Thursday, 2021-02-18

*** zenkuro has quit IRC00:00
*** tosky has quit IRC00:30
*** luksky has quit IRC00:33
*** LinPeiWen has joined #openstack-nova00:43
openstackgerritArtom Lifshitz proposed openstack/nova master: WIP: pci: implement the `socket` NUMA affinity policy  https://review.opendev.org/c/openstack/nova/+/77277901:12
*** mlavalle has quit IRC01:32
*** ccstone has joined #openstack-nova01:35
*** eandersson has joined #openstack-nova01:35
*** ccstone has quit IRC01:42
*** eandersson has quit IRC01:42
*** ccstone has joined #openstack-nova01:42
*** eandersson has joined #openstack-nova01:42
*** macz_ has quit IRC02:04
*** songwenping_ has joined #openstack-nova02:35
*** swp20 has quit IRC02:37
*** spatel has joined #openstack-nova02:44
*** zzzeek has quit IRC02:47
*** zzzeek has joined #openstack-nova02:50
*** hemanth_n has joined #openstack-nova02:53
*** dviroel has quit IRC02:55
*** priteau has quit IRC02:59
*** gouthamr has quit IRC02:59
*** nicolasbock has quit IRC02:59
*** ianw has quit IRC02:59
*** nicolasbock has joined #openstack-nova03:00
*** ianw has joined #openstack-nova03:00
*** gouthamr has joined #openstack-nova03:00
*** gouthamr has quit IRC03:00
*** gouthamr has joined #openstack-nova03:01
*** gouthamr has quit IRC03:01
*** gouthamr has joined #openstack-nova03:01
*** gouthamr has quit IRC03:01
*** k_mouza has joined #openstack-nova03:02
*** gouthamr has joined #openstack-nova03:02
*** gouthamr has quit IRC03:02
*** gouthamr has joined #openstack-nova03:03
*** gouthamr has quit IRC03:03
*** gouthamr has joined #openstack-nova03:04
*** gouthamr has quit IRC03:04
*** gouthamr has joined #openstack-nova03:04
*** gouthamr has quit IRC03:04
*** gouthamr has joined #openstack-nova03:05
*** gouthamr has quit IRC03:05
*** gouthamr has joined #openstack-nova03:06
*** gouthamr has quit IRC03:06
*** k_mouza has quit IRC03:07
*** gouthamr has joined #openstack-nova03:07
*** gouthamr has quit IRC03:07
*** gouthamr has joined #openstack-nova03:11
*** gouthamr has quit IRC03:11
*** gouthamr has joined #openstack-nova03:17
*** gouthamr has quit IRC03:17
*** gouthamr has joined #openstack-nova03:22
*** gouthamr has quit IRC03:22
*** songwenping_ has quit IRC03:24
*** kevinbenton has quit IRC03:27
*** kevinbenton has joined #openstack-nova03:27
*** spatel has quit IRC03:27
*** gouthamr has joined #openstack-nova03:28
*** gouthamr has quit IRC03:28
*** gouthamr has joined #openstack-nova03:32
*** gouthamr has quit IRC03:32
*** zoharm1 has joined #openstack-nova03:34
*** rcernin has quit IRC03:36
*** gouthamr has joined #openstack-nova03:38
*** gouthamr has quit IRC03:38
*** khomesh24 has joined #openstack-nova03:39
*** mkrai has joined #openstack-nova03:41
*** psachin has joined #openstack-nova03:42
*** gouthamr has joined #openstack-nova03:43
*** gouthamr has quit IRC03:43
*** spatel has joined #openstack-nova03:45
*** gouthamr has joined #openstack-nova03:49
*** gouthamr has quit IRC03:49
*** gouthamr has joined #openstack-nova03:53
*** gouthamr has quit IRC03:53
*** gouthamr has joined #openstack-nova03:59
*** gouthamr has quit IRC03:59
*** rcernin has joined #openstack-nova04:16
*** gouthamr has joined #openstack-nova04:25
*** gouthamr has quit IRC04:26
*** ratailor has joined #openstack-nova04:35
*** whoami-rajat__ has joined #openstack-nova04:38
*** mkrai has quit IRC04:56
*** mkrai_ has joined #openstack-nova04:56
*** gouthamr has joined #openstack-nova05:00
*** gouthamr has quit IRC05:00
*** macz_ has joined #openstack-nova05:10
*** gyee has quit IRC05:15
*** macz_ has quit IRC05:15
*** swp20 has joined #openstack-nova05:25
*** gouthamr has joined #openstack-nova05:26
*** gouthamr has quit IRC05:26
*** macz_ has joined #openstack-nova05:48
*** psachin has quit IRC05:50
*** ociuhandu has joined #openstack-nova05:51
*** macz_ has quit IRC05:52
*** ociuhandu has quit IRC05:56
*** gouthamr has joined #openstack-nova06:00
*** spatel has quit IRC06:02
*** macz_ has joined #openstack-nova06:09
*** macz_ has quit IRC06:14
*** k_mouza has joined #openstack-nova06:16
*** k_mouza has quit IRC06:20
*** ircuser-1 has joined #openstack-nova06:22
*** vishalmanchanda has joined #openstack-nova06:34
*** ccstone has quit IRC06:53
*** eandersson has quit IRC06:53
*** ccstone has joined #openstack-nova06:53
*** eandersson has joined #openstack-nova06:53
*** ccstone has quit IRC06:56
*** eandersson has quit IRC06:56
*** eandersson has joined #openstack-nova06:56
*** ccstone has joined #openstack-nova06:56
*** mkrai_ has quit IRC07:00
*** mkrai has joined #openstack-nova07:00
*** lpetrut has joined #openstack-nova07:06
openstackgerritMIKI Nobuhiro proposed openstack/nova master: libvirt: add IP address to libvirt guest metadata  https://review.opendev.org/c/openstack/nova/+/75055207:07
*** slaweq has joined #openstack-nova07:13
*** ralonsoh has joined #openstack-nova07:21
*** mkrai has quit IRC07:30
*** mkrai_ has joined #openstack-nova07:30
*** links has joined #openstack-nova07:39
*** slaweq has quit IRC07:39
*** slaweq has joined #openstack-nova07:42
*** brinzhang has quit IRC07:45
*** brinzhang has joined #openstack-nova07:45
*** macz_ has joined #openstack-nova07:53
*** macz_ has quit IRC07:57
*** rcernin has quit IRC07:58
*** belmoreira has joined #openstack-nova07:59
*** rcernin has joined #openstack-nova08:02
*** rcernin has quit IRC08:07
*** LinPeiWen has quit IRC08:12
*** macz_ has joined #openstack-nova08:14
*** rpittau|afk is now known as rpittau08:14
*** luksky has joined #openstack-nova08:17
*** macz_ has quit IRC08:19
*** andrewbonney has joined #openstack-nova08:26
*** xek has joined #openstack-nova08:27
*** dklyle has quit IRC08:30
*** kashyap has joined #openstack-nova08:31
*** links has quit IRC08:38
*** tosky has joined #openstack-nova08:45
*** rcernin has joined #openstack-nova08:49
*** rcernin has quit IRC08:53
*** macz_ has joined #openstack-nova08:55
*** links has joined #openstack-nova08:58
*** LinPeiWen has joined #openstack-nova08:59
*** macz_ has quit IRC09:00
*** brinzhang has quit IRC09:00
*** macz_ has joined #openstack-nova09:16
*** macz_ has quit IRC09:21
*** k_mouza has joined #openstack-nova09:28
*** dtantsur|afk is now known as dtantsur09:31
*** ociuhandu has joined #openstack-nova09:36
*** derekh has joined #openstack-nova09:38
swp20gibi: morning,  please check the NOVNC patch  https://review.opendev.org/c/openstack/nova/+/622336 if you have spare time.09:42
