Earlier  
Posted Nick Remark
#openstack-nova - 2023-01-25
10:57:09 opendevreview ribaudr proposed openstack/nova master: Support rescuing an instance with shares (driver part) https://review.opendev.org/c/openstack/nova/+/860287
10:57:09 opendevreview ribaudr proposed openstack/nova master: Add helper methods to rescue/unrescue shares https://review.opendev.org/c/openstack/nova/+/860286
10:57:11 opendevreview ribaudr proposed openstack/nova master: Change microversion to 2.XX https://review.opendev.org/c/openstack/nova/+/852088
10:57:11 opendevreview ribaudr proposed openstack/nova master: Support rescuing an instance with shares (compute and API part) https://review.opendev.org/c/openstack/nova/+/860288
10:57:13 opendevreview ribaudr proposed openstack/nova master: Documentation https://review.opendev.org/c/openstack/nova/+/871642
10:57:54 sean-k-mooney bauzas: have they confirmed that raw devices special files are actully usable im not sure file access imples network access
10:58:05 sean-k-mooney it would come down to the speicics of the vmdk impl
10:58:14 sean-k-mooney anyway we dont need to speculate
10:58:16 bauzas sean-k-mooney: I tested it by myself
10:58:29 bauzas and when I say it's nasty, trust me it is
10:58:51 sean-k-mooney ok well since this has been discusled upstream we now also need ot have it downstream by next week at the latest
11:01:42 johnthetubaguy bauzas: escation to something nasty should be assume with these things, for sure. Even if we can't see it yet.
11:02:49 sean-k-mooney johnthetubaguy: i was just thinking that if it was anythin like virtio-fs special files cant be accesed but i trust dan and bauzas when they say it was nasty
11:03:10 bauzas johnthetubaguy: sean-k-mooney: read the bug report
11:03:18 bauzas and the first comments, there is a reproducer
11:03:22 sean-k-mooney i have not reviewed the bug/cve in any detail rather just enduing the patches were moving last night
11:06:25 sean-k-mooney ok so on that reading it does not allow direct network access form the main descrption anyway lets not look for other ways to abuse this
11:06:59 sean-k-mooney if i try hard enough im sure i can come up with ways to make it worse and i really dont want to do that on a public channel
11:09:56 bauzas +1
11:18:32 zigo bauzas: I'll push my patches in a bit...
11:18:39 zigo FYI, I got Stein fixed too... :)
11:18:54 zigo Stein -> Rocky backport seems another tricky one...
12:13:24 priteau Anyone know why grenade keeps failing on stable/wallaby with the vmdk patch?
12:38:07 opendevreview Merged openstack/nova stable/yoga: Reproduce bug 1981813 in func env https://review.opendev.org/c/openstack/nova/+/859312
12:53:29 zigo I also got Rocky in shape! :P
13:15:18 opendevreview Merged openstack/nova stable/yoga: Gracefully ERROR in _init_instance if vnic_type changed https://review.opendev.org/c/openstack/nova/+/859313
13:22:25 bauzas sent the xena patches for ^ to the gate
13:22:43 bauzas passports* even
13:26:56 gibi bauzas: thanks
13:40:51 sahid 0/ bauzas sean-k-mooney https://review.opendev.org/c/openstack/nova/+/858384 when you have a moment if you can double-check the phrasing regarding doc I hope that will be aligned with your thinking
13:41:26 opendevreview Jorge San Emeterio proposed openstack/nova master: WIP: Dividing global privsep profile https://review.opendev.org/c/openstack/nova/+/871729
13:41:43 sean-k-mooney sahid: sure im on a call but ill check when it wraps
13:42:09 sahid sean-k-mooney: no worries, thanks a lot for your time :-)
13:44:55 opendevreview Jorge San Emeterio proposed openstack/nova master: WIP: Dividing global privsep profile https://review.opendev.org/c/openstack/nova/+/871729
13:47:56 opendevreview Jorge San Emeterio proposed openstack/nova master: WIP: Dividing global privsep profile https://review.opendev.org/c/openstack/nova/+/871729
14:04:06 gibi I did a round of rechecks on the vmdk cve
14:16:17 gibi bauzas: bahh, I need to update commit hashes in the https://review.opendev.org/q/topic:bug%252F1981813 series all the way back from xena to train
14:16:25 gibi fun
14:43:25 opendevreview Balazs Gibizer proposed openstack/nova stable/xena: Reproduce bug 1981813 in func env https://review.opendev.org/c/openstack/nova/+/859314
14:43:26 opendevreview Balazs Gibizer proposed openstack/nova stable/xena: Gracefully ERROR in _init_instance if vnic_type changed https://review.opendev.org/c/openstack/nova/+/859315
14:52:18 bauzas gibi: I guess I can review it again ? ^
14:52:46 gibi bauzas: yeah I hope I did not screw up copying hashes
14:53:18 bauzas gibi: you used the merge patch one ?
