Earlier  
Posted Nick Remark
#openstack-nova - 2025-07-25
14:33:39 noonedeadpunk ah, so it tried to handle >80 this wayu, lol
14:33:59 opendevreview Dmitriy Rabotyagov proposed openstack/nova master: [WIP] Allow to perform parallel live migrations https://review.opendev.org/c/openstack/nova/+/955784
15:07:39 opendevreview Balazs Gibizer proposed openstack/nova master: Document native threading mode and tuneables https://review.opendev.org/c/openstack/nova/+/949364
15:07:39 opendevreview Balazs Gibizer proposed openstack/nova master: Print ThreadPool statistics https://review.opendev.org/c/openstack/nova/+/948340
15:07:40 opendevreview Balazs Gibizer proposed openstack/nova master: Run nova-next with n-sch in threading mode https://review.opendev.org/c/openstack/nova/+/948450
15:07:40 opendevreview Balazs Gibizer proposed openstack/nova master: Allow services to start with threading https://review.opendev.org/c/openstack/nova/+/948311
15:07:41 opendevreview Balazs Gibizer proposed openstack/nova master: Run nova-api and -metadata in threaded mode https://review.opendev.org/c/openstack/nova/+/951957
15:07:41 opendevreview Balazs Gibizer proposed openstack/nova master: Do not yield in threading mode https://review.opendev.org/c/openstack/nova/+/950994
15:07:42 opendevreview Balazs Gibizer proposed openstack/nova master: Allow to start unit test without eventlet https://review.opendev.org/c/openstack/nova/+/953436
15:07:43 opendevreview Balazs Gibizer proposed openstack/nova master: [test]RPC using threading or eventlet selectively https://review.opendev.org/c/openstack/nova/+/953815
15:07:43 opendevreview Balazs Gibizer proposed openstack/nova master: Run unit test with threading mode https://review.opendev.org/c/openstack/nova/+/953475
15:07:45 opendevreview Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666
15:07:45 opendevreview Balazs Gibizer proposed openstack/nova master: [CI]Make nova-tox-py312-threading voting https://review.opendev.org/c/openstack/nova/+/955791
15:07:47 opendevreview Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915
15:08:40 gibi ^^ this last one is not a pure eventlet removal so I can accept a request to split the commit to two one that is independnet form the eventlet series and one that just adds the related tests back to the threading job after the first patch lands
15:09:58 opendevreview Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915
15:09:59 opendevreview Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666
16:57:55 sean-k-mooney gibi: i have not looked but i woudl only spliti it if you think we might need to backport it indepently
18:16:15 opendevreview Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666
18:16:15 opendevreview Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915
19:33:13 sean-k-mooney melwitt: so preserving the tmp data as distastful as it may be is probely technialy a feature not a bug
19:33:53 sean-k-mooney all the code i have looked at point to use assumign the data is preerved but the libvirt code never did that by default
19:34:28 sean-k-mooney that means however that vTPM in nova is unsutable for storign encyption keys like those used by bitlocker
19:35:18 sean-k-mooney adn its only sutable today to provide storage for messuered boot or to provide cyrpograpic random numbers
19:37:08 sean-k-mooney the nvram sitution i have not had time to track down
19:37:41 sean-k-mooney it may hae been a simialr logic on libvirt side where they assuemd it was oke to delet ewhen the domain in undefined and we assuemd it would be preserved like the disks
19:38:52 sean-k-mooney melwitt: if we cant backport supprot for this upstream because we agree its a feature not a bug i think we at least need to backport a warning in our docs
19:56:58 clarkb isn't the problem that operating systems like windows will use it without your input?
19:57:17 clarkb so while it may not be suitable today their decisions may force a behavior choice?
