| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2025-02-22 | |||
| 00:04:35 | mikal | No, its only helpful if the usb and sound series lands as well. That said, that functionality has been trying to get in for two releases now from multiple proposers. | |
| 00:04:51 | sean-k-mooney | but the os-triats one doesnt have unitlyt with out the usb/sound changes | |
| 00:06:02 | sean-k-mooney | in either case i think there is a stong argument to try and land the usb/sound change after rc1 is cut early in 2025.2 | |
| 00:06:16 | sean-k-mooney | i.e. before the ptg | |
| 00:07:39 | mikal | I am not currently passionate about writing the spec for that bit for a third time. | |
| 00:08:04 | sean-k-mooney | i was going to suggest a specless bluepirnt for the remaing part | |
| 00:08:30 | sean-k-mooney | but i dont know how others would feel about that | |
| 00:22:58 | opendevreview | sean mooney proposed openstack/nova master: only show standard image properties in server show. https://review.opendev.org/c/openstack/nova/+/942413 | |
| 00:23:44 | sean-k-mooney | melwitt: mikal i assume we wong get the tempest fix merged over the weekend. | |
| 00:24:17 | sean-k-mooney | in the unlikely event that happens ill check back sunday but we can revisity this on monday any hopefuly get everythin lined up | |
| 00:24:43 | mikal | Yeah cool. Fair enough. Once again I find myself thanking you for pulling a late night. | |
| 00:25:39 | sean-k-mooney | well i was actully just turning off my laptop after taking a nap and rememeber in left it streamign a game :) | |
| 00:25:50 | sean-k-mooney | so it was good? timing | |
| 00:26:14 | sean-k-mooney | i had litrally jsut sad down when melwitt push the patch | |
| 00:27:43 | mikal | Well if OpenStack still did physical events, and if I ever went to one, both of which seem unlikely, I'd definitely owe you a drink. | |
| 00:27:58 | mikal | (Also I think that sentence had too many commas) | |
| 00:28:16 | sean-k-mooney | if the foundation becomes aprt of the linux foundation you never knwo they could come back | |
| 00:28:56 | sean-k-mooney | its ok you can use my allocation of punctuation :) i rarely do | |
| 00:30:15 | sean-k-mooney | mikal: by the way are you based out of austrialia or is my bring entrily miss rememebrign that | |
| 00:32:21 | sean-k-mooney | the reason i ask is i find it funny how often you melwitt and i tend to be online at similar tiems even those we are goegraphically spread | |
| 00:35:18 | sean-k-mooney | althogh i think as a programmer and irish person im geneitclly alergic to daylight and being awake before 11 am, that and the fact i fundemtly object to having to 7:30's in a day but am quite happy with two 4 o'clocks :) | |
| 00:36:11 | sean-k-mooney | with that said freya will be up early so i better go to bed because she will wake me regarless of if i do or not o/ | |
| 00:38:18 | mikal | Yeah, I'm in Canberra Australia (three hours drive south of Sydney). When I am talking to you in your early evening that's normally about 6am my time. That's why I disappear after a couple of hours to go to work. | |
| 00:38:45 | mikal | I've always been a morning person which helps with overlapping with US people. | |
| 00:39:12 | melwitt | haha, I tend to be up really late in general. gnight sean-k-mooney o/ | |
| 00:39:52 | melwitt | I'm lucky our dog is also not a morning person so don't really have to get up early for him | |
| 00:40:43 | mikal | Yeah, it helps that you're on PST too -- overlapping with the US east coast is hard, especially in winter here. I might be a morning person, but 4am meetings are a bridge too far. | |
| 00:42:56 | gmann | melwitt: ack, will check once gate is finished | |
| 00:43:36 | melwitt | thanks gmann | |
| 00:45:46 | sean-k-mooney | im waiting for my local fucntional test to finish before i actuly leave but as an asseie the eventlet deprecaate messages add a lot of spam to the test output | |
| 00:45:59 | sean-k-mooney | we proably need to supress that message | |
| 00:46:45 | melwitt | yeah. if I knew how to do it I would propose it 😛 | |
| 00:48:52 | sean-k-mooney | we need to install a python log filter like this https://github.com/openstack/nova/blob/master/nova/config.py#L56C5-L89 in the tests | |
| 00:50:00 | melwitt | ah | |
| 00:50:06 | opendevreview | sean mooney proposed openstack/nova master: only show standard image properties in server show. https://review.opendev.org/c/openstack/nova/+/942413 | |
| 00:50:21 | sean-k-mooney | i did actuly have a bug but im not going to wait for ^ to reun again o/ | |
| 00:51:21 | sean-k-mooney | i often forget the for key, val in {} | |