14:53:24 gibi yes
14:53:32 gibi now it points to the merged one
14:53:38 bauzas should work so
14:53:39 gibi in both xena patch
14:53:41 gibi es
14:53:50 gibi and I have to do it for the rest of the stable branches too
14:56:00 opendevreview Dan Smith proposed openstack/nova master: WIP: Detect host renames and abort startup https://review.opendev.org/c/openstack/nova/+/863920
14:58:32 gibi a recheckd https://review.opendev.org/c/openstack/nova/+/871622 back to the gate it was kicked due to a slow CI node
15:03:06 bauzas gibi: yup, thanks for having rechecked the changes
15:06:20 gibi bauzas: even with trying to land them in parallel I doubt we will land all of them until friday
15:06:33 gibi maybe if the gate is better during the night...
15:06:57 gibi :D
15:23:40 artom 🤞
15:23:40 artom 🤞
15:23:44 artom Hey, it's unicode!
15:38:41 bauzas artom: tss, wanted to avoid it :p
15:39:11 bauzas 🐈‍⬛
15:39:13 artom That's basically the extent of my involvement here now
15:39:55 bauzas artom: I'm glad that the litterally first message you write here today is an emoji
15:40:13 bauzas artom: and I'm happy this isn't a poop one
15:40:57 artom I'm like emoji batman
15:43:11 bauzas a wealthy man that hides his emitions behind a mask and wears underwear on top of his pants ?
15:44:12 artom Well, one of those is true
15:45:16 bauzas I hope it's the former, I'm afraid it could be the latter
15:46:43 gibi too much details :D
15:47:05 bauzas yay
15:47:17 bauzas gibi: you were right, it sounds we have a problem with grenade on xena
15:47:38 gibi bauzas: did it fail again?
15:47:41 bauzas yup
15:47:46 gibi with the same fastener dep issue?
15:47:56 bauzas https://zuul.opendev.org/t/openstack/build/d8e11efbdc6d43e7b9e27273cf038786
15:48:50 gibi /o\ I have a hunch
15:49:31 gibi https://review.opendev.org/c/openstack/tempest/+/821732/21/requirements.txt yeah we landed this
15:49:45 bauzas 2023-01-25 14:45:10.253 | ERROR: Could not find a version that satisfies the requirement fasteners>=0.16.0
15:49:55 bauzas https://00f8d73ac2d869c11924-90ff9157beec64657d8a46242c5af814.ssl.cf1.rackcdn.com/871557/3/check/nova-grenade-multinode/d8e11ef/controller/logs/grenade.sh_log.txt
15:50:28 bauzas and I was wrong, this is on wallaby, not xena
15:50:43 bauzas -ETOOMANYBRANCHESANDPATCHESTOTRACK
15:51:04 gibi what is the last stable branch tempest master supports?
15:51:23 gibi I feel like wallaby is at the boundary
15:51:29 bauzas possibly
15:51:30 gibi gmann: ^^
15:51:42 bauzas but we also have problem with ceph-multistore on yoga
15:51:50 bauzas changing my focus
15:51:57 bauzas https://review.opendev.org/c/openstack/nova/+/871624 failed again
15:52:15 gibi gmann: it seems https://review.opendev.org/c/openstack/tempest/+/821732 affects stable/wallaby grenade runs
15:52:46 gmann gibi tempest master stopped wallaby support recently. it is stable/xena the last stable it support
15:53:15 gmann gibi: but I have not pinned stable/wallaby with old compatible tempest which I should do
15:53:39 gibi gmann: I see so stable/wallaby runs with master tempest and has https://review.opendev.org/c/openstack/tempest/+/821732 but it shoudl not run with master tempest any more
15:53:41 gmann till now it was running fine but if it is breaking its time to pin tempest there
15:53:58 gibi gmann: yes, it breaks now on the fasteners >= 0.16 dependency
15:54:06 gibi that https://review.opendev.org/c/openstack/tempest/+/821732 introduced
15:54:09 gmann gibi: yeah. I will pin it today
15:54:16 gibi gmann: thank you!
16:07:08 opendevreview Merged openstack/nova stable/zed: [stable-only][cve] Check VMDK create-type against an allowed list https://review.opendev.org/c/openstack/nova/+/871616
16:25:29 bauzas sean-k-mooney: +2d sahid's implementation of stopping evacuated instances
16:35:00 opendevreview Balazs Gibizer proposed openstack/nova stable/wallaby: Reproduce bug 1981813 in func env https://review.opendev.org/c/openstack/nova/+/859320
16:35:01 opendevreview Balazs Gibizer proposed openstack/nova stable/wallaby: Gracefully ERROR in _init_instance if vnic_type changed https://review.opendev.org/c/openstack/nova/+/859321

Earlier   Later