| opendevreview | Jacob Anders proposed openstack/ironic master: Unify non-BMC firmware updates under batched state machine https://review.opendev.org/c/openstack/ironic/+/999720 | 05:23 |
|---|---|---|
| opendevreview | Jacob Anders proposed openstack/ironic master: Document batched firmware updates and add release note https://review.opendev.org/c/openstack/ironic/+/999721 | 05:23 |
| opendevreview | Jacob Anders proposed openstack/ironic master: Refactor firmware update SimpleUpdate submission and error dispatch https://review.opendev.org/c/openstack/ironic/+/999230 | 06:27 |
| opendevreview | Jacob Anders proposed openstack/ironic master: Unify non-BMC firmware updates under batched state machine https://review.opendev.org/c/openstack/ironic/+/999720 | 06:27 |
| opendevreview | Jacob Anders proposed openstack/ironic master: Document batched firmware updates and add release note https://review.opendev.org/c/openstack/ironic/+/999721 | 06:27 |
| opendevreview | Merged openstack/ironic bugfix/38.0: Fix fast-track deployment failure with autodetect deploy interface https://review.opendev.org/c/openstack/ironic/+/999870 | 07:28 |
| zigo | JayF: Hi there! Are versions <= Flamingo unaffected by CVE-2026-71201, or is it that you consider it not grave, and so will not backport ? | 09:33 |
| iurygregory | good morning ironic o/ | 11:06 |
| cardoe | vmedia busted? | 12:37 |
| dtantsur | https://zuul.opendev.org/t/openstack/builds?job_name=ironic-tempest-uefi-redfish-vmedia&project=openstack/ironic? | 12:39 |
| dtantsur | looks inconclusive | 12:39 |
| cardoe | Just everything I pushed yesterday failed on it and then rechecks did as well. Even the patch that was just docs and code comments and I renamed a few variables to make things more clear. | 12:42 |
| opendevreview | Yorick proposed openstack/sushy master: system: guard HttpBootUri writes against iDRAC 10 removal https://review.opendev.org/c/openstack/sushy/+/999743 | 13:20 |
| TheJulia | good orning | 13:24 |
| TheJulia | morning | 13:24 |
| JayF | zigo: if you're talking the one from yesterday, the ossa describes the affected versions correctly. The CVE might be incorrect depending on how quickly they update it | 13:33 |
| zigo | JayF: My understanding is that for OSSA-2026-033 aka CVE-2026-71201 only Gazpacho is affected indeed. Though I'm talking about OSSN-0104 where I can read: | 13:35 |
| zigo | "The following patches are backwards incompatible and were not merged into stable branches" | 13:35 |
| zigo | and there, I'm unsure what to do. | 13:35 |
| zigo | Oh, yeah, when I wrote that earlier, I wasn't sure about OSSA-2026-033 indeed, but I think I understood since ! :) | 13:36 |
| * TheJulia attempts to wake up more | 13:41 | |
| cardoe | janders: you work on MultipartHttpPush? | 13:52 |
| TheJulia | Regarding CI failures, it is sure looking like somewhere deep in pip installation when installing tempest that things go completely sideways :\ | 13:53 |
| cardoe | Yeah. It’s the fetch of the constraints | 13:53 |
| cardoe | We need to update packages and things that devstack and tempest do. I’ve been trying to do so but I’ve gotten stuck. | 13:54 |
| TheJulia | the error for those interested https://www.irccloud.com/pastebin/kH17eXit/ | 13:55 |
| TheJulia | stuck how so? | 13:55 |
| cardoe | stephenfin pointed out its related to how we reach into tox’s paths instead of using our own virtualenv. | 13:56 |
| dtantsur | I saw this pip error in Metal3 as well. Seems transient. | 13:56 |
| TheJulia | cardoe: when you say we, you mean devstack? | 13:57 |
| cardoe | Yes sorry. | 13:58 |
| cardoe | It’s not ironic specific. | 13:58 |
| cardoe | Need more spoons and multi-yak shaver to get it done. | 13:58 |
| TheJulia | so, Interesitngly enough, the tempest install also forces a downgrade of tox 8( | 14:01 |