*** macz_ has joined #openstack-nova09:58
openstackgerritLucian Petrut proposed openstack/nova master: hyper-v rbd volume support  https://review.opendev.org/c/openstack/nova/+/76355010:00
stephenfingibi: bauzas: I'm +2 on https://review.opendev.org/c/openstack/nova/+/750552 but have held off on +W because you both reviewed it previously10:01
stephenfinAh, wait, lyarwood dropped his +2 while I was reviewing so not as urgent after all10:01
stephenfinlyarwood: Left comments inline but fwiw I'm fine with camelCase. We can discuss in the team meeting today if we want to though10:02
*** ociuhandu has quit IRC10:02
bauzasstephenfin: ack, just fixing your concerns about negative tests missing on routed networks and then hopefully I should be on the review side10:02
gibibauzas, stephenfin: the general direction is OK to me in https://review.opendev.org/c/openstack/nova/+/706295 (neutron client bump) I just had some question inline10:03
*** macz_ has quit IRC10:03
gibiswp20: I will try10:03
gibistephenfin: ack, I will check the libvirt metadata too10:04
stephenfingibi: cool, I'll take a look at the noVNC patch too10:04
* stephenfin needs a break from secure boot fun10:05
lyarwoodstephenfin: yup sorry didn't want to jump the gun on that10:05
* lyarwood has also reviewed the noVNC patch and left some comments10:12
openstackgerritVishal Manchanda proposed openstack/nova master: Docs: Correct ``Password injection using the dashboard`` Explanation  https://review.opendev.org/c/openstack/nova/+/77508410:15
*** macz_ has joined #openstack-nova10:19
gibistephenfin, lyarwood: I'm +2 on the libvirt ip metadata (including ipVersion). lyarwood do you want to get back to that patch or should I send it through?10:21
lyarwoodgibi: I just wanted to ensure Sean was okay with it tbh10:22
lyarwoodgibi: they left a comment on the spec about talking it over in the review10:22
gibilyarwood: OK let's wait for sean-k-mooney's vote on the review then10:23
lyarwoodgibi: https://review.opendev.org/c/openstack/nova/+/763550 - FWIW the HyperV RBD change looks ready now10:23
gibilyarwood: on it10:23
*** macz_ has quit IRC10:24
lpetrutthanks for the reviews10:26
gibilpetrut: is there any other patch needed in nova for the rbd support? or can I close the bp once https://review.opendev.org/c/openstack/nova/+/763550 merges?10:27
lpetrutnope, that's it10:28
gibilyarwood: thanks for the review on the noVNC patch10:28
gibilpetrut: ack, I will close the bp accordingly10:28
*** ociuhandu has joined #openstack-nova10:33
*** jangutter_ has joined #openstack-nova10:34
*** jangutter has quit IRC10:38
*** macz_ has joined #openstack-nova10:40
*** ociuhandu has quit IRC10:43
*** ociuhandu has joined #openstack-nova10:44
*** macz_ has quit IRC10:45
bauzasoh, man, why _get_provider_aggregates() is so cryptic ?10:45
bauzasit can return either None, a tuple with empty list, or an exception10:46
bauzasstephenfin: thanks for having letting me rework on negative tests, I need to check all of the above10:46
gibibecause nobody cared in the past to have a proper return type. but now with mypy... :D10:46
bauzasgibi: technically, it's a private method, so that's my call10:47
gibialso we don't have a clear guideline (or pattern) when to return None for error case and when to raise for it10:47
gibis/None/falsy value/10:48
*** ociuhandu has quit IRC10:50
*** mkrai_ has quit IRC10:51
*** mkrai__ has joined #openstack-nova10:51
*** ociuhandu has joined #openstack-nova10:53
openstackgerritLucas Alvares Gomes proposed openstack/nova master: [OVN] Adapt the live-migration job scripts to work with OVN  https://review.opendev.org/c/openstack/nova/+/77641910:59
*** macz_ has joined #openstack-nova11:01
*** macz_ has quit IRC11:05
*** mkrai__ has quit IRC11:09
stephenfinlyarwood: gibi: I have some pretty serious concerns about the VNC patch. Why would one ever recommend an 8 ASCII character, trivially brute forceable password over TLS encryption?11:16
stephenfinLots of comments left. I don't know if it's possible yet (starting to investigate), but this feels like something the proxy layer should be providing for us (i.e. HTTPS and a password to get to the proxy, and then TLS from the proxy to the guest)11:17
lyarwoodstephenfin: hmm how do we lose the ability to encrypt traffic between the proxy and guest?11:19
stephenfinper my reading of things, yes11:19
stephenfinthe presence of an entirely separate auth scheme suggests as much https://review.opendev.org/c/openstack/nova/+/622336/30/nova/console/rfb/auths.py#3011:20
stephenfinas does the QEMU doc on available security methods https://qemu.readthedocs.io/en/latest/system/vnc-security.html11:20
*** dviroel has joined #openstack-nova11:21
lyarwoodstephenfin: ah crap sorry I didn't look at RFBAuthSchemeVeNCrypt11:24
openstackgerritLee Yarwood proposed openstack/nova stable/ussuri: only wait for plugtime events in pre-live-migration  https://review.opendev.org/c/openstack/nova/+/77074511:32
stephenfinMan, my security know how is not what it should be, but it sounds like there's a TLSNone subtype we can use with VeNCrypt https://github.com/rfbproto/rfbproto/blob/master/rfbproto.rst#7243subtypes-with-vnc-suffix11:33
