| *** mhen_ is now known as mhen | 01:22 | |
| opendevreview | melanie witt proposed openstack/nova master: Add hw_tpm_secret_security image property https://review.opendev.org/c/openstack/nova/+/940196 | 02:13 |
|---|---|---|
| opendevreview | melanie witt proposed openstack/nova master: Add hw:tpm_secret_security extra spec validation https://review.opendev.org/c/openstack/nova/+/940197 | 02:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: migrate legacy instances to new security policy https://review.opendev.org/c/openstack/nova/+/942501 | 02:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `user` secret security https://review.opendev.org/c/openstack/nova/+/942502 | 02:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `host` secret security https://review.opendev.org/c/openstack/nova/+/941795 | 02:13 |
| opendevreview | melanie witt proposed openstack/nova master: Add vtpm_secret_(uuid|value) to LiveMigrateData https://review.opendev.org/c/openstack/nova/+/952628 | 02:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483 | 02:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021 | 02:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | 02:14 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | 02:14 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: update instance request_spec with secret security https://review.opendev.org/c/openstack/nova/+/952630 | 02:14 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: confirm secret security via hard reboot https://review.opendev.org/c/openstack/nova/+/955847 | 02:14 |
| opendevreview | melanie witt proposed openstack/nova master: Add hw_tpm_secret_security image property https://review.opendev.org/c/openstack/nova/+/940196 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: Add hw:tpm_secret_security extra spec validation https://review.opendev.org/c/openstack/nova/+/940197 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: migrate legacy instances to new security policy https://review.opendev.org/c/openstack/nova/+/942501 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `user` secret security https://review.opendev.org/c/openstack/nova/+/942502 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `host` secret security https://review.opendev.org/c/openstack/nova/+/941795 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: Add vtpm_secret_(uuid|value) to LiveMigrateData https://review.opendev.org/c/openstack/nova/+/952628 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: update instance request_spec with secret security https://review.opendev.org/c/openstack/nova/+/952630 | 05:13 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: confirm secret security via hard reboot https://review.opendev.org/c/openstack/nova/+/955847 | 05:13 |
| jayaanand_ | we are addressing NFS volume extension issue we want to address in this resale and Nova dependency addressed in PR https://review.opendev.org/c/openstack/nova/+/680648. i am not able to reach out to author. please suggest way out | 05:17 |
| noonedeadpunk | jayaanand_: so, do you consider taking over the patch and addressing the review point, or wanna original author to do that? | 06:37 |
| noonedeadpunk | As with gerrit you can quite easily pull in the patch and update it | 06:37 |
| noonedeadpunk | the only thing to remember now - is adding DSO to it... | 06:37 |
| *** ykarel__ is now known as ykarel | 06:55 | |
| rpittau | gibi: thanks for the answer and apologies if I haven't replied, I was distracted downstream, we found the root cause, it does not look related to nova, it was a red herring, here's the issue if you're curious https://551b5d3d5ab1e9429cee-63329dcd236a98c48b3784d0d458e269.ssl.cf5.rackcdn.com/openstack/a4a4e91242434212aaaf067deecc5292/controller/logs/screen-q-l3.txt | 06:58 |
| gibi | rpittau: no worries. I'm glad you found the root | 07:05 |
| opendevreview | Lajos Katona proposed openstack/nova master: DNM: Test pyroute2 bump to greate than 0.9.x https://review.opendev.org/c/openstack/nova/+/955858 | 07:20 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `user` secret security https://review.opendev.org/c/openstack/nova/+/942502 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `host` secret security https://review.opendev.org/c/openstack/nova/+/941795 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: Add vtpm_secret_(uuid|value) to LiveMigrateData https://review.opendev.org/c/openstack/nova/+/952628 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security https://review.opendev.org/c/openstack/nova/+/941483 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security https://review.opendev.org/c/openstack/nova/+/942021 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security https://review.opendev.org/c/openstack/nova/+/925771 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security https://review.opendev.org/c/openstack/nova/+/952629 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: update instance request_spec with secret security https://review.opendev.org/c/openstack/nova/+/952630 | 07:36 |
