Wednesday, 2024-07-17

opendevreviewJacob Anders proposed openstack/sushy-tools master: [WIP] Translate VM name to UUID to avoid redirect issue  https://review.opendev.org/c/openstack/sushy-tools/+/92429705:43
rpittaugood morning ironic! o/06:42
rpittauTheJulia: have you seen the comment https://github.com/lextudio/pysnmp/issues/49#issuecomment-2232419149 ?07:18
rpittauI'm quite puzzled :/07:18
fricklerrpittau: https://pypi.org/project/pysnmp/#history , guess you'd need to switch to using 5.1.0 from there for now07:25
rpittaufrickler: thanks, we've already moved back to 5.x after the initial breakage07:27
fricklerrpittau: iiuc currently you are using pysnmp-lextudio, which is unsupported as of yesterday. pysnmp still has 4.x in u-c07:39
rpittaufrickler: I'maware of the move, they simply removed the -lextudio suffix as they took over the pyusnmp package07:43
rpittaupysnmp-lextudio still exists up to 6.2.1, in u-c we reverted to 5.0.33 after the upgrade to 6.x broke us, so we're okish for now07:43
rpittauthe problem comes with Python 3.12 as removes asyncore07:43
rpittauthere was a thread last week from TheJulia highlighting the issue with SNMP support in ironic related to that07:43
sylvrGood morning #ironic !08:00
sylvrI got a new error in ironic-inspector.log : https://bugs.launchpad.net/ironic/+bug/207255012:12
arne_wiebalckGood morning, Ironic!12:51
arne_wiebalckOur summary blog post on the bare metal SIG and OpenInfra meetup at CERN went live: https://techblog.web.cern.ch/techblog/post/openinfra-user-group-meeting-2024/12:52
rpittauthat's really cool, thanks arne_wiebalck :)12:58
arne_wiebalckall creds to luis_fdez ! 12:59
luiseteit took a while...but finally there :-)13:00
rpittauthen thanks to luisete :)13:00
adam-metal3hello Ironic, I am working on a customHardwareManager for IPA and I was wondering that how open would you (the upstream) be for a mechanism that would allow the developer of a customHardwareManager to overwrite the configDrive injection? It could be a very simple implementation (ofc I would implement it), something like a config option that would thell the "prepare_image" function  to not bother running the config 13:26
adam-metal3drive partition creation and file injection 13:26
adam-metal3I think because of how the image handlig is done right now if I want to do some minor customization of the config drive handling but nothing else, I would still need to write a hardware manager and use customDeploy interface and re-implement the default hardware manager's whole image handling logic.13:30
adam-metal3Instead of this my goal would be to have a tiny condition and a config variable in the upstream code e.g. "custom_config_drive_handling" if it is true then the default functions e.g. prepareImage would just not bother with the config drive, I would take care of that in a automated step in the custom hardware manager 13:32
sylvrTheJulia : hello !13:47
JayFadam-metal3: I suspect if you get to that point, you might just want to use the custom agent driver and set up all your deploy steps manually.14:20
TheJuliasylvr: seems like we might have broken something with the sqlalchemy migraiton14:22
sylvrTheJulia : is there anything I can do to help or any patch you want me to try ?14:23
sylvrand thank you again for your help and insight !14:23
sylvrTheJulia : https://review.opendev.org/c/openstack/ironic/+/919641 are those the changes in question?14:29
TheJuliasylvr: no that is no the right change14:31
sylvryup, saw the diff and figured it ou after14:31
TheJuliabest guess, this is where https://review.opendev.org/c/openstack/ironic-inspector/+/86073114:33
TheJuliamost likely we need to check that code path around where that is raised, it is obviously not fatal and epected14:34
sylvrwell, I'm going to try and dig in the patchset, but I'm no sure I'll understand much...14:36
TheJuliayeah, I suspect we might be treating the no row found as "too fatal" or suggesteive of something else14:38
sylvrdb/api.py or db/migration.py ?14:42
sylvrTheJulia : do you want me to mark the bug as confirmed on ironic-inspector and the link you provided ?14:51
sylvrI'm leaving for the day. TheJulia : if you want me to try a patch, I'll keep my eyes on the bug report and I'll update there :) thank you again15:00
adam-metal3JayF: but that is the thing I don't want to change everything, I would like to build on the defaults and just customize 1 small part of the default workflow and writing a custom deploy step hat just reimplements the existing defaults is just feels like a waste15:24
JayFWhat's your use case?15:31
adam-metal3Encryption15:31
