Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2019-01-04
23:21:13 jmlowe I'd absolutely hate it
23:21:40 jmlowe wait, now that I reread that
23:23:52 jmlowe I suppose I don't care really, what I want is for a unshelve to go back through the scheduler to pick out the best spot for it for the current cluster workload unless the user has specified (I don't think any of my users do this) a particular az
23:28:32 openstackgerrit Merged openstack/nova master: libvirt: Add workaround to cleanup instance dir when using rbd https://review.openstack.org/618478
#openstack-nova - 2019-01-05
03:05:34 sunnaichuan Hello, anyone know when does openstack init its database and create tables when it startup?
10:14:54 openstackgerrit Lee Yarwood proposed openstack/nova stable/rocky: libvirt: Add workaround to cleanup instance dir when using rbd https://review.openstack.org/627958
10:20:06 openstackgerrit Lee Yarwood proposed openstack/nova stable/queens: libvirt: Add workaround to cleanup instance dir when using rbd https://review.openstack.org/628726
11:05:04 openstackgerrit Lee Yarwood proposed openstack/nova master: fixtures: Return a mocked class instead of method within fake_imagebackend https://review.openstack.org/619804
13:14:19 openstackgerrit Merged openstack/nova stable/rocky: Migrate nova v2.0 legacy job to zuulv3 https://review.openstack.org/620571
#openstack-nova - 2019-01-06
07:43:03 openstackgerrit OpenStack Proposal Bot proposed openstack/nova stable/rocky: Imported Translations from Zanata https://review.openstack.org/628109
10:44:57 openstackgerrit garyk proposed openstack/nova master: Improve metadata performance https://review.openstack.org/615435
12:51:01 ahmadoo Hello all
12:51:22 ahmadoo I have a problem
13:17:54 openstackgerrit Merged openstack/nova stable/queens: Ensure rbd auth fallback uses matching credentials https://review.openstack.org/627010
19:02:56 openstackgerrit Matt Riedemann proposed openstack/nova stable/pike: Ensure rbd auth fallback uses matching credentials https://review.openstack.org/627011
19:27:45 openstackgerrit garyk proposed openstack/nova master: Improve metadata performance https://review.openstack.org/615435
#openstack-nova - 2019-01-07
00:14:36 openstackgerrit Takashi NATSUME proposed openstack/os-resource-classes master: Update author-email in setup.cfg https://review.openstack.org/624885
01:01:50 openstackgerrit Hesam Chobanlou proposed openstack/nova master: Hyper-v - unused images are always deleted (add to in-tree hper-v code) https://review.openstack.org/628793
01:42:58 openstackgerrit Hesam Chobanlou proposed openstack/nova master: unused images are always deleted (add to in-tree hper-v code) https://review.openstack.org/628793
01:47:56 openstackgerrit Yongli He proposed openstack/nova-specs master: add spec "show-server-numa-topology" https://review.openstack.org/612256
02:04:10 openstackgerrit Yongli He proposed openstack/nova-specs master: add spec "show-server-numa-topology" https://review.openstack.org/612256
02:04:48 openstackgerrit Yongli He proposed openstack/nova-specs master: add 'show-server-group' spec https://review.openstack.org/612255
02:58:38 openstackgerrit Takashi NATSUME proposed openstack/nova stable/queens: Add description of custom resource classes https://review.openstack.org/619125
02:59:10 openstackgerrit Takashi NATSUME proposed openstack/nova master: Remove mox in virt/test_block_device.py https://review.openstack.org/566153
03:04:46 openstackgerrit weizj proposed openstack/os-vif master: Update hacking version https://review.openstack.org/628603
03:06:32 openstackgerrit Brin Zhang proposed openstack/nova-specs master: Specifying az when restore shelved server https://review.openstack.org/624689
03:45:41 openstackgerrit Merged openstack/python-novaclient master: Update hacking version https://review.openstack.org/627726
04:32:39 openstackgerrit Merged openstack/nova stable/queens: Exclude build request marker from server listing https://review.openstack.org/626585