| opendevreview | melanie witt proposed openstack/nova master: TPM: confirm secret security via hard reboot https://review.opendev.org/c/openstack/nova/+/955847 | 07:36 |
| opendevreview | Kamil Sambor proposed openstack/nova master: Replace eventlet.event.Event with threading.Event https://review.opendev.org/c/openstack/nova/+/949754 | 08:43 |
| sean-k-mooney | noonedeadpunk: jayaanand_ so volume extened for voluem attach to a nova instnace is tecnhially not supported | 10:51 |
| sean-k-mooney | the feature depend on https://review.opendev.org/c/openstack/nova-specs/+/949504 | 10:51 |
| sean-k-mooney | https://blueprints.launchpad.net/openstack/?searchtext=assisted-volume-extend | 10:52 |
| noonedeadpunk | frankly, I think this topic even boils down to be able to detach root volume | 10:52 |
| sean-k-mooney | basicaly there is a spec to properly supprot it but at present its not expected to fully work | 10:52 |
| noonedeadpunk | which was rejected due to absent usecase, if I'm not mistaken | 10:52 |
| sean-k-mooney | noonedeadpunk: well no that slithgly idfferten | 10:52 |
| noonedeadpunk | it would solve it though? | 10:53 |
| noonedeadpunk | like a usecase of restoring volume from snapshot and from backup | 10:53 |
| sean-k-mooney | only for root voluems | 10:53 |
| sean-k-mooney | you can already do that | 10:53 |
| noonedeadpunk | but rest you can already detach and resize... | 10:54 |
| sean-k-mooney | you can rebuild BFV guests | 10:54 |
| noonedeadpunk | I'm side-=tracking now the topic a bit.... | 10:54 |
| noonedeadpunk | But how does rebuild helps? | 10:54 |
| sean-k-mooney | that how you restore form snapshot | 10:54 |
| noonedeadpunk | and cinder just rejects to restore to volume that is attached? | 10:54 |
| sean-k-mooney | no | 10:55 |
| sean-k-mooney | if you have a nova vm booted form a cidner volume | 10:55 |
| sean-k-mooney | you can rebuild to restore form snapshot isnce antelope ish maybe longer | 10:55 |
| noonedeadpunk | huh | 10:56 |
| noonedeadpunk | Yeah, I know that rebuild does work | 10:56 |
| sean-k-mooney | https://specs.openstack.org/openstack/nova-specs/specs/zed/implemented/volume-backed-server-rebuild.html | 10:56 |
| sean-k-mooney | the comment i made about is, nova/cidner does not offically supprot extendeing nfs volumes that are in use | 10:56 |
| noonedeadpunk | Though I still don't get a bit about snapshots | 10:57 |
| sean-k-mooney | that what https://blueprints.launchpad.net/nova/+spec/assisted-volume-extend is intended to resolve | 10:57 |
| noonedeadpunk | yeah, ok ,right | 10:57 |
| sean-k-mooney | for any other backend however that perfectly valid to do so fixing bugs in that area is not a bad thing | 10:58 |
| noonedeadpunk | or well, you mean instance snapshot, which is effectively a glance image, not cinder snapshots? | 10:58 |
| sean-k-mooney | im just saying that even if we merged https://review.opendev.org/c/openstack/nova/+/680648 extending nfs would still not be supproted | 10:58 |
| noonedeadpunk | ++ fair enough | 10:58 |
| sean-k-mooney | noonedeadpunk: nova has logic to do a cinder volume snapshot if it BFV | 10:58 |
| noonedeadpunk | oh... | 10:58 |
| noonedeadpunk | I missed that entirely | 10:59 |
| sean-k-mooney | we still upload an empty glance iamge to hold metadata | 10:59 |
| sean-k-mooney | but it just point to the cinder snapshot | 10:59 |
| sean-k-mooney | we also have an addtion gem | 11:00 |
| noonedeadpunk | but it's kinda... not very user frioendly? in terms of - you need to spawn snapshot in one specific way rather then other to be able to restore later? | 11:00 |
| sean-k-mooney | if you have a BFV guest and it has addtional cidner data volume io belive a nova snapshot will snapshot all the disks | 11:00 |
| sean-k-mooney | although i could be miss remeberting | 11:00 |
| noonedeadpunk | anyway.... | 11:01 |
| noonedeadpunk | this is really very different topic | 11:01 |
| sean-k-mooney | noonedeadpunk: no when they do rebuild it just updates the root disk, they can resotre the other volumes via cinder too indepently | 11:01 |
| noonedeadpunk | I guess I wanted just to help out with the process of how one could work collaboratively on other patch | 11:01 |
| sean-k-mooney | noonedeadpunk: whihc you did | 11:01 |
