| opendevreview | Ghanshyam Maan proposed openstack/nova master: Track and log the main RPC server in-progress task https://review.opendev.org/c/openstack/nova/+/996583 | 01:43 |
|---|---|---|
| opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Extract share management from ComputeManager https://review.opendev.org/c/openstack/nova/+/999349 | 06:20 |
| opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Support cold migration with virtiofs shares https://review.opendev.org/c/openstack/nova/+/989633 | 06:20 |
| opendevreview | Matěj Mudra proposed openstack/nova master: Add --verbose to nova-manage commands https://review.opendev.org/c/openstack/nova/+/999956 | 07:47 |
| gibi | antia: tkajinam: I was able to boot a intel TDX guest VM with the WIP nova patches \o/ | 09:39 |
| gibi | ((.venv) ) [stack@beast01 ~]$ openstack resource provider inventory list a83a9645-34b4-4bda-b0b9-ea3b29f32ac4 | 09:41 |
| gibi | +------------------------+------------------+----------+----------+----------+-----------+-------+------+ | 09:42 |
| gibi | | resource_class | allocation_ratio | min_unit | max_unit | reserved | step_size | total | used | | 09:42 |
| gibi | +------------------------+------------------+----------+----------+----------+-----------+-------+------+ | 09:42 |
| gibi | | MEM_ENCRYPTION_CONTEXT | 1.0 | 1 | 1 | 0 | 1 | 47 | 1 | | 09:42 |
| gibi | +------------------------+------------------+----------+----------+----------+-----------+-------+------+ | 09:42 |
| gibi | ((.venv) ) [stack@beast01 ~]$ | 09:42 |
| gibi | ahh, sorry | 09:42 |
| gibi | I wanted to paste https://paste.openstack.org/show/brAOgxu5mrp5Orjfy96J/ | 09:42 |
| gibi | that is the whole trace of my work :) | 09:42 |
| antia | amazing! | 09:43 |
| antia | Thanks for testing :) | 09:44 |
| gibi | thanks for working on it :) | 09:44 |
| gibi | I will try attestation after lunch | 09:45 |
| opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Add Intel TDX host capability detection https://review.opendev.org/c/openstack/nova/+/994421 | 10:51 |
| opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Generalize memory encryption config https://review.opendev.org/c/openstack/nova/+/998466 | 10:51 |
| opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Add memory encryption config for TDX https://review.opendev.org/c/openstack/nova/+/998608 | 10:51 |
| opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: Launch security Intel TDX https://review.opendev.org/c/openstack/nova/+/999249 | 10:51 |
| opendevreview | Anton Iacobaeus proposed openstack/nova master: doc: Add documentation for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000081 | 10:51 |
| opendevreview | Anton Iacobaeus proposed openstack/nova master: libvirt: reject_mem_enc_instances https://review.opendev.org/c/openstack/nova/+/1000082 | 10:51 |
| gibi | antia: is there an easy way to demonstrate attestation? | 12:44 |
| gibi | I have qgsd running on the host, I learned that I need a pccs service as well and I keep getting hints that an intel API key might be needed | 12:45 |
| gibi | gmaan: have you seen extra slow shutdown /restart in devstack from the cell1 conductor? it seems the rest of the services restart normally but not cell1 conductor | 12:56 |
| gibi | fresh devstack from master, no config is tuned | 12:56 |
| gibi | gmaan: is it intentional that cell conductor has a 160 second graceful shutdown by default? | 13:35 |
| gibi | Aug 07 16:34:43 beast01.rhos.lab.eng.brq2.redhat.com nova-conductor[245559]: DEBUG nova.conductor.manager [-] Conductor service manager is waiting for 160 seconds to finish in-progress tasks {{(pid=245559) graceful_shutdown /opt/stack/nova/nova/conductor/manager.py:224}} | 13:35 |
| opendevreview | Leo Jenkins proposed openstack/nova-specs master: Support for Hostname-based Ceph Mon References https://review.opendev.org/c/openstack/nova-specs/+/1000098 | 13:44 |
| antia | gibi: I've been using internal tooling for attestation. For the quote generation part you can talk to configfs directly. | 13:52 |
| antia | verification is a bit trickier, I haven't personally used Trustee but they might support it | 13:52 |
| antia | another alternative is https://cc-enabling.trustedservices.intel.com/intel-tdx-enabling-guide/07/trust_domain_at_runtime/ | 13:53 |
| gibi | thanks I will take a look | 14:09 |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.openstack.org will be offline momentarily at 18:00 UTC for a patch upgrade (just under an hour from now), but should return within a few minutes. | 17:11 | |
| gmaan | gibi: 160 sec is manager shutdown time and overall graceful shutdown time is 180 by default for all services | 17:40 |
| gmaan | gibi: slow in shutdown is expected as we wait for full 160 sec, that is what I am solving in part-2 task tracking where it will only wait for in-progress tasks or 160 sec max. for example if no task in progress then it will shutdown immeditatly | 17:41 |
| gibi | gmaan: hm, but then why I see a lot faster shutdown in the other nova services :) | 17:47 |
| sean-k-mooney | gibi: im not folowing but if tis the comptue node its really the only one runing perodic | 17:47 |
| gmaan | it should be same for all, are you checking locally or in gerrit? | 17:48 |
| gmaan | gibi: wait, i checked and only graceful-shutdow-job jobs set it to 180 sec for overall shutdown and 160 for manager to shutodwn for all services otherwise devstack set it 5 sec for all other jobs for all services | 17:50 |
| gmaan | gibi: we might log that manager is waiting for 160 sec but overall graceful_shutdown_timeout (5 sec) might be killing it after log and before 5 sec | 17:51 |
| gmaan | if you can point me the link where you are seeing i can check why cell cond is taking more time than 5 sec or it is just log | 17:51 |
| gmaan | I cannot find anywhere in devstack or nova we are setting any different timeout for cells cond than other services so not sure why it is slow until i see logs | 17:55 |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.org is going offline momentarily for a patch upgrade, but should return within a few minutes. | 18:03 | |
| gmaan | dansmith: thanks for review, i have updated it and its ready https://review.opendev.org/c/openstack/nova/+/996299 | 18:18 |
| gmaan | moved the intercept_method to fixture and fixed other comment | 18:18 |
| dansmith | gmaan: okay thanks I probably won't get back to it today but hopefully monday | 18:20 |
| gmaan | dