| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2017-03-28 | |||
| 14:54:33 | gibi | jaypipes: and thankful for all the reviews | |
| 14:55:08 | jaypipes | gibi: hey, no worries. I'm excited to get to searchlight. | |
| 14:56:03 | openstackgerrit | dane-fichter proposed openstack/nova master: Use cursive for signature verification https://review.openstack.org/351232 | |
| 14:56:48 | ildikov | mriedem: :) | |
| 14:57:07 | ildikov | johnthetubaguy: mriedem: I rebased jgriffith's detach PoC on lyarwood's refactor patch already | |
| 14:57:27 | mriedem | ok | |
| 14:57:49 | mriedem | i'll try to review the refactor change this week between orientation stuff | |
| 14:58:14 | ildikov | cool | |
| 14:58:19 | ildikov | thank you! | |
| 15:00:10 | sfinucan | vladikr: comment on https://review.openstack.org/#/c/430026/3 | |
| 15:01:17 | mriedem | alex_xu: were you working on removing api extensions in pike? i know you had a poc for removing the stevedore entries. did you want to start tracking that under https://blueprints.launchpad.net/nova/+spec/api-no-more-extensions-ocata ? we'd need to rename that to https://blueprints.launchpad.net/nova/+spec/api-no-more-extensions-pike which is fine since we did not make any progress there in ocata. | |
| 15:01:51 | alex_xu | mriedem: yea, I'm working on that, I will reuse that bp | |
| 15:05:21 | mriedem | alex_xu: ok i'll rename it quick | |
| 15:05:28 | alex_xu | mriedem: thanks | |
| 15:06:22 | mriedem | done https://blueprints.launchpad.net/nova/+spec/api-no-more-extensions-pike | |
| 15:06:23 | mriedem | np | |
| 15:11:14 | openstackgerrit | Alex Xu proposed openstack/nova master: Use plain routes list for '/servers' endpoint instead of stevedore https://review.openstack.org/445864 | |
| 15:11:15 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opts in BDM tests https://review.openstack.org/450830 | |
| 15:11:15 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opts in multi-create https://review.openstack.org/450831 | |
| 15:11:16 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in config drive https://review.openstack.org/450832 | |
| 15:11:17 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in AZ https://review.openstack.org/450833 | |
| 15:11:17 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in user data https://review.openstack.org/450834 | |
| 15:11:18 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove the usage of extension black/white list opt in scheduler hints https://review.openstack.org/450835 | |
| 15:11:18 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove config opts for extension black/white list https://review.openstack.org/450836 | |
| 15:11:18 | openstackgerrit | Alex Xu proposed openstack/nova master: Remove the extension check for os-networks in servers API https://review.openstack.org/450837 | |
| 15:23:39 | mdbooth | Does anybody happen to know if we use SELinux labels when connecting an NFS volume using libvirt? | |
| 15:23:43 | mdbooth | kashyap: ^^^ ? | |
| 15:24:03 | kashyap | mdbooth: I guess we do, I recall triaging a bug in that area | |
| 15:24:08 | mdbooth | If we do, then it occurs to me this is another complication for multi-attach. | |
| 15:24:11 | mdbooth | johnthetubaguy: ^^^ | |
| 15:24:19 | kashyap | Let me see if I can find it | |
| 15:24:58 | mdbooth | ...if we've got existing protections designed to prevent an instance from reading another instance's storage. | |
| 15:27:42 | dansmith | mdbooth: how do multi-attach and nfs overlay? | |
| 15:28:11 | jaypipes | sfinucan: yeah, that doc/description of trait thing is a long-term plan | |
| 15:28:18 | vladikr | sfinucan, ah, thanks, replied | |
| 15:28:19 | mdbooth | dansmith: Any fs-backed cinder volume driver, really | |
| 15:28:31 | jaypipes | sfinucan: I don't want to hold up any further on getting the storage and nic traits in. | |
| 15:28:37 | mdbooth | But you've got a volume on nfs attached to instance A | |
| 15:28:41 | sfinucan | jaypipes: Okidok | |
| 15:28:57 | dansmith | mdbooth: but you still connect via iscsi to that thing on the actual compute, yes? | |
| 15:28:58 | kashyap | mdbooth: I had to at least ensure this boolean is set `setsebool -P virt_use_nfs on` | |
| 15:29:02 | mdbooth | I'm guessing (no, really) that it's picked up an SELinux label which allows A to read it | |
| 15:29:09 | mdbooth | dansmith: Nope, it gets mounted on the host | |
| 15:29:23 | dansmith | mdbooth: ...really? | |
| 15:29:54 | dansmith | I guess I've only used non-fs cinder drivers | |
| 15:30:01 | mdbooth | dansmith: You can review my patch, btw: https://review.openstack.org/#/c/383859/ ? | |
| 15:30:02 | mdbooth | ;) | |
| 15:30:13 | mdbooth | It does lots of mounty type things | |
| 15:30:14 | dansmith | but I thought cinder-volume would just export via iscsi like it does for, say, lvm | |
| 15:30:27 | dansmith | apparently I can't | |
| 15:31:22 | mdbooth | I just reviewed this for the quobyte driver, which is very similar: https://review.openstack.org/#/c/428646/ | |
