Thursday, 2020-07-23

*** diurnalist has joined #openstack-ironic00:01
openstackgerritVerification of a change to openstack/ironic failed: Extend base build timeouts  https://review.opendev.org/74181800:01
*** gyee has quit IRC00:03
openstackgerritMerged openstack/ironic-python-agent master: Fix versions in release notes  https://review.opendev.org/74243100:09
*** yolanda has quit IRC00:47
*** Goneri has quit IRC00:51
*** yolanda has joined #openstack-ironic00:51
*** k_mouza has joined #openstack-ironic01:00
*** k_mouza has quit IRC01:05
*** ricolin has joined #openstack-ironic01:13
openstackgerritJacob Anders proposed openstack/bifrost master: Auto-set ansible_python_interpreter when in venv  https://review.opendev.org/74233501:28
*** jj123 has quit IRC01:29
*** janders has quit IRC01:50
*** k_mouza has joined #openstack-ironic02:07
*** k_mouza has quit IRC02:11
*** uzumaki has joined #openstack-ironic02:34
*** rloo has quit IRC02:42
*** mkrai has joined #openstack-ironic02:57
*** diurnalist has quit IRC03:01
*** k_mouza has joined #openstack-ironic03:08
*** k_mouza has quit IRC03:13
openstackgerritMerged openstack/ironic master: Remove old driver name from cross-gating job  https://review.opendev.org/74125403:14
*** rcernin has quit IRC03:28
*** diurnalist has joined #openstack-ironic03:38
*** rcernin has joined #openstack-ironic03:43
*** cdearborn has quit IRC03:45
*** rcernin has quit IRC03:47
*** rcernin has joined #openstack-ironic03:49
*** k_mouza has joined #openstack-ironic03:49
*** k_mouza has quit IRC03:53
*** paraplan has joined #openstack-ironic04:15
*** diurnalist has quit IRC04:17
openstackgerritMerged openstack/ironic master: Account for power interfaces that cannot power on  https://review.opendev.org/74165004:48
openstackgerritMerged openstack/ironic master: Add agent power interface  https://review.opendev.org/73559104:48
openstackgerritMerged openstack/ironic master: Document fast-track and the agent power interface  https://review.opendev.org/74166804:49
openstackgerritVerification of a change to openstack/ironic failed: Rename Response to PassthruResponse  https://review.opendev.org/74186404:49
openstackgerritVerification of a change to openstack/ironic failed: Convert root path / to use plain JSON  https://review.opendev.org/74014204:49
*** eandersson has quit IRC05:11
*** rh-jlabarre has quit IRC05:12
*** eandersson has joined #openstack-ironic05:12
*** abdysn has joined #openstack-ironic05:12
*** uzumaki has quit IRC05:42
*** ociuhandu has joined #openstack-ironic05:50
*** ociuhandu has quit IRC05:55
*** diurnalist has joined #openstack-ironic06:07
*** diurnalist has quit IRC06:13
*** tkaprol has joined #openstack-ironic06:25
*** mkrai has quit IRC06:31
*** mkrai has joined #openstack-ironic06:39
arne_wiebalckGood morning, ironic!07:03
*** tkaprol has quit IRC07:09
*** ociuhandu has joined #openstack-ironic07:11
*** mkrai has quit IRC07:13
rpittaugood morning ironic! o/07:14
openstackgerritVerification of a change to openstack/ironic failed: Extend base build timeouts  https://review.opendev.org/74181807:18
iurygregorygood morning arne_wiebalck rpittau and Ironic!07:22
rpittauhey iurygregory :)07:22
*** paraplan has quit IRC07:23
*** diurnalist has joined #openstack-ironic07:33
*** yaawang has quit IRC07:41
*** yaawang has joined #openstack-ironic07:41
*** yaawang has quit IRC07:50
*** yaawang has joined #openstack-ironic07:50
iurygregoryI can only that it's very funny the fact the in ironic-tempest-plugin the patch works fine, but testing on ironic it fails =(07:54
*** Lucas_Gray has joined #openstack-ironic08:01
*** mkrai has joined #openstack-ironic08:04
arne_wiebalckhey iurygregory and rpittau o/08:05
rpittauhey arne_wiebalck :)08:05
*** lucasagomes has joined #openstack-ironic08:09
*** uzumaki has joined #openstack-ironic08:23
*** diurnalist has quit IRC08:26
*** derekh has joined #openstack-ironic08:27
*** k_mouza has joined #openstack-ironic08:31
*** uzumaki has quit IRC08:34
openstackgerritZygimantas Matonis proposed openstack/ironic-inspector master: WIP: adding condition_join to rules.  https://review.opendev.org/73179408:48
