Friday, 2022-05-13

TheJuliastevebaker[m]: I'll try to look tomorrow00:00
TheJuliaI've found no time for any code today :(00:00
TheJuliatoo many emails00:00
TheJuliaWe should now refilm the movie sneakers, but instead of it being  "toomanysecrets", the password can be "toomanyemails"00:01
stevebaker[m]Much  appreciated,  no real hurry I'm just fishing for potential -2s before I put more effort into it00:03
*** mat_fechner is now known as matfechner03:30
kamlesh6808cGood Morning Ironic !04:21
arne_wiebalckGood morning, Ironic!06:50
rpittaugood morning ironic! o/07:27
opendevreviewRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Build tinyipa with python 3.9  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/84159808:25
rpittaushould we consider an alternative to tinycore? Doesn't look like native support for Python >= 3.8 will come before 14.x09:05
opendevreviewMerged openstack/ironic-inspector bugfix/10.12: Update .gitreview for bugfix/10.12  https://review.opendev.org/c/openstack/ironic-inspector/+/84156709:20
dtantsurTheJulia: JFYI the CLI does not need env vars to grok basic auth, a normal clouds.yaml (as generated by bifrost) is enough09:40
dtantsurstevebaker[m]: the only problem used to be the old libvirt in RHEL 7 (?)09:41
dtantsurif we can keep RHEL 8 working, I'm all for the automatic firmware09:42
stevebaker[m]Yep 7 is too old, 8 onwards should be fine09:43
dtantsurwow, what time is it for you? :)09:55
rpittaudtantsur: this works now, forcing python3.9 -> https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/84159810:19
dtantsurrpittau: just python3 does not work?10:19
rpittauI mean, if we exclude centos taking a vacation10:19
rpittaudtantsur: yep, it takes py3.6 by default10:19
dtantsurle isgh10:20
dtantsurokey, what else is broken now? :)10:20
rpittautrying to understand, seems like centos took the "casual friday" too seriosudly10:20
rpittaulol 2022-05-13 08:35:33.051068 | ubuntu-focal | 2022-05-13 08:35:33.050 | ERROR: Package 'ironic-python-agent' requires a different Python: 3.6.8 not in '>=3.8'10:21
rpittauof course10:21
dtantsurrpittau: ahh, you need to squash in my fix10:21
rpittauyeah10:21
rpittauI'm going to add the tinyipa change to yours10:23
opendevreviewRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Remove support for distributions with Python 3.6  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/84156210:25
iurygregorygood morning Ironic11:08
dtantsurmorning iurygregory 11:43
dtantsuriurygregory: https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/841562 needed to repair the CI11:52
dtantsurarne_wiebalck: if you have a minute ^^11:52
iurygregorydtantsur, looking now11:53
iurygregoryI'm surprised we still have "USE_PYTHON3"11:54
dtantsuryeah, should probably get rid of it in a follow-up11:55
dtantsurit was useful when IPA-builder was branchless, and we still supported Train/Ussuri11:55
iurygregoryyeah =)11:56
iurygregory+211:56
rpittauI started working on that earlier, but I won't be here next week, if noone else get to that before I'm back I'll publish the change12:08
TheJuliaGood morning12:41
iurygregorygood morning TheJulia =)12:44
rpittaugood morning TheJulia :)12:48
opendevreviewMerged openstack/ironic-python-agent-builder master: Remove support for distributions with Python 3.6  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/84156213:15
rpittau\o/13:15
* dtantsur is waiting for https://zuul.openstack.org/builds?job_name=ironic-python-agent-build-image-dib-centos9 to show something13:23
admiyoIf I run standalone, and I launch an instance on a bm node, how does it get the ssh keys?  I know it was complaining if I didn't have ~/.ssh/id_rsa.pub avaiable, but I can't seem to log in. Do I need to explicitly create a  config-drive or something?13:42
dtantsuradmiyo: it depends on how you lunch the instance. if you're using the bifrost's playbooks, it should create a configdrive for you (note that some OS may reject RSA keys, especially short ones)13:47
dtantsurif you're using `baremetal node deploy`, you need to request a configdrive creation13:47
dtantsurhttps://docs.openstack.org/ironic/latest/user/deploy.html#deploying-with-a-config-drive covers the latter13:47
admiyodtantsur, how do I tell13:55
admiyodtantsur, Ah, thanks.  I get it13:56
