| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2024-02-23 | |||
| 17:03:12 | artom | Actually, what I'd really need is to somehow stub in different "instances" of the Core class for each libvirt driver | |
| 17:04:36 | artom | More like, a different SysFS fixture for each... | |
| 17:17:49 | sean-k-mooney | artom: we made live migration work in teh functrional tests with sriov | |
| 17:18:01 | sean-k-mooney | we can make it work for power management | |
| 17:18:08 | sean-k-mooney | if we put in the effort | |
| 17:18:32 | artom | Right, I'm just not sure it's possible without changing the actual Nova code | |
| 17:21:18 | sean-k-mooney | anywya im ment to be off today so im going to leave the office again | |
| 17:22:11 | artom | Yeah, I was going to say, make sure you compensate for working today by not working Monday or something :) | |
| 17:47:05 | elodilles | sean-k-mooney LarsErikP : i've cherry picked the patch to unmaintained/yoga: https://review.opendev.org/c/openstack/nova/+/910010 | |
| 17:47:59 | elodilles | gate is happy with it, though there are no devstack based jobs among the zuul jobs at all, so that should be added to the branch first | |
| 18:14:54 | opendevreview | Artom Lifshitz proposed openstack/nova master: Power on cores for isolated emulator threads https://review.opendev.org/c/openstack/nova/+/909795 | |
| 18:14:55 | opendevreview | Artom Lifshitz proposed openstack/nova master: POC: power up dedicated cores during pre_live_migration https://review.opendev.org/c/openstack/nova/+/909806 | |
| 18:14:55 | opendevreview | Artom Lifshitz proposed openstack/nova master: Add cpuset_reserved helper to instance NUMA topology https://review.opendev.org/c/openstack/nova/+/910020 | |
| 18:14:56 | opendevreview | Artom Lifshitz proposed openstack/nova master: Reproducer for not powering on isolated emulator threads cores https://review.opendev.org/c/openstack/nova/+/910021 | |
| 18:14:56 | opendevreview | Artom Lifshitz proposed openstack/nova master: WIP: Reproducer tests for live migration with power management https://review.opendev.org/c/openstack/nova/+/910022 | |
| 19:48:28 | u00599 | sean-k-mooney: but infact ovn has just it's proxy and network_data.json is provided by nova-api or am i wrong? Infact the ovn has it's router and dhcp port in common and is owned by network:distributed. Wouldn't it be feasible to add another check for this owner when no dhcp-agent is found? | |
| 22:55:52 | opendevreview | Jay Faulkner proposed openstack/nova master: Limit nodes by ironic shard key https://review.opendev.org/c/openstack/nova/+/903915 | |
| 22:55:53 | opendevreview | Jay Faulkner proposed openstack/nova master: Add nova-manage ironic-compute-node-move https://review.opendev.org/c/openstack/nova/+/903916 | |
| 22:55:53 | opendevreview | Jay Faulkner proposed openstack/nova master: Make compute node rebalance safter https://review.opendev.org/c/openstack/nova/+/903917 | |
| 23:23:39 | opendevreview | Jay Faulkner proposed openstack/nova master: Make compute node rebalance safer https://review.opendev.org/c/openstack/nova/+/903917 | |
| #openstack-nova - 2024-02-24 | |||
| 02:02:12 | opendevreview | melanie witt proposed openstack/nova master: Documentation for ephemeral encryption https://review.opendev.org/c/openstack/nova/+/910034 | |
| 02:41:55 | opendevreview | melanie witt proposed openstack/nova master: Documentation for ephemeral encryption https://review.opendev.org/c/openstack/nova/+/910034 | |
| #openstack-nova - 2024-02-25 | |||
| 05:49:16 | opendevreview | Rajesh Tailor proposed openstack/nova master: Add support for showing requested az in output https://review.opendev.org/c/openstack/nova/+/904568 | |
| 21:25:43 | opendevreview | Jay Faulkner proposed openstack/nova master: Limit nodes by ironic shard key https://review.opendev.org/c/openstack/nova/+/903915 | |
| 21:25:44 | opendevreview | Jay Faulkner proposed openstack/nova master: Add nova-manage ironic-compute-node-move https://review.opendev.org/c/openstack/nova/+/903916 | |