| 15:31:34 | mdbooth | They want to disable xattrs for performance reasons | |
| 15:32:06 | mdbooth | Set me thinking about SELinux and shared filesystems in general | |
| 15:35:52 | johnthetubaguy | mdbooth: you can't mount the same nfs share twice in two different locations then? I guess thats fairly stupid though | |
| 15:36:32 | johnthetubaguy | mdbooth: the more I think about multi-attach, the more I kinda want an option for a set of read-only attachments to a volume snapshot as an explicit (simpler) special case | |
| 15:37:01 | mdbooth | johnthetubaguy: You can, but **IIUC** the labelling on the individual file includes a MCS label specific to a particular domain(instance) | |
| 15:37:19 | mdbooth | There *must* be a solution to this, though | |
| 15:37:36 | mdbooth | It will definitely have come up before in libvirt | |
| 15:40:30 | johnthetubaguy | mdbooth: yeah, i guess it should be possible, without re-labelling, presumably | |
| 15:40:41 | mdbooth | https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/Virtualization/sect-Virtualization-Shared_storage_and_virtualization-Using_iSCSI_for_storing_virtual_disk_images.html | |
| 15:40:48 | mdbooth | Ah, that's RHEL 5 | |
| 15:40:59 | mdbooth | That says no labelling on NFS, but that didn't sound right to me | |
| 16:34:05 | openstackgerrit | Maxim Nestratov proposed openstack/nova master: libvirt: change images cache and backend lock path https://review.openstack.org/450879 | |
| 17:10:33 | openstackgerrit | Gábor Antal proposed openstack/nova master: Transform instance.volume_attach notification https://review.openstack.org/401992 | |
| 17:24:08 | openstackgerrit | dane-fichter proposed openstack/nova master: Use cursive for signature verification https://review.openstack.org/351232 | |
| 17:26:04 | efried | Is there a channel for openstackclient? | |
| 17:31:17 | efried | Or... How do I create a VM with no network? Used to be I could say --nick none (which the usage statement & help claim is fine) - but that's now telling me "nics must be a list". | |
| 17:33:27 | swebster | efried: somebody asked this in #openstack yesterday, and the answer was #openstack-sdks | |
| 17:33:39 | efried | swebster Thanks! | |
| 17:34:48 | luos | hi, i'd like to develop a filter scheduler for nova, what's the best method to get nova as a dependency? i mean i'd like to run some unit tests without actually installing the whole openstack | |
| 17:35:13 | siva_krishnan | mdbooth, pkoniszewski can you please review this patch https://review.openstack.org/#/c/434870/ which fixes network interuption during post copy based on libvirt events | |
| 17:35:24 | efried | luos requirements.txt? | |
| 17:35:35 | efried | Assuming you're using tox/testr | |
| 17:36:43 | luos | can you point me to the package? cause i could't find one where the actual nova scheduler api classes are in | |
| 17:37:29 | luos | or you mean just point it to github? i did a quick search now and saw it's possible | |
| 17:43:11 | luos | thanks efried,seems to be working | |
| 17:43:27 | efried | luos Good deal ;-) | |
| 17:47:31 | dansmith | is anyone else seeing this functional-py35 test fail? | |
| 17:53:35 | efried | dansmith Allll over the place. | |
| 17:53:46 | dansmith | efried: yeah? | |
| 17:53:51 | efried | Seems to have gotten resolved some time last night, though. | |
| 17:54:03 | efried | Yesterday there was a pretty serious rash. | |
| 17:54:08 | dansmith | I just rechecked and I think I'm getting it again | |
| 17:54:17 | efried | boo. Link? | |
| 17:55:15 | dansmith | http://logs.openstack.org/25/438025/32/check/gate-nova-tox-functional-py35-ubuntu-xenial/9d28a16/testr_results.html.gz | |
| 17:55:22 | dansmith | it's different than the one I saw yesterday,m | |
| 17:55:28 | dansmith | but also in api_samples | |
| 17:55:48 | dansmith | although the server groups one looks similar | |
| 17:56:12 | dansmith | I've been in a hole for a while, have a pointer to what was being resolved? | |
| 17:57:08 | efried | dansmith No, I didn't follow it that closely, just did some rechecks and walked away whistling when I saw green... | |
| 17:57:21 | dansmith | hmm, okay | |
| 17:57:28 | efried | But maybe I can resurrect a link to a failed one so we can see if it's the same. | |
| 17:57:34 | efried | I wanna say mine wasn't even getting that far, though. | |
| 17:57:47 | dansmith | this is the one from yesterday: http://logs.openstack.org/25/438025/32/check/gate-nova-tox-functional-py35-ubuntu-xenial/a773f20/testr_results.html.gz | |
| 17:58:41 | efried | The ones I was seeing yesterday were actually in gate-nova-python35 | |
| 17:58:53 | efried | So - never mind \o/ | |
| 17:59:01 | dansmith | oh those are devstack on py35 right? | |
| 17:59:30 | efried | Dunno about devstack. Example: http://logs.openstack.org/04/409404/19/check/gate-nova-python35/f8976ec/ | |
| 17:59:34 | efried | Didn't even run any tests. | |
| 18:00:26 | dansmith | ah, unit tests | |