TheJuliaadmiyo: btw, w/r/t networking, all of the advanced port fields, like physical network/local link connect are only used when integrated with neutron. The port is mostly just about identifying the node and setting the stage for it to boot. If your not using a fully integrated stack, you may need to supply additional things like config drives with contents. Bifrost does some of this for you, but yeah...13:56
admiyodtantsur, does the config drive survive an undeploy-redeploy?13:56
TheJuliaadmiyo: it is removed and does not survive cleaning13:57
dtantsuradmiyo: each deploy or rebuild must provide it again13:57
TheJuliaYeah, I guess rebuild has always overwritten it13:57
admiyoso I need    --config-drive '{"meta_data": {"public_keys": {"0": "ssh key contents"}}}'13:57
dtantsuradmiyo: yep13:58
dtantsuror, an opportunity for a sales pitch!13:58
dtantsuradmiyo: may I introduce you to https://docs.openstack.org/metalsmith/latest/? it automates a few things behind a nicer UI.13:58
dtantsurhttps://docs.openstack.org/metalsmith/latest/cli/index.html13:58
dtantsurit's more useful when you have glance/neutron, but also quite handy standalone13:59
admiyodtantsur, I'll take a look.  13:59
admiyoA little wary of adding complexity.  The idea of going from Kolla to Bifrost was to reduce complexity.  But I can the see the advantage of a decent UI.  13:59
dtantsuradmiyo: yeah, but it's a small Python package with CLI14:01
dtantsurit's not like I offer you Horizon :D14:01
admiyodtantsur, watchout or I'll end up submitting a review request merging it into ironic like this one: https://review.opendev.org/c/openstack/keystone/+/84163514:03
admiyoI wanted that in Keystone aeons ago.  Render HTML if you point a browser at it.14:03
dtantsuroh lol14:04
dtantsurwell, it does make some sense. we used to have a webclient, but it dies without support14:04
dtantsurnow I sometimes wonder if we should revive it and keep afloat (like we do for the horizon panel)14:05
admiyoYeah, but you know what, once there is visual support, people tend to use it14:05
admiyoI'll hack it up for ironic at some point and we can look at it. Does Ironic have json-home?14:05
dtantsurhttps://opendev.org/openstack/ironic-webclient/src/commit/c938dc98170cce58fb153ef3f474f617e769d2a314:06
dtantsuradmiyo: if you want something visual, it may be better to start with ^^^14:06
dtantsurI have no idea what json-home is14:06
TheJuliawow... 6 years14:06
dtantsurtime flies, ya?14:06
TheJuliai know14:06
TheJuliajust... shocked14:06
admiyoNo javascript14:07
admiyoTHere are other reasons.14:07
* TheJulia listens to call and drives to go have a tasty breakfast before... hopefully... doing actual technical work today14:07
admiyoIts a check on the REST approach, to make sure that automated clients can "walk the tree" to find resources.14:07
admiyojson-home...let me find the link14:07
dtantsuradmiyo: we have something like that, not sure if it's literally json-home14:08
admiyohttps://docs.openstack.org/keystone/latest/user/json_home.html14:08
dtantsuryeah, not like that14:08
admiyoFor Keystone it provides a complete inventory of the "stuff" inside the server14:08
dtantsurbut you can walk from the root to any leaf resource14:08
dtantsurhow useful it is, I personally have reservations14:08
admiyothat was Brant Knudsen's effort, back when IBM was 1/2 of Keystone14:08
dtantsurI'd never want to use an automatically generated GUI14:09
dtantsurthe idea behind ironic-webclient was that it was fully client-side. the server side is the Ironic API, nothing in-between.14:09
dtantsurwhich is compelling enough for me to forgive the presence of javascript :)14:10
admiyoSo, the idea is "progressive enhancement" where you start with ugly-bog-simple HTML, and then use Javascript as  an option to add user experience stuff on top, but things work simple.  Nothing stops you from doing a smart clinet...infact, it is easier,as the smart clinet has to invent less stuff, like paths for navigation etc14:10
* dtantsur is now tempted to try ironic-webclient on his bifrost14:11
admiyoI think what I was shooting for was something like a conf option that the deployer could set for where the CSS and the javascript files would live, probably uner /etc/keystone/web or something. Not supported by core14:11
