| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2026-08-12 | |||
| 15:35:29 | gmaan | dansmith: thanks for testing and review. i did not time to check that warning things yesterday but I will check if that is something valid one because amqp listener stopped listening but queue was up or so | |
| 17:17:10 | gmaan | melwitt: these two changes for graceful shutdown are ready for 2nd core, first one you already reviewed earlier with +1, please check https://review.opendev.org/c/openstack/nova/+/996299 https://review.opendev.org/c/openstack/nova/+/996583 | |
| 17:17:40 | melwitt | gmaan: nice, will look | |
| 17:17:53 | gmaan | thanks | |
| 17:54:38 | opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Support cold migration with virtiofs shares https://review.opendev.org/c/openstack/nova/+/989633 | |
| 20:58:37 | opendevreview | Ashish Gupta proposed openstack/nova master: Make functional-py313-threading voting https://review.opendev.org/c/openstack/nova/+/997216 | |
| 20:58:38 | opendevreview | Ashish Gupta proposed openstack/nova master: Fix test_fill_vifs_migration under native threading https://review.opendev.org/c/openstack/nova/+/1000780 | |
| #openstack-nova - 2026-08-13 | |||
| 04:01:41 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Unify the thread pool executors into a central factory https://review.opendev.org/c/openstack/nova/+/998571 | |
| 04:22:06 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Shutdown thread pool executors during service shutdown https://review.opendev.org/c/openstack/nova/+/1000211 | |
| 05:07:18 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Shutdown thread pool executors during graceful shutdown https://review.opendev.org/c/openstack/nova/+/1000211 | |
| 05:07:47 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Add doc and release notes for the graceful shutdown task tracking https://review.opendev.org/c/openstack/nova/+/997141 | |
| 07:25:45 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Generalize memory encryption config https://review.opendev.org/c/openstack/nova/+/998466 | |
| 07:25:46 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Launch security Intel TDX https://review.opendev.org/c/openstack/nova/+/999249 | |
| 07:25:46 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Add memory encryption config for TDX https://review.opendev.org/c/openstack/nova/+/998608 | |
| 07:25:47 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: reject_mem_enc_instances https://review.opendev.org/c/openstack/nova/+/1000082 | |
| 07:25:47 | opendevreview | Anton Iacobaeus proposed openstack/nova master: doc: Add documentation for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000081 | |
| 07:25:48 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Add os_firmware_secure https://review.opendev.org/c/openstack/nova/+/1000472 | |
| 07:57:47 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Check only x86_64 arch for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000805 | |
| 08:33:51 | opendevreview | Lajos Katona proposed openstack/nova master: libvirt: Avoid setting MTU during live migration if different https://review.opendev.org/c/openstack/nova/+/995809 | |
| 08:33:51 | opendevreview | Lajos Katona proposed openstack/nova master: libvirt: Add test for MTU overwrite during live migration https://review.opendev.org/c/openstack/nova/+/995803 | |
| 08:33:52 | opendevreview | Lajos Katona proposed openstack/nova master: libvirt: Preserve queue_size during live migration https://review.opendev.org/c/openstack/nova/+/995841 | |
| 08:33:52 | opendevreview | Lajos Katona proposed openstack/nova master: Add regression test to repoduce bug 1854844 https://review.opendev.org/c/openstack/nova/+/991772 | |
