* dtantsur yawns | 06:04 | |
iurygregory | good morning Ironic | 06:07 |
---|---|---|
* iurygregory grabs more coffee to wake up | 06:08 | |
stendulker | Good morning iurygregory o/ | 06:12 |
janders | hey dtantsur iurygregory stendulker o/ | 06:20 |
dtantsur | \o | 06:20 |
stendulker | Good morning janders dtantsur | 06:20 |
iurygregory | morning stendulker janders dtantsur o/ | 06:21 |
arne_wiebalck | Good morning iurygregory dtantsur stendulker janders and Ironic! | 06:26 |
* arne_wiebalck feels being late this morning | 06:26 | |
iurygregory | morning arne_wiebalck o/ | 06:26 |
iurygregory | arne_wiebalck, I think dtantsur is early :D | 06:26 |
stendulker | morning arne_wiebalck | 06:26 |
arne_wiebalck | iurygregory: yeah! :-D | 06:26 |
dtantsur | heh, true :) my wife has early studies in a lab today | 06:27 |
iurygregory | lab ++ :D | 06:32 |
dtantsur | yeah, and they're doing some fun stuff today (IIUC, growing bacteria and extracting something from them) | 06:43 |
cenne | :) | 06:44 |
cenne | Good mornings everyone. | 06:44 |
iurygregory | dtantsur, nice! | 06:44 |
iurygregory | morning cenne | 06:44 |
dtantsur | cenne: morning! | 06:44 |
cenne | o/ | 06:45 |
* cenne stretches a bit too. | 06:46 | |
cenne | yay, bacteria are cute. They sure must be having fun. | 06:49 |
* cenne imagines cloudy vials | 06:50 | |
dtantsur | right :) | 06:50 |
dtantsur | TheJulia: hi! is the following a correct assessment: to fully use node ownership one needs Keystone? | 08:06 |
opendevreview | Merged openstack/ironic stable/wallaby: Fix ramdisk boot option handling https://review.opendev.org/c/openstack/ironic/+/798268 | 08:49 |
opendevreview | Merged openstack/ironic master: Allow ramdisk_image_download_source in instance_info for ramdisk deploy https://review.opendev.org/c/openstack/ironic/+/797508 | 09:02 |
opendevreview | Merged openstack/ironic master: Clean up vendor prefixes for iRMC boot https://review.opendev.org/c/openstack/ironic/+/796879 | 09:02 |
opendevreview | Verification of a change to openstack/ironic failed: Cache AgentClient on Task, not globally https://review.opendev.org/c/openstack/ironic/+/797674 | 09:12 |
opendevreview | Merged openstack/ironic master: Update the clear job id's constant https://review.opendev.org/c/openstack/ironic/+/796432 | 09:37 |
Ondrej_ | hello, good afternoon. I'm trying to setup LACP bond with DHCP less but seems like config is not valid for this one. Json schema is not allowing me to do so: https://github.com/openstack/ironic/blob/stable/wallaby/ironic/api/controllers/v1/network-data-schema.json#L178 | 10:48 |
Ondrej_ | shouldn't it be 802.3ad ? | 10:48 |
dtantsur | Probably? I don't remember what the authority of this file is, either nova or cloud-init | 10:49 |
dtantsur | Ondrej_: right: https://review.opendev.org/c/openstack/nova/+/788790 | 10:51 |
dtantsur | we probably copied this file before this fix. could you propose a fix for ironic? | 10:52 |
Ondrej_ | I will but I never did one so far. Can you please point me to doc how can i do that? | 10:55 |
dtantsur | Ondrej_: https://docs.opendev.org/opendev/infra-manual/latest/developers.html is the official documentation | 10:57 |
dtantsur | if you have any problems, let me or anyone here know | 10:57 |
dtantsur | (if you realise that you don't have time for it, let us know as well) | 10:57 |
dtantsur | additionally, this is how you create a release note: https://docs.openstack.org/ironic/latest/contributor/faq.html#create-a-new-release-note | 10:58 |
Ondrej_ | thank you, I'll follow that and hopefully make it happen soon :D | 10:59 |
janders | vmud213 CC dtantsur w/r/t https://storyboard.openstack.org/#!/story/2008784 (adding custom CA certs to BMC so that the BMC can verify https vmedia image sources) | 11:23 |
janders | I've done some testing on this, by default none of the BMCs had any issue connecting to untrusted https:// source | 11:24 |
vmud213 | janders: Thanks for confirming. | 11:24 |
vmud213 | But this is for a different use case | 11:24 |