*** rnoriega_ has quit IRC08:48
*** rnoriega_ has joined #openstack-ironic08:55
*** ociuhandu_ has joined #openstack-ironic08:56
*** rcernin has quit IRC08:56
*** ociuhandu has quit IRC08:59
*** yaawang has quit IRC09:05
*** k_mouza has quit IRC09:05
*** yaawang has joined #openstack-ironic09:05
rpittaummm is it normal that we have ironic-python-agent ver 6.1.0 both mentioned in ussuri and current release notes ?09:08
openstackgerritRiccardo Pittau proposed openstack/ironic master: migrate testing to ubuntu focal  https://review.opendev.org/73944809:08
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: [WIP] Use tinycore 11 to build tinyipa  https://review.opendev.org/71164709:08
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent master: Use ubuntu focal for ipa src  https://review.opendev.org/72579409:09
openstackgerritRiccardo Pittau proposed openstack/ironic master: DNM TEST CI  https://review.opendev.org/74138909:09
*** k_mouza has joined #openstack-ironic09:13
*** diurnalist has joined #openstack-ironic09:20
*** bonguardo has joined #openstack-ironic09:21
*** bonguardo has quit IRC09:29
*** k_mouza has quit IRC09:43
*** k_mouza has joined #openstack-ironic09:44
*** k_mouza has quit IRC09:46
openstackgerritMerged openstack/ironic master: Adds boot mode support to iLO management interface  https://review.opendev.org/73623209:50
*** tristan888 has joined #openstack-ironic10:06
*** k_mouza has joined #openstack-ironic10:07
*** tristan888 has left #openstack-ironic10:08
*** ociuhandu_ has quit IRC10:09
*** ociuhandu has joined #openstack-ironic10:09
*** diurnalist has quit IRC10:12
*** ricolin has quit IRC10:13
openstackgerritVerification of a change to openstack/ironic failed: Add an option to choose the hash ring algorithm  https://review.opendev.org/73977910:17
*** dtantsur|afk is now known as dtantsur10:29
dtantsurmorning/afternoon folks10:29
*** diurnalist has joined #openstack-ironic10:50
*** diurnalist has quit IRC10:55
*** mkrai has quit IRC11:01
*** ociuhandu_ has joined #openstack-ironic11:03
*** ociuhandu has quit IRC11:07
*** ociuhandu_ has quit IRC11:08
*** sshnaidm|afk is now known as sshnaidm|off11:11
*** ociuhandu has joined #openstack-ironic11:18
*** yaawang has quit IRC11:20
openstackgerritDmitry Tantsur proposed openstack/ironic-lib master: Return correct response on HTTP basic failure  https://review.opendev.org/74264311:21
dtantsurstevebaker: ^^^11:21
*** yaawang has joined #openstack-ironic11:21
*** ociuhandu has quit IRC11:24
*** ociuhandu has joined #openstack-ironic11:24
*** diurnalist has joined #openstack-ironic11:25
*** mkrai has joined #openstack-ironic11:28
*** ociuhandu has quit IRC11:29
openstackgerritDmitry Tantsur proposed openstack/ironic master: Deprecate http_basic_username and http_basic_password in [json_rpc]  https://review.opendev.org/74247411:36
*** ricolin has joined #openstack-ironic11:37
iurygregorygood afternoon dtantsur o/11:37
iurygregorydtantsur, the idea to use another flavor helped the multinode job.. but when I used the tempest-plugin patch as Depends-On for https://review.opendev.org/#/c/741886/ other jobs started showing `No valid host was found. There are not enough hosts available.` D:11:55
patchbotpatch 741886 - ironic - Add tempest default_boot_option - 2 patch sets11:55
dtantsuriurygregory: ehhmm.. what's in nova-scheduler logs?11:55
iurygregorynothing that gets my attention https://zuul.opendev.org/t/openstack/build/225330df09d3462783311c7cd06271e4/log/controller/logs/screen-n-sch.txt11:56
dtantsuriurygregory: this is suspicious https://zuul.opendev.org/t/openstack/build/225330df09d3462783311c7cd06271e4/log/controller/logs/screen-n-sch.txt#86511:58
iurygregoryouch11:58
iurygregoryram -51211:58
dtantsurignore rqam11:58
dtantsur* ram11:58
