| *** ministry is now known as __ministry | 03:31 | |
| *** blarnath is now known as d34dh0r53 | 05:06 | |
| plibeau | hello guys, if you have sometime to review please: https://review.opendev.org/c/openstack/nova/+/861172 | 09:27 |
|---|---|---|
| *** elodilles is now known as elodilles_afk | 09:39 | |
| *** elodilles_afk is now known as elodilles | 11:12 | |
| opendevreview | Merged openstack/nova master: Fix rescue volume-based instance https://review.opendev.org/c/openstack/nova/+/852737 | 11:17 |
| elodilles | bauzas: hi, you've told me to ping you about the ussuri and train gate issue (failed to build cryptography bcrypt). If you have any memories about this error then please let me know :) an example: https://zuul.opendev.org/t/openstack/build/0bc1bf3540c5446fa0026558f30fbec8 | 12:26 |
| opendevreview | Rajesh Tailor proposed openstack/nova stable/zed: Handle InstanceInvalidState exception https://review.opendev.org/c/openstack/nova/+/872115 | 12:46 |
| opendevreview | Rajesh Tailor proposed openstack/nova stable/zed: Fix rescue volume-based instance https://review.opendev.org/c/openstack/nova/+/872116 | 12:46 |
| opendevreview | Rajesh Tailor proposed openstack/nova stable/yoga: Handle InstanceInvalidState exception https://review.opendev.org/c/openstack/nova/+/872117 | 13:01 |
| opendevreview | Rajesh Tailor proposed openstack/nova stable/yoga: Fix rescue volume-based instance https://review.opendev.org/c/openstack/nova/+/872118 | 13:02 |
| sean-k-mooney | elodilles: we used to work around that by not building it and useing the prebuilt wheel | 13:04 |
| sean-k-mooney | elodilles: the cryptography module added rust as a build dep | 13:04 |
| sean-k-mooney | which is not installed by devstack | 13:04 |
| sean-k-mooney | without rust the module could not be built and installed in the tempest jobs | 13:04 |
| sean-k-mooney | we avoided the need to do that by using the prebuilt wheels | 13:05 |
| sean-k-mooney | it sound like either those have been pulled form pypi or are not n the wheel cache avaiable in the providers fo the ci | 13:05 |
| elodilles | sean-k-mooney: oh. nice. good question how to solve that then in upstream ci... :S | 13:07 |
| sean-k-mooney | the simpletst way to fix this is to user rust_up to install rust so it can compile form source | 13:07 |
| sean-k-mooney | we might have a role for that | 13:08 |
| sean-k-mooney | we do https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/ensure-rust | 13:09 |
| elodilles | oh, that sounds better then \o/ | 13:09 |
| elodilles | we just have to add it for failing jobs on the failing branches then i guess | 13:10 |
| sean-k-mooney | add it as or too the pre playbook ya | 13:10 |
| sean-k-mooney | that or have devstack do it | 13:10 |
| sean-k-mooney | but the role is proably simpler | 13:10 |
| sean-k-mooney | it looks like it will have rustup install the latest sable version of the tool chain | 13:11 |
| *** tkajinam is now known as Guest2882 | 13:11 | |
| sean-k-mooney | https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/ensure-rust/defaults/main.yaml | 13:11 |
| sean-k-mooney | so that proably will do what we want out of the box | 13:11 |
| elodilles | cool, thx, i'll try out this \o/ | 13:12 |
| *** dasm|off is now known as dasm | 13:57 | |
| opendevreview | Elod Illes proposed openstack/nova master: DNM: CI test https://review.opendev.org/c/openstack/nova/+/872178 | 14:38 |
| opendevreview | Elod Illes proposed openstack/nova stable/ussuri: DNM: CI test https://review.opendev.org/c/openstack/nova/+/872184 | 14:57 |
| * bauzas trying to reboot my knowledge on the CPU series I did one month ago, but it's difficult :( | 15:00 | |
| artom | So a CPU is a central processing unit | 15:03 |
| artom | It's found inside computers and other electronics | 15:03 |
| opendevreview | ribaudr proposed openstack/os-traits master: Add 'COMPUTE_SHARE_LOCAL_FS' https://review.opendev.org/c/openstack/os-traits/+/872185 | 15:03 |
