Monday, 2019-11-25

*** rcernin has quit IRC00:17
*** rcernin has joined #openstack-nova00:17
*** tosky has quit IRC00:29
openstackgerritEric Xie proposed openstack/nova master: Fix incorrect command examples  https://review.opendev.org/69583200:45
*** Liang__ has joined #openstack-nova01:15
*** ircuser-1 has quit IRC01:17
*** ociuhandu has joined #openstack-nova01:25
*** ociuhandu has quit IRC01:32
*** nanzha has joined #openstack-nova01:56
*** ociuhandu has joined #openstack-nova02:02
*** yedongcan has joined #openstack-nova02:05
*** ociuhandu has quit IRC02:06
*** smcginnis has joined #openstack-nova02:10
*** ociuhandu has joined #openstack-nova02:19
*** ociuhandu has quit IRC02:24
*** chenhaw has joined #openstack-nova02:30
*** macz has joined #openstack-nova02:54
*** macz has quit IRC02:59
*** brinzhang has joined #openstack-nova03:07
*** ociuhandu has joined #openstack-nova03:33
*** ociuhandu has quit IRC03:40
*** vesper11 has quit IRC03:45
*** vesper11 has joined #openstack-nova03:47
*** ricolin has joined #openstack-nova03:54
*** slaweq has joined #openstack-nova03:58
*** davee__ has joined #openstack-nova04:03
*** davee_ has quit IRC04:05
*** brinzhang_ has joined #openstack-nova04:11
*** brinzhang has quit IRC04:14
*** ociuhandu has joined #openstack-nova04:14
*** ociuhandu has quit IRC04:22
*** ociuhandu has joined #openstack-nova04:22
*** ociuhandu has quit IRC04:23
*** ociuhandu has joined #openstack-nova04:25
*** ociuhandu has quit IRC04:34
*** rchurch has quit IRC04:35
*** ociuhandu has joined #openstack-nova04:36
*** nanzha has quit IRC04:40
*** nanzha has joined #openstack-nova04:41
*** ociuhandu has quit IRC04:41
*** macz has joined #openstack-nova04:54
*** ociuhandu has joined #openstack-nova04:54
*** macz has quit IRC04:58
*** ociuhandu has quit IRC04:59
*** nanzha has quit IRC05:00
*** nanzha has joined #openstack-nova05:02
*** brinzhang has joined #openstack-nova05:08
*** mkrai has joined #openstack-nova05:09
*** brinzhang_ has quit IRC05:10
openstackgerritMerged openstack/nova master: api-guide: flesh out BUILD and ACTIVE server create transitions  https://review.opendev.org/69577105:12
openstackgerritMerged openstack/nova master: api-guide: fix the file injection considerations drift  https://review.opendev.org/69577305:13
*** udesale has joined #openstack-nova05:27
*** ratailor has joined #openstack-nova05:30
*** ociuhandu has joined #openstack-nova05:30
*** ociuhandu has quit IRC05:35
*** pots has quit IRC05:39
*** pots has joined #openstack-nova05:39
*** brinzhang_ has joined #openstack-nova05:40
*** brinzhang has quit IRC05:43
*** jistr has quit IRC05:51
*** jistr has joined #openstack-nova05:56
*** nanzha has quit IRC06:00
*** jistr has quit IRC06:06
*** jistr has joined #openstack-nova06:06
*** brinzhang has joined #openstack-nova06:10
*** nanzha has joined #openstack-nova06:12
*** brinzhang_ has quit IRC06:13
*** macz has joined #openstack-nova06:14
*** macz has quit IRC06:19
*** nanzha has quit IRC06:24
openstackgerritOpenStack Proposal Bot proposed openstack/nova master: Imported Translations from Zanata  https://review.opendev.org/69471706:30
*** nanzha has joined #openstack-nova06:36
*** dpawlik has joined #openstack-nova06:46
*** brinzhang_ has joined #openstack-nova06:56
*** brinzhang has quit IRC06:59
*** rcernin has quit IRC07:09
*** lpetrut has joined #openstack-nova07:16
*** awalende has joined #openstack-nova07:16
*** dtantsur|afk is now known as dtantsur07:17
*** yedongcan has left #openstack-nova07:17
*** slaweq has quit IRC07:18
*** links has joined #openstack-nova07:20
*** awalende has quit IRC07:21
*** nanzha has quit IRC07:22
*** jraju__ has joined #openstack-nova07:27
*** links has quit IRC07:28
*** jangutter has joined #openstack-nova07:33
*** yedongcan has joined #openstack-nova07:34
*** slaweq has joined #openstack-nova07:35
*** ociuhandu has joined #openstack-nova07:38
*** ociuhandu has quit IRC07:44
*** nanzha has joined #openstack-nova08:00
*** tkajinam has quit IRC08:06
*** maciejjozefczyk has joined #openstack-nova08:07
*** tesseract has joined #openstack-nova08:16
bauzasgood morning Nova08:19
*** tosky has joined #openstack-nova08:21
*** ccamacho has joined #openstack-nova08:25
*** ccamacho has quit IRC08:25
*** ccamacho has joined #openstack-nova08:25
*** damien_r has joined #openstack-nova08:29
*** macz has joined #openstack-nova08:29
*** awalende has joined #openstack-nova08:30
*** mkrai has quit IRC08:31
*** rpittau|afk is now known as rpittau08:33
*** macz has quit IRC08:34
*** awalende has quit IRC08:34
*** ociuhandu has joined #openstack-nova08:35
*** ociuhandu has quit IRC08:40
*** ratailor_ has joined #openstack-nova08:41
*** awalende has joined #openstack-nova08:43
*** ratailor has quit IRC08:43
openstackgerritLee Yarwood proposed openstack/nova master: Remove 'nova-xvpvncproxy'  https://review.opendev.org/68790908:44
lyarwoodstephenfin: ^ hope you don't mind, thought I'd sort out the last few failures as the removal came up in RDO over the weekend.08:45
*** ociuhandu has joined #openstack-nova08:50
stephenfinlyarwood: fine by me, but I think it needs to be rebased again08:53
stephenfin"This change depends on a change that failed to merge."08:53
lyarwoodstephenfin: ah it's the tempest change?08:53
lyarwoodstephenfin: hmm no that's also up to date08:54
lyarwoodweird08:54
*** ralonsoh has joined #openstack-nova08:56
*** brinzhang has joined #openstack-nova08:59
*** nanzha has quit IRC09:00
*** nanzha has joined #openstack-nova09:01
*** brinzhang_ has quit IRC09:01
*** mns96 has joined #openstack-nova09:06
lyarwoodstephenfin: oh that was my bad, I pushed another PS to the tempest change after pushing the nova change, apologies!09:07
lyarwoodrecheked09:07
lyarwoodrechecked*09:07
