| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2026-08-24 | |||
| 16:29:52 | Uggla | #topic Confidential computing, status of SNP and TDX features | |
| 16:30:01 | elodilles | sean-k-mooney: https://review.opendev.org/c/openstack/releases/+/1001307 | |
| 16:30:16 | elodilles | (the patch is already there ^^^) | |
| 16:30:23 | Uggla | tkajinam, antia, gibi, gmaan something something new ? | |
| 16:30:31 | sean-k-mooney | elodilles: yep | |
| 16:31:02 | sean-k-mooney | Uggla: SNP is merged TDX is +2'd all the way | |
| 16:31:09 | sean-k-mooney | i think it has +w on most of the patches | |
| 16:31:22 | sean-k-mooney | gibi gmaan and i have reviewd teh series | |
| 16:31:29 | gmaan | i too reviewed the TDX series on friday and most of it was in good shape. I think I had only one question on one of the changed | |
| 16:31:37 | gibi | yeah about secure boot | |
| 16:31:38 | sean-k-mooney | antia posted teste resutls for secure boot as a comment today | |
| 16:31:42 | gibi | yepp | |
| 16:31:49 | gmaan | perfect | |
| 16:32:00 | gmaan | I will check those today | |
| 16:32:06 | gibi | thanks | |
| 16:32:10 | antia | thanks all | |
| 16:32:37 | gmaan | gibi: FYI, sean-k-mooney antia and I talked about publishing the testing of TDX in upstream | |
| 16:32:39 | sean-k-mooney | antia: there may be some merge conflcit that will require rebases | |
| 16:33:02 | gmaan | here | |
| 16:33:05 | gmaan | #link https://etherpad.opendev.org/p/nova-ci-failures-minimal#L400 | |
| 16:33:15 | sean-k-mooney | so we will need to wtach the patches until they finally land | |
| 16:33:18 | antia | sean-k-mooney: I rebased with main last friday, but I'll keep an eye on it! | |
| 16:33:43 | gmaan | #link https://github.com/openstack/nova/tree/master/doc/source/contributor/testing | |
| 16:34:11 | gibi | gmaan: I would say write a whitebox tempest test | |
| 16:34:17 | gmaan | as gibi also done the testing, i think it will be good to add your scenario if anything special | |
| 16:34:21 | sean-k-mooney | ya os i dont think its good to commit results in the repo | |
| 16:34:38 | gibi | tests can serves as executable documentation | |
| 16:34:38 | sean-k-mooney | but we can have a basic how to test doc | |
| 16:34:46 | sean-k-mooney | and ya tempest/whitebox were planned to follow | |
| 16:34:51 | gmaan | whitebox testing is good but as there are many things to take care for TDX configuration, having those in testing guide can be useful | |
| 16:35:05 | gibi | most of the compllication of testing this is HW setup, the flavor and image setup is pretty standard | |
| 16:35:22 | gibi | but I would not start carrying HW config doc in openstack tree | |
| 16:35:44 | gmaan | yeah, HW setup which will not be covered by tempest/whitebox tests and it will be helpful for someone who want to run those tests | |
| 16:36:10 | gibi | I don't like that as we cannot validate those HW configs and they tend to change over time | |
| 16:36:22 | tkajinam | I have to reach LY team to understand their current status about whitebox tempest plugin tests for snp but I suspect they haven't touched it yet. | |
| 16:36:28 | gibi | I'm fine linking to intel and amd docs | |
| 16:36:36 | sean-k-mooney | same, i woudl focus on just the nova settings | |
| 16:37:03 | sean-k-mooney | perhaps the generic kernel options but not toch any bios/hardware cofnig that is specific to a given severver | |
| 16:37:08 | gibi | yeah | |
| 16:37:30 | sean-k-mooney | thing like how to check the capcity or kernel parms is fine | |
| 16:37:43 | tkajinam | I was thinking of adding a few useful check points to determine whether OS and firmware are configured properly (for example checking sysfs output and libvirt domcapabilities) | |
| 16:37:46 | gmaan | well I was thinking of full guide somewhere whihc can tell HW setup (at leat generic one), flavor/image setup, and tests to run (manual or tepmest/whitebox) | |
| 16:37:59 | tkajinam | which I think sean-k-mooney is also suggesting | |
| 16:38:02 | sean-k-mooney | gmaan: in that case i think that hsoudl live outside the nova repo | |
| 16:38:06 | gibi | yeah | |
| 16:38:08 | gibi | maybe a blogpost | |
| 16:38:25 | tkajinam | blogpost may also work, yeah | |
