| openstackgerrit | Ghanshyam Mann proposed openstack/ironic-tempest-plugin master: [ussuri][goal] Drop python 2.7 support and testing https://review.opendev.org/704093 | 00:05 |
|---|---|---|
| *** trident has quit IRC | 00:13 | |
| *** trident has joined #openstack-ironic | 00:14 | |
| *** dsneddon has joined #openstack-ironic | 00:14 | |
| *** dsneddon has quit IRC | 00:19 | |
| *** dsneddon has joined #openstack-ironic | 00:22 | |
| *** dsneddon has quit IRC | 00:27 | |
| *** goldyfruit_ has quit IRC | 00:34 | |
| *** goldyfruit_ has joined #openstack-ironic | 00:34 | |
| *** jawad_axd has joined #openstack-ironic | 00:44 | |
| *** TxGirlGeek has quit IRC | 00:48 | |
| *** jawad_axd has quit IRC | 00:49 | |
| *** dsneddon has joined #openstack-ironic | 01:01 | |
| *** jawad_axd has joined #openstack-ironic | 01:05 | |
| *** dsneddon has quit IRC | 01:05 | |
| *** jawad_axd has quit IRC | 01:10 | |
| *** goldyfruit_ has quit IRC | 01:21 | |
| *** goldyfruit has joined #openstack-ironic | 01:21 | |
| *** jdandrea has joined #openstack-ironic | 01:23 | |
| *** dsneddon has joined #openstack-ironic | 01:34 | |
| *** andreaf has quit IRC | 01:37 | |
| *** andreaf has joined #openstack-ironic | 01:38 | |
| *** dsneddon has quit IRC | 01:39 | |
| *** jawad_axd has joined #openstack-ironic | 01:47 | |
| *** rh-jelabarre has joined #openstack-ironic | 01:50 | |
| *** jawad_axd has quit IRC | 01:51 | |
| *** k_mouza has joined #openstack-ironic | 01:52 | |
| *** k_mouza has quit IRC | 01:57 | |
| *** jawad_axd has joined #openstack-ironic | 02:07 | |
| *** dsneddon has joined #openstack-ironic | 02:08 | |
| *** jawad_axd has quit IRC | 02:12 | |
| *** dsneddon has quit IRC | 02:14 | |
| *** goldyfruit has quit IRC | 02:25 | |
| *** jawad_axd has joined #openstack-ironic | 02:28 | |
| *** jawad_axd has quit IRC | 02:33 | |
| *** dsneddon has joined #openstack-ironic | 02:47 | |
| *** jawad_axd has joined #openstack-ironic | 02:49 | |
| *** dsneddon has quit IRC | 02:51 | |
| *** jawad_axd has quit IRC | 02:53 | |
| *** rloo has quit IRC | 03:08 | |
| *** dsneddon has joined #openstack-ironic | 03:19 | |
| *** dsneddon has quit IRC | 03:28 | |
| *** stevebaker_ has joined #openstack-ironic | 03:35 | |
| *** stevebaker has quit IRC | 03:36 | |
| *** goldyfruit has joined #openstack-ironic | 03:38 | |
| *** goldyfruit has quit IRC | 03:43 | |
| *** goldyfruit has joined #openstack-ironic | 03:43 | |
| *** jawad_axd has joined #openstack-ironic | 03:51 | |
| *** jawad_axd has quit IRC | 03:56 | |
| *** tzumainn has quit IRC | 04:00 | |
| *** goldyfruit has quit IRC | 04:05 | |
| *** goldyfruit has joined #openstack-ironic | 04:11 | |
| *** rh-jelabarre has quit IRC | 04:14 | |
| *** mkrai has joined #openstack-ironic | 04:19 | |
| *** goldyfruit has quit IRC | 04:27 | |
| *** goldyfruit has joined #openstack-ironic | 04:27 | |
| *** jawad_axd has joined #openstack-ironic | 04:33 | |
| *** goldyfruit has quit IRC | 04:33 | |
| *** goldyfruit has joined #openstack-ironic | 04:33 | |
| *** jawad_axd has quit IRC | 04:37 | |
| openstackgerrit | Merged openstack/ironic master: Use str type instead of wsme.types.text https://review.opendev.org/703722 | 04:49 |
| openstackgerrit | Merged openstack/ironic master: Subclass wsme.exc.ClientSideError https://review.opendev.org/703723 | 04:49 |
| openstackgerrit | Merged openstack/ironic master: Clean up api controller base classes https://review.opendev.org/703897 | 04:49 |
| *** goldyfruit has quit IRC | 04:50 | |
| *** goldyfruit has joined #openstack-ironic | 04:50 | |
| *** goldyfruit has quit IRC | 04:59 | |
| *** dsneddon has joined #openstack-ironic | 05:23 | |
| *** dsneddon has quit IRC | 05:31 | |