| sahid | artom: ahaha :-) | 15:03 |
| sahid | bauzas: it's regarding the online/offline cpus? | 15:03 |
| bauzas | yes | 15:03 |
| sahid | cool, interesting work | 15:04 |
| sahid | i will try to continue my review on it | 15:05 |
| opendevreview | Jorge San Emeterio proposed openstack/nova master: Dividing global privsep profile https://review.opendev.org/c/openstack/nova/+/871729 | 15:06 |
| sahid | i was just not sure about the files that you have added in one of your patches to simulates hw ;) | 15:06 |
| opendevreview | Jorge San Emeterio proposed openstack/nova master: WIP: Moving privsep profiles to nova/__init__.py https://review.opendev.org/c/openstack/nova/+/872010 | 15:13 |
| dansmith | sean-k-mooney: I think I better put this host/node consistency check in its own patch after the last one in the series, because it seems to be death by a thousand cuts on the functional tests | 15:23 |
| dansmith | I also wonder if it might be better to just mock it out completely for functional | 15:23 |
| dansmith | because basically every place we do a compute restart type operation, we'll fail since we don't have the node uuid thing mocked out to what it needs to be at the time | 15:24 |
| opendevreview | Jorge San Emeterio proposed openstack/nova master: WIP: Moving privsep profiles to nova/__init__.py https://review.opendev.org/c/openstack/nova/+/872010 | 15:32 |
| opendevreview | Aaron S proposed openstack/nova master: Add further workaround features for qemu_monitor_announce_self https://review.opendev.org/c/openstack/nova/+/867324 | 15:46 |
| elodilles | sean-k-mooney: unfortunately ensure-rust does not work: https://zuul.opendev.org/t/openstack/build/f2efc09c770a448297fe90cd73191d5a | 15:54 |
| elodilles | sean-k-mooney: but meanwhile i've checked and the problem is the old pip version. | 15:55 |
| elodilles | sean-k-mooney: with the old pip version i was able to reproduce the 'missing rust' error, and after upgrading pip it installed cryptography fine | 15:56 |
| sean-k-mooney | ack | 16:05 |
| bauzas | sean-k-mooney: maybe you haven't seen but I created a Core API for the CPU states https://review.opendev.org/c/openstack/nova/+/868236/2/nova/virt/libvirt/cpu/core.py#47 | 16:09 |
| bauzas | sean-k-mooney: but I can modify both modules to rather only have one Core API that would directly call the filesystem instead of calling the backed module | 16:10 |
| sean-k-mooney | ill take a look later | 16:41 |
| sean-k-mooney | elodilles: ack so using new pip might correct the issue provided that does not break anything with the new resolveer logic | 16:41 |
| elodilles | sean-k-mooney: yes. though i have a fear that it would break something :/ | 16:45 |
| elodilles | sean-k-mooney: anyway, i think the prebuilt wheel disappeared from pypi that's why we are facing this issue now :( | 16:47 |
| elodilles | (or we use different pip version now than before, but I haven't find any proof for that yet) | 16:53 |
| sean-k-mooney | ya i suspect it disappeared too | 16:53 |
| opendevreview | Merged openstack/nova master: Persist existing node uuids locally https://review.opendev.org/c/openstack/nova/+/863918 | 18:29 |
| opendevreview | Merged openstack/nova master: Fix huge-page doc https://review.opendev.org/c/openstack/nova/+/869689 | 18:29 |
| dansmith | sean-k-mooney: I thought on friday you said you were happy with my answer here: https://review.opendev.org/c/openstack/nova/+/863919/12 | 18:41 |
| dansmith | but I also thought you commented on it, which I don't see... do we need more on that? | 18:41 |
| sean-k-mooney | i think that was in context of https://review.opendev.org/c/openstack/nova/+/863918/12 | 18:41 |
| sean-k-mooney | i have not looked at the rt one since then | 18:42 |
| sean-k-mooney | as in i looked at it before we talked on irc/meet | 18:42 |
