| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2025-07-25 | |||
| 11:10:21 | sean-k-mooney | i was not as apposed to the idea of detaching the root volume as other were although i htink that only realy make sense in a shelved like state | |
| 11:11:02 | noonedeadpunk | yes, totally, it should be shelved. Though indeed detaching makes complicated reverse order of attach | |
| 11:11:14 | noonedeadpunk | and reserved state sounds indeed more prespective... | |
| 11:12:24 | sean-k-mooney | one thing i wish we had a better way of supproting in nova is virual media, i wish we had a simple way to attach iso at runtime. currently you can pass the disk type when you attach a cinder voluem outside of server create | |
| 11:12:59 | sean-k-mooney | so while you can create a volume form an iso and attaach it to a vm it will be attached as a block device | |
| 11:13:52 | sean-k-mooney | rescue has alwasy been the hack but it woudl have been nice if nova coudl supprot boot over http or pxe or other metod that were less reliant on glance for metadta storage | |
| 11:14:31 | sean-k-mooney | we are seeing pain point aroudn that for folks wanting to bring a bunch of pet form vmware or other cloud over to openstack | |
| 11:15:14 | sean-k-mooney | i.e. the dont nessiarly want to create a glance image and delete it for every vm but also dont nessiarly want to have to use a volume either | |
| 11:16:46 | sean-k-mooney | so part of me wishes nova supprot takeing a http/ftp path to a disk image and usign that. or coudl attatch addtional disk after boot form glance or swift or elsewhere | |
| 11:17:15 | sean-k-mooney | beign able to detach and or replace the root disk woudl be a natural extention of that | |
| 11:17:24 | noonedeadpunk | that sounds like smth that potentiallly could posses a security concern in the fuiture | |
| 11:17:40 | noonedeadpunk | in terms of http/ftp | |
| 11:17:43 | sean-k-mooney | no downloading random things form the internet :P | |
| 11:17:46 | sean-k-mooney | how | |
| 11:18:00 | sean-k-mooney | but ya the thing is that nova cant trust glance to do the right thing | |
| 11:18:07 | sean-k-mooney | it has to do the security checks itself | |
| 11:18:08 | noonedeadpunk | well exactly - how to limit downloading random thing from the internet :) | |
| 11:18:12 | sean-k-mooney | so your right | |
| 11:18:20 | noonedeadpunk | like glance web-download already scares me enough from time to time | |
| 11:18:34 | sean-k-mooney | well it basiclly woudl be that | |
| 11:18:48 | sean-k-mooney | glance supprot referencig an image on an external web sever | |
| 11:19:03 | sean-k-mooney | im just talkign about the same capablity in nova directly | |
| 11:19:24 | noonedeadpunk | but also creating a voilume from iso usually kinda works for vmware migrations.... or rescue at worst... | |
| 11:19:58 | noonedeadpunk | well in Glance one can disable that quite easily, just to mention that | |
| 11:20:22 | sean-k-mooney | ya so at server create you can annotat the volume as being an iso or rather disk_type=cdrom | |
| 11:20:38 | sean-k-mooney | we just dont expost that filed form the bdm on volume attach and we shoudl | |
| 11:20:48 | sean-k-mooney | there are other disk types like lun | |
| 11:21:05 | noonedeadpunk | but actually - that is kinda a good point, of why multiple volumes can't be attached on boot... | |
| 11:21:07 | sean-k-mooney | which can ony be set on boot too that are needed for scsi v3 command instead of scsi v2 | |
| 11:21:21 | sean-k-mooney | you can have multipel volumes | |
| 11:21:58 | sean-k-mooney | so you can have the root be a image or a volume and you can have arbitry number of addtional cinder data volumes | |
| 11:22:14 | noonedeadpunk | ah, indeed, you can pass block_device_mapping_v2 | |
| 11:22:16 | sean-k-mooney | that what peole do when migrating they create 1 volume per disk in vmware | |
| 11:22:44 | sean-k-mooney | noonedeadpunk: yep but even without that you can use the syntatic sugar commadn in osc | |
| 11:22:55 | sean-k-mooney | you just repeate --volume for each addtional volume | |
| 11:24:26 | sean-k-mooney | osc will internally comptue the block_device_mapping_v2 object for you, that what it alwasy doing when you use volumes internally | |
| 11:25:07 | sean-k-mooney | the issue with the attach api is we only expose some of the filed setable via BDMv2 structure | |
| 11:25:52 | sean-k-mooney | so nova hwas the ablity at server create to create more complex topolgies then you can create post boot via attach | |
| 12:02:20 | opendevreview | Balazs Gibizer proposed openstack/nova master: Print ThreadPool statistics https://review.opendev.org/c/openstack/nova/+/948340 | |