| *** jdandrea has quit IRC | 05:47 | |
| *** gyee has quit IRC | 05:47 | |
| *** k_mouza has joined #openstack-ironic | 05:53 | |
| *** k_mouza has quit IRC | 05:57 | |
| *** rachit7 has joined #openstack-ironic | 06:24 | |
| *** rachit7 has quit IRC | 06:34 | |
| *** jawad_axd has joined #openstack-ironic | 07:21 | |
| *** mkrai has quit IRC | 07:44 | |
| *** dtantsur|afk is now known as dtantsur | 07:48 | |
| dtantsur | happy Friday, ironic! | 07:48 |
| arne_wiebalck | Good morning, ironic and early owl dtantsur! | 07:52 |
| dtantsur | :) | 07:53 |
| *** belmoreira has quit IRC | 07:55 | |
| *** belmoreira has joined #openstack-ironic | 08:00 | |
| *** belmoreira has quit IRC | 08:07 | |
| *** mkrai has joined #openstack-ironic | 08:09 | |
| *** k_mouza has joined #openstack-ironic | 08:15 | |
| *** belmoreira has joined #openstack-ironic | 08:17 | |
| *** k_mouza has quit IRC | 08:19 | |
| etingof | fellow owls in the woods raise early, it seems o/ | 08:23 |
| *** tesseract has joined #openstack-ironic | 08:34 | |
| *** amoralej has joined #openstack-ironic | 08:49 | |
| *** rpittau|afk is now known as ironic | 08:51 | |
| *** ironic is now known as rpittau | 08:51 | |
| rpittau | good morning ironic! o/ | 08:51 |
| rpittau | TGIF :) | 08:51 |
| *** belmoreira has quit IRC | 08:56 | |
| *** khansa has joined #openstack-ironic | 09:00 | |
| *** belmoreira has joined #openstack-ironic | 09:02 | |
| *** mbeierl has quit IRC | 09:03 | |
| *** mbeierl has joined #openstack-ironic | 09:04 | |
| *** belmoreira has quit IRC | 09:07 | |
| *** lucas has joined #openstack-ironic | 09:11 | |
| *** belmoreira has joined #openstack-ironic | 09:11 | |
| *** rachit7 has joined #openstack-ironic | 09:13 | |
| *** pcaruana has joined #openstack-ironic | 09:14 | |
| *** dougsz has joined #openstack-ironic | 09:15 | |
| *** k_mouza has joined #openstack-ironic | 09:19 | |
| openstackgerrit | Riccardo Pittau proposed openstack/bifrost master: Check binaries only if in virtualenv https://review.opendev.org/704113 | 09:20 |
| dtantsur | etingof: I wish I did not have to :) | 09:22 |
| * dtantsur has finished firmware upgrades for his thinkpad and is back | 09:22 | |
| * rpittau wonder if he should also do that | 09:23 | |
| dtantsur | TIL fwupdmgr makes it quite easy | 09:24 |
| *** dsneddon has joined #openstack-ironic | 09:27 | |
| *** belmoreira has quit IRC | 09:27 | |
| *** dsneddon has quit IRC | 09:32 | |
| rpittau | I'll check that, thanks :) | 09:32 |
| *** derekh has joined #openstack-ironic | 09:39 | |
| *** alexmcleod has joined #openstack-ironic | 09:48 | |
| openstackgerrit | Riccardo Pittau proposed openstack/bifrost master: Make CentOS 8 tinyipa job voting again https://review.opendev.org/703954 | 09:54 |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Rearrange project layout https://review.opendev.org/704048 | 09:56 |
| etingof | let's drop py2 ^ | 09:57 |
| khansa | (y) (y) | 10:02 |
| openstackgerrit | Dmitry Tantsur proposed openstack/bifrost stable/train: Use upper-constraints everywhere in ironic installation https://review.opendev.org/704011 | 10:04 |
| dtantsur | etingof++ | 10:05 |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Add CI hooks and reno https://review.opendev.org/704126 | 10:13 |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Rearrange project layout https://review.opendev.org/704048 | 10:17 |
| * etingof 's favorite Zuul job is noop | 10:18 | |
| etingof | very quick and reliable | 10:18 |
| rpittau | it's probably the most relaxing job, ideal for a Friday | 10:18 |
| etingof | let's consider Friday a noop day! | 10:19 |
| rpittau | :D | 10:19 |