*** ricolin has quit IRC09:16
*** mkrai has joined #openstack-nova09:32
*** tssurya has joined #openstack-nova09:37
openstackgerritLuyao Zhong proposed openstack/nova-specs master: support live migration with virtual persistent memory  https://review.opendev.org/69586309:38
*** ociuhandu has quit IRC09:40
*** martinkennelly has joined #openstack-nova09:42
*** derekh has joined #openstack-nova09:43
*** Liang__ has quit IRC09:48
*** ociuhandu has joined #openstack-nova09:49
tssuryadansmith: whenever you are awake and have some time, review appreciated on this https://review.opendev.org/#/c/689422/ thanks in advance09:51
*** ratailor__ has joined #openstack-nova09:52
openstackgerritLuyao Zhong proposed openstack/nova-specs master: spec update: virtual persistent memory  https://review.opendev.org/69586809:52
*** ociuhandu has quit IRC09:54
*** ratailor_ has quit IRC09:55
*** noonedeadpunk is now known as noonedeadpunk_09:56
*** noonedeadpunk_ is now known as noonedeadpunk09:56
*** jistr is now known as jistr|afk09:58
*** mkrai has quit IRC10:02
*** takamatsu has quit IRC10:05
*** takamatsu has joined #openstack-nova10:06
openstackgerritElod Illes proposed openstack/nova stable/stein: Use admin neutron client to see if instance has qos ports  https://review.opendev.org/69466810:15
stephenfindansmith: Could I get some input on RPC versioning issues here, when you're online? https://review.opendev.org/#/c/686814/1110:19
*** jistr|afk is now known as jistr10:22
*** ociuhandu has joined #openstack-nova10:31
*** nanzha has quit IRC10:34
*** ociuhandu has quit IRC10:36
*** nanzha has joined #openstack-nova10:38
*** tobias-urdin has joined #openstack-nova10:42
*** brinzhang_ has joined #openstack-nova10:44
*** brinzhang has quit IRC10:47
*** brinzhang has joined #openstack-nova10:49
*** brinzhang_ has quit IRC10:53
*** awalende_ has joined #openstack-nova10:59
stephenfinjohnthetubaguy: Could you weigh in on https://review.opendev.org/#/c/686814/11/nova/network/rpcapi.py@a211, assuming you know RPC better than I do?10:59
*** awalende has quit IRC11:02
*** awalende_ has quit IRC11:03
*** awalende has joined #openstack-nova11:04
*** nanzha has quit IRC11:06
*** nanzha has joined #openstack-nova11:06
*** chenhaw has quit IRC11:07
*** awalende has quit IRC11:11
kashyapstephenfin: Hi, when you get a moment, want to ACK/NACK these? -- https://review.opendev.org/#/c/694821/311:11
kashyapstephenfin: I'd prefer to keep them seperate, although I know they _could_ be squashed.  But if that's the "bone of contention" and you insist, can squash :-)11:12
*** brinzhang_ has joined #openstack-nova11:13
*** pcaruana has joined #openstack-nova11:14
*** brinzhang has quit IRC11:16
*** yedongcan has left #openstack-nova11:22
*** ociuhandu has joined #openstack-nova11:23
*** openstack has joined #openstack-nova11:53
*** ChanServ sets mode: +o openstack11:53
*** irclogbot_3 has joined #openstack-nova11:53
*** mkrai has quit IRC11:54
*** ociuhandu has joined #openstack-nova11:54
*** awalende has joined #openstack-nova11:56
*** nanzha has quit IRC12:03
*** nanzha has joined #openstack-nova12:04
*** mkrai has joined #openstack-nova12:05
*** elod_ is now known as elod12:05
*** mkrai has quit IRC12:14
*** brinzhang has joined #openstack-nova12:14
*** brinzhang_ has quit IRC12:17
*** nanzha has quit IRC12:18
*** mkrai has joined #openstack-nova12:21
*** artom has joined #openstack-nova12:23
*** brinzhang_ has joined #openstack-nova12:29
*** nanzha has joined #openstack-nova12:29
*** dave-mccowan has joined #openstack-nova12:30
sean-k-mooneystephenfin: can you take a look at https://review.opendev.org/#/c/674072/ today if you get a chance12:32
*** mdbooth_ has quit IRC12:32
*** brinzhang has quit IRC12:32
*** ratailor__ has quit IRC12:34
*** dave-mccowan has quit IRC12:35
*** nanzha has quit IRC12:36
*** nanzha has joined #openstack-nova12:37
*** mdbooth has joined #openstack-nova12:40
*** shilpasd has joined #openstack-nova12:40
*** brinzhang has joined #openstack-nova12:43
*** brinzhang_ has quit IRC12:46
*** damien_r has quit IRC12:46
*** brinzhang_ has joined #openstack-nova12:47
*** brinzhang has quit IRC12:48
gibisean-k-mooney, mriedem: hi! do we have live migration functional tests where the server has at least on neutron port? did we added such functional test when the bp neutron-new-port-binding-api has been implemented?12:51
gibis/at least on/at least one/12:51
*** lpetrut has joined #openstack-nova12:53
kashyapgibi: Hi, any chance you can have a look at this low-hanging-fruit (that lets us clean up dead code): https://review.opendev.org/#/q/topic:Bump_min_libvirt_and_QEMU_for_Ussuri+(status:open+OR+status:merged)12:55
sean-k-mooneygibi: i would have to check but i dont think the neutron fixture implements the multiple port bindigns workflow12:56
* kashyap is trying to get things off his plate before his long PTO in Dec 2nd week starts...12:56
sean-k-mooneygibi: so i dont think we ahve live migration test that succeed.12:56
sean-k-mooneywe have 2 negitive tests i belive12:57
gibikashyap: added to my list but no promises for today12:57
kashyapgibi: No worries, this week is fine; it's also advertized on the mailing list, etc.  (FWIW.)12:57
gibisean-k-mooney: cool, then I understand why my test with qos + live migration fails with the neutron fixture with vif plug timeout12:58
gibisean-k-mooney: thanks. I think I will try to enhance the NeutronFixture to cover live migration with qos12:58
tobias-urdindo i understand it correctly that nova refreshes the rbd in the libvirt XML by *adding any new* monitors to the config based on the image backend/connection_info from cinder but doesn't purge old entries? And that this patch tries to make sure it completely refreshes the entries by clearing it and adding the existing ones back in? https://review.opendev.org/#/c/579004/12:59
sean-k-mooneygibi: right i dont think you wll get the network-vif-plugged event13:01
