| *** ralonsoh_out is now known as ralonsoh\ | 05:46 | |
| *** ralonsoh\ is now known as ralonsoh | 05:47 | |
| opendevreview | Merged openstack/nova master: Example NVMe cleaning script for one-time-use https://review.opendev.org/c/openstack/nova/+/948446 | 06:41 |
|---|---|---|
| Luzi | hi, is someone still working on the AMD SEV-ES patches? https://review.opendev.org/q/topic:bp/amd-sev-es-libvirt-support | 07:47 |
| Luzi | tkajinam, have you implemented this? | 07:49 |
| schwicke | About the vGPU discussion yesterday: Last year, we got hands on some 4x H100 NVIDIA GPUs, and I finally managed to rework our patch at CERN for Nova (still on Yoga, sorry). | 08:25 |
| schwicke | It now allows to configure each of the 4 cards in a single server differently with MIG while in the old days all cards had to have the same setup. | 08:27 |
| schwicke | Happy to share if people are interested. | 08:27 |
| opendevreview | ribaudr proposed openstack/nova master: Mention IRC topic update in PTL post-PTG checklist https://review.opendev.org/c/openstack/nova/+/949711 | 08:56 |
| mikal | sean-k-mooney: thanks for the hints on doing an os-traits release. Who do I need to ask to review https://review.opendev.org/c/openstack/releases/+/949710 ? | 09:05 |
| *** ralonsoh_ is now known as ralonsoh | 09:21 | |
| Luzi | hi, is someone still working on the AMD SEV-ES patches? https://review.opendev.org/q/topic:bp/amd-sev-es-libvirt-support | 09:25 |
| stephenfin | mikal: that would be Uggla as PTL | 09:44 |
| stephenfin | (and sorry, I missed your ping yesterday but glad you got to the bottom of it) | 09:45 |
| Uggla | mikal, cool I'll have a look and check if it's ok. | 09:46 |
| Uggla | mikal, btw we checked this but yesterday any feedback about it ? https://bugs.launchpad.net/nova/+bug/2103513 | 09:48 |
| mikal | Uggla: I replied to that bug earlier today... I am no javascript developer, but I can't see any evidence that the HTML5 SPICE client supports TLS. It would be possible to do, but I can't imagine anyone wants to do it. | 09:56 |
| mikal | So my recommendation would be people using the HTML5 client not enable require_secure. | 09:57 |
| Uggla | mikal, thx for updating the bug. I understand the issue is not a nova one, more something about HTML5 SPICE client (spice-html5). Am i correct ? | 10:04 |
| mikal | Yes. The SPICE HTML5 client is quite old and doesn't seem particularly maintained. It does not appear to support TLS as best as I can tell. | 10:07 |
| Uggla | ok cool so I can deal with the triage of this bug. Thx for your help mikal. | 10:08 |
| Uggla | mikal++ | 10:08 |
| Uggla | To all, I have updated the ttps://etherpad.opendev.org/p/nova-2025.2-status document. All known specs for Flamingo should be referred. If you see something wrong please let me know. | 10:09 |
| Uggla | https://etherpad.opendev.org/p/nova-2025.2-status | 10:10 |
| mikal | Uggla: no worries. Let me know if I can help somehow, as long as that isn't re-writing the JavaScript client. ;) | 10:11 |
| Uggla | Just for my knowledge is the spice client (not html) is using encryption ? | 10:12 |
| mikal | Uggla: yes. Remote viewer for example if it connects on the unencrypted port is automatically redirected to the encrypted port if TLS is turned on. | 10:13 |
| mikal | One sec, fiddling with my client... | 10:13 |
| mikal | Uggla: so yeah, there are a few moving parts with SPICE. It goes a bit like this... Before I came along, all SPICE connections to VMs were unencrypted. This continues to work if you don't turn require_secure on. The HTML5 client appears to only support unencrypted connections because old. | 10:16 |
| mikal | Uggla: If require_secure is enabled, then connections to the encrypted TCP port for a given VM still work, but are greeted with a message redirecting to the encrypted port. IIRC that message doesn't actually say what the unencrypted port number is though. | 10:17 |
| mikal | Uggla: normally that configuration (which TCP ports to use) is part of the .vv configuration the client used to connect. Kerbside generates that on the fly to map things to the right ports, although its a little more complicated than that because its doing some proxying and back to back TLS as well. | 10:18 |
| mikal | Uggla: people don't have to use Kerbside, but if they don't want to expose TCP ports on their hypervisors to random users, they do need to use either Kerbside or something like it. | 10:19 |
| mikal | Uggla: I am unaware of any other such proxy apart from oVirt's haproxy setup, which is a lot more terrible than Kerbside (although likely more performant given its not written in python). | 10:19 |
| mikal | Uggla: honestly this is all a bit of a moving target right now. I am still in the process of building all this out, although it does actually work in my lab environment right now. I have prototype deployment patches for Kolla-Ansible, but I haven't proposed them upstream yet. They are in the kerbside-patches repo on github though. | 10:20 |
