| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2024-07-07 | |||
| 01:00:48 | opendevreview | melanie witt proposed openstack/nova master: Follow up for encryption secret create consolidation https://review.opendev.org/c/openstack/nova/+/921586 | |
| 01:00:50 | opendevreview | melanie witt proposed openstack/nova master: Add database migration to ALTER encryption_options https://review.opendev.org/c/openstack/nova/+/921587 | |
| 01:00:50 | opendevreview | melanie witt proposed openstack/nova master: Add EncryptDetails object for ephemeral encryption https://review.opendev.org/c/openstack/nova/+/921344 | |
| 01:01:38 | opendevreview | melanie witt proposed openstack/nova master: Support create with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/870932 | |
| 01:01:41 | opendevreview | melanie witt proposed openstack/nova master: Validate key manager create access in API https://review.opendev.org/c/openstack/nova/+/919989 | |
| 01:01:44 | opendevreview | melanie witt proposed openstack/nova master: Clean up unused ephemeral encryption libvirt secrets https://review.opendev.org/c/openstack/nova/+/919990 | |
| 01:01:45 | opendevreview | melanie witt proposed openstack/nova master: libvirt: "Auto heal" ephemeral encryption secrets on guest launch https://review.opendev.org/c/openstack/nova/+/919991 | |
| 01:02:21 | opendevreview | melanie witt proposed openstack/nova master: Support (resize|cold migration) with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/870933 | |
| 01:02:47 | opendevreview | melanie witt proposed openstack/nova master: Support live migration with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/905512 | |
| 01:03:26 | opendevreview | melanie witt proposed openstack/nova master: Support rebuild with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/870939 | |
| 01:03:27 | opendevreview | melanie witt proposed openstack/nova master: Support encrypted source images for qcow2 https://review.opendev.org/c/openstack/nova/+/919992 | |
| 01:03:27 | opendevreview | melanie witt proposed openstack/nova master: Add Glance standardized encryption image properties https://review.opendev.org/c/openstack/nova/+/921345 | |
| 01:04:05 | opendevreview | melanie witt proposed openstack/nova master: Add backing_encryption_secret_uuid to BlockDeviceMapping https://review.opendev.org/c/openstack/nova/+/907960 | |
| 01:04:05 | opendevreview | melanie witt proposed openstack/nova master: Add encryption support to qemu-img rebase https://review.opendev.org/c/openstack/nova/+/870936 | |
| 01:04:06 | opendevreview | melanie witt proposed openstack/nova master: Support encrypted backing files for qcow2 https://review.opendev.org/c/openstack/nova/+/907961 | |
| #openstack-nova - 2024-07-08 | |||
| 01:07:19 | opendevreview | Merged openstack/nova master: Server Rescue leads to Server ERROR state if original image is deleted https://review.opendev.org/c/openstack/nova/+/872385 | |
| 04:07:35 | opendevreview | melanie witt proposed openstack/nova master: Support cross cell resize with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/909595 | |
| 04:07:35 | opendevreview | melanie witt proposed openstack/nova master: Support snapshot with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/870937 | |
| 04:07:36 | opendevreview | melanie witt proposed openstack/nova master: libvirt: Introduce support for rbd with LUKS https://review.opendev.org/c/openstack/nova/+/889912 | |
| 04:07:36 | opendevreview | melanie witt proposed openstack/nova master: libvirt: Introduce support for raw with LUKS https://review.opendev.org/c/openstack/nova/+/884313 | |
| 04:26:26 | spatel | any idea what is this error in nova_libvirt | |
| 04:26:29 | spatel | 2024-07-08 04:25:59.489+0000: 2691: error : qemuDomainObjBeginJobInternal:968 : Timed out during operation: cannot acquire state change lock (held by monitor=remoteDispatchDomainCreateWithFlags) | |
| 04:26:51 | spatel | This is happening after ceph failure. Now ceph is health but nova doesn't like to talk | |
| 07:18:50 | opendevreview | melanie witt proposed openstack/nova master: Support cross cell resize with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/909595 | |