| *** rachit7 has quit IRC | 10:32 | |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Rearrange project layout https://review.opendev.org/704048 | 10:43 |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Add CI hooks and reno https://review.opendev.org/704126 | 10:43 |
| dtantsur | TheJulia: Friday "happiness": in-Python TLS currently does not work: https://github.com/eventlet/eventlet/issues/308 | 10:47 |
| dtantsur | if we want to use it, we need a proper WSGI container :( | 10:47 |
| dtantsur | and we don't seem compatible with anything but mod_wsgi, sweeeet. | 10:59 |
| *** rachit7 has joined #openstack-ironic | 11:02 | |
| *** mkrai has quit IRC | 11:14 | |
| dtantsur | potential fix ^^^ | 11:23 |
| dtantsur | ehmmm | 11:23 |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Make ironic-api compatible with WSGI containers other than mod_wsgi https://review.opendev.org/704139 | 11:23 |
| dtantsur | yeah ^^^ | 11:23 |
| *** jsuchome has joined #openstack-ironic | 11:23 | |
| *** rpittau is now known as rpittau|bbl | 11:28 | |
| *** mkrai has joined #openstack-ironic | 11:33 | |
| *** skazi has joined #openstack-ironic | 11:36 | |
| *** rachit7 has quit IRC | 11:45 | |
| *** iurygregory has joined #openstack-ironic | 11:48 | |
| skazi | hi | 11:52 |
| skazi | we made this change https://review.opendev.org/#/c/703750/ to ironic-lib | 11:53 |
| patchbot | patch 703750 - ironic-lib - Include rootwrap.d/ironic-lib.filters in package (MERGED) - 1 patch set | 11:53 |
| skazi | and we want it to be included in the CI for this change https://review.opendev.org/#/c/684270/ | 11:53 |
| patchbot | patch 684270 - ironic - Drop rootwrap.d/ironic-lib.filters file - 5 patch sets | 11:53 |
| *** mkrai has quit IRC | 11:53 | |
| skazi | devstack uses ironic-lib from pip so should we: | 11:53 |
| skazi | 1. set devstack to use ironic-lib from git? (if so then where to do it?) | 11:54 |
| skazi | 2. "release" the change to pip (probably as new version)? (if so then what is the process for that?) | 11:55 |
| dtantsur | skazi: #2, mgoddard can request a release | 11:55 |
| iurygregory | morning all o/ | 11:56 |
| mgoddard | skazi: hi, which branch is this on? | 11:56 |
| skazi | @dtantsur: thx! shall we request this new version in requirements.txt together with the change which uses that? | 11:57 |
| skazi | @mgoddard: currently on master | 11:57 |
| skazi | but we will probably need backports at least back to rocky | 11:57 |
| mgoddard | ok | 11:57 |
| skazi | if possible | 11:57 |
| mgoddard | skazi: https://review.opendev.org/704146 | 12:00 |
| patchbot | patch 704146 - releases - Release ironic-lib 3.1.0 for Ussuri - 1 patch set | 12:00 |
| openstackgerrit | Dmitry Tantsur proposed openstack/bifrost stable/stein: Use upper-constraints everywhere in ironic installation https://review.opendev.org/704000 | 12:00 |
| dtantsur | skazi: the dropping part is certainly impossible to backport | 12:01 |
| skazi | ah, right | 12:02 |
| skazi | so we'll have to deal with it downstream | 12:02 |
| skazi | good that we at least have it fixed properly in master | 12:02 |
| skazi | thx @dtantsur @mgoddard ! | 12:02 |
| *** rachit7 has joined #openstack-ironic | 12:03 | |
| dtantsur | TheJulia, etingof: https://storyboard.openstack.org/#!/story/2007214 | 12:10 |
| openstackgerrit | Dmitry Tantsur proposed openstack/bifrost stable/train: Use upper-constraints everywhere in ironic installation https://review.opendev.org/704011 | 12:15 |
| openstackgerrit | Dmitry Tantsur proposed openstack/bifrost stable/stein: Use upper-constraints everywhere in ironic installation https://review.opendev.org/704000 | 12:15 |
| etingof | dtantsur, actually, copying cert to ramdisk means ramdisk repacking... an alternative could be to write it down to boot iso | 12:23 |