gibisean-k-mooney: yeah, now I was able to make an existing test fail with the same problem by simply adding networks="auto" to the boot request13:03
sean-k-mooneythat would normally be set by the ovs agent once that tap is create by libvirt. so you need to mock out the activate binding api endpoint in the fixture to send the vif plugged event to neutron13:04
gibisean-k-mooney: ack13:04
gibithanks13:04
sean-k-mooney*form neutorn to nova13:05
sean-k-mooneyit would be useful to have that by they way13:05
sean-k-mooneyso thanks for taking a look at adding it13:05
sean-k-mooneygibi: on a related note did any of the neutron folks respond on that tread regarding backport the agent changes for finding the RP13:06
gibisean-k-mooney: not yet. I have a face 2 face discussion with rubasov this morning. I hope he will reply at some point13:07
gibis/have/had/13:07
sean-k-mooneyok i can poke some of the redhat folks too to comment on it13:08
*** tbachman has joined #openstack-nova13:11
*** nanzha has quit IRC13:12
*** brinzhang has joined #openstack-nova13:14
*** brinzhang_ has quit IRC13:16
*** nanzha has joined #openstack-nova13:17
*** mvkr has quit IRC13:19
*** zbr_ has joined #openstack-nova13:19
*** zbr has quit IRC13:22
*** nanzha has quit IRC13:24
*** nanzha has joined #openstack-nova13:30
gibisean-k-mooney: I opened a neutron bug https://bugs.launchpad.net/neutron/+bug/185384013:33
openstackLaunchpad bug 1853840 in neutron "Neutron fails to create bandwidth providers if CONF.host is set" [Undecided,New]13:33
*** damien_r has joined #openstack-nova13:33
sean-k-mooneygibi: thanks flagged this internally they will try to discuss it in the neutron team meeting if they have time13:34
*** mriedem has joined #openstack-nova13:37
openstackgerritMatt Riedemann proposed openstack/nova stable/train: libvirt: check job status for VIR_DOMAIN_EVENT_SUSPENDED_MIGRATED event  https://review.opendev.org/69590013:40
stephenfinsean-k-mooney: Sure, I can do that13:41
stephenfinsean-k-mooney: out of curiosity, am I correct in assuming the firewall implementations found in nova only apply when using nova-network?13:41
sean-k-mooneyyes13:42
stephenfincool13:42
stephenfinDeeeeeelete.13:42
sean-k-mooneyalthough we used to have some anit spoof rules we enforced13:42
sean-k-mooneywe should be useing the noop driver when using neutron for like 3 years at this point13:42
stephenfinthat's what I was thinking13:43
sean-k-mooneyit was ok to haver it enabled for a time but the allowed adress paris extentaion in neutron allow the vm ot have multipel mac and ip addresses on a singel port13:44
sean-k-mooneyand the nova anti spoof rules dont know about those13:44
sean-k-mooneyso since that was added you shoudl disable teh nova ones and rely on neutrons13:44
*** jaosorior has joined #openstack-nova13:47
openstackgerritKashyap Chamarthy proposed openstack/nova master: libvirt: Remove MIN_LIBVIRT_KVM_AARCH64_VERSION  https://review.opendev.org/69590113:48
gibisean-k-mooney: thanks13:48
kashyapWhoops, I linked to the wrong Change-Id, /me updates...13:49
openstackgerritKashyap Chamarthy proposed openstack/nova master: libvirt: Remove MIN_LIBVIRT_KVM_AARCH64_VERSION  https://review.opendev.org/69590113:50
*** KeithMnemonic has joined #openstack-nova13:54
*** nanzha has quit IRC13:56
*** nanzha has joined #openstack-nova13:58
*** brinzhang_ has joined #openstack-nova14:02
*** brinzhang has quit IRC14:04
*** brinzhang_ has quit IRC14:07
openstackgerritBalazs Gibizer proposed openstack/nova master: Support live migration with qos ports  https://review.opendev.org/69590514:08
*** jcosmao has joined #openstack-nova14:09
mriedemdansmith: you might want to weigh in on this https://review.opendev.org/#/c/686814/11/nova/network/rpcapi.py14:10
mriedemthe client rpc api methods being removed are not called from anywhere, but that add_network_to_project one just looks weird since it never used a version14:10
shilpasdgibi: hi, how i can edit agenda for next nova meeting 'https://wiki.openstack.org/wiki/Meetings/Nova#Agenda_for_next_meeting'?14:11
gibishilpasd: you can edit the wiki and add your item to the agenda. please add your name as well to know who to ping on the meeting14:12
gibishilpasd: you can add to the Open discussion topic14:13
shilpasdgibi: thanks will check that14:15
mriedemstephenfin: on https://review.opendev.org/#/c/686816/ you remove the nova-network binary but not the actual module code until nova/network/* - is that coming in later changes?14:16
mriedem*under nova/network14:16
stephenfinmriedem: Correct14:16
stephenfinthere's a _lot_ of unwinding to be done before I can remove all of that14:16
*** jdillaman has joined #openstack-nova14:16
stephenfin:(14:16
mriedemso basically a lot of small(ish) patches like https://review.opendev.org/#/c/686814/ ?14:16
stephenfinfor the most part, yeah14:17
stephenfincurrently working on stripping out the firewall feature. That's a beefy one14:17
openstackgerritKashyap Chamarthy proposed openstack/nova master: libvirt: Remove MIN_QEMU_FILE_BACKED_DISCARD_VERSION  https://review.opendev.org/69591514:17
openstackgerritMatt Riedemann proposed openstack/nova master: api-guide: flesh out flavor extra specs and image properties  https://review.opendev.org/69577614:19
openstackgerritMatt Riedemann proposed openstack/nova master: api-guide: flesh out networking concepts  https://review.opendev.org/69577714:19
openstackgerritMatt Riedemann proposed openstack/nova master: api-guide: flesh out todos in user doc  https://review.opendev.org/69577814:19
openstackgerritMatt Riedemann proposed openstack/nova master: doc: remove admin/manage-users  https://review.opendev.org/69577914:19
openstackgerritMatt Riedemann proposed openstack/nova master: api-guide: remove empty sections about inter-service interactions  https://review.opendev.org/69577414:19
