| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2024-11-14 | |||
| 17:48:44 | gibi | then lets switch it to 400. 400 is generic so it is not a problem to return it, we just cannot return the most specific code we want | |
| 17:51:07 | melwitt | I'm not sure if we have to stick to only the 400's that are currently there. gmann can you remind me are we allowed to add say 409 to an API that already has 400 and 403 without a microversion? ^ | |
| 17:51:47 | sean-k-mooney | i think this is in the microvertion doc we can go to 403 | |
| 17:51:59 | sean-k-mooney | and we can go to any exsitng code use by that api | |
| 17:52:12 | sean-k-mooney | so if 409 is used for soemthign elce for that action then we can extend that | |
| 17:52:13 | melwitt | ok, so it has to be an existing code. I didn't remember that | |
| 17:52:34 | sean-k-mooney | well that im not sure of but i know we are allwoed to go form 500 to an existing code | |
| 17:52:44 | sean-k-mooney | and 401 and 403 are alwasy allowed in addtion to 400 | |
| 17:52:52 | sean-k-mooney | 409 i not sure | |
| 17:53:11 | melwitt | ack | |
| 17:53:23 | sean-k-mooney | i alwasy have to look that last point up | |
| 17:53:38 | sean-k-mooney | https://docs.openstack.org/nova/latest/contributor/microversions.html | |
| 17:54:09 | sean-k-mooney | he exception to not needing a microversion when returning a previously unspecified error code is the 400, 403, 404 and 415 cases. | |
| 17:55:54 | sean-k-mooney | 400 is more correct anyway as its not a issue with the stae of things | |
| 17:56:18 | sean-k-mooney | its an issue wth the contet of the request | |
| 17:56:36 | sean-k-mooney | although i can see an argument for 409 on other grounds | |
| 17:56:59 | sean-k-mooney | i personlay argued for 409 before | |
| 17:57:23 | sean-k-mooney | but i didnt think we shoudl backport this then | |
| 17:58:00 | sean-k-mooney | if i recall when i reviewd this in the past i argued that it shold be a case sensieive check | |
| 17:59:16 | sean-k-mooney | we went back and forth on that bug a few times | |
| 19:10:09 | sean-k-mooney | by the way since its a spec review day https://review.opendev.org/c/openstack/nova-specs/+/934391 it would be nice to move forward with the unified limits spec | |
| 19:23:05 | sean-k-mooney | dansmith: ^ is that something you have time to look at today | |
| 20:19:09 | mikal | In terms of spec reviews, https://review.opendev.org/c/openstack/nova-specs/+/932387 should be relatively trivial too given it has a +2 and is largely unchanged from last time. | |
| 20:43:11 | opendevreview | Merged openstack/os-vif master: reno: Update master for unmaintained/2023.1 https://review.opendev.org/c/openstack/os-vif/+/935119 | |
| 22:52:07 | opendevreview | Merged openstack/nova master: Clean up the remaining logic for Windows OS Support https://review.opendev.org/c/openstack/nova/+/932407 | |
| #openstack-nova - 2024-11-15 | |||
| 00:51:06 | gmann | melwitt: sean-k-mooney artom gibi, if we return 409 then it need microversion. Only way to avoid microversion is if we are returning existing error code (400, 403, 404 and 415 are always return from all APIs). I think returning 400 here as gibi mentioned is good candidate. | |
| 01:13:23 | melwitt | thanks gmann for confirming | |
| 03:10:02 | opendevreview | melanie witt proposed openstack/nova master: nova-manage: Add flavor scanning to migrate_to_unified_limits https://review.opendev.org/c/openstack/nova/+/924110 | |
| 08:45:38 | opendevreview | Merged openstack/nova-specs master: Repropose spice-direct console support. https://review.opendev.org/c/openstack/nova-specs/+/932387 | |
| 11:20:00 | stephenfin | gmann: sean-k-mooney: I wonder if you'd be able to take another look through the openapi series today/early next week. It starts here (Sean has already reviewed the first few) https://review.opendev.org/c/openstack/nova/+/915742 | |
| 11:30:43 | opendevreview | Amit Uniyal proposed openstack/nova master: Update Nova bdm with updated swap info https://review.opendev.org/c/openstack/nova/+/929858 | |
| 13:21:34 | opendevreview | Rajesh Tailor proposed openstack/nova master: Fix case-sensitivity for metadata keys https://review.opendev.org/c/openstack/nova/+/873901 | |
| 15:08:19 | gibi | I feel sad about https://bugs.launchpad.net/nova/+bug/1854844/comments/7 | |
| 15:17:00 | artom | Yeah, that's not great UX | |
| 15:17:31 | artom | That being said, I think having an expectation that you can just plop a patch into a comment and have it magically fixed and merged by someone else is misplaced as well | |
| 15:18:01 | dansmith | yep | |
