| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2024-10-24 | |||
| 02:51:59 | sean-k-mooney | it can be doen in some cases via shelve and unshleve. | |
| 03:08:23 | songwenping | sean-k-mooney, hi, the bug 2059809 doesnot effect V and previsous versions? | |
| 03:11:22 | sean-k-mooney | https://bugs.launchpad.net/nova/+bug/2059809 | |
| 03:11:38 | sean-k-mooney | it would if you had a new enough qemu | |
| 03:12:30 | sean-k-mooney | the underlying vulnerbality was in qemu, openstakc in genrela did not have any protection to prevetn unsafe images being passed to qemu-img | |
| 03:12:55 | sean-k-mooney | if you have a qemu that is unpatched and supprots external datafiles | |
| 03:13:25 | sean-k-mooney | adn you use that with a nova/glance/cinder that is unpatched then your cloud is vulnerable | |
| 03:13:57 | sean-k-mooney | V and previous versoin are end of life or unmainteded | |
| 03:14:33 | sean-k-mooney | so the core team does not backport CVE fixes to them regardless of how severe they are | |
| 03:15:56 | songwenping | i find the bug cherry-picked to W, W is also in unmaintained. | |
| 03:16:49 | sean-k-mooney | yep, there is a seprate unmained branch team | |
| 03:18:32 | sean-k-mooney | although im not sure that was cherry picked usptram to wallaby | |
| 03:18:46 | sean-k-mooney | it was done downstream in some distors to older branches | |
| 03:19:30 | songwenping | where i can find the version correspondence of nova and qemu? | |
| 03:20:11 | sean-k-mooney | https://docs.openstack.org/nova/latest/reference/libvirt-distro-support-matrix.html#min-libvirt-qemu-version-and-next-min-libvirt-qemu-version-table | |
| 03:20:35 | sean-k-mooney | V requried qemu 4.0.0 and libvirt 5.0.0 | |
| 03:24:24 | songwenping | our product use qemu 4.2.0 and libvirt 6.6.0 , but cannot reproduce this bug. | |
| 03:25:13 | sean-k-mooney | it was added in qemu 4.0.0 https://github.com/qemu/qemu/commit/65a3d073e9766ed878474525118dbf0c7233caab | |
| 11:14:40 | opendevreview | Balazs Gibizer proposed openstack/nova master: [libvirt]Support hw_vif_model = igb https://review.opendev.org/c/openstack/nova/+/928584 | |
| 11:14:41 | opendevreview | Balazs Gibizer proposed openstack/nova master: [doc]Developer doc about PCI and SRIOV testing https://review.opendev.org/c/openstack/nova/+/928834 | |
| 11:15:18 | opendevreview | Balazs Gibizer proposed openstack/nova master: Refactor obj_make_compatible to reduce complexity https://review.opendev.org/c/openstack/nova/+/928590 | |
| 11:15:19 | opendevreview | Balazs Gibizer proposed openstack/nova master: [ovo]Add igb value to hw_vif_model image property https://review.opendev.org/c/openstack/nova/+/928456 | |
| 11:15:19 | opendevreview | Balazs Gibizer proposed openstack/nova master: [libvirt]Support hw_vif_model = igb https://review.opendev.org/c/openstack/nova/+/928584 | |
| 11:15:20 | opendevreview | Balazs Gibizer proposed openstack/nova master: [doc]Developer doc about PCI and SRIOV testing https://review.opendev.org/c/openstack/nova/+/928834 | |
| 11:18:18 | gibi | tkajinam: I respined the igb series based on you comments ^^ | |
| 11:21:22 | sean-k-mooney | i didnt get to it last week but i can try kiciking it off in the background today | |
| 11:26:46 | gibi | sean-k-mooney: thanks | |
| 12:30:13 | tkajinam | gibi, thanks ! | |
| 13:02:00 | bauzas | nova sessions are starting now | |
| 13:02:51 | bauzas | sean-k-mooney: gibi: joining ? | |
| 13:03:08 | sean-k-mooney | sure but i have to be late or it would not be me :) | |
| 13:36:18 | dansmith | bauzas: it looks like the move of the imagebackend topic might have landed on top of the equivalent glance topic | |
| 13:36:45 | dansmith | in 30m I need to do that in glance | |
| 13:36:52 | dansmith | and I don't want to miss eventlet either of course ;) | |
| 13:37:00 | bauzas | hah | |
| 13:37:09 | bauzas | today was around both topics :) | |
| 13:37:28 | dansmith | also image encryption is after image formats, which melwitt and I should both be in, until 1530 | |
| 13:37:53 | dansmith | glance is very specific about its scheduling, which is nice, since other people are coming to these topics, | |
| 13:37:54 | bauzas | image encryption topic on glance sessions ? | |
| 13:38:07 | dansmith | with nova not strict it's hard to know, but I assume we'll go over both | |
| 13:38:20 | dansmith | yes, for glance-cinder-and-nova encryption stuffm | |
| 13:38:45 | dansmith | and since we asked them to redefine their stuff for us, and the image format stuff will impact, we should be there | |
| 13:39:04 | bauzas | so, to understand correctly, you and mel wouldn't be able to be in the nova sessions before 1530UTC, right ? | |
| 13:39:23 | dansmith | yeah | |
| 13:39:45 | bauzas | given we have cinder-nova x-p session at 1600UTC, that basically means you both are off nova that day | |
| 13:40:05 | dansmith | oh, I didn't see a time for the cinder one | |
| 13:40:07 | dansmith | ugh | |
| 13:40:09 | bauzas | no worries, I understand but then I need to find proper time for discussing the image backedn thinb | |
| 13:42:04 | bauzas | I'll try to see if I can advance the cinder x-p session | |
| 13:42:13 | dansmith | that would be good | |
| 13:43:12 | opendevreview | Mina Shahsavan pour proposed openstack/nova master: nova-api: Prevent os-resetState API action on instances in disallowed VM states. https://review.opendev.org/c/openstack/nova/+/933311 | |
