Wednesday, 2025-10-01

*** mhen_ is now known as mhen01:11
opendevreviewmelanie witt proposed openstack/nova master: Move cleanup of vTPM secret from driver to compute  https://review.opendev.org/c/openstack/nova/+/96200702:41
opendevreviewmelanie witt proposed openstack/nova master: Add hw_tpm_secret_security image property  https://review.opendev.org/c/openstack/nova/+/94019602:41
opendevreviewmelanie witt proposed openstack/nova master: Add hw:tpm_secret_security extra spec validation  https://review.opendev.org/c/openstack/nova/+/94019702:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: support instances with `user` secret security  https://review.opendev.org/c/openstack/nova/+/94250202:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: support instances with `host` secret security  https://review.opendev.org/c/openstack/nova/+/94179502:41
opendevreviewmelanie witt proposed openstack/nova master: Add vtpm_secret_(uuid|value) to LibvirtLiveMigrateData  https://review.opendev.org/c/openstack/nova/+/95262802:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security  https://review.opendev.org/c/openstack/nova/+/94148302:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: bump service version and require it for live migration  https://review.opendev.org/c/openstack/nova/+/96205102:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security  https://review.opendev.org/c/openstack/nova/+/94202102:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security  https://review.opendev.org/c/openstack/nova/+/92577102:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security  https://review.opendev.org/c/openstack/nova/+/95262902:41
opendevreviewmelanie witt proposed openstack/nova master: TPM: add late check for supported TPM secret security  https://review.opendev.org/c/openstack/nova/+/95697502:41
opendevreviewmelanie witt proposed openstack/nova master: Opt-in to new TPM secret security via resize  https://review.opendev.org/c/openstack/nova/+/96205202:41
opendevreviewmelanie witt proposed openstack/nova master: DNM vtpm tempest  https://review.opendev.org/c/openstack/nova/+/95747702:45
opendevreviewJonas Schäfer proposed openstack/nova master: Preserve vTPM state between power off and power on  https://review.opendev.org/c/openstack/nova/+/95565706:13
sean-k-mooneygibi: fun https://review.opendev.org/c/openstack/placement/+/96259609:42
sean-k-mooneythe inital fix was more of a stop the bleeding type fix rather then a full rewrite some im not surpised that it did nto cover all edgecases09:43
sean-k-mooneyValueError: Length too long: 11601115 so your functional test are failign because we are hitting the max subunite packet lenth in the test outpu09:44
sean-k-mooneyi tought this was fixed in stestr a long time ago but maybe we worked aroudn that in nova or didnt apply the fix to placemnt09:45
gibisean-k-mooney: "fun" indeed. what I learned is that our first fix limited the search space of the valid candidates with a global limit, but it does not limit the search space of the intermediate representaton placement uses, and that represenatation is even bigger causing the issue.10:05
sean-k-mooneyright i think that was at least partly expected10:06
sean-k-mooneywe dicussed that we woudl need to refactor the algorithim to do a breath first lazy pick form each host up to the relevent limits10:06
sean-k-mooneyif we wanted to properly fix it10:06
sean-k-mooneyyou added the breathfirst bit10:07
sean-k-mooneybut i dont think you made it lazy in the orginal change did you?10:07
sean-k-mooneyi guess we also only counted valid reulst toward the limits10:08
gibilazyness is not the problem afaik. we are generators all the way down10:08
gibiand we stop when enough valid candidates are generated10:08
sean-k-mooneyso there is also the consideration of just how many candiates we examin10:08
gibibut to generate enough valid candidate we go throuhg a lot of invalid one10:08
sean-k-mooneyya10:08
sean-k-mooneyso really we need a second config option for how many we woudl evaculate10:08
gibithat is hard, as in the current config 300k invalid is generated before the first valid is found from the 40k valid and 16M total candidates10:09
sean-k-mooneyi.e limit=100 , check=1000010:09
sean-k-mooneyya10:10
sean-k-mooneyreally we need a better approch overall to this problem rather then trying to retofit the existign algorthim10:10
sean-k-mooneybut obviouly that is a much larger change10:10
