| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2022-01-27 | |||
| 17:36:49 | prometheanfire | ack | |
| 17:37:02 | sean-k-mooney | prometheanfire: we really should have test that assert this behavior using xml by the way | |
| 17:37:26 | sean-k-mooney | if we dont we can use your gist as the sameple data and and see if we can repoduce | |
| 17:37:58 | prometheanfire | ack | |
| 17:43:06 | prometheanfire | I think this is a problem in OSA for xena on buster (and maybe bullseye), ovmf in debian buster-backports includes json and secboot files | |
| 17:43:13 | prometheanfire | instance booted with that | |
| 17:44:07 | prometheanfire | sean-k-mooney: https://gist.github.com/prometheanfire/1e2414828d7904daa2c568653c70cd15 | |
| 17:44:30 | prometheanfire | spatel: ^ I think ovmf needs to be installed from backports on buster at least | |
| 17:45:08 | spatel | hmm | |
| 17:47:42 | spatel | sean-k-mooney i had this issue in nova error logs when i was trying to do secure boot - nova error Secure boot requires SMM feature enabled | |
| 17:48:23 | sean-k-mooney | well SMM is enabled by default be libvirt | |
| 17:48:28 | sean-k-mooney | and we do not specify it at all | |
| 17:48:35 | sean-k-mooney | so that seams like a libvirt bug | |
| 17:48:46 | sean-k-mooney | what prometheanfire is reporting is more extream | |
| 17:49:01 | sean-k-mooney | e.g. uefi just does not work on non redhat distos | |
| 17:49:39 | EugenMayer | i have an instance which has a 'stuck image backup task' - is there any way to clean this up? | |
| 17:49:39 | prometheanfire | sean-k-mooney: I THINK that the missing json file may be a cause | |
| 17:50:02 | prometheanfire | /usr/share/qemu/firmware/60-edk2-x86_64.json in the backports version vs not in the main version | |
| 17:50:57 | sean-k-mooney | prometheanfire: ya i think kashyap had a converation with the ubuntu deves at somepoint | |
| 17:51:14 | sean-k-mooney | looking at the code it does seam to be tryign to pasrse that instead fo gettign suff from libvirt | |
| 17:51:19 | sean-k-mooney | but im not really sure | |
| 18:03:30 | opendevreview | Lee Yarwood proposed openstack/nova master: func: Allow compute_driver to be set and used by _IntegratedTestBase https://review.opendev.org/c/openstack/nova/+/764484 | |
| 18:03:31 | opendevreview | Lee Yarwood proposed openstack/nova master: libvirt: Improve creating images INFO log https://review.opendev.org/c/openstack/nova/+/826524 | |
| 18:03:31 | opendevreview | Lee Yarwood proposed openstack/nova master: block_device_info: Add swap to inline https://review.opendev.org/c/openstack/nova/+/826523 | |
| 18:03:32 | opendevreview | Lee Yarwood proposed openstack/nova master: libvirt: Remove defunct comment https://review.opendev.org/c/openstack/nova/+/826525 | |
| 18:03:32 | opendevreview | Lee Yarwood proposed openstack/nova master: imagebackend: default by_name image_type to config correctly https://review.opendev.org/c/openstack/nova/+/826526 | |
| 18:03:33 | opendevreview | Lee Yarwood proposed openstack/nova master: image_meta: Add ephemeral encryption properties https://review.opendev.org/c/openstack/nova/+/760454 | |
| 18:03:33 | opendevreview | Lee Yarwood proposed openstack/nova master: BlockDeviceMapping: Add encryption fields https://review.opendev.org/c/openstack/nova/+/760453 | |
| 18:03:34 | opendevreview | Lee Yarwood proposed openstack/nova master: BlockDeviceMapping: Add is_local property https://review.opendev.org/c/openstack/nova/+/764485 | |
| 18:03:34 | opendevreview | Lee Yarwood proposed openstack/nova master: compute: Update bdms with ephemeral encryption details when requested https://review.opendev.org/c/openstack/nova/+/764486 | |
| 18:03:36 | opendevreview | Lee Yarwood proposed openstack/nova master: virt: Add ephemeral encryption flag https://review.opendev.org/c/openstack/nova/+/760455 | |
| 18:03:36 | opendevreview | Lee Yarwood proposed openstack/nova master: scheduler: Add an ephemeral encryption pre filter https://review.opendev.org/c/openstack/nova/+/760456 | |
| 18:03:38 | opendevreview | Lee Yarwood proposed openstack/nova master: block_device: Add DriverImageBlockDevice to block_device_info https://review.opendev.org/c/openstack/nova/+/826527 | |
| 18:03:38 | opendevreview | Lee Yarwood proposed openstack/nova master: block_device: Add encryption attributes to image and ephemeral disks https://review.opendev.org/c/openstack/nova/+/826528 | |
