| opendevreview | Kamil Sambor proposed openstack/nova master: Add concurrency_backend config option for Nova services https://review.opendev.org/c/openstack/nova/+/993760 | 07:21 |
|---|---|---|
| * gibi sends love and support to the gerrit servers | 09:13 | |
| gibi | tkajinam: do I understand correctly that if you use stateless firmware (like in SNP) then you cannot reboot the VM from inside the guest? At least I see that the VM stops normally, printing that it will be rebooted but it never starts up. I assume it is connected to the statelessness of things but I can be mistaken | 09:56 |
| gibi | this is the last thing visible in the guest | 09:56 |
| gibi | [ 33.971858] reboot: Restarting system | 09:56 |
| gibi | hm, qemu logs | 10:00 |
| gibi | 2026-07-03T09:53:41.222388Z qemu-kvm: cpus are not resettable, terminating | 10:00 |
| gibi | hm it is not the firmware it is SEV-ES / SNP that has this limitation | 10:07 |
| gibi | I'm filing a bug to document it | 10:07 |
| gibi | https://www.redhat.com/en/blog/confidential-guest-reset-qemu-hypervisor-design-choices-and-approach | 10:13 |
| gibi | so it is just a qemu limitation that is being fixed | 10:13 |
| *** ykarel_ is now known as ykarel | 10:16 | |
| opendevreview | Kamil Sambor proposed openstack/nova master: Add concurrency_backend config option for Nova services https://review.opendev.org/c/openstack/nova/+/993760 | 10:21 |
| opendevreview | Rodolfo Alonso proposed openstack/os-vif master: ovs: Pass ``multi_queue`` inside ``ifr`` dict for tuntap devices https://review.opendev.org/c/openstack/os-vif/+/995933 | 10:27 |
| opendevreview | Rodolfo Alonso proposed openstack/os-vif master: ovs: Pass ``multi_queue`` inside ``ifr`` dict for tuntap devices https://review.opendev.org/c/openstack/os-vif/+/995933 | 10:34 |
| ralonsoh | sean-k-mooney, hi! just if you didn't see the conversation in the neutron channel | 10:42 |
| ralonsoh | I created https://bugs.launchpad.net/os-vif/+bug/2159024 | 10:42 |
| ralonsoh | and pushed this: https://review.opendev.org/c/openstack/os-vif/+/995933 | 10:42 |
| tkajinam | gibi, oh, thanks for that. I'll check that later | 11:21 |
| sean-k-mooney | ralonsoh: i have not read it back yet but my clinet is there ill reply in the neutorn channel | 11:22 |
| tkajinam | we likely need to block the operation properly at api layer instead of putting the instance in that hung state ... | 11:22 |
| gibi | tkajinam: it does not hung, it stops cleanly. and can be started via the API | 11:28 |
| gibi | but it cannot be fully restarted from the guest | 11:28 |
| gibi | https://bugs.launchpad.net/nova/+bug/2159023 | 11:29 |
| sean-k-mooney | gibi: that os-vif patch above form ralonsoh is a nice easy one to review if you have time | 11:29 |
| sean-k-mooney | gibi: also thts fun, it sound like perhaps a qemu bug | 11:30 |
| sean-k-mooney | you shoudl be able to reboot form inside the guest as that doe not halt the domain | 11:31 |
| opendevreview | Joan Gilabert proposed openstack/nova master: Report OWNER_NOVA trait on resource providers https://review.opendev.org/c/openstack/nova/+/994299 | 11:33 |
| opendevreview | Joan Gilabert proposed openstack/nova master: Add libvirt driver MDEV ARQ support for Cyborg https://review.opendev.org/c/openstack/nova/+/995840 | 11:33 |
| opendevreview | Ashish Gupta proposed openstack/placement master: tests: Support shared file-backed SQLite in placement fixtures https://review.opendev.org/c/openstack/placement/+/993106 | 11:42 |
| opendevreview | Ashish Gupta proposed openstack/nova master: tests: use file-backed Placement SQLite in functional threading https://review.opendev.org/c/openstack/nova/+/992581 | 11:46 |
