Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2018-09-18
14:32:37 dansmith looks like there is a lot on queens that needs just a +W
14:32:43 dansmith but yeah I can try to hit both
14:33:21 dansmith ah, maybe some are still pending on the rocky ones
14:33:37 dansmith like the service list thing
14:37:50 lyarwood yeah sorry that's my bad, I +2'd a few waiting on stable/rocky so I wouldn't block anything while I was offline yesterday
14:39:50 dansmith gdi lyarwood, stop being proactive!
14:41:56 dansmith okay I just sent a raft of rocky stuff to meet its maker
14:54:49 openstackgerrit Vlad Gusev proposed openstack/nova stable/queens: WIP libvirt: Reduce calls to qemu-img during update_available_resource https://review.openstack.org/603358
14:55:31 mriedem btw, i think that's part of the ordering, we want to make sure stuff we release in queens is also released in rocky, so someone doesn't upgrade from queens to rocky in that window and lose some fixes - probably rare that would happen though
14:55:54 mriedem so we'll do a rocky->queens->pike->ocata release stack
14:58:41 dansmith if we release by the clock, frequently enough, and keep the deps in gerrit,
14:58:44 dansmith then it should never really happen
14:58:51 dansmith but if we have three-month windows, it's far more possible
15:11:49 openstackgerrit Chen proposed openstack/nova master: doc trivial: additional info to admin-password-injection https://review.openstack.org/603414
15:20:29 openstackgerrit Stephen Finucane proposed openstack/nova-specs master: Add 'disallow-isolcpus-with-overcommit-vcpus' spec https://review.openstack.org/603417
15:32:04 openstackgerrit Stephen Finucane proposed openstack/nova-specs master: Specify doctree directory https://review.openstack.org/603421
15:57:36 stephenfin mriedem, bauzas, dansmith: Can one of you put this python3-first patch through, please? https://review.openstack.org/#/c/601373/
15:58:32 bauzas stephenfin: easy review, thanks to your help
15:59:01 stephenfin bauzas: Cheers :)
15:59:32 bauzas stephenfin: no, ``Cheers``
15:59:43 bauzas it's a string, dude
16:00:08 stephenfin Think I've found my presentation topic for Denver 2019
16:00:42 bauzas :)
16:02:11 stephenfin bauzas: If you're game, there are also these. Think it's the last of them https://review.openstack.org/#/q/topic:python3-first+status:open+(project:openstack/os-traits+OR+project:openstack/os-vif)
16:04:16 openstackgerrit Surya Seetharaman proposed openstack/nova master: Merge extended_volumes extension response into server view builder https://review.openstack.org/596285
16:06:46 openstackgerrit Merged openstack/nova master: Merge security groups extension response into server view builder https://review.openstack.org/585475
16:06:54 openstackgerrit Merged openstack/nova master: Merge extended_status extension response into server view builder https://review.openstack.org/592092
16:12:48 openstackgerrit Merged openstack/nova-specs master: import zuul job settings from project-config https://review.openstack.org/601373
16:35:37 cburgess dansmith Apparently you made a few people thing something bad had happened to me. :)
16:35:44 cburgess I guess it nice to know people still care.
16:36:20 cdent you were missed
16:37:00 cburgess cdent I missed you all. Its weird not attending the summits and PTGs. I've been doing it since 2012 so yeah... makes the whole "I don't work with OpenStack anymore" thing real.
16:42:01 openstackgerrit Vladyslav Drok proposed openstack/nova stable/pike: Fix resize_instance rpcapi call https://review.openstack.org/603439
17:38:39 mriedem dansmith: would be good to get this into pike before we release https://review.openstack.org/#/c/594184/
17:39:36 openstackgerrit Surya Seetharaman proposed openstack/nova master: Merge extended_volumes extension response into server view builder https://review.openstack.org/596285
17:39:37 openstackgerrit Surya Seetharaman proposed openstack/nova master: Making instance/migration listing skipping down cells configurable https://review.openstack.org/592428
17:41:06 mriedem we have a few pike backports with +2s actually https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/pike+label:Code-Review=2
17:45:25 openstackgerrit Surya Seetharaman proposed openstack/nova master: Add get_by_cell_and_project() method to InstanceMappingList https://review.openstack.org/591656
17:46:37 mhen hello guys, I'm from the same team as Luzi and would like to pick up on her topic regarding the image signature checking again, hoping that some of the core members are present right now.
17:49:06 mhen we created a launchpad entry as advised: https://bugs.launchpad.net/nova/+bug/1793159
17:49:06 openstack Launchpad bug 1793159 in OpenStack Compute (nova) "no signature check for cached images" [Undecided,New]
17:49:47 mriedem dansmith: actually i'll just push a pike release since we have a lot of stuff unreleased in there http://paste.openstack.org/show/730308/
17:52:07 mhen so we propose to do an additional image signature verification for signed images after retrieving it from a local compute's cache while spawning an instance. Any opinions on this?
17:52:18 mriedem mhen: i left a question in the bug
17:52:32 mriedem i believe this is also a duplicate of https://bugs.launchpad.net/nova/+bug/1785668
17:52:33 openstack Launchpad bug 1785668 in OpenStack Compute (nova) "nova-compute doesn't check image signature if imagecache exists" [Undecided,New]
17:53:08 mriedem also, mdbooth is probably the person to talk with about image cache stuff, but he's not around right now
17:53:16 mriedem i'll subscribe him to the bugs
17:54:21 mhen mriedem, thank you for your input! You are right about the duplicate. Should I answer your question in our bug entry or is it gonna be closed as a duplicate now anyway?