dtantsurthe problem is missing capabilities11:59
iurygregoryThere are no capabilities to retrieve.11:59
iurygregoryWUT11:59
dtantsurthen you have ComputeCapabilitiesFilter ruling out all nodes - and that's it11:59
dtantsurone thought:11:59
iurygregoryhttps://review.opendev.org/#/c/742381/1/devstack/lib/ironic12:00
patchbotpatch 742381 - ironic - Create altbaremetal flavor - 1 patch set12:00
dtantsurif you have one flavor that requests boot_option:netboot and the other that requests nothing, and two nodes (one with netboot, one with local), there is 50% chance of failure12:00
iurygregoryhummm12:00
dtantsurdo you have nodes with boot_option:local at all?12:00
iurygregorylocal is normally when the job is wholedisk12:01
iurygregorylet me check the log from the wholedisk job12:02
*** rh-jelabarre has joined #openstack-ironic12:08
*** ricolin has quit IRC12:13
iurygregorynova-api shows that flavor altbaremetal could not be found. .-.12:13
iurygregorywtf12:13
iurygregorybut the logs show it was created and tempest is trying to use the correct flavor...12:17
dtantsurtoday is the day when nothing works12:18
* dtantsur is pondering returning to the bed12:18
*** diurnalist has quit IRC12:19
rpittauheh12:19
iurygregoryyeah12:19
rpittauin case you didn't see it: OverflowError: cannot convert float infinity to integer12:19
rpittau^ bug in dstat in focal :D12:20
rpittaudtantsur: I was wondering if it's normal that we have ironic-python-agent ver 6.1.0 both mentioned in ussuri and current release note ?12:20
*** k_mouza has quit IRC12:23
*** Goneri has joined #openstack-ironic12:25
dtantsurrpittau: it's not12:34
rpittauI realized after I put up the patch yesterday12:35
*** ricolin has joined #openstack-ironic12:38
rpittaualso wondering if we should release ipa for ussuri (6.1.1 ?)12:39
*** k_mouza has joined #openstack-ironic12:42
dtantsurwhy not12:44
rpittauok, I'll put up the request :)12:45
dtantsurwe should check train and ussuri pretty often nowadays, they're receiving a lot of backports12:45
rpittauyeah12:45
dtantsurjust check if we have outstanding patches12:45
dtantsurI think we have at least one for IPA ussuri12:45
rpittausure12:45
rpittauyes, we have definitely one, issued a recheck12:47
openstackgerritVerification of a change to openstack/ironic failed: Extend base build timeouts  https://review.opendev.org/74181812:48
iurygregorygotta love, extend timeouts and they fail  ...12:49
dtantsuryeeah12:49
gudrutis0hey question - is this something I broke or is part of nothing working ? https://zuul.opendev.org/t/openstack/build/9906eae1bd4b4fc49b450b2e276057f412:55
iurygregorygudrutis0, you broke =)12:55
iurygregoryyou can run build-api-ref locally to check12:55
*** diurnalist has joined #openstack-ironic12:56
dtantsurgudrutis0: you probably triggered it by your patch, but the error message is concerning12:56
*** yaawang has quit IRC12:56
iurygregoryif you run tox -e api-ref locally you should be able to figure out =)12:56
iurygregoryhttps://github.com/openstack/ironic-inspector/blob/master/tox.ini#L2512:56
dtantsurbut yeah, `tox -eapi-ref`12:56
rpittaugudrutis0: don't forget to use -r as well12:58
*** jadonn has quit IRC12:58
iurygregorytruth12:59
*** yaawang has joined #openstack-ironic12:59
*** diurnalist has quit IRC13:01
iurygregorydtantsur, I'm wondering if it would be ok to have one flavor with boot_option: local and another with the boot_option: netboot13:01
iurygregoryand the one with local would have 0 for ephemeral13:02
iurygregoryor we can even keep the baremetal flavor and have one specific for wholedisk and another for partition... (we would probably need a config in the baremetal section to have the uuid's....13:12
gudrutis0rpittau, iurygregory: thanks. worked like a charm13:16
iurygregoryyw =)13:16
*** Goneri has quit IRC13:26
*** diurnalist has joined #openstack-ironic13:28
*** mkrai has quit IRC13:29
dtantsuriurygregory: works for me, as long as we can make it backward compatible (to avoid patching all branches)13:31