| sean-k-mooney | they 5 year old patch they found might be useful fo rother backends | 11:02 |
| noonedeadpunk | sean-k-mooney: frankly - I feel this being very confusing. And still not covering cinder-backups for root volumes... | 11:03 |
| sean-k-mooney | i belive you can just use cidner to do ther backups for a root volume | 11:03 |
| sean-k-mooney | the only part you cant do that way i belive is the restore | 11:03 |
| noonedeadpunk | you just can't recover without destroying the instance, yeah | 11:03 |
| sean-k-mooney | the way to fix that would be to make 2 changes | 11:04 |
| sean-k-mooney | well kind of 1 | 11:05 |
| sean-k-mooney | when you shleve an instance the volume should move to the reserved state | 11:05 |
| sean-k-mooney | once the instnace is shleve offloaded | 11:05 |
| sean-k-mooney | if cidner allowed you to restore in the reserved state then you coudl do it via cidner api | 11:05 |
| noonedeadpunk | I think last time discussed the problem was on how/where to store attachment order or smth like that | 11:05 |
| sean-k-mooney | i said 2 becaue it might be valid to consier putting the volume in reserved after stop | 11:06 |
| noonedeadpunk | but now.. .I'm not sure if you also have to get it detached... | 11:06 |
| noonedeadpunk | yeah. that might be actually a good point... | 11:06 |
| sean-k-mooney | and then allow you to restore when its stopped or change the rebuild api to optionally take a volume snapshot uuid instead of an image | 11:06 |
| noonedeadpunk | well, I think you should be then able also to revert the snapshot with cinder api when it's shelved | 11:07 |
| noonedeadpunk | as I think it's almost the same check for restore snapshot/backup | 11:08 |
| sean-k-mooney | i think right now cidner need it ot be in aviable state | 11:08 |
| sean-k-mooney | rather then reserved | 11:08 |
| noonedeadpunk | right | 11:08 |
| sean-k-mooney | i think that the limiitation | 11:08 |
| sean-k-mooney | its alwasy been a bit fo a rough spot | 11:09 |
| sean-k-mooney | i was not as apposed to the idea of detaching the root volume as other were although i htink that only realy make sense in a shelved like state | 11:10 |
| noonedeadpunk | yes, totally, it should be shelved. Though indeed detaching makes complicated reverse order of attach | 11:11 |
| noonedeadpunk | and reserved state sounds indeed more prespective... | 11:11 |
| sean-k-mooney | one thing i wish we had a better way of supproting in nova is virual media, i wish we had a simple way to attach iso at runtime. currently you can pass the disk type when you attach a cinder voluem outside of server create | 11:12 |
| sean-k-mooney | so while you can create a volume form an iso and attaach it to a vm it will be attached as a block device | 11:12 |
| sean-k-mooney | rescue has alwasy been the hack but it woudl have been nice if nova coudl supprot boot over http or pxe or other metod that were less reliant on glance for metadta storage | 11:13 |
| sean-k-mooney | we are seeing pain point aroudn that for folks wanting to bring a bunch of pet form vmware or other cloud over to openstack | 11:14 |
| sean-k-mooney | i.e. the dont nessiarly want to create a glance image and delete it for every vm but also dont nessiarly want to have to use a volume either | 11:15 |
| sean-k-mooney | so part of me wishes nova supprot takeing a http/ftp path to a disk image and usign that. or coudl attatch addtional disk after boot form glance or swift or elsewhere | 11:16 |
| sean-k-mooney | beign able to detach and or replace the root disk woudl be a natural extention of that | 11:17 |
| noonedeadpunk | that sounds like smth that potentiallly could posses a security concern in the fuiture | 11:17 |
| noonedeadpunk | in terms of http/ftp | 11:17 |
| sean-k-mooney | no downloading random things form the internet :P | 11:17 |
| sean-k-mooney | how | 11:17 |
| sean-k-mooney | but ya the thing is that nova cant trust glance to do the right thing | 11:18 |
| sean-k-mooney | it has to do the security checks itself | 11:18 |
| noonedeadpunk | well exactly - how to limit downloading random thing from the internet :) | 11:18 |
| sean-k-mooney | so your right | 11:18 |
| noonedeadpunk | like glance web-download already scares me enough from time to time | 11:18 |
| sean-k-mooney | well it basiclly woudl be that | 11:18 |
| sean-k-mooney | glance supprot referencig an image on an external web sever | 11:18 |
| sean-k-mooney | im just talkign about the same capablity in nova directly | 11:19 |
| noonedeadpunk | but also creating a voilume from iso usually kinda works for vmware migrations.... or rescue at worst... | 11:19 |
| noonedeadpunk | well in Glance one can disable that quite easily, just to mention that | 11:19 |
