| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2026-04-03 | |||
| 13:29:39 | sean-k-mooney | i.e. you run them till they die or you run out of power/rack space | |
| 13:29:48 | sean-k-mooney | ya that too | |
| 13:29:50 | TheJulia | well, power + licenses + support on some level, but yeah | |
| 13:30:06 | TheJulia | oh, and cooling | |
| 13:30:53 | TheJulia | when I ran data centers, getting leadership to accept budgetting for cooling repairs or even improvements was quite literally the hardest problem even with temp sensors, load graphs, power curve and usage calculations | |
| 13:31:12 | TheJulia | I never quite understood that resistance to keeping the server nice and happy at ideal temps | |
| 13:31:13 | sean-k-mooney | i was an intern at micosoft on the office infra engeieing team and i remmeber the day the sent out a email saying you have 10 minths ot shutdown allw workloads in a data center | |
| 13:31:50 | sean-k-mooney | they loss all redunant cooling in the building and the rack room hat already pass 48c | |
| 13:32:42 | TheJulia | yup, nothing quite like walking into a data center at 61-62c. | |
| 13:32:57 | sean-k-mooney | there was some auto cutoff on the power that gong to dump the racks off line if it got to like 55 or something that they were trying to get ahead of | |
| 13:33:14 | TheJulia | (we lost all cooling on christmas day once, it was awesome!) | |
| 13:33:24 | sean-k-mooney | i bet | |
| 13:33:55 | sean-k-mooney | fyi ironic with devstack does not install on debina 13 due to a missing depency that was replaced | |
| 13:33:57 | TheJulia | yeah, the transformers trip was at 65c | |
| 13:34:15 | sean-k-mooney | shim-signed i think | |
| 13:34:16 | TheJulia | sean-k-mooney: has it been logged in launchpad? | |
| 13:34:20 | TheJulia | oh, figures | |
| 13:35:36 | sean-k-mooney | https://paste.opendev.org/show/bnsVQDVkNQ16t6PvmTVr/ | |
| 13:36:10 | sean-k-mooney | i can report that quickly. i kicked off an install yesterday and i was just checking on it im going to kick it off on ubuntu again | |
| 13:36:58 | sean-k-mooney | TheJulia: i assuem the ironic launchpad this is related i think ti the pxe image install or somethign related to that | |
| 13:38:17 | sean-k-mooney | https://github.com/openstack/ironic/blob/master/devstack/lib/ironic#L726 | |
| 13:39:03 | TheJulia | yeah, because of all the things around shim packaging we've seen those names change/evolve a lot over the years, that should really be in bindep :\ | |
| 13:39:11 | TheJulia | ... and LP doesn't load for me today. Joy! | |
| 13:40:00 | sean-k-mooney | hum same | |
| 13:40:36 | sean-k-mooney | it might just be very slow it did fineally load partly with a timeout error | |
| 13:41:30 | TheJulia | took close to 90 seconds on my end, but yeah, did finally load | |
| 13:42:08 | TheJulia | 30+ seconds to just sort the bug list, awesome! | |
| 13:42:34 | sean-k-mooney | shall i file it or are you on it | |
| 13:42:39 | TheJulia | I'll do it | |
| 13:42:46 | sean-k-mooney | cool | |
| 13:43:38 | sean-k-mooney | im seeing up a dev env badsed on the patch jay created so if i get time to look at the startup performance between now and the ptg i have a place to test things out | |
| 13:43:50 | sean-k-mooney | then you on im goign to enjoy the day off :) | |
| 13:50:42 | TheJulia | enjoy! | |
| 14:17:46 | TheJulia | gibi: I don't see any issue with your tls socket change, that being said it looks like somewhere the job setup for graphical console in ironic ci fell down or got lost, I'm going to sync up with stevebaker next week and we'll get it on the top of our list to sort out next week. | |
| 15:55:51 | Uggla | FYI I have booked the PTG slots here: https://ptg.opendev.org/ptg.html. This will happen mostly in Liberty room. Note this is currently draft, I will arrange when I'll be back from PTO. | |
| 22:56:10 | opendevreview | melanie witt proposed openstack/nova master: TPM: fixup for bump service version documentation https://review.opendev.org/c/openstack/nova/+/978836 | |
| 22:56:11 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `user` secret security https://review.opendev.org/c/openstack/nova/+/983333 | |
| 23:51:49 | opendevreview | Merged openstack/nova master: Add nova-vtpm job https://review.opendev.org/c/openstack/nova/+/978841 | |
| #openstack-nova - 2026-04-04 | |||
| 03:14:28 | opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | |
| 03:14:28 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 03:14:30 | opendevreview | melanie witt proposed openstack/nova master: TPM: enable conversion of secret security modes via resize https://review.opendev.org/c/openstack/nova/+/962052 | |
