| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2019-11-06 | |||
| 19:52:48 | artom | I can't believe the obvious "Unsubscribe you? That's nuts!" pun | |
| 19:52:52 | artom | *they missed | |
| 19:53:28 | melwitt | open a PR | |
| 19:54:52 | artom | Ah no, if you refresh enough times you get it | |
| 19:55:20 | melwitt | oh yeah, I see https://github.com/joellord/subsquirrel/blob/master/index.html#L33 | |
| 20:13:01 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Regression test for bug 1849657 https://review.opendev.org/693248 | |
| 20:13:01 | openstack | bug 1849657 in OpenStack Compute (nova) " allocation key is missing from the binding:profile of the neutron qos port when the server is created by a non-admin user" [Medium,In progress] https://launchpad.net/bugs/1849657 - Assigned to Balazs Gibizer (balazs-gibizer) | |
| 20:24:30 | efried | artom: paste? | |
| 20:26:25 | efried | sean-k-mooney: So the one where I added --with-apparmor_profiles and --prefix=/usr failed, but the one where I added that symlink and rebooted succeeded. | |
| 20:27:04 | sean-k-mooney | efried: ok so i need to work on proper apparmor support in a follow up | |
| 20:27:51 | sean-k-mooney | i may have spent the last 3 hour fixing my openstack that i broke but im testing it on a clean vm right now | |
| 20:28:11 | efried | [75800.085251] device br-int entered promiscuous mode | |
| 20:28:11 | efried | sean-k-mooney: the symptoms are all the same, except dmesg in addition to those apparmor="DENIED" messages also shows things like | |
| 20:28:11 | efried | [75800.085042] netlink: 'ovs-vswitchd': attribute type 5 has an invalid length. | |
| 20:28:54 | sean-k-mooney | the other message are normal | |
| 20:29:16 | sean-k-mooney | but you still got the denie message with the profiles comipled in ya | |
| 20:29:46 | efried | well, I'm taking it on faith that "profiles are compiled in". | |
| 20:30:05 | efried | + ./autogen.sh --system --with-apparmor_profiles | |
| 20:30:05 | efried | - ./configure | |
| 20:30:05 | efried | - ./autogen.sh --system | |
| 20:30:05 | efried | and | |
| 20:30:05 | efried | + ./configure --prefix=/usr | |
| 20:30:07 | sean-k-mooney | im not sure if you have to pass that flage to autogen or configure | |
| 20:30:27 | efried | iiuc either one of those should have worked by itself, no? | |
| 20:30:51 | sean-k-mooney | the profies are hardcoded to no | |
| 20:30:55 | efried | because apparmor's snit was with libvirt not being in the right dir? | |
| 20:31:12 | sean-k-mooney | so if you dont explcitly pass the flag they wont be generated | |
| 20:31:31 | sean-k-mooney | it was unhapy with qemu not being in the correct location | |
| 20:31:42 | sean-k-mooney | the --system puts libvirt in the correct place | |
| 20:32:04 | efried | so if I do that symlink thing and reboot, I just have to unstack and restack, not clean, right? | |
| 20:32:18 | sean-k-mooney | yep | |
| 20:32:31 | sean-k-mooney | you dont need to modify the build either | |
| 20:32:45 | sean-k-mooney | if you add the symlink that should be enough with the patch i have pushed up | |
| 20:33:02 | sean-k-mooney | and the local.conf i shared earlier | |
| 20:33:10 | sean-k-mooney | atleast that is what im testing | |
| 20:33:16 | efried | still at ps3 yah? | |
| 20:33:23 | sean-k-mooney | yep | |
| 20:34:01 | sean-k-mooney | i littally created the sysmlink rebooted, cloned devstack, and created the local.conf http://paste.openstack.org/show/785846/ | |
| 20:34:10 | sean-k-mooney | and now im waiting for it to finish stacking | |
| 20:34:18 | sean-k-mooney | i think that should be all that is required | |
| 20:41:50 | efried | what's the incantation to create a VM I can actually ssh into (from the hypervisor, don't care about external stuff) | |
| 20:42:53 | sean-k-mooney | i normally use openstack or virt-manager to do it | |
| 20:43:39 | sean-k-mooney | what os do you want to do it on | |
| 20:44:22 | efried | I mean create via openstack. --network public doesn't seem to be sufficient, or I'm missing something else. Console log shows the big cirros splash, so I think the thing is up. But trying the IPs I see from `server show` is getting me nothing. | |
| 20:44:48 | sean-k-mooney | oh devsteack? | |
| 20:44:57 | sean-k-mooney | if so the public network has dhcp disabled | |
| 20:45:11 | sean-k-mooney | so you have to trun that on first | |
| 20:45:26 | efried | or get to the console. I don't really even need networking for what I'm doing. | |