| 00:51:40 | sean-k-mooney | doesnt actully work because iter on dict gives you the keys | |
| 00:52:48 | sean-k-mooney | im a little upset that the unit test passed ant that only showed up in functional test | |
| 00:52:49 | melwitt | ah yeah | |
| 00:53:04 | sean-k-mooney | that tells me i need more unit test coverage in my patch | |
| 01:05:00 | melwitt | gah, looks like tempest response schema is missing support for 2.96 for rebuild too. bleh what a mess | |
| 01:08:29 | mikal | Also, the way that each microversion just tweaks the previous schema makes it really hard to actually have a single view of the schema. I ended up importing the schema module and dumping it because its too hard to see in the code. | |
| 02:04:07 | opendevreview | Artom Lifshitz proposed openstack/nova master: Add [libvirt]default_tpm_secret_security https://review.opendev.org/c/openstack/nova/+/940194 | |
| 02:04:08 | opendevreview | Artom Lifshitz proposed openstack/nova master: Add [libvirt]supported_tpm_secret_security https://review.opendev.org/c/openstack/nova/+/940195 | |
| 02:04:08 | opendevreview | Artom Lifshitz proposed openstack/nova master: Add hw_tpm_secret_security image property https://review.opendev.org/c/openstack/nova/+/940196 | |
| 02:04:09 | opendevreview | Artom Lifshitz proposed openstack/nova master: Add hw:tpm_secret_security extra spec validation https://review.opendev.org/c/openstack/nova/+/940197 | |
| 02:04:09 | opendevreview | Artom Lifshitz proposed openstack/nova master: TPM: support instances with `host` secret security https://review.opendev.org/c/openstack/nova/+/941795 | |
| 02:04:10 | opendevreview | Artom Lifshitz proposed openstack/nova master: [WIP] TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483 | |
| 02:04:10 | opendevreview | Artom Lifshitz proposed openstack/nova master: WIP: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021 | |
| 02:04:11 | opendevreview | Artom Lifshitz proposed openstack/nova master: WIP: Allow vTPM live migration for `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 02:04:12 | opendevreview | Artom Lifshitz proposed openstack/nova master: TPM: migrate legacy instances to new security policy https://review.opendev.org/c/openstack/nova/+/942501 | |
| 02:04:12 | opendevreview | Artom Lifshitz proposed openstack/nova master: TPM: support booting instances with `user` secret security https://review.opendev.org/c/openstack/nova/+/942502 | |
| 05:11:58 | opendevreview | Artom Lifshitz proposed openstack/nova master: [WIP] TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483 | |
| 05:11:58 | opendevreview | Artom Lifshitz proposed openstack/nova master: WIP: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021 | |
| 05:11:59 | opendevreview | Artom Lifshitz proposed openstack/nova master: WIP: Allow vTPM live migration for `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 13:50:18 | opendevreview | Kaloyan Kotlarski proposed openstack/nova master: Consider using X-Forwarded-Proto only if initial validation fails https://review.opendev.org/c/openstack/nova/+/942510 | |
| 16:24:57 | opendevreview | ribaudr proposed openstack/nova master: Update conductor and filters allowing migration with SR-IOV devices https://review.opendev.org/c/openstack/nova/+/942146 | |
| 16:24:57 | opendevreview | ribaudr proposed openstack/nova master: Update driver to map the targeted address for SR-IOV PCI devices https://review.opendev.org/c/openstack/nova/+/942147 | |
| #openstack-nova - 2025-02-23 | |||
| 13:59:22 | opendevreview | Merged openstack/os-vif master: Deprecate linux bridge plugin https://review.opendev.org/c/openstack/os-vif/+/941585 | |
| 22:01:12 | opendevreview | Steve Baker proposed openstack/nova master: Add VNC console support for the Ironic driver https://review.opendev.org/c/openstack/nova/+/942528 | |
| #openstack-nova - 2025-02-24 | |||
| 07:48:37 | mikal | sean-k-mooney: I am unsure if I should recheck the final spice-direct patch now that melwitt's tempest fix has landed or not. Discuss. | |
| 09:50:32 | opendevreview | Sasha Malberg proposed openstack/nova master: Update SHELVED VM az when attaching disk https://review.opendev.org/c/openstack/nova/+/942561 | |
| 11:38:43 | opendevreview | Vasyl Saienko proposed openstack/nova master: Fix serial console for ironic https://review.opendev.org/c/openstack/nova/+/942575 | |
| 12:02:50 | opendevreview | Amit Uniyal proposed openstack/nova master: Reproducer for cold migration on shared storage https://review.opendev.org/c/openstack/nova/+/940304 | |
