Posted	Nick	Remark
#openstack-nova - 2020-10-12
11:42:24	openstackgerrit	Wenping Song proposed openstack/python-novaclient master: Remove Babel requirement https://review.opendev.org/757541
12:33:44	openstackgerrit	Merged openstack/python-novaclient master: Cleanup py27 support https://review.opendev.org/757513
12:50:23	openstackgerrit	Wenping Song proposed openstack/python-novaclient master: Remove Babel from lower-constraints.txt https://review.opendev.org/757541
13:20:32	gibi	dansmith, melwitt, gmann: responded in https://review.opendev.org/#/c/731396
14:01:52	openstackgerrit	Andrew Bonney proposed openstack/nova master: Handle disabled CPU features to fix live migration failures https://review.opendev.org/757577
14:02:23	sean-k-mooney	does anyone remember why we use psycopg2 and not psycopg2-binary in our test requirements
14:03:06	sean-k-mooney	its come up a few times before but it would be nice if we could swap to the binary wheel instead of having to instlal postgress dev libs to build the python bindingsx
15:46:18	openstackgerrit	Merged openstack/python-novaclient master: Remove Babel from lower-constraints.txt https://review.opendev.org/757541
15:53:52	openstackgerrit	Mark Goddard proposed openstack/nova master: Fix PCI passthrough race on reschedule (claims) https://review.opendev.org/710847
16:13:26	openstackgerrit	melanie witt proposed openstack/nova stable/victoria: Follow up for cherry-pick check for merge patch https://review.opendev.org/757613
16:14:06	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Refactor _claim_pci_device_for_interface_attach to prepare for qos https://review.opendev.org/756895
16:14:06	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Allow extending an existing instance allocation https://review.opendev.org/757109
16:15:30	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Make remove allocation symmetric with add allocation https://review.opendev.org/757110
16:15:31	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Factor out port resource deallocation https://review.opendev.org/757111
16:15:31	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Support interface attach with qos ports https://review.opendev.org/756530
16:15:32	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Refactor update_pci_request_spec_with_allocated_interface_name https://review.opendev.org/757614
16:15:32	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Remove unused Instance method https://review.opendev.org/757615
16:16:54	openstackgerrit	Stephen Finucane proposed openstack/nova stable/victoria: libvirt: 'video.vram' property must be an integer https://review.opendev.org/757616
16:17:46	openstackgerrit	Stephen Finucane proposed openstack/nova stable/ussuri: libvirt: 'video.vram' property must be an integer https://review.opendev.org/757617
16:18:24	openstackgerrit	Stephen Finucane proposed openstack/nova stable/train: libvirt: 'video.vram' property must be an integer https://review.opendev.org/757618
16:59:45	openstackgerrit	Balazs Gibizer proposed openstack/nova master: Support interface attach with qos ports https://review.opendev.org/756530
20:31:29	openstackgerrit	melanie witt proposed openstack/nova master: Add note about setting CONF.compute.max_disk_devices_to_attach = 0 https://review.opendev.org/755360
20:48:42	openstackgerrit	melanie witt proposed openstack/nova master: Disallow CONF.compute.max_disk_devices_to_attach = 0 https://review.opendev.org/755360
22:47:09	openstackgerrit	melanie witt proposed openstack/nova master: Prevent archiving of pci_devices records because of 'instance_uuid' https://review.opendev.org/757656
22:53:52	openstackgerrit	melanie witt proposed openstack/nova master: Prevent archiving of pci_devices records because of 'instance_uuid' https://review.opendev.org/757656
#openstack-nova - 2020-10-13
01:02:20	openstackgerrit	zhanghao proposed openstack/nova master: Fix virsh domifstat to get vhostuser vif statistics https://review.opendev.org/757448
07:18:05	openstackgerrit	zhanghao proposed openstack/nova master: Fix virsh domifstat to get vhostuser vif statistics https://review.opendev.org/757448
08:30:43	openstackgerrit	Jorhson Deng proposed openstack/nova master: add task state for attach volume and detach volume https://review.opendev.org/754258
09:37:31	lyarwood	this might be the 4am baby feed but shouldn't we be able to run individual func tests using `tox -e functional $path.to.test.file` ?
09:37:45	lyarwood	ERROR: InvocationError for command /home/lyarwood/redhat/devel/src/openstack/nova/.tox/functional/bin/stestr --test-path=./nova/tests/functional run nova.tests.functional.regressions.bug_az_vol
09:38:01	lyarwood	is what I'm getting, did I miss a memo or is there likely something wrong in the test itself?
09:38:32	lyarwood	ah wait, the filename needs to be test_
09:39:37	gibi	lyarwood: don't be too hard on yourself (and the keyboard)
09:40:16	lyarwood	gibi: ^_^
14:06:43	openstackgerrit	Rodrigo Barbieri proposed openstack/nova stable/train: Allow tap interface with multiqueue https://review.opendev.org/757870
14:32:23	mnaser	sean-k-mooney: have you played around with sriov + mlx cards?
14:32:33	mnaser	i'm having instance creation failures with errors like this: `group 13 is not viable\nPlease ensure all devices within the iommu_group are bound to their vfio bus driver.`
14:32:45	sean-k-mooney	mnaser: stephenfin has they are more work then intel
14:33:11	sean-k-mooney	mnaser: both prots on the same physical card i think are in the same iommue group
14:33:28	sean-k-mooney	you can check that with sysfs
14:33:39	sean-k-mooney	mnaser:you need to have both port bound to the same driver
14:35:56	mnaser	sean-k-mooney: not sure i follow, but, it seems like they are all in group 13 according to `/sys/kernel/iommu_groups/`
14:36:50	mnaser	qemu-system-x86_64: -device vfio-pci,host=0000:41:00.5,id=hostdev0,bus=pci.0,addr=0x4: vfio 0000:41:00.5: group 13 is not viable\nPlease ensure all devices within the iommu_group are bound to their vfio bus driver.
