| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2025-07-26 | |||
| 07:39:03 | opendevreview | melanie witt proposed openstack/nova master: TPM: update instance request_spec with secret security https://review.opendev.org/c/openstack/nova/+/952630 | |
| 07:39:03 | opendevreview | melanie witt proposed openstack/nova master: TPM: confirm secret security via hard reboot https://review.opendev.org/c/openstack/nova/+/955847 | |
| 09:26:41 | opendevreview | Dmitriy Rabotyagov proposed openstack/nova-specs master: Propose enabling parallel live migrations for libvirt https://review.opendev.org/c/openstack/nova-specs/+/955783 | |
| 10:04:40 | sean-k-mooney | clarkb: yes thats part of the porblem. you have to opt in to vtpm but if its there it will be used by windows. everything i have reviewed on the nova side seams to have exepcted it to not be delete when we hard reboot butthat was obvioulsy an oversight on our part | |
| 10:04:48 | sean-k-mooney | clarkb: i would like to fix this as a bug fix | |
| 10:06:08 | sean-k-mooney | but im just pointing out that looking at libvirt c code and nova code i could find no evidance that it ever worked in the past the way we expected and therefor it technially not a regression. but to me it fundemently breaks how a tpm should work so while its tecnially a "feature" im very open to say this is a bug | |
| 10:08:14 | sean-k-mooney | its one of those things wehre the letter of the law says it a feature but being pragmatic and reflecting on both the enduser and operator impact combined with our orginal in tent i think it a bug, even if that was a bug in the orginal spec because we did not account for the deletaion on domain undefine | |
| 10:44:31 | opendevreview | Dmitriy Rabotyagov proposed openstack/nova master: Allow to perform parallel live migrations https://review.opendev.org/c/openstack/nova/+/955784 | |
| 10:45:08 | opendevreview | Dmitriy Rabotyagov proposed openstack/nova master: Allow to perform parallel live migrations https://review.opendev.org/c/openstack/nova/+/955784 | |
| #openstack-nova - 2025-07-28 | |||
| 01:15:20 | opendevreview | Takashi Kajinami proposed openstack/nova master: Migrate MEM_ENCRYPTION_CONTEXT from root provider https://review.opendev.org/c/openstack/nova/+/921814 | |
| 01:15:21 | opendevreview | Takashi Kajinami proposed openstack/nova master: Detect AMD SEV-ES support https://review.opendev.org/c/openstack/nova/+/925685 | |
| 01:15:22 | opendevreview | Takashi Kajinami proposed openstack/nova master: Add hw_mem_encryption_model image property https://review.opendev.org/c/openstack/nova/+/927706 | |
| 01:15:23 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Launch instances with SEV-ES memory encryption https://review.opendev.org/c/openstack/nova/+/926106 | |
| 02:01:28 | opendevreview | Takashi Kajinami proposed openstack/nova master: Add hw_mem_encryption_model image property https://review.opendev.org/c/openstack/nova/+/927706 | |
| 02:01:28 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Launch instances with SEV-ES memory encryption https://review.opendev.org/c/openstack/nova/+/926106 | |
| 02:31:44 | opendevreview | Takashi Kajinami proposed openstack/nova master: Add hw_mem_encryption_model image property https://review.opendev.org/c/openstack/nova/+/927706 | |
| 02:31:44 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Launch instances with SEV-ES memory encryption https://review.opendev.org/c/openstack/nova/+/926106 | |
| 07:00:37 | opendevreview | Friedrich Hiekel proposed openstack/nova master: Fix nova-scheduler placement error https://review.opendev.org/c/openstack/nova/+/951936 | |
| 07:46:31 | opendevreview | Friedrich Hiekel proposed openstack/nova master: Fix nova-scheduler placement error https://review.opendev.org/c/openstack/nova/+/951936 | |
| 11:02:08 | opendevreview | Florian proposed openstack/nova master: Add check for PCIe devices attach limit for volume and ports https://review.opendev.org/c/openstack/nova/+/955584 | |
| 11:04:51 | opendevreview | Florian proposed openstack/nova master: Add check for PCIe devices attach limit for volume and ports https://review.opendev.org/c/openstack/nova/+/955584 | |
| 12:53:47 | opendevreview | Florian proposed openstack/nova master: Add check for PCIe devices attach limit for volume and ports https://review.opendev.org/c/openstack/nova/+/955584 | |
| 15:27:16 | opendevreview | Wesley Hershberger proposed openstack/nova stable/2024.2: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955310 | |
| 15:30:06 | opendevreview | Wesley Hershberger proposed openstack/nova stable/2024.1: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955305 | |
| 16:38:48 | opendevreview | Wesley Hershberger proposed openstack/nova stable/2024.2: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955310 | |
| 16:41:50 | opendevreview | Wesley Hershberger proposed openstack/nova stable/2024.1: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955305 | |
