Thursday, 2026-10-29

*** mhen_ is now known as mhen02:17
opendevreviewPranali Deore proposed openstack/glance master: Inspect LUKS container format on upload and import  https://review.opendev.org/c/openstack/glance/+/101281407:49
opendevreviewPranali Deore proposed openstack/glance master: Inspect LUKS container format on upload and import  https://review.opendev.org/c/openstack/glance/+/101281407:51
opendevreviewAbhishek Kekane proposed openstack/glance master: Harden chunked image upload handling  https://review.opendev.org/c/openstack/glance/+/101281507:52
opendevreviewCyril Roelandt proposed openstack/glance master: WIP: Avoid Zip bombs when decompressing  https://review.opendev.org/c/openstack/glance/+/101282309:41
opendevreviewMarkus Hentsch proposed openstack/glance master: Standardization of encrypted images  https://review.opendev.org/c/openstack/glance/+/92629512:34
croelandt#startmeeting glance14:01
opendevmeetMeeting started Thu Oct 29 14:01:58 2026 UTC and is due to finish in 60 minutes.  The chair is croelandt. Information about MeetBot at http://wiki.debian.org/MeetBot.14:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:01
opendevmeetThe meeting name has been set to 'glance'14:01
croelandt#link https://etherpad.opendev.org/p/glance-team-meeting-agenda14:02
croelandt#topic roll call14:02
croelandto/14:02
pdeore_o/14:03
*** pdeore_ is now known as pdeore14:03
mklejn_o/14:03
abhishekko/14:03
croelandtso14:04
croelandtlet's get started14:04
croelandt#topic periodic jobs14:04
croelandtAll good!14:04
croelandt#topic public CVES14:05
croelandtwe have a few of those with patches ready for some. I think our priority should be to review these14:05
croelandt#link https://bugs.launchpad.net/glance/+bug/2168800 14:05
croelandt#link https://bugs.launchpad.net/glance/+bug/216880114:05
croelandt#link https://bugs.launchpad.net/glance/+bug/2172284 14:05
croelandtLast one I have to improve, but I think the first two are ready to be reviewed14:05
abhishekkThere are more with patches available14:06
croelandtYeah I did +2 on those14:06
croelandtpdeore: if you want to take a look, otherwise I'll approve them14:06
croelandtabhishekk: in public?14:06
abhishekkyes14:06
croelandtwith patches on gerrit?14:06
abhishekkyes14:06
pdeoreyes I will do it afetr meeting14:06
croelandtok if you can share the links to the LP here14:06
croelandtpdeore: thanks14:06
abhishekk#link https://bugs.launchpad.net/ossa/+bug/216792814:07
opendevreviewMerged openstack/glance-specs master: [Spec] Allowed upload formats  https://review.opendev.org/c/openstack/glance-specs/+/100329814:07
abhishekk#link https://bugs.launchpad.net/glance/+bug/217228014:08
abhishekk\o/14:08
abhishekkNow other specs will be in merge conflicts :D14:08
croelandtdon't hesitate to rebase && ping me14:08
abhishekkhaha14:08
croelandtbut I did merge that spec and the code since pdeore reviewed them14:08
abhishekkgr814:09
abhishekkone less thing to worry :D14:09
croelandt#topic glance_store release14:09
croelandtok these are a lot of patches14:09
abhishekkthe list is even more, but I think we can target these over next two weeks14:10
croelandthttps://review.opendev.org/c/openstack/glance_store/+/1010475 this seems a bit dicy14:11
croelandtDebian stable has 1.37, so it works14:11
croelandtbut barely 2 years old is not that old for some distros14:11
croelandtOK I'll look into this and will tell you about it on Monday :)14:12
croelandt#topic PQC14:12
croelandtabhishekk: you have the floor14:12
abhishekkWe forgot to discuss this during PTG14:12
abhishekkSo the there is community goal targeting to be PQC compliant by end of 2028.114:13
abhishekkAnd we need to follow the targets set for each cycle14:13
abhishekkI will extract what needs to be done for glance this cycle and may be we can discuss that again in next meeting14:14
croelandtOK, thank you for doing that14:14
croelandt#topic encryption14:14
croelandtI think mhen reworked some Glance patches14:14
croelandtAlso rosmaita volunteered to review https://review.opendev.org/c/openstack/cinder/+/93426114:15
croelandtRajat also spent some time reviewing it14:15
rosmaita"volunteered"14:15
croelandtafter some discussion14:15