| 18:03:40 | opendevreview | Lee Yarwood proposed openstack/nova master: virt: Add block_device_info helper to find encrypted disks https://review.opendev.org/c/openstack/nova/+/826529 | |
| 18:03:40 | opendevreview | Lee Yarwood proposed openstack/nova master: blockinfo: Add encryption details to the disk_info mappings when provided https://review.opendev.org/c/openstack/nova/+/772272 | |
| 18:03:42 | opendevreview | Lee Yarwood proposed openstack/nova master: imagebackend: Add disk_info_mapping as an optional attribute of Image https://review.opendev.org/c/openstack/nova/+/826530 | |
| 18:03:42 | opendevreview | Lee Yarwood proposed openstack/nova master: libvirt: Introduce support for qcow2 with LUKS https://review.opendev.org/c/openstack/nova/+/772273 | |
| 18:03:44 | opendevreview | Lee Yarwood proposed openstack/nova master: privsep: Move qemu-img create calls under nova.privsep.qemu https://review.opendev.org/c/openstack/nova/+/826750 | |
| 18:03:44 | opendevreview | Lee Yarwood proposed openstack/nova master: privsep: Return QemuImgInfo objects from qemu-img info calls https://review.opendev.org/c/openstack/nova/+/826751 | |
| 18:03:46 | opendevreview | Lee Yarwood proposed openstack/nova master: privsep: Add encryption support to qemu-img create command https://review.opendev.org/c/openstack/nova/+/826752 | |
| 18:03:46 | opendevreview | Lee Yarwood proposed openstack/nova master: libvirt: Report ephemeral encryption traits based on imagebackend https://review.opendev.org/c/openstack/nova/+/826753 | |
| 18:03:48 | opendevreview | Lee Yarwood proposed openstack/nova master: libvirt: Configure and teardown ephemeral encryption secrets https://review.opendev.org/c/openstack/nova/+/826754 | |
| 18:03:48 | opendevreview | Lee Yarwood proposed openstack/nova master: imagebackend: Add support to libvirt_info for LUKS based encryption https://review.opendev.org/c/openstack/nova/+/826755 | |
| 18:03:50 | opendevreview | Lee Yarwood proposed openstack/nova master: imagebackend: Cache the key manager when disk is encrypted https://review.opendev.org/c/openstack/nova/+/826756 | |
| 18:05:28 | sean-k-mooney | prometheanfire: so can you see if adding the file will actully resolve this | |
| 18:05:58 | prometheanfire | sean-k-mooney: fix already deployed :| | |
| 18:06:08 | sean-k-mooney | ok so you are fixing via packaging | |
| 18:06:19 | prometheanfire | yep, ovmf from buster-backports | |
| 18:06:20 | sean-k-mooney | i think we might stil need to update the doc | |
| 18:06:46 | prometheanfire | probably | |
| 18:10:13 | EugenMayer | to 'unstuck from a stuck iamge backup task' i used 'nova reset-state` .. eventhough the task did not show up, i can neither restart the instance soft or hard. So somehow it is still in an undefined state. Any hint how to get out of this (alive :) ) | |
| 18:13:41 | ganso | Hi folks. I see that since Wallaby the option --live has been removed from the migrate command, therefore not providing a way to bypass the scheduler. I have a customer that is trying to evacuate a host for maintenance and is not able to evacuate because of the anti-affinity policy, therefore the scheduler needs to be bypassed. I've looked at the evacuate commands but I strongly suspect that they will not bypass the scheduler | |
| 18:13:55 | ganso | Is there any other way to bypass the scheduler? | |
| 18:16:52 | EugenMayer | ganso there was a hack i got told, but i forgot about it (had the same question). I ended up backing up the instance and restoring it with the other affinity policy, the moving it to the new host during the restore | |
| 18:17:36 | ganso | EugenMayer: thanks! unfortunately the instance cannot be shutdown :\ | |
| 18:17:37 | EugenMayer | All in one, comparing to what i know from k8s, affinity policies in openstack are really clunky since changing the basically means 'rebuilding the instance' | |
| 18:17:54 | EugenMayer | ganso well, no clue then, sorry | |
| 18:18:24 | ganso | EugenMayer: yea the instance cannot be removed from the group, it is only added to the group when it is created and removed only when deleted... I'm trying to avoid DB surgery | |
| 18:19:22 | EugenMayer | ah i remember what it was, i think you just downgrade the API level in the cli and force the parameter anyway - i think that was it | |
| 18:19:34 | EugenMayer | you should test that though - do not trust me :) | |