iurygregorydtantsur, ack13:32
*** bfournie has joined #openstack-ironic13:32
openstackgerritJames Denton proposed openstack/networking-generic-switch master: Support multiple links in link_local_information dict of portgroups  https://review.opendev.org/55705113:40
TheJuliajamesdenton: thanks ^^^13:41
jamesdentonsure thing13:42
TheJuliagood morning everyone13:47
TheJuliasince I'm starting to wake up13:47
TheJuliarpittau: re rlease notes, how so?13:47
rpittauTheJulia: I'm still looking into that, I asked in the release channel13:48
rpittaufrom what I can see the job is getting ver 6.1.0 for both ussuri and current13:50
TheJuliaand we gut 6.2.0 right?13:50
rpittauvictoria should start from 6.2.013:50
TheJuliarpittau: I guess I'm wondering where exactly your seeing this13:50
TheJuliayeah13:50
rpittauTheJulia: https://docs.openstack.org/releasenotes/ironic-python-agent/unreleased.html#13:51
TheJuliaThe world will be a happier place for reviews on https://review.opendev.org/#/c/742502/13:51
patchbotpatch 742502 - ironic - Force RAX hosts to run tinyipa - 2 patch sets13:51
TheJuliaoh yeah, that goes by branch for cycle13:51
TheJuliaunreleased is... misleading13:51
TheJuliaunfortunately13:51
TheJulia"released for cycle"13:51
openstackgerritMerged openstack/ironic-inspector stable/ussuri: Do not try to set local_gb to -1 when the matched root device size is 0  https://review.opendev.org/74193613:52
rpittauyeah, in the release channel I got told that it shouldn't appear like that though13:53
TheJuliahmm13:53
TheJuliaI wonder if we didn't merge a semver flag in?13:54
iurygregorygood morning TheJulia =)13:54
dtantsurTheJulia: I think reno only takes releases into account, so pbr versioning should not play a role (except for unreleased changes)14:02
*** tzumainn has joined #openstack-ironic14:02
dtantsurbtw https://review.opendev.org/#/c/742643/ is the problem with JSON RPC I mentioned yesterday14:03
patchbotpatch 742643 - ironic-lib - Return correct response on HTTP basic failure - 1 patch set14:03
dtantsur(not the only problem as it seems, but still)14:03
dtantsuronce we merge that and release ironic-lib, we're going to be a bit closer to working HTTP basic auth in bifrost14:05
*** abdysn has quit IRC14:07
openstackgerritVerification of a change to openstack/ironic failed: Stop running test_schedule_to_all_nodes in the multinode job  https://review.opendev.org/74221414:14
openstackgerritRiccardo Pittau proposed openstack/ironic master: Update how to release section  https://review.opendev.org/74268214:15
openstackgerritRiccardo Pittau proposed openstack/ironic master: Update how to release section  https://review.opendev.org/74268214:16
openstackgerritRiccardo Pittau proposed openstack/ironic master: Update how to release section  https://review.opendev.org/74268214:17
openstackgerritRiccardo Pittau proposed openstack/ironic master: Update how to release section  https://review.opendev.org/74268214:18
rpittaucan I do more typos?14:18
dtantsurrpittau: we believe in you!14:22
rpittau:)14:22
*** k_mouza has quit IRC14:32
*** k_mouza has joined #openstack-ironic14:32
arne_wiebalckrpioso: rpittau: shall we try and see if we can coordinate the work for the Redfish Ironic profile somehow?15:00
rpittauarne_wiebalck: absolutely, do we want to set a time to talk about it ?15:01
arne_wiebalckrpittau: I think that would be good,15:03
arne_wiebalckrpittau: let's wait for rpioso to chime in, as I think he's done quite some work already15:04
*** cdearborn has joined #openstack-ironic15:04
*** k_mouza has quit IRC15:04
rpittauarne_wiebalck: agreed :)15:05
*** diurnalist has quit IRC15:06
rpiosoarne_wiebalck, rpittau: We continue working on the Interop Profile stuffs. May be prepared to meet next week to discuss and demo what we have; otherwise, early the following week.15:07
rpittaurpioso: sounds good15:08
arne_wiebalckrpioso: rpittau: first half of next week would work for me15:08