| openstackgerrit | Merged openstack/ironic-inspector stable/train: Respect driver_info.force_persistent_boot_device https://review.opendev.org/703062 | 12:24 |
| etingof | also, perhaps we should also pass it a private key | 12:25 |
| *** mkrai has joined #openstack-ironic | 12:27 | |
| *** kiseok7 has quit IRC | 12:29 | |
| *** kiseok7 has joined #openstack-ironic | 12:29 | |
| openstackgerrit | Riccardo Pittau proposed openstack/bifrost master: Fix variable checks in install-deps https://review.opendev.org/704113 | 12:34 |
| openstackgerrit | Arne Wiebalck proposed openstack/ironic master: [WIP] Support node retirement https://review.opendev.org/703981 | 12:41 |
| *** rh-jelabarre has joined #openstack-ironic | 12:47 | |
| *** jtomasek has joined #openstack-ironic | 12:59 | |
| *** iurygregory has quit IRC | 13:15 | |
| *** ociuhandu has joined #openstack-ironic | 13:25 | |
| *** ociuhandu has quit IRC | 13:25 | |
| *** ociuhandu has joined #openstack-ironic | 13:26 | |
| *** rachit7 has quit IRC | 13:31 | |
| *** ociuhandu has quit IRC | 13:33 | |
| *** rpittau|bbl is now known as rpittau | 13:40 | |
| *** jdandrea has joined #openstack-ironic | 13:42 | |
| *** jtomasek has quit IRC | 13:44 | |
| *** rloo has joined #openstack-ironic | 13:44 | |
| *** jawad_axd has quit IRC | 13:45 | |
| dtantsur | etingof: I guess I meant the boot ISO.. as to a private key, yes... you don't need it for the client side, but ironic also contacts IPA as a server. | 13:51 |
| dtantsur | rpittau, TheJulia, this finally seems to work https://review.opendev.org/#/q/70786915db901e80f8ebd40baa07931fea78459a please review | 13:52 |
| etingof | it's not clear from the task | 13:52 |
| etingof | so what would be the goal of the cert we are passing to IPA? | 13:53 |
| dtantsur | etingof: we have both directions: IPA as a server and IPA as a client. I've only accounted for IPA as a client (thus only the cert). | 13:53 |
| dtantsur | but you're right, IPA is also an IPA server, so we need another cert-key pair | 13:53 |
| dtantsur | and we probably need to generate it on fly, hmmmm | 13:53 |
| * dtantsur thinks more | 13:54 | |
| etingof | the cert we discussing so far - is it to make sure that ironic server is not defaced? | 13:54 |
| dtantsur | etingof: largely, to avoid interception of ironic<->IPA communication | 13:55 |
| * dtantsur expands the RFE | 13:55 | |
| *** mkrai has quit IRC | 13:56 | |
| etingof | certs are conventionally for ensuring identity, not so much for the ciphering. to close down Alice/Bob communication no pre-shared cert or whatever is required (kudos to RSA) | 13:57 |
| openstackgerrit | Riccardo Pittau proposed openstack/bifrost master: Make CentOS 8 tinyipa job voting again https://review.opendev.org/703954 | 13:57 |
| etingof | in my mind, however, helping ironic to identifying IPA in a more reliable way than L2 address would be a very good thing | 13:58 |
| dtantsur | etingof: not sure I get it, the point of TLS is both encryption and server (by default) identification | 14:03 |
| dtantsur | it doesn't help anyhow with the L2 address, although we can address it with virtual media\ | 14:03 |
| dtantsur | I've updated the story with more details | 14:04 |
| etingof | if we want to only cipher ironic<->IPA traffic, we can probably get away with just a self-signed certs on both sides | 14:04 |
| etingof | generated at runtime | 14:04 |
| etingof | out of thin air | 14:04 |
| dtantsur | etingof: we expect the ironic side to be provided by an operation since that's what usually happens anyway | 14:05 |
| dtantsur | I agree re generation another pair | 14:05 |