janders | ( I tested across Dell R640, HP e910 and a couple SuperMicro machines) | 11:25 |
iurygregory | I'm wondering if they try to validate something :D | 11:25 |
vmud213 | the vmedia may not honour the certificates but the UEFI-HTTPS honours | 11:25 |
janders | having said that it may be possible to configure them to be more strict, but this was outside of the scope of my test | 11:25 |
janders | vmud213 I understand | 11:25 |
janders | with the R640, it does have a couple of fields in the GUI which allow configuring custom CA cert and enabling strict SSL checking | 11:27 |
janders | I haven't explored the RedFish side of it | 11:27 |
vmud213 | janders: ack. that's pretty much confirms what i heard of virtual media devices | 11:28 |
opendevreview | Merged openstack/ironic master: Cache AgentClient on Task, not globally https://review.opendev.org/c/openstack/ironic/+/797674 | 11:32 |
janders | vmud213 no worries, I will let you know if I find more information of interest | 11:33 |
janders | see you tomorrow Ironic o/ | 11:41 |
iurygregory | bye janders o/ | 12:06 |
dtantsur | JFYI I'm proposing https://review.opendev.org/798655, hopefully it will make more newcomers aware of release notes | 12:55 |
iurygregory | dtantsur, ++ | 13:11 |
opendevreview | Merged openstack/ironic master: Upgrade oslo.db version https://review.opendev.org/c/openstack/ironic/+/796811 | 13:17 |
opendevreview | cenne proposed openstack/ironic master: [WIP] Add `boot_mode` and `secure_boot` to node object and expose in api https://review.opendev.org/c/openstack/ironic/+/797055 | 13:19 |
TheJulia | dtantsur: your assumption about owners is basically correct. The same effect could be achieved with middleware and enabled policy checking, but basically keystone is the only mode where all of the policies and view filtering will work as intended. Granted they could use the field just as informational storage if they wanted to. | 13:22 |
dtantsur | TheJulia: okay, cool. Background: there are talks about multi-tenancy in the metal3 world | 13:22 |
dtantsur | (also good morning) | 13:22 |
dtantsur | I wonder if for standalone we could enable the mode of operation where project == user (from HTTP basic) | 13:22 |
dtantsur | (we're unlikely to require it in metal3, but it could make the whole thing much nicer) | 13:23 |
TheJulia | dtantsur: sure, have a middleware layer that populates it into the context's project_id | 13:23 |
dtantsur | more background: https://docs.google.com/document/d/1XY7LD2d55RMgCY5ip28dxc9XHrvtyZpsRo1wj0WrfEM/edit | 13:23 |
TheJulia | And then turn on policies :) | 13:24 |
dtantsur | and we'll need some notion of admins too | 13:24 |
cenne | thanks dtantsur. that reno link should probably come in handy for me. :) | 13:24 |
dtantsur | cenne: it should indeed, you're welcome | 13:24 |
dtantsur | the discussion on #opendev will probably result in rejection of the infra-manual patch though | 13:25 |
dtantsur | but we need to keep improving our contributor docs | 13:25 |
opendevreview | Dhuldev Valekar proposed openstack/ironic stable/wallaby: Update the clear job id's constant https://review.opendev.org/c/openstack/ironic/+/798665 | 13:27 |
TheJulia | dtantsur: yeah, system_scope: all inside the context object | 13:28 |
dtantsur | right. I guess for metal3 case we could have system admins and project admins | 13:29 |
opendevreview | Dhuldev Valekar proposed openstack/ironic stable/victoria: Update the clear job id's constant https://review.opendev.org/c/openstack/ironic/+/798666 | 13:30 |
TheJulia | yeah, they can't have the rights at the same time, fwiw. anything implying project is scoped as project access | 13:30 |
TheJulia | separation of duties and most restrictive access models | 13:31 |
dtantsur | yep. How I see it is that several BMO instances will access ironic as project admins, so that their nodes are separate. | 13:31 |
dtantsur | while local access for debugging will be with system admin rights | 13:31 |