| sean-k-mooney | ya so at server create you can annotat the volume as being an iso or rather disk_type=cdrom | 11:20 |
| sean-k-mooney | we just dont expost that filed form the bdm on volume attach and we shoudl | 11:20 |
| sean-k-mooney | there are other disk types like lun | 11:20 |
| noonedeadpunk | but actually - that is kinda a good point, of why multiple volumes can't be attached on boot... | 11:21 |
| sean-k-mooney | which can ony be set on boot too that are needed for scsi v3 command instead of scsi v2 | 11:21 |
| sean-k-mooney | you can have multipel volumes | 11:21 |
| sean-k-mooney | so you can have the root be a image or a volume and you can have arbitry number of addtional cinder data volumes | 11:21 |
| noonedeadpunk | ah, indeed, you can pass block_device_mapping_v2 | 11:22 |
| sean-k-mooney | that what peole do when migrating they create 1 volume per disk in vmware | 11:22 |
| sean-k-mooney | noonedeadpunk: yep but even without that you can use the syntatic sugar commadn in osc | 11:22 |
| sean-k-mooney | you just repeate --volume for each addtional volume | 11:22 |
| sean-k-mooney | osc will internally comptue the block_device_mapping_v2 object for you, that what it alwasy doing when you use volumes internally | 11:24 |
| sean-k-mooney | the issue with the attach api is we only expose some of the filed setable via BDMv2 structure | 11:25 |
| sean-k-mooney | so nova hwas the ablity at server create to create more complex topolgies then you can create post boot via attach | 11:25 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Print ThreadPool statistics https://review.opendev.org/c/openstack/nova/+/948340 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Document native threading mode and tuneables https://review.opendev.org/c/openstack/nova/+/949364 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Allow services to start with threading https://review.opendev.org/c/openstack/nova/+/948311 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-next with n-sch in threading mode https://review.opendev.org/c/openstack/nova/+/948450 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Do not yield in threading mode https://review.opendev.org/c/openstack/nova/+/950994 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-api and -metadata in threaded mode https://review.opendev.org/c/openstack/nova/+/951957 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Allow to start unit test without eventlet https://review.opendev.org/c/openstack/nova/+/953436 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Run unit test with threading mode https://review.opendev.org/c/openstack/nova/+/953475 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [test]RPC using threading or eventlet selectively https://review.opendev.org/c/openstack/nova/+/953815 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [CI]Make nova-tox-py312-threading voting https://review.opendev.org/c/openstack/nova/+/955791 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | 12:02 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up fs retry tests by mocking sleep https://review.opendev.org/c/openstack/nova/+/955904 | 13:51 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up ironic console test by decreasing timeout https://review.opendev.org/c/openstack/nova/+/955905 | 13:51 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up RBD test by decreasing retry interval https://review.opendev.org/c/openstack/nova/+/955906 | 13:51 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [test]Speed up qemu announce test by mocking sleep https://review.opendev.org/c/openstack/nova/+/955907 | 13:51 |
| gibi | I have to run a lot of unittest lately so I use a bit of time to speed them up ^^ https://review.opendev.org/c/openstack/nova/+/955907 | 13:51 |
| gibi | wong link, I wanted to point to the topic https://review.opendev.org/q/topic:%22unit-test-speedup%22 | 13:51 |
| gibi | these are very small unit test only patches for easy wins | 13:52 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/nova-specs master: Propose enabling parallel live migrations for libvirt https://review.opendev.org/c/openstack/nova-specs/+/955783 | 13:56 |
| noonedeadpunk | um... what the broken crap is `autopep8`? | 14:27 |
| noonedeadpunk | this is pretty much ridiculous: https://zuul.opendev.org/t/openstack/build/b483760112414b64b045615b76bde314 | 14:29 |