| mikal | Uggla: but anyways, let me know if I can be helpful somehow, although noting that I live in an unfashionable timezone. | 10:21 |
| Uggla | mikal, cool thanks for the info. +1 | 10:26 |
| sean-k-mooney | mikal: you more or less got your anser but tis the ptl or release liason | 10:30 |
| sean-k-mooney | those are listed in the release repo too | 10:31 |
| sean-k-mooney | actully the liasons might be in the governace repo | 10:31 |
| sean-k-mooney | no release repo https://github.com/openstack/releases/blob/master/data/release_liaisons.yaml | 10:32 |
| sean-k-mooney | mikal: if your ever wondering who can do a release you can check ^ | 10:32 |
| sean-k-mooney | bauzas: would you mind reviewing https://review.opendev.org/c/openstack/releases/+/949710 for mikal once your online | 10:33 |
| mikal | sean-k-mooney: thanks for the pointers yet again | 10:37 |
| opendevreview | Serhii Ivanov proposed openstack/nova-specs master: Proposes `Add Graceful Nova Compute Shutdown` https://review.opendev.org/c/openstack/nova-specs/+/937185 | 10:41 |
| *** QG1 is now known as QG | 11:09 | |
| Luzi | hi, is someone still working on the AMD SEV-ES patches? https://review.opendev.org/q/topic:bp/amd-sev-es-libvirt-support | 11:11 |
| gibi | Luzi: I think takashi has the intention but you should check with him | 11:12 |
| Luzi | thank you gibi | 11:12 |
| gibi | tkajinam ^^ | 11:13 |
| stephenfin | sean-k-mooney: gmaan: Could we set aside a day in the next 2-3 weeks to buzz through those openapi patches, while things are _relatively_ quiet? | 11:33 |
| sean-k-mooney | ill try perhaps the 27th ill try to do it before m2 | 11:35 |
| sean-k-mooney | if i find time before then ill do oen or two reviews | 11:35 |
| stephenfin | ack | 11:36 |
| sean-k-mooney | by the way this https://review.opendev.org/q/topic:%22update-precommit%22 is my series to update our use of precommit. it start with just updatign the version to get 3.13 supprot in autopep8 then i have soem refinment to oru exsitng hook and added some new ones. the final patch add bandit to do some security scanning and i reviewd and adress all the medium and high issues | 12:35 |
| sean-k-mooney | found | 12:35 |
| sean-k-mooney | i have tired ot keep each patch fairly small and self contained but some changes are partly down to taste so feedback is welcome | 12:36 |
| gibi | sean-k-mooney: I'm +2 all over it. Thanks | 12:40 |
| opendevreview | Lajos Katona proposed openstack/os-vif master: OVS Trunk: Add bridge_name to external_ids https://review.opendev.org/c/openstack/os-vif/+/949736 | 12:43 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Translate scatter-gather to futurist https://review.opendev.org/c/openstack/nova/+/947966 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Use futurist for _get_default_green_pool() https://review.opendev.org/c/openstack/nova/+/948072 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Replace utils.spawn_n with spawn https://review.opendev.org/c/openstack/nova/+/948076 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Add spawn_on https://review.opendev.org/c/openstack/nova/+/948079 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Move ComputeManager to use spawn_on https://review.opendev.org/c/openstack/nova/+/948186 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Move ConductorManager to use spawn_on https://review.opendev.org/c/openstack/nova/+/948187 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Make nova.utils.pass_context private https://review.opendev.org/c/openstack/nova/+/948188 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Rename DEFAULT_GREEN_POOL to DEFAULT_EXECUTOR https://review.opendev.org/c/openstack/nova/+/948086 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Make the default executor configurable https://review.opendev.org/c/openstack/nova/+/948087 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Print ThreadPool statistics https://review.opendev.org/c/openstack/nova/+/948340 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Document threading mode and tuneables https://review.opendev.org/c/openstack/nova/+/949364 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: WIP: allow service to start with threading https://review.opendev.org/c/openstack/nova/+/948311 | 13:05 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: DNM:Run nova-next with n-sch in threading mode https://review.opendev.org/c/openstack/nova/+/948450 | 13:05 |
| opendevreview | Lajos Katona proposed openstack/os-vif master: OVS Trunk: Add bridge_name to external_ids https://review.opendev.org/c/openstack/os-vif/+/949736 | 13:38 |
| opendevreview | Konrad Gube proposed openstack/nova master: Use Cinder's os-extend_volume_completion volume action. https://review.opendev.org/c/openstack/nova/+/873560 | 13:57 |
| opendevreview | Kamil Sambor proposed openstack/nova master: Replace eventlet.event.Event with threading.Event https://review.opendev.org/c/openstack/nova/+/949754 | 14:05 |
