Monday, 2026-08-31

opendevreviewTakashi Kajinami proposed openstack/ironic master: Validate [glance] allowed_direct_url_schemes  https://review.opendev.org/c/openstack/ironic/+/100301001:57
opendevreviewTakashi Kajinami proposed openstack/ironic master: Validate [glance] allowed_direct_url_schemes  https://review.opendev.org/c/openstack/ironic/+/100301003:48
*** jlvillal6 is now known as jlvillal12:40
TheJuliagood morning13:07
JayFFYI, I'm on a sick day today13:24
lroussarie[m]Good morning,... (full message at <https://matrix.org/oftc/media/v1/media/download/AdGn1TcLYAB_FD6tvybkJNHcI--971F4xsorIyPPfouoh1HZZ76XCJk-iqO8mjqogk4wsQ_48ehsFyG6b2W8OeBCegoB_CmwAG1hdHJpeC5vcmcveGV0SXBTQ0JpWnJUZGVmSWRZWmZiUWhP>)13:33
lroussarie[m]I saw that TheJulia started an implementation in 2019-2020 (changes 688581, 688977, 711853)... (full message at <https://matrix.org/oftc/media/v1/media/download/AXi2E3y8EvUfDiooMqy6ymSlHY1IymfJNMbkgLUCyaj7KvhwHeB2dFSjgCyBbmu_V3E_6cLLx9Zx7Cu32dOwCuhCegoB_QAgAG1hdHJpeC5vcmcvU0FNcVBnY1V0UlNSeUVXeUFteE1QeEh6>)13:33
TheJuliaJayF: feel better!13:34
TheJulialroussarie[m]: You may want to try shorter messages, your message are getting truncated and replaced with giant links13:34
TheJuliaAhh, yes, kexec13:38
lroussarie[m]TheJulia: yes ! I have been working on kexec support in ironic for a POC with baremetal-operator / ironic / IPA13:40
TheJuliaSo, kexec often gets pushed by folks who want to save that final reboot cycle, which is not as generally applicable, but brings complexity in that happening. For example, how do you know if your image is actually bootable if you never actually boot. Its much more of an advanced user's feature13:40
TheJuliaGenerally specs are advisable, I think kexec always seemed like a "smaller" idea to implement, but if you'd like to write up a spec to explain your throught process, I would be happy to review it.13:41
TheJuliaThe other issue is the underlying security teardown, in our model we need to rip the machine off the provisioning network and place it on a tenant network. That may be okay with kexec, but we have no real way of knowing if kexec "worked" short of inventing a new "I'm still here" or "this is expected to fail" connectivity check with a super short timeout.13:43
TheJuliaOverall, wouldn't be a bad idea to make it globally configurable as well, I'm sure some operators who are super security concious will reject it's use because they will want to ensure the machine powers off before handing it over to the user.13:43
TheJulialroussarie[m]: fwiw, I think the carriage returns in your messages are what caused matrix to sending links13:46
TheJuliaWell, now adays, its just "new lines"13:46
opendevreviewVerification of a change to openstack/ironic master failed: json-rpc: Clarify upgrade impact for ksa 5.17.0  https://review.opendev.org/c/openstack/ironic/+/100285413:48
opendevreviewVerification of a change to openstack/ironic bugfix/38.0 failed: Adopt port physical network for empty portgroups  https://review.opendev.org/c/openstack/ironic/+/100283513:51
lroussarie[m]TheJulia: ok,thank you for your feedback on kexec. I saw your started some implementation in 2019-2020 but it seems like the work was stopped after that. Is there any special reason for that ?13:53
TheJuliaLack of interest and lack of time for the most part13:55
TheJulia2019->2020 was also a weird time.13:55
TheJuliaAnd I'm not sure anyone remembers 2020 after... April or May.13:56
TheJuliaAnd suddenly it was 2022.13:56
TheJuliaoh, I remember why I backed away from it! You loose secure boot when you kexec13:59
TheJuliaand jurisdictions starting to implement manditory secure boot for some workload types meant it would be self-excluding13:59
opendevreviewMerged openstack/ironic bugfix/37.0: Adopt port physical network for empty portgroups  https://review.opendev.org/c/openstack/ironic/+/100283614:06