*** READ10 has joined #openstack-nova14:25
*** jraju__ has quit IRC14:32
*** KeithMnemonic has quit IRC14:33
mriedemanyone remember where the hard 64kib limit on injected_file_content_bytes is enforced?14:38
dansmithmriedem: isn't it on the implied size of the text field in the db?14:39
mriedemi guess i was thinking user_data14:39
mriedemhttps://docs.openstack.org/nova/latest/user/metadata.html#metadata-userdata14:39
dansmithoh right right14:39
mriedemhttps://bugs.launchpad.net/nova/+bug/185363514:41
openstackLaunchpad bug 1853635 in OpenStack Compute (nova) "Config_drive file throws Request is too large" [Undecided,New]14:41
mriedemwas trying to triage that14:41
sean-k-mooneywe have a downstream bug for that i think that got reported like 2 weeks ago14:44
sean-k-mooneyill see if i can find it14:44
sean-k-mooneyartom: you were looking at ^ with dvd or dhill 2 weeks ago right14:46
artomsean-k-mooney, it rings a bell14:48
artomWith dhill, though I don't know how that ended14:48
artomThe logging made no sense14:48
artomIt was a 413, but no other details in the API logs14:49
artomWhich were in debug14:49
artomSo it made me think maybe a middleware somewhere was doing it14:49
artomAnd I think efried as kind enough to offer to help since he had played with paste14:49
artom... and then we all forgot about it14:49
sean-k-mooneyi think we found a place where there awas a hardcoded limit14:49
efriedstill happy to help there, lmk what you need14:50
artomefried, ack, appreciated :)14:50
artomThough at this point we're still speculatively rambling, methinks14:50
*** tbachman has quit IRC14:51
sean-k-mooneyi cant find it in my history or via BZ so i dont know if i still have the data on it14:53
artomsean-k-mooney, did he ever actually file a bz though?14:53
artomI'll ask14:53
sean-k-mooneymaybe not that could be why i cant find it14:54
*** tbachman has joined #openstack-nova14:54
fungiquick question, mhen mentioned in the image encryption pop-up team meeting an hour ago that during the ptg some nova folks were discussing the spec reproposal with luzi and suggested that they wanted someone to fix ephemeral disk encryption to use luks before adding image encryption support. this is all third-hand so i'm sure i'm missing a bunch of details, but curious if anyone can fill in the gaps14:55
fungithere (the two features don't, at face value, seem to be directly related to one another)14:55
fungihttp://eavesdrop.openstack.org/meetings/image_encryption/2019/image_encryption.2019-11-25-13.00.log.html14:55
sean-k-mooneyfungi: you want to speak to mdbooth14:56
fungiahh, so he's working on overhauling ephemeral disk encryption in nova?14:57
sean-k-mooneyfungi: mdbooth wanted epmeral disk encryption to be a prequisite for image encryption14:57
*** eharney has joined #openstack-nova14:57
sean-k-mooneyim not sure if he is working on it or not14:57
fungigot it. does nova use the ephemeral disk subsystem for caching images?14:57
fungii'm just trying to understand the interrelationship14:57
sean-k-mooneybut he felt strongly that have enycpeted image in galce that were stored in non encyped form on the hypervior was not very useful14:58
fungiso you're saying the images when they get stored on the hypervisor use the ephemeral disk mechanism?14:58
sean-k-mooneyin the libvirt case the root disk is storead as a qcow or raw file on the host by defualt14:59
sean-k-mooneywith both a cache of the iamge and a backing file in the qcow case14:59
fungiso what does that have to do with the ephemeral disk feature?15:00
mriedemstephenfin: on https://review.opendev.org/#/c/686814/ i tend to think you should just leave the server-side manager stuff alone and leave that for some change at the end of that series where you delete it in a single change15:00
mriedemstephenfin: everything else is just deleting client-side code15:00
mriedemnot sure how dansmith feels about that strategy or if it's worthwhiel15:00
mriedem*worthwhile15:00
sean-k-mooneyfungi: well qemu cannot execute from a gpg encryped imagae as far as i am aware15:00
dansmithmriedem: ++15:00
sean-k-mooneyfungi: so you would have to decrypt it on the host to be able to boot the vm15:00
fungisean-k-mooney: got it, so the idea was to decrypt into an encrypted ephemeral disk and then boot that?15:01
stephenfinmriedem, dansmith: what about other changes where there's call to things like virt driver methods?15:01
sean-k-mooneyfungi: yes using qemus nataive luks support15:01
dansmithstephenfin: those would be from server methods, so during/after those are removed?15:02
sean-k-mooneyfungi: so that you dont have to us dmcrype or something lease hat would mount the disk  and decypte it via the kernel15:02
stephenfinum, can you say that again but differently?15:02
fungisean-k-mooney: so just to make sure i understand the interrelationship, nova boots images from ephemeral disks? or the plan would be to add booting from ephemeral disk?15:02
mriedemfungi: if luks is involved i'd ask lyarwood15:03
sean-k-mooneyfungi: by defualt with libvirt nova boots all image from epheral root disk in qcow or raw format15:03
sean-k-mooneyunless you are using boot form cinder volume or confire a different iamge backend like ceph15:04
fungimriedem: well, sounds like luks isn't involved today with ephemeral disks, and that's apparently the objection/prerequisite which was raised15:04
sean-k-mooneyfungi: right today we dont support booting with encryped root disk excpu vai that lvm driver i belvie15:04
sean-k-mooneyand that has other issues15:05
fungisean-k-mooney: got it, thanks, so the idea is that for non-boot-from-volume scenarios, to make sure we don't store the retrieved image unencrypted, the ephemeral disk mechanism needs to support an encryption container format which qemu can boot directly15:06
*** mvkr has joined #openstack-nova15:06
sean-k-mooneyfungi: yep15:06