gibiI have high level ideas how to prune the search when we found an invalid candidate10:10
sean-k-mooneyi was just going to ask10:11
gibiI just need time to put it together and see if it is enough help or not10:11
sean-k-mooneywhat is the direction you are thinking of going wiht this10:11
sean-k-mooneyack10:11
gibiE.g. if G1-R1, G2-R1, G3-R2 is invalid due to R1 is overallocated by G1 and G2 then we don't have to check G1-R1, G2-R1, G3-R310:11
gibiso a single invalid candidate can remove a bunch of other possible candidate that would fail the same check the same reason10:12
sean-k-mooneyyou did something similar to the numa node code in nova too if i recall10:12
gibiI did caching there10:12
gibihere I would rather skip generating the candidate10:13
gibibut the idea is similar10:13
sean-k-mooneyya10:13
gibidon't go through the same sub check repatedly10:13
sean-k-mooneyok well since you have a direction i wont suggest any other but if you want to brainstorm or chat about it let me know10:13
gibiI want to go down to this path a bit, then we can re-discuss10:16
gibialso I think there will be a ptg topic about it as well :)10:16
gibithanks for checking the patch10:17
gibiI will keep the nova team informed about the progress10:17
Viifor informational purposes, working copy/paste novnc https://github.com/Vishwamithra37/galam_nonvc_copypaste/blob/CopyPasteWorking_NoVnc_OpenStack/README.md10:20
sean-k-mooneyVii: it need a addtiona spice clipborad device added to the xml i belive10:25
sean-k-mooney we looked at it breifly before but did you mange to get it workign without nova code changes?10:25
sean-k-mooneyupstream novnc supprot copypaset i bleive but not the way we create the vms10:27
sean-k-mooneyhttps://github.com/novnc/noVNC?tab=readme-ov-file#features10:27
sean-k-mooneyhttps://libvirt.org/formatdomain.html#channel10:28
sean-k-mooneywe need to add a qemu-vdagent channel10:28
sean-k-mooneyo supprot the clipboard functionalty10:29
sean-k-mooneyVii: i looked into this a bit about a year ago but never worked on a poc10:30
sean-k-mooneybut form talking ot our virt team internally this functionalyt shoudl work with vnc and novnc if we wire it up properly 10:30
sean-k-mooneywithout the need for spice10:31
sean-k-mooneyit seams like you did it a diffent way by modifying the novnc html client applcation instead10:31
bauzasdo people here know how the fuck I could check DEBUG logs with something like _wait_for_log() in either a functional test or a regression one ?10:34
sean-k-mooneythis has been requested in teh past so we proably shoudl implement copy paste supprot at some point although VDI usecase for openstack in the past have mainly invovled isntalling a vdi service like window RDP server in the gust in the past10:34
bauzasunless of course if you use OS_DEBUG10:34
sean-k-mooneybauzas: i dont know if we have a wait funciton10:35
bauzaswe have one10:35
sean-k-mooneybut you can do asserts10:35
sean-k-mooneyack10:35
bauzaseven with assertIn, the log doesn't have debug logs10:35
sean-k-mooneyit should let me check the capture fixture10:35
sean-k-mooneyim pretty sure we hage regression tests that assert debug logs10:36
bauzasI wasn't able to see some of them 10:36
sean-k-mooneyhttps://github.com/openstack/nova/blob/b99a882366251f88d145e27312b94692e0b2266f/nova/tests/functional/regressions/test_bug_1853009.py#L109-L11110:37
sean-k-mooneythat may not be a debug log but i expect output to have all logs including debug10:38
bauzasI'm now able to get debug logs by doing in the SetUp :10:39
bauzas        root = logging.getLogger()10:39
bauzas        if root.handlers:10:39
bauzas            root.handlers[0].setLevel(logging.DEBUG)10:39
bauzasbut that's not right good10:39
sean-k-mooneyya so that why i said i want to check the fixture10:39
sean-k-mooneyi was expectign our default log level in the funtional test to be debug10:40
sean-k-mooneyyou coudl jsut ensure that by suign flags10:40
sean-k-mooneyin the test to set the confgi option to make it debug and see if that is enough10:40
sean-k-mooneythat woudl be the better way to do that10:40
sean-k-mooneyso this is our defult logging fixture https://github.com/openstack/nova/blob/b99a882366251f88d145e27312b94692e0b2266f/nova/tests/fixtures/nova.py#L126-L20510:41
bauzasyeah, I'll try to use a conf flag instead10:42
bauzasand yeah I found the fixture, that's why I'm mimic'ing it10:43
bauzaswait_for_log now works with DEBUG, but I'll look at the conf flag10:43