| 16:42:21 | opendevreview | Wesley Hershberger proposed openstack/nova stable/2024.1: Use dict object for request_specs_dict in the _list_view https://review.opendev.org/c/openstack/nova/+/955305 | |
| 17:00:20 | sean-k-mooney | dansmith: gibi i mentioned this a few day ago but before the end fo the release we probly need to add a license file to nova-contibe and decied if that shoudl be refactored into a actul python package or not | |
| 17:00:58 | sean-k-mooney | the latter topic does not nessisarly need to be decied now | |
| 17:01:31 | sean-k-mooney | but we should have a license file in the repo ideally before rc1 and figure out what the release model for that repo is ectra | |
| 17:02:03 | sean-k-mooney | at the moment i dont think its possibel to use the release repo to actully do releases of it | |
| 17:02:26 | dansmith | license file is fine, I think we should mark it as non-released (like os-test-images) | |
| 17:02:53 | gibi | yeah I'm OK to add a licence file and make it non-released | |
| 17:03:27 | sean-k-mooney | i dont really have a stong opion currently | |
| 17:03:54 | sean-k-mooney | it might be nice to release it eventually but i kind fo wanted use to have a dicussion about what it should and shoudl not contains and docuemnt that somehere like in a readme file | |
| 17:04:10 | sean-k-mooney | but we dont need to have that dicusssion now | |
| 19:11:55 | melwitt | dansmith, gibi, sean-k-mooney: I expect this question will need context load time so no worries to answer right away but in the vTPM patches I have up for review, I did not do a service version bump. the reason is because I could not find how it is needed, | |
| 19:12:41 | melwitt | new instances require compute traits that old computes will not have, so attempts to live migrate from new to old will fail with NoValidHost if there are no eligible new computes to go to | |
| 19:13:38 | melwitt | were you thinking maybe of rejecting in the API if the min service version in the deployment is still old? to not allow live migration at all even to new computes when mid-upgrade? if so, then I do understand that | |
| 19:14:22 | sean-k-mooney | i need to load context but it may have been related to how the traits usage is implemented | |
| 19:14:24 | melwitt | I might be missing something totally obvious but so far I was not understanding the requirement | |
| 19:14:33 | sean-k-mooney | im not sure we need a comptue service version bump | |
| 19:15:10 | sean-k-mooney | but if you requet say user mode vs one of the other modes you need to be sure the host that the vm land on understands the new iamge metadata | |
| 19:15:21 | sean-k-mooney | if we are doign that via traits uncondtionaly | |
| 19:15:29 | sean-k-mooney | then we are prorbaly fine as you said | |
| 19:15:34 | melwitt | yeah I kind of wondered if the service version bump was a discussion before the traits were decided on, so something like that. so I wanted to talk and find out if there is something I'm missing | |
| 19:15:50 | melwitt | *or something like that | |
| 19:16:18 | sean-k-mooney | i would honestly need to reload context by reading the spec | |
| 19:16:50 | melwitt | yeah, np. I wasn't sure when to ask this because I know it is complicated | |
| 19:17:33 | sean-k-mooney | i mean if i had recently read your patchs askign here woudl be fine but i have not looked at the vtpm stuff this cycle so this has all been paged out of my workign memory | |
| 19:17:56 | melwitt | for now I'm working on more func tests and maybe some more whitebox coverage and maybe some plain tempest coverage | |
| 19:18:02 | sean-k-mooney | melwitt: so based on yoru current undersdainding yoru not seeign a need for a bump is that correct | |
| 19:18:06 | melwitt | yep 100% understand | |
| 19:18:40 | melwitt | sean-k-mooney: that is my belief yes but I am aware I might be missing understanding | |
| 19:19:02 | sean-k-mooney | i wonder if maybe it was related to the image show changes? | |
| 19:19:17 | sean-k-mooney | did we ant to make sure tha tyou could see the policy or something | |
| 19:19:35 | sean-k-mooney | that in epoxy so at this poitn we woudl not need it | |
| 19:19:40 | melwitt | oh, hm, that's an angle I didn't think of | |
| #openstack-nova - 2025-07-29 | |||
| 03:12:32 | opendevreview | melanie witt proposed openstack/nova master: Add hw_tpm_secret_security image property https://review.opendev.org/c/openstack/nova/+/940196 | |
| 03:12:32 | opendevreview | melanie witt proposed openstack/nova master: Add hw:tpm_secret_security extra spec validation https://review.opendev.org/c/openstack/nova/+/940197 | |
| 03:12:33 | opendevreview | melanie witt proposed openstack/nova master: TPM: migrate legacy instances to new security policy https://review.opendev.org/c/openstack/nova/+/942501 | |
| 03:12:33 | opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `user` secret security https://review.opendev.org/c/openstack/nova/+/942502 | |
| 03:12:34 | opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `host` secret security https://review.opendev.org/c/openstack/nova/+/941795 | |
