Tuesday, 2021-11-16

opendevreviewOpenStack Proposal Bot proposed openstack/cinder master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/cinder/+/81803702:36
*** abhishekk is now known as akekane|home05:12
*** akekane|home is now known as abhishekk05:12
*** Guest5958 is now known as geguileo09:09
opendevreviewMerged openstack/cinder master: Fix: Race between attachment and volume deletion  https://review.opendev.org/c/openstack/cinder/+/80191309:50
opendevreviewMerged openstack/cinder master: [Pure Storage] Remove all REST version checks  https://review.opendev.org/c/openstack/cinder/+/81708509:50
opendevreviewSimon Dodsley proposed openstack/cinder master: [Pure Storage] Add volume metadata  https://review.opendev.org/c/openstack/cinder/+/81809814:57
*** dviroel is now known as dviroel|lunch14:59
toskywhoami-rajat: hi, would it make sense to detach https://review.opendev.org/c/openstack/cinder-tempest-plugin/+/790942/ from https://review.opendev.org/c/openstack/cinder-tempest-plugin/+/790899/, so that 790942 can be merged now?15:04
opendevreviewSimon Dodsley proposed openstack/cinder master: [Pure Storage] Add volume metadata  https://review.opendev.org/c/openstack/cinder/+/81809815:23
simondodsleystable cores: Can I get a final vote for https://review.opendev.org/c/openstack/cinder/+/81588415:25
simondodsleystable cores: Also a final vote for https://review.opendev.org/c/openstack/cinder/+/817090 please15:29
opendevreviewHelen Walsh proposed openstack/cinder master: PowerMax Driver - Re-use existing initiator group/host.  https://review.opendev.org/c/openstack/cinder/+/78776415:34
*** dviroel is now known as dviroel_15:37
opendevreviewVenkata krishna Thumu proposed openstack/cinder master: [SVF] Manage host attachment using portsets  https://review.opendev.org/c/openstack/cinder/+/81735115:46
*** dviroel|lunch is now known as dviroel16:18
whoami-rajattosky, so, it's possible but if you see I'm moving some methods from test snapshots file to generic scenario manager which I'm adding/modifying in my previous patch16:22
whoami-rajatalso i would like to get that optimization merged with test_snapshots...16:22
*** akekane_ is now known as abhishekk16:43
toskyoh, oki16:54
toskyso theoretically speaking the order of the patches can be swapped, but then both would need to be changed16:55
toskyit wouldn't be just a rebase of the "use the tempest stable manager" patch on top of master16:56
toskybut the methods added by the other patch would need to be removed, and the move should happen in the other patch16:56
whoami-rajattosky, yes, i agree the order shouldn't be there given the purpose of patches but i might not have that much time to rework this week, but if anyone's interested reviewing the test_snapshots patch i can walk through17:00
toskywhoami-rajat: sure, np17:11
toskywhoami-rajat: we can definitely work on the other patch17:11
*** tosky is now known as Guest605418:05
*** tosky_ is now known as tosky18:05
opendevreviewBrian Rosmaita proposed openstack/os-brick master: Prevent CI from running on irrelevant files  https://review.opendev.org/c/openstack/os-brick/+/81711118:31
*** tosky_ is now known as tosky18:48
qwebirc70383Hi, is it true that Cinder cannot manage/import an ENCRYPTED volume from a storage unit? (We use a Dell unit)19:48
qwebirc70383If this is true, where can I find this information? Thanks19:49
qwebirc70383(I'm referring to volumes created outside of the OpenStack environment, or, a previous environment. I believe it is possible to manage/import an UNencrypted volume,   but not an encrypted volume,  as not possible to provide the encryption key used...??)19:50
rosmaitaqwebirc70383: not sure where it's documented, but it is true ... there is no way to associate an encryption key with a volume on the backend19:51
qwebirc70383Thanks rosmaita.   It seems a big issue, at least for us. I guess other people are just using cinder/encryption in a different way19:52
qwebirc70383Can I file a bug about this?19:52
rosmaitaqwebirc70383: sure ... it would be helpful for you to include your use case, and what kind of encryption you have on the backend (it would have to be compatible with cinder's workflow)19:55