| opendevreview | Ashish Gupta proposed openstack/placement master: tests: Support shared file-backed SQLite in placement fixtures https://review.opendev.org/c/openstack/placement/+/993106 | 12:06 |
| tkajinam | gibi, ahh ok. | 12:53 |
| tkajinam | now I remember I saw that behavior during my old testing and just documenting that limitation would be enough now | 12:54 |
| sean-k-mooney | tkajinam: it should be pretty proment | 12:56 |
| sean-k-mooney | its pretty problematic as it a faily core fucntioantliy | 12:56 |
| sean-k-mooney | it means that you can use normal widnows update flows or just reboot normaly for kernel upgrades ectra | 12:57 |
| gibi | sean-k-mooney: it is a qemu limitation that is being lifted in qemu 11 | 12:57 |
| sean-k-mooney | so it defintly need to get reported to qemu or amd as a issue to be adressed not jsut a footnote in our docs | 12:57 |
| sean-k-mooney | gibi: ah cool | 12:57 |
| gibi | they way how qemu did the reset of the vcpu did not work for ES and SEV instances | 12:57 |
| gibi | due to encrypted registers | 12:57 |
| gibi | afaik | 12:57 |
| sean-k-mooney | int13? | 12:58 |
| gibi | https://www.redhat.com/en/blog/confidential-guest-reset-qemu-hypervisor-design-choices-and-approach | 12:58 |
| gibi | more details are here ^^ | 12:58 |
| gibi | I haven't tested qemu 11 as it is only available in rawhide at the moment and the machine I have does not like fedora :) | 12:59 |
| sean-k-mooney | ah no i was thinking in INT 19 | 12:59 |
| sean-k-mooney | anyway cool | 13:00 |
| gibi | :) | 13:00 |
| sean-k-mooney | if its going away then ya just add an important:: note in the docs is fine | 13:01 |
| sean-k-mooney | qemu 11 isnec quite out yet in distos | 13:02 |
| gibi | yeah | 13:02 |
| gibi | too new | 13:02 |
| gibi | hm, I have it in sid, but that would be even harder to put on this lab machine | 13:03 |
| sean-k-mooney | tkajinam: i would ask that we also put this in the release not for the feature if that ok | 13:03 |
| sean-k-mooney | gibi: you can enable the virt preview repo | 13:03 |
| sean-k-mooney | are you on c10s | 13:04 |
| sean-k-mooney | https://copr.fedorainfracloud.org/coprs/g/virtmaint-sig/virt-preview/ | 13:04 |
| sean-k-mooney | htat has qemu 2:11.0.0-11 | 13:04 |
| sean-k-mooney | you just need to add https://copr.fedorainfracloud.org/coprs/g/virtmaint-sig/virt-preview/repo/centos-stream-10/group_virtmaint-sig-virt-preview-centos-stream-10.repo | 13:05 |
| sean-k-mooney | to your repo config | 13:05 |
| gibi | ooh OK, I can try that. The lab machine is on centos10 yes | 13:06 |
| sean-k-mooney | with that said i woudl finish any ohter testing you want to do first before doing that | 13:06 |
| sean-k-mooney | it normally does not breakthing but it can | 13:06 |
| gibi | yeah I'm mostly done with the exploratory testing | 13:06 |
| sean-k-mooney | there was a patch probaly litrally decades ago to add a flag to enabel the virt preview repo in devstack but i dotn think that ever landed | 13:08 |
| sean-k-mooney | i remember "dicusssing" that wehn trying to get dpdk suprpot into openstack | 13:08 |
| *** mhen_ is now known as mhen | 13:26 | |
| opendevreview | Takashi Kajinami proposed openstack/nova master: Return 400 for invalid properties for locked memory https://review.opendev.org/c/openstack/nova/+/995813 | 13:30 |
| sean-k-mooney | tkajinam: locked memory is not ment ot requried hugepages | 13:33 |
| tdemaret | Hi core team, I need help to understant, what I must doing to validate my spec and validate my code : my pr is here, and I think, I don t understand something : https://review.opendev.org/c/openstack/nova-specs/+/979696 - https://review.opendev.org/c/openstack/nova/+/979693 ( I see the merge conflict, but it is a 3 times, I think, I need to validate my spec before I fix it ? ) | 13:33 |