| 21:25:44 | opendevreview | Jay Faulkner proposed openstack/nova master: Make compute node rebalance safer https://review.opendev.org/c/openstack/nova/+/903917 | |
| #openstack-nova - 2024-02-26 | |||
| 03:56:49 | opendevreview | Nobuhiro MIKI proposed openstack/nova master: libvirt: Support maxphysaddr. https://review.opendev.org/c/openstack/nova/+/907516 | |
| 07:37:59 | LarsErikP | elodilles: aha! We are working on upgrading from yoga anyway, so I guess we will be good ;) | |
| 07:42:07 | LarsErikP | sean-k-mooney: thanks for the explanation =) We definitly has count_usage_from_placement | |
| 07:42:29 | LarsErikP | jamespage: woho \o/ we will help verify the nova-package at <3 | |
| 07:42:34 | LarsErikP | at least* | |
| 07:59:30 | opendevreview | Rajesh Tailor proposed openstack/nova master: trivial doc fix https://review.opendev.org/c/openstack/nova/+/901237 | |
| 08:33:31 | opendevreview | Merged openstack/nova master: trivial doc fix https://review.opendev.org/c/openstack/nova/+/901237 | |
| 09:14:33 | opendevreview | Rajesh Tailor proposed openstack/nova master: Fix trivial doc issues https://review.opendev.org/c/openstack/nova/+/878779 | |
| 11:04:01 | opendevreview | Pavlo Shchelokovskyy proposed openstack/nova master: Fix device type when booting from ISO image https://review.opendev.org/c/openstack/nova/+/909611 | |
| 13:25:10 | sean-k-mooney | bauzas: rajesh has respon https://review.opendev.org/c/openstack/nova/+/904568 can you re review and if your happy with it ill try and review it later | |
| 13:25:25 | bauzas | ack | |
| 13:26:23 | sean-k-mooney | amit adresses my issues with https://review.opendev.org/c/openstack/nova/+/901824 too so that just needs a second core to review | |
| 13:26:32 | sean-k-mooney | i updated the etherpad with that info | |
| 13:27:31 | sean-k-mooney | im hesitent to merge anytrhing that conflcits with the encyption series but those should hopefully be small | |
| 14:34:10 | bauzas | sean-k-mooney: I'll review amit's rfe shortly but I started reviewing mel's patches and I struggle understanding what she did tbh | |
| 14:34:31 | bauzas | I don't feel confident about providing +2s for things so tangled | |
| 14:34:40 | bauzas | and that I'm not an expert | |
| 14:35:19 | bauzas | so I can try to give it a shot but it will be more based on your own expertise and mel's evidences of that it works | |
| 16:55:57 | dansmith | melwitt: sean-k-mooney: where's the job add/change for this in the stack? | |
| 16:56:19 | dansmith | (for ephemeral encryption) | |
| 16:57:10 | melwitt | dansmith: this is what I've been using https://review.opendev.org/c/openstack/nova/+/862416 it changes the default flavors for tempest to ones that request encryption and then runs all of normal tempest with that | |
| 16:57:24 | dansmith | melwitt: thanks | |
| 16:58:02 | dansmith | melwitt: so are we going to change over one/more jobs to use these? | |
| 16:59:20 | dansmith | melwitt: and the failed run on that needs a recheck I assume | |
| 16:59:55 | melwitt | dansmith: yeah I'm not sure what consensus would want to do here. sean-k-mooney and I chatted about the possibility of adding "smoke" style tests in tempest to do a very basic thing. another option is using something like what's in the DNM and run it periodic because of how heavy they are | |
| 17:00:34 | dansmith | or potentially add a compute feature flag to tempest to just run a few tests with flavors asking for it? | |
| 17:01:21 | melwitt | dansmith: yeah, that's an unrelated fail that needs a recheck. I'll do that | |
| 17:01:34 | melwitt | dansmith: yeah that would be another option | |
| 17:17:08 | melwitt | I had the recheck in a draft comment and hadn't posted it 😣 | |
| 17:23:36 | sean-k-mooney | dansmith: ya so i would liek to add a couple of simple test behind a compute_feature flag in tempest | |
| 17:24:09 | sean-k-mooney | dansmith: melwitt has the every weithg job that turns this on in the flavor for all the tempest vms | |
| 17:24:22 | sean-k-mooney | which we could do in a perodic but not every patch due to the time it takes | |
| 17:24:31 | dansmith | the what? | |
| 17:24:51 | sean-k-mooney | heavy weight | |