stephenfinSorry, X509Vnc11:34
*** priteau has joined #openstack-nova11:35
openstackgerritSylvain Bauza proposed openstack/nova master: Add net & utils methods for routed nets & segments  https://review.opendev.org/c/openstack/nova/+/77397611:38
openstackgerritSylvain Bauza proposed openstack/nova master: Add a routed networks scheduler pre-filter  https://review.opendev.org/c/openstack/nova/+/74906811:38
bauzasgibi: stephenfin: sean-k-mooney: last round hopefully ^11:38
bauzastl;dr: I now hard-stop when we can't find aggregates for subnets11:39
bauzass/subnets/segments11:39
*** links has quit IRC11:40
*** links has joined #openstack-nova11:41
*** macz_ has joined #openstack-nova11:42
*** ociuhandu has quit IRC11:45
*** ociuhandu has joined #openstack-nova11:46
*** macz_ has quit IRC11:47
*** zenkuro has joined #openstack-nova11:52
gibibauzas: acj11:59
gibiack even11:59
* bauzas goes grabbing some food11:59
gibigood idea ^^12:06
* gibi joins virtually12:06
*** hemanth_n has quit IRC12:16
*** zenkuro has quit IRC12:17
*** zenkuro has joined #openstack-nova12:21
openstackgerritMerged openstack/nova stable/victoria: tools: Allow check-cherry-picks.sh to be disabled by an env var  https://review.opendev.org/c/openstack/nova/+/76602312:21
*** macz_ has joined #openstack-nova12:24
*** zenkuro has quit IRC12:27
*** zenkuro has joined #openstack-nova12:28
*** macz_ has quit IRC12:29
*** ociuhandu has quit IRC13:00
*** ociuhandu has joined #openstack-nova13:03
openstackgerritBelmiro Moreira proposed openstack/nova master: Fixes the elapsed time logged during a live migration  https://review.opendev.org/c/openstack/nova/+/77642813:04
*** macz_ has joined #openstack-nova13:06
gibistephenfin: this bp is set to Need Code Review state but I haven't found the impl code https://blueprints.launchpad.net/nova/+spec/configurable-instance-hostnames did I miss something?13:08
sean-k-mooneybauzas: that is only if its a routed network yes13:10
openstackgerritArtom Lifshitz proposed openstack/nova master: libvirt: start tracking NUMACell.socket for hosts  https://review.opendev.org/c/openstack/nova/+/76681613:10
openstackgerritArtom Lifshitz proposed openstack/nova master: extra specs/image props: add `socket` PCI NUMA affinity  https://review.opendev.org/c/openstack/nova/+/77274813:10
openstackgerritArtom Lifshitz proposed openstack/nova master: Add `socket` PCI NUMA affinity policy request prefilter  https://review.opendev.org/c/openstack/nova/+/77274913:10
openstackgerritArtom Lifshitz proposed openstack/nova master: Track host NUMA topology in PCI manager  https://review.opendev.org/c/openstack/nova/+/77414913:10
openstackgerritArtom Lifshitz proposed openstack/nova master: pci: implement the `socket` NUMA affinity policy  https://review.opendev.org/c/openstack/nova/+/77277913:10
*** macz_ has quit IRC13:10
*** belmoreira has quit IRC13:11
*** belmoreira has joined #openstack-nova13:14
*** ociuhandu has quit IRC13:15
*** ociuhandu has joined #openstack-nova13:15
*** ociuhandu has quit IRC13:15
*** ratailor has quit IRC13:16
*** ociuhandu has joined #openstack-nova13:17
*** ociuhandu has quit IRC13:22
*** macz_ has joined #openstack-nova13:27
*** macz_ has quit IRC13:31
bauzasstephenfin: gibi: sean-k-mooney: guys, hopefully, we could see us not virtually ;)13:31
bauzas:(13:32
gibiyeah13:33
sean-k-mooneyeventually13:33
*** ociuhandu has joined #openstack-nova13:34
openstackgerritKashyap Chamarthy proposed openstack/nova master: libvirt: Allow disabling CPU flags via `cpu_model_extra_flags`  https://review.opendev.org/c/openstack/nova/+/77424013:35
kashyapgibi: sean-k-mooney: artom: --^ IMHO, really don't like two separate config options (which was suggested in there); it is needlessly verbose and adds noise work13:37
kashyapI refactored it into a helper method; rewrote docs13:37
kashyapAnd added a test, of course; and fixed other bits.  /me hopes he didn't miss anything else.13:37
sean-k-mooneykashyap: as i said this is one of the points of contention that has come up every time we discussed it. i know you have always favoured the +/- approch but i know others have requested two config options in the past13:39
*** LinPeiWen has quit IRC13:39
kashyapWell, it is overblown "contention".  No one else disagreed with it13:39
kashyapsean-k-mooney: Right; I really dislike bike-shedding on this, really13:40
kashyapI just feel it is bloated to add needlessly extra options13:40
kashyapsean-k-mooney: I know you were in the "+/- camp" as you put it13:40
sean-k-mooneykashyap: im pretty sure other cores have asked you in the passed to have the two config options13:40
kashyapNo13:40
sean-k-mooneyi think i rememebr who they were too13:40
kashyapsean-k-mooney: The patch is only posted now.  There was no patch before13:40
sean-k-mooneyi just dont want to name drop in case im wrong13:40
kashyapYou're imagining the conversation.  Really.13:40
sean-k-mooneykashyap: we have discussed this in person at a desing summit before13:41
kashyapOh, well.  I was not there; or don't remember the details.13:41
kashyapIt is simply overkill; and is not just worth it.  What is there is clear, and intuitive.  That suffices.13:42
* kashyap needs a walk; feeling grumpy13:42
*** iurygregory has quit IRC13:47
*** macz_ has joined #openstack-nova13:47
*** ociuhandu has quit IRC13:48
*** ociuhandu has joined #openstack-nova13:49
*** iurygregory has joined #openstack-nova13:50
*** macz_ has quit IRC13:52
*** ociuhandu has quit IRC13:53
*** ociuhandu has joined #openstack-nova13:53
*** jangutter has joined #openstack-nova13:54
*** mlavalle has joined #openstack-nova13:55
*** martinkennelly has joined #openstack-nova13:56
*** sapd1 has joined #openstack-nova13:56
*** jangutter_ has quit IRC13:57
*** spatel has joined #openstack-nova13:58
bauzasstephenfin: working on the new rev14:03