| 15:18:29 | dansmith | definitely unfortunate, but... | |
| 15:18:46 | gibi | sure they shown goodwill by sharing the patch but we shown goodwill to keeping nova alive | |
| 15:20:43 | gibi | so if they can have a limit the we can have it too | |
| 16:05:57 | opendevreview | Dmitriy Rabotyagov proposed openstack/nova master: Handle MAC dash-addresses during migration https://review.opendev.org/c/openstack/nova/+/919760 | |
| 17:29:32 | gmann | stephenfin: ack, will check today or early next week | |
| 18:47:14 | opendevreview | melanie witt proposed openstack/nova master: nova-manage: Add flavor scanning to migrate_to_unified_limits https://review.opendev.org/c/openstack/nova/+/924110 | |
| #openstack-nova - 2024-11-16 | |||
| 02:43:19 | opendevreview | melanie witt proposed openstack/nova master: nova-manage: Add flavor scanning to migrate_to_unified_limits https://review.opendev.org/c/openstack/nova/+/924110 | |
| 02:56:06 | opendevreview | Ghanshyam proposed openstack/nova master: Remove default override for config options policy_file https://review.opendev.org/c/openstack/nova/+/934578 | |
| #openstack-nova - 2024-11-17 | |||
| 18:22:42 | opendevreview | Artom Lifshitz proposed openstack/nova master: libvirt pwr mgmt: reproduce bug 2085122 https://review.opendev.org/c/openstack/nova/+/932922 | |
| 18:22:43 | opendevreview | Artom Lifshitz proposed openstack/nova master: pwr mgmt: power down free PCPUS when updating compute node https://review.opendev.org/c/openstack/nova/+/932926 | |
| 21:29:16 | opendevreview | Artom Lifshitz proposed openstack/nova master: pwr mgmt: power down free PCPUS when updating compute node https://review.opendev.org/c/openstack/nova/+/932926 | |
| #openstack-nova - 2024-11-18 | |||
| 08:57:49 | gibi | hi folks! Can I get a second core on the backport https://review.opendev.org/c/openstack/nova/+/934302 (and its parent)? | |
| 12:03:03 | opendevreview | Merged openstack/nova stable/2024.2: Reproduce bug 2085975 in functional https://review.opendev.org/c/openstack/nova/+/934301 | |
| 12:45:14 | sean-k-mooney | gibi: that should merge shortly ill look at the next branch later but im sure its fine | |
| 12:45:50 | gibi | sean-k-mooney: thanks! | |
| 12:53:40 | zigo | I'm now hit by the crypt.crypt removal in Python 3.13: | |
| 12:53:40 | zigo | https://buildd.debian.org/status/fetch.php?pkg=nova&arch=all&ver=2%3A30.0.0-2&stamp=1731930425&file=log | |
| 12:54:08 | zigo | tkajinam: Do you think your patch here https://review.opendev.org/c/openstack/oslo.utils/+/931899 could be used for it? | |
| 12:56:35 | zigo | BTW, I don't think we should keep using md5 as algo, like the comment above https://github.com/openstack/nova/blob/master/nova/virt/disk/api.py#L634 says. Any distro still using md5 shouldn't be consider at this time and age. | |
| 13:01:57 | zigo | gibi: bauzas: sean-k-mooney: Would it be accepted by the team if I was to propose a patch that does SHA-512 instead, and drop support for MD5 ? | |
| 13:02:39 | sean-k-mooney | zigo: i dont have context but there are some places where we cant do that for upgrade reaons | |
| 13:03:08 | zigo | sean-k-mooney: I believe nova/virt/disk/api.py is the bit that is doing password injections in VMs. | |
| 13:03:18 | zigo | (I didn't check much, but should be...) | |
| 13:03:32 | zigo | The comment says md5, because some distro may be outdated. | |
| 13:04:07 | gibi | zigo: yeah that codepath generates the content of the shadow file so we need to make sure whathever we change there still works with old but not super old linux distros | |
| 13:04:13 | zigo | This was in 2012 ... | |
| 13:04:41 | zigo | gibi: Fast forward 12 years later, md5 is a security hole... | |
| 13:04:48 | gibi | I'm aware | |
| 13:04:59 | zigo | I'm sure you are. | |
| 13:05:14 | zigo | So question still is: is it ok if we drop support for distros with such security hole? :) | |
| 13:05:52 | gibi | OK, if you ask this way then it sounds right to say no, we should not support distros that uses md5 for the root password's hash | |
| 13:06:06 | gibi | I'm sold | |
| 13:06:19 | zigo | Thanks for confirming, I'll try to write a patch. | |
| 13:16:55 | opendevreview | Thomas Goirand proposed openstack/nova master: Python 3.13: crypt.crypt support is dropped https://review.opendev.org/c/openstack/nova/+/935512 | |
| 13:17:09 | sean-k-mooney | zigo: the password injection we may be removing | |
| 13:18:44 | zigo | sean-k-mooney: I'm ok with it to be removed, but I'd prefer to have this patch merged, so I can safely backport it to Dalamatian, which will be the OpenStack release in the next Debian. | |
