| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2019-07-29 | |||
| 14:42:01 | kashyap | aspiers: Make the last file on SLES as a symlink to '/usr/share/OVMF/OVMF_VARS.fd'. Then your instance should launch. | |
| 14:42:54 | mriedem | well i think i unborked the runways queue etherpad | |
| 14:51:13 | sean-k-mooney | it was broken? | |
| 14:51:29 | sean-k-mooney | i had it open in a tab and it more or less looks the same | |
| 14:53:43 | aspiers | kashyap: thanks! | |
| 14:59:02 | kashyap | aspiers: When you get around to it, let me know if that works for you :-) | |
| 14:59:18 | aspiers | kashyap: trying right now | |
| 14:59:25 | kashyap | Okay; /me --> call | |
| 14:59:30 | aspiers | but I don't know if my image is really UEFI | |
| 14:59:37 | aspiers | any easy way to check? | |
| 15:01:22 | kashyap | aspiers: Yes: | |
| 15:01:59 | aspiers | kashyap: I assume I want /usr/share/qemu/ovmf-x86_64-suse-vars.bin since this is SLES not openSUSE | |
| 15:02:17 | kashyap | aspiers: Yes, run `tree efi` on /boot on your VM image | |
| 15:02:39 | aspiers | you mean after mounting it with qemu-nbd or libguestfs? | |
| 15:03:58 | kashyap | If your VM image is EFI-capable, then you'll see files with .efi extension (e.g. BOOTX64.EFI) under /boot/efi | |
| 15:04:21 | aspiers | thanks | |
| 15:04:45 | kashyap | Let me show you on Fedora - comparing an image that is not UEFI-capable with one that is | |
| 15:06:00 | kashyap | aspiers: (And yes, after mounting) | |
| 15:06:20 | kashyap | I use `guestmount`. | |
| 15:06:24 | aspiers | still getting Instance failed to spawn: libvirtError: operation failed: unable to find any master var store for loader: /usr/share/OVMF/OVMF_CODE.fd | |
| 15:06:43 | aspiers | lrwxrwxrwx 1 root root 41 Jul 29 04:22 OVMF_CODE.fd -> /usr/share/qemu/ovmf-x86_64-suse-code.bin | |
| 15:06:45 | aspiers | lrwxrwxrwx 1 root root 41 Jul 29 04:22 OVMF_VARS.fd -> /usr/share/qemu/ovmf-x86_64-suse-vars.bin | |
| 15:07:19 | kashyap | aspiers: Here is the comparison: http://paste.openstack.org/show/755075/ | |
| 15:07:51 | mriedem | https://review.opendev.org/#/c/621476/50 needs a lot of work... | |
| 15:08:47 | kashyap | aspiers: Let's try one more thing: | |
| 15:09:41 | mriedem | gmann: new compute api policy naming discussion in https://review.opendev.org/#/c/621476/50/nova/policies/server_topology.py@20 | |
| 15:10:00 | mriedem | i did my best to recommend names | |
| 15:10:19 | kashyap | aspiers: Let's try one more thing: can you post your /etc/libvirt/qemu.conf? | |
| 15:10:32 | kashyap | In short, if you _don't_ have this entry, add it in there: | |
| 15:10:33 | kashyap | nvram = [ "/usr/share/OVMF/OVMF_CODE.fd:/usr/share/OVMF/OVMF_VARS.fd" | |
| 15:10:35 | aspiers | sure | |
| 15:10:37 | kashyap | ]] | |
| 15:10:55 | aspiers | it's commented out | |
| 15:11:49 | kashyap | aspiers: Can you uncomment both the VARS, and CODE file out, restart libvirtd & try? | |
| 15:11:59 | aspiers | sure | |
| 15:12:06 | aspiers | except the commented bit is wrong | |
| 15:12:49 | kashyap | [This is test-only; note that long longer libvirt upstream intends to get rid of this config.] | |
| 15:13:05 | efried | mriedem: IMO runways shouldn't be limited to "ready for core review". What does that even mean? Code complete and passing tests should be sufficient. Are you saying they should be required to have so many rounds of non-core reviews before being eligible? That doesn't sound workable to me. | |
| 15:13:33 | efried | mriedem: (this is without having looked at the patch that triggered your comment btw, maybe it was marked WIP or not passing zuul, which would be valid reasons to keep it out of runways) | |
| 15:14:38 | efried | "obviously a mess" (my words, not yours) is super subjective. obviously you'll set a much higher bar than an inexperienced contributor. | |
| 15:14:59 | kashyap | aspiers: Note that in the 'nvram' libvirt config, you can give SUSE's precise file paths. (Symlinks should work too, of course) | |
| 15:15:40 | aspiers | kashyap: ack | |
| 15:25:16 | aspiers | kashyap: progress!! | |
| 15:25:28 | aspiers | kashyap: now I can see the vnc console and a kernel panic X-D | |
| 15:25:32 | aspiers | that's huge progress | |
| 15:25:56 | mriedem | efried: where did i say "obviously a mess"? | |
| 15:26:02 | mriedem | oh nvm, | |
| 15:26:03 | mriedem | i didn't | |
| 15:26:21 | efried | mriedem: yeah, I was kind of putting words in your mouth, sorry about that. | |