14:37:07	mnaser	i wonder if i need to setup vfio stuff, i've mostly only done that for pci passthrough but not sriov
14:58:05	openstackgerrit	Rodrigo Barbieri proposed openstack/nova stable/stein: Allow tap interface with multiqueue https://review.opendev.org/757886
14:59:15	sean-k-mooney	mnaser: if its a two port card both port will need to be bound to vfio-pci
14:59:55	sean-k-mooney	libvirt can somethimes handel this for you but it gets complicated when you have multipel ports on teh same card
15:00:19	sean-k-mooney	in somecase each physical port will get its own iommu group
15:00:26	sean-k-mooney	on oder hardware it does not
15:00:35	sean-k-mooney	older
15:14:03	mnaser	sean-k-mooney: i think my issue was thta i should have been on https://docs.openstack.org/neutron/ussuri/admin/config-ovs-offload.html
15:21:28	sean-k-mooney	are you using hardware offloaed ovs
15:21:34	sean-k-mooney	or just sriov with the sriov nic agent
15:21:46	sean-k-mooney	you can use it either way
15:25:28	openstackgerrit	Lee Yarwood proposed openstack/nova master: Add regression test for bug #1899649 https://review.opendev.org/757893
15:25:28	openstack	bug 1899649 in OpenStack Compute (nova) "Volume marked as available after a failure to build" [Undecided,New] https://launchpad.net/bugs/1899649 - Assigned to Lee Yarwood (lyarwood)
15:25:28	openstackgerrit	Lee Yarwood proposed openstack/nova master: compute: Don't detach volumes when RescheduledException raised without retry https://review.opendev.org/757894
15:25:44	lyarwood	stephenfin: ^ if you have time, going to spend some time on reviews of your stuff now btw.
15:25:51	stephenfin	lyarwood: sure
15:26:16	stephenfin	Reminds me, I've to review a regression fix from gibi too
15:30:05	jrosser	has this sort of thing ever come up for nova? https://cloud.google.com/compute/docs/instances/verifying-instance-identity
15:31:07	lyarwood	not that I'm aware of but it sounds like a valid feature for us to look into
15:31:27	jrosser	i have messed with a small POC for that today and can share it if there is interest
15:32:26	lyarwood	jrosser: I'd think there would be ahead of the PTG
15:32:57	lyarwood	jrosser: https://etherpad.opendev.org/p/nova-wallaby-ptg - feel free to add it to the list if you have time to discuss it there in a few weeks
15:35:15	sean-k-mooney	jrosser: im not sure if that is realted to what nova-join does
15:35:24	sean-k-mooney	nova-join is not part of the nova project
15:35:34	jrosser	it's sort of like that
15:35:46	sean-k-mooney	https://opendev.org/x/novajoin
15:36:14	jrosser	thats quite heavyweight though for something kind of simple
15:36:41	sean-k-mooney	the google docs seam quite heavy too
15:36:50	sean-k-mooney	do you have a simpel example
15:37:02	jrosser	yeah, let me paste something
15:38:45	sean-k-mooney	adding some form of identidy verifcaiotn or signigure to the instance metadata for apps to check shoudl be doable im just not sure what woudl be required
15:38:59	sean-k-mooney	is the instance uuid enough or does it need to be cyptograpicaly secure
15:40:32	sean-k-mooney	actully it sound like adding a signiture to the metadata for an isntace might me enough?
15:40:54	sean-k-mooney	" Your applications can verify the signature against Google's public Oauth2 certificates to confirm the identity of the instance with which they have established a connection."
15:41:12	openstackgerrit	Ghanshyam Mann proposed openstack/nova master: DNM: testing tempest copy-image test https://review.opendev.org/742547
15:41:29	sean-k-mooney	if we were to sign the metadata for the instance you could retrive it before connecting and validate its correct
15:41:33	jrosser	i did this http://paste.openstack.org/show/798996/
15:41:54	jrosser	and i could validate the generated JWT against the public key after retrieving it from the metadata service
15:42:49	sean-k-mooney	the publick keey the user provided
15:42:58	sean-k-mooney	for the key pair for the instance
15:43:29	jrosser	the cloud provider publishes the public key somewhere
15:43:41	sean-k-mooney	oh you want to use a common one
15:43:45	jrosser	and the private key belongs to the compute service
15:43:47	sean-k-mooney	ya
15:43:50	sean-k-mooney	that looks resonable
15:44:10	sean-k-mooney	its not really intrusive its just anothe pice of metadata
15:44:20	sean-k-mooney	and presuably a new config for the key
15:44:37	jrosser	i arrived at this looking at automated cert issuance
15:45:02	jrosser	there are tools which will cut certs based on validating instance identity documents
15:45:03	sean-k-mooney	lets-encrypt-style
15:45:28	sean-k-mooney	we have pyjwt in the upper-constriats file too
15:45:37	mnaser	sean-k-mooney: hardware offloaded ovs is the goal
15:45:50	sean-k-mooney	so while this might be a new reqruirement for nova it not a new one for openstack
15:46:08	jrosser	https://smallstep.com/blog/embarrassingly-easy-certificates-on-aws-azure-gcp/
15:46:19	sean-k-mooney	jrosser: so ya i hitnk you sould almost do this as a specless blueprint if you bring it up at the ptg with that example
15:46:40	jrosser	ok, that would be cool
15:47:10	sean-k-mooney	oh what is smallstep

Earlier   Later