| JayF | zigo: The ossn basically lays it out. It's a security fix that cannot be done in a stable non-breaking way for a back port, so we didn't backport it. | 14:09 |
| JayF | I would suggest with a package maintainer hat on that you not back port as well | 14:09 |
| mnaser | appreciate eyes on https://review.opendev.org/c/openstack/ironic/+/998711 and https://review.opendev.org/c/openstack/sushy/+/999741 please | 14:13 |
| dtantsur | also backport please https://review.opendev.org/q/Iec722dd65a27a7f0043f8ed5e0126929960f8f8a | 14:14 |
| TheJulia | are we not using ironic-week-prio ? | 14:15 |
| dtantsur | hmm, indeed, forgot on these ones | 14:17 |
| TheJulia | I just ask because I've been struggling to get folks to review prio items for a while and there were 36 items on ther eearlier | 14:19 |
| TheJulia | s/ther/there/ | 14:19 |
| dtantsur | they accummulate rapidly.. | 14:24 |
| TheJulia | Eh, sometimes yes | 14:24 |
| TheJulia | but I landed a number last week and its climbed back up too | 14:25 |
| opendevreview | Merged openstack/ironic bugfix/37.0: security: Fix poisoning of the allowed origin list https://review.opendev.org/c/openstack/ironic/+/998017 | 14:35 |
| TheJulia | Question: has anyone submitted anything to OpenInfra Days NA ? | 15:03 |
| TheJulia | ugh, looks like ci is just in super bad state upon my lance at the dashboard | 15:06 |
| JayF | this is the first I'm finding it has a date set | 15:06 |
| JayF | How is both the call for papers still open *and* they have presentations listed? | 15:08 |
| JayF | https://us06web.zoom.us/j/81440356009?pwd=x7wiYOdHP2NzLv3714yyzFhUeNlNC6.1 cid and I will be doing some group reviewing until the top of the hour (about 1700 UTC) | 16:16 |
| JayF | folks are welcome to join | 16:16 |
| JayF | rpittau: https://review.opendev.org/c/openstack/ironic/+/997366/10#message-a4783c18ee3acb8dd19a1e0694d7b7969302f880 I'm fairly sure I'm missing something here; but the release note seems to describe different behavior than what was happening in the "before" diff? /me suspects there's a nuance he's missing | 16:32 |
| opendevreview | Doug Goldstein proposed openstack/ironic master: Deprecate list-style args for inspection rule operations https://review.opendev.org/c/openstack/ironic/+/1000007 | 16:49 |
| opendevreview | Doug Goldstein proposed openstack/ironic master: Document inspection rule operation arguments explicitly https://review.opendev.org/c/openstack/ironic/+/1000008 | 16:49 |
| cardoe | JayF: I'm jumping between calls and cannot join you guys today... but would you mind asking cid to look at the above? I believe he wrote the inspection rules bit originally. | 16:50 |
| JayF | he can see that too, you pinged him :D | 16:50 |
| cardoe | I realized that we actually released that feature in 2025.1 so I'm going with deprecation instead. | 16:50 |
| JayF | althoguh I'll admit we both worked on the inspection rules with nearly-zero context | 16:50 |
| JayF | TheJulia: please re-evaluate your -1 on https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/998389 | 16:51 |
| cardoe | Well I've got 10 minutes before my next call so I could join ya for 10 minutes. But I suspect you don't wanna talk inspection rules. | 16:51 |
| JayF | we're close to wrapping tbh | 16:51 |
| JayF | and just did a big context dump on policy | 16:51 |
| cardoe | oooo policy | 16:51 |
| TheJulia | JayF: will do when I'm off my current call | 16:52 |
| cardoe | That's something I've got on my real soon now backlog. | 16:52 |
| JayF | TheJulia: same here https://review.opendev.org/c/openstack/ironic/+/998385 | 16:52 |
| opendevreview | Merged openstack/ironic master: Utilize KernelCommmandLine.parse() instead of ironic.common.utils.parse_kernel_params https://review.opendev.org/c/openstack/ironic/+/992309 | 17:05 |
| TheJulia | JayF: I pinged spotz and she asked if you could provide anymore context or a link, its apparently her first time driving an event with sessionize | 17:14 |
