| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2020-08-26 | |||
| 13:08:49 | sean-k-mooney | stephenfin: so currently we do just to be safe | |
| 13:09:04 | stephenfin | sean-k-mooney: Currently I have live migration blocked because I haven't validated it | |
| 13:09:20 | sean-k-mooney | ok well when you do can you try commenting out the tpm data copy | |
| 13:09:22 | stephenfin | I do have a DevStack env on your cluster that I'll use to validate it once the rest has merged though | |
| 13:09:23 | sean-k-mooney | and see if it works | |
| 13:09:28 | bauzas | stephenfin: fortunately, git is smart enough to handle conflicts on blank lines | |
| 13:09:39 | stephenfin | sean-k-mooney: If we're talking about the same thing, then that's for cold migration | |
| 13:09:43 | bauzas | (or it should) | |
| 13:09:51 | sean-k-mooney | https://review.opendev.org/#/c/639934/30/nova/virt/libvirt/utils.py@691 | |
| 13:09:56 | sean-k-mooney | the save and restore | |
| 13:10:16 | stephenfin | Yes, that is necessary. I checked the libvirt docs and included the relevant snippet in the commit message | |
| 13:10:31 | sean-k-mooney | its needed for cold migration | |
| 13:10:37 | stephenfin | Libvirt | |
| 13:10:38 | stephenfin | won't do this automatically for us since cold migrations, or offline | |
| 13:10:38 | stephenfin | migrations in libvirt lingo, do not currently support "copying | |
| 13:10:38 | stephenfin | non-shared storage or other file based storages", which includes the | |
| 13:10:38 | stephenfin | vTPM device [1]. | |
| 13:10:43 | sean-k-mooney | stephenfin: but the qemu example seamed to imply it is not for live | |
| 13:10:55 | sean-k-mooney | but there was not clear statement of that | |
| 13:11:01 | stephenfin | ah, yes | |
| 13:11:02 | stephenfin | well | |
| 13:11:04 | stephenfin | <stephenfin> sean-k-mooney: Currently I have live migration blocked because I haven't validated it | |
| 13:11:10 | stephenfin | so I can try when I do the validation, sure :) | |
| 13:11:17 | sean-k-mooney | stephenfin: cool | |
| 13:11:38 | sean-k-mooney | stephenfin: it was an open question in the spec to be figured out when we do the implemnation so jsut reminding you | |
| 13:11:42 | stephenfin | bauzas: Fair. I guess it's just a matter of where to draw the line | |
| 13:11:59 | stephenfin | I'd be less conservative about this stuff that you are, I suspect | |
| 13:12:14 | bauzas | stephenfin: if any of us can just think every time we write on maintainability and upgrades, this would just be perfect. | |
| 13:12:35 | bauzas | stephenfin: totally, and I recognize me being a lame coworker | |
| 13:12:36 | bauzas | :p | |
| 13:13:43 | stephenfin | yeah, stop being so lame! | |
| 13:13:45 | stephenfin | ;) | |
| 13:14:17 | sean-k-mooney | stephenfin: https://github.com/qemu/qemu/blob/master/docs/specs/tpm.rst#migration-with-the-tpm-emulator | |
| 13:15:23 | sean-k-mooney | since there is no copy in those steps i was sepcualtign it was in the testvm.bin file | |
| 13:16:23 | sean-k-mooney | but its also posible this was on the same host so -tpmstate dir=/tmp/mytpm1 could be acceable | |
| 13:18:41 | openstackgerrit | Lucas Alvares Gomes proposed openstack/nova master: DO NOT REVIEW: Test OVN devstack module https://review.opendev.org/748226 | |
| 13:50:30 | openstackgerrit | Lee Yarwood proposed openstack/nova master: Ensure source compute is up when confirming a resize https://review.opendev.org/699291 | |