04:45:50 openstackgerrit Takashi NATSUME proposed openstack/nova master: Add descriptions of numbered resource classes and traits https://review.openstack.org/621494
05:18:15 openstackgerrit jiang wei proposed openstack/nova master: Update host_state's limits when specified AZ https://review.openstack.org/625755
05:51:28 openstackgerrit Takashi NATSUME proposed openstack/nova master: Follow up for "Add API ref guideline for body text" https://review.openstack.org/625454
05:51:35 openstackgerrit Takashi NATSUME proposed openstack/nova master: Follow up for "Add API ref guideline for body text" https://review.openstack.org/625454
05:58:05 openstackgerrit Takashi NATSUME proposed openstack/nova master: api-ref: Add descriptions for vol-backed snapshots https://review.openstack.org/615084
05:58:41 openstackgerrit Takashi NATSUME proposed openstack/nova master: api-ref: Body verification for the lock action https://review.openstack.org/622835
06:06:13 jayashri join masakari
07:33:25 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Add fill_virtual_interface_list online_data_migration script https://review.openstack.org/614167
07:33:25 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Force refresh instance info_cache during heal https://review.openstack.org/591607
08:20:07 adrianc melwitt, sean_k_mooney1: Hi, any chance we can approve the following spec before spec freeze ? https://review.openstack.org/#/c/605116/10 I believe most of the issues/comments were dealt with
08:20:52 adrianc sean-k-mooney1 ^
09:04:29 bauzas good morning Nova
09:04:39 sean-k-mooney1 bauzas: o/
09:05:04 bauzas :)
09:29:51 openstackgerrit Yikun Jiang proposed openstack/nova master: Per aggregate scheduling weight https://review.openstack.org/628163
11:47:52 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Add fill_virtual_interface_list online_data_migration script https://review.openstack.org/614167
11:47:52 openstackgerrit Maciej Jozefczyk proposed openstack/nova master: Force refresh instance info_cache during heal https://review.openstack.org/591607
13:04:25 openstackgerrit Daniel Pawlik proposed openstack/nova stable/rocky: Removing pip-missing-reqs from default tox jobs https://review.openstack.org/628952
13:05:24 openstackgerrit Matt Riedemann proposed openstack/nova stable/pike: Exclude build request marker from server listing https://review.openstack.org/628954
13:09:27 openstackgerrit Daniel Pawlik proposed openstack/nova stable/queens: Removing pip-missing-reqs from default tox jobs https://review.openstack.org/628956
13:12:31 openstackgerrit Daniel Pawlik proposed openstack/nova stable/queens: Removing pip-missing-reqs from default tox jobs https://review.openstack.org/628956
13:16:37 kashyap Anyone else seeing the "tempest.api.network.test_routers_negative" time-out failure, as part of 'tempest-full-py3'?
13:20:21 kashyap Hm, a socket timeout: http://logs.openstack.org/16/625216/2/check/tempest-full-py3/f007612/testr_results.html.gz
13:43:03 kashyap mdbooth_: Random ping, in your "copious free time", mind having a look at this? -- https://review.openstack.org/#/c/625216/
13:43:23 kashyap (Title of the change: "libvirt: Support native TLS for migration and disks over NBD")
13:43:32 kashyap Or anyone here, not just Matt :D
13:44:01 mdbooth_ kashyap: Looking.
13:44:24 kashyap I'm working out the unit test; so if you don't want to look at it without it, can understand.
13:44:36 mdbooth kashyap: Remind me, do we default to tunnelled? IIRC we don't?
13:44:58 kashyap No, we don't default to tunnelled; but damned if I remember, everytime I have to check
13:45:27 kashyap mdbooth: No we don't -- because live block migration won't work with tunnelled
13:45:43 kashyap I also have a slightly hairy TODO in the commit, if you squint:
13:45:45 kashyap TODO: - Figure out _which_ combination of migration flags are valid. I.e. work out how VIR_MIGRATE_TLS VIR_MIGRATE_NON_SHARED_INC, and VIR_MIGRATE_NON_SHARED_DISK interact together.
13:46:26 mdbooth kashyap: Shiny. Any idea what the performance penalty is for native qemu tls?