| etingof | the whole purpose of the certs is to ensure identity, that's why we have CAs, trust chain and the whole infrastructure | 14:05 |
| dtantsur | identity and encryption | 14:05 |
| dtantsur | yes | 14:05 |
| etingof | encryption is a side-product | 14:05 |
| dtantsur | no, it's not (or it would be avoided) | 14:06 |
| dtantsur | I mean.. seriously | 14:06 |
| etingof | re L2-based identification and vmedia: vmedia by itself does not help ironic server to recognize ironic client unless some secret is passed to the boot image | 14:07 |
| dtantsur | etingof: right, but I'm not concerned with identification right now (although we could easily pass a node UUID) | 14:07 |
| etingof | that secret can be something based on the certificate tech | 14:07 |
| dtantsur | let's not dive into the task we don't have please | 14:07 |
| dtantsur | the task we have is first and foremost encryption | 14:08 |
| etingof | node UUID does not ensure IPA identity because it can be forged | 14:08 |
| dtantsur | not through virtual media | 14:08 |
| dtantsur | anyway, that's not the task here | 14:08 |
| etingof | if our immediate task is traffic encryption, then we should better make IPA generating key-pair for itself on boot. that would work for PXE as well. | 14:11 |
| dtantsur | etingof: how will ironic know the correct certificate though? | 14:12 |
| etingof | for IPA->ironic communication, ironic should not care | 14:12 |
| etingof | it's like when you hit a https web site, the web site does not care who you are | 14:13 |
| etingof | your browser, however, will try to identify server's cert to avoid defacing | 14:13 |
| dtantsur | my browser can prove the certificate validity | 14:14 |
| dtantsur | here we have a pair of self-signed certificates and two unrelated devices | 14:15 |
| etingof | sure, that's about IPA proving ironic server validity | 14:15 |
| dtantsur | without a secure channel between them (i.e. virtual media) and some exchange we cannot ensure trust | 14:15 |
| etingof | do not mix encryption (our task at hand) with identification | 14:15 |
| dtantsur | TLS solves both, so do I | 14:16 |
| dtantsur | it doesn't matter to ensure encryption if you don't know who you're talking to | 14:16 |
| dtantsur | This work targets Edge (to a big extent) and assumes a possibility of MiTM | 14:17 |
| dtantsur | * MitM | 14:17 |
| *** khansa has quit IRC | 14:17 | |
| etingof | TLS can solve the identity problem, but your proposal solves it only one way (IPA identifying ironic by pre-shared ironic server cert). to solve the mutual identity problem IPA must hold a secret of some kind. | 14:20 |
| dtantsur | etingof: could you please read the RFE? | 14:21 |
| dtantsur | I've updated it to cover that | 14:21 |
| *** amoralej is now known as amoralej|lunch | 14:21 | |
| etingof | ah, I read previous version | 14:21 |
| * etingof needs to git push urgently | 14:22 | |
| dtantsur | etingof: don't forget --force :) | 14:22 |
| etingof | that's my default | 14:22 |
| *** ociuhandu has joined #openstack-ironic | 14:23 | |
| *** ociuhandu has quit IRC | 14:28 | |
| *** ociuhandu has joined #openstack-ironic | 14:33 | |
| *** goldyfruit has joined #openstack-ironic | 14:34 | |
| openstackgerrit | Riccardo Pittau proposed openstack/bifrost master: Make CentOS 8 tinyipa job voting again https://review.opendev.org/703954 | 14:43 |
| *** lucas is now known as lucasagomes | 14:46 | |
| *** seongsoocho has quit IRC | 14:49 | |
| *** seongsoocho has joined #openstack-ironic | 14:49 | |
| *** goldyfruit_ has joined #openstack-ironic | 14:54 | |
| *** goldyfruit has quit IRC | 14:55 | |
| *** jawad_axd has joined #openstack-ironic | 14:55 | |