| 13:50:36 | lyarwood | gibi: ^ would you be able to take a look at this when you have time? | |
| 13:50:45 | gibi | lyarwood: sue | |
| 13:50:49 | lyarwood | gibi: thanks | |
| 13:50:51 | gibi | sure | |
| 13:51:14 | lyarwood | stephenfin: the rebase to remove the merge conflict just removed your +2 if you can readd | |
| 13:54:11 | stephenfin | will do | |
| 13:54:45 | lyarwood | thanks | |
| 14:10:35 | openstackgerrit | Merged openstack/nova master: libvirt: Add emulated TPM support to Nova https://review.opendev.org/631363 | |
| 14:10:42 | openstackgerrit | Merged openstack/nova master: docs: Add docs for vTPM support https://review.opendev.org/739213 | |
| 14:10:50 | lyarwood | bauzas / melwitt: https://review.opendev.org/#/c/747973/ - should be ready if either of you have time today. | |
| 14:10:58 | openstackgerrit | Merged openstack/nova master: tests: Add reproducer for bug #1889633 https://review.opendev.org/744020 | |
| 14:10:58 | openstack | bug 1889633 in OpenStack Compute (nova) "Pinned instance with thread policy can consume VCPU" [High,In progress] https://launchpad.net/bugs/1889633 - Assigned to Stephen Finucane (stephenfinucane) | |
| 14:11:07 | openstackgerrit | Merged openstack/nova master: hardware: Reject requests for no hyperthreads on hosts with HT https://review.opendev.org/744021 | |
| 14:29:23 | bauzas | lyarwood: ack, will look | |
| 14:31:03 | openstackgerrit | Alexandre Arents proposed openstack/nova master: Add a lock to prevent race during detach/attach of interface https://review.opendev.org/747957 | |
| 14:36:04 | lyarwood | bauzas: thanks :) | |
| 14:39:32 | openstackgerrit | Stephen Finucane proposed openstack/nova master: Add type hints to 'nova.virt.libvirt.utils' https://review.opendev.org/742865 | |
| 14:39:33 | openstackgerrit | Stephen Finucane proposed openstack/nova master: Add support for resize and cold migration of emulated TPM files https://review.opendev.org/639934 | |
| 14:44:56 | stephenfin | gibi: Turns out a more granular mocking of migrate_disk_and_power_off is quite the bit of work. Have pushed up all the other fixes. Will keep working on that to get full coverage | |
| 14:50:00 | gmann | sean-k-mooney: noonedeadpunk: RE on policy for flavor ephemeral storage control. we can add policy rule for that and allow everyone by default so that we do not break existing usage but my concern is, if restricted by policy then it will control all request not specific to host or storage, is that fine? | |
| 14:50:22 | bauzas | stephenfin: https://review.opendev.org/#/c/744958/7 and https://review.opendev.org/#/c/741995/10 look the same, I guess it's PEBKAC ? | |
| 14:50:25 | sean-k-mooney | gmann: flavor creation is admin only by default | |
| 14:50:47 | sean-k-mooney | gmann: so the new policy would also have to be the same | |
| 14:50:57 | gmann | sean-k-mooney: ah yeah with current default. | |
| 14:51:09 | openstackgerrit | Lucian Petrut proposed openstack/nova master: Avoid invalid file name, preventing git clone on win32 https://review.opendev.org/748250 | |
| 14:51:23 | bauzas | stephenfin: wow https://review.opendev.org/#/q/owner:stephenfin%2540redhat.com+status:open | |
| 14:51:27 | bauzas | do you sleep overnight? | |
| 14:51:32 | sean-k-mooney | gmann: can we make default dynamic | |
| 14:51:37 | gmann | sean-k-mooney: but i was reading chat, is noonedeadpunk use case for specific host to control such VM creation? | |
| 14:51:45 | sean-k-mooney | gmann: e.g. default it to whatever teh current flavor create policy is | |
| 14:51:47 | gmann | sean-k-mooney: dynamic? | |
| 14:51:57 | gmann | sean-k-mooney: yeah, we can do that | |
| 14:52:04 | sean-k-mooney | gmann: no i dont think so | |
| 14:52:26 | sean-k-mooney | gmann: i think noonedeadpunk wanted to restrct who could create flavors with local storage | |
| 14:52:46 | sean-k-mooney | there are ways to prevent host from booting gues with local sotrage alredy | |
| 14:52:48 | lpetrut | hi, looks like we have an unusual issue on Windows: https://review.opendev.org/#/c/748250/ a release note filename containing pipes prevents Nova from being cloned on Windows :) | |
| 14:52:59 | gmann | sean-k-mooney: i see | |
| 14:53:11 | sean-k-mooney | gmann: either via config or using a trait and isolated aggreates feature | |
| 14:53:21 | noonedeadpunk | to be exact, I wanted to restrict users who can create VMs with ephemeral storages | |
| 14:53:26 | gmann | ok | |
| 14:53:37 | sean-k-mooney | noonedeadpunk: that is slightly different then | |
| 14:53:52 | noonedeadpunk | For example I generally want to prohibit usage of ephemeral/local storages,m but what 1 groups of users to be still able to do that | |
| 14:53:55 | sean-k-mooney | one way to do that is to make the ephemeral flavors private | |
| 14:54:08 | openstackgerrit | Alex Xu proposed openstack/nova master: Provider Config File: Enable loading and merging of provider configs https://review.opendev.org/693460 | |
| 14:54:17 | sean-k-mooney | so make all you public flaovr bfv only | |
| 14:54:22 | stephenfin | bauzas: They are identical, but I didn't want to make the two series depend on each other | |
| 14:54:29 | noonedeadpunk | but even with lavor with 0 disk it's possible to create server without cinder volume | |
| 14:54:32 | openstackgerrit | Stephen Finucane proposed openstack/nova stable/ussuri: tests: Add reproducer for bug #1889633 https://review.opendev.org/748251 | |
| 14:54:32 | openstack | bug 1889633 in OpenStack Compute (nova) ussuri "Pinned instance with thread policy can consume VCPU" [High,Triaged] https://launchpad.net/bugs/1889633 | |
| 14:54:32 | stephenfin | bauzas: I'll rebase once one of them lands | |
| 14:54:32 | openstackgerrit | Stephen Finucane proposed openstack/nova stable/ussuri: hardware: Reject requests for no hyperthreads on hosts with HT https://review.opendev.org/748252 | |
| 14:54:36 | noonedeadpunk | s/lavor/flavor/ | |
| 14:54:42 | sean-k-mooney | then use flavor access to allow access to the other falvors to a specific tenant or set of tenants | |
| 14:54:44 | gmann | sean-k-mooney: noonedeadpunk we can default it to 'os_compute_api:os-flavor-manage:create' rule itself so whatever create policy has in any deployment (default or overridden ) stays the same with new policy check. | |
| 14:54:53 | alex_xu | stephenfin: gibi ^ rebased 693460, the conflict at admin doc | |
| 14:54:55 | bauzas | stephenfin: I'd have appreciated a -2 somewhere :) | |
| 14:55:01 | bauzas | or a DNM | |
| 14:55:06 | sean-k-mooney | gmann: that would not actully address noonedeadpunk usecase | |
| 14:55:12 | sean-k-mooney | it would do what i asked you | |
| 14:55:22 | stephenfin | bauzas: well that would have defeated the purpose, wouldn't it? :P | |
| 14:55:42 | sean-k-mooney | we would need a policy on spwan that blocked ephemeral flavors | |
| 14:55:47 | lyarwood | elod: https://review.opendev.org/#/c/747358/ should also be ready now btw | |
| 14:55:52 | bauzas | stephenfin: one is a bugfix, the other one is a feature that is proritized in a runwayu | |