| 08:38:57 | RomanHros[m] | Hello, please someone look at the https://launchpad.net/bugs/2016173. It looks like very beneficial patch but seems to be forgotten... | |
| 09:42:24 | frickler | melwitt: sean-k-mooney[m]: ^^ any reason this is stuck except lack of focus? https://review.opendev.org/c/openstack/nova/+/880399 | |
| 09:45:19 | sean-k-mooney[m] | nothing comes to mind | |
| 09:48:39 | sean-k-mooney[m] | im still waking up but i can take a look properly when im at my desk | |
| 10:39:31 | opendevreview | Stephen Finucane proposed openstack/nova master: Add ruff-check https://review.opendev.org/c/openstack/nova/+/974441 | |
| 10:39:31 | opendevreview | Stephen Finucane proposed openstack/nova master: trivial: Fix outstanding flake8 issues https://review.opendev.org/c/openstack/nova/+/999714 | |
| 10:39:32 | opendevreview | Stephen Finucane proposed openstack/nova master: Enable G (flake8-logging-format) rules https://review.opendev.org/c/openstack/nova/+/998557 | |
| 13:24:51 | gibi | antia: tkajinam: after pulling down the latest version of the TDX series to the same machine I used before for testing I libvirt rejects the VM boot with | |
| 13:24:54 | gibi | Aug 13 16:23:40 beast01.rhos.lab.eng.brq2.redhat.com nova-compute[1108220]: ERROR nova.compute.manager [instance: e034aa57-fdca-4ea2-831f-41bcf51eb1d3] libvirt.libvirtError: operation failed: Unable to find 'efi' firmware that is compatible with the current configuration | |
| 13:25:18 | gibi | so I guess this is connected to the secure loader / secure firmware change | |
| 13:25:30 | antia | gibi: okay interesting | |
| 13:25:52 | gibi | it is on centos 10 stream | |
| 13:27:24 | antia | what firmware files does it have? | |
| 13:27:45 | gibi | https://paste.openstack.org/show/bT6yOXgAEr7XuYjlHCvI/ | |
| 13:27:53 | gibi | this is the xml | |
| 13:28:54 | antia | that forces no secure boot, does it have a no secure boot TDX firmware? | |
| 13:28:55 | gibi | collecting... | |
| 13:29:41 | gibi | https://paste.openstack.org/show/bSKoS2kOht69y2yUygFX/ | |
| 13:29:46 | gibi | these are the descriptors | |
| 13:30:37 | gibi | it seems that I have only one tdx descriptor and that points to a secureboot firmware | |
| 13:30:58 | antia | yup that makes sense, I have the same on my system | |
| 13:31:16 | gibi | OK so I guess I can boot if I request secureboot as well | |
| 13:31:42 | antia | or set it to 'optional' | |
| 13:31:56 | sean-k-mooney | optinal effectivly mean off | |
| 13:32:01 | gibi | I have OVMF.inteltdx.secboot.fd and OVMF.inteltdx.fd so I can also create a new descriptor | |
| 13:32:06 | sean-k-mooney | it means libvirt decies which migh tactully work now | |
| 13:32:26 | sean-k-mooney | beofre it used ot more or less be off but worht a try | |
| 13:32:33 | antia | I think in this case libvirt has no other choice than to give an enabled one, but I could be wrong | |
| 13:32:36 | gibi | sean-k-mooney: given I have only firmware descriptor for tdx + secure boot libvirt will select that if optional | |
| 13:32:45 | gibi | I will test it :) | |
| 13:33:34 | antia | https://paste.openstack.org/show/bdbleKLLworBpma70kXB/ | |
| 13:33:34 | antia | I created a no secure boot firmware from my available firmware | |
| 13:34:11 | antia | I suppose it works differently on centos | |
| 13:36:03 | gibi | yepp optional works and the VM uses the secure boot firmware | |
| 13:36:17 | gibi | as that is the only one with tdx now | |
| 13:36:51 | gibi | I will try antia's nosb descriptor now :) | |
| 13:37:01 | antia | :D | |
| 13:39:28 | gibi | ...adapted to my env | |
| 13:40:37 | sean-k-mooney | ya its likely just a packaging issue | |
| 13:41:04 | sean-k-mooney | thats not a blocker for the feature | |
| 13:42:42 | gibi | yeah it seems to work | |
| 13:42:53 | gibi | so I'm OK too | |
| 13:43:50 | sean-k-mooney | that will get fixed in a future ovmf version eventually | |
