| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2019-09-25 | |||
| 16:14:43 | mriedem | numa live migration wouldn't have made it this cycle (again) without that | |
| 16:15:01 | mlavalle | mriedem: this is a great point | |
| 16:15:13 | mlavalle | we can start there | |
| 16:15:37 | mriedem | a deterministic tempest test for routed networks would be, i think, trying to create a server with a network in aggregate 1 but requesting a host in aggregate 2 and seeing it blow up during scheduling | |
| 16:15:47 | mriedem | the test would assert the server fails due to NoValidHost | |
| 16:15:56 | mlavalle | yeap | |
| 16:16:31 | mriedem | with 2.74 in train that's pretty easy https://docs.openstack.org/nova/latest/reference/api-microversion-history.html#id66 | |
| 16:17:26 | mriedem | so you (or whoever) could get started with the tempest test which would actually assert that the server gets created on the wrong host for the network (port binding might actually fail i'd guess) until nova supports routed networks during scheduling | |
| 16:17:30 | mlavalle | yeah, thanks for pointing that out | |
| 16:18:23 | mriedem | david bingham on https://review.opendev.org/#/c/656885/ is from godaddy and he and another guy were at the last ptg asking about this as well - it was the only thing they talked about while at the ptg | |
| 16:18:26 | mriedem | coincidentally | |
| 16:18:37 | mlavalle | efried_rollin: developer resource is a start, isn't it? | |
| 16:18:37 | mriedem | so, maybe verizon and godaddy SIG UP on this | |
| 16:18:45 | mriedem | oh wait, | |
| 16:18:47 | mriedem | not SIG | |
| 16:18:49 | mriedem | POP UP TEAM UP! | |
| 16:19:06 | mriedem | cdent: as TC emeritus you can correct me if i'm wrong | |
| 16:19:32 | cdent | for routed networks pop up team would be the team-type of the the day | |
| 16:19:40 | mriedem | du jour?! | |
| 16:19:46 | cdent | so sorry, yes | |
| 16:20:01 | cdent | i used up all my french recently | |
| 16:20:12 | mriedem | TC santioned collaborama du jour | |
| 16:20:16 | mriedem | is what i'm going to go with | |
| 16:20:31 | cdent | i believe pop up came about in response to encrypted volume efforts failing to get traction | |
| 16:20:44 | cdent | I fail to get traction understanding why a different name helps | |
| 16:20:45 | mriedem | s/volume/image/ but yeah | |
| 16:20:53 | mriedem | because SIGs were too formal dude | |
| 16:22:19 | cdent | I have really mixed feelings on all this stuff. | |
| 16:22:30 | cdent | On the one hand it is wrong that nova gatekeeps so much | |
| 16:22:39 | cdent | but on the other hand, if nova doesn't gate keep things go sideways | |
| 16:24:22 | mriedem | mlavalle: i added you to https://review.opendev.org/#/c/656885/3 and left a comment there with link to this irc conversation if that helps | |
| 16:24:54 | mlavalle | mriedem: it definitely does. Thanks you very much! | |
| 16:29:14 | gregwork | is it terribly difficult to to fiddle with libvirt <features> and <cpu> in nova? | |
| 16:29:30 | gregwork | i need to figure out how to set these to fool windows into not being terrible at everything because it detects its in kvm | |
| 16:29:31 | gregwork | https://pastebin.com/jw8Duq9S | |
| 16:29:51 | gregwork | it actively checks to see if its in kvm and turns off stuff | |
| 16:30:02 | gregwork | thats how i work around it using regular libvirt | |
| 16:30:47 | mriedem | gregwork: gpu? | |
| 16:31:04 | mriedem | gregwork: see https://review.opendev.org/#/c/579897/ | |
| 16:31:42 | gregwork | so not an nvidia badness, i want to enable HyperV server role in my guest so I can run the cloud-base.it image generation git project | |
| 16:31:49 | gregwork | and it wont let you do that becuase HyperV detects KVM | |
| 16:31:53 | gregwork | and says "newp!" | |
| 16:32:18 | gregwork | this thing: https://cloudbase.it/windows-server-2016-openstack-images/ | |
| 16:32:46 | mriedem | well i think you're looking for the img_hide_hypervisor_id image property or the hide_hypervisor_id flavor extra spe | |
| 16:32:48 | mriedem | *spec | |
| 16:33:03 | mriedem | the image property isn't in queens but the flavor extra spec might be | |
| 16:33:19 | mriedem | nope https://blueprints.launchpad.net/nova/+spec/hide-hypervisor-id-flavor-extra-spec was rocky | |
| 16:33:39 | gregwork | and there is no way to pass libvirt domain customizations | |
| 16:33:52 | gregwork | even kludgy ones :) | |
| 16:33:57 | gregwork | or even qemu execution lines | |
| 16:34:10 | mriedem | not through the compute api no | |
| 16:34:29 | mriedem | that's not really...cloud | |
| 16:35:29 | artom | Don't we have image props or something to make Windows happy? | |