| 20:45:37 | efried | (It's kind of embarrassing that I've basically never done this) | |
| 20:45:55 | sean-k-mooney | you have never done a nova boot? | |
| 20:46:12 | sean-k-mooney | or actully tried to ssh in after | |
| 20:46:58 | efried | the latter | |
| 20:47:04 | artom | efried, paste? | |
| 20:47:23 | efried | artom: As in, I might be able to help you with your paste/middleware | |
| 20:47:47 | efried | sean-k-mooney: never cared about the VM itself, just about the bits that get it to ACTIVE state. | |
| 20:49:08 | sean-k-mooney | to enable dhcp do "openstack subnet set --dhcp public" | |
| 20:49:29 | sean-k-mooney | you then need to open ssh in the security groups | |
| 20:51:42 | sean-k-mooney | "openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 default" | |
| 20:51:56 | sean-k-mooney | if you reboot the vm you should then be able to ssh in with | |
| 20:52:26 | sean-k-mooney | openstack server ssh --private -l cirros <vm name> | |
| 20:52:28 | artom | efried, ah, thanks! Tomorrow? If it's still bugging me then | |
| 20:52:34 | efried | artom: sure thing | |
| 20:52:35 | artom | I'm on the hook for the school run now | |
| 20:52:44 | efried | me too in 20 mins | |
| 20:53:06 | eandersson | Fighting heal_allocations is never fun | |
| 20:53:23 | eandersson | I almost wish it was out of tree | |
| 20:54:21 | efried | sean-k-mooney: is it gonna hurt me that my VM currently doesn't think it has an ipv4 address? | |
| 20:54:48 | sean-k-mooney | you dont see one in openstack server show our you cant ping it | |
| 20:57:10 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Use admin neutron client to query ports for binding https://review.opendev.org/690999 | |
| 20:57:10 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Use admin neutron client to gather port resource requests https://review.opendev.org/691005 | |
| 20:57:11 | openstackgerrit | Matt Riedemann proposed openstack/nova master: Use admin neutron client to see if instance has qos ports https://review.opendev.org/691900 | |
| 20:57:31 | sean-k-mooney | efried: if you just want the console url you can do "openstack console url <vm name>" by the way | |
| 20:57:40 | efried | sean-k-mooney: per the console running ifconfig -a | |
| 20:58:01 | sean-k-mooney | oh did you enable dhcp like i said and reboot | |
| 20:58:09 | efried | yeah, the console via browser is pretty clunky, I could make do with that but would rather be able to ssh | |
| 20:58:27 | efried | for one thing, it seems to be bypassing my keyboard driver | |
| 20:58:33 | efried | I can't type qwerty to save my life | |
| 20:58:44 | sean-k-mooney | davorak? | |
| 20:59:05 | efried | there were three security groups, so I set that up for all of them, cause I didn't know which one was the right one. rebooting the vm now | |
| 20:59:08 | efried | yes, dvorak | |
| 20:59:13 | efried | for nearly 20 years. | |
| 20:59:25 | sean-k-mooney | ... i see | |
| 20:59:33 | sean-k-mooney | anyway am if your in the vm | |
| 20:59:42 | efried | can't imagine how a console through a browser is using its own kb driver | |
| 20:59:47 | mriedem | note that those 3 fixes above are gibi's and pretty straight-forward | |
| 20:59:48 | efried | but whatever | |
| 20:59:50 | mriedem | i'm +2 on all 3 | |
| 21:01:06 | sean-k-mooney | efried: so anyway your in the vm right. have you enabled dhcp on the subnet? if so you can reboot and it should get an ip or you can run cirros dhcpclient directly | |
| 21:01:14 | sean-k-mooney | efried: then you should be able to ssh in | |
| 21:01:34 | efried | rebooting, waiting for it to come up | |
| 21:02:07 | sean-k-mooney | efried: i usually put the command to do this in a local.sh file beside my local.conf | |
| 21:02:09 | mriedem | efried: are you just trying to figure out how to ssh into a cirros guest in devstack? | |
| 21:02:12 | sean-k-mooney | i just cant find it | |
| 21:02:28 | mriedem | i've got a recording on youtube that does that with a floating ip | |
| 21:02:29 | sean-k-mooney | devstack will auto run the local.sh if present | |
| 21:02:36 | efried | I did | |
| 21:02:36 | efried | openstack subnet set --dhcp public-subnet | |
| 21:02:36 | efried | openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 $group for all three groups | |
| 21:02:36 | efried | openstack server reboot | |
| 21:02:47 | efried | mriedem: yes, that's what I'm trying to do. | |