| noonedeadpunk | ah, so it tried to handle >80 this wayu, lol | 14:33 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/nova master: [WIP] Allow to perform parallel live migrations https://review.opendev.org/c/openstack/nova/+/955784 | 14:33 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Print ThreadPool statistics https://review.opendev.org/c/openstack/nova/+/948340 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Document native threading mode and tuneables https://review.opendev.org/c/openstack/nova/+/949364 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Allow services to start with threading https://review.opendev.org/c/openstack/nova/+/948311 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-next with n-sch in threading mode https://review.opendev.org/c/openstack/nova/+/948450 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Do not yield in threading mode https://review.opendev.org/c/openstack/nova/+/950994 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Run nova-api and -metadata in threaded mode https://review.opendev.org/c/openstack/nova/+/951957 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Allow to start unit test without eventlet https://review.opendev.org/c/openstack/nova/+/953436 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Run unit test with threading mode https://review.opendev.org/c/openstack/nova/+/953475 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [test]RPC using threading or eventlet selectively https://review.opendev.org/c/openstack/nova/+/953815 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [CI]Make nova-tox-py312-threading voting https://review.opendev.org/c/openstack/nova/+/955791 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | 15:07 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915 | 15:07 |
| gibi | ^^ this last one is not a pure eventlet removal so I can accept a request to split the commit to two one that is independnet form the eventlet series and one that just adds the related tests back to the threading job after the first patch lands | 15:08 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915 | 15:09 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | 15:09 |
| sean-k-mooney | gibi: i have not looked but i woudl only spliti it if you think we might need to backport it indepently | 16:57 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: [vncproxy]Handle ssl.wrap_socket removal in py312 https://review.opendev.org/c/openstack/nova/+/955915 | 18:16 |
| opendevreview | Balazs Gibizer proposed openstack/nova master: Warn on long task wait time for executor https://review.opendev.org/c/openstack/nova/+/952666 | 18:16 |
| sean-k-mooney | melwitt: so preserving the tmp data as distastful as it may be is probely technialy a feature not a bug | 19:33 |
| sean-k-mooney | all the code i have looked at point to use assumign the data is preerved but the libvirt code never did that by default | 19:33 |
| sean-k-mooney | that means however that vTPM in nova is unsutable for storign encyption keys like those used by bitlocker | 19:34 |
| sean-k-mooney | adn its only sutable today to provide storage for messuered boot or to provide cyrpograpic random numbers | 19:35 |
| sean-k-mooney | the nvram sitution i have not had time to track down | 19:37 |
| sean-k-mooney | it may hae been a simialr logic on libvirt side where they assuemd it was oke to delet ewhen the domain in undefined and we assuemd it would be preserved like the disks | 19:37 |
| sean-k-mooney | melwitt: if we cant backport supprot for this upstream because we agree its a feature not a bug i think we at least need to backport a warning in our docs | 19:38 |
| clarkb | isn't the problem that operating systems like windows will use it without your input? | 19:56 |
| clarkb | so while it may not be suitable today their decisions may force a behavior choice? | 19:57 |
| melwitt | I'm seeing the grenade-skip-level-always job failing a lot lately on "2025-07-25 19:16:25.748 | + inc/upgrade:save_mysql_dbs:45 : timeout 120 mysqldump -uroot -psecretdatabase neutron" | 22:50 |
| melwitt | sean-k-mooney: thanks for digging into it. I agree on backporting at least a warning in the docs. personally I would support backporting use of the VIR_DOMAIN_UNDEFINE_KEEP_TPM flag given the severity of the unexpected behavior but I'm not sure if there could be any other issues with doing that | 22:57 |
| gmaan | melwitt: yeah, it is known issue in grenade job. gibi added timeout to DB dump so that job will fail early than waiting for long time | 23:08 |
| gmaan | and this is one fix he is trying https://review.opendev.org/c/openstack/grenade/+/955865 | 23:08 |
| melwitt | gmaan: ahh ok, thanks! I was looking but did not find any hint about it | 23:11 |
| gmaan | yeah, unfortunately nothing much in logs whihc can help to debug | 23:11 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!