bauzasstephenfin: could we discuss on https://review.opendev.org/c/openstack/nova/+/773976/7/nova/exception.py ?14:06
stephenfinbauzas: sure, what's up?14:10
stephenfindid you see my comment on the next patch also?14:10
bauzasstephenfin: just uploaded my comments14:12
* stephenfin refreshes14:12
* bauzas goes looking at the next change14:13
sean-k-mooneyah here https://review.opendev.org/c/openstack/nova/+/773976/7/nova/scheduler/utils.py#137014:13
sean-k-mooneyys its used in both14:13
sean-k-mooneythats called form the request filter in the next change right14:14
sean-k-mooneyya here https://review.opendev.org/c/openstack/nova/+/749068/17/nova/scheduler/request_filter.py#34114:15
bauzassean-k-mooney: yup14:15
bauzashonestly, we should just supporting this exception14:15
bauzasfor all of the issues14:15
bauzaswe could have other exceptions, like for looking at the port14:15
bauzasbut for getting a NoValidHost, just the above should be needed14:16
bauzasanyway, stephenfin provided me a good concern for https://review.opendev.org/c/openstack/nova/+/749068/17/nova/tests/fixtures.py so I'll provide a new revision, but in case we want to dicuss about exceptions here, maybe let's agree on providing a new FUP then14:17
*** links has quit IRC14:17
*** links has joined #openstack-nova14:18
stephenfinbauzas: hmm, so we do14:18
stephenfinI hate to say it but could we use two exceptions? /o\14:18
stephenfinI know it's sort of bikeshedding, but I'm uncomfortable with using non-generic exceptions across multiple "services"#14:19
stephenfinwith the obvious caveat that if everyone else disagrees with me or thinks it's not an option, I can go along with the majority14:20
bauzaswell, I can see your concerns14:22
bauzaslet me try to first upload the new series and discuss about it later for a FUP14:22
stephenfinsounds good to me14:22
*** macz_ has joined #openstack-nova14:29
*** macz_ has quit IRC14:34
bauzasstephenfin: huh, /me is a sad panda again due to mypy https://review.opendev.org/c/openstack/nova/+/773976/7/nova/network/neutron.py#353314:42
bauzasbecause of static type checking, we need to change code14:42
bauzasit's like when we want to tell about objects and we need to avoid circular imports14:42
bauzassounds to me that mypy is strictier than it should and prevents us good faith14:43
bauzasany static type checker shouldn't be invasive14:43
bauzasso, I'll explicitly return None as I stepped into this 'shit' (with the left foot hopefully), but that won't convince me of the mypy opportunity14:44
bauzasand if I was grumpy (which i was horribly last days and I apologize), I could just remove all my annotations from the code I wrote14:45
bauzasbut I'll continue the game14:45
openstackgerritLucas Alvares Gomes proposed openstack/nova master: [OVN] Adapt the live-migration job scripts to work with OVN  https://review.opendev.org/c/openstack/nova/+/77641914:47
bauzasat least, having static type tool developers being pedantic and opionated about what python should be seems to be fragile for the very least14:47
gibibauzas: I felt the same when I got introduced to this return None change. It is a pain. But it is a one time pain and I believe the explicit types will give us gains when reading and changing the code later14:47
bauzasagain, not convinced from the experience I have of various linters14:47
bauzasand again, python is all duck typing14:48
bauzashaving developers convinced of the opposite seems terrible to me frankly14:48
*** whoami-rajat__ is now known as whoami-rajat14:48
bauzasthe fact is, OpenStack is made with python, OK14:49
bauzasbut it's just a language14:49
bauzasand we shouldn't be doing pythonesque things because of python, but rather because we want it14:49
*** zimmerry has joined #openstack-nova14:50
*** macz_ has joined #openstack-nova14:50
sean-k-mooneybauzas: i think the different is that we disagree on what improves the code14:50
*** tosky has quit IRC14:51
*** tosky_ has joined #openstack-nova14:51
*** tosky_ is now known as tosky14:51
bauzasbeing explicit on the fact that return has to return None doesn't sound to me a major improvement :)14:51
bauzasand a linter never proved me enough confidence in the fact we would write better code14:52
bauzasbetter code is written by people who better understand code14:52
sean-k-mooneyit depens how far you take it. if you look at c++ for example being able to annotate funcitons with nodiscard is powerful14:52
bauzasand code reviews certainly help more than any linter14:53
sean-k-mooneye.g. it allows you to state if you dont at least store and preferebaly check the retrun value then its a logic error14:53
bauzaslike, the best comments from stephenfin would never be caught by a linter14:53
bauzasand I feel we are distracting ourselves14:53
sean-k-mooneytrue but i think type hint aid understanding. we dont have to use them but i think we would have better code if we did14:54
bauzasgiving us false confidence that we will improve our internal APIs14:54
*** macz_ has quit IRC14:54
bauzasfwiw, I did a lot of programming with strong typed languages14:55
sean-k-mooneywell i have seen too many bugs cause by using incorrect data in our tests to think that if we enforced type better it would not happen14:55
bauzasand I never saw this being a benefit for distributed programming14:55
sean-k-mooneypython is a stongly typed language14:55
bauzasJava pursues the idea that annotations help microservices14:55
sean-k-mooneyits just not staticly typed14:55
bauzasbut trust me, you can write terrible microservices in Java despite using annotations14:56
sean-k-mooneyof coruce you can14:56