adam-metal3and some partition downshifting15:32
adam-metal3I mean disk encryption15:32
JayFI can't see how *only* customizing config drive helps you get there?15:34
JayFPlus I'm wondering if this (integration/support for disk encryption) is a feature, not a place for a knob15:34
JayFI think we're learning there can be a steep price to pay for having so many knobs to turn. 15:34
adam-metal3It is the whole configdrive partition creation that would be customized, it would be encrypted, and I would re-encrypt part of the stuff that I streamed to the disk also but that can be handled in the customHardwareManager. I would have proposed configDrive disk encryption as upstream feature (I am also happy to implement it, my use case is LUKS based that is quite common) abut I thought the smaller footprint 15:40
adam-metal3proposal is to just simply make the default ConfigDrive creation optional. 15:40
JayFSo basically, you're ending up with a LUKS encrypted root and configdrive15:43
JayFdecrypted on boot by help of your image15:43
JayFI'm assuming key in the TPM or similar?15:43
adam-metal3yes TPM15:43
adam-metal3yep that is the end result I am aiming for15:44
JayFI think if we were able to support that upstream, it'd be an awesome feature and more useful than just making configdrive pluggable15:44
JayFbut if you want to do either, the right path to start is an RFE bug. I can see positives and negatives in multiple directions and so more perspectives would help15:44
adam-metal3yeah sure I will make an RFE for this then, I am working on this anyways 15:46
rpittaugood night! o/16:02
TheJuliaHey folks, I'm super heads down at least this week and all of next. Any help you can render for surbhi will be greatly appreciated. surbhi, if you would take a moment to introduce yourself, that would be awesome. Folks here are super friendly.16:24
surbhiHello everyone, I have provisioned the baremetal node with ubuntu22.04, Installed devstack with irnoic. I think I successfully did it. After installation when I was trying to check I was able to see openstack service list with the output yesterday. I logged in again today and whenevr I am trying to access any command I see . stack@MOC-R4PAC10U31-S3B:~/devstack$ openstack service list16:25
surbhiInternal Server Error (HTTP 500)16:25
surbhistack@MOC-R4PAC10U31-S3B:~/devstack$ 16:25
TheJuliaThat operation is entirely with keystone, I wonder if the wsgi app for keystone is running? Could apache have been restarted through log rotation and broken it?!16:26
JayFsurbhi: TheJulia: apache restarts via log rotation have broken devstacks for cid and adamcarthur5 16:30
JayFin the past16:30
surbhiDo you know how this can be fixed?16:33
JayFI know this isn't a helpful answer for the place you are; but usually for me when a devstack becomes nonfunctional the fastest path to recovery is spinning a new one.16:34
TheJulia++16:34
TheJuliaIt is *not* meant for a long running deployment16:34
JayFI will say we've seen some VPS providers modify their image to include things like log rotation16:35
JayFwe had endless troubles getting a devstack to last more than a day on a digitalocean droplet16:35
JayFwe thought it was logrotation or autoupdates, but never really put a clear finger on it16:35
cid++16:37
surbhiI am trying to build a development environment to test our project and everything for developers so, we will have to reinstall devstack everytime will the set environment will not last for long.16:38
cidFacing something similar now. 16:38
cidThough the experience of not working after installation (overnight), I think using the setup immediately after helps16:39
surbhi sudo systemctl status devstack@keystone.service ----------when I did this service is running but ----------Jul 17 16:22:56 MOC-R4PAC10U31-S3B devstack@keystone.service[57736]: ERROR keystone   File "/opt/stack/data/venv/lib/python3.10/site-packages/pymysql/connections.py", line 775, in _read_packet16:39
surbhiJul 17 16:22:56 MOC-R4PAC10U31-S3B devstack@keystone.service[57736]: ERROR keystone     packet.raise_for_error()16:39
surbhiJul 17 16:22:56 MOC-R4PAC10U31-S3B devstack@keystone.service[57736]: ERROR keystone   File "/opt/stack/data/venv/lib/python3.10/site-packages/pymysql/protocol.py", line 219, in raise_for_error16:39
surbhiJul 17 16:22:56 MOC-R4PAC10U31-S3B devstack@keystone.service[57736]: ERROR keystone     err.raise_mysql_exception(self._data)16:39
surbhiJul 17 16:22:56 MOC-16:39
cidNot sure why that should be the case, but I can remember that working out.16:40
TheJuliais mysql running?16:40
surbhistack@MOC-R4PAC10U31-S3B:~/devstack$ sudo systemctl status mysql16:41
