | |||
| 19:28:13 | sean-k-mooney | one thing that is confusiton me is i am seeing different pci address then i expect to see | |
| 20:04:45 | sean-k-mooney | .... stephenfin before i rebased on v4 of you patch my 2 test passed and my first test failed | |
| 20:04:58 | sean-k-mooney | after my first test passed and my second test failed | |
| 20:05:22 | sean-k-mooney | and i did not notice fo the last hour and was editing the wrong thing | |
| 20:38:07 | openstackgerrit | Merged openstack/nova master: apidb: Compact Train database migrations https://review.opendev.org/c/openstack/nova/+/771420 | |
| 20:47:23 | lbragstad | sean-k-mooney gmann not that you need to do anything with this now, but i had to start getting ideas on paper from today's discussion - https://etherpad.opendev.org/p/consuming-system-scope | |
| 20:47:54 | sean-k-mooney | cool ill book mark it | |
| 20:48:42 | sean-k-mooney | one thing i tought about afer is when issuing the token we might also want to list the roles | |
| 20:49:11 | sean-k-mooney | so you had openstack token issue --os-cloud system-admin --for-project foo | |
| 20:49:47 | sean-k-mooney | but we might want "openstack token issue --os-cloud system-admin --for-project foo --roles project_member" | |
| 20:49:52 | openstackgerrit | Merged openstack/nova stable/train: replace the "hide_hypervisor_id" to "hw:hide_hypervisor_id" https://review.opendev.org/c/openstack/nova/+/768736 | |
| 21:20:11 | sean-k-mooney | ok i now have the block patch written jsut need to add doc and releasenote then ill push | |
| 21:45:14 | openstackgerrit | sean mooney proposed openstack/nova master: block unsupported actions with vdpa. https://review.opendev.org/c/openstack/nova/+/780333 | |
| 21:45:42 | sean-k-mooney | gibi: stephenfin ^ proably need more work but that is basicly the blocker patch | |
| 21:46:16 | sean-k-mooney | i think i might be able to rewrite it to use the network info cache in some cases instead | |
| 21:46:39 | sean-k-mooney | of calling neutron but that is more or less what it will look like | |
| 22:42:10 | openstackgerrit | Merged openstack/nova master: Add generate schemas tool https://review.opendev.org/c/openstack/nova/+/769796 | |
| 23:21:43 | openstackgerrit | melanie witt proposed openstack/nova master: Add --task-log option to nova-manage db archive_deleted_rows https://review.opendev.org/c/openstack/nova/+/780395 | |
| 23:38:35 | openstackgerrit | Merged openstack/nova master: nova-next: Start testing the q35 machine type https://review.opendev.org/c/openstack/nova/+/708701 | |
| #openstack-nova - 2021-03-13 | |||
| 01:27:17 | openstackgerrit | Merged openstack/nova stable/stein: [stable-only] gate: Pin CEPH_RELEASE to nautilus in LM hook https://review.opendev.org/c/openstack/nova/+/780277 | |
| 01:30:33 | openstackgerrit | Merged openstack/nova master: Support per port numa policies with SR-IOV https://review.opendev.org/c/openstack/nova/+/773792 | |
| 03:24:44 | openstackgerrit | Takashi Natsume proposed openstack/nova master: doc: mark the max microversion for wallaby https://review.opendev.org/c/openstack/nova/+/780401 | |
| 04:36:18 | openstackgerrit | Takashi Natsume proposed openstack/nova-specs master: Create specs directory for Xena https://review.opendev.org/c/openstack/nova-specs/+/772878 | |
| 05:57:20 | kinpaa12389 | Hi, | |
| 05:57:21 | kinpaa12389 | 1. Added [service_user] and all fields in nova.conf as https://docs.openstack.org/cinder/latest/configuration/block-storage/service-token.html | |
| 05:57:21 | kinpaa12389 | i am testing service_token between nova and glance on devstack. | |
| 05:57:22 | kinpaa12389 | 3. Add delay in snapshot as https://review.opendev.org/c/openstack/nova/+/419666 | |
| 05:57:22 | kinpaa12389 | 2. Add expiration 100 seconds in keystone.conf [token] and restart keystone, nova, glance | |
| 05:57:23 | kinpaa12389 | ideally it should have taken service_token and continue/finish the snapshot operation. Am I missing something ? | |
| 05:57:23 | kinpaa12389 | 4. trigger snapshot.. it fails with 401 after expiration seconds. | |
| 12:28:23 | openstackgerrit | Merged openstack/nova master: trivial: Clarify purpose of 'Host.supports_*' properties https://review.opendev.org/c/openstack/nova/+/778739 | |
| 13:51:30 | gmann | lbragstad: thanks | |