| *** goldyfruit_ has quit IRC | 14:55 | |
| *** goldyfruit_ has joined #openstack-ironic | 14:55 | |
| *** jawad_axd has quit IRC | 14:59 | |
| *** mkrai has joined #openstack-ironic | 15:04 | |
| *** goldyfruit_ has quit IRC | 15:07 | |
| *** goldyfruit_ has joined #openstack-ironic | 15:07 | |
| *** goldyfruit_ has quit IRC | 15:16 | |
| *** goldyfruit_ has joined #openstack-ironic | 15:17 | |
| *** jtomasek has joined #openstack-ironic | 15:19 | |
| *** amoralej|lunch is now known as amoralej | 15:21 | |
| *** dsneddon has joined #openstack-ironic | 15:24 | |
| *** zzzeek has quit IRC | 15:24 | |
| *** jtomasek has quit IRC | 15:28 | |
| *** dsneddon has quit IRC | 15:29 | |
| *** mnasiadka has quit IRC | 15:31 | |
| *** tzumainn has joined #openstack-ironic | 15:31 | |
| *** mnasiadka has joined #openstack-ironic | 15:31 | |
| TheJulia | dtantsur: please focus on MVP to start with then add more ssl features | 15:32 |
| TheJulia | etingof: I concur regarding identfication, but that is unrelated to adding security to the communication channel | 15:33 |
| *** zzzeek has joined #openstack-ironic | 15:33 | |
| TheJulia | and by security making it harder to MiTM | 15:35 |
| TheJulia | We also need to maintain keep in mind we basically soot for n-1, n, n+1 with ipa. | 15:35 |
| etingof | if we ignore the identification goal for now, why don't we let IPA generate a key-pair on boot to use for encryption later on? on the plus side, PXE-booted images would work as well... | 15:41 |
| dtantsur | etingof: no benefit of doing it | 15:45 |
| etingof | pxe is dead? | 15:45 |
| dtantsur | TheJulia: morning! I think this is essentially an MVP (in a sense that it allows a fully secure communication) | 15:46 |
| dtantsur | etingof: no point in bothering with a security solution that already has known holes | 15:46 |
| TheJulia | dtantsur: I typed that message when I saw the beginning of the discussion in irc | 15:46 |
| *** jsuchome has quit IRC | 15:46 | |
| dtantsur | ah | 15:47 |
| etingof | well, then we should not ignore the identification part | 15:47 |
| TheJulia | and I've not had a chance to look at the rfe yet... 1 AM hotel arrival, up 6:45 to get breakfast and then jump on morning meetings | 15:47 |
| dtantsur | ugh | 15:47 |
| dtantsur | take your time then | 15:47 |
| *** ociuhandu has quit IRC | 15:49 | |
| *** ociuhandu has joined #openstack-ironic | 15:50 | |
| *** gregwork has quit IRC | 15:55 | |
| *** ociuhandu has quit IRC | 15:55 | |
| *** dsneddon has joined #openstack-ironic | 16:00 | |
| *** dsneddon has quit IRC | 16:11 | |
| *** aedc_ has joined #openstack-ironic | 16:14 | |
| *** gyee has joined #openstack-ironic | 16:14 | |
| *** aedc has quit IRC | 16:15 | |
| *** skazi has quit IRC | 16:20 | |
| *** Lucas_Gray has joined #openstack-ironic | 16:32 | |
| *** dsneddon has joined #openstack-ironic | 16:41 | |
| *** ociuhandu has joined #openstack-ironic | 16:45 | |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Add power management command https://review.opendev.org/702546 | 16:49 |
| *** Goneri has joined #openstack-ironic | 16:50 | |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Rearrange project layout https://review.opendev.org/704048 | 16:55 |
| *** Lucas_Gray has quit IRC | 16:55 | |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Add CI hooks and reno https://review.opendev.org/704126 | 16:56 |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Add power management command https://review.opendev.org/702546 | 16:56 |
| *** Lucas_Gray has joined #openstack-ironic | 16:59 | |
| * dtantsur wishes everyone a wonderful weekend | 17:03 | |
| *** dtantsur is now known as dtantsur|afk | 17:03 | |
| dtantsur|afk | o/ | 17:03 |