22:50:42 melwitt I'm seeing the grenade-skip-level-always job failing a lot lately on "2025-07-25 19:16:25.748 | + inc/upgrade:save_mysql_dbs:45 : timeout 120 mysqldump -uroot -psecretdatabase neutron"
22:57:43 melwitt sean-k-mooney: thanks for digging into it. I agree on backporting at least a warning in the docs. personally I would support backporting use of the VIR_DOMAIN_UNDEFINE_KEEP_TPM flag given the severity of the unexpected behavior but I'm not sure if there could be any other issues with doing that
23:08:27 gmaan melwitt: yeah, it is known issue in grenade job. gibi added timeout to DB dump so that job will fail early than waiting for long time
23:08:43 gmaan and this is one fix he is trying https://review.opendev.org/c/openstack/grenade/+/955865
23:11:06 melwitt gmaan: ahh ok, thanks! I was looking but did not find any hint about it
23:11:36 gmaan yeah, unfortunately nothing much in logs whihc can help to debug
#openstack-nova - 2025-07-26
03:15:57 opendevreview Merged openstack/nova master: libvirt: Add objects and notifications for USB controller model. https://review.opendev.org/c/openstack/nova/+/927354
06:20:04 opendevreview Michael Still proposed openstack/nova master: Implement USB controller extra spec for libvirt. https://review.opendev.org/c/openstack/nova/+/950643
07:38:56 opendevreview melanie witt proposed openstack/nova master: Add hw:tpm_secret_security extra spec validation https://review.opendev.org/c/openstack/nova/+/940197
07:38:56 opendevreview melanie witt proposed openstack/nova master: Add hw_tpm_secret_security image property https://review.opendev.org/c/openstack/nova/+/940196
07:38:57 opendevreview melanie witt proposed openstack/nova master: TPM: support instances with `user` secret security https://review.opendev.org/c/openstack/nova/+/942502
07:38:57 opendevreview melanie witt proposed openstack/nova master: TPM: migrate legacy instances to new security policy https://review.opendev.org/c/openstack/nova/+/942501
07:38:58 opendevreview melanie witt proposed openstack/nova master: Add vtpm_secret_(uuid|value) to LiveMigrateData https://review.opendev.org/c/openstack/nova/+/952628
07:38:58 opendevreview melanie witt proposed openstack/nova master: TPM: support instances with `host` secret security https://review.opendev.org/c/openstack/nova/+/941795
07:38:59 opendevreview melanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021
07:38:59 opendevreview melanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483
07:39:01 opendevreview melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629
07:39:01 opendevreview melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771
07:39:03 opendevreview melanie witt proposed openstack/nova master: TPM: confirm secret security via hard reboot https://review.opendev.org/c/openstack/nova/+/955847
07:39:03 opendevreview melanie witt proposed openstack/nova master: TPM: update instance request_spec with secret security https://review.opendev.org/c/openstack/nova/+/952630
09:26:41 opendevreview Dmitriy Rabotyagov proposed openstack/nova-specs master: Propose enabling parallel live migrations for libvirt https://review.opendev.org/c/openstack/nova-specs/+/955783
10:04:40 sean-k-mooney clarkb: yes thats part of the porblem. you have to opt in to vtpm but if its there it will be used by windows. everything i have reviewed on the nova side seams to have exepcted it to not be delete when we hard reboot butthat was obvioulsy an oversight on our part
10:04:48 sean-k-mooney clarkb: i would like to fix this as a bug fix
10:06:08 sean-k-mooney but im just pointing out that looking at libvirt c code and nova code i could find no evidance that it ever worked in the past the way we expected and therefor it technially not a regression. but to me it fundemently breaks how a tpm should work so while its tecnially a "feature" im very open to say this is a bug
10:08:14 sean-k-mooney its one of those things wehre the letter of the law says it a feature but being pragmatic and reflecting on both the enduser and operator impact combined with our orginal in tent i think it a bug, even if that was a bug in the orginal spec because we did not account for the deletaion on domain undefine
10:44:31 opendevreview Dmitriy Rabotyagov proposed openstack/nova master: Allow to perform parallel live migrations https://review.opendev.org/c/openstack/nova/+/955784
10:45:08 opendevreview Dmitriy Rabotyagov proposed openstack/nova master: Allow to perform parallel live migrations https://review.opendev.org/c/openstack/nova/+/955784
#openstack-nova - 2025-07-28
01:15:20 opendevreview Takashi Kajinami proposed openstack/nova master: Migrate MEM_ENCRYPTION_CONTEXT from root provider https://review.opendev.org/c/openstack/nova/+/921814
01:15:21 opendevreview Takashi Kajinami proposed openstack/nova master: Detect AMD SEV-ES support https://review.opendev.org/c/openstack/nova/+/925685
01:15:22 opendevreview Takashi Kajinami proposed openstack/nova master: Add hw_mem_encryption_model image property https://review.opendev.org/c/openstack/nova/+/927706
01:15:23 opendevreview Takashi Kajinami proposed openstack/nova master: libvirt: Launch instances with SEV-ES memory encryption https://review.opendev.org/c/openstack/nova/+/926106
02:01:28 opendevreview Takashi Kajinami proposed openstack/nova master: libvirt: Launch instances with SEV-ES memory encryption https://review.opendev.org/c/openstack/nova/+/926106