| 03:14:30 | opendevreview | melanie witt proposed openstack/nova master: TPM: add late check for supported TPM secret security https://review.opendev.org/c/openstack/nova/+/956975 | |
| 03:17:42 | opendevreview | melanie witt proposed openstack/nova master: DNM vtpm tempest https://review.opendev.org/c/openstack/nova/+/957477 | |
| 03:26:10 | opendevreview | melanie witt proposed openstack/nova master: DNM vtpm tempest https://review.opendev.org/c/openstack/nova/+/957477 | |
| 03:36:39 | opendevreview | melanie witt proposed openstack/nova master: DNM vtpm tempest https://review.opendev.org/c/openstack/nova/+/957477 | |
| 07:25:30 | opendevreview | melanie witt proposed openstack/nova master: TPM: fixup for bump service version documentation https://review.opendev.org/c/openstack/nova/+/978836 | |
| 07:25:31 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 07:25:31 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `user` secret security https://review.opendev.org/c/openstack/nova/+/983333 | |
| 07:25:32 | opendevreview | melanie witt proposed openstack/nova master: TPM: add late check for supported TPM secret security https://review.opendev.org/c/openstack/nova/+/956975 | |
| 07:25:32 | opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | |
| 07:25:33 | opendevreview | melanie witt proposed openstack/nova master: TPM: enable conversion of secret security modes via resize https://review.opendev.org/c/openstack/nova/+/962052 | |
| 07:36:12 | opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | |
| 07:36:12 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 07:36:13 | opendevreview | melanie witt proposed openstack/nova master: TPM: enable conversion of secret security modes via resize https://review.opendev.org/c/openstack/nova/+/962052 | |
| 07:36:13 | opendevreview | melanie witt proposed openstack/nova master: TPM: add late check for supported TPM secret security https://review.opendev.org/c/openstack/nova/+/956975 | |
| 09:11:51 | opendevreview | melanie witt proposed openstack/nova master: DNM vtpm tempest https://review.opendev.org/c/openstack/nova/+/957477 | |
| 23:22:43 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `user` secret security https://review.opendev.org/c/openstack/nova/+/983333 | |
| 23:24:26 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 23:24:27 | opendevreview | melanie witt proposed openstack/nova master: TPM: add late check for supported TPM secret security https://review.opendev.org/c/openstack/nova/+/956975 | |
| 23:24:27 | opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | |
| 23:24:28 | opendevreview | melanie witt proposed openstack/nova master: TPM: enable conversion of secret security modes via resize https://review.opendev.org/c/openstack/nova/+/962052 | |
| #openstack-nova - 2026-04-05 | |||
| 13:07:51 | opendevreview | Takashi Kajinami proposed openstack/nova-specs master: libvirt: AMD SEV-SNP support https://review.opendev.org/c/openstack/nova-specs/+/983376 | |
| 13:41:52 | opendevreview | Takashi Kajinami proposed openstack/nova-specs master: libvirt: AMD SEV-SNP support https://review.opendev.org/c/openstack/nova-specs/+/983376 | |
| 14:07:30 | opendevreview | Takashi Kajinami proposed openstack/nova-specs master: libvirt: AMD SEV-SNP support https://review.opendev.org/c/openstack/nova-specs/+/983376 | |
| 14:34:07 | opendevreview | Takashi Kajinami proposed openstack/os-traits master: Add a new trait for AMD SEV-SNP https://review.opendev.org/c/openstack/os-traits/+/983378 | |
| 15:41:34 | opendevreview | Takashi Kajinami proposed openstack/os-traits master: Add a new trait for AMD SEV-SNP https://review.opendev.org/c/openstack/os-traits/+/983378 | |
| #openstack-nova - 2026-04-06 | |||
| 17:43:36 | melwitt | dansmith: I'm going over your comments but something unrelated to the review that I keep forgetting is that barbican secrets when created default to having project_access=true which means the permission is for the project, not only the user | |
| 17:44:44 | dansmith | really? I thought it was the opposite | |
| 17:44:50 | melwitt | so I'm thinking I wonder if the doc for vTPM might be a bit misleading since it says "owned by the user" because it's really owned by the user and its project | |
| 17:45:55 | melwitt | I had thought so too but apparently no. not sure if it's always been like that or if something could have changed | |
| 17:46:04 | dansmith | either way, it doesn't matter from the perspective of the admin, which is the one doing the live migrating right? I guess I'm not sure which of my comments is yielding this clarification though... | |