fungiperfect, that was the missing connection for me. thanks!!!15:06
sean-k-mooneythe current encyped image support declared that out of scope15:06
sean-k-mooneybut mdbooth and lyarwood wanted to make it a prerequsite even though its another feature15:07
fungiright, unfortunately i think due to their limited bandwidth they're going to focus on boot-from-volume for now and revisit support in nova later15:07
openstackgerritMatt Riedemann proposed openstack/nova stable/stein: Improve metadata server performance with large security groups  https://review.opendev.org/69592515:07
sean-k-mooneyfungi: my understading is cidner does not currently support booting form an encyped volume either15:08
fungiright, but they're up for moving forward on the spec to add that15:08
sean-k-mooneyfungi: mdbooth mentioned somting about that being inded for cinder backups but nova vms15:08
sean-k-mooney*intended15:08
fungiahh, i'll take a closer look at the cinder spec to confirm15:09
sean-k-mooney*not for nova vms15:09
fungithanks again15:09
lyarwoodsean-k-mooney: we can boot from an encrypted volume15:09
* lyarwood reads up15:09
*** ociuhandu has quit IRC15:10
sean-k-mooneylyarwood: ok but is that only with ceph15:10
lyarwoodand yeah, we need to kill off the existing ephemeral disk encryption support in the Libvirt driver before we reintroduce a sane version tbh15:10
sean-k-mooneywith isci the volume wouls be mounted on the host15:10
lyarwoodsean-k-mooney: nope, that's pretty much any backend15:10
lyarwoodsean-k-mooney: nope, that's native15:10
lyarwoodsean-k-mooney: native allowed us to support rbd encrypted volumes for the first time15:11
lyarwoodsean-k-mooney: everything else was already supported and just switched to being native within QEMU in Queens15:11
sean-k-mooneylyarwood: ok15:11
*** awalende has quit IRC15:11
aarentsmriedem: hi, can you confirm that commit message is ok like tht https://review.opendev.org/#/c/670000/ it was the last blocking point.15:12
*** tbachman has quit IRC15:12
sean-k-mooneybut we do still mont the voluems on the host via the kernel right they are just but encypeted?15:12
sean-k-mooneylyarwood: im asking because fo the local caching spec15:12
sean-k-mooneythat was implying that iscsi based volumes are mounted on the host and passed to qemu as a block deice wo they could add a caching layer15:13
lyarwoodsean-k-mooney: yeah so for iSCSI/LVM etc we still end up with host devices but these are never decrypted on the host now15:13
sean-k-mooneyi assume we use qemus native encryption support to use the encyped volumes form teh host15:14
sean-k-mooneycool15:14
sean-k-mooneyfungi: so basicly we would like to get to the same state for non boot form volume guests15:14
* lyarwood should really write a spec for this15:15
*** awalende has joined #openstack-nova15:16
*** awalende has quit IRC15:17
mriedemlyarwood: do we even have *any* in-tree docs about encryption features in nova today?15:18
mriedemwould probably be good to level set from there15:18
lyarwoodmriedem: do releasenotes count /s15:19
mriedemno15:19
lyarwoodaww, okay then no15:19
lyarwoodmriedem: and yeah that's a valid point15:19
mriedemi hope you already knew the answer to that15:19
*** jdillaman has quit IRC15:19
lyarwoodmriedem: https://www.urbandictionary.com/define.php?term=%2Fs yarp I did sorry15:20
*** tbachman has joined #openstack-nova15:20
mriedemyou should have jk lol'ed me with a winking smiley15:21
mriedemthat's more my speed15:21
fungilyarwood: sean-k-mooney: mriedem: thanks a bunch, that's all very useful info15:21
lyarwoodI'll fire a few roflcopters next time mriedem :)15:22
fungiand a lolercoaster for good measure?15:22
lyarwoodrude not to15:23
mriedemlol ;P15:24
* artom lmaos15:24
*** kaliya has joined #openstack-nova15:28
*** kaliya has quit IRC15:31
mriedemaarents: dansmith: +2 https://review.opendev.org/#/c/670000/15:34
openstackgerritMatt Riedemann proposed openstack/nova stable/stein: Add functional recreate test for bug 1829479 and bug 1817833  https://review.opendev.org/69593215:41
openstackbug 1829479 in OpenStack Compute (nova) "The allocation table has residual records when instance is evacuated and the source physical node is removed" [Medium,In progress] https://launchpad.net/bugs/1829479 - Assigned to Matt Riedemann (mriedem)15:41
openstackbug 1817833 in OpenStack Compute (nova) "Check compute_id existence when nova-compute reports info to placement" [Medium,In progress] https://launchpad.net/bugs/1817833 - Assigned to Matt Riedemann (mriedem)15:41
openstackgerritEric Fried proposed openstack/nova master: DNM: Test openstacksdk weakrefs  https://review.opendev.org/69593415:45
*** jaosorior has quit IRC15:45
openstackgerritMatt Riedemann proposed openstack/nova stable/stein: Add functional recreate test for bug 1852610  https://review.opendev.org/69593515:48
openstackbug 1852610 in OpenStack Compute (nova) stein "API allows source compute service/node deletion while instances are pending a resize confirm/revert" [Undecided,New] https://launchpad.net/bugs/185261015:48
openstackgerritMatt Riedemann proposed openstack/nova stable/stein: Add functional recreate revert resize test for bug 1852610  https://review.opendev.org/69593815:53
openstackbug 1852610 in OpenStack Compute (nova) stein "API allows source compute service/node deletion while instances are pending a resize confirm/revert" [Undecided,New] https://launchpad.net/bugs/185261015:53
*** macz has joined #openstack-nova15:56
*** macz has quit IRC15:56
*** ociuhandu has joined #openstack-nova15:58
*** ociuhandu has quit IRC16:03
*** jaosorior has joined #openstack-nova16:04
*** _mlavalle_1 has joined #openstack-nova16:04
*** tbachman has quit IRC16:05
*** mlavalle has quit IRC16:07
*** mkrai has quit IRC16:09
openstackgerritMatt Riedemann proposed openstack/nova stable/stein: Block deleting compute services with in-progress migrations  https://review.opendev.org/69594016:14