| TheJulia | so a different view may be what is needed | 17:14 |
| JayF | TheJulia: *blink* | 17:14 |
| JayF | TheJulia: I am missing context on that comment? | 17:14 |
| TheJulia | JayF: w/r/t oid NA showing talks already while the cfp is open | 17:15 |
| TheJulia | She is going to try and jump in here momentarily | 17:15 |
| JayF | ah okay | 17:15 |
| JayF | It's not a big deal, I just didn't even know that had gotten a date yet | 17:15 |
| JayF | and it's soon | 17:15 |
| JayF | but it's also in the same state as my BFF so I got two reasons to go lol | 17:15 |
| TheJulia | I was thinking of submitting FWIW | 17:16 |
| JayF | TheJulia: I went to check to the dates with Vanessa to ensure I could travel and discovered I was on the 2024 days page | 17:17 |
| JayF | lol | 17:17 |
| JayF | WHOOPS | 17:17 |
| JayF | https://linuxfoundation.regfox.com/openinfra-day-north-america okay that's better lol | 17:18 |
| TheJulia | okay, that explains a LOT | 17:19 |
| JayF | yeah basically everything lol | 17:19 |
| * TheJulia wonders how many NA contributors we could collect | 17:20 | |
| JayF | I kinda feel like a "wow, security huh?" talk would go over well | 17:21 |
| TheJulia | ++ | 17:21 |
| JayF | just VMT lookback over the last 12-18 months + some basics about the process, good, bad, etc | 17:21 |
| TheJulia | +1000 | 17:21 |
| opendevreview | Julia Kreger proposed openstack/ironic-python-agent master: Enforce checksum algorithm validation for Nvidia NIC firmware https://review.opendev.org/c/openstack/ironic-python-agent/+/1000018 | 17:39 |
| opendevreview | Julia Kreger proposed openstack/ironic-python-agent master: Change md5_enabled default to False https://review.opendev.org/c/openstack/ironic-python-agent/+/1000019 | 17:39 |
| opendevreview | Merged openstack/ironic master: CI: collect libvirt/qemu logs in the Metal3 BMO job https://review.opendev.org/c/openstack/ironic/+/998807 | 17:47 |
| opendevreview | Merged openstack/ironic stable/2026.1: Fix Redfish inspection without Storage API https://review.opendev.org/c/openstack/ironic/+/999809 | 17:55 |
| opendevreview | Merged openstack/ironic bugfix/37.0: Fix Redfish inspection without Storage API https://review.opendev.org/c/openstack/ironic/+/999811 | 17:55 |
| TheJulia | JayF: Regarding https://review.opendev.org/c/openstack/ironic/+/992542 node.py, I guess we're doing the additional layer of policy validation later on because it is after the version checks, we can move up and merge in, I guess. I think its all mental modeling related | 17:55 |
| opendevreview | Merged openstack/ironic bugfix/38.0: Fix Redfish inspection without Storage API https://review.opendev.org/c/openstack/ironic/+/999810 | 17:55 |
| JayF | my comment was basically driven by "I don't think the ordering matters, but if it does I don't fully understand" | 17:56 |
| JayF | and given it was duping an if, worth the ask :) | 17:56 |
| TheJulia | I could see moving it up I guess | 17:57 |
| JayF | I'm less concerned about it needing change and more making sure my mental model of the method was right | 17:58 |
| JayF | my vote is already upgraded to a +2 fwiw :D | 17:58 |
| opendevreview | Merged openstack/ironic-python-agent-builder master: Write container options as comma separated lists https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/998389 | 17:58 |
| TheJulia | well, I'll revise it real quick then | 17:58 |
| opendevreview | Julia Kreger proposed openstack/ironic master: Extend the RBAC policy matrix to steps https://review.opendev.org/c/openstack/ironic/+/992542 | 18:05 |
| opendevreview | Verification of a change to openstack/ironic master failed: doc: Fix the container-based steps guide https://review.opendev.org/c/openstack/ironic/+/998387 | 18:07 |
| opendevreview | Merged openstack/ironic master: Fix the types of the agent_containers options https://review.opendev.org/c/openstack/ironic/+/998385 | 18:15 |