| 07:18:50 | opendevreview | melanie witt proposed openstack/nova master: Support snapshot with ephemeral encryption for qcow2 https://review.opendev.org/c/openstack/nova/+/870937 | |
| 07:18:51 | opendevreview | melanie witt proposed openstack/nova master: libvirt: Introduce support for rbd with LUKS https://review.opendev.org/c/openstack/nova/+/889912 | |
| 07:18:51 | opendevreview | melanie witt proposed openstack/nova master: libvirt: Introduce support for raw with LUKS https://review.opendev.org/c/openstack/nova/+/884313 | |
| 10:19:48 | sean-k-mooney | gibi: regarding the time out how would you feel if i only tested one block size for iso | |
| 10:20:27 | sean-k-mooney | either 64 * units.Ki, or 1 * units.Mi | |
| 10:20:37 | sean-k-mooney | both would get the entiry header section in one read | |
| 10:21:05 | sean-k-mooney | 512 is not as bad as 17 but its proably why it takes so long | |
| 10:22:38 | sean-k-mooney | im going to try that locally and see how much of a speed up that gives | |
| 10:24:18 | sean-k-mooney | we can see it timed out in chunk = wrapper.read(block_size) so its definetly in that read loop and making progress it just takes too long | |
| 10:30:46 | sean-k-mooney | 5.5-5.9 second with the optimization vs 18.9-19 seconds without | |
| 10:30:56 | sean-k-mooney | i think that is a reasonable trade off | |
| 10:32:45 | sean-k-mooney | none of the logic im adding for the iso inspector cares about unaliged reads, that is just generic and shared with the other parsers so im personally happy with not testing it for these formats. | |
| 10:33:07 | sean-k-mooney | im going to commit that locally and adress the other nits but if you have concerns with that let me know | |
| 11:41:44 | gibi | sean-k-mooney: I'm fine skipping the unaligned read test for iso | |
| 11:43:58 | sean-k-mooney | ack im just adressing the other nits ill have new version up in the next 30 mins or so | |
| 12:03:42 | opendevreview | sean mooney proposed openstack/nova master: Add iso file format inspector https://review.opendev.org/c/openstack/nova/+/923533 | |
| 12:03:42 | opendevreview | sean mooney proposed openstack/nova master: Reproduce iso regression with deep format inspection https://review.opendev.org/c/openstack/nova/+/923507 | |
| 12:04:23 | sean-k-mooney | gibi: dansmith: ^ when your about those are functiontally the saem just with the nits addressed | |
| 12:04:49 | sean-k-mooney | im going to stack with those now and confirm if this correctly sovles the rebuild regression | |
| 12:05:34 | sean-k-mooney | i.e. boot form qcow usin a KNOPPIX or similar rescue iso to repair a vm | |
| 12:06:04 | sean-k-mooney | s/usin/then using/ | |
| 12:10:25 | gibi | sean-k-mooney: those two patches looks good to me. | |
| 12:11:07 | sean-k-mooney | hopefully that resolves the timeouts but we will see. the fact that it was only timing out in the coverage job ment it was borderline before | |
| 12:11:50 | sean-k-mooney | espicaly give the spread between tox py11 at 11 mins to py312 at 22 | |
| 12:13:19 | sean-k-mooney | where that job runs obviouly has a non trivial impact on the job time | |
| 12:24:14 | sean-k-mooney | gibi: ill comment on the patch but i was able t boot form an cirros qcow and then rescue with an alpine iso | |
| 12:24:24 | sean-k-mooney | unrescue reverted back to cirros as expected | |
| 12:41:11 | gibi | sounds good | |
| 12:41:25 | andrewbonney | Hi. Any reviews on https://review.opendev.org/c/openstack/nova/+/919961 would be appreciated when people have time. Thanks | |
| 13:08:33 | opendevreview | Robert Hoffmann proposed openstack/nova master: Fix: clean up volume attachments https://review.opendev.org/c/openstack/nova/+/923646 | |
| 13:37:14 | spatel | Any idea on nova_libvirt error : qemuDomainObjBeginJobInternal:968 : Timed out during operation: cannot acquire state change lock (held by monitor=init-instance-00000d99) | |
| 14:43:57 | elodilles | sean-k-mooney dansmith : should we wait for any other patch to merge, or is it OK if I generate now stable release patches for nova? (so that we release the fixes for bug/2059809) | |
