Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2017-03-28
14:31:16 mdbooth The model is entirely applicable to any shared connection.
14:31:48 mdbooth All I require of the lowest level is: attach, detach, is_connected
14:37:00 ildikov mdbooth: got it, I need to look into the patch a bit
14:37:55 mdbooth ildikov: The patch as-is is specifically for drivers which use mount. Don't get hung up on that, though. The state tracking is the interesting bit.
14:38:12 ildikov yeah, that part what I meant more
14:38:32 ildikov I'm personally always get scared when we start to do state tracking... :)
14:38:44 ildikov mdbooth: :)
14:40:18 mdbooth ildikov: Amongst other things, it fixes a bug we had in the old model. We'd just try to unmount and see if it succeeded or not. Problem is, it *would* succeed if one of the instances using it was stopped. You can scan the entire host state for that every time, or you can keep track of it.
14:41:12 mdbooth Also, it meant we never knew when a failure to unmount was an error.
14:41:13 ildikov I guess scanning every time would be overkill
14:41:39 ildikov although re-scan every once in a while would still be good to make a sanity check
14:42:00 ildikov as we have issues identified with the old model, we should be able to fix that with the new
14:42:08 mdbooth My patch just has sanity checking built in to connect/disconnect
14:43:33 openstackgerrit Balazs Gibizer proposed openstack/nova master: Remove **kwargs passing in payload __init__ https://review.openstack.org/418489
14:44:23 ildikov mdbooth: oh ok, I thought it's only host startup
14:44:56 mdbooth It does a full scan at host startup, but it also has enough context to do more sensible recovery during connect/disconnect
14:45:33 ildikov ok, got it
14:45:40 mdbooth Incidentally, if you re-do the full host scan you'd need to block all connect/disconnect globally while you did it
14:46:10 ildikov that does not sound ideal
14:46:18 openstackgerrit Balazs Gibizer proposed openstack/nova master: Remove **kwargs passing in payload __init__ https://review.openstack.org/418489
14:46:24 mdbooth It's a fundamental requirement, though.
14:47:27 ildikov I just meant that if we would re-do the full scan at all connect/disconnect that does not sound ideal, I get the block
14:48:44 mriedem johnthetubaguy: i'm about to pull a +W on https://review.openstack.org/#/c/373203/ unless you think we need at least one more specs core to review it first?
14:50:01 johnthetubaguy mriedem: I mean, we have quite a few other folks +1s we could upgrade for this one
14:53:18 jaypipes so, gibi, it seems to me that since you've been doing the "top 5 notifications patches" email each week, that we've made steady progress getting patches merged. would you agree?
14:53:45 mriedem johnthetubaguy: works for me, i'll just tell everyone you told me sum(+1) == +2 :)
14:54:05 gibi jaypipes: yes. I expressed exactly this to mriedem last week on the subteam meeting
14:54:14 gibi jaypipes: so I'm happy :)
14:54:16 jaypipes gibi: cool.
14:54:20 jaypipes :)
14:54:33 gibi jaypipes: and thankful for all the reviews
14:55:08 jaypipes gibi: hey, no worries. I'm excited to get to searchlight.
14:56:03 openstackgerrit dane-fichter proposed openstack/nova master: Use cursive for signature verification https://review.openstack.org/351232
14:56:48 ildikov mriedem: :)
14:57:07 ildikov johnthetubaguy: mriedem: I rebased jgriffith's detach PoC on lyarwood's refactor patch already
14:57:27 mriedem ok
14:57:49 mriedem i'll try to review the refactor change this week between orientation stuff
14:58:14 ildikov cool
14:58:19 ildikov thank you!
15:00:10 sfinucan vladikr: comment on https://review.openstack.org/#/c/430026/3
15:01:17 mriedem alex_xu: were you working on removing api extensions in pike? i know you had a poc for removing the stevedore entries. did you want to start tracking that under https://blueprints.launchpad.net/nova/+spec/api-no-more-extensions-ocata ? we'd need to rename that to https://blueprints.launchpad.net/nova/+spec/api-no-more-extensions-pike which is fine since we did not make any progress there in ocata.
15:01:51 alex_xu mriedem: yea, I'm working on that, I will reuse that bp
15:05:21 mriedem alex_xu: ok i'll rename it quick
15:05:28 alex_xu mriedem: thanks
15:06:22 mriedem done https://blueprints.launchpad.net/nova/+spec/api-no-more-extensions-pike
15:06:23 mriedem np
15:11:14 openstackgerrit Alex Xu proposed openstack/nova master: Use plain routes list for '/servers' endpoint instead of stevedore https://review.openstack.org/445864
15:11:15 openstackgerrit Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opts in BDM tests https://review.openstack.org/450830
15:11:15 openstackgerrit Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opts in multi-create https://review.openstack.org/450831
15:11:16 openstackgerrit Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in config drive https://review.openstack.org/450832
15:11:17 openstackgerrit Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in AZ https://review.openstack.org/450833
15:11:17 openstackgerrit Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in user data https://review.openstack.org/450834
15:11:18 openstackgerrit Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in scheduler hints https://review.openstack.org/450835
15:11:18 openstackgerrit Alex Xu proposed openstack/nova master: Remove config opts for extension black/white list https://review.openstack.org/450836
15:11:18 openstackgerrit Alex Xu proposed openstack/nova master: Remove the extension check for os-networks in servers API https://review.openstack.org/450837
15:23:39 mdbooth Does anybody happen to know if we use SELinux labels when connecting an NFS volume using libvirt?