| sean-k-mooney | tkajinam: unless im conflatin gthat with realtime | 13:34 |
| sean-k-mooney | tkajinam: i know i added that so that vdpa would work | 13:35 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: Return 400 for invalid properties for locked memory https://review.opendev.org/c/openstack/nova/+/995813 | 13:35 |
| sean-k-mooney | without needing realtime | 13:35 |
| sean-k-mooney | but i tough it was inteded to work with file backed memory and small pages as well | 13:35 |
| sean-k-mooney | i woudl have to dig back into the history | 13:35 |
| sean-k-mooney | tkajinam: actully no your right https://github.com/openstack/nova-specs/blob/b855fe1b5d192aefa238cd9465fc0ee60568b2d1/specs/zed/implemented/libvirt-viommu-device.rst?plain=1#L61 | 13:38 |
| sean-k-mooney | i intneed it to be set only when hugepages to avodi needign to mark the vm as realtime and foce cpu pinning | 13:38 |
| tkajinam | sean-k-mooney, ah, ok. honestly I found that requirement a bit strange first (because locked memory should work without huge pages afaik) but now it's clearer | 13:39 |
| sean-k-mooney | we could make it work withough hugepages | 13:39 |
| tkajinam | yeah | 13:39 |
| sean-k-mooney | but it was to work around a bug in qemu | 13:39 |
| sean-k-mooney | well actully maybe libvirt, qemu or libvirt did not allcoate addtion locked memroy for pci passhtough or vdpa automaticly | 13:40 |
| sean-k-mooney | so we had to mark the entire mroy as locked as a workaround | 13:40 |
| sean-k-mooney | later version fo libvirt do allocate addtioanl locked memeory for passthough devices but we still have the option | 13:41 |
| tkajinam | ok | 13:43 |
| sean-k-mooney | its still usefull in general but lower level then we woudl have prefered to expose | 13:43 |
| sean-k-mooney | i.e. as an operator you really should not need to think about that when creating flavors | 13:43 |
| tkajinam | I think we could consider lifting the limitation after some quick testings, but IMO we should fix the status code separately in a short term (because 403 doesn't match the actual cause imho) | 13:44 |
| tkajinam | yeah | 13:44 |
| sean-k-mooney | oh i was about to ask if you got a 409 | 13:44 |
| sean-k-mooney | ya 403 is wrong | 13:44 |
| sean-k-mooney | 409 or 400 are fine | 13:44 |
| tkajinam | I'm changing it to 400 | 13:44 |
| sean-k-mooney | well it should be the ame as the other flavor iamge conflicts | 13:45 |
| tkajinam | other flavor image conflicts return 400 now so it's consistent with that behavior | 13:46 |
| tkajinam | tdemaret, I'm unsure what your expect by "validate" but in general we expect that spec is reviewed and approved (you can push actual change for reference) and then actual implementations are reviewed according to the spec | 13:46 |
| tkajinam | tafkamax, I saw several comments still open and unanswered so the first thing you need may be to respond to these. | 13:47 |
| opendevreview | Thibaut Démaret proposed openstack/nova master: libvirt: add disk rotation_rate support for local disks https://review.opendev.org/c/openstack/nova/+/979693 | 13:47 |
| tkajinam | tafkamax, oops. sorry that's a wrong mention | 13:47 |
| sean-k-mooney | tdemaret: yes unforctuetly you spec did not get much visablity before the deadlien beacus you had abandoned it | 13:47 |
| sean-k-mooney | so it not approved for the current release and as such the code cannot proceed | 13:48 |
| sean-k-mooney | tdemaret: if you want to advance that for teh 2027.1 cycle the first stpe would be to socialise the freature and repoorpse the spec for the next release | 13:48 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: Validate image properties for stateless firmware at API layer https://review.opendev.org/c/openstack/nova/+/995835 | 13:49 |