*** bfournie has quit IRC15:08
arne_wiebalckrpioso: rpittau: how about Tue at 2pm UTC?15:09
rpiosoarne_wiebalck, rpittau: Would like to include mraineri, if he's available.15:10
rpittauarne_wiebalck: the 28th? I'm ok with that, as far as it's not longer than 1 hour15:11
arne_wiebalckrpittau: yes, Tue 28th 2pm UTC15:11
arne_wiebalckrpioso: is that slot ok with you?15:11
rpiosoarne_wiebalck, rpittau: Also diga, who's out this week.15:11
*** diurnalist has joined #openstack-ironic15:12
rpiosoarne_wiebalck, rpittau: Works for me.15:12
openstackgerritDmitry Tantsur proposed openstack/ironic-python-agent-builder master: Add dynamic-login to our published images by default  https://review.opendev.org/74269215:14
dtantsurcdearborn: ^^ will update the published images when merged15:15
arne_wiebalckrpioso: rpittau: ok, I will set up a meeting and send around the details!15:15
rpittauarne_wiebalck: cool, thanks!15:16
rpiosodtantsur: ^^^ <315:16
dtantsur:)15:17
rpiosoarne_wiebalck: Thank you! Please invite diga and mraineri, too.15:17
arne_wiebalckrpioso: Sure. I will also add the link to the weekly meeting for anyone else interested to join.15:24
openstackgerritShivanand Tendulker proposed openstack/ironic master: Adds raid validation for in-band AgentRAID deploy step  https://review.opendev.org/74221715:29
rpiosoarne_wiebalck: +1 and thank you!15:30
arne_wiebalckrpioso: np :)15:31
openstackgerritMerged openstack/ironic master: Rename Response to PassthruResponse  https://review.opendev.org/74186415:45
openstackgerritMerged openstack/ironic master: Convert root path / to use plain JSON  https://review.opendev.org/74014215:45
cdearbornhey guys, i'm trying to troubleshoot an issue where IPA is failing to talk to ironic when doing a deployment in a devstack envt running on ubuntu bionic15:47
cdearbornfollowing the instructions here: https://docs.openstack.org/ironic-python-agent/latest/admin/troubleshooting#id11, i generated a password using openssl, stopped the conductor, added rootpwd="blah" to pxe_append_params in ironic.conf, then started the conductor15:49
cdearborni had to escape some '$' in the password to get ironic to start15:49
cdearbornbut then was unable to login15:49
cdearborni then pip installed ironic-python-agent-builder and tried to build an image with -e dynamic-login centos-minimal on my devstack node, but that failed because rpm was not found15:50
cdearbornany advice?15:51
openstackgerritTzu-Mainn Chen proposed openstack/ironic master: Allow node lessee to see node's ports  https://review.opendev.org/73036615:53
*** lucasagomes has quit IRC15:56
*** k_mouza has joined #openstack-ironic16:01
dtantsurcdearborn: which exactly rpm was not found? could you paste the bit from the output?16:02
dtantsurI'd try another base OS for the ramdisk (debian?) if centos is giving you problems16:02
*** k_mouza has quit IRC16:13
openstackgerritVerification of a change to openstack/ironic failed: iPXE ISO Ramdisk booting  https://review.opendev.org/72946416:13
* dtantsur passes rechecker to TheJulia16:15
TheJuliawheeeeee16:17
*** gyee has joined #openstack-ironic16:17
TheJuliahttps://review.opendev.org/#/c/742502/ <-- is your friend16:17
patchbotpatch 742502 - ironic - Force RAX hosts to run tinyipa - 2 patch sets16:17
TheJuliaoooh postfailure is different16:18
dtantsurTheJulia: why are you only doing it when "$IRONIC_BUILD_DEPLOY_RAMDISK" != "False"?16:18
openstackgerritMerged openstack/python-ironic-inspector-client master: Set min version of tox to 3.2.1  https://review.opendev.org/74119116:19
dtantsurit won't help the ironic CI, only IPA and ironic-lib16:19
TheJuliaerr16:19
TheJuliathat should != True16:19
TheJuliaor ==16:19
TheJuliaI thought I ==16:20
TheJuliaugh16:20
*** Goneri has joined #openstack-ironic16:20
dtantsuroh, the new tripleo-buildimage-ironic-python-agent-centos-8 job does not test IPA-builder16:21
dtantsursigh16:21
dtantsurSIGH16:21
rpittauhow does that work? pure DIB ?16:21