lroussarie[m]TheJulia: yes, 2020 was not so funny ! 14:21
lroussarie[m]concerning secure boot, kexec now supports it14:21
opendevreviewMerged openstack/ironic bugfix/38.0: Make AutoDetectDeploy act more consistently  https://review.opendev.org/c/openstack/ironic/+/100283814:26
TheJulialroussarie[m]: Interesting! Then seems do-able then14:28
TheJuliaDid anyone intend to be the bug deputy for this week?14:28
TheJuliaWell, this past week. Looks like we failed to name someone last week during the meeting14:28
TheJuliaiurygregory: https://bugs.launchpad.net/sushy/+bug/2164964 <- why are we loading the message registries all the time?!14:30
TheJuliaat least for getting the tasks,14:30
TheJuliaThat seems like the risk of the registry changing (afaik, not supposed to really happen, but we *have* seen it, but also seems less important overall to just getting a task state14:31
iurygregoryTheJulia, seems like it was done when we implemented TaskMonitor14:35
iurygregorymaybe in the standard it mentions about registries?14:35
iurygregorywe probably forgot to move to lazy_registries when we did for other resources...14:35
TheJuliayou can get errors/messages matching the registry, I guess using cache is fine unless we can't match it then we should retry14:36
TheJulia(which I would hope is the behavior already)14:36
cardoeI was trying to understand it myself as well and I couldn't14:37
TheJuliaThe last time I looked deep at registry stuff was... 2022 timeframe14:38
iurygregoryI only noticed we didn't change to lazy because people were complaining about some extra time in firmware updates ...14:39
opendevreviewVerification of a change to openstack/ironic stable/2026.1 failed: Adopt port physical network for empty portgroups  https://review.opendev.org/c/openstack/ironic/+/100283714:53
TheJulia#startmeeting ironic15:01
opendevmeetMeeting started Mon Aug 31 15:01:07 2026 UTC and is due to finish in 60 minutes.  The chair is TheJulia. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'ironic'15:01
TheJuliao/15:01
* TheJulia distributes coffeeeeeeee15:01
iurygregoryo/15:01
estherd[m]o/15:01
* TheJulia puts out some cans of diet jolt cola15:01
dtantsuro/15:01
TheJulia(Yes, someone makes Jolt cola again in north america)15:02
* iurygregory has no idea what is jolt cola lol15:03
TheJuliaiurygregory: Go watch the movie "Hackers" from 199515:03
TheJuliaThis will answer your question ;)15:03
iurygregoryohhh I've watched, but it's been a long long time ...15:03
TheJuliaAnyhow! Looks like we're barely at Quorum today15:03
TheJuliaIf memory serves, a couple folks are out today/this week15:04
TheJuliaI guess we'll just run down our agenda since it seems like it was a quiet week last week!15:04
TheJulia#link https://wiki.openstack.org/wiki/Meetings/Ironic#Agenda_for_August_31_202615:04
cido/15:04
TheJulia#topic Announcements/Reminders 15:04
TheJuliaPlease remember the standing reminder to review ironic-week-prio items and tag items which you feel are ready for review.15:05
TheJulia#link https://tinyurl.com/ironic-weekly-prio-dash15:05
TheJuliaWe are at week R-4 of the 2026.2 Hibiscus Release Schedule.15:05
TheJulia#link https://releases.openstack.org/hibiscus/schedule.html15:05
TheJuliaThis means cycle highlights are due this week.15:05
iurygregoryI will take a look at it15:06
TheJuliaOne last item to make note of, I expect I'll be unavailable on Friday, and I'll be in China next week.15:06
iurygregoryand ask folks to review15:06
TheJuliaDoes anyone else have anything they wish to announce or remind folks of?15:06
iurygregoryI will be out next monday Sep 7, public holiday for me15:07
clifsame here, labor day in US15:07
TheJuliaShall we cancel our meeting for next week?15:07
TheJuliaI'll be in china, so... *shrug*15:08
iurygregoryI would say it makes sense15:08
TheJuliaIf nobody objects in the next little bit, I'll send an email out shortly.15:08
TheJulia#agreed Sept 7th meeting is cancelled - Julia to send the email.15:09