| 17:25:05 | sean-k-mooney | the dnm test just changes the tempest flvoars to make all vms use encyption | |
| 17:25:20 | sean-k-mooney | but since the flavor has ephmeral root and swap | |
| 17:25:26 | sean-k-mooney | it slows down the job | |
| 17:26:05 | sean-k-mooney | if we dont already have a job with barbican i would ike to have at least one so we can test cinder volume encyption and vtpm in that job too | |
| 17:26:21 | sean-k-mooney | i have not checked if we have any job today with barbican in our gate | |
| 17:29:23 | melwitt | I think we don't, so that's kind of the main thing is how do we want to add barbican | |
| 17:30:45 | melwitt | add it to an existing job like nova-next and then set a feature flag to run limited encryption tests? | |
| 17:30:59 | dansmith | yeah, something | |
| 17:31:09 | dansmith | or maybe nova-lvm since it's kinda relatedish? | |
| 17:31:36 | sean-k-mooney | not really since this feature wont support lvm | |
| 17:31:40 | sean-k-mooney | at least not in this release | |
| 17:31:56 | dansmith | meaning we can't do this underneath an lvm-backed nova? | |
| 17:32:15 | dansmith | I meant it's related to a more complex ephemeral disk layout | |
| 17:32:20 | sean-k-mooney | correct the serise is currently for qcow, raw and rbd | |
| 17:32:33 | sean-k-mooney | lvm could be supproted but not in the current serise | |
| 17:32:47 | dansmith | and we fail in that scenario how? | |
| 17:32:59 | sean-k-mooney | it does not report the triat saying we supprot this | |
| 17:33:21 | sean-k-mooney | so an lvm cloud will have no valid host or select a non lvm node if they eexist and supprot it | |
| 17:33:34 | dansmith | okay so if you have all LVM-backed nodes and you ask for this, nothing will be bootable | |
| 17:33:44 | sean-k-mooney | there is a per image backend SUPPORTS_LUKS flag | |
| 17:33:56 | sean-k-mooney | correct | |
| 17:34:52 | sean-k-mooney | if we assume this is enabeld in the falvor rahter then the imge | |
| 17:35:12 | sean-k-mooney | the presence of an encypted flavor tells you the operator has configured an approate backedn | |
| 17:35:17 | sean-k-mooney | (or they think they have) | |
| 17:35:29 | sean-k-mooney | but as an end user you cant tell form the api if this will work without trying it | |
| 17:35:46 | sean-k-mooney | i.e. if you wanted to enabel it in the image | |
| 17:35:46 | dansmith | there's a comment in one of the files that says otherwise | |
| 17:35:53 | dansmith | which I asked if it was correct | |
| 17:36:19 | dansmith | made it sound like you could request this via the block device or something, but I haven't gotten that far up the stack to know if that's true or not | |
| 17:36:22 | sean-k-mooney | you can use the old epmeral encyption feature in the lvm backend | |
| 17:37:13 | sean-k-mooney | but i belive that is config file based and not flavor/image based | |
| 17:39:55 | melwitt | yeah the existing ephemeral encryption is for the lvm backend only and it works via config options | |
| 17:45:32 | dansmith | so the comment is wrong yeah? | |
| 17:46:17 | dansmith | also, I'm sure ceph has some inbuilt encryption stuff right? I would assume luks encryption on top of rbd would be almost not-production-quality poor in terms of performance | |
| 17:46:24 | dansmith | is that not the case? | |
| 17:47:49 | melwitt | sorry, which comment? | |
| 17:49:04 | dansmith | one of my comments on the second patch | |
| 17:49:10 | dansmith | about a comment in the code that says the user can request a format | |
| 17:51:19 | melwitt | there is some inbuilt encryption stuff in ceph but as of the current stable release Quincy it doesn't support fast clone of encrypted disks and having a passphrase that's different than the parent. so there's a release note (on the rbd backend patch) stating that. for the performance, I would not be surprised if people wouldn't want to use it given the absence of fast clone. but I wasn't sure if it should be left out entirely bc of that | |
| 17:52:34 | dansmith | okay but fast clone can't be used here either right? | |