| sean-k-mooney | tdemaret: by socailise the feature i mean bring it up in teh nova irc meeint or the ptg | 13:49 |
| sean-k-mooney | overall the idea is a good one and i think it fits in teh scope of nova | 13:50 |
| sean-k-mooney | but procedually its too late in teh cycle since nova had its spec freeze a few weeks ago.the default for other project would have been yesterdady as well | 13:50 |
| sean-k-mooney | the feature design freeze for most teams is milesotne two which was yesterday | 13:51 |
| tdemaret | @sean-k-mooney : Ok it is new for me, I need to socialise to integrate a new spec in the new release. Ok I understand more the workflow. The next PTG is in Oktober ? | 13:52 |
| sean-k-mooney | team are not shifting to completing the already approved work before feature freeze at the end of august, the branches will re open for new feature work for next cycle in mid september | 13:52 |
| sean-k-mooney | tdemaret: yes but you dont need to wait that long | 13:53 |
| sean-k-mooney | we ussually create the spec directory for the next release a few weeks after milestone 2 | 13:53 |
| sean-k-mooney | so you can actully just do that now but i wauld start by bring this up in teh next irc meeting on monday | 13:54 |
| tdemaret | Ok and I must introduce my feature at this time when the directory has been created ? | 13:54 |
| tdemaret | @sean-k-mooney : thanks, I am happy for this feedback | 13:55 |
| sean-k-mooney | tdemaret: so if you want to get visablity it helps, its not stricly requried but unless your already an active contibutor and have reached out to the team its very easy for your spec to go unnotice | 13:55 |
| ykarel | clarkb, melwitt sean-k-mooney i have added summary in https://review.opendev.org/c/zuul/zuul-jobs/+/959393 for the linux bridge/geneve move and current impact and required changes/options to move forward. please do check when you get chance | 13:56 |
| sean-k-mooney | tdemaret: i know the process can seem a bit much for a small change but the realtity is when we add a feature we effectivly need to support that aproximatly forever | 13:57 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: Validate image properties for stateless firmware at API layer https://review.opendev.org/c/openstack/nova/+/995835 | 13:58 |
| tdemaret | sean-k-mooney: thanks, I try to answer on few question I have, and I understand more the process. Thanks for the manual | 13:58 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: compute: Validate SEV/SEV-ES support at start up https://review.opendev.org/c/openstack/nova/+/994342 | 14:01 |
| tdemaret | sean-k-mooney: I have one comment, I don t understand, how I can change something in my spec file. I am a little bit confused/unclear about how to apply it, or what is expected. I have the code example, but I don t have the spec file. I just make a check on the comment and I verify my implementation to be sure, it is ok or I must make something in the spec file. Sorry it is | 14:05 |
| tdemaret | really the newby question... | 14:05 |
| sean-k-mooney | you mena your asking how to update the review for the spec? | 14:06 |
| tdemaret | yes | 14:08 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: compute: Validate SEV/SEV-ES support at start up https://review.opendev.org/c/openstack/nova/+/994342 | 14:11 |
| tdemaret | Really, I don't understand, what I need to change : https://review.opendev.org/c/openstack/nova-specs/+/979696?tab=comments , really I think, I must change the mindset and read more spec file to understand the template and informations are mandatory. | 14:14 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Ignore SEV-ES when SEV-SNP is detected https://review.opendev.org/c/openstack/nova/+/994343 | 14:15 |