admiyoBut for any new feature in Keystone there would be at least a minimal way to work with it visually.  14:12
admiyothe demand on Keystone (or ironic) is to be able to re-render JSON as HTML in a smart way, and then to provide a way to do forms to specify what is necessary to create and modify existing resources.14:13
admiyoIronic would need the JSON home type data to specify to a user the URLs for the list and show actions14:14
dtantsurpersonally, I don't find such auto-discovered GUI useful enough to spend time on it14:15
dtantsurI'd rather concentrate (if I had a case) on a smaller in scope GUI that does the right thing14:15
admiyoTHat path leads to the Horizon14:17
admiyoNot that there is anything wrong with it.14:17
admiyoWhat the JSON approach leaves out is how to speficy what fields to put in a form.  FreeIPA was reaaly nice building the UI, as the JSON-RPC had a metadata call that I could use to figure that out.  THen the Javascript would remove, hide, or morph the fields.  Somethings that would have defaulted to text boxes go smart controls (like dates) etc14:18
admiyoSo the HTML is really the less interesting part, it is the form data that I really thing is valuable.  But I also want to support the cases where someone has a Keystone server and no Horizon in as minimally invasive and requiring the least support from me way possible14:19
admiyoIt would be interesting to see what Ironic looks like that way...14:20
admiyoopenstack baremetal node deploy mystique14-r116    --config-drive '{"meta_data": {"public_keys": {"0": ""}'14:22
admiyoInvalid configdrive format: it is neither a JSON, nor a URL, nor a base64 string (HTTP 400)14:22
admiyohrm14:22
admiyoI'm missing a brace14:22
admiyoI was missing two braces.  OK, deploy request accepted. dtantsur thanks, big help.14:24
opendevreviewMerged openstack/networking-generic-switch master: CI: use pre-existing ssh key on multinode jobs  https://review.opendev.org/c/openstack/networking-generic-switch/+/84126514:30
rpiosoGood Friday morning, ironic :)14:33
* rpioso wonders what could cause a node's provision_state to become null :-/14:34
dtantsuradmiyo: sure thing, let us know if it works14:38
dtantsurrpioso: None was a synonym of available in ancient API versions14:38
rpiosodtantsur: Is 1.72 considered ancient?14:38
dtantsurrpioso: 1.1 was ancient :) but if you use curl or anything that does not supply a version (baremetal CLI does), ironic will use the lowest possible version14:40
rpiosodtantsur: Thank you!14:41
rpittaubye everyone! see you in 10 days! o/14:54
dtantsurenjoy rpittau!15:10
dtantsurFYI folks https://fedoraproject.org/wiki/Changes/BIOSBootISOWithGrub215:22
dtantsur"Upstream syslinux development is dead, and the Fedora maintainer would like to drop the package from the distribution"15:22
TheJuliaWheeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee15:24
TheJuliaThis is actually a good thing, but transition will be rough for many who have just always expected sys Linux15:24
dtantsurwell.. isn't pxelinux.0 coming from syslinux?15:25
dtantsurif yes, we're in trouble15:25
TheJuliaYes, but actually we are not15:25
TheJuliaI think we already posted the deprecation of support15:26
TheJuliaAnd we haven’t needed it for years, we’ve just kept some of its patterns in place15:26
dtantsurmmmmmmm? we're deprecating the PXE boot?15:26
dtantsurit's news for me15:27
TheJuliaNo15:27
TheJuliaYour mixing pxe in general as an interface and pxelinux.015:27
TheJuliaYou can use pxe with grub15:27
dtantsuryeah, but do we support that for BIOS?15:27
TheJuliaI think we test it in ci15:28
TheJuliaErr15:28
dtantsurpxe_bootfile_name defaults to pxelinux.015:28
TheJuliaWe test UEFI because it is easier15:28
TheJuliaYeah, so more work to do15:28
dtantsurdo you know how is the grub's counterpart of pxelinux.0 is called?15:29
TheJuliaWe’re going to have to backport a deprecation most likely which sucks15:29
dtantsurwell.. it's Fedora, it won't reach RHEL for a good while15:29
TheJuliaYes but not off the top of my head, at breakfast at the moment15:29
TheJuliaTrue true15:29
dtantsurah, sorry. enjoy your meals :) I can google15:29
TheJuliaNo worries :). Just finished, waiting for the salon to open so I can make an appointment15:30
* TheJulia needs some purple in her hair for Berlin15:30
* dtantsur approves15:30