*** openstackstatus has joined #openstack-nova16:15
*** ChanServ sets mode: +v openstackstatus16:15
*** nanzha has quit IRC16:18
openstackgerritKashyap Chamarthy proposed openstack/nova master: libvirt: Remove MIN_{LIBVIRT,QEMU}_FILE_BACKED_VERSION  https://review.opendev.org/69594216:21
*** shilpasd has quit IRC16:28
aarentsmriedem: thanks16:30
*** aloga has quit IRC16:33
*** aloga has joined #openstack-nova16:33
*** ircuser-1 has joined #openstack-nova16:37
mriedemcould i get a couple of stable cores to look at these https://review.opendev.org/#/q/topic:bug/1849409+branch:stable/rocky ?16:38
*** rpittau is now known as rpittau|afk16:40
lyarwoodmriedem: ack looking16:40
openstackgerritStephen Finucane proposed openstack/nova master: nova-net: Remove 'nova-dhcpbridge' binary  https://review.opendev.org/68681516:43
openstackgerritStephen Finucane proposed openstack/nova master: nova-net: Remove 'nova-network' binary  https://review.opendev.org/68681616:43
openstackgerritStephen Finucane proposed openstack/nova master: docs: Blast most references to nova-network  https://review.opendev.org/68681716:43
openstackgerritStephen Finucane proposed openstack/nova master: nova-net: Remove associate, disassociate network APIs  https://review.opendev.org/68681416:43
openstackgerritStephen Finucane proposed openstack/nova master: WIP  https://review.opendev.org/68681816:44
*** dtantsur is now known as dtantsur|afk16:44
gibisean-k-mooney: heads up, as the neutron meeting is at the US slot this week I won't be awake16:48
*** lpetrut has quit IRC16:51
lyarwoodstephenfin: https://review.opendev.org/#/q/topic:bug/1853495 - would you mind taking a look at this today if you have time?16:51
stephenfinyup, burning through some reviews atm16:52
*** dklyle has quit IRC16:53
*** dklyle has joined #openstack-nova16:54
*** tbachman has joined #openstack-nova16:54
mriedemlyarwood: questoin in that nova change16:54
lyarwoodmriedem: I think the ref is wrong or cinderclient changes it, let me grep around and confirm.16:55
*** udesale has quit IRC16:57
lyarwoodmriedem: https://github.com/openstack/nova/blob/6fea2682364cddf66c499936a8c66895ef94dd5b/nova/volume/cinder.py#L313 - my bad, it's us.16:58
mriedemhttps://github.com/openstack/cinder/blob/62b69b51aab32500d3aa76677011f9db4bf4c14c/cinder/api/v2/views/volumes.py#L8116:58
stephenfinlyarwood, mriedem: looks like we do funky stuff in nova/volume/cinder.py via '_untranslate_volume_summary_view'16:58
mriedemah16:58
stephenfinnice16:58
*** tssurya has quit IRC17:00
openstackgerritMerged openstack/nova master: api-guide: flesh out flavor extra specs and image properties  https://review.opendev.org/69577617:05
openstackgerritMerged openstack/nova master: api-guide: flesh out networking concepts  https://review.opendev.org/69577717:05
openstackgerritMerged openstack/nova master: api-guide: flesh out todos in user doc  https://review.opendev.org/69577817:05
mriedemlyarwood: some questions in there17:06
lyarwoodmriedem: looking17:06
mriedemso volume_type on volume create is optional and if not specified the cinder scheduler picks one (and there is a default backend),17:07
mriedemthe api-ref talks a bit about when volume_type is required but doesn't mention for encrypted volumes built from snapshots, which volume_type is clearly required due to the bug17:07
mriedemi'm just wondering if we should only pass the volume_type if the original volume was encrypted=True17:08
mriedemi might have answered my own question though,17:09
mriedemi don't think you can delete a volume type in cinder while there are volumes using it,17:09
mriedemand i don't think you can delete a volume that has snapshots17:09
mriedemsmcginnis: ^?17:09
lyarwoodyeah you can't I was just checking that17:09
*** jcosmao has left #openstack-nova17:09
lyarwoodand again yes AFAIK you can't remove volumes with snapshots17:09
lyarwoodso copying over volume_type from the original if one isn't provided should be safe17:10
mriedemso maybe this is fine and if it turns out there is some weird problem later we fix that as necessary17:10
mriedemi'm guessing you'll want to backport this too so hopefully we're all good17:10
lyarwoodyup indeed, I tried to keep it as self contained as possible17:11
*** awalende has joined #openstack-nova17:12
*** jcosmao has joined #openstack-nova17:15
*** jaosorior has quit IRC17:16
*** awalende has quit IRC17:17
smcginnismriedem: Correct.17:18
smcginnisDon't have the full context here, but the plan described sounds good to me.17:18
*** igordc has joined #openstack-nova17:18
*** damien_r has quit IRC17:19
*** takamatsu has quit IRC17:27
*** FlorianFa has quit IRC17:29
openstackgerritGhanshyam Mann proposed openstack/nova master: Add test coverage of existing os-services policies  https://review.opendev.org/66918117:30
openstackgerritMerged openstack/nova stable/stein: Use admin neutron client to see if instance has qos ports  https://review.opendev.org/69466817:32
*** takamatsu has joined #openstack-nova17:32
mriedemstephenfin: you should fix this in your series somewhere https://review.opendev.org/#/c/686816/12/doc/source/install/get-started-compute.rst@2817:40
openstackgerritGhanshyam Mann proposed openstack/nova master: Introduce scope_types in os-services  https://review.opendev.org/64542717:45
gmannjohnthetubaguy: did not get this comment. we can re-use the check_str itself  - https://review.opendev.org/#/c/645452/14/nova/policies/base.py@6917:52
* johnthetubaguy has a look17:52
johnthetubaguygmann: the use case I was thinking about is having a nova specific read only role, its nice if that only needs one rule changing17:53
openstackgerritJohn Garbutt proposed openstack/nova master: WIP: Enforce unified limits using oslo.limit  https://review.opendev.org/61518017:57
