TheJulia | stevebaker[m]: I'll try to look tomorrow | 00:00 |
---|---|---|
TheJulia | I've found no time for any code today :( | 00:00 |
TheJulia | too many emails | 00:00 |
TheJulia | We should now refilm the movie sneakers, but instead of it being "toomanysecrets", the password can be "toomanyemails" | 00:01 |
stevebaker[m] | Much appreciated, no real hurry I'm just fishing for potential -2s before I put more effort into it | 00:03 |
*** mat_fechner is now known as matfechner | 03:30 | |
kamlesh6808c | Good Morning Ironic ! | 04:21 |
arne_wiebalck | Good morning, Ironic! | 06:50 |
rpittau | good morning ironic! o/ | 07:27 |
opendevreview | Riccardo Pittau proposed openstack/ironic-python-agent-builder master: Build tinyipa with python 3.9 https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/841598 | 08:25 |
rpittau | should we consider an alternative to tinycore? Doesn't look like native support for Python >= 3.8 will come before 14.x | 09:05 |
opendevreview | Merged openstack/ironic-inspector bugfix/10.12: Update .gitreview for bugfix/10.12 https://review.opendev.org/c/openstack/ironic-inspector/+/841567 | 09:20 |
dtantsur | TheJulia: JFYI the CLI does not need env vars to grok basic auth, a normal clouds.yaml (as generated by bifrost) is enough | 09:40 |
dtantsur | stevebaker[m]: the only problem used to be the old libvirt in RHEL 7 (?) | 09:41 |
dtantsur | if we can keep RHEL 8 working, I'm all for the automatic firmware | 09:42 |
stevebaker[m] | Yep 7 is too old, 8 onwards should be fine | 09:43 |
dtantsur | wow, what time is it for you? :) | 09:55 |
rpittau | dtantsur: this works now, forcing python3.9 -> https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/841598 | 10:19 |
dtantsur | rpittau: just python3 does not work? | 10:19 |
rpittau | I mean, if we exclude centos taking a vacation | 10:19 |
rpittau | dtantsur: yep, it takes py3.6 by default | 10:19 |
dtantsur | le isgh | 10:20 |
dtantsur | okey, what else is broken now? :) | 10:20 |
rpittau | trying to understand, seems like centos took the "casual friday" too seriosudly | 10:20 |
rpittau | lol 2022-05-13 08:35:33.051068 | ubuntu-focal | 2022-05-13 08:35:33.050 | ERROR: Package 'ironic-python-agent' requires a different Python: 3.6.8 not in '>=3.8' | 10:21 |
rpittau | of course | 10:21 |
dtantsur | rpittau: ahh, you need to squash in my fix | 10:21 |
rpittau | yeah | 10:21 |
rpittau | I'm going to add the tinyipa change to yours | 10:23 |
opendevreview | Riccardo Pittau proposed openstack/ironic-python-agent-builder master: Remove support for distributions with Python 3.6 https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/841562 | 10:25 |
iurygregory | good morning Ironic | 11:08 |
dtantsur | morning iurygregory | 11:43 |
dtantsur | iurygregory: https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/841562 needed to repair the CI | 11:52 |
dtantsur | arne_wiebalck: if you have a minute ^^ | 11:52 |
iurygregory | dtantsur, looking now | 11:53 |
iurygregory | I'm surprised we still have "USE_PYTHON3" | 11:54 |
dtantsur | yeah, should probably get rid of it in a follow-up | 11:55 |
dtantsur | it was useful when IPA-builder was branchless, and we still supported Train/Ussuri | 11:55 |
iurygregory | yeah =) | 11:56 |
iurygregory | +2 | 11:56 |
rpittau | I started working on that earlier, but I won't be here next week, if noone else get to that before I'm back I'll publish the change | 12:08 |
TheJulia | Good morning | 12:41 |
iurygregory | good morning TheJulia =) | 12:44 |
rpittau | good morning TheJulia :) | 12:48 |
opendevreview | Merged openstack/ironic-python-agent-builder master: Remove support for distributions with Python 3.6 https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/841562 | 13:15 |
rpittau | \o/ | 13:15 |