17:56:53 mriedem mhen: might as well reply and then we'll duplicate it
17:57:22 mhen mriedem, roger that!
17:57:22 mriedem it wasn't clear to me that the other bug had sufficient recreate details
17:59:15 mhen the other bug actually follows a different reasoning
18:00:24 mhen they are talking about the image signature check should fail in their scenario, since the user in question should not be able to retrieve the corresponding validation certificate from Barbican due to the user's permissions
18:01:01 mhen since a cached image is not checked in Nova, the cert retrieval is not even attempted and the permission problem does not surface
18:01:50 mhen our reasoning is more about the possibility of tampering with the cached image data, but I'll elaborate on that in our bug entry
18:02:07 mriedem dansmith: we should get this into ocata given it's a regression in ocata https://review.openstack.org/#/c/588077/
18:02:39 mriedem that and the one below it. at this rate, we're going to have to start doing the old "stable core backport proxies as a +2" thing
18:08:45 dansmith mriedem: okay just got back, give me a few and I'll look
18:23:36 openstackgerrit Surya Seetharaman proposed openstack/nova master: Return a minimal construct for nova list when a cell is down https://review.openstack.org/567785
18:26:47 openstackgerrit Surya Seetharaman proposed openstack/nova master: Add scatter-gather-single-cell utility https://review.openstack.org/594947
18:30:34 mhen mriedem, I replied to your question on https://bugs.launchpad.net/nova/+bug/1793159 - I hope this clarifies our reasoning a bit more
18:30:34 openstack Launchpad bug 1793159 in OpenStack Compute (nova) "no signature check for cached images" [Undecided,New]
18:37:38 dansmith mriedem: were you implying I should slam this? https://review.openstack.org/#/c/588077/2
18:38:35 mriedem dansmith: yes and the one below it
18:39:49 dansmith are we actually going to release any of this? :)
19:00:25 mriedem oh for ocata...
19:00:26 mriedem good question
19:00:54 mriedem i guess that's something we need to sort out with the STABLE MAINT SIG!!! https://releases.openstack.org/
19:01:06 mriedem ocata was supposed to go into extended maintenance on aug 27
19:03:59 dansmith mriedem: I actually meant on any of our branches, re: previous discussion :)
19:04:32 mriedem i have release patches up for rocky and queens
19:04:35 mriedem WIPs while things merge
19:04:42 mriedem and one for pike stacked on top of that
19:04:55 mriedem https://review.openstack.org/#/q/topic:nova-stable-releases-sept-2018+(status:open+OR+status:merged)
20:13:37 openstackgerrit Merged openstack/nova master: libvirt: Use os.stat and os.path.getsize for RAW disk inspection https://review.openstack.org/589567
20:13:43 openstackgerrit Merged openstack/nova master: Add functional test for live migrate with anti-affinity group https://review.openstack.org/588935
20:13:54 openstackgerrit Merged openstack/nova master: Explicitly fail if trying to attach SR-IOV port https://review.openstack.org/591898
20:15:22 openstackgerrit Vlad Gusev proposed openstack/nova stable/rocky: libvirt: Use os.stat and os.path.getsize for RAW disk inspection https://review.openstack.org/603488
20:19:26 openstackgerrit Vlad Gusev proposed openstack/nova stable/queens: WIP libvirt: Reduce calls to qemu-img during update_available_resource https://review.openstack.org/603358
20:46:35 openstackgerrit Matt Riedemann proposed openstack/nova master: Merge extended_volumes extension response into server view builder https://review.openstack.org/596285
20:46:35 openstackgerrit Matt Riedemann proposed openstack/nova master: Making instance/migration listing skipping down cells configurable https://review.openstack.org/592428
20:46:36 openstackgerrit Matt Riedemann proposed openstack/nova master: Add get_by_cell_and_project() method to InstanceMappingList https://review.openstack.org/591656
20:46:36 openstackgerrit Matt Riedemann proposed openstack/nova master: Return a minimal construct for nova list when a cell is down https://review.openstack.org/567785
20:46:37 openstackgerrit Matt Riedemann proposed openstack/nova master: Add scatter-gather-single-cell utility https://review.openstack.org/594947
20:46:53 tssurya mriedem: was just about to change the nits
20:46:56 tssurya thanks
20:47:31 mriedem you're supposed to be sleeping or something
20:48:49 tssurya mriedem: hehe still living in denver TZ
20:58:09 openstackgerrit Matt Riedemann proposed openstack/nova master: Merge extended_volumes extension response into server view builder https://review.openstack.org/596285
20:58:10 openstackgerrit Matt Riedemann proposed openstack/nova master: Making instance/migration listing skipping down cells configurable https://review.openstack.org/592428
20:58:10 openstackgerrit Matt Riedemann proposed openstack/nova master: Add get_by_cell_and_project() method to InstanceMappingList https://review.openstack.org/591656
20:58:11 openstackgerrit Matt Riedemann proposed openstack/nova master: Return a minimal construct for nova list when a cell is down https://review.openstack.org/567785
20:58:11 openstackgerrit Matt Riedemann proposed openstack/nova master: Add scatter-gather-single-cell utility https://review.openstack.org/594947
20:58:39 mriedem tssurya: can we abandon https://review.openstack.org/#/c/594947/ ? i don't think anything is using it now
20:59:11 tssurya mriedem: originally it was created for https://review.openstack.org/#/c/591658/
20:59:21 tssurya so let's keep it (see the comments from dan there)
20:59:27 mriedem oh, ok
20:59:31 tssurya I am currently updating the test cases for this one
20:59:37 tssurya it will come on top

Earlier   Later