| 13:48:23 | bauzas | dansmith: the cinder-nova x-p session will be moved to 1400-1430-ish | |
| 13:48:31 | dansmith | \o/ | |
| 13:48:51 | dansmith | as long as we have rosmaita in my session at 1400 since we need him :) | |
| 13:48:57 | bauzas | I propose to keep the eventlet discussion to be discussed at 1530 (should be quick) | |
| 13:49:12 | bauzas | this is just a wrap-up confirming what we need to do | |
| 13:49:24 | bauzas | and then imagebackend discussion for ending the day | |
| 14:21:22 | bauzas | zigo: we may discuss your py3.13 topic today at the PTG, interested in joining ? | |
| 14:52:35 | bauzas | eek, got a network issue apparently | |
| 15:00:59 | johnthetubaguy | @bauzas: I had the same, but it recovered just now. | |
| 15:02:37 | bauzas | dditto | |
| 15:08:21 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Use native DictOpt for disk_cachemode https://review.opendev.org/c/openstack/nova/+/915390 | |
| 15:10:32 | ralonsoh | sean-k-mooney, what time is tomorrow the Nova eventlet discussion? | |
| 15:10:50 | ralonsoh | (because is tomorrow, right?) | |
| 15:11:16 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Validate valid cache mode at config input layer https://review.opendev.org/c/openstack/nova/+/933327 | |
| 15:32:24 | bauzas | ralonsoh: this is now | |
| 15:32:32 | ralonsoh | bauzas, I'm in, thanks | |
| 15:32:58 | bauzas | dansmith: melwitt: fyi, we're starting the eventlet discussion now | |
| 15:33:09 | dansmith | we will be done soon I think | |
| 15:51:54 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Use native DictOpt for disk_cachemode https://review.opendev.org/c/openstack/nova/+/915390 | |
| 15:51:54 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Validate valid cache mode at config input layer https://review.opendev.org/c/openstack/nova/+/933327 | |
| 16:57:29 | bauzas | gouthamr: we should be discussing the manila virtiofs topic tomorrow around ~2pm UTC, wfy ? | |
| 16:57:58 | bauzas | if this is just a question about where we are, we can even reply async | |
| 16:58:14 | bauzas | tl;dr: it requires reviews from myself | |
| 17:13:01 | opendevreview | Merged openstack/nova master: libvirt: Deprecate volume driver for unsupported volume backends https://review.opendev.org/c/openstack/nova/+/932247 | |
| 17:38:43 | tkajinam | I posted this in oslo channel accidentally but I have another oslo.utils patch to be used by nova so I'll create a release once it's merged https://review.opendev.org/c/openstack/oslo.utils/+/932335 | |
| 17:44:31 | tkajinam | As we discussed a lot about eventlet removal does anyone care to give quick review to https://review.opendev.org/c/openstack/nova/+/930726 which removes workaround to ancient eventlet versions ? | |
| 17:45:22 | opendevreview | Mengyang Zhang proposed openstack/nova-specs master: Add Burst Length Support to Cinder QoS https://review.opendev.org/c/openstack/nova-specs/+/932653 | |
| 17:58:24 | dansmith | tkajinam: sean-k-mooney should probably look at that | |
| 18:07:40 | sean-k-mooney | i dont recall if that is one of the things i was trying to clean up. | |
| 18:07:57 | sean-k-mooney | glancing at it if the bug in eventlet is already fixed then it soudn like an easy win | |
| 18:08:07 | sean-k-mooney | ill add myslef as a reviewer | |
| 18:11:35 | frickler | fyi, mentioned this in the oslo channel earlier: bumping to latest eventlet seems to break a couple of projects, including nova https://review.opendev.org/c/openstack/requirements/+/933257 | |
| 18:12:42 | frickler | hberaud mentioned a change that makes read/write calls actually non-blocking, which might trigger stuff | |
| 18:13:07 | frickler | https://github.com/eventlet/eventlet/issues/973 | |
| 18:13:52 | sean-k-mooney | os.read is ment to block but yeild execution fo the current greenthread | |
| 18:14:44 | JayF | that's going to be sneaky breaking for Ironic/IPA as well, I'll note | |
| 18:14:56 | JayF | likely would cause issues with image streaming error handling (timeouts/disk failures) | |
| 18:15:20 | JayF | stuff I wouldn't 100% expect to show up in happy path testing; but def. not unit tests | |
| 18:15:30 | JayF | oh, thought this was -requirements, either way, info is good :D | |
| 18:15:32 | sean-k-mooney | i have nto actully looked at the change in detail but reads and write need to be blocking and yeild | |
| 18:17:21 | frickler | I completely do not rule out the possibility that this is actually a bug in eventlet | |
| 18:17:25 | dansmith | um, is this a regression in eventlet? I was thinking it only monkeypatched the network IO bits | |
| 18:17:43 | sean-k-mooney | it monkeypatches file io too | |
| 18:17:46 | dansmith | like, is this change actually not part of the original intent of eventlet? | |
| 18:18:27 | sean-k-mooney | eventlet shoudl not make any standard lib fucntion that is normally blocking non blocking form the point of view of the caller fo the function | |
| 18:18:37 | frickler | best discuss in the oslo channel then where herve is actually around | |
| 18:19:01 | dansmith | right, and I think the change doesn't actually change the behavior, it just adds trampoline calls in between non-blocking reads | |
| 18:19:28 | sean-k-mooney | it may be doing somethign valid yes | |
| 18:19:39 | sean-k-mooney | frickler: do you have a like to the nova failure? | |