* dtantsur is waiting for https://zuul.openstack.org/builds?job_name=ironic-python-agent-build-image-dib-centos9 to show something | 13:23 | |
admiyo | If I run standalone, and I launch an instance on a bm node, how does it get the ssh keys? I know it was complaining if I didn't have ~/.ssh/id_rsa.pub avaiable, but I can't seem to log in. Do I need to explicitly create a config-drive or something? | 13:42 |
dtantsur | admiyo: it depends on how you lunch the instance. if you're using the bifrost's playbooks, it should create a configdrive for you (note that some OS may reject RSA keys, especially short ones) | 13:47 |
dtantsur | if you're using `baremetal node deploy`, you need to request a configdrive creation | 13:47 |
dtantsur | https://docs.openstack.org/ironic/latest/user/deploy.html#deploying-with-a-config-drive covers the latter | 13:47 |
admiyo | dtantsur, how do I tell | 13:55 |
admiyo | dtantsur, Ah, thanks. I get it | 13:56 |
TheJulia | admiyo: btw, w/r/t networking, all of the advanced port fields, like physical network/local link connect are only used when integrated with neutron. The port is mostly just about identifying the node and setting the stage for it to boot. If your not using a fully integrated stack, you may need to supply additional things like config drives with contents. Bifrost does some of this for you, but yeah... | 13:56 |
admiyo | dtantsur, does the config drive survive an undeploy-redeploy? | 13:56 |
TheJulia | admiyo: it is removed and does not survive cleaning | 13:57 |
dtantsur | admiyo: each deploy or rebuild must provide it again | 13:57 |
TheJulia | Yeah, I guess rebuild has always overwritten it | 13:57 |
admiyo | so I need --config-drive '{"meta_data": {"public_keys": {"0": "ssh key contents"}}}' | 13:57 |
dtantsur | admiyo: yep | 13:58 |
dtantsur | or, an opportunity for a sales pitch! | 13:58 |
dtantsur | admiyo: may I introduce you to https://docs.openstack.org/metalsmith/latest/? it automates a few things behind a nicer UI. | 13:58 |
dtantsur | https://docs.openstack.org/metalsmith/latest/cli/index.html | 13:58 |
dtantsur | it's more useful when you have glance/neutron, but also quite handy standalone | 13:59 |
admiyo | dtantsur, I'll take a look. | 13:59 |
admiyo | A little wary of adding complexity. The idea of going from Kolla to Bifrost was to reduce complexity. But I can the see the advantage of a decent UI. | 13:59 |
dtantsur | admiyo: yeah, but it's a small Python package with CLI | 14:01 |
dtantsur | it's not like I offer you Horizon :D | 14:01 |
admiyo | dtantsur, watchout or I'll end up submitting a review request merging it into ironic like this one: https://review.opendev.org/c/openstack/keystone/+/841635 | 14:03 |
admiyo | I wanted that in Keystone aeons ago. Render HTML if you point a browser at it. | 14:03 |
dtantsur | oh lol | 14:04 |
dtantsur | well, it does make some sense. we used to have a webclient, but it dies without support | 14:04 |
dtantsur | now I sometimes wonder if we should revive it and keep afloat (like we do for the horizon panel) | 14:05 |
admiyo | Yeah, but you know what, once there is visual support, people tend to use it | 14:05 |
admiyo | I'll hack it up for ironic at some point and we can look at it. Does Ironic have json-home? | 14:05 |
dtantsur | https://opendev.org/openstack/ironic-webclient/src/commit/c938dc98170cce58fb153ef3f474f617e769d2a3 | 14:06 |
dtantsur | admiyo: if you want something visual, it may be better to start with ^^^ | 14:06 |
dtantsur | I have no idea what json-home is | 14:06 |
TheJulia | wow... 6 years | 14:06 |
dtantsur | time flies, ya? | 14:06 |
TheJulia | i know | 14:06 |
TheJulia | just... shocked | 14:06 |
admiyo | No javascript | 14:07 |
admiyo | THere are other reasons. | 14:07 |