| 12:23:24 | opendevreview | Vasyl Saienko proposed openstack/nova master: Fix serial console for ironic https://review.opendev.org/c/openstack/nova/+/942575 | |
| 15:35:13 | opendevreview | Takashi Kajinami proposed openstack/nova master: Use consistent program name for wsgi scripts and entry points https://review.opendev.org/c/openstack/nova/+/942605 | |
| 15:41:57 | opendevreview | Takashi Kajinami proposed openstack/nova master: Use consistent program name for wsgi scripts and entry points https://review.opendev.org/c/openstack/nova/+/942605 | |
| 15:46:43 | sean-k-mooney | Uggla: can you appove this https://review.opendev.org/c/openstack/releases/+/941862 to do the final release of os-vif | |
| 15:48:08 | Uggla | sean-k-mooney, I'll have a look right after the call and will approve it. | |
| 15:48:17 | sean-k-mooney | ack | |
| 15:48:52 | sean-k-mooney | zull is still runing on it anyway | |
| 16:13:17 | Uggla | sean-k-mooney, +1 for me. | |
| 16:13:26 | sean-k-mooney | cool thanks :) | |
| 16:17:23 | danfai | hi, do you think there is a way to make nova aware of a change of the vif_type when live migrating? I'm currently testing live migrations between linuxbridge and OVS/OVN, which seems doable (for our case) but the bridge name is wrong | |
| 16:46:41 | sean-k-mooney | danfai: we do not allow changing the vif_type for port attached to a nova instnace | |
| 16:46:53 | sean-k-mooney | danfai: so you cannot change it form linxu bridge ot ovs/ovn | |
| 16:47:01 | sean-k-mooney | that is unsupproted | |
| 16:47:11 | sean-k-mooney | there are som hacky script to do that on the neutron side | |
| 16:47:19 | sean-k-mooney | but its offically unsuprpoted form a nova perspective | |
| 16:59:51 | pas-ha[m] | Hi all, I'm interested in the status of the 'local disk encryption' work. https://review.opendev.org/q/topic:%22specs/yoga/approved/ephemeral-encryption-libvirt%22 . AFAIU it was kind of abandoned after that CVE flurry last summer... Are there any plans to continue woking on it? can I help with it somehow (rebasing, fixing comments etc)? cc melwitt | |
| 17:03:18 | sean-k-mooney | we coudl add support for it but we might need to chnage the multiple port bidning api respoce to incude vif_type | |
| 17:23:27 | sean-k-mooney | pas-ha[m]: where we are with that is before adding that functionality there is a set of technial debt that we would like to clean up | |
| 17:24:09 | sean-k-mooney | basically our concern is the CVE showed there is a lot of tech debt in the iamge backend code and we are concerned about making it even more complext by adding local disk encyption | |
| 17:25:10 | pas-ha[m] | yeah, I bet at least one of those patches there is my own.. (the ISO one) | |
| 17:25:13 | sean-k-mooney | as melwitt noted the priority of the feature was downgraded and the piority fo the refactorign raised but so far we have not commited to when eitehr will be done | |
| 17:25:32 | sean-k-mooney | pas-ha[m]: which iso one | |
| 17:25:43 | sean-k-mooney | there is at least one i was hoping to land this cycle | |
| 17:25:45 | pas-ha[m] | is there any discussion /docs/aims on the planned refactor you could point me to? | |
| 17:26:03 | pas-ha[m] | sean-k-mooney: https://review.opendev.org/c/openstack/nova/+/909611 | |
| 17:26:39 | sean-k-mooney | ah yep thats the one im +2 on. so im hoping melwitt or dan will have time to review that before FF or at least before RC1 | |
| 17:29:06 | pas-ha[m] | bottom line - we are really interested in this feature, as the only proper alternative ATM for local ephemeral encryption is LVM and it starts to be a major operational PITA (no migrations/resize etc).. so if there's anything I could help with I'm all ears 🙂 | |
| 17:29:44 | melwitt | pas-ha[m]: to my understanding, the refactor will be basically the first 3 patches here (maybe just the first 2, will depend on review) https://review.opendev.org/c/openstack/nova/+/925635 obviously I need to rebase and clean up them and I'll write up a blueprint about it. if a spec is needed I will also write a spec | |
| 17:30:18 | pas-ha[m] | thanks, will dive in | |
| 17:30:24 | melwitt | sean-k-mooney: ack I will look at the iso patch | |
| 17:30:59 | sean-k-mooney | melwitt: tldr it will make sure we attach isos as a cdrom rather then as a block device | |
| 17:31:15 | sean-k-mooney | its more subtle then that but that the main part | |
| 17:32:09 | melwitt | ok, thanks | |
| 17:32:51 | pas-ha[m] | fwiw, I recently tried to implement a cold migration / resize for LVM image backend... and it even kind of worked but was ugly AF... really not worth actually doing for sure | |
| 17:34:57 | melwitt | ah, interesting | |