| 13:44:13 | sean-k-mooney | we could add a note or just recommen using optional | |
| 13:44:30 | sean-k-mooney | i.e. in the feature release note | |
| 13:44:34 | sean-k-mooney | or docs | |
| 13:44:41 | gibi | yepp | |
| 13:45:04 | antia | yes can add that to docs | |
| 13:46:06 | sean-k-mooney | it would be nice to have a tmepest test for this eventually by the way , in whitebox or main tempest but since we cant run it upstream i would not proritze that before FF | |
| 13:46:48 | gibi | yeah we discussed that in case of SNP and TDX as an optional step to provide whitebox coverage | |
| 13:47:08 | gibi | I think both tkajinam for SNP and antia for TDX said they will try to add it | |
| 13:47:08 | sean-k-mooney | we just need to creat the flavor/image with the approate metadata to enabel the feature and spawn | |
| 13:47:24 | gibi | yepp that is and in whitebox we can look at the xml created | |
| 13:47:29 | sean-k-mooney | true | |
| 13:48:10 | sean-k-mooney | while we do not have the ablity to report upstream form our downstrema host we do have the ablity to runa devstack job there in thory | |
| 13:48:21 | sean-k-mooney | so may be we can figoure out a way to do that testing later | |
| 13:48:52 | sean-k-mooney | evertually we might eb able to make that public but we would have to sanitze the logs | |
| 13:49:03 | sean-k-mooney | that the mian blocker currenlty if its a post merge ci | |
| 13:49:11 | sean-k-mooney | i.e. a weekly perodic | |
| 13:50:39 | gibi | I noted the os_secure_boot=optional thing in the doc patch in the TDX series | |
| 13:55:23 | opendevreview | Kamil Sambor proposed openstack/nova master: Replace StaticallyDelayingWrapper with futurist DelayingExecutor https://review.opendev.org/c/openstack/nova/+/997410 | |
| 13:56:47 | gibi | OK I'm cool with the TDX series now. I run some local tests as well with the latest series. | |
| 13:57:01 | gibi | /run/ran/ | |
| 14:29:06 | opendevreview | Anton Iacobaeus proposed openstack/nova master: doc: Add documentation for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000081 | |
| 14:29:07 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Add os_firmware_secure https://review.opendev.org/c/openstack/nova/+/1000472 | |
| 14:29:07 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: reject_mem_enc_instances https://review.opendev.org/c/openstack/nova/+/1000082 | |
| 14:29:08 | opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Check only x86_64 arch for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000805 | |
| 15:32:16 | dansmith | unit tests are giving me "no such option enforce_scope in group [oslo_policy]" errors on several.. gmaan that was a recent change right? tried rebuilding venv, etc but still get it.. what am I missing? | |
| 15:34:05 | gmaan | dansmith: yes, this option is removed. i think recreate venv should fix it but is it nova giving error? | |
| 15:34:30 | gmaan | most of projects are fixed with this but not all. nova/placement etc are fixed alreadt | |
| 15:39:59 | dansmith | yeah, venv rebuild seemed to not.. I figured it was a library version thing | |
| 15:40:00 | dansmith | hrm | |
| 15:41:08 | dansmith | gmaan: is it a version of oslo.policy I need to have or something? | |
| 15:42:10 | gmaan | dansmith: oslo.policy 6.0.0 removed it but nova should not be using it anywhere so it should work any version of oslo.policy | |
| 15:43:00 | dansmith | gmaan: this is an example (one of many) https://paste.opendev.org/show/bdPguy48EU0zoQuirlrk/ | |
| 15:44:00 | dansmith | oslo.policy in the venv is indeed 6.0.0 | |
| 15:44:56 | gmaan | dansmith: ohk and nova seems old one not master https://github.com/openstack/nova/blob/master/nova/tests/unit/policies/base.py#L66-L70 | |
| 15:45:08 | gmaan | is it master and you updated the repo or stable branch? | |