| *** jawad_axd has joined #openstack-ironic | 17:04 | |
| *** ociuhandu has quit IRC | 17:07 | |
| TheJulia | goodnight! | 17:08 |
| *** ociuhandu has joined #openstack-ironic | 17:09 | |
| *** lucasagomes has quit IRC | 17:09 | |
| *** tzumainn has quit IRC | 17:09 | |
| *** ociuhandu has quit IRC | 17:13 | |
| *** ociuhandu has joined #openstack-ironic | 17:14 | |
| *** goldyfruit_ has quit IRC | 17:18 | |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Rearrange project layout https://review.opendev.org/704048 | 17:19 |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Add CI hooks and reno https://review.opendev.org/704126 | 17:20 |
| openstackgerrit | Ilya Etingof proposed openstack/sushy-cli master: Add power management command https://review.opendev.org/702546 | 17:20 |
| *** tesseract has quit IRC | 17:27 | |
| *** alexmcleod has quit IRC | 17:33 | |
| rpittau | have a great weeken everyone! o/ | 17:35 |
| *** rpittau is now known as rpittau|afk | 17:35 | |
| *** k_mouza has quit IRC | 17:35 | |
| *** dougsz has quit IRC | 17:38 | |
| *** ociuhandu has quit IRC | 17:39 | |
| *** ociuhandu has joined #openstack-ironic | 17:40 | |
| *** TxGirlGeek has joined #openstack-ironic | 17:42 | |
| *** k_mouza has joined #openstack-ironic | 17:45 | |
| *** k_mouza has quit IRC | 17:45 | |
| *** ociuhandu has quit IRC | 17:46 | |
| rpioso | Good morning, ironic | 17:47 |
| openstackgerrit | Riccardo Pittau proposed openstack/bifrost master: Make CentOS 8 tinyipa job voting again https://review.opendev.org/703954 | 17:48 |
| *** dsneddon has quit IRC | 17:48 | |
| *** dsneddon has joined #openstack-ironic | 17:51 | |
| *** derekh has quit IRC | 18:01 | |
| rpioso | etingof, TheJulia: I confirmed my results from testing deployment via Redfish vmedia boot. I attempted to test under both boot modes, legacy BIOS and UEFI. For each boot mode, I stacked devstack. Once devstack was available for the boot mode, I tried to validate the test environment by first testing deployment via iPXE boot. | 18:04 |
| rpioso | etingof, TheJulia: Under legacy BIOS, the ramdisk was CentOS-based. The ramdisk failed to obtain a DHCP addreess. I did not attempt Redfish vmedia boot under that boot mode. | 18:05 |
| rpioso | etingof, TheJulia: The failure above occurred while deploying via iPXE. | 18:08 |
| *** TxGirlGeek has quit IRC | 18:23 | |
| *** mkrai has quit IRC | 18:30 | |
| *** TxGirlGeek has joined #openstack-ironic | 18:52 | |
| *** ociuhandu has joined #openstack-ironic | 18:55 | |
| *** ociuhandu has quit IRC | 18:59 | |
| *** jawad_axd has quit IRC | 19:01 | |
| *** jawad_axd has joined #openstack-ironic | 19:02 | |
| *** jawad_axd has quit IRC | 19:03 | |
| *** ociuhandu has joined #openstack-ironic | 19:11 | |
| *** ociuhandu has quit IRC | 19:16 | |
| *** jawad_axd has joined #openstack-ironic | 19:29 | |
| *** amoralej is now known as amoralej|off | 19:33 | |
| *** jawad_axd has quit IRC | 19:44 | |
| *** Lucas_Gray has quit IRC | 19:45 | |
| *** dsneddon has quit IRC | 19:56 | |
| openstackgerrit | Merged openstack/ironic master: Make ironic-api compatible with WSGI containers other than mod_wsgi https://review.opendev.org/704139 | 20:10 |
| *** goldyfruit_ has joined #openstack-ironic | 20:26 | |
| *** dsneddon has joined #openstack-ironic | 20:31 | |
| *** dsneddon has quit IRC | 20:36 | |
| TheJulia | rpioso: I feel like I'm joining the conversation slightly midstream, could you point me to what you mean by the failure above and what that failure was? | 20:55 |
| rpioso | TheJulia: It's the failure described in the immediately preceding message :-) | 20:57 |