02:01:28 opendevreview Takashi Kajinami proposed openstack/nova master: Add hw_mem_encryption_model image property https://review.opendev.org/c/openstack/nova/+/927706
02:31:44 opendevreview Takashi Kajinami proposed openstack/nova master: libvirt: Launch instances with SEV-ES memory encryption https://review.opendev.org/c/openstack/nova/+/926106
02:31:44 opendevreview Takashi Kajinami proposed openstack/nova master: Add hw_mem_encryption_model image property https://review.opendev.org/c/openstack/nova/+/927706
07:00:37 opendevreview Friedrich Hiekel proposed openstack/nova master: Fix nova-scheduler placement error https://review.opendev.org/c/openstack/nova/+/951936
07:46:31 opendevreview Friedrich Hiekel proposed openstack/nova master: Fix nova-scheduler placement error https://review.opendev.org/c/openstack/nova/+/951936
11:02:08 opendevreview Florian proposed openstack/nova master: Add check for PCIe devices attach limit for volume and ports https://review.opendev.org/c/openstack/nova/+/955584
11:04:51 opendevreview Florian proposed openstack/nova master: Add check for PCIe devices attach limit for volume and ports https://review.opendev.org/c/openstack/nova/+/955584
12:53:47 opendevreview Florian proposed openstack/nova master: Add check for PCIe devices attach limit for volume and ports https://review.opendev.org/c/openstack/nova/+/955584
15:27:16 opendevreview Wesley Hershberger proposed openstack/nova stable/2024.2: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955310
15:30:06 opendevreview Wesley Hershberger proposed openstack/nova stable/2024.1: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955305
16:38:48 opendevreview Wesley Hershberger proposed openstack/nova stable/2024.2: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955310
16:41:50 opendevreview Wesley Hershberger proposed openstack/nova stable/2024.1: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955305
16:42:21 opendevreview Wesley Hershberger proposed openstack/nova stable/2024.1: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955305
17:00:20 sean-k-mooney dansmith: gibi i mentioned this a few day ago but before the end fo the release we probly need to add a license file to nova-contibe and decied if that shoudl be refactored into a actul python package or not
17:00:58 sean-k-mooney the latter topic does not nessisarly need to be decied now
17:01:31 sean-k-mooney but we should have a license file in the repo ideally before rc1 and figure out what the release model for that repo is ectra
17:02:03 sean-k-mooney at the moment i dont think its possibel to use the release repo to actully do releases of it
17:02:26 dansmith license file is fine, I think we should mark it as non-released (like os-test-images)
17:02:53 gibi yeah I'm OK to add a licence file and make it non-released
17:03:27 sean-k-mooney i dont really have a stong opion currently
17:03:54 sean-k-mooney it might be nice to release it eventually but i kind fo wanted use to have a dicussion about what it should and shoudl not contains and docuemnt that somehere like in a readme file
17:04:10 sean-k-mooney but we dont need to have that dicusssion now
19:11:55 melwitt dansmith, gibi, sean-k-mooney: I expect this question will need context load time so no worries to answer right away but in the vTPM patches I have up for review, I did not do a service version bump. the reason is because I could not find how it is needed,
19:12:41 melwitt new instances require compute traits that old computes will not have, so attempts to live migrate from new to old will fail with NoValidHost if there are no eligible new computes to go to
19:13:38 melwitt were you thinking maybe of rejecting in the API if the min service version in the deployment is still old? to not allow live migration at all even to new computes when mid-upgrade? if so, then I do understand that
19:14:22 sean-k-mooney i need to load context but it may have been related to how the traits usage is implemented
19:14:24 melwitt I might be missing something totally obvious but so far I was not understanding the requirement
19:14:33 sean-k-mooney im not sure we need a comptue service version bump
19:15:10 sean-k-mooney but if you requet say user mode vs one of the other modes you need to be sure the host that the vm land on understands the new iamge metadata
19:15:21 sean-k-mooney if we are doign that via traits uncondtionaly
19:15:29 sean-k-mooney then we are prorbaly fine as you said
19:15:34 melwitt yeah I kind of wondered if the service version bump was a discussion before the traits were decided on, so something like that. so I wanted to talk and find out if there is something I'm missing
19:15:50 melwitt *or something like that
19:16:18 sean-k-mooney i would honestly need to reload context by reading the spec
19:16:50 melwitt yeah, np. I wasn't sure when to ask this because I know it is complicated
19:17:33 sean-k-mooney i mean if i had recently read your patchs askign here woudl be fine but i have not looked at the vtpm stuff this cycle so this has all been paged out of my workign memory
19:17:56 melwitt for now I'm working on more func tests and maybe some more whitebox coverage and maybe some plain tempest coverage
19:18:02 sean-k-mooney melwitt: so based on yoru current undersdainding yoru not seeign a need for a bump is that correct
19:18:06 melwitt yep 100% understand

Earlier   Later