opendevreview | Dhuldev Valekar proposed openstack/ironic stable/ussuri: Update the clear job id's constant https://review.opendev.org/c/openstack/ironic/+/798667 | 13:32 |
opendevreview | Dmitry Tantsur proposed openstack/ironic master: Ramdisk: do not require image_source https://review.opendev.org/c/openstack/ironic/+/798681 | 13:32 |
opendevreview | Dhuldev Valekar proposed openstack/ironic stable/train: Update the clear job id's constant https://review.opendev.org/c/openstack/ironic/+/798668 | 13:33 |
* TheJulia is now very glad I did all the rbac work | 13:34 | |
TheJulia | review jam in like 14 minutes?! | 13:46 |
iurygregory | I can join =) | 13:48 |
dtantsur | do we have an agenda? | 13:49 |
TheJulia | I didn't put patches on the list, but some of the patches are still open and we have ironic-week-prio | 13:49 |
* TheJulia makes agenda real quick | 13:50 | |
* iurygregory is wondering why some patches on the list doesn't have the hashtag =( | 13:51 | |
opendevreview | Dmitry Tantsur proposed openstack/ironic master: Ramdisk: do not require image_source https://review.opendev.org/c/openstack/ironic/+/798681 | 13:53 |
* dtantsur evaluates his energy level | 13:53 | |
iurygregory | since you woke up early I would say is < 50% | 13:55 |
TheJulia | iurygregory: isnt required really | 14:00 |
iurygregory | TheJulia, can you hear ? | 14:01 |
dtantsur | way below 50%, hence my question | 14:01 |
TheJulia | iurygregory: I can, can you hear you | 14:01 |
TheJulia | dtantsur: sleep() ? :) | 14:01 |
dtantsur | a few hours more... | 14:02 |
* dtantsur feels that he still hasn't recovered after the exam and the preceding heat | 14:02 | |
TheJulia | :( | 14:07 |
TheJulia | iurygregory: https://review.opendev.org/c/openstack/ironic/+/778957 the devstack change I was talking about | 14:07 |
TheJulia | still wip | 14:07 |
arne_wiebalck | TheJulia: https://bugs.launchpad.net/nova/+bug/1933955 | 14:20 |
cenne | sorry re metting. browser / network trouble | 14:28 |
cenne | *meeting | 14:28 |
opendevreview | Dmitry Tantsur proposed openstack/ironic master: Ramdisk: do not require image_source https://review.opendev.org/c/openstack/ironic/+/798681 | 14:31 |
viks_ | Hi, is there any way we can provision MAC os on mac mini using ironic? | 14:39 |
TheJulia | viks_: I mean, if you have a disk image of MacOS... and you have a ramdisk that can boot on the mac mini, and the mac mini can be set to network boot by default, I guess maybe | 14:41 |
TheJulia | viks_: keep in mind, it is a consumer grade device and that is a use case far outside it's design parameters | 14:41 |
viks_ | TheJulia: ok... thanks | 14:42 |
TheJulia | Generally we recommend using hardware with Baseboard Management Controllers so we can facilitate power control and boot device control. We do have enough logic that we *should* be able to find the efi bootloader and register it | 14:42 |
TheJulia | that *is* on x86_64 hardware. The newer arm gear, no idea | 14:42 |
TheJulia | also, they have basically said only macos will run on their hardware | 14:42 |
viks_ | TheJulia: Ok thanks... | 14:47 |
TheJulia | cenne: no worries :) | 14:49 |
cenne | hi, I found a minor bug in the webapi-version-history. Should I fix it in my patch, or make a new one? | 15:19 |
TheJulia | cenne: define bug for us real quick :) | 15:19 |
TheJulia | prior version I take it? | 15:19 |
cenne | yes. the listing | 15:22 |
cenne | missed a newline so, it comes up clobbered in the rendered version | 15:22 |
* cenne did the same. that's how i found it is not as intended | 15:22 | |
TheJulia | I'd just fix it in your change then, tbh | 15:23 |
cenne | kay! done. :) | 15:24 |
opendevreview | cenne proposed openstack/ironic master: [WIP] Add `boot_mode` and `secure_boot` to node object and expose in api https://review.opendev.org/c/openstack/ironic/+/797055 | 15:36 |
TheJulia | bfournie: you around? | 16:11 |
bfournie | TheJulia: yes, just in a meeting | 16:11 |
TheJulia | on rhcos, you saw char 0xfeff as the first character right? | 16:12 |
bfournie | TheJulia: yes | 16:12 |
TheJulia | freaky | 16:12 |