*** tesseract has quit IRC17:57
gmannjohnthetubaguy: and the currently defined  check_str like SYSTEM_READER use those rule instead of direct check_str ?17:59
*** jaosorior has joined #openstack-nova17:59
*** macz has joined #openstack-nova18:03
gmannjohnthetubaguy: got it. i did not think the override case.18:04
johnthetubaguygmann: no worries, we could in theory add it later, but probably good to add it from the start18:05
*** derekh has quit IRC18:05
gmannyeah.18:05
*** tbachman has quit IRC18:18
openstackgerritGhanshyam Mann proposed openstack/nova master: Add new default rules and mapping in policy base class  https://review.opendev.org/64545218:29
*** martinkennelly has quit IRC18:30
*** mns96 has quit IRC18:36
*** tbachman has joined #openstack-nova18:39
*** igordc has quit IRC18:39
openstackgerritGhanshyam Mann proposed openstack/nova master: Suppress policy deprecated warnings in tests  https://review.opendev.org/67667018:43
*** ociuhandu has joined #openstack-nova18:45
*** cmorpheus is now known as cmurphy18:50
*** ociuhandu has quit IRC18:51
*** mriedem has quit IRC18:52
*** mriedem has joined #openstack-nova18:52
*** ociuhandu has joined #openstack-nova18:52
*** ralonsoh has quit IRC18:58
gmannjohnthetubaguy: for new policy rule added due to granularity, new name should be fine right? we decided not to change name for any existing policy - https://review.opendev.org/#/c/648480/18/nova/policies/services.py@2219:00
*** maciejjozefczyk has quit IRC19:01
efriedkashyap: Forgive me if you've already had this argument^Wdiscussion with stephenfin, but why are we not squashing at least the three "remove MIN_*" patches into the bump patch?19:07
efriedto me, "do X and get rid of dead code that was made obsolete by X" counts as "one logical change".19:08
efried"I did it separately as it cleanly highlights that we consciously picked those versions based on distro research.  If we squash it in, the intention just gets buried in this noise." meh meh meh19:10
openstackgerritLee Yarwood proposed openstack/nova master: compute: Remove stale BDMs on reserve_block_device_name failure  https://review.opendev.org/68259419:17
*** eharney has quit IRC19:18
*** macz has quit IRC19:21
* efried feeds19:21
*** mriedem has quit IRC19:24
*** ociuhandu has quit IRC19:32
*** mriedem has joined #openstack-nova19:33
*** ociuhandu has joined #openstack-nova19:33
*** ociuhandu has quit IRC19:38
*** jdillaman has joined #openstack-nova19:38
*** READ10 has quit IRC19:43
openstackgerritMerged openstack/nova stable/queens: Don't delete compute node, when deleting service other than nova-compute  https://review.opendev.org/69538319:50
openstackgerritMerged openstack/nova stable/rocky: Add functional regression test for bug 1849409  https://review.opendev.org/69072019:50
openstackbug 1849409 in OpenStack Compute (nova) rocky "openstack server list --deleted --limit -1 hangs" [High,In progress] https://launchpad.net/bugs/1849409 - Assigned to Matt Riedemann (mriedem)19:50
*** igordc has joined #openstack-nova19:55
*** eharney has joined #openstack-nova20:32
dansmithartom: when I pay you to just agree with all my review comments, you're supposed to make it look non-obvious20:33
artomdansmith, ok, 0. You don't pay nearly enough. 1. I only agreed on one thing. 2. I disagreed on the big thing.20:37
dansmithartom: each comment was like "I agree with Dan and his bribe money, ...." :P20:38
artomdansmith, either I misunderstood you, or you misunderstood me.20:39
artomI thought you were saying you don't want the workaround conf option approach. I'm saying the "real" fix isn't backportable, so OK.20:39
*** macz has joined #openstack-nova20:46
*** igordc has quit IRC20:47
*** ociuhandu has joined #openstack-nova20:50
dansmithartom: no, I know20:51
*** igordc has joined #openstack-nova20:53
artomdansmith, but seriously, "subtlety" is only available in the Premium package, you need to upgrade20:54
dansmithI'm calling my credit card company20:55
artom*snerk*20:56
artom"I'd like to charge back these bribes I made"20:57
artom"Turns out corruption isn't the panacea I was hoping for."20:57
dansmithsounds legit to me, I'm sure they've got my back21:00
dansmithjust like reporting that your dealer to the cops when he stiffed you on the dime bag21:00
*** READ10 has joined #openstack-nova21:10
*** ociuhandu has quit IRC21:11
*** ociuhandu has joined #openstack-nova21:12
*** spatel has joined #openstack-nova21:15
*** ociuhandu has quit IRC21:17
artomHey man, get with the advanced countries, my dealer's *the government*21:17
mriedemartom: dansmith: i've tl;dr'ed the patch, i need someone to ack on the path forward because i'm getting mixed messages on the nova changes and the os-traits change from efried21:22
mriedemif it's more work than it's worth i'll just abandon all of it and let the bugs continue to get opened21:22
efriedwhat are we talking about?21:24
artommriedem, I obviously don't have +/-2 powers, but seems like a simple enough patch, so if it fixes some people's issues, don't see why not21:24
artomSure, it's not the prettiest thing I've ever seen, but... frankly, neither is most of Nova :P21:25
*** spatel has quit IRC21:26
mriedemefried: https://review.opendev.org/#/q/topic:bug/1748697+(status:open+OR+status:merged)21:27
mriedemartom: as for pretty, you try having hundreds (thousands?) of random people put their dirty fingers all over you for 10 years and see how pretty you are21:28
artommriedem, oh, I fully understand *why*21:29
mriedem(apparently 989 contributors according to github)21:29
mriedemi've long advocated for py black pre-commit hooks but just no one else wants it :)21:30
*** rcernin has joined #openstack-nova21:31
*** pcaruana has quit IRC21:38
artomOh this is weird...21:40
artomI'm triaging a downstream bug related to external events21:40