| 16:35:54 | mriedem | artom: read scrollback | |
| 16:36:03 | gregwork | ever since they started planning to go to core based licensing instead of socket they have implemented some draconian things to prevent the potential for nested virtualization | |
| 16:36:11 | openstackgerrit | Merged openstack/nova master: docs: Scrub available quotas https://review.opendev.org/670125 | |
| 16:36:31 | gregwork | especially since you can do performant nested virt with kvm on intel xeon e3-v4 processors using vmcs shadowing and device passthrough of network/storage | |
| 16:38:05 | gregwork | in our lab using those chips and passing through a virtual function off our nic to the L1 guest (hypervisor) we were only seeing a 5-10% difference in perf | |
| 16:38:10 | gregwork | it was really interesting | |
| 16:38:27 | gregwork | this is how hitachi does LPAR's on their x86_64 platform | |
| 16:39:04 | gregwork | hardware logical partitions which can run performant guests using intel xeon chips | |
| 16:39:17 | gregwork | anyhow it sucks i cant fiddle with this on queens | |
| 16:39:19 | gregwork | :/ | |
| 16:40:51 | mriedem | i can't believe sean-k-mooney isn't around to chat about this | |
| 16:41:07 | mriedem | gregwork: well you could if you $$$ your vendor to backport a feature | |
| 16:43:32 | artom | mriedem, next time dinner first | |
| 16:47:00 | mriedem | dinner? you mean lunch? | |
| 16:47:05 | mriedem | what are you 80? | |
| 16:47:45 | artom | In my mind :( | |
| 16:53:35 | mriedem | stephenfin: i'm not sure we need this https://review.opendev.org/#/c/684781/ - it appears to already be fixed in master, though i guess we might want it just for backports | |
| 16:53:37 | mriedem | i left some notes inline | |
| 17:02:59 | gmann | mriedem: ohk. did you push the fix to tag tempest on pike gate ? | |
| 17:03:15 | mriedem | gmann: yup | |
| 17:03:41 | gmann | thanks. got it | |
| 17:09:17 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Ignore sqla-migrate inspect.getargspec deprecation warnings on py36 https://review.opendev.org/684781 | |
| 17:09:18 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Ignore warning from sqlalchemy-migrate https://review.opendev.org/684772 | |
| 17:09:18 | openstackgerrit | Matt Riedemann proposed openstack/nova master: tox: Use common 'command' definition for unit tests https://review.opendev.org/684774 | |
| 17:09:19 | openstackgerrit | Matt Riedemann proposed openstack/nova master: tox: Stop overriding the 'install_command' https://review.opendev.org/684775 | |
| 17:09:19 | openstackgerrit | Matt Riedemann proposed openstack/nova master: tests: Nuke OS_STDOUT_CAPTURE, OS_STDERR_CAPTURE https://review.opendev.org/684773 | |
| 17:26:08 | gregwork | mriedem: what about sean-k-mooney ? | |
| 17:33:08 | sean-k-mooney | gregwork: mriedem sriov testing? | |
| 17:34:02 | gregwork | sean-k-mooney: hi, no actually trying to fool a windows instance on openstack into not thinking it is a guest. either modifying the domain in libvirt or possibly passing args to qemu-kvm | |
| 17:34:08 | gregwork | i have a working libvirt domain that does what i need | |
| 17:34:17 | gregwork | trying to figure out how to do this with nova/kvm | |
| 17:34:27 | sean-k-mooney | i tested doing nested sriov like 3 weeks ago and it does work if you enable a vIOMMU in the l1 guest and use q35 chipset but you need to play with the pci layout to fix the iommu groups | |
| 17:34:30 | sean-k-mooney | oh | |
| 17:34:32 | sean-k-mooney | ok | |
| 17:34:44 | sean-k-mooney | i think we fixed that | |
| 17:34:55 | sean-k-mooney | so you can enable hypervior hideing | |
| 17:34:56 | gregwork | yeah the nested virt works great if you have a chip that can do vmcs shadowing, and do passthrough devices for the L1 guest | |
| 17:35:10 | gregwork | if you dont pass through network/storage it will suck real bad for the L2 guests | |
| 17:35:23 | gregwork | at least then you remove 1 layer of nested virt (storage/network) | |
| 17:35:27 | sean-k-mooney | and we not hardcode a fake vendor id in the hyperv secotion so it thinks its running on a phyical host | |
| 17:35:45 | gregwork | part of it is disabling the hypervisor cpu flag in the guest | |
| 17:35:49 | gregwork | the other is the vendor string thing | |
| 17:36:07 | sean-k-mooney | yes if you set teh image property i think it does both | |
| 17:36:42 | sean-k-mooney | gregwork: have you tried setting img_hide_hypervisor_id | |
| 17:36:47 | sean-k-mooney | in the image to yes | |
| 17:37:05 | gregwork | do you know if a certain hat wearing vendor backported that to their queens release | |
| 17:37:26 | sean-k-mooney | i could check | |