* TheJulia listens to call and drives to go have a tasty breakfast before... hopefully... doing actual technical work today | 14:07 | |
admiyo | Its a check on the REST approach, to make sure that automated clients can "walk the tree" to find resources. | 14:07 |
admiyo | json-home...let me find the link | 14:07 |
dtantsur | admiyo: we have something like that, not sure if it's literally json-home | 14:08 |
admiyo | https://docs.openstack.org/keystone/latest/user/json_home.html | 14:08 |
dtantsur | yeah, not like that | 14:08 |
admiyo | For Keystone it provides a complete inventory of the "stuff" inside the server | 14:08 |
dtantsur | but you can walk from the root to any leaf resource | 14:08 |
dtantsur | how useful it is, I personally have reservations | 14:08 |
admiyo | that was Brant Knudsen's effort, back when IBM was 1/2 of Keystone | 14:08 |
dtantsur | I'd never want to use an automatically generated GUI | 14:09 |
dtantsur | the idea behind ironic-webclient was that it was fully client-side. the server side is the Ironic API, nothing in-between. | 14:09 |
dtantsur | which is compelling enough for me to forgive the presence of javascript :) | 14:10 |
admiyo | So, the idea is "progressive enhancement" where you start with ugly-bog-simple HTML, and then use Javascript as an option to add user experience stuff on top, but things work simple. Nothing stops you from doing a smart clinet...infact, it is easier,as the smart clinet has to invent less stuff, like paths for navigation etc | 14:10 |
* dtantsur is now tempted to try ironic-webclient on his bifrost | 14:11 | |
admiyo | I think what I was shooting for was something like a conf option that the deployer could set for where the CSS and the javascript files would live, probably uner /etc/keystone/web or something. Not supported by core | 14:11 |
admiyo | But for any new feature in Keystone there would be at least a minimal way to work with it visually. | 14:12 |
admiyo | the demand on Keystone (or ironic) is to be able to re-render JSON as HTML in a smart way, and then to provide a way to do forms to specify what is necessary to create and modify existing resources. | 14:13 |
admiyo | Ironic would need the JSON home type data to specify to a user the URLs for the list and show actions | 14:14 |
dtantsur | personally, I don't find such auto-discovered GUI useful enough to spend time on it | 14:15 |
dtantsur | I'd rather concentrate (if I had a case) on a smaller in scope GUI that does the right thing | 14:15 |
admiyo | THat path leads to the Horizon | 14:17 |
admiyo | Not that there is anything wrong with it. | 14:17 |
admiyo | What the JSON approach leaves out is how to speficy what fields to put in a form. FreeIPA was reaaly nice building the UI, as the JSON-RPC had a metadata call that I could use to figure that out. THen the Javascript would remove, hide, or morph the fields. Somethings that would have defaulted to text boxes go smart controls (like dates) etc | 14:18 |
admiyo | So the HTML is really the less interesting part, it is the form data that I really thing is valuable. But I also want to support the cases where someone has a Keystone server and no Horizon in as minimally invasive and requiring the least support from me way possible | 14:19 |
admiyo | It would be interesting to see what Ironic looks like that way... | 14:20 |
admiyo | openstack baremetal node deploy mystique14-r116 --config-drive '{"meta_data": {"public_keys": {"0": ""}' | 14:22 |
admiyo | Invalid configdrive format: it is neither a JSON, nor a URL, nor a base64 string (HTTP 400) | 14:22 |
admiyo | hrm | 14:22 |
admiyo | I'm missing a brace | 14:22 |
admiyo | I was missing two braces. OK, deploy request accepted. dtantsur thanks, big help. | 14:24 |