13:46:54 kashyap mdbooth: Good news -- there is no nenalty, instead it _removes_ the existing penalty
13:47:10 mdbooth kashyap: I mean over non-tunnelled, non-encrypted.
13:47:26 mdbooth kashyap: I assume it must be at least a bit slower?
13:47:36 kashyap Don't you want to read the "Why" section of my blueprint? I spent non-trivial amount of time writing it :D -- https://blueprints.launchpad.net/nova/+spec/support-qemu-native-tls-for-live-migration
13:47:58 kashyap So, on benchmarks--
13:49:15 kashyap mdbooth: Some moons ago DanPB did the benchmarks. Looking for the right info
13:49:56 mdbooth kashyap: afk, back shortly. Will read scrollback.
13:50:24 cdent scheduler/placement meeting in #opensack-meeting-alt in 10 minutes
13:50:33 cdent or rather in #openstack-meeting-alt
13:50:50 cdent my opensack back of holding is full
13:52:03 sean-k-mooney1 mdbooth: assuming the tls encryption is use aes for the cyper it should be able to offload to the cpu in hardware so the overhead should be minimal
13:53:38 kashyap mdbooth: When you're back, that's the IRC chat with DanPB on benchmarks: http://paste.openstack.org/show/740443/
13:54:11 kashyap mdbooth: That said, I don't have the exact overhead over non-tunnelled, non-encrypted, I'm afraid. But that info is something worth having
13:56:56 ShilpaSD gibi: Hi
13:57:05 gibi ShilpaSD: hi
13:58:51 ShilpaSD gibi: Need help in understanding of oslo_versionedobjects, actually TestObjectVersions.test_versions() is failing on my patch https://review.openstack.org/#/c/474423/
13:58:58 sean-k-mooney1 kashyap: i would be surprised if people are actully migrating over raw tcp in production. even for devstack the recomendation i was given and i give is to use ssh
13:59:13 kashyap Heh, yeah, indeed.
13:59:37 gibi ShilpaSD: give me couple of minutes... I will look at your patch
14:00:06 kashyap sean-k-mooney1: So, I don't know if I should spend time doing the comparison -- as that'll be comparing something not-recommended vs. something highly-recommended
14:00:11 ShilpaSD gibi: yup
14:01:51 sean-k-mooney1 kashyap: i think the security argment shoudl be enough honestly that said its not really much more secure the ssh
14:02:06 ShilpaSD gibi: referred Nova https://github.com/openstack/nova/blob/master/nova/tests/unit/objects/test_objects.py#L1199, and there notification related classes are not counted, similarly removed from my patch, but no sucess
14:02:25 sean-k-mooney1 kashyap: i would suspect over time however the native tls will be more secure and more efficent
14:02:49 kashyap sean-k-mooney1: Not only that, will completely deprecate the 'tunnelled'
14:03:05 mdbooth kashyap: Thanks.
14:03:20 kashyap sean-k-mooney1: See the blueprint, I the deprecation reason there
14:03:26 kashyap s/I the/I mentioned the/
14:03:31 sean-k-mooney1 kashyap: tls is still more annoying to deploy vs jsut exchaning ssh keys
14:03:41 kashyap sean-k-mooney1: Also your reviewer eyes are welcome, too
14:03:52 mdbooth kashyap: I was just thinking that if, as sean-k-mooney1 suggests, the overhead over the current default is negligible, we should default to it.
14:04:02 kashyap sean-k-mooney1: Tell me all about it :-) Let me show the document I wrote -- see the scrollbar for its setup
14:04:06 mdbooth If they have TLS correctly configured, that is.
14:04:22 kashyap sean-k-mooney1: That's from-scratch setup: https://kashyapc.fedorapeople.org/Native-TLS/Setup-for-NBD-and-migration-streams-over-TLS.rst.txt
14:04:25 kashyap See the side-bar
14:04:33 mdbooth kashyap: And you'd emit a warning if TLS isn't correctly configured.
14:04:51 kashyap mdbooth: We're not touching any defaults at all.
14:04:53 mdbooth kashyap: With perhaps a config option to turn that warning into an error.

Earlier   Later