| Uggla | FYI: After yesterday’s bug scrubbing and the work I’ve done on newly reported issues, we’re holding steady at 150 new bugs. This is a good sign, as the number hasn’t increased despite several new reports being filed. | 14:26 |
| Uggla | I’ve updated the Nova bug triage etherpad with the next set of bugs to review: | 14:26 |
| Uggla | https://etherpad.opendev.org/p/nova-bug-selection-for-triaging#L4 | 14:26 |
| gmaan | stephenfin: ack, will try during next week (or friday if get time) | 15:30 |
| sean-k-mooney | gmaan: gibi so https://review.opendev.org/c/openstack/cyborg/+/949772 seams to fix cyborg and since they do not have a grenade job we only need that on master | 16:04 |
| sean-k-mooney | are there any active cyborg cores? | 16:05 |
| fungi | `/msg chanserv access #openstack-nova list` includes your new channel-specific ops now | 16:05 |
| fungi | https://docs.opendev.org/opendev/system-config/latest/irc.html#basic-channel-operator-commands | 16:06 |
| fungi | useful commands documented there ^ | 16:06 |
| fungi | feel free to reach out if you have questions! | 16:07 |
| sean-k-mooney | fungi: was that for Uggla or someone specific | 16:07 |
| fungi | it was for everyone in this channel to be aware that you have channel operators you can reach out to besides our global chanops | 16:08 |
| sean-k-mooney | ack | 16:09 |
| fungi | the new ops were added when https://review.opendev.org/949707 deployed | 16:09 |
| Uggla | thx fungi it was super fast ! | 16:11 |
| fungi | you're welcome. i try not to let trivial changes sit around for long | 16:12 |
| *** ChanServ sets mode: +o Uggla | 16:13 | |
| *** ChanServ sets mode: -o Uggla | 16:15 | |
| sean-k-mooney | fungi: since your hear do you know what the current status of cyborg is from a governance point of view. interm of the activity of its core team and project status. i belive they had a ptl self nominate but i could be wrong | 16:16 |
| * sean-k-mooney checks | 16:16 | |
| sean-k-mooney | it does not list 2025.2 as apporitned so i belive that means alex was electe this cycle | 16:18 |
| sean-k-mooney | https://github.com/openstack/governance/blob/master/reference/projects.yaml#L177 | 16:18 |
| sean-k-mooney | ok i have added them to the get fix patches if we dont hear from them in a wek or two i guess i can reach out via email | 16:18 |
| gmaan | sean-k-mooney: ++, added Brin also as he also sometime checks but its mostly Wenping who is merging thing there | 16:18 |
| sean-k-mooney | s/get fix/gate fix/ | 16:19 |
| fungi | yeah, i've not heard of cyborg being on the tc's radar for inactivity, though they've not been the most high-bandwidth of projects (ever, as far as i can remember), and some cycles they don't merge anything except job config updates and the like | 16:19 |
| sean-k-mooney | gmaan: thanks. the job is non voting on our side so its not breaking anythin but given tis a simple enouch fix it would be nice to land | 16:20 |
| gmaan | usually I get cyborg change merges on time but yes soemtime I do ping them in email | 16:20 |
| sean-k-mooney | fungi: ya i was asking because some of hte bot patches are still open for things like stable/2025.1 branch creation | 16:20 |
| gmaan | it is not in activity radar from TC but clearly it is like many other projects where there are very few active core | 16:21 |
| gmaan | I will keep eyes on it and bring in TC based on another couple of week monitoring | 16:22 |
| sean-k-mooney | i fixed the api and dropped the jammy jobs. i was hesitent to start fixing more | 16:22 |
| gmaan | true, I also 'usually fix their tempest plugin and keep it up to dated but yes there were lot to fix/update. | 16:26 |
| sean-k-mooney | ok so given i finally pusht that the thing i was ment to do last firiday is now done. time to start on this weeks work... | 16:38 |
| sean-k-mooney | ok that kind of un true but this is the first item i have opened a terminal or code editiro this week | 16:39 |
| opendevreview | Merged openstack/nova master: Disable NOVA_COMPILE_MDEV_SAMPLES to unblock CI https://review.opendev.org/c/openstack/nova/+/949622 | 16:59 |
| opendevreview | Sylvain Bauza proposed openstack/nova master: [doc] Adding vGPUs max_instances caveat fix for virtual-gpu https://review.opendev.org/c/openstack/nova/+/949579 | 17:26 |
| bauzas | sean-k-mooney: gibi: just amended the doc to tell that device_addresses is optional | 17:27 |
| sean-k-mooney | bauzas: cool ill tak a look again quickly | 17:28 |
| sean-k-mooney | bauzas: it looks ok to me. we could word smith it alittle but i dont see a reason to hold it honestly | 17:29 |
| sean-k-mooney | i would much rather add the missing content then stall out on phasing so +2 | 17:30 |
| -opendevstatus- NOTICE: Setuptools 80.7.0 broke python package installs for many affecting CI jobs. That release has been yanked and it should be safe to recheck failed changes. | 22:00 | |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!