| 13:19:35 | zigo | Also, that'd be annoying for rescuing ... what would be the method? | |
| 13:19:57 | zigo | (especially for windows ...) | |
| 14:30:33 | opendevreview | Thomas Goirand proposed openstack/nova master: Python 3.13: crypt.crypt support is dropped https://review.opendev.org/c/openstack/nova/+/935512 | |
| 15:53:12 | tkajinam | zigo, I'm adding that utility for nova and ironic so let's use the oslo.utils implementation instead of pulling the same code to nova | |
| 20:00:52 | frickler | not sure if I've mentioned this here before, the reqs bump to latest jsonschema is failing due to nova and placement jobs breaking, maybe someone can take a look https://review.opendev.org/c/openstack/requirements/+/925059 | |
| 20:17:14 | sean-k-mooney | zigo: so file injefction on which password injection is based has been deprecated for removal for a long time | |
| 20:17:34 | sean-k-mooney | zigo: we discussed this in the context of the crypt depency and the fact that is removed in py 3.13 | |
| 20:17:56 | sean-k-mooney | so while we may or may note bable to change form md5 to sha512 in this case | |
| 20:18:17 | sean-k-mooney | there is other technial debth with supproting passwod/file injection in general | |
| 20:19:43 | sean-k-mooney | for rescuue you really should use cloud-init to set the password or use x509 or ssh keys | |
| 20:20:08 | sean-k-mooney | the only non deprecated way to set teh root password today | |
| 20:20:23 | sean-k-mooney | is to dues the qemu guest agent to do that with an image that has that installed | |
| 20:21:02 | sean-k-mooney | which does nto need that code path if i recall correctly but i have not looked at that in some times | |
| 20:46:49 | frickler | this also looks broken, might be due to latest sphinx, but I'm not sure why it would only affect nova and not most other projects https://zuul.opendev.org/t/openstack/builds?job_name=build-openstack-api-ref&project=openstack/nova | |
| 21:24:42 | opendevreview | melanie witt proposed openstack/nova master: tests: Functional reproducer for bug 2088831 https://review.opendev.org/c/openstack/nova/+/935565 | |
| #openstack-nova - 2024-11-19 | |||
| 00:02:59 | opendevreview | melanie witt proposed openstack/nova master: nova-manage: Add flavor scanning to migrate_to_unified_limits https://review.opendev.org/c/openstack/nova/+/924110 | |
| 00:54:32 | opendevreview | Koya Watanabe proposed openstack/placement master: Add memcached packages https://review.opendev.org/c/openstack/placement/+/935576 | |
| 01:12:55 | opendevreview | Ghanshyam proposed openstack/nova master: Update gate jobs as per the 2025.1 cycle testing runtime https://review.opendev.org/c/openstack/nova/+/932648 | |
| 01:15:27 | opendevreview | Ghanshyam proposed openstack/nova master: Testing doc job on Ubuntu Noble https://review.opendev.org/c/openstack/nova/+/935577 | |
| 01:33:57 | opendevreview | Ghanshyam proposed openstack/os-resource-classes master: Update python classifier as per the 2025.1 cycle testing runtime https://review.opendev.org/c/openstack/os-resource-classes/+/935578 | |
| 01:33:59 | opendevreview | Ghanshyam proposed openstack/osc-placement master: Update python classifier as per the 2025.1 cycle testing runtime https://review.opendev.org/c/openstack/osc-placement/+/935579 | |
| 01:33:59 | opendevreview | Ghanshyam proposed openstack/os-vif master: Update gate jobs as per the 2025.1 cycle testing runtime https://review.opendev.org/c/openstack/os-vif/+/935580 | |
| 01:34:00 | opendevreview | Ghanshyam proposed openstack/placement master: Update gate jobs as per the 2025.1 cycle testing runtime https://review.opendev.org/c/openstack/placement/+/935581 | |
| 01:35:30 | opendevreview | Ghanshyam proposed openstack/os-traits master: Update python classifier as per the 2025.1 cycle testing runtime https://review.opendev.org/c/openstack/os-traits/+/935582 | |
| 01:50:22 | opendevreview | Ghanshyam proposed openstack/python-novaclient master: DNM: Testing ubuntu noble https://review.opendev.org/c/openstack/python-novaclient/+/935583 | |
| 02:24:27 | opendevreview | Ghanshyam proposed openstack/osc-placement master: Update python classifier as per the 2025.1 cycle testing runtime https://review.opendev.org/c/openstack/osc-placement/+/935579 | |
| 02:42:35 | opendevreview | Takashi Kajinami proposed openstack/nova master: Detect AMD SEV-ES support https://review.opendev.org/c/openstack/nova/+/925685 | |
| 02:42:49 | opendevreview | Takashi Kajinami proposed openstack/nova master: Add hw_mem_encryption_model image property https://review.opendev.org/c/openstack/nova/+/927706 | |