TheJuliaOnward!15:09
TheJulia#topic Working Group Updates15:09
TheJuliaiurygregory: anything for asyncio this week?15:09
iurygregoryno updates, still looking at code15:09
TheJuliaok15:09
TheJuliaFor the security core security team, I don't believe there are any updates for the past week.15:10
TheJuliaerr15:10
TheJuliaironic core security team15:10
TheJuliaClearly I need a jolt cola!15:10
TheJuliaMoving onward!15:10
TheJuliaI put one discussion topic in, asking who would do the highlights. Iury your volunteering, correct?15:10
TheJulia#topic Discussion Topics15:11
iurygregoryyeah15:11
TheJulia#agreed iurygregory to look at cycle highlights!15:11
TheJuliaThanks Iury!15:11
TheJulia#topic Bug Deputy Updates15:11
cidI checked this morning and just before the meeting, there were 2 new bugs this week15:12
cid#link https://bugs.launchpad.net/sushy/+bug/216496415:12
ciduse lazy registries for get_task_monitor15:12
cid#link https://bugs.launchpad.net/ironic/+bug/216491615:12
cidvalidate_driver_interfaces can issue a synchronous HEAD request to image_source15:12
cidIt's not clear to me if this one ^^ just become public or was filed today15:12
cid*not today. on the same 24th15:13
TheJuliaYeah, it got semi-discussed during the last meeting. I forgot about it, I think I was going to whip up a "fix"15:13
cidI planned to as well. But if it was private before, it may already have a patch file somewhere15:14
cidBut that's all the Bug deputy updates and I can take it next week unless someone else wants to15:14
opendevreviewVerification of a change to openstack/ironic master failed: json-rpc: Rename TLS options  https://review.opendev.org/c/openstack/ironic/+/100285315:15
TheJuliaits a pretty mild issue15:15
TheJuliatbh15:15
TheJuliaAnyway! would anyone like to volunteer to be the bug deputy in advance of our next meeting, I believe that would be september 11th15:16
iurygregoryI can15:17
TheJulia#agreed iurygregory volunteers to do a bug deputy sweep before the meeting on the 11th!15:17
TheJuliaThanks Iury!15:17
TheJuliaOnward!15:18
TheJulia#topic Open Discussion15:18
iurygregorySep 7 till 11 right?15:18
TheJuliaiurygregory: yes, I'll try to do a pass before my end of week just in case15:18
iurygregoryok15:18
TheJuliaSo, I forgot to mention the PTG. It is coming soon!15:19
TheJuliaAn etherpad has already been started, please add items you want to discuss or which you feel is important to be discussed during the PTG.15:19
TheJulia#link https://etherpad.opendev.org/p/ironic-ptg-2027.115:19
TheJuliaDoes anyone have anything else to discuss during open discussion?15:21
TheJulia#topic Who shall run our next meeting (Sept 11th)?15:24
iurygregorySep11 is a Friday..15:24
TheJuliaerr15:25
iurygregorywouldn't be Sep 14?15:25
TheJuliadoh15:25
TheJulia#undo15:25
opendevmeetRemoving item from minutes: #topic Who shall run our next meeting (Sept 11th)?15:25
TheJulia#topic Who shall run our next meeting (Sept 14th)?15:25
iurygregoryI can15:25
TheJuliaYour right, I clearly need to wake up!15:25
TheJulia#agreed Iury to run our next meeting on September 14th.15:25
TheJuliaThanks Iury!15:25
TheJuliaAnything else before I close the meeting for this week?15:25
TheJuliaThanks folks!15:27
TheJulia#endmeeting15:27
opendevmeetMeeting ended Mon Aug 31 15:27:24 2026 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:27
opendevmeetMinutes:        https://meetings.opendev.org/meetings/ironic/2026/ironic.2026-08-31-15.01.html15:27
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/ironic/2026/ironic.2026-08-31-15.01.txt15:27
opendevmeetLog:            https://meetings.opendev.org/meetings/ironic/2026/ironic.2026-08-31-15.01.log.html15:27
iurygregorytks TheJulia 15:27
opendevreviewMerged openstack/ironic bugfix/38.0: Adopt port physical network for empty portgroups  https://review.opendev.org/c/openstack/ironic/+/100283515:30