| 15:48:03 | openstackgerrit | Merged openstack/nova stable/train: Use subqueryload() instead of joinedload() for (system_)metadata https://review.opendev.org/c/openstack/nova/+/761811 | |
| #openstack-nova - 2021-03-14 | |||
| 06:19:39 | openstackgerrit | Merged openstack/nova master: add constants for vnic type vdpa https://review.opendev.org/c/openstack/nova/+/770474 | |
| 08:13:52 | openstackgerrit | Merged openstack/nova master: hardware: Start parsing 'os_secure_boot' https://review.opendev.org/c/openstack/nova/+/682628 | |
| 08:14:25 | openstackgerrit | Merged openstack/nova master: compute: Report COMPUTE_SECURITY_UEFI_SECURE_BOOT https://review.opendev.org/c/openstack/nova/+/776679 | |
| 08:15:03 | openstackgerrit | Merged openstack/nova master: scheduler: Translate secure boot requests to trait https://review.opendev.org/c/openstack/nova/+/776680 | |
| 08:22:49 | openstackgerrit | Merged openstack/nova master: libvirt: Add parsing of firmware metadata files https://review.opendev.org/c/openstack/nova/+/779302 | |
| 08:23:22 | openstackgerrit | Merged openstack/nova master: libvirt: Move some host arch checks to guest checks https://review.opendev.org/c/openstack/nova/+/779303 | |
| 15:31:07 | openstackgerrit | Merged openstack/nova master: objects: Add 'VDPA' to 'PciDeviceType' https://review.opendev.org/c/openstack/nova/+/777481 | |
| #openstack-nova - 2021-03-15 | |||
| 01:57:33 | openstackgerrit | Jinsheng Zhang proposed openstack/nova stable/victoria: Add nova support ironic instance port group network metadata https://review.opendev.org/c/openstack/nova/+/780209 | |
| 02:17:10 | openstackgerrit | Wenping Song proposed openstack/nova-specs master: Trival change: correct some nits https://review.opendev.org/c/openstack/nova-specs/+/780443 | |
| 03:22:12 | prometheanfire | so... I have a server I migrated, it was powered off before the migration, it backend is cinder for all disks. I cannot confirm or revert the migration, openstackclient returns 'Instance has not been resized.' | |
| 03:38:41 | prometheanfire | I can probably recreate the error situation easilly if someone is interested | |
| 04:15:57 | openstackgerrit | Wenping Song proposed openstack/nova-specs master: Repropose vGPU support spec https://review.opendev.org/c/openstack/nova-specs/+/780452 | |
| 09:05:49 | lyarwood | Morning, I guess we need to leave the gate alone to allow the vDPA and secure-boot stuff to land right? | |
| 09:06:11 | gibi | lyarwood: hi! do you have a plan to disturb the gate somehow? :) | |
| 09:08:05 | lyarwood | gibi: I mean just in terms of load etc | |
| 09:08:12 | lyarwood | gibi: approving additional things | |
| 09:08:34 | lyarwood | like https://review.opendev.org/q/topic:bug/1552042 ;) | |
| 09:09:12 | gibi | I think bugfixes should go. I don't see how that can effectively slow down the vdpa and secure boot landing | |
| 09:09:33 | lyarwood | kk | |
| 09:19:26 | lyarwood | bauzas: https://review.opendev.org/c/openstack/nova/+/780286 - would you mind hitting this today to unblock stable/rocky? | |
| 09:22:13 | bauzas | lyarwood: sure, looking | |
| 09:23:26 | kashyap | lyarwood: gibi: I think it's not worth to backport anything that is _not_ a CVE fix for stable/train, is it? | |
| 09:23:37 | kashyap | Morning, BTW | |
| 09:24:38 | kashyap | lyarwood: gibi: What I have in mind is the "allow disabling CPU flags" feature -- it can potentially save people from lots of tricky positions. But, stable/train goes EOL in a couple of months | |
| 09:26:04 | gibi | kashyap: you called that a feature, that categorization already prevents backporting | |
| 09:26:05 | kashyap | So I'm ambivalent for upstream. If downstreams need it; they should maintain the backport on their own. | |
| 09:26:17 | kashyap | gibi: Fair enough :-) | |
| 09:28:44 | kashyap | gibi: For an imaginary case: you wouldn't object backporting a small "feature" (not a big one) to a long-term stable branch if it can potentially save a lot of future misery, would you? | |
| 09:29:27 | lyarwood | kashyap: https://docs.openstack.org/project-team-guide/stable-branches.html sets out the upstream policy | |
| 09:29:35 | kashyap | ("I would object" is a valid answer, though :-)) | |
| 09:31:33 | kashyap | lyarwood: I'm not going to backport it to stable/train, but for discussion's sake: the backport fits all criteria: it's small and self-contained; not invasive at all; not user-visible, but still can save your rear ... and so on | |