sean-k-mooneyits a tool like any other14:56
bauzasright14:56
sean-k-mooneyyou can always missuse a tool if you dont understand it14:56
bauzasbut if a tool (or a process), instead of easing my work, requires me to further work, this doesn't sound to me then right14:57
sean-k-mooneywell personly i always found the parms in docs sting unhelpfull and a hinderance to future work14:57
bauzasand here, explicitly stating "return None" in order to get my code merged doesn't sound to me great at most14:57
sean-k-mooneythey get out of data and you have to check it14:58
sean-k-mooneywell you are relying on an implict convertion to None otherwise14:58
sean-k-mooneyif you just do return14:58
bauzassean-k-mooney: they get out of data by lack of solid reviews14:58
sean-k-mooneyreturn None is more explcit14:58
sean-k-mooneynot eveyone know if you do return it accutly become the same a return None14:59
bauzasagain, that's why we have Gerrit14:59
bauzashumans are the best linters by far15:00
sean-k-mooneyim not sure this is getting us anywhere productive15:00
sean-k-mooneyand since im currently in a low to moderate amount of pain im goignto try an get some work done sorry15:01
gibibauzas: return None is price to gain every benefit of mypy, it is not return None that directly helps you15:01
gibireturn None enables mypy to helps us :)15:03
bauzasgibi: my other concern is that we currently make mypy fencing our gate15:04
sean-k-mooneybauzas: we dont15:04
bauzassean-k-mooney: really ?15:04
sean-k-mooneyits not enforced by ci15:04
sean-k-mooneyunless we put it in the pep8 job15:04
sean-k-mooneybut i did not think we did15:05
bauzasthen, can I leave "return" without explicitely following it by "None" ?15:05
sean-k-mooneylet me check15:05
bauzasin the past, we decided which PEPs we were following15:05
sean-k-mooneyoh sorry ya we do https://github.com/openstack/nova/blob/master/tox.ini#L5715:06
sean-k-mooneybut only on the files we have enabled15:06
sean-k-mooneythats why im miss remembering15:06
bauzasright, my point15:06
bauzasanyway, 1:1 now15:06
gibibauzas: what we are fencing against is a half done mypy support. If you don't want to use mypy you dont add any annotation to a function the mypy will assume Any15:06
sean-k-mooneyif its not listed in https://github.com/openstack/nova/blob/master/mypy-files.txt we currently dont enforce it15:07
gibibauzas: as soon as you added some annotation to a function then you have to make it complete and consistent for mypy15:07
gibiwe are fencing against that15:07
gibito avoid wrong type annotation15:07
gibias wrong annotation is worst than no annotation15:07
sean-k-mooneyyep15:07
sean-k-mooneyits worse then no annotation15:08
stephenfinbauzas: Don't you feel we're going in roundabouts here? :)15:09
artomYeah, but you're Irish, so you're going round the other way15:10
sean-k-mooneylol15:10
*** dave-mccowan has joined #openstack-nova15:11
sean-k-mooneydid people see the securit sig email a few minuts ago15:11
*** ihti[m] has joined #openstack-nova15:12
sean-k-mooneyhttps://bugs.launchpad.net/nova/+bug/1798904 might be mitgated by the patches for https://bugs.launchpad.net/neutron/+bug/1734320 the last of which is https://review.opendev.org/c/openstack/nova/+/60243215:13
openstackLaunchpad bug 1798904 in os-vif "tenant isolation is bypassed if port admin-state-up=false" [Critical,Confirmed] - Assigned to sean mooney (sean-k-mooney)15:13
openstackLaunchpad bug 1734320 in os-vif "Eavesdropping private traffic" [High,Fix released] - Assigned to sean mooney (sean-k-mooney)15:13
openstackgerritStephen Finucane proposed openstack/nova master: Use neutronclient's port binding APIs  https://review.opendev.org/c/openstack/nova/+/70629515:13
sean-k-mooneyhttps://bugs.launchpad.net/nova/+bug/1552042 im not familar with15:13
openstackLaunchpad bug 1552042 in OpenStack Compute (nova) "Host data corruption through nova inject_key feature" [Medium,In progress] - Assigned to Matt Riedemann (mriedem)15:13
openstackgerritSylvain Bauza proposed openstack/nova master: Add net & utils methods for routed nets & segments  https://review.opendev.org/c/openstack/nova/+/77397615:14
sean-k-mooneylooks like mriedem was trying to remove the file injefction feature with https://review.opendev.org/c/openstack/nova/+/324720/15:14
openstackgerritSylvain Bauza proposed openstack/nova master: Add a routed networks scheduler pre-filter  https://review.opendev.org/c/openstack/nova/+/74906815:14
*** efried has joined #openstack-nova15:18
gibiartom: lol15:20
*** ociuhandu has quit IRC15:24
*** ociuhandu has joined #openstack-nova15:25
*** links has quit IRC15:27
*** zoharm1 has quit IRC15:29
*** ociuhandu has quit IRC15:30
*** ociuhandu has joined #openstack-nova15:30
sean-k-mooneygibi: fyi just updated https://bugs.launchpad.net/nova/+bug/1798904 with my current understanding perhapes we shoudl review https://bugs.launchpad.net/nova/+bug/1552042 in the team call15:34
openstackLaunchpad bug 1798904 in os-vif "tenant isolation is bypassed if port admin-state-up=false" [Critical,Confirmed] - Assigned to sean mooney (sean-k-mooney)15:34
openstackLaunchpad bug 1552042 in OpenStack Compute (nova) "Host data corruption through nova inject_key feature" [Medium,In progress] - Assigned to Matt Riedemann (mriedem)15:34
sean-k-mooneyby which i mean nova meeting15:34
sean-k-mooneystephenfin: have we removed file injection yet?15:36
stephenfinI don't think so15:37
stephenfinFrom nova, you mean?15:38
sean-k-mooneyya15:38
stephenfinI don't think we can without bumping out minimum API microversion15:38
sean-k-mooneywe deprecated it queens for removal15:38
stephenfin*our15:38
stephenfinRight?15:38
sean-k-mooneywell you just deleted half of the hyperviors api15:38