| rpioso | etingof, TheJulia: Under UEFI, I started tesing with a CoreOS-based ramdisk. iPXE succeeded. Redfish vmedia boot failed with a message displayed on the system console something like "Failed to allocate initrd. Hit any key to continue". | 20:58 |
| rpioso | etingof, TheJulia: Whle still under UEFI, I moved on to the Tiny OS-based ramdisk. Both iPXE and Redfish vmedia boot fail. | 20:59 |
| TheJulia | rpioso: we stopped publishing new coreos ramdisks a while ago.... | 21:00 |
| rpioso | etingof, TheJulia: Tiny OS did boot and display a shell prompt. None of the network interfaces were assigned an IPv4 address, except loopback. | 21:01 |
| *** bfournie has quit IRC | 21:01 | |
| TheJulia | I'm not tooo surprised by the tinycore ramdisk doing something weird. Can you provide your devstack local.conf so we can look at trying to reproduce in one of our environments? | 21:02 |
| rpioso | etingof, TheJulia: The PCI bus detected both types of network hardware ports which are part of the Integrated NIC, I350 and X710. That's according to lspci. However, Tiny OS has a driver for the X710 (i40e if memory serves), but not the I350 (igb). The provisioning network is connected to an I350, so ... Just as TheJulia suspected a few days ago, it looks to be a missing driver issue. | 21:04 |
| rpioso | etingof, TheJulia: I used lsmod to list the drivers. | 21:05 |
| *** khansa has joined #openstack-ironic | 21:06 | |
| rpioso | etingof, TheJulia: I'll have to work with my lab team to change the server port connected to the provisioning network from an I350 to an X710. Hopefully, they'll be able to make that change, and I'll be able to retry on Monday. | 21:07 |
| rpioso | TheJulia: I would share it, but I don't presently have access to my lab equipment. Network connectivity to he lab has been shut down while the lab undergoes electrical system maintenance. | 21:09 |
| TheJulia | rpioso: ahh, I had a feeling that was the case with the drivers :( | 21:10 |
| TheJulia | rpioso: okay, well it sounds like a nice end to the day and the beginning to a weekend then :) | 21:10 |
| rpioso | TheJulia: And it's looking like you are correct! :-) | 21:10 |
| * rpioso would have preferred to have had a successful Redfish vmedia boot deployment | 21:11 | |
| *** dsneddon has joined #openstack-ironic | 21:11 | |
| rpioso | TheJulia: Is there doc about the various ramdisks we publish? | 21:12 |
| TheJulia | not off the top of my head, largely they are just for testing so things have never been terribly detailed about them documentation wise. | 21:15 |
| TheJulia | the vmedia boot one makes me suspect thta it is an edge case that is not covered, which is why I was curious about the config so maybe one of us could kind of take things apart once we've reproduced it to figure out what is going on | 21:16 |
| *** dsneddon has quit IRC | 21:17 | |
| *** k_mouza has joined #openstack-ironic | 21:17 | |
| *** k_mouza has quit IRC | 21:22 | |
| *** ociuhandu has joined #openstack-ironic | 21:29 | |
| *** ociuhandu has quit IRC | 21:34 | |
| *** dsneddon has joined #openstack-ironic | 21:42 | |
| *** dsneddon has quit IRC | 21:48 | |
| *** Lucas_Gray has joined #openstack-ironic | 21:50 | |
| *** khansa has quit IRC | 21:58 | |
| *** dsneddon has joined #openstack-ironic | 22:23 | |
| *** dhellmann has quit IRC | 22:29 | |
| *** dhellmann has joined #openstack-ironic | 22:32 | |
| *** dsneddon has quit IRC | 22:34 | |
| *** rcernin has quit IRC | 22:34 | |
| *** dsneddon has joined #openstack-ironic | 23:08 | |
| *** dsneddon has quit IRC | 23:13 | |
| *** bdodd has quit IRC | 23:17 | |
| *** dsneddon has joined #openstack-ironic | 23:47 | |
| *** dsneddon has quit IRC | 23:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!