sean-k-mooneyya os it mention using OS_DEBUG=True to print out the debug logs but i tought it was just for that contoling the printing not if we capture them10:43
sean-k-mooneyi.e. i expected them to still be aviablein the tests to use10:44
sean-k-mooneybut just not logged to the test output10:44
sean-k-mooneythe ohter way to do this10:44
sean-k-mooneyis you can mock the LOG module level variable10:44
sean-k-mooneyand then just assert that its called with the message you expect 10:44
sean-k-mooneywe do do that in places too10:44
bauzasfwiw, self.flags(debug=True, group='DEFAULT') doesn't work10:45
sean-k-mooneyright it wont not with how this is written10:45
sean-k-mooneythat why im suggeting just mockign LOG in the relevent module10:45
bauzassean-k-mooney: yup, should be better to assert the LOG call for the weigher10:45
bauzasthanks, will do it instead10:46
sean-k-mooneyhttps://github.com/openstack/nova/blob/b99a882366251f88d145e27312b94692e0b2266f/nova/tests/unit/virt/libvirt/volume/test_mount.py#L58310:46
bauzasyup, there are examples, I just forgot them10:46
sean-k-mooneyso we typicly do that in a buch of place for unit test but it shoudl work the same for functional10:46
bauzasmocking LOG is the right pattern for debug logs then, I forgot it10:46
bauzasthanks10:47
sean-k-mooneyno worries10:47
sean-k-mooneyi also often just end up trying one way then the ohter depending on which works10:47
sean-k-mooneyi prefer ot not mock if i can avoid it but its just simpler in this case10:48
*** tkajinam_ is now known as tkajinam10:54
opendevreviewKamil Sambor proposed openstack/nova master: [hacking] Improve N373 to catch also other primitives  https://review.opendev.org/c/openstack/nova/+/95840812:23
opendevreviewThomas Goirand proposed openstack/nova-specs master: Restrict booting from volume with disk  https://review.opendev.org/c/openstack/nova-specs/+/96051313:27
opendevreviewKamil Sambor proposed openstack/nova master: [hacking] Improve N373 to catch also other primitives  https://review.opendev.org/c/openstack/nova/+/95840813:57
opendevreviewJonas Schäfer proposed openstack/nova master: Preserve vTPM state between power off and power on  https://review.opendev.org/c/openstack/nova/+/95565714:28
opendevreviewMerged openstack/nova master: Centralize cooperative yield  https://review.opendev.org/c/openstack/nova/+/95099120:04
opendevreviewMerged openstack/nova master: [hacking] N374 do not use time.sleep(0) to yield  https://review.opendev.org/c/openstack/nova/+/95099220:24
opendevreviewmelanie witt proposed openstack/nova master: TPM: support instances with `user` secret security  https://review.opendev.org/c/openstack/nova/+/94250220:51
opendevreviewmelanie witt proposed openstack/nova master: TPM: support instances with `host` secret security  https://review.opendev.org/c/openstack/nova/+/94179520:51
opendevreviewmelanie witt proposed openstack/nova master: Add vtpm_secret_(uuid|value) to LibvirtLiveMigrateData  https://review.opendev.org/c/openstack/nova/+/95262820:51
opendevreviewmelanie witt proposed openstack/nova master: TPM: support live migration of `host` secret security  https://review.opendev.org/c/openstack/nova/+/94148320:51
opendevreviewmelanie witt proposed openstack/nova master: TPM: bump service version and require it for live migration  https://review.opendev.org/c/openstack/nova/+/96205120:51
opendevreviewmelanie witt proposed openstack/nova master: TPM: support instances with `deployment` secret security  https://review.opendev.org/c/openstack/nova/+/94202120:51
opendevreviewmelanie witt proposed openstack/nova master: TPM: support live migration of `deployment` secret security  https://review.opendev.org/c/openstack/nova/+/92577120:51
opendevreviewmelanie witt proposed openstack/nova master: TPM: test live migration between hosts with different security  https://review.opendev.org/c/openstack/nova/+/95262920:51
opendevreviewmelanie witt proposed openstack/nova master: TPM: add late check for supported TPM secret security  https://review.opendev.org/c/openstack/nova/+/95697520:51
opendevreviewmelanie witt proposed openstack/nova master: Opt-in to new TPM secret security via resize  https://review.opendev.org/c/openstack/nova/+/96205220:51
opendevreviewmelanie witt proposed openstack/nova master: DNM vtpm tempest  https://review.opendev.org/c/openstack/nova/+/95747720:51
opendevreviewmelanie witt proposed openstack/nova master: DNM vtpm tempest  https://review.opendev.org/c/openstack/nova/+/95747723:51

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!