surbhi● mysql.service - MySQL Community Server16:41
surbhi     Loaded: loaded (/lib/systemd/system/mysql.service; enabled; vendor preset: enabled)16:41
surbhi     Active: active (running) since Wed 2024-07-17 14:12:13 UTC; 4s ago16:41
surbhi    Process: 258768 ExecStartPre=/usr/share/mysql/mysql-systemd-start pre (code=exited, status=0/SUCCESS)16:41
surbhi   Main PID: 258776 (mysqld)16:41
surbhi     Status: "Server is operational"16:41
surbhi      Tasks: 39 (limit: 154429)16:41
surbhi     Memory: 358.8M16:41
surbhi        CPU: 1.027s16:41
surbhi     CGroup: /system.slice/mysql.service16:41
surbhi             └─258776 /usr/sbin/mysqld16:41
surbhiJul 17 14:12:12 MOC-R4PAC10U31-S3B systemd[1]: Starting MySQL Community Server...16:42
surbhiJul 17 14:12:13 MOC-R4PAC10U31-S3B systemd[1]: Started MySQL Community Server.16:42
JayFplease use https://paste.opendev.org/ for output in the future16:42
surbhiCan you look into it here - https://paste.opendev.org/show/bdbLKdhjaUuiYXM7YNbk/16:45
JayFLike I said, even when this has happened to me, on a devstack I had access to, it wasn't something I found the time to get to the bottom of. I don't think I'll be able to do it here, with output in pastes either :( 16:46
cidServices are running according to the logs. Right now, having faced this a few times, the best solution is usually a new instance.16:48
cidAnd if you decide to do that, as a last attempt, ./clean.sh and ./stach.sh16:50
surbhiLast time I did that. I used unstack.sh clean and then resinstall but I just need to know will it happen frequently if yes, Do I have to follow the same step everytime. I want to aware of things.16:52
JayFThe thing that's always kept me confused is when I have a local VM, it doesn't behave this way.16:54
JayFBut I see it happen frequently with hosted VPS-style VMs 16:54
JayFe.g. the devstack I used with cid last week to go over runbooks is still working properly16:55
JayFso there's something external that's breaking the devstacks, and I've not been able to nail it down when I've looked at the ones that he had that were misbehaving16:55
JayFtime to science and see if an apt update breaks me in the same way yours are breaking, perhaps? 16:56
surbhiOkay. Thanks a lot for all the information. It was very helpful, I will try to see if I can figure this out if yes will let you all know.16:57
JayFyep, there's a libc security update, and it's restarting basically all the services including devstack, I bet this could break stuff16:57
JayF...but it all still works :( :16:57
opendevreviewcid proposed openstack/ironic master: Address TODO: set to the same value as in [pxe] after Xena  https://review.opendev.org/c/openstack/ironic/+/92434917:09
fricklerthat's really weird, my devstack VMs tend to run for weeks w/o any issue17:12
JayFthat's why I'm saying I think it's an external issue on some hosts17:13
JayFonly one I've seen it reliably happen on is DO droplets17:13
surbhikanthedfrickler: I will make and share the documnets with the list of steps I followed let me know if there is anything that I am missing while setting up the env.17:14
fricklersurbhikanthed: so are you actually running on digitalocean or where is your VM located?17:16
surbhikanthedI have provisioned a baremetal node with ubuntu22.04 and running over there. If you want to login you can share your ssh key and i can give you access to it.17:26
surbhikanthedFrickler: https://docs.google.com/document/d/1NnhAL3vhyCIqlPDVw692QFgHg_M4CRXBMwSPzru4E1I/edit?usp=sharing17:56
JayFTIL Our API happily lets you specify the UUID when creating many objects (including node)18:12
mnasiadkaGood evening Ironic18:29
mnasiadkaAny chance to have https://review.opendev.org/c/openstack/networking-generic-switch/+/907551 reviewed? We're using that in a couple of envs already, but would be nice to get it in ;-)18:30
TheJuliaJayF: indeed! Useful for backup and restore via the API18:31
JayFmasghar: Hey, is there any outstanding work items in Inspector migration?18:49
JayFAny ideas on https://review.opendev.org/c/openstack/ironic-lib/+/908119 would be helpful19:36
JayFtl;dr a couple of unit tests are failing because we expect strings, but bytes are returned from the library ... but only in python 3.619:36
cidI'm still seeking opinions/feedback on the best direction for the bios patch set, if any's got a minute or two.19:57
cidSpecifically about how the configuration should look and behave.19:57
cidhttps://review.opendev.org/c/openstack/ironic/+/92224319:57
cidJayF already left some feedback 19:57
cido/19:58

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!