| sean-k-mooney | ill try and loop back too it again shortly | 18:42 |
| dansmith | okay just wanted to make sure I wasn't missing some response or action | 18:43 |
| sean-k-mooney | no i think we can likely proceed with that for now | 18:44 |
| sean-k-mooney | https://review.opendev.org/c/openstack/nova/+/863919/12/nova/tests/unit/compute/test_resource_tracker.py#1553 | 18:44 |
| dansmith | ack | 18:44 |
| sean-k-mooney | i was expecting to be blocked becasue i was expecting use to block hypervior_hostname changes which we agreed should be done but is out of scope of the spec | 18:44 |
| sean-k-mooney | im ok to defer that to after the current serise of patches as either a bug or something we do next cycle | 18:45 |
| dansmith | I've been working all morning (and some on friday) trying to get the consistency check (i.e. "are there any nodes that claim to be mine that aren't in my list of uuids") to pass functional tests | 18:48 |
| dansmith | but I'm about to slam a body part in a door so I have an excuse to stop working on it.. this stuff is such a tangled mess | 18:49 |
| sean-k-mooney | i assume as a patch on the end of the seriese | 18:49 |
| sean-k-mooney | i was hoping we could jsut tweak _ensure_existing_node_identity | 18:49 |
| sean-k-mooney | but im guessing when we do that has test fallout | 18:49 |
| sean-k-mooney | and you have been trying to resolve that | 18:50 |
| dansmith | I don't want to put the logic in there specifically because that's the migration code, which we might remove one day once migrations are long out of our support envelope | 18:51 |
| dansmith | but that has nothing to do with the difficulty | 18:51 |
| sean-k-mooney | oh _ensure_existing_node_identity is only called there ok | 18:51 |
| dansmith | I can push up what I have if you want and you can try to get things to pass | 18:52 |
| sean-k-mooney | sure i can take a look at it | 18:52 |
| sean-k-mooney | ill proceed with the RT change and the last two patch reviews now | 18:53 |
| opendevreview | Dan Smith proposed openstack/nova master: Make resource tracker use UUIDs instead of names https://review.opendev.org/c/openstack/nova/+/863919 | 18:53 |
| opendevreview | Dan Smith proposed openstack/nova master: Fixup patch for stable-compute-uuid series https://review.opendev.org/c/openstack/nova/+/871848 | 18:53 |
| opendevreview | Dan Smith proposed openstack/nova master: Detect host renames and abort startup https://review.opendev.org/c/openstack/nova/+/863920 | 18:53 |
| opendevreview | Dan Smith proposed openstack/nova master: TURBOWIP: Add a host/node consistency check https://review.opendev.org/c/openstack/nova/+/872204 | 18:53 |
| sean-k-mooney | heh ok | 18:54 |
| sean-k-mooney | i was oging to suggest not modifying the make RT one | 18:54 |
| dansmith | I had to rebase to submit | 18:54 |
| dansmith | it's otherwise unchanged | 18:54 |
| sean-k-mooney | ya gerrit agrees so gibis +2 is still there | 18:55 |
| sean-k-mooney | i see thats not exactuly what i was expecting | 19:00 |
| sean-k-mooney | https://review.opendev.org/c/openstack/nova/+/872204/1/nova/compute/manager.py#1556 | 19:00 |
| dansmith | well, sorry to disappoint you | 19:01 |
| sean-k-mooney | i was expectign you to get teh compute node object and see if its hypervior hostname is the same as what the driver currently says it is | 19:02 |
| sean-k-mooney | i think this covers the first two cases | 19:03 |
| sean-k-mooney | on line 1563 | 19:03 |
| dansmith | but that's not going to catch the case you were concerned about.. where we have a different (generated) uuid, so we think we should create a compute node, but we fail because of the UC on the hostname | 19:03 |
| sean-k-mooney | i was concewrned about 2 thing | 19:03 |
| sean-k-mooney | i think this covers test 3 and 4 https://etherpad.opendev.org/p/Stable-compute-uuid-manual-testing#L77 | 19:04 |