| 15:27:08 | mriedem | as for not really ready for core review, i removed that. it'd be nice if contributors from large companies that have other developers working on this project would do some peer review before putting stuff into runways, but i guess that's a pipe dream. | |
| 15:27:11 | aspiers | kashyap: that kinda gives me hope this whole thing might actually work :) | |
| 15:27:15 | mriedem | but i mean, there were just typos all over the thing | |
| 15:27:29 | mriedem | so i consider that not really ready for core review | |
| 15:27:41 | aspiers | mriedem: I really hope to do more "selfless" upstream work (including reviews) but right now I'm battling this SEV deadline | |
| 15:27:55 | mriedem | aspiers: ok? | |
| 15:28:11 | cdent | mriedem: pretty soon having reviewers at all will be a pipe dream | |
| 15:28:25 | sean-k-mooney | dont we already have a requirement that code must not be in WIP state to enter the runways | |
| 15:28:26 | mriedem | cool | |
| 15:28:46 | mriedem | it wasn't wip | |
| 15:29:06 | aspiers | mriedem: nevertheless some of the SEV work is enabling stuff that kashyap and sean-k-mooney are working on, so at least it's not *entirely* selfish ... | |
| 15:29:10 | sean-k-mooney | im not sure which revew set ye were refering to by the way | |
| 15:29:12 | mriedem | anyway, i shouldn't have said anything, i'm just cranky. woken up too early, had to fix the runways etherpad, etc etc | |
| 15:29:27 | mriedem | aspiers: i'm not complaining about SEV stuff at all | |
| 15:29:35 | sean-k-mooney | aspiers: well the only depency i have on the sev work is the harding patch | |
| 15:29:41 | aspiers | mriedem: I know, but I was trying to boost your morale a bit ;-) | |
| 15:29:52 | mriedem | SEV does not boost my morale but ok | |
| 15:29:52 | sean-k-mooney | which is not really part of the series more a depency for my blueprint and yours | |
| 15:30:01 | aspiers | sean-k-mooney: sshhh, I'm trying to cheer up mriedem ;-) | |
| 15:30:13 | sean-k-mooney | hehe ok | |
| 15:30:17 | artom | Time for the Riderman song? | |
| 15:30:23 | aspiers | sean-k-mooney: also you got the getDomainCapabilities code from me for free | |
| 15:30:29 | cdent | oh, I misunderstood. I was trying to mriedem more sad. | |
| 15:30:33 | aspiers | haha | |
| 15:30:36 | sean-k-mooney | aspiers: yes but i technically never needed it | |
| 15:30:43 | aspiers | bah :) | |
| 15:30:58 | aspiers | sean-k-mooney: what about https://review.opendev.org/#/c/673151/, maybe that is useful for you too | |
| 15:31:01 | sean-k-mooney | aspiers: im just using it since its there | |
| 15:31:17 | kashyap | aspiers: Selectively reading the scroll | |
| 15:31:36 | sean-k-mooney | i havenet seen that patch before. so i dont know | |
| 15:31:37 | kashyap | aspiers: Hehe, so long as you're in the console, good. My assistance is over ;-) | |
| 15:31:40 | aspiers | mriedem: I mean, I was trying to cheer you up by saying that I'm hoping to contribute more than just SEV and its peripheries | |
| 15:31:53 | aspiers | sean-k-mooney: I wrote it on Sat | |
| 15:32:14 | aspiers | sean-k-mooney: http://eavesdrop.openstack.org/irclogs/%23openstack-nova/%23openstack-nova.2019-07-27.log.html#t2019-07-27T18:15:17 | |
| 15:32:21 | sean-k-mooney | aspiers: but i would prefer to merge teh code i have and then see if we can refactor later | |
| 15:32:45 | aspiers | sean-k-mooney: it's not a refactor and I don't think it overlaps with your changes | |
| 15:32:56 | aspiers | well there is a bit of refactoring in there | |
| 15:33:01 | aspiers | but that's not the main point | |
| 15:33:05 | aspiers | anyway gotta go again | |
| 15:33:07 | aspiers | biab | |
| 15:37:02 | kashyap | mriedem: Yes, to be fair -- parts from SEV work in Nova _do_ help the Secure Boot stuff and some of what Sean's doing. | |
| 15:37:51 | aspiers | I wasn't trying to portray SEV as the saviour of nova ;-) or even anything significantly helpful. Just stating my wish to contribute more to nova *beyond* SEV in the future | |
| 15:38:11 | aspiers | I've already done bits and pieces here and there | |
| 15:38:16 | aspiers | but would like to do more | |
| 15:38:30 | kashyap | aspiers: Heh, you don't need to defend yourself _that_ much by feeling like you're walking on some eggshells. | |
| 15:39:26 | kashyap | It's good work, and enables a useful and imporant usecase. | |
| 15:39:32 | aspiers | sure, I don't feel under attack either ;) | |
| 15:40:13 | kashyap | Okido; then let's keep maintaining our inner tranquility.. | |
| 15:41:14 | kashyap | s/.././ | |
| 15:42:41 | eandersson | sean-k-mooney, I tried to backport the prelude patch needed for | |
| 15:42:42 | eandersson | https://review.opendev.org/#/c/672855/ | |