| 14:44:23 | dansmith | elodilles: I think fungi would say yes, release | |
| 14:44:44 | elodilles | ACK, then I'm preparing the patch | |
| 14:44:48 | fungi | yeah, the sooner the better | |
| 14:45:38 | dansmith | elodilles, fungi: bauzas is out this week, will we need an ack? | |
| 14:46:41 | fungi | the release team is able to override/bypass that requirement, if they're willing to | |
| 14:46:52 | dansmith | cool | |
| 14:58:09 | elodilles | dansmith: https://review.opendev.org/c/openstack/releases/+/923656 | |
| 14:58:39 | elodilles | Uggla auniyal : ping, as you are also release liaisons ^^^ o:) | |
| 15:00:04 | elodilles | release jobs (validation and list-changes) logs should be available in ~10-20 mins | |
| 15:00:36 | dansmith | elodilles: hmm, are those the right hashes for each release? | |
| 15:00:50 | dansmith | seems like A and C are reversed, unless I'm missing something | |
| 15:01:11 | dansmith | wait, maybe not | |
| 15:01:33 | dansmith | okay yeah, mis-copy-paste I think, nevermind | |
| 16:14:10 | mnaser | hi nova friends. https://review.opendev.org/c/openstack/nova/+/923298/2 -- can someone look at this unmaintained/zed stack, it looks good to me so far and would be nice to get going into the gate | |
| 16:14:15 | mnaser | (CVE stuff) | |
| 16:16:54 | dansmith | mnaser: note that nova-core doesn't even have +2 on that branch because it's unmaintained | |
| 16:18:23 | dansmith | looks like it has the only tweak we made after the first push, so I'd assume that if it works for you it's good | |
| 16:20:12 | mnaser | yeah I got that in | |
| 16:20:23 | mnaser | well, elodilles did :) | |
| 16:25:14 | JayF | mnaser: feel free to add me as reviewer for any security backports in unmaintained/ that need additional review. | |
| 16:25:33 | JayF | mnaser: I have the one patch you've indicated opened in my window, will have a look | |
| 16:30:56 | JayF | Speaking of; mnaser has an important fix for the Ironic driver which will need to land in master + go back to Caracal, and is probably bad enough that I'd hope we could get it in a caracal point release: https://review.opendev.org/c/openstack/nova/+/923530 -- basically Ironic+Nova integrated environments with complex networking configurations will not have their metadata generated properly | |
| 16:33:08 | dansmith | JayF: +2d | |
| 16:33:30 | dansmith | looks simple enough, maybe gmann or melwitt could hit it for you | |
| 16:33:31 | JayF | dansmith: thank you very much \o/ (for this and for fixing the security issues over the last weeks) | |
| 16:36:21 | melwitt | +Wd | |
| 16:37:26 | JayF | awesome, I'll get a backport in once it lands | |
| 16:38:18 | JayF | I do have an item on my todo to follow up and make sure all those tests use iter([obj1,obj2]) to catch this kinda issue | |
| 17:19:47 | dansmith | sean-k-mooney: so the coverage job is still failing on your test_iso9660 | |
| 17:19:52 | dansmith | I don't really know why though | |
| 17:21:28 | dansmith | because it reads 10M 17 bytes at a time maybe? does it need to be that big? | |
| 17:23:13 | sean-k-mooney | didnt i fixt that already https://review.opendev.org/c/openstack/nova/+/923533/8/nova/tests/unit/image/test_format_inspector.py#211 | |
| 17:23:54 | sean-k-mooney | dansmith: https://review.opendev.org/c/openstack/nova/+/923507/3 still need a +w by the way | |
| 17:24:02 | sean-k-mooney | that why its not currently in the ci | |
| 17:24:28 | dansmith | oh yeah, I was looking at the wrong report | |
| 17:24:34 | dansmith | that's why duh | |
| 17:24:48 | dansmith | cool | |
| 17:24:57 | sean-k-mooney | but ya the 32KB system area makes it time out with 7 or 512 bytye blocks | |
| 17:25:02 | dansmith | I just changed to 128k locally and it works fine at that size, so no real need for it to be larger I think | |
| 17:25:10 | sean-k-mooney | btu the 64k and 1mb block size do it in a single read | |
| 17:25:41 | dansmith | but as long as it passes now all good, it's only temporary anyway | |
| 17:25:42 | sean-k-mooney | well its reading 34KB total so the 64K read size is enough | |
| 17:27:07 | dansmith | in the gate now | |
| 17:27:16 | dansmith | totes forgot about that repro patch below :D | |