15:23:43 mdbooth kashyap: ^^^ ?
15:24:03 kashyap mdbooth: I guess we do, I recall triaging a bug in that area
15:24:08 mdbooth If we do, then it occurs to me this is another complication for multi-attach.
15:24:11 mdbooth johnthetubaguy: ^^^
15:24:19 kashyap Let me see if I can find it
15:24:58 mdbooth ...if we've got existing protections designed to prevent an instance from reading another instance's storage.
15:27:42 dansmith mdbooth: how do multi-attach and nfs overlay?
15:28:11 jaypipes sfinucan: yeah, that doc/description of trait thing is a long-term plan
15:28:18 vladikr sfinucan, ah, thanks, replied
15:28:19 mdbooth dansmith: Any fs-backed cinder volume driver, really
15:28:31 jaypipes sfinucan: I don't want to hold up any further on getting the storage and nic traits in.
15:28:37 mdbooth But you've got a volume on nfs attached to instance A
15:28:41 sfinucan jaypipes: Okidok
15:28:57 dansmith mdbooth: but you still connect via iscsi to that thing on the actual compute, yes?
15:28:58 kashyap mdbooth: I had to at least ensure this boolean is set `setsebool -P virt_use_nfs on`
15:29:02 mdbooth I'm guessing (no, really) that it's picked up an SELinux label which allows A to read it
15:29:09 mdbooth dansmith: Nope, it gets mounted on the host
15:29:23 dansmith mdbooth: ...really?
15:29:54 dansmith I guess I've only used non-fs cinder drivers
15:30:01 mdbooth dansmith: You can review my patch, btw: https://review.openstack.org/#/c/383859/ ?
15:30:02 mdbooth ;)
15:30:13 mdbooth It does lots of mounty type things
15:30:14 dansmith but I thought cinder-volume would just export via iscsi like it does for, say, lvm
15:30:27 dansmith apparently I can't
15:31:22 mdbooth I just reviewed this for the quobyte driver, which is very similar: https://review.openstack.org/#/c/428646/
15:31:34 mdbooth They want to disable xattrs for performance reasons
15:32:06 mdbooth Set me thinking about SELinux and shared filesystems in general
15:35:52 johnthetubaguy mdbooth: you can't mount the same nfs share twice in two different locations then? I guess thats fairly stupid though
15:36:32 johnthetubaguy mdbooth: the more I think about multi-attach, the more I kinda want an option for a set of read-only attachments to a volume snapshot as an explicit (simpler) special case
15:37:01 mdbooth johnthetubaguy: You can, but **IIUC** the labelling on the individual file includes a MCS label specific to a particular domain(instance)
15:37:19 mdbooth There *must* be a solution to this, though
15:37:36 mdbooth It will definitely have come up before in libvirt
15:40:30 johnthetubaguy mdbooth: yeah, i guess it should be possible, without re-labelling, presumably
15:40:41 mdbooth https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/Virtualization/sect-Virtualization-Shared_storage_and_virtualization-Using_iSCSI_for_storing_virtual_disk_images.html
15:40:48 mdbooth Ah, that's RHEL 5
15:40:59 mdbooth That says no labelling on NFS, but that didn't sound right to me
16:34:05 openstackgerrit Maxim Nestratov proposed openstack/nova master: libvirt: change images cache and backend lock path https://review.openstack.org/450879
17:10:33 openstackgerrit Gábor Antal proposed openstack/nova master: Transform instance.volume_attach notification https://review.openstack.org/401992
17:24:08 openstackgerrit dane-fichter proposed openstack/nova master: Use cursive for signature verification https://review.openstack.org/351232
17:26:04 efried Is there a channel for openstackclient?
17:31:17 efried Or... How do I create a VM with no network? Used to be I could say --nick none (which the usage statement & help claim is fine) - but that's now telling me "nics must be a list".
17:33:27 swebster efried: somebody asked this in #openstack yesterday, and the answer was #openstack-sdks
17:33:39 efried swebster Thanks!
17:34:48 luos hi, i'd like to develop a filter scheduler for nova, what's the best method to get nova as a dependency? i mean i'd like to run some unit tests without actually installing the whole openstack

Earlier   Later