| 03:12:34 | opendevreview | melanie witt proposed openstack/nova master: Add vtpm_secret_(uuid|value) to LiveMigrateData https://review.opendev.org/c/openstack/nova/+/952628 | |
| 03:12:35 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483 | |
| 03:12:35 | opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021 | |
| 03:12:36 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 03:12:37 | opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | |
| 03:12:37 | opendevreview | melanie witt proposed openstack/nova master: TPM: update instance request_spec with secret security https://review.opendev.org/c/openstack/nova/+/952630 | |
| 03:12:39 | opendevreview | melanie witt proposed openstack/nova master: TPM: confirm secret security via hard reboot https://review.opendev.org/c/openstack/nova/+/955847 | |
| 05:44:32 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483 | |
| 05:44:33 | opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021 | |
| 05:44:33 | opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | |
| 05:44:34 | opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | |
| 05:44:34 | opendevreview | melanie witt proposed openstack/nova master: TPM: update instance request_spec with secret security https://review.opendev.org/c/openstack/nova/+/952630 | |
| 05:44:35 | opendevreview | melanie witt proposed openstack/nova master: TPM: confirm secret security via hard reboot https://review.opendev.org/c/openstack/nova/+/955847 | |
| 08:09:34 | opendevreview | Lajos Katona proposed openstack/nova master: DNM: Test pyroute2 bump to greate than 0.9.x https://review.opendev.org/c/openstack/nova/+/955858 | |
| 08:14:54 | opendevreview | Florian proposed openstack/nova master: Add check for PCIe devices attach limit for volume and ports https://review.opendev.org/c/openstack/nova/+/955584 | |
| 11:24:21 | opendevreview | Kamil Sambor proposed openstack/nova master: Replace eventlet.event.Event with threading.Event https://review.opendev.org/c/openstack/nova/+/949754 | |
| 12:45:23 | opendevreview | Merged openstack/nova stable/2024.2: Add ServersViewBuilderTestV296 unit test class https://review.opendev.org/c/openstack/nova/+/955309 | |
| 13:27:10 | opendevreview | Kamil Sambor proposed openstack/nova master: Replace eventlet.event.Event with threading.Event https://review.opendev.org/c/openstack/nova/+/949754 | |
| 14:52:26 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for images APIs https://review.opendev.org/c/openstack/nova/+/952284 | |
| 14:52:26 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Separate volume, snapshot and volume attachments https://review.opendev.org/c/openstack/nova/+/952347 | |
| 14:52:27 | opendevreview | Stephen Finucane proposed openstack/nova master: tests: Use valid UUIDs for cinder resources https://review.opendev.org/c/openstack/nova/+/952935 | |
| 14:52:27 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Only apply "soft" additionalProperties validation to requests https://review.opendev.org/c/openstack/nova/+/952936 | |
| 14:52:28 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for volumes APIs https://review.opendev.org/c/openstack/nova/+/952348 | |
| 14:52:28 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for snapshots APIs https://review.opendev.org/c/openstack/nova/+/952349 | |
| 14:52:29 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for volume attachments APIs https://review.opendev.org/c/openstack/nova/+/952350 | |
| 14:52:29 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for floating IP APIs https://review.opendev.org/c/openstack/nova/+/952972 | |
| 14:52:30 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for security group APIs https://review.opendev.org/c/openstack/nova/+/952973 | |
| 14:52:31 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for services APIs https://review.opendev.org/c/openstack/nova/+/953196 | |
| 14:52:31 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for server usage audit log APIs https://review.opendev.org/c/openstack/nova/+/953209 | |
| 15:24:48 | opendevreview | Stephen Finucane proposed openstack/nova master: api: Add response body schemas for tenant network APIs https://review.opendev.org/c/openstack/nova/+/956088 | |
| 15:25:10 | opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | |
| 15:25:11 | opendevreview | Balazs Gibizer proposed openstack/nova master: Make RBD Tpool usage conditional https://review.opendev.org/c/openstack/nova/+/956089 | |
| 15:25:11 | opendevreview | Balazs Gibizer proposed openstack/nova master: Make libvirt Tpool proxying conditional https://review.opendev.org/c/openstack/nova/+/956090 | |
| 15:25:12 | opendevreview | Balazs Gibizer proposed openstack/nova master: Fix ProviderTree copying with threading Lock https://review.opendev.org/c/openstack/nova/+/956091 | |
| 15:25:12 | opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Further categorization of disabled unit tests https://review.opendev.org/c/openstack/nova/+/956092 | |
| 15:28:03 | Uggla | Nova meeting in ~30mn | |
| 16:00:48 | gibi | o/ | |