sean-k-mooneyand remove xen specifc ones last cycle15:38
sean-k-mooneyso we could15:38
stephenfinThat's different though15:39
*** spatel has quit IRC15:39
sean-k-mooneyhow15:39
sean-k-mooneyyou flat out removed api with no fallback15:39
stephenfinRight, but this would involve suggested removing certain microversions and keeping the rest of the API15:40
sean-k-mooneywe partly have doe this by the way in https://github.com/openstack/nova/blob/e6f5e814050a19d6f027037424556b2889514ec3/nova/api/openstack/compute/rest_api_version_history.rst#25715:40
stephenfinOr at least having those microversions behave differently on one server than another15:40
stephenfinwhich is arguably worse, depending on how much of a purist you are15:40
sean-k-mooneyyep thats what will happen with the xenapis or hyperviors15:41
sean-k-mooneyor any other  api wehre we now return a 404 and removed the code15:41
stephenfinnot realllly15:42
sean-k-mooneyim really not seeing why it is not15:42
stephenfinwe've never (knowingly) changed behavior of an existing microversion15:42
stephenfinexcept where it was returning a 5xx error15:42
stephenfinright?15:43
sean-k-mooneysure we have15:43
sean-k-mooneyyou jsut did it with the hyperviors stats api15:43
sean-k-mooneyyou cant use the old microverion and get that back right?15:43
stephenfinNo, you can15:43
sean-k-mooneyreally i though you were killing the code15:44
stephenfin2.87 and boom, you're back to the bad old world full of lies and deceit15:44
stephenfinnope15:44
*** k_mouza has quit IRC15:44
stephenfincos we don't do that15:44
stephenfinunless we have no choice15:44
sean-k-mooneywell you did kill the code for xen15:44
stephenfinyes, we had no choice there. The APIs didn't work without it15:44
sean-k-mooneyand we have killed the code for nova networks and cells v115:44
*** k_mouza has joined #openstack-nova15:44
stephenfinbut we never had a release where 2.N still existed but gave different responses to previous releases15:45
sean-k-mooneyim not sure about that15:45
*** dklyle has joined #openstack-nova15:45
stephenfin2.N should yield consistent behaviour until we reach the point where we can no longer support it, in which case it'll return 404 or 410 for all microversions15:46
sean-k-mooneydo we still have the code for the xen specific console server action15:46
stephenfinI think that's a HTTP 410 now15:46
stephenfinOr 404, I don't recall15:46
sean-k-mooneyso there is a case where its go.15:47
sean-k-mooneyyour conserned that we woudl be breaking server cretae for those that use file injection15:47
sean-k-mooneyusign the old microverion15:47
stephenfinyeah, exactly15:47
sean-k-mooneyright im suggesting its been deprecated for remval since queens15:47
sean-k-mooneyand we shoudl actully remove it15:47
stephenfinWe don't think anyone was using the Xen stuff, and we know they couldn't use the nova-network stuff15:48
stephenfinYou'd only know that if you used a newer microversion though15:48
stephenfinand if you're using OSC, you're probably using 2.115:48
stephenfinfor now - we're working on it15:48
sean-k-mooneyyep probably15:48
stephenfinthis really feels like a PTG discussion15:48
stephenfinor at least openstack-discuss15:48
sean-k-mooneywell its a long standing public security bug15:48
stephenfinsince you and I can't decide this unilaterally15:49
sean-k-mooneywe can fix it other ways too15:49
stephenfinyup, aware there are attenuating circumstances here15:49
sean-k-mooneyi just dont want us to keep putting of fixing the secuity bug15:49
sean-k-mooneydeprecation happend via this spec by the way  minimum supported microversion in the distant future.15:50
sean-k-mooney....15:50
sean-k-mooneyhttps://specs.openstack.org/openstack/nova-specs/specs/queens/implemented/deprecate-file-injection.html#rest-api-impact15:51
stephenfinnow bumping the API minimum is something I could get behind15:51
stephenfinwe're coming close to 3 digit microversions...15:51
sean-k-mooneyyep15:51
stephenfinthat's _definitely_ a PTG discussion though :-D15:51
openstackgerritLucas Alvares Gomes proposed openstack/nova master: [OVN] Adapt the live-migration job scripts to work with OVN  https://review.opendev.org/c/openstack/nova/+/77641915:51
sean-k-mooneyand we called that out in the spec by the way15:51
sean-k-mooney" The point of this microversion is really to signal that users should not be using this legacy part of the compute API, and to set a timer on when it could be removed if nova ever starts requiring a higher minimum supported microversion in the distant future."15:52
sean-k-mooneygibi: is there an etherpad for the xena ptg?15:52
sean-k-mooneygibi: part of me really wants to declare xena a tech debt removal cycle15:53
sean-k-mooneybut i do think discussing raising the min microverion may be somethign we shoudl discuss or a differnt path to removing long deperecated apis15:54
gibisean-k-mooney: good point I should have start a xena ptg pad15:54
sean-k-mooneygibi: ya that getting worringly close...15:54
* sean-k-mooney still has to finish features15:54
gibisean-k-mooney: I've just read back, if you want to discuss the unembargoed security bug on the meeting then please bring it up :) either in the bug section or in the OpenDiscussion15:55
sean-k-mooneyan sure i thin the networking one im goign to fix via other work so ill just add it to the things i test15:56
gibiok15:56
* sean-k-mooney if we were to raise min micoro version 2.60 (queens) would be nice.15:57
*** lpetrut has quit IRC16:00
gibisean-k-mooney: xena ptg etherpad https://etherpad.opendev.org/p/nova-xena-ptg16:00
sean-k-mooneygibi: thanks im going to try and avoid adding too much to it if i can :)16:01
gibisean-k-mooney: do not limit yourself, we can always remove things later :)16:01