| 16:38:26 | sean-k-mooney | tkajinam: yep more or less | |
| 16:38:33 | gmaan | thats fine, or in whitebox doc where tests will live or so but blogpost also works | |
| 16:38:45 | sean-k-mooney | virsh cap/domcaps or cat /sys is fine | |
| 16:39:05 | gibi | I would really like if amd and intel publish nice docs (and intel did) so we can refer them | |
| 16:39:07 | sean-k-mooney | the basic thigns to check that the host could run the feature | |
| 16:39:55 | sean-k-mooney | i woudl be ok docuemneting this in whitebox in more detail as well for what it worth | |
| 16:40:04 | gibi | https://cc-enabling.trustedservices.intel.com/intel-tdx-enabling-guide/04/hardware_setup/ this is the intel doc | |
| 16:40:07 | gmaan | yeah | |
| 16:40:09 | gmaan | anyways, that is not blocker for the series to land, something to be think of later on | |
| 16:40:21 | tkajinam | +1 | |
| 16:40:27 | gibi | yeah | |
| 16:40:42 | Uggla | cool congrats to all! especially antia for the implementation. | |
| 16:41:01 | Uggla | moving on | |
| 16:41:09 | Uggla | #topic Bug scrubbing | |
| 16:41:17 | Uggla | #info down to 65 (-8) but up to 69 (+4) due to gate issues. | |
| 16:41:25 | Uggla | #link https://etherpad.opendev.org/p/nova-bug-triage-roster | |
| 16:41:32 | Uggla | #link https://truc.uggla.fr/ to follow the trend. | |
| 16:41:38 | Uggla | Next meeting (this week): [public] Upstream bug triage. Wednesday, August 26th · 15:30 – 16:00 UTC. Video call link: meet.google.com/zjr-rxus-hzj | |
| 16:41:44 | gmaan | yeah, friday i added a few which are happening in gate in this etherpad | |
| 16:41:47 | gmaan | #link https://etherpad.opendev.org/p/nova-ci-failures-minimal#L400 | |
| 16:42:08 | gmaan | as gibi mentioned I will check graceful shutdown one today or tomorrow | |
| 16:42:17 | gibi | gmaan: thanks! | |
| 16:42:47 | gmaan | fix for one of them is up for 2nd core | |
| 16:42:49 | gmaan | #link https://review.opendev.org/c/openstack/nova/+/1001017 | |
| 16:43:10 | gmaan | the top of it which makes jobs results more readable | |
| 16:43:20 | gmaan | #link https://review.opendev.org/c/openstack/nova/+/1001212/1 | |
| 16:43:34 | gmaan | fucntional tests one happening more frequeently which I will check | |
| 16:43:46 | gibi | I will check these ^^ tomorrow | |
| 16:43:49 | gmaan | thanks | |
| 16:43:55 | Uggla | gmaan 👍 | |
| 16:44:21 | Uggla | #topic Open discussion | |
| 16:44:41 | Uggla | nothing on the agenda, but sean-k-mooney wanted to discuss something. | |
| 16:44:48 | sean-k-mooney | yep https://zuul.openstack.org/builds?job_name=devstack-platform-ubuntu-resolute | |
| 16:45:01 | sean-k-mooney | so i ment ot make that voting in devstack about a month ago | |
| 16:45:05 | sean-k-mooney | its been pretty stable | |
| 16:45:15 | sean-k-mooney | but i would also like to add it to check | |
| 16:45:17 | sean-k-mooney | in nova | |
| 16:45:37 | sean-k-mooney | that is runing ubuntu 26.04 and python 3.14 | |
| 16:46:02 | sean-k-mooney | whith these tests https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_b12/openstack/b126e9e318f340e6bc4aa1a357feaf17/testr_results.html | |
| 16:46:30 | sean-k-mooney | whish is pretty basic but gives us some level of coverage | |
| 16:46:36 | gmaan | ++ on both, anyways this needs to be done for next cycle testing runtime | |
| 16:46:36 | sean-k-mooney | what do folks think? | |
| 16:46:59 | gmaan | I am going to add tempest full job on resolute in tempest gate | |
| 16:47:08 | Uggla | from the result I would say yes. Should we enable them now or after the release of H ? | |
| 16:47:14 | gmaan | ping me once you are making ti voting in devstack, I will review | |
| 16:47:26 | sean-k-mooney | i would like to have it on h | |
| 16:47:33 | sean-k-mooney | that why i raised it now | |
| 16:47:33 | gmaan | sean-k-mooney: you want to add voting in nova or non voting in check pipelone only | |
| 16:47:46 | sean-k-mooney | but its not stricly requried until i (2027.1) | |
| 16:48:00 | sean-k-mooney | gmaan: its passing so why not make it voting | |
| 16:48:10 | sean-k-mooney | we can alwasy change it later if its an issue | |
| 16:48:16 | gmaan | sure, I am ok with that, if we see it unstable then we can always revert | |
| 16:48:19 | gmaan | yeah | |