openstackgerritMatt Riedemann proposed openstack/nova stable/queens: Add functional regression test for bug 1849409  https://review.opendev.org/69072421:41
openstackbug 1849409 in OpenStack Compute (nova) rocky "openstack server list --deleted --limit -1 hangs" [High,In progress] https://launchpad.net/bugs/1849409 - Assigned to Matt Riedemann (mriedem)21:41
openstackgerritMatt Riedemann proposed openstack/nova stable/queens: Fix listing deleted servers with a marker  https://review.opendev.org/69072521:41
artom17:34:14.868 No waiting events found dispatching network-vif-plugged-3dccb72d-c922-4032-8f34-d7421fe2cff621:41
openstackgerritDan Smith proposed openstack/nova master: Add a way to exit early from a wait_for_instance_event()  https://review.opendev.org/69598521:41
dansmithefried: ^21:41
artom17:33:48.03721:41
efrieddansmith: ack21:41
artom17:33:48.037 Preparing to wait for external event network-vif-plugged-3dccb72d-c922-4032-8f34-d7421fe2cff621:41
artomSo I guess something is consuming those events before?21:42
artomSorry for rubber-ducking y'all21:42
dansmithartom: mriedem: remember the race-to-wait-for-event stuff with neutron and migration?21:43
dansmiththe patch I just pushed up would probably have helped us21:43
mriedemhow could i forget21:43
artomdansmith, I do, but this isn't it. It's boot.21:43
dansmithartom: yep, talking about that other thing21:43
artomdansmith, ack, yeah21:43
artomLooking21:43
dansmithlots of event'n going on today21:43
dansmithI don't remember the exact details of the neutron thing, but if we could have checked with one poll to see if a thing was done, we could have used this to safely be graceful about when the events show up and not lose our race-proof-ness21:46
dansmithI think it was coming early for some backends, which is what this is about21:46
*** abaindur has joined #openstack-nova21:46
artomdansmith, I haven't grokked your patch fully, but I'm not sure about that. We were getting the events *before* we even started waiting for them21:47
dansmithright, that's what this is for21:47
dansmithwe're about to have a situation where for cyborg, an event could come before we're ready to wait for it21:47
dansmithand we want to be able to handle that good situation (work is done before we have to stop and wait) without losing our race-proof-ness21:47
*** takashin has joined #openstack-nova21:48
artomOh, that's your second para in the commit message21:51
mriedemartom: we were getting them before we were waiting b/c the compute manager updating the port binding which trigggered the event before the driver's finish_revert_migration or whatever registered the event listener21:51
mriedemso, we do control what was triggering the event21:51
artommriedem, yep21:52
dansmithmriedem: I thought  there was some component of it where we weren't use based on vif type if it came early or late? but maybe I'm remembering one of the reverted attempts?21:52
dansmiths/use/sure/21:52
openstackgerritMatt Riedemann proposed openstack/nova stable/pike: Add functional regression test for bug 1849409  https://review.opendev.org/69073421:52
openstackbug 1849409 in OpenStack Compute (nova) rocky "openstack server list --deleted --limit -1 hangs" [High,In progress] https://launchpad.net/bugs/1849409 - Assigned to Matt Riedemann (mriedem)21:52
openstackgerritMatt Riedemann proposed openstack/nova stable/pike: Fix listing deleted servers with a marker  https://review.opendev.org/69073521:52
mriedemwe do base it on vif type or something21:53
dansmithack, well, anyway, if we _can_ get in front of it, that's better obviously21:53
mriedemhttps://github.com/openstack/nova/blob/ee25a82c2c1c12b0e290ed524e4d66b1a8a7a500/nova/compute/manager.py#L445921:53
* artom is not going down that road again.21:53
artom(That apparently broke Midonet, for unclear reasons: https://review.opendev.org/#/c/675021/)21:54
*** _mlavalle_1 has quit IRC21:56
*** mlavalle has joined #openstack-nova21:56
mriedemcan i abandon that yet?21:59
mriedemif they don't care enough to pursue since oct 1 it must not be a big deal22:00
* artom won't complain22:01
artomdaycare taxi time22:02
mriedemdone22:03
mriedemyou should crank up the space truckin' organ solo from made in japan for the kiddies22:04
efrieddansmith: Reviewed, thanks for putting that together.22:04
*** slaweq has quit IRC22:06
*** mriedem has quit IRC22:17
*** threestrands has joined #openstack-nova22:22
*** KeithMnemonic has joined #openstack-nova22:41
openstackgerritTakashi NATSUME proposed openstack/nova master: Update keypairs in saving an instance object  https://review.opendev.org/68304322:42
openstackgerritMerged openstack/nova master: Pick NEXT_MIN libvirt/QEMU versions for "V" release  https://review.opendev.org/69482122:47
*** slaweq has joined #openstack-nova22:49
*** tkajinam has joined #openstack-nova23:09
*** slaweq has quit IRC23:10
*** abaindur has quit IRC23:10
*** abaindur has joined #openstack-nova23:11
*** abaindur has quit IRC23:11
*** abaindur has joined #openstack-nova23:11
*** abaindur has joined #openstack-nova23:13
*** mlavalle has quit IRC23:26
*** ociuhandu has joined #openstack-nova23:30
*** kaisers1 has quit IRC23:31
*** jaosorior has quit IRC23:33
*** kaisers has joined #openstack-nova23:34
*** ociuhandu has quit IRC23:35
*** tosky has quit IRC23:36
openstackgerritEric Fried proposed openstack/nova-specs master: Spec: Ussuri: Encrypted Emulated Virtual TPM  https://review.opendev.org/68680423:41
efrieddansmith: Simplified this ^ by restricting backup of vTPM data to only shelve and backup. Reasoning and effects are explained in the spec. It actually simplifies things considerably. I think with proper documentation, this is the happy middle ground.23:42
*** jcosmao has left #openstack-nova23:42
*** macz has quit IRC23:57
*** macz has joined #openstack-nova23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!