Earlier  
Posted Nick Remark
#openstack-nova - 2022-09-13
16:14:16 sean-k-mooney hum
16:14:25 sean-k-mooney so right now this sound like an rfe to me
16:15:06 sean-k-mooney or at least its a new restriction how what nova ia and is not allwoed to assume
16:15:24 sean-k-mooney normally we assume that libvirt and nova can share a group
16:16:37 sean-k-mooney we do not document that you can harden in this way
16:16:44 sean-k-mooney so to me its not explcitly supported
16:17:55 bauzas sorry, had a doorbell
16:18:00 bauzas I'm back
16:18:28 bauzas yeah, so maybe the bug is valid as a Wishlist ?
16:19:15 bauzas sean-k-mooney: agreed ?
16:19:57 sean-k-mooney i dont think its a bug
16:20:05 sean-k-mooney we could have it be whishlist yes
16:20:11 sean-k-mooney as a mini feature
16:20:14 sean-k-mooney im writign a responce
16:20:20 sean-k-mooney but i think the aswer is to
16:20:21 bauzas cool, can we move on then ?
16:20:31 sean-k-mooney chown nova:$libvirt-group
16:20:44 sean-k-mooney and then libvirt gets read via the group
16:20:49 bauzas if you really think this is a feature, we can set it to Invalid/Wishlist and ask for a blueprint to be filled
16:20:59 bauzas but that's tough for reporters
16:21:36 bauzas sean-k-mooney: yeah, ideally the group shall be libvirt but this sounds distro-oriented
16:21:39 sean-k-mooney ya i think so to as its is not a documented deployment model we support
16:21:50 bauzas problem is, we set perms
16:21:54 sean-k-mooney well it the "libvirt group" but that is disto dependet
16:21:56 bauzas so we're opiniated
16:22:06 sean-k-mooney we can have that be a config option
16:22:13 bauzas sean-k-mooney: yeah that's my point, this is distro-specific
16:22:31 bauzas I honestly don't like us to be opinionated about the perms we shall set
16:22:43 bauzas so, yeah a config knob seems maybe the best
16:22:51 bauzas or... I dunno
16:23:22 bauzas shall we just assume the tempdir is readable by anyone ?
16:23:28 sean-k-mooney we have some requirment around this for vhost-user by the way
16:23:37 bauzas not by *anyone*
16:24:09 bauzas but at least should we just document this is distro-specific and us having a requirement that the directory you set in nova.conf has right perms accordingly?
16:24:30 bauzas and remove this chmod in the code
16:24:45 bauzas this would require an upgrade relnote so a spec tho
16:24:45 sean-k-mooney well maybe not
16:25:03 sean-k-mooney i would have to look at the code but we can take this offline after the meeting
16:25:08 bauzas I don't like the idea of nova managing the underlying OS
16:25:15 bauzas cool
16:25:18 Uggla if I'm not wrong we are setting o+r, I don't really get the diff if we add o+g too.
16:25:48 bauzas Uggla: the point is that I don't see why Nova should do it
16:26:20 sean-k-mooney bauzas:
16:26:21 Uggla but it is already in the driver.py.
16:26:22 bauzas shalln't we just assume the directory are correctly readable by the required users ?
16:26:35 sean-k-mooney we assume tha tnova is in the libvirt group so that we can read the disk to upload the snapshot
16:26:58 sean-k-mooney in there case nova si not in the libvirt-qemu group i think
16:27:26 sean-k-mooney althoguh they apprently worked around this by addign libvirt-qemu user ot nova group
16:27:29 sean-k-mooney which is backwards
16:28:27 bauzas let's put this bug as Opinion then
16:28:42 bauzas this is half distro-specific, half a nova problem
16:29:10 bauzas and people wanting to discuss the resolution are more than happy to engage later on after the meeting
16:29:27 bauzas time flies and we're at the half of the meeting
16:29:39 bauzas agreed ?
16:29:54 sean-k-mooney ack
16:30:15 Uggla ack
16:31:08 bauzas moving on
16:31:09 gibi works for me
16:31:26 bauzas sean-k-mooney: do you have time to do some upstream bug triage this week ?
16:31:32 bauzas keeping in mind this is best-effort
16:31:52 sean-k-mooney i guess so
16:32:05 Uggla bauzas, fyi there are only 4 new bugs remaining now.
16:32:14 bauzas \o/
16:32:18 bauzas sean-k-mooney: thanks
16:32:27 bauzas and again, if you can't, no worries
16:34:29 bauzas #info bug baton is being passed to sean-k-mooney
16:34:31 bauzas damn
16:34:33 bauzas #info bug baton is being passed to sean-k-mooney
16:34:39 bauzas #topic Gate status
16:34:43 bauzas #link https://bugs.launchpad.net/nova/+bugs?field.tag=gate-failure Nova gate bugs
16:34:47 bauzas #link https://zuul.openstack.org/builds?project=openstack%2Fplacement&pipeline=periodic-weekly Placement periodic job status
16:34:51 bauzas #link https://zuul.openstack.org/builds?job_name=tempest-integrated-compute-centos-9-stream&project=openstack%2Fnova&pipeline=periodic-weekly Centos 9 Stream periodic job status
16:34:56 bauzas #link https://zuul.opendev.org/t/openstack/builds?job_name=nova-emulation&pipeline=periodic-weekly&skip=0 Emulation periodic job runs
16:35:00 bauzas #info Please look at the gate failures and file a bug report with the gate-failure tag.
16:35:04 bauzas #info STOP DOING BLIND RECHECKS aka. 'recheck' https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures
16:35:14 bauzas all runs are green, nothing to say
16:35:20 bauzas moving on ?
16:36:16 bauzas looks so
16:36:21 bauzas #topic Release Planning
16:36:25 bauzas #link https://releases.openstack.org/zed/schedule.html
16:36:29 bauzas #info RC1 is this Thursday
16:36:35 bauzas this is important ^
16:36:51 sean-k-mooney yep branches will be cut once rc1 is out
16:36:56 bauzas as a reminder, we'll branch stable/zed from this point in time
16:36:57 gibi I've just pushed the oslo.concurrency min bump https://review.opendev.org/c/openstack/nova/+/857491 that is important for RC!
16:37:00 gibi RC1
16:37:25 bauzas gibi: you give me a perfect opportunity for the next item
16:38:06 bauzas as a reminder too, after RC1 and before GA, we will only be able to accept stable/zed backports if and only if those are regression bugfixes
16:38:41 bauzas I have a couple of bugs waiting for reviews that help our vgpu state of art, but let's defer them to Antelope
16:38:58 bauzas s/bugs/bugfixes/
16:39:13 bauzas so those 2 days are crucial for any bugfix requring to be merged
16:39:28 bauzas accordingly, I created an etherpad for tracking
16:39:33 bauzas #link https://etherpad.opendev.org/p/nova-zed-rc-potential Zed RC tracking etherpad
16:39:52 bauzas this etherpad will be used for tracking RC1 prep, and other RCs until Zed GA
16:40:07 sean-k-mooney have you created the bug lable yet
16:40:13 bauzas please take a look on it, as I beg for reviewers
16:40:15 sean-k-mooney in launchpad
16:40:16 bauzas reviews*
16:40:28 bauzas sean-k-mooney: you mean the stable tag ?
16:40:30 bauzas yes

Earlier   Later