bfournie | TheJulia: I read where that was expected but let me find the reference | 16:12 |
TheJulia | I've got the same code failing on downstream partition images which start the same exct way | 16:12 |
bfournie | oh | 16:12 |
bfournie | TheJulia: its failing because of that prefix? | 16:14 |
TheJulia | I *think*... somehow it is str(var) | 16:14 |
TheJulia | still doesn't explain why one is happier and one is less happy | 16:16 |
TheJulia | and only on partition images | 16:16 |
TheJulia | ahh, its the py2 compatbility | 16:19 |
dtantsur | yeah, python 2.7 has a lot of quirks that 3.6+ does not have | 16:22 |
TheJulia | yeah | 16:22 |
TheJulia | you can have unicode strings in py3, where as in 2.7 it tries to force strings | 16:22 |
TheJulia | odd we only hit this in one case | 16:23 |
opendevreview | cenne proposed openstack/ironic master: [WIP] Add `boot_mode` and `secure_boot` to node object and expose in api https://review.opendev.org/c/openstack/ironic/+/797055 | 17:50 |
opendevreview | Julia Kreger proposed openstack/ironic-python-agent stable/train: Train only - Fix py3 support for bootloader default config load https://review.opendev.org/c/openstack/ironic-python-agent/+/798732 | 18:15 |
bfournie | TheJulia: question on ^, so it works with python 2 if you use encoding='utf-16'? | 18:36 |
TheJulia | bfournie: nope, it throws up and fails. | 18:45 |
bfournie | TheJulia: ah I see, that's why you need to the warning | 18:46 |
TheJulia | yeah | 18:46 |
bfournie | s/to the/the/ | 18:46 |
TheJulia | there *is* apparently a utf-16-le and utf-16-be, but I'm kind of at the point where I just need to get something in on stable/train to fix downstream | 18:46 |
bfournie | sure | 18:49 |
TheJulia | *and* why spend a bunch of time on py at this point when we know py3 works just ifne. | 18:49 |
* TheJulia wonders why there are numerous sirens | 18:49 | |
opendevreview | Julia Kreger proposed openstack/ironic-python-agent stable/train: Train only - Fix py3 support for bootloader default config load https://review.opendev.org/c/openstack/ironic-python-agent/+/798732 | 18:53 |
TheJulia | bfournie: ^^ | 18:53 |
TheJulia | so we have a big fire just down the road. Now 4 fire engines | 18:54 |
bfournie | TheJulia: all set... brush fire? | 18:54 |
TheJulia | bfournie: looks like car fire that became a brush fire | 18:55 |
bfournie | oh boy | 18:55 |
TheJulia | on a plus side, I don't really see much smoke in that direction | 18:57 |
bfournie | that's good | 18:57 |
TheJulia | and the wind is not trong, just slightly gusty | 18:57 |
opendevreview | cenne proposed openstack/ironic master: Add `boot_mode` and `secure_boot` to node object and expose in api https://review.opendev.org/c/openstack/ironic/+/797055 | 19:07 |
* cenne is sooo done. | 19:09 | |
cenne | mysterious bug hunting to continue tomorrow | 19:10 |
cenne | *fingers crossed* for TheJulia | 19:11 |
cenne | hoping the fire doesn't get bad. | 19:12 |
cenne | I shall take leave now for today. | 19:15 |
cenne | Take care. | 19:15 |
TheJulia | goodnight cenne | 19:16 |
TheJulia | :) | 19:16 |
cenne | gn. :waves: | 19:18 |
opendevreview | Julia Kreger proposed openstack/ironic-inspector master: Add rbac scope enforcement handling to devstack plugin https://review.opendev.org/c/openstack/ironic-inspector/+/798359 | 19:35 |
opendevreview | Julia Kreger proposed openstack/ironic master: WIP Scoped RBAC Devstack Plugin support https://review.opendev.org/c/openstack/ironic/+/778957 | 19:46 |
opendevreview | Julia Kreger proposed openstack/ironic-python-agent master: Catch ismount not being handled https://review.opendev.org/c/openstack/ironic-python-agent/+/798394 | 21:15 |
opendevreview | Julia Kreger proposed openstack/ironic-inspector master: Add rbac scope enforcement handling to devstack plugin https://review.opendev.org/c/openstack/ironic-inspector/+/798359 | 21:44 |
TheJulia | okay, that *should* help | 21:44 |
janders | good morning Ironic o/ | 22:57 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!