dtantsuryeah, the deprecated element16:22
rpittauah16:22
dtantsurhttps://zuul.opendev.org/t/openstack/build/fc4f69e2759e4a78a27d648c91d183df/log/build.log#116:22
dtantsurTheJulia: I hope to use this job ^^ to check your patch that removed 'make'. but alas.16:23
TheJuliaugh16:23
TheJuliadtantsur: so thinking about it, your raising a good point, do we always just override rax hosts?16:23
dtantsurfor ironic it should be reasonably safe: ironic patches are not ramdisk-dependent16:24
dtantsurI'd be worried about IPA and ironic-lib; a no-go for IPA-builder16:24
TheJuliaSo I was thinking for cases when we don't build the ramdisk explicitly to go ahead and override16:25
TheJuliasince those cases it shouldn't matter... most of the time.16:25
dtantsuryup16:25
TheJuliaSo I guess just fixing that conditional that I have horribly wrong would make everything good16:26
TheJuliaI'm just really surprised or maybe I did get it right and I'm freaking out over nothing16:26
* TheJulia needs to go look16:26
dtantsuryeah, please double-check me :)16:26
TheJuliawill do in a moment, finishing that doc I promised I would write during a meeting this morning.16:27
openstackgerritJulia Kreger proposed openstack/ironic master: Add cirros-specific FAQ item for troubleshooting  https://review.opendev.org/74270316:30
*** ricolin has quit IRC16:30
openstackgerritJulia Kreger proposed openstack/ironic master: Force RAX hosts to run tinyipa  https://review.opendev.org/74250216:33
TheJuliayeah, I had the conditional wrong16:33
TheJuliarpittau: ^^^16:34
rpittaummm I missed that :/16:34
*** diurnalist has quit IRC16:35
TheJuliait happens16:35
TheJuliaI remember thinking it needed to be == when I was typing it16:36
TheJuliawhy it ended up !=... who knows16:36
dtantsurI type wrong things all the time16:36
dtantsurs/not/now/ and so on16:36
rpittauit was the "not" building a ramdisk that tricked me, I guess16:36
TheJuliayeah, I bet that is where my  brain got it16:37
*** dtantsur is now known as dtantsur|afk16:37
dtantsur|afksee you on the long-awaited Friday16:37
dtantsur|afk(right, it's Friday tomorrow? right?)16:37
TheJuliadtantsur|afk: I sure hope so!16:38
TheJuliagoodnight dtantsur|afk16:38
*** ociuhandu has joined #openstack-ironic16:39
*** ociuhandu has quit IRC16:43
*** weshay|ruck has joined #openstack-ironic16:47
*** paraplan has joined #openstack-ironic16:51
openstackgerritMerged openstack/ironic master: Extend PXE boot retry timeout for RAX hosts  https://review.opendev.org/74250116:54
*** Lucas_Gray has quit IRC16:59
*** derekh has quit IRC17:00
*** paraplan has quit IRC17:01
openstackgerritTzu-Mainn Chen proposed openstack/ironic master: Allow node lessee to see node's ports  https://review.opendev.org/73036617:02
*** diurnalist has joined #openstack-ironic17:03
openstackgerritRiccardo Pittau proposed openstack/sushy master: Update version of hacking  https://review.opendev.org/74271217:06
*** markmcclain has quit IRC17:14
*** markmcclain has joined #openstack-ironic17:16
*** tkaprol has joined #openstack-ironic17:27
openstackgerritMerged openstack/ironic master: Add an option to choose the hash ring algorithm  https://review.opendev.org/73977917:31
openstackgerritMerged openstack/ironic master: Update how to release section  https://review.opendev.org/74268217:31
openstackgerritVerification of a change to openstack/ironic failed: Add ``ipxe_template`` override option  https://review.opendev.org/73984117:50
*** ociuhandu has joined #openstack-ironic18:27
*** ociuhandu has quit IRC18:32
openstackgerritMerged openstack/ironic stable/ussuri: Stop running test_schedule_to_all_nodes in the multinode job  https://review.opendev.org/74221418:36
*** diurnalist has quit IRC18:48
*** tkaprol has quit IRC18:51
*** diurnalist has joined #openstack-ironic18:57
*** k_mouza has joined #openstack-ironic19:09
*** k_mouza has quit IRC19:22
*** zaneb has quit IRC20:34
openstackgerritDmitry Tantsur proposed openstack/ironic-python-agent-builder master: Add dynamic-login to our published images by default  https://review.opendev.org/74269220:35