| 17:47:22 | melwitt | that's right | |
| 17:47:52 | melwitt | it's not, it's just something i thought of while I was adding 'user' support and wanted to mention it to you in case it made you think anything different | |
| 17:48:26 | dansmith | ah okay | |
| 17:49:12 | dansmith | well, I thought ade told us the opposite a long while back, but fair enough.. not sure that "owned by the user" would mean anything other than "...and the project" to most readers since that's the default for most resources, | |
| 17:49:19 | dansmith | unless we say "and NOT the project" somewhere | |
| 17:49:32 | dansmith | but not opposed to clarifying in the docs (of course) either way | |
| 17:49:45 | dansmith | where is that default set or overridden? | |
| 17:50:06 | dansmith | like, barbican-side or us as the client? | |
| 19:00:57 | melwitt | dansmith: I saw the doc here while I was writing a tempest test for 'user' that adds the admin via ACL https://docs.openstack.org/api-guide/key-manager/acls.html#default-acl but I will go see if I can find where that is actually defaulted | |
| 19:10:24 | melwitt | looks like it is defaulted to true in the ACL model https://opendev.org/openstack/barbican/src/branch/master/barbican/model/models.py#L1243 and the ACL object https://opendev.org/openstack/barbican/src/branch/master/barbican/objects/secret_acl.py#L32 so I guess the question is, does every created secret get an ACL record automatically or does that only happen if the ACL API is called | |
| 19:14:42 | melwitt | I also don't see any way to create a secret and specify private from the get go https://docs.openstack.org/barbican/latest/api/reference/secrets.html so I guess in order to avoid a window where the ACL is open to the project, you would have to 1) create a metadata-only secret 2) create an ACL with project_access=false 3) PUT the payload to the metadata-only secret | |
| 19:14:50 | melwitt | maybe I'm not understanding this right | |
| 19:17:48 | dansmith | hmm, well, (a) if it's server-side we should probably avoid any statements in our docs about "how it is" and (b) maybe we should ask just to make sure | |
| 19:18:01 | dansmith | I was thinking there was also a "nobody (not even the owner) can see it until it has an ACL of some kind" | |
| 19:18:16 | dansmith | like maybe the owner can always ACL it, but can't read it until they give themselves that permission? | |
| 19:18:39 | dansmith | kinda like unix ownership.. I can remove my own read access, but I can always give it back to myself if I own it | |
| 19:18:46 | melwitt | yeah I dunno :/ | |
| 19:20:19 | melwitt | yeah I agree, "how it is" could change. also I guess we could do whatever explicitly but that's not been the behavior up to now, so I would hesitate to change it if it's operating in a way that vtpm users are fine with | |
| 19:20:47 | melwitt | and yeah, it would be nice to ask if there is someone who could explain all the details | |
| #openstack-nova - 2026-04-07 | |||
| 03:33:34 | opendevreview | melanie witt proposed openstack/nova master: TPM: fixup for bump service version documentation https://review.opendev.org/c/openstack/nova/+/978836 | |
| 03:33:34 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `user` secret security https://review.opendev.org/c/openstack/nova/+/983333 | |
| 03:33:35 | opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | |
| 03:33:35 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 03:33:36 | opendevreview | melanie witt proposed openstack/nova master: TPM: add late check for supported TPM secret security https://review.opendev.org/c/openstack/nova/+/956975 | |
| 03:33:36 | opendevreview | melanie witt proposed openstack/nova master: TPM: enable conversion of secret security modes via resize https://review.opendev.org/c/openstack/nova/+/962052 | |
| 03:33:37 | opendevreview | melanie witt proposed openstack/nova master: TPM: clean up orphaned libvirt secret on guest creation failure https://review.opendev.org/c/openstack/nova/+/983505 | |
| 03:33:37 | opendevreview | melanie witt proposed openstack/nova master: TPM: handle key manager Forbidden errors consistently https://review.opendev.org/c/openstack/nova/+/983504 | |
| 10:52:03 | opendevreview | Robbert Nijgh proposed openstack/nova master: Remove proxy wrapping in libvirt device listing, slowing down update_available_resource https://review.opendev.org/c/openstack/nova/+/983529 | |
| 13:27:51 | MaxLamprecht[m] | sean-k-mooney: Can you maybe have another look at this https://review.opendev.org/c/openstack/nova/+/934984. We merged already the reproducer a while ago | |