opendevreview | Merged openstack/networking-generic-switch master: CI: use pre-existing ssh key on multinode jobs https://review.opendev.org/c/openstack/networking-generic-switch/+/841265 | 14:30 |
rpioso | Good Friday morning, ironic :) | 14:33 |
* rpioso wonders what could cause a node's provision_state to become null :-/ | 14:34 | |
dtantsur | admiyo: sure thing, let us know if it works | 14:38 |
dtantsur | rpioso: None was a synonym of available in ancient API versions | 14:38 |
rpioso | dtantsur: Is 1.72 considered ancient? | 14:38 |
dtantsur | rpioso: 1.1 was ancient :) but if you use curl or anything that does not supply a version (baremetal CLI does), ironic will use the lowest possible version | 14:40 |
rpioso | dtantsur: Thank you! | 14:41 |
rpittau | bye everyone! see you in 10 days! o/ | 14:54 |
dtantsur | enjoy rpittau! | 15:10 |
dtantsur | FYI folks https://fedoraproject.org/wiki/Changes/BIOSBootISOWithGrub2 | 15:22 |
dtantsur | "Upstream syslinux development is dead, and the Fedora maintainer would like to drop the package from the distribution" | 15:22 |
TheJulia | Wheeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee | 15:24 |
TheJulia | This is actually a good thing, but transition will be rough for many who have just always expected sys Linux | 15:24 |
dtantsur | well.. isn't pxelinux.0 coming from syslinux? | 15:25 |
dtantsur | if yes, we're in trouble | 15:25 |
TheJulia | Yes, but actually we are not | 15:25 |
TheJulia | I think we already posted the deprecation of support | 15:26 |
TheJulia | And we haven’t needed it for years, we’ve just kept some of its patterns in place | 15:26 |
dtantsur | mmmmmmm? we're deprecating the PXE boot? | 15:26 |
dtantsur | it's news for me | 15:27 |
TheJulia | No | 15:27 |
TheJulia | Your mixing pxe in general as an interface and pxelinux.0 | 15:27 |
TheJulia | You can use pxe with grub | 15:27 |
dtantsur | yeah, but do we support that for BIOS? | 15:27 |
TheJulia | I think we test it in ci | 15:28 |
TheJulia | Err | 15:28 |
dtantsur | pxe_bootfile_name defaults to pxelinux.0 | 15:28 |
TheJulia | We test UEFI because it is easier | 15:28 |
TheJulia | Yeah, so more work to do | 15:28 |
dtantsur | do you know how is the grub's counterpart of pxelinux.0 is called? | 15:29 |
TheJulia | We’re going to have to backport a deprecation most likely which sucks | 15:29 |
dtantsur | well.. it's Fedora, it won't reach RHEL for a good while | 15:29 |
TheJulia | Yes but not off the top of my head, at breakfast at the moment | 15:29 |
TheJulia | True true | 15:29 |
dtantsur | ah, sorry. enjoy your meals :) I can google | 15:29 |
TheJulia | No worries :). Just finished, waiting for the salon to open so I can make an appointment | 15:30 |
* TheJulia needs some purple in her hair for Berlin | 15:30 | |
* dtantsur approves | 15:30 | |
dtantsur | wow, it even supports ipv6 | 15:32 |
* dtantsur is reading https://www.gnu.org/software/grub/manual/grub/html_node/Network.html | 15:33 | |
ashinclouds[m] | Has to be compiled in and all | 15:34 |
dtantsur | Netboot directory for i386-pc created. Configure your DHCP server to point to /tmp/tftp/boot/grub/i386-pc/core.0 | 15:34 |
ashinclouds[m] | Steve has wanted to make the switch this cycle if he has time | 15:35 |
dtantsur | okay, we're getting somewhere | 15:35 |
ashinclouds[m] | Whoops matrix, not IRCCloud | 15:35 |
dtantsur | matrix has you! | 15:35 |
ashinclouds[m] | Indeed | 15:35 |
TheJulia | I have both on my phone these days | 15:35 |
dtantsur | nice! | 15:35 |
dtantsur | wow, grub-mknetdir does generate a lot of files | 15:36 |
TheJulia | Yeah… it does :( | 15:36 |
TheJulia | Original grub2 job used it if memory serves | 15:37 |
dtantsur | I don't see any mentions in ironic | 15:37 |
dtantsur | maybe we do the same manually? | 15:37 |
TheJulia | It was in the devstack plug-in | 15:37 |