| sean-k-mooney | im unsure about 9 and 10 | 19:04 |
| sean-k-mooney | https://etherpad.opendev.org/p/Stable-compute-uuid-manual-testing#L216 | 19:05 |
| dansmith | the third bullet will result in us looking up both our node and the conflicting host's node, but the uuids won't match what we expect | 19:05 |
| sean-k-mooney | a change in the hostname does not maen Conf.host changes or our uuid does but i can check your code now and confirm if it resoulve all 4 test cases | 19:06 |
| dansmith | I dunno what test 9 is supposed to be because there's no explanation other than "$old_hostname" so I'm not sure if this addresses that or not | 19:07 |
| dansmith | I think it *does* address what I listed as things it should address, | 19:07 |
| sean-k-mooney | that you change /etc/hostname form X to Y but Conf.host is hardcoded to X | 19:07 |
| dansmith | the later of which is setting CONF.host to be the same for two separate compute services | 19:07 |
| dansmith | that's the hypervisor_hostname thing right? this doesn't address that | 19:08 |
| sean-k-mooney | thats the hypervior host name thing yes | 19:08 |
| dansmith | I haven't even gotten there yet | 19:08 |
| sean-k-mooney | so that what happend in old OOO | 19:08 |
| sean-k-mooney | ack | 19:08 |
| sean-k-mooney | tripleo started hardcodeing CONF.host before they hardcoded /etc/hostname to the same value | 19:09 |
| sean-k-mooney | so 9 is basically testing that old case | 19:10 |
| dansmith | that's cool, but that's not what I'm trying to address with this patch, nor what even the series was trying to address. that's more in the scope of some of the later things in the top-level spec | 19:10 |
| dansmith | I think we can address it here, once we have a stable "who the fsck am I?" notion, but I haven't gotten there yet | 19:10 |
| sean-k-mooney | ack | 19:11 |
| sean-k-mooney | so ill retest and with your last patch i should epect it to handel 3 an 4 (file delete and file with wrong uuid) correct | 19:11 |
| sean-k-mooney | and 9/10 should still be out of scope | 19:11 |
| dansmith | probably, but since I haven't gotten the *existing* tests to pass I have no idea | 19:12 |
| dansmith | I thought you said you wanted to look at the test failures, which is why I pushed it up | 19:12 |
| sean-k-mooney | dansmith: i can do that too | 19:12 |
| sean-k-mooney | but i have yoru code deployed so i can quickly test those edge cases first | 19:13 |
| gmann | gibi: updated placement rbac change for your comment, please check (in case you missed my previous ping ) https://review.opendev.org/c/openstack/placement/+/865618 | 20:00 |
| sean-k-mooney | there is a security team irc right? | 20:08 |
| sean-k-mooney | im trying to calulate teh CVSSv3 score for the vmdk CVE | 20:08 |
| sean-k-mooney | i come up with 8.2 | 20:08 |
| dansmith | fungi: ^ | 20:10 |
| fungi | #openstack-security yeah | 20:10 |
| sean-k-mooney | ack i can ask there but you said this was not normaly done by the sectuiy team | 20:11 |
| sean-k-mooney | https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:H&version=3.1 | 20:11 |
| sean-k-mooney | that is what i came up with | 20:11 |
| opendevreview | Dan Smith proposed openstack/nova master: Fixup patch for stable-compute-uuid series https://review.opendev.org/c/openstack/nova/+/871848 | 21:31 |
| opendevreview | Dan Smith proposed openstack/nova master: Detect host renames and abort startup https://review.opendev.org/c/openstack/nova/+/863920 | 21:31 |
| opendevreview | Dan Smith proposed openstack/nova master: Check our nodes for hypervisor_hostname changes https://review.opendev.org/c/openstack/nova/+/872220 | 21:31 |
| opendevreview | Rafael Weingartner proposed openstack/nova-specs master: spec: nova Dynamic scheduler system https://review.opendev.org/c/openstack/nova-specs/+/872225 | 21:40 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!