| 18:23:35 | rosmaita | bauzas: i posted these to deal with the openstacksdk-functional-devstack failures in the stable branches: https://review.opendev.org/q/topic:fix-sdk-func-job ... want me to do a set for nova? | |
| 18:25:32 | ganso | EugenMayer: that is still not working, but it is not working for other reason (I am to blame), just a min | |
| 18:25:56 | ganso | EugenMayer: this: https://review.opendev.org/c/openstack/nova/+/800114 | |
| 18:27:39 | ganso | EugenMayer: apparently this might work CONF.workarounds.disable_group_policy_check_upcall | |
| 18:28:27 | EugenMayer | interesting | |
| 18:29:37 | sean-k-mooney | ganso: you can use the old microversion but we really dont like supproting forced live migrations | |
| 18:29:47 | sean-k-mooney | ganso: if yo just want to specify the host you can now do that | |
| 18:29:53 | sean-k-mooney | but it wont bypass the schduler | |
| 18:30:50 | sean-k-mooney | evacuate does not use live migration by the way | |
| 18:31:04 | ganso | sean-k-mooney: yea but apparently it is not a matter of bypassing the scheduler anymore, I think, but I'm confused to how this worked in this past... my patch broke the functionality, but I can't see exactly how the forced host could also bypass the anti-affinity check before | |
| 18:31:35 | ganso | sean-k-mooney: oh it doesn't? I won't run pre_live_migration checks if it is a live-evacuation? | |
| 18:31:38 | EugenMayer | sean-k-mooney i recall you helped me unstack an instance which had an endless/stack task (image backup) running. I tried to reset state but i still cannot restart the instance or check the logs/console. Are there any leftovers? | |
| 18:31:43 | sean-k-mooney | ganso: it wont bypass the late affintiy check on the compute | |
| 18:32:01 | sean-k-mooney | you can only bypass that by disabling it on the host temporaly | |
| 18:33:14 | sean-k-mooney | ganso: live evacuation are not a thing at the api level its a nova client thing | |
| 18:33:31 | sean-k-mooney | so nova host-evacuate-live | |
| 18:33:46 | sean-k-mooney | is just a clisnt side for loop that does live migrations | |
| 18:34:07 | ganso | sean-k-mooney: oh, therefore it will use live-migration code at the backend | |
| 18:34:40 | sean-k-mooney | ganso: the workaroudn you can do for new is select a singel host, temperally disable the upcall then migrate teh host to the host useing a force live migratio nwith the old microversion | |
| 18:34:45 | sean-k-mooney | then renable the upcall | |
| 18:34:47 | sean-k-mooney | ganso: yes | |
| 18:35:22 | ganso | sean-k-mooney: thanks! | |
| 18:36:02 | sean-k-mooney | lol im glad you coudl read that. i am slightly distracted and that had more typos then i usually have | |
| 18:38:24 | ganso | sean-k-mooney: lol np it isn't hard to spellcheck while reading xD | |
| 19:05:37 | elodilles | sean-k-mooney: sorry for the late answer. so, no, i didn't know about any pip issue in centos job. though my local devstack started to fail with the very same point (pip bootstrap; ubuntu focal host), so it's weird :S | |
| 19:06:24 | sean-k-mooney | elodilles: pip upsteream now require py3.7+ | |
| 19:06:30 | sean-k-mooney | since 3.6 is eol | |
| 19:06:54 | sean-k-mooney | my local hack which i have not push is to skip installing pip form pypi if pip is already installed | |
| 19:07:04 | elodilles | it's interesting, because py3.8 is on the host | |
| 19:07:21 | sean-k-mooney | is that you default python | |
| 19:07:30 | elodilles | sean-k-mooney: i did exactly the same as a temporary fix | |
| 19:07:45 | elodilles | yepp, 3.8 is the default | |
| 19:07:49 | sean-k-mooney | ya so we used to install pip form pypi in the past becasue the default was old | |
| 19:08:03 | sean-k-mooney | but im thinking maybe we shoudl rever to the package manager version | |
| 19:08:14 | sean-k-mooney | or at least have an option too | |
| 19:08:43 | elodilles | good question | |
| 19:21:28 | elodilles | i need to leave now... but my feeling is that we will see the issue in other jobs as well in the coming days, so some kind of general fix might be needed | |
| 21:25:53 | opendevreview | Dmitrii Shcherbakov proposed openstack/nova master: [yoga] Add PCI VPD Capability Handling https://review.opendev.org/c/openstack/nova/+/808199 | |
| 21:25:53 | opendevreview | Dmitrii Shcherbakov proposed openstack/nova master: [yoga] Include pf mac and vf num in port updates https://review.opendev.org/c/openstack/nova/+/824833 | |