| opendevreview | Julia Kreger proposed openstack/ironic master: Document ansible deploy interface SSH host key checking https://review.opendev.org/c/openstack/ironic/+/1000023 | 18:27 |
| opendevreview | Merged openstack/ironic-python-agent stable/2025.2: security: fix NTP command handling https://review.opendev.org/c/openstack/ironic-python-agent/+/998489 | 18:34 |
| TheJulia | JayF: w/r/t the ramdisk endpoints stuff, happy to do the ossn if you want | 18:58 |
| opendevreview | Merged openstack/ironic bugfix/34.0: Portgroup shard filter bypasses scope to project https://review.opendev.org/c/openstack/ironic/+/999765 | 19:16 |
| opendevreview | Merged openstack/ironic master: Drop the unused container_conf_file option https://review.opendev.org/c/openstack/ironic/+/998386 | 19:25 |
| JayF | TheJulia: I can or you can, no rush though because at this point we're likely waiting until Tuesday to advisory it anyway (VMT policy -> no advisories on Fri-Mon) | 20:14 |
| TheJulia | Oh yeah, I'd sort of love to see the patch get traction as well in the mean time. I'll likely try to whip something up tomorrow, although I'm starting to feel a little udner the weather and hopefully that is not a sign I'm getting a cold or something | 20:15 |
| JayF | The outcome of this conversation was gonna decide if I take today-afternoon or tomorrow-afternoon off | 20:18 |
| JayF | this means today-afternoon wins | 20:19 |
| JayF | lol | 20:19 |
| JayF | o/ | 20:19 |
| TheJulia | have a great afternoon! | 20:19 |
| opendevreview | Merged openstack/ironic-python-agent master: security: Fix the container allowlist not being enforced https://review.opendev.org/c/openstack/ironic-python-agent/+/998375 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Prevent container steps from shadowing existing steps https://review.opendev.org/c/openstack/ironic-python-agent/+/998376 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Only honor container step priorities while cleaning https://review.opendev.org/c/openstack/ironic-python-agent/+/998377 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Accept whitespace separated container options https://review.opendev.org/c/openstack/ironic-python-agent/+/998378 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Check that the configured container runtime is present https://review.opendev.org/c/openstack/ironic-python-agent/+/998379 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Report errors reading the container steps file https://review.opendev.org/c/openstack/ironic-python-agent/+/998380 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Ignore the transport prefix when matching allowed containers https://review.opendev.org/c/openstack/ironic-python-agent/+/998381 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Drop the unused container_conf_file option https://review.opendev.org/c/openstack/ironic-python-agent/+/998382 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Rename container_clean_step to generic_container_step https://review.opendev.org/c/openstack/ironic-python-agent/+/998383 | 21:57 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Verify registry TLS by default https://review.opendev.org/c/openstack/ironic-python-agent/+/999725 | 21:57 |
| opendevreview | Doug Goldstein proposed openstack/ironic master: fix runbook create notifications https://review.opendev.org/c/openstack/ironic/+/1000050 | 22:10 |
| opendevreview | Doug Goldstein proposed openstack/ironic master: Allow disable_ramdisk to be updated via runbook PATCH https://review.opendev.org/c/openstack/ironic/+/1000059 | 23:15 |
| opendevreview | Jay Jahns proposed openstack/ironic master: Redfish: retry transient 409 conflict on power-on https://review.opendev.org/c/openstack/ironic/+/1000060 | 23:25 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!