rosmaitaqwebirc70383: also, just out of curiosity, how does your array size an encrypted volume?  what I mean is, if a user asks for an encrypted volume of size 2 GiB, how much usable space do they get?  2 GiB, or 2 GiB minus the encryption container metadata?19:57
qwebirc70383ah well we'd stick to Cinder encrypting it I guess, or just try to use the exact settings it uses to encrypted (key size, algorithm etc)  --- but just good for provisioning if we can populate a volume before actual deployment19:58
qwebirc70383and if needing to full redeploy... well, it makes it so we do not need to recreate the volumes+data19:59
qwebirc70383As for the size issue, I haven't checked as that just hasn't been a concern of ours. But I see what you mean. Cinder creates a volume of the size we request, that gets encrypted with LUKS then the unlocked volume gets mounted to the vm/server.20:02
qwebirc70383so there must be some overhead from the encryption20:02
rosmaitayes, enriquetaso has been working on this issue: https://specs.openstack.org/openstack/cinder-specs/specs/xena/sizing-encrypted-volumes.html20:03
rosmaitathough i think she has been having second thoughts about the change proposed in that spec and is working on proposing something else20:04
qwebirc70383That looks like the issue is 'just' converting unencrypted -> encrypted, right? Like this bug here https://bugs.launchpad.net/cinder/+bug/194457720:06
qwebirc70383But I think that's a separate issue to   managing/importing an already encrypted volume (with 'correct' encryption) 20:07
rosmaitaqwebirc70383: you are right that they are separate issues, i'm just curious about how you do it with your array ... does the array do encryption, or does it just give you raw blocks, and the consumer has to handle the encryption20:08
qwebirc70383Maybe this shows my ignorance, I thought it was straight-forward,   we create an encrypted volume type and I assumed Cinder did the actual encryption, our Dell storage unit knows 0 about it (I thought)20:10
opendevreviewEric Harney proposed openstack/cinder master: mypy: annotate volume/api.py  https://review.opendev.org/c/openstack/cinder/+/73362220:15
rosmaitaqwebirc70383: you are correct, the dell unit doesn't know about cinder encryption, it just has data ... i'm asking about the unmanaged volume on the backend, how did that thing get encrypted?20:18
enriquetasoI'm looking for the note about 'Cinder cannot manage/import an ENCRYPTED volume from a storage unit' but can't find it20:18
rosmaitaalso, i just realized that this thing has never merged: https://review.opendev.org/c/openstack/cinder/+/76845820:26
*** dviroel is now known as dviroel|out20:30
qwebirc70383rosmaita: I understand now. Possibly via `cryptsetup`, but honestly, even just being able to import volume that was encrypted with Cinder in a prior deployment would be enough20:32
rosmaitaqwebirc70383: ok, that doesn't seem unreasonable ... we just need to figure out a way to make the encryption key available20:34
qwebirc70383Are most people on the team employed by OpenStack? Or by other companies that use OpenStack? Or just literally doing this in your free time?20:39
rosmaitaqwebirc70383: mostly companies that use OpenStack (or make it easier for others to use openstack), and some people doing it in their spare time20:57
qwebirc70383Interesting, thanks - just curious!21:00
qwebirc70383I made a bug report, whether or not someone thinks it is too similar to something that exists already, we will see. I couldn't see anything with my exact, simple, use case.21:02
opendevreviewSofia Enriquez proposed openstack/cinder master: RBD: Fix _show_msg_check_clone_v2_api  https://review.opendev.org/c/openstack/cinder/+/77703121:03
opendevreviewRodrigo Barbieri proposed openstack/cinder stable/wallaby: [DEBUG] Check lvs output  https://review.opendev.org/c/openstack/cinder/+/81814021:03
opendevreviewSofia Enriquez proposed openstack/cinder master: RBD: Fix _show_msg_check_clone_v2_api  https://review.opendev.org/c/openstack/cinder/+/77703121:47
*** tosky is now known as Guest607022:42
*** tosky_ is now known as tosky22:42
*** tosky is now known as Guest607323:07
*** tosky_ is now known as tosky23:07

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!