| 12:02:21 | opendevreview | Balazs Gibizer proposed openstack/nova master: Allow services to start with threading https://review.opendev.org/c/openstack/nova/+/948311 | |
| 12:02:21 | opendevreview | Balazs Gibizer proposed openstack/nova master: Document native threading mode and tuneables https://review.opendev.org/c/openstack/nova/+/949364 | |
| 12:02:22 | opendevreview | Balazs Gibizer proposed openstack/nova master: Do not yield in threading mode https://review.opendev.org/c/openstack/nova/+/950994 | |
| 12:02:22 | opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-next with n-sch in threading mode https://review.opendev.org/c/openstack/nova/+/948450 | |
| 12:02:23 | opendevreview | Balazs Gibizer proposed openstack/nova master: Allow to start unit test without eventlet https://review.opendev.org/c/openstack/nova/+/953436 | |
| 12:02:23 | opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-api and -metadata in threaded mode https://review.opendev.org/c/openstack/nova/+/951957 | |
| 12:02:24 | opendevreview | Balazs Gibizer proposed openstack/nova master: Run unit test with threading mode https://review.opendev.org/c/openstack/nova/+/953475 | |
| 12:02:25 | opendevreview | Balazs Gibizer proposed openstack/nova master: [CI]Make nova-tox-py312-threading voting https://review.opendev.org/c/openstack/nova/+/955791 | |
| 12:02:25 | opendevreview | Balazs Gibizer proposed openstack/nova master: [test]RPC using threading or eventlet selectively https://review.opendev.org/c/openstack/nova/+/953815 | |
| 12:02:27 | opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | |
| 13:51:05 | opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up fs retry tests by mocking sleep https://review.opendev.org/c/openstack/nova/+/955904 | |
| 13:51:06 | opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up RBD test by decreasing retry interval https://review.opendev.org/c/openstack/nova/+/955906 | |
| 13:51:06 | opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up ironic console test by decreasing timeout https://review.opendev.org/c/openstack/nova/+/955905 | |
| 13:51:07 | opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up qemu announce test by mocking sleep https://review.opendev.org/c/openstack/nova/+/955907 | |
| 13:51:42 | gibi | I have to run a lot of unittest lately so I use a bit of time to speed them up ^^ https://review.opendev.org/c/openstack/nova/+/955907 | |
| 13:51:56 | gibi | wong link, I wanted to point to the topic https://review.opendev.org/q/topic:%22unit-test-speedup%22 | |
| 13:52:43 | gibi | these are very small unit test only patches for easy wins | |
| 13:56:01 | opendevreview | Dmitriy Rabotyagov proposed openstack/nova-specs master: Propose enabling parallel live migrations for libvirt https://review.opendev.org/c/openstack/nova-specs/+/955783 | |
| 14:27:58 | noonedeadpunk | um... what the broken crap is `autopep8`? | |
| 14:29:07 | noonedeadpunk | this is pretty much ridiculous: https://zuul.opendev.org/t/openstack/build/b483760112414b64b045615b76bde314 | |
| 14:33:39 | noonedeadpunk | ah, so it tried to handle >80 this wayu, lol | |
| 14:33:59 | opendevreview | Dmitriy Rabotyagov proposed openstack/nova master: [WIP] Allow to perform parallel live migrations https://review.opendev.org/c/openstack/nova/+/955784 | |
| 15:07:39 | opendevreview | Balazs Gibizer proposed openstack/nova master: Document native threading mode and tuneables https://review.opendev.org/c/openstack/nova/+/949364 | |
| 15:07:39 | opendevreview | Balazs Gibizer proposed openstack/nova master: Print ThreadPool statistics https://review.opendev.org/c/openstack/nova/+/948340 | |
| 15:07:40 | opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-next with n-sch in threading mode https://review.opendev.org/c/openstack/nova/+/948450 | |
| 15:07:40 | opendevreview | Balazs Gibizer proposed openstack/nova master: Allow services to start with threading https://review.opendev.org/c/openstack/nova/+/948311 | |
| 15:07:41 | opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-api and -metadata in threaded mode https://review.opendev.org/c/openstack/nova/+/951957 | |
| 15:07:41 | opendevreview | Balazs Gibizer proposed openstack/nova master: Do not yield in threading mode https://review.opendev.org/c/openstack/nova/+/950994 | |
| 15:07:42 | opendevreview | Balazs Gibizer proposed openstack/nova master: Allow to start unit test without eventlet https://review.opendev.org/c/openstack/nova/+/953436 | |
| 15:07:43 | opendevreview | Balazs Gibizer proposed openstack/nova master: [test]RPC using threading or eventlet selectively https://review.opendev.org/c/openstack/nova/+/953815 | |