dtantsurwow, it even supports ipv615:32
* dtantsur is reading https://www.gnu.org/software/grub/manual/grub/html_node/Network.html15:33
ashinclouds[m]Has to be compiled in and all15:34
dtantsurNetboot directory for i386-pc created. Configure your DHCP server to point to /tmp/tftp/boot/grub/i386-pc/core.015:34
ashinclouds[m]Steve has wanted to make the switch this cycle if he has time15:35
dtantsurokay, we're getting somewhere15:35
ashinclouds[m]Whoops matrix, not IRCCloud15:35
dtantsurmatrix has you!15:35
ashinclouds[m]Indeed15:35
TheJuliaI have both on my phone these days15:35
dtantsurnice!15:35
dtantsurwow, grub-mknetdir does generate a lot of files15:36
TheJuliaYeah… it does :(15:36
TheJuliaOriginal grub2 job used it if memory serves15:37
dtantsurI don't see any mentions in ironic15:37
dtantsurmaybe we do the same manually?15:37
TheJuliaIt was in the devstack plug-in15:37
dtantsurI mean the whole repo15:37
TheJuliaYeah, it got swapped to UEFI with the cenros8 stuffs since it didn’t really support it in those builds15:38
TheJuliaI feel like if you look at train you will find it15:39
dtantsurit seems like this command can work for EFI too15:40
dtantsurNetboot directory for x86_64-efi created. Configure your DHCP server to point to /tmp/tftp/boot/grub/x86_64-efi/core.efi15:40
TheJuliaYeah, kind of… but that is not signed15:40
dtantsurof course :(15:40
TheJuliaI think there was mentioned intent to ship a signed binary, but no idea if that happened or went anywhere15:41
dtantsurTheJulia: could you sync with stevebaker[m] today to see if he's interested in replacing syslinux?15:41
dtantsurI'd rather not wait until it get dropped in some RHEL 10 or even RHEL 9.*15:41
TheJuliadtantsur: sure, he has a downstream item in Kira15:41
TheJuliaJira15:41
TheJuliaWell15:42
* dtantsur had a second of Oo15:42
TheJuliaSteve has his weekend now15:42
TheJuliaPhone keyboard15:42
dtantsursure :)15:42
dtantsuryeah, maybe he'll see my ping on Monday15:42
TheJuliaSadly never had a sidekick either…15:42
TheJuliaBlackberries… oh my15:43
* TheJulia feels smartphone old15:43
dtantsurI was clinging to my old nokia for many years :)15:43
dtantsurI think it was ~ 10 years old when I finally gave in and bought a smartphone15:44
* dtantsur is conservative when it comes to gadgets15:44
TheJuliaMy first smartphone was largely because of my then employer… on call 24/715:46
dtantsur`dnf install -y grub2-efi-modules` brings me aarch64 modules. very nice, thank you15:46
dtantsurTheJulia: we also need to get rid of isolinux for ISO booting, I assume?15:48
TheJuliaLikely yeah15:49
TheJuliaIt is semi forked15:49
TheJuliaBut yeah15:49
dtantsursemi-forked? wdym?15:49
dtantsurugh, none of my bifrost environments use BIOS booting\15:50
TheJuliaSeparate packaging if memory serves16:00
dtantsurwell, lovely, adding --boot uefi to virt-install produces non-bootable VMs16:05
ashinclouds[m]Le sigh16:08
dtantsurI can actually it's virt-builder that does not support UEFI at all16:12
admiyodtantsur, yea, it is wroking.  GOt both Centos and Ubuntu to let me log in.16:12
dtantsuradmiyo: nice!16:12
admiyodtantsur, yeah.  I assume I can use that same mechanism to try and bring up a second (dhcp) ethernet device, too16:13
admiyoI have some things to play with.16:13
dtantsurhave fun :)16:21
opendevreviewMerged openstack/ironic master: The Python 3.6 and Python 3.7Support has been dropped since zed  https://review.opendev.org/c/openstack/ironic/+/84107118:58
TheJuliais it the weekend yet?19:04
sschmittHey all, does anyone have any advice for the best way to bridge ironic nodes to vxlan tenant networks? Right now I'm looking at L2GW but that seems to have been retired. We have a hacky addition to networking-generic-switch but would like something more proper.19:16
opendevreviewMerged openstack/bifrost master: Upgrade from stable/yoga  https://review.opendev.org/c/openstack/bifrost/+/83936919:35
opendevreviewMerged openstack/bifrost master: Prevent the enroll/deploy commands from running without venv  https://review.opendev.org/c/openstack/bifrost/+/83939920:04
TheJuliasschmitt: offhand I'm not aware of any. I know some people who have done similar. I know one sdn vendor even has it as part of their product20:11

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!