*** zaneb has joined #openstack-ironic20:35
TheJuliadtantsur|afk: <320:35
*** Lucas_Gray has joined #openstack-ironic20:41
*** dking has quit IRC20:43
*** tzumainn has quit IRC20:52
JayFdtantsur|afk: I'm sorta -.5 to that change, I'll absolutely patch it out downstream. Even if it doesn't grant access by default, the biggest security weakness in the IPA flow is the PXE boot -- with this change, if someone is able to modify kernel params passed in, they can get access to a machine that's cleaning. Even that possibility isn't awesome to me.20:52
JayFJust my $.02, if it's worth anything :D20:52
JayFI just realized adding that would also mean we'll never be able to use an unpatched IPA-builder downstream, as I don't think it's possible to remove a dependency in a later element.20:58
JayFI think I'm going to put this review on that PR.20:58
TheJuliaJayF: ++20:58
TheJuliaJayF: I would love for us to be abel to get a user into the ramdisk after IPA starts, if needed, but I think the other conundrum that exists is when IPA fails on start-up.20:59
JayFTheJulia: hmm. Does that just add that element for tripleo? Not the standard build...20:59
JayFIt's an explicit requirement for my use case that IPA have zero external user access, including user accounts with passwords.20:59
TheJuliaJayF: tripleo... today... just realized they were not using ironic-python-agent-buiulder20:59
TheJuliabuilder20:59
TheJuliaso... it is a standard build20:59
TheJuliaor could be21:00
TheJuliaI'm only thinking as an option that could be turned on somehow21:00
JayFdiskimage-builder itself allows for easy inclusion of extra elements; I just want to make sure we don't make it so the IPA elements themselves start adding extranneous behavior21:01
JayFbecause then you're forcing people into more specific use cases for what should be, IMO, a general use item21:01
TheJuliaI'd have to go look at the change21:01
TheJuliathe general theme of having such has come up ~3 times in the last week21:02
JayFI'll put a good comment on that merge request. I don't think *this specific change* will impact me on further reading, but I do want to make sure the voice of "keep IPA-builder IPA builds minimal by default" is heard21:03
TheJulia++21:04
JayFBTW; ipa-builder is really great, and having it exist is nice as a template for ways to use DIB.21:07
JayFRight now we're patching the element directly downstream (honestly just a matter of not having time to setup CI for a dedicated repo for downstream elements), but the way it's structured we could use upstream IPA-builder untouched + add in our elements for the configuration pieces we have to change.21:08
JayFSo it's pretty great. MUCH nicer than when we were originally building the agent, and tossed DIB in favor of CentOS because it was so painful :P21:08
JayFs/CentOS/CoreOS/g21:09
openstackgerritMerged openstack/ironic master: iPXE ISO Ramdisk booting  https://review.opendev.org/72946421:10
*** janders has joined #openstack-ironic21:12
jandersg'day Ironic o/21:12
openstackgerritJulia Kreger proposed openstack/ironic master: Switch Ironic to openstacksdk for Neutron  https://review.opendev.org/73487321:15
TheJulia++good morning janders21:18
*** JayF has quit IRC21:44
*** JayF has joined #openstack-ironic21:45
*** Goneri has quit IRC22:19
*** stevebaker has quit IRC22:21
*** stevebaker has joined #openstack-ironic22:22
*** k_mouza has joined #openstack-ironic22:30
*** k_mouza has quit IRC22:34
openstackgerritJacob Anders proposed openstack/bifrost master: Auto-set ansible_python_interpreter when in venv  https://review.opendev.org/74233523:39
openstackgerritVerification of a change to openstack/ironic-inspector failed: Respond so Apache HTTPd doesn't think the request failed  https://review.opendev.org/74034423:43

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!