| 15:07:43 | opendevreview | Balazs Gibizer proposed openstack/nova master: Run unit test with threading mode https://review.opendev.org/c/openstack/nova/+/953475 | |
| 15:07:45 | opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | |
| 15:07:45 | opendevreview | Balazs Gibizer proposed openstack/nova master: [CI]Make nova-tox-py312-threading voting https://review.opendev.org/c/openstack/nova/+/955791 | |
| 15:07:47 | opendevreview | Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915 | |
| 15:08:40 | gibi | ^^ this last one is not a pure eventlet removal so I can accept a request to split the commit to two one that is independnet form the eventlet series and one that just adds the related tests back to the threading job after the first patch lands | |
| 15:09:58 | opendevreview | Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915 | |
| 15:09:59 | opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | |
| 16:57:55 | sean-k-mooney | gibi: i have not looked but i woudl only spliti it if you think we might need to backport it indepently | |
| 18:16:15 | opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | |
| 18:16:15 | opendevreview | Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915 | |
| 19:33:13 | sean-k-mooney | melwitt: so preserving the tmp data as distastful as it may be is probely technialy a feature not a bug | |
| 19:33:53 | sean-k-mooney | all the code i have looked at point to use assumign the data is preerved but the libvirt code never did that by default | |
| 19:34:28 | sean-k-mooney | that means however that vTPM in nova is unsutable for storign encyption keys like those used by bitlocker | |
| 19:35:18 | sean-k-mooney | adn its only sutable today to provide storage for messuered boot or to provide cyrpograpic random numbers | |
| 19:37:08 | sean-k-mooney | the nvram sitution i have not had time to track down | |
| 19:37:41 | sean-k-mooney | it may hae been a simialr logic on libvirt side where they assuemd it was oke to delet ewhen the domain in undefined and we assuemd it would be preserved like the disks | |
| 19:38:52 | sean-k-mooney | melwitt: if we cant backport supprot for this upstream because we agree its a feature not a bug i think we at least need to backport a warning in our docs | |
| 19:56:58 | clarkb | isn't the problem that operating systems like windows will use it without your input? | |
| 19:57:17 | clarkb | so while it may not be suitable today their decisions may force a behavior choice? | |
| 22:50:42 | melwitt | I'm seeing the grenade-skip-level-always job failing a lot lately on "2025-07-25 19:16:25.748 | + inc/upgrade:save_mysql_dbs:45 : timeout 120 mysqldump -uroot -psecretdatabase neutron" | |
| 22:57:43 | melwitt | sean-k-mooney: thanks for digging into it. I agree on backporting at least a warning in the docs. personally I would support backporting use of the VIR_DOMAIN_UNDEFINE_KEEP_TPM flag given the severity of the unexpected behavior but I'm not sure if there could be any other issues with doing that | |
| 23:08:27 | gmaan | melwitt: yeah, it is known issue in grenade job. gibi added timeout to DB dump so that job will fail early than waiting for long time | |
| 23:08:43 | gmaan | and this is one fix he is trying https://review.opendev.org/c/openstack/grenade/+/955865 | |
| 23:11:06 | melwitt | gmaan: ahh ok, thanks! I was looking but did not find any hint about it | |
| 23:11:36 | gmaan | yeah, unfortunately nothing much in logs whihc can help to debug | |
| #openstack-nova - 2025-07-26 | |||
| 03:15:57 | opendevreview | Merged openstack/nova master: libvirt: Add objects and notifications for USB controller model. https://review.opendev.org/c/openstack/nova/+/927354 | |
| 06:20:04 | opendevreview | Michael Still proposed openstack/nova master: Implement USB controller extra spec for libvirt. https://review.opendev.org/c/openstack/nova/+/950643 | |
| 07:38:56 | opendevreview | melanie witt proposed openstack/nova master: Add hw:tpm_secret_security extra spec validation https://review.opendev.org/c/openstack/nova/+/940197 | |
| 07:38:56 | opendevreview | melanie witt proposed openstack/nova master: Add hw_tpm_secret_security image property https://review.opendev.org/c/openstack/nova/+/940196 | |
| 07:38:57 | opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `user` secret security https://review.opendev.org/c/openstack/nova/+/942502 | |
| 07:38:57 | opendevreview | melanie witt proposed openstack/nova master: TPM: migrate legacy instances to new security policy https://review.opendev.org/c/openstack/nova/+/942501 | |