| opendevreview | Dan Smith proposed openstack/nova stable/2026.1: Fix mutating global config in websocket proxy https://review.opendev.org/c/openstack/nova/+/995956 | 14:29 |
| opendevreview | Dan Smith proposed openstack/nova stable/2025.2: Fix mutating global config in websocket proxy https://review.opendev.org/c/openstack/nova/+/995957 | 14:30 |
| opendevreview | Dan Smith proposed openstack/nova stable/2025.1: Fix mutating global config in websocket proxy https://review.opendev.org/c/openstack/nova/+/995958 | 14:31 |
| opendevreview | Thibaut Démaret proposed openstack/nova master: libvirt: add disk rotation_rate support for local disks https://review.opendev.org/c/openstack/nova/+/979693 | 14:57 |
| gibi | sean-k-mooney: I tried qemu 11 from virt preview but it is crashing | 15:04 |
| gibi | 2026-07-03T15:00:54.247846Z qemu-system-x86_64: SNP_LAUNCH_UPDATE ret=-5 fw_error=22 'Invalid parameter' | 15:04 |
| gibi | 2026-07-03T15:00:54.247920Z qemu-system-x86_64: SEV-SNP: CPUID validation failed for function 0x80000021, index: 0x0, provided: eax:0x18000065, ebx: 0x00000000, ecx: 0x00000006, edx: 0x00000000, expected: eax:0x18000065, ebx: 0x00000000, ecx: 0x00000000, edx: 0x00000000 | 15:04 |
| gibi | 2026-07-03T15:00:54.247933Z qemu-system-x86_64: SEV-SNP: failed update CPUID page | 15:04 |
| gibi | 2026-07-03 15:00:54.454+0000: shutting down, reason=crashed | 15:04 |
| gibi | OK cpu_model_extra_flags = -tsa-sq-no, -tsa-l1-no | 15:13 |
| gibi | solve sthat | 15:13 |
| gibi | solves that | 15:13 |
| gibi | aand reboot works from within the SNP guest now | 15:14 |
| sean-k-mooney | oh cool | 15:15 |
| gibi | updated the bug | 15:15 |
| gibi | and dropping for the weekend | 15:16 |
| sean-k-mooney | have you tried cpu-mode=host-passthough | 15:16 |
| gibi | o/ | 15:16 |
| gibi | it is with host-passthrough | 15:16 |
| sean-k-mooney | ah thats a sperte bug so | 15:16 |
| sean-k-mooney | gibi: enjoy the weekend | 15:16 |
| gibi | thanks. same to you too | 15:17 |
| *** dviroel is now known as dviroel_lunch | 15:32 | |
| opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Detect AMD SEV-SNP support https://review.opendev.org/c/openstack/nova/+/994764 | 16:01 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Detect AMD SEV-SNP support https://review.opendev.org/c/openstack/nova/+/994764 | 16:17 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Support launchSecurity element for SEV-SNP https://review.opendev.org/c/openstack/nova/+/994920 | 16:17 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Omit optional fields for SEV/SEV-ES https://review.opendev.org/c/openstack/nova/+/994921 | 16:17 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Drop sev capability check in launch instance flow https://review.opendev.org/c/openstack/nova/+/994929 | 16:21 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: AMD SEV: omit iommu='on' for virtio devices https://review.opendev.org/c/openstack/nova/+/909635 | 16:22 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Launch instances with SEV-SNP memory encryption https://review.opendev.org/c/openstack/nova/+/994930 | 16:40 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: Update documentations for AMD SEV-SNP support https://review.opendev.org/c/openstack/nova/+/995090 | 16:40 |
| opendevreview | Takashi Kajinami proposed openstack/nova master: Remove [libvirt] num_memory_encrypted_guests https://review.opendev.org/c/openstack/nova/+/995120 | 16:41 |
| *** dviroel_lunch is now known as dviroel | 16:52 | |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!