dtantsur | I mean the whole repo | 15:37 |
TheJulia | Yeah, it got swapped to UEFI with the cenros8 stuffs since it didn’t really support it in those builds | 15:38 |
TheJulia | I feel like if you look at train you will find it | 15:39 |
dtantsur | it seems like this command can work for EFI too | 15:40 |
dtantsur | Netboot directory for x86_64-efi created. Configure your DHCP server to point to /tmp/tftp/boot/grub/x86_64-efi/core.efi | 15:40 |
TheJulia | Yeah, kind of… but that is not signed | 15:40 |
dtantsur | of course :( | 15:40 |
TheJulia | I think there was mentioned intent to ship a signed binary, but no idea if that happened or went anywhere | 15:41 |
dtantsur | TheJulia: could you sync with stevebaker[m] today to see if he's interested in replacing syslinux? | 15:41 |
dtantsur | I'd rather not wait until it get dropped in some RHEL 10 or even RHEL 9.* | 15:41 |
TheJulia | dtantsur: sure, he has a downstream item in Kira | 15:41 |
TheJulia | Jira | 15:41 |
TheJulia | Well | 15:42 |
* dtantsur had a second of Oo | 15:42 | |
TheJulia | Steve has his weekend now | 15:42 |
TheJulia | Phone keyboard | 15:42 |
dtantsur | sure :) | 15:42 |
dtantsur | yeah, maybe he'll see my ping on Monday | 15:42 |
TheJulia | Sadly never had a sidekick either… | 15:42 |
TheJulia | Blackberries… oh my | 15:43 |
* TheJulia feels smartphone old | 15:43 | |
dtantsur | I was clinging to my old nokia for many years :) | 15:43 |
dtantsur | I think it was ~ 10 years old when I finally gave in and bought a smartphone | 15:44 |
* dtantsur is conservative when it comes to gadgets | 15:44 | |
TheJulia | My first smartphone was largely because of my then employer… on call 24/7 | 15:46 |
dtantsur | `dnf install -y grub2-efi-modules` brings me aarch64 modules. very nice, thank you | 15:46 |
dtantsur | TheJulia: we also need to get rid of isolinux for ISO booting, I assume? | 15:48 |
TheJulia | Likely yeah | 15:49 |
TheJulia | It is semi forked | 15:49 |
TheJulia | But yeah | 15:49 |
dtantsur | semi-forked? wdym? | 15:49 |
dtantsur | ugh, none of my bifrost environments use BIOS booting\ | 15:50 |
TheJulia | Separate packaging if memory serves | 16:00 |
dtantsur | well, lovely, adding --boot uefi to virt-install produces non-bootable VMs | 16:05 |
ashinclouds[m] | Le sigh | 16:08 |
dtantsur | I can actually it's virt-builder that does not support UEFI at all | 16:12 |
admiyo | dtantsur, yea, it is wroking. GOt both Centos and Ubuntu to let me log in. | 16:12 |
dtantsur | admiyo: nice! | 16:12 |
admiyo | dtantsur, yeah. I assume I can use that same mechanism to try and bring up a second (dhcp) ethernet device, too | 16:13 |
admiyo | I have some things to play with. | 16:13 |
dtantsur | have fun :) | 16:21 |
opendevreview | Merged openstack/ironic master: The Python 3.6 and Python 3.7Support has been dropped since zed https://review.opendev.org/c/openstack/ironic/+/841071 | 18:58 |
TheJulia | is it the weekend yet? | 19:04 |
sschmitt | Hey all, does anyone have any advice for the best way to bridge ironic nodes to vxlan tenant networks? Right now I'm looking at L2GW but that seems to have been retired. We have a hacky addition to networking-generic-switch but would like something more proper. | 19:16 |
opendevreview | Merged openstack/bifrost master: Upgrade from stable/yoga https://review.opendev.org/c/openstack/bifrost/+/839369 | 19:35 |
opendevreview | Merged openstack/bifrost master: Prevent the enroll/deploy commands from running without venv https://review.opendev.org/c/openstack/bifrost/+/839399 | 20:04 |
TheJulia | sschmitt: offhand I'm not aware of any. I know some people who have done similar. I know one sdn vendor even has it as part of their product | 20:11 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!