opendevreviewVerification of a change to openstack/ironic master failed: json-rpc: Rename TLS options  https://review.opendev.org/c/openstack/ironic/+/100285315:52
cardoeDo we need to make an Ironic 35.0.2 tag?16:28
TheJuliacardoe: huh?16:31
cardoeLooks like yes. And there's a patch about to land so I'll wait.16:31
cardoeI'm reading the security advisories and we say versions >=35.0.2,<36 are unaffected but there's no such 35.0.216:31
cardoeAs a result my usage of stable/2026.1 cannot get GitHub Security whatever to be quiet.16:32
ildikoviurygregory: Hi, I'm working with fungi on the improving contributor experience effort. I wasn't able to attend the meeting where he shared our analysis after Gazpacho, but I was able to caught up on the logs.I remember you mentioned that you're interested in exploring ways to make it more visible where the Ironic team tracks priorities.16:38
TheJuliafolks, can we get a review on https://review.opendev.org/c/openstack/ironic/+/1002940 this morning, running tests on master branch screams deprecation errors this should fix16:38
ildikoviurygregory: Following up on that I'm pinging you to point you to a patch to add review templates to the Project Team Guide: https://review.opendev.org/c/openstack/project-team-guide/+/100279616:38
iurygregoryildikov, hey o/16:39
iurygregoryack will take look16:39
ildikoviurygregory: The last one on the page is intended as a first response on new changes, could even be automated with a Gerrit hook. And it has a specific section to call out where priorities are tracked.16:40
ildikoviurygregory: awesome, thank you. I'm curious what you think about it!16:41
iurygregoryfinishing a few things, will read it later today o/16:41
opendevreviewJulia Kreger proposed openstack/ironic master: Add short timeout for image URL validation  https://review.opendev.org/c/openstack/ironic/+/100308616:57
TheJuliacid: ^^17:00
cid\o/17:01
TheJuliaokay, https://review.opendev.org/c/openstack/ironic/+/1002837 failing seems... odd, when some of the test jobs actually succeeded :\18:08
opendevreviewMerged openstack/ironic master: ovo: Drop deprecated item_cls argument  https://review.opendev.org/c/openstack/ironic/+/100294018:37
opendevreviewTimon Schnell proposed openstack/ironic-python-agent master: Erase frozen SATA SSDs by discarding them  https://review.opendev.org/c/openstack/ironic-python-agent/+/100132318:48
opendevreviewMerged openstack/ironic stable/2026.1: Adopt port physical network for empty portgroups  https://review.opendev.org/c/openstack/ironic/+/100283719:27
opendevreviewMerged openstack/ironic master: json-rpc: Rename TLS options  https://review.opendev.org/c/openstack/ironic/+/100285321:25
iurygregoryTheJulia, regarding the registries in https://review.opendev.org/c/openstack/sushy/+/1002222 if I understood what you mentioned earlier, you also want https://github.com/openstack/sushy/blob/master/sushy/main.py#L658 to have the cache decorator (utils.cache_it) ?22:01
TheJulia... I think we likely should, because we shouldn't be trying to get all the registries, and AFAIK they really shouldn't be changing drastically22:07
iurygregoryack o/ going to update the patch22:13
TheJuliaThe only case where it could bite us, I guess... is post-upgrade of the bmc bios firmware, but even then they are not really supposed to "change" if I'm recalling correctly22:20
iurygregoryack22:40
iurygregorybut post-upgrade we will request a new client session, so we should be fine for most of the cases I think22:41
TheJuliaIn theory, yeah22:58
opendevreviewMerged openstack/ironic master: Add short timeout for image URL validation  https://review.opendev.org/c/openstack/ironic/+/100308623:09
opendevreviewIury Gregory Melo Ferreira proposed openstack/sushy master: Use lazy registries for TaskMonitor  https://review.opendev.org/c/openstack/sushy/+/100222223:19

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!