| 09:31:53 | kashyap | Thanks for the link. I'll stop theoretical discussions here :-) | |
| 09:32:25 | gibi | kashyap: allowing feature backports is a slippery slope | |
| 09:33:58 | kashyap | gibi: I fully agree; but the devil is in the details, right? If it's a tiny, targetted "feature", but can facilitate a security mitigation (which is a real possibility, BTW), then what? | |
| 09:34:24 | kashyap | The concrete example is: there can be a future CVE which can be mitigated only disabling a CPU flag fo rthe guest. | |
| 09:35:11 | kashyap | gibi: That said, I agree with you for the rest of the 98% of cases, it is a slippery slope. | |
| 09:35:42 | kashyap | Missing word earlier: s/only/only by/ | |
| 09:38:07 | gibi | when we have such CVE to mitigate then we have to decide how to mitigate that. | |
| 09:38:35 | gibi | if the only obvious way is to backport you change then we can consider that | |
| 09:39:44 | lucasagomes | sean-k-mooney, morning, if u have sometime mind taking a look at https://review.opendev.org/c/openstack/nova/+/776934, https://review.opendev.org/c/openstack/nova/+/776419 and https://review.opendev.org/c/openstack/nova/+/776944 ? Simple patches, all with +2's already | |
| 09:40:01 | lucasagomes | ops... last one has a merge conflict. Lemme fix it | |
| 09:40:13 | kashyap | gibi: Yep; fun fact: that's what we did when we introduced the config option :-) | |
| 09:40:43 | kashyap | (It helped mitigate a flaw at that time by _enabling_ two CPU flags) | |
| 09:43:08 | openstackgerrit | Lucas Alvares Gomes proposed openstack/nova master: [OVN] Adapt the live-migration job scripts to work with OVN https://review.opendev.org/c/openstack/nova/+/776419 | |
| 09:43:09 | openstackgerrit | Lucas Alvares Gomes proposed openstack/nova master: [OVN] Explicitly set nova-next job to ML2/OVS https://review.opendev.org/c/openstack/nova/+/776944 | |
| 09:43:09 | openstackgerrit | Lucas Alvares Gomes proposed openstack/nova master: [OVN] Explicitly set grenade job to ML2/OVS https://review.opendev.org/c/openstack/nova/+/776934 | |
| 09:44:26 | openstackgerrit | Merged openstack/nova master: fakelibvirt: make kB_mem default not laughable https://review.opendev.org/c/openstack/nova/+/779559 | |
| 09:46:48 | gibi | kashyap: I vaguely rememeber | |
| 09:47:23 | gibi | anyhow we have a national holiday today here in Hungary so I will be going on and off during the day | |
| 09:47:41 | kashyap | gibi: /me wrote documentation for it here :-) -- https://docs.openstack.org/nova/latest/admin/mitigation-for-Intel-MDS-security-flaws.html | |
| 09:47:43 | gibi | sean-k-mooney: I've found ony problem with the vdpa ops blcoking patch | |
| 09:47:53 | kashyap | gibi: Ah, enjoy the day. It is even sunny here today | |
| 09:48:01 | gibi | it is not bad here either | |
| 10:08:24 | brinzhang | bauzas: good morning^ | |
| 10:08:45 | brinzhang | bauzas: you comment in https://review.opendev.org/c/openstack/nova/+/778440 with bug 1917592 | |
| 10:08:47 | openstack | bug 1917592 in OpenStack Compute (nova) "Missed 'accel_uuids' when we the 'shelved_offload_time' time out in shelving instance periodic task" [Medium,In progress] https://launchpad.net/bugs/1917592 - Assigned to Brin Zhang (zhangbailin) | |
| 10:09:03 | bauzas | brinzhang: good afternoon | |
| 10:09:13 | bauzas | (I have to leave in 5 mins for getting my children from school) | |
| 10:10:00 | brinzhang | bauzas: ack, dont worry | |
| 10:10:34 | brinzhang | about your concern, does it need to add an cyborg get multiple arqs apis? | |
| 10:15:13 | bauzas | brinzhang: well, the point is that we call the Cyborg API for each of the instance | |
| 10:15:49 | bauzas | but my -1 was more about the L9480 | |
| 10:17:35 | brinzhang | bauzas: ack, not in a hurry, thanks | |
| 10:18:50 | brinzhang | gibi: do you have some suggestion? bauzas's concern is the cyborgclient may get many times if there are some bound accel:device_profile instance | |
| 10:19:16 | brinzhang | s/some/any/ | |
| 13:17:25 | lyarwood | elod / bauzas / melwitt ; https://review.opendev.org/c/openstack/nova/+/780287 - final stable/queens ceph fix should be good to go btw | |
| 13:47:18 | sean-k-mooney | gibi: hi yep its an issue ill fix that and convert it to using the info cache quickly otherwise are you ok with the approch | |