croelandtand depending on how much one is willing to twist the definition of "volunteering"14:15
croelandtbut still14:15
croelandtabhishekk: any updates regarding s3 work?14:16
abhishekkI am not working on it, mklejn_ is :D14:17
abhishekks3 multipart download support and tempurl support are on priority14:17
mklejn_indeed, abhishekk reviewed my spec, I replied to some comments, and I have some changes to the spec. well, maybe I'll just post them, even though it's not yet answering all questions14:18
croelandtsorry about forcing you to rebase that spec :/14:18
abhishekkmklejn_: What about multipart download work, I think we have another person who is also interested to work on taht14:18
abhishekk#link https://review.opendev.org/c/openstack/glance-specs/+/97013614:19
mklejn_what is the cycle exactly for this? I'm aware that glance_store needs to be merged on _some_ milestone14:19
abhishekkIf we manage to do it within next two weeks then I can start working on Nova changes14:19
abhishekkif that sleeps beyond that then we need to drop nova work and move it to next cycle14:20
mklejn_for multipart: yes, my teammate "volunteered" to take this work as it's a prerequisite for further work on https://review.opendev.org/c/openstack/glance-specs/+/1009784 :) 14:20
abhishekkand we can have s3 related work till milestone 3 - 1 week14:20
mklejn_next 2 weeks, ack. spec is the hard part here tbh, code will be quick and easy to write, especially that we have a PoC for this already14:21
abhishekkSO if we past next two weeks without this then we don't need to rush :D14:21
mklejn_aaaand that's exactly why it needs to be rushed. roger :) 14:22
opendevreviewMateusz Klejn proposed openstack/glance-specs master: [spec] Generate temp URL for images in object storage backend  https://review.opendev.org/c/openstack/glance-specs/+/97021414:23
abhishekkthanks!!14:23
mklejn_I don't have answers for discovery mechanism question yet, we have some custom policies and I was doing a PoC on a deployment with our patches so I need to force it to vanilla and see what works and what doesn't14:24
abhishekkack14:26
croelandtok14:26
croelandtmoving on14:26
croelandt#topic Open Discussion14:26
croelandtanything else?14:26
abhishekkNothing from me14:27
abhishekkThank you for reviews :D14:27
croelandtgot more on the way14:27
croelandtI am *volunteering* to review these patches14:27
croelandtrosmaita: see!14:27
croelandtok, thanks everyone, see you next week14:27
croelandt#endmeeting14:27
opendevmeetMeeting ended Thu Oct 29 14:27:40 2026 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:27
opendevmeetMinutes:        https://meetings.opendev.org/meetings/glance/2026/glance.2026-10-29-14.01.html14:27
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/glance/2026/glance.2026-10-29-14.01.txt14:27
opendevmeetLog:            https://meetings.opendev.org/meetings/glance/2026/glance.2026-10-29-14.01.log.html14:27
mklejn_if you post patch list somewhere I can also contribute some time towards reviewing them14:28
abhishekkgr8, those are available in https://etherpad.opendev.org/p/glance-team-meeting-agenda14:34
opendevreviewAbhishek Kekane proposed openstack/glance-specs master: Unified spec for s3 multipart download  https://review.opendev.org/c/openstack/glance-specs/+/101085415:17
mhenhi guys, sorry I missed the meeting15:37
mhenthanks abhishekk for review and help on the patchset15:38
mhenI am not available tomorrow and will continue on Monday15:38
opendevreviewMerged openstack/glance master: Restrict traditional image upload to allowed disk formats  https://review.opendev.org/c/openstack/glance/+/100969615:46
opendevreviewMerged openstack/glance_store master: Replace IOError  https://review.opendev.org/c/openstack/glance_store/+/101107215:57
abhishekkmhen: no worries, The patch is mostly good now, just one error in syntax which can lead to failure16:16
opendevreviewMerged openstack/glance_store master: Validate s3_store_bucket_url_format option at config loader layer  https://review.opendev.org/c/openstack/glance_store/+/101047416:54
opendevreviewCyril Roelandt proposed openstack/glance master: Decompression plugin: avoid "Zip bombs"  https://review.opendev.org/c/openstack/glance/+/101282318:37

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!