sean-k-mooneyoh you already have the do not translate message nice16:01
*** spatel has joined #openstack-nova16:01
*** vishalmanchanda has quit IRC16:02
gibicarried over from the wallaby pad :)16:02
sean-k-mooneyya i guess i just havent done my onw retro on how things have gone over the last 6-12 monts and what did/didnt get done16:02
gibisean-k-mooney: btw team meeting is ongoing :)16:03
gibiif you want to mention something16:03
sean-k-mooneyoh ya :)16:03
*** khomesh24 has quit IRC16:09
*** spatel has quit IRC16:13
*** spatel has joined #openstack-nova16:22
*** macz_ has joined #openstack-nova16:56
sean-k-mooneyactully looks liek we have a few others that were not on the list16:58
sean-k-mooneylike https://bugs.launchpad.net/nova/+bug/186189316:58
openstackLaunchpad bug 1861893 in OpenStack Compute (nova) "os-assisted-volume-snapshots passes unsanitised file path to the libvirt driver" [Medium,Confirmed]16:58
sean-k-mooneywe could not actuly exploit ^ so its just a security hardening case16:59
openstackgerritVishal Manchanda proposed openstack/nova master: Docs: Correct ``Password injection using the dashboard`` Explanation  https://review.opendev.org/c/openstack/nova/+/77508416:59
sean-k-mooneyspecificly class c1 "Not considered a practical vulnerability (but some people might assign a CVE for it)"16:59
* lyarwood can take https://bugs.launchpad.net/nova/+bug/186189317:00
openstackLaunchpad bug 1861893 in OpenStack Compute (nova) "os-assisted-volume-snapshots passes unsanitised file path to the libvirt driver" [Medium,Confirmed]17:00
*** macz_ has quit IRC17:01
gibistephenfin, dansmith: I have extra logs for the slowness of the db migration tests (even after the compaction) https://review.opendev.org/c/openstack/nova/+/775094 This result confirms for me that it is simply an extremely slow test node with noisy neighbors. I have not got new ideas how to move forward with this17:05
*** luksky has quit IRC17:05
sean-k-mooneycan we increase the timeout wait again17:13
sean-k-mooneyyou tweaked it previously if im remebring corectly17:14
sean-k-mooneyif its really just a slow node retrying it like the pytest flaky decorator does wont help17:14
sean-k-mooneygibi: alternitivly i dont know if there is a way to do the db walk in multiple tests17:15
sean-k-mooneye.g decompose it to do it in severnal batches of verions over 2+ tests17:15
sean-k-mooneybut ya not really sure how to workaroud this17:16
sean-k-mooneyat least nothing to adress the underlying issue17:16
dansmithgibi: what provider?17:16
*** macz_ has joined #openstack-nova17:17
dansmithgibi: tripleo was having some IO problems on a vexx node, but we did a bunch of digging into the node stats and it seemed like it was just too many noisy neighbors17:17
dansmithgibi: oh that's an arm64 run17:18
sean-k-mooneyin that case ya17:19
sean-k-mooneyso Provider: linaro-us17:20
sean-k-mooneyalthough the py39 verion passed in hlaf the time17:20
sean-k-mooneyso its not a genral problem with the provider but there might be too high a contention on some hosts17:21
gibisean-k-mooney: I can increase the timeout yes17:21
gibidansmith: I can do some more recheck to get a non arm failure if that helps17:21
*** macz_ has quit IRC17:22
dansmithgibi: well, I'm just saying, I don't know much about that environment.. could be raspberry pis and slow SD cards for all I know :P17:22
gibidansmith: OK :)17:22
sean-k-mooneydansmith: they are realy arm server systems17:22
dansmithsean-k-mooney: I know :P17:23
stephenfinI think they're emulated17:24
stephenfinAssuming it's the same machines that you linked me from the kolla jobs yesterday, sean-k-mooney17:24
dansmithreally? I thought these were actual arm boxes17:24
sean-k-mooneydansmith: https://zuul.openstack.org/build/b038b4112ef34b15b885f204da27c808/log/primary/logs/kolla/nova/nova-compute.txt#84317:24
sean-k-mooneystephenfin: its is and its not emulated17:24
sean-k-mooneywell they are vms if that is what you mean17:25
stephenfinI mean it's using <domain>qemu</domain>17:25
sean-k-mooneybut this i arm hardware provide by linaro to do real testing on arm17:25
stephenfinnot <domain>kvm</domain>17:25
sean-k-mooneystephenfin: right but thats becasue we disabel nested vert17:26
stephenfinso it's entirely software emulation, right?17:26
stephenfinokay, cool, that's all I was saying17:26
sean-k-mooneythe vms created by it will use qemu without kvm in the kolla job17:26
stephenfinthe PPC jobs you linked are running on bare metal (with KVM)17:26
sean-k-mooneybut the vms we are runing the test in are on real arm hardware17:26
sean-k-mooneystephenfin: yep its a third party ci17:27
*** ociuhandu has quit IRC17:27
sean-k-mooneystephenfin: nested vrit was disabled by policy in the first party ci17:27
sean-k-mooneythat has been relaxed slightly more recnetly but its still not gernarally avaliable17:28
stephenfinyup17:28
stephenfinfwiw, the PPC jobs seem to be running on bare metal or nested virt17:28
stephenfinI'm not sure which17:28
stephenfinbut KVM is enabled17:29
sean-k-mooneyi would guess nested virt17:29
sean-k-mooneydid they only have 8 cores?17:29
stephenfinas would I. Letting arbitrary jobs loose on bare metal doesn't sound so good17:29
sean-k-mooneyand 8 G of ram17:29
stephenfinOh, I don't recall and I don't have the links handy17:30
sean-k-mooneythe arm jobs are 8 cores and 8g of ram like or standard ci flavors17:30
sean-k-mooneystephenfin: not important but htat a good way to ficure out if its nested virt or not even with host passthough17:31
stephenfinyup, good point that17:31
* sean-k-mooney forgot to disabel image integraty check when installing17:33
sean-k-mooneythat takes over an hour if your doing a remote instal like i am17:33
*** rpittau is now known as rpittau|afk17:47
*** ociuhandu has joined #openstack-nova17:50
*** ociuhandu has quit IRC17:50
*** ociuhandu has joined #openstack-nova17:51
*** luksky has joined #openstack-nova17:54
*** ociuhandu has quit IRC17:55
*** dtantsur is now known as dtantsur|afk18:00
*** k_mouza has quit IRC18:04
*** macz_ has joined #openstack-nova18:09
*** macz_ has quit IRC18:14
*** ralonsoh has quit IRC18:15
*** derekh has quit IRC18:24
*** sapd1 has quit IRC18:28
*** macz_ has joined #openstack-nova18:30
*** andrewbonney has quit IRC18:34
*** macz_ has quit IRC18:35
*** xarlos has joined #openstack-nova18:47
*** efried has quit IRC18:49
*** bbowen has quit IRC19:06
*** arne_wiebalck has quit IRC19:15
*** mgoddard has quit IRC19:17
*** mgoddard has joined #openstack-nova19:18
*** efried has joined #openstack-nova19:41
spatelsean-k-mooney any idea i am seeing this error on nova - ERROR stevedore.extension [req-249d0078-a423-4815-9c32-589f1814209a 3ffb7b8d55e1471aa56407e5a583037f 584651a0fe954d9480435678ea3ce5ba - default default] Could not load 'oslo_cache.etcd3gw': No module named 'etcd3gw': ModuleNotFoundError: No module named 'etcd3gw'19:47
*** arne_wiebalck has joined #openstack-nova19:58
sean-k-mooneyam its realted to how oslo.cache is loading all the backend drivers even if you are not using it19:59
sean-k-mooneyit wont break anything but it should be fixed at some point19:59
spatelthank you for confirmation.20:00
sean-k-mooneywhen it import the backeds to see which one it shoudl use its uncondtionaly trying to import etcd3gw package20:01
spatelAfter rebooting my rabbitMQ cluster look like everything slowed down, VM creation process and VM delete process are very slow20:01
spatelI have noticed this in nova logs - failed to perform operation on queue 'notifications_designate.info' in vhost '/nova' due to timeout20:02
spatelwhen i checked designate.info queue on rabbitMQ and it doesn't exist20:02
sean-k-mooneywell if you restarted it its going to cause all the compute to have to reconnect20:02
sean-k-mooneydepending on how it happend you might need to restart the nove comptue agents too20:02
spatelhmm! i did rolling restart node-1 then node-2 ... node-320:03
sean-k-mooneydepending on how you have the clustering set up and loadbalnce it may or may not help20:04
spateli don't mind to restart all compute agent or nova-api20:04
spateli am wondering about 'notifications_designate.info' queue, who create that queue ?20:05
spateldoes nova create that queue when it receive designate notification?20:05
sean-k-mooneyits the other way around20:06
sean-k-mooneydesignate subscipes to nova notifiction20:06
sean-k-mooneynova does not listten for notificaiton20:06
spatelhow do i get that queue back?  'notifications_designate.info'20:07
sean-k-mooneyposibly restart the designate server but i dont really know20:08
spatelwhat if i tell nova.conf  driver = noop20:08
spatelI did restart designate but no luck20:08
johnsomspatel Did you upgrade designate? Newer versions don't rely on rabbit or the sink for nova/neutron/designate messaging.20:14
spatelI didn't upgrade designate, i am running victoria one20:14
spateljohnsom it was working before but after rabbitMQ rolling restart everything looks bad20:15
spateli may try to re-install designate20:15
johnsomHmm, that seems unnecessary.20:16
johnsomI really haven't poked too much at the notifications, so don't have a lot of experience there. You could ask in the #openstack-dns channel though. Others there may have more details on the notifications.20:17
*** gyee has joined #openstack-nova20:18
spateljohnsom agreed, i am seeing when i create vm it takes almost 5 min to spun up, getting stuck in scheduling...20:18
spatelif i delete vm it get stuck in deleting stat for 5 min..20:18
spatelall i am seeing in error related designate.info queue not found20:19
*** slaweq has quit IRC20:21
*** k_mouza has joined #openstack-nova20:29
*** k_mouza has quit IRC20:34
*** tbarron|out has joined #openstack-nova20:38
*** arne_wiebalck has quit IRC21:05
*** mgagne has quit IRC21:08
spateljohnsom after restarting glance i found VM creating process speed up but deleting still taking 5 min to delete vm21:19
johnsomSo maybe the designate messages are not related21:19
spatelpossible21:21
spatelmy rabbitMQ cluster also looking health so not sure what holding back to delete vm21:21
spatelnot seeing any error also..21:21
*** whoami-rajat has quit IRC21:21
spatellet me restart all service except rabbitMQ and see21:22
*** arne_wiebalck has joined #openstack-nova21:27
*** xek has quit IRC21:47
*** belmoreira has quit IRC21:50
*** bbowen has joined #openstack-nova21:59
*** ociuhandu has joined #openstack-nova22:33
*** rcernin has joined #openstack-nova23:03
spateljohnsom does image-caching is disable when using Ceph storage for glance?23:04
johnsomspatel Sorry, I have no idea.23:04
spatelI wonder that was my issue because recently i migrated glance to ceph rbd23:04
spatelmay be that is why its very slow to create VM (earlier when i was using local disk with glance talking few second to spun up vm)23:05
spateltaking*23:05
*** rcernin has quit IRC23:11
*** rcernin has joined #openstack-nova23:12
*** tosky has quit IRC23:31
*** ociuhandu has quit IRC23:44
spateljohnsom all my problem solved :)23:46
johnsomspatel Oh good23:46
spatelafter setting driver = noop in nova-api and nova-compute* nodes23:46
spatelmy issue is nova still looking for designate.info queue which doesn't exist and that was causing all chaos23:47
spatelI need to work on designate to find out what is going on but i believe interim solution is to tell nova don't look for notification queue23:48
spatelanyway! time for dinner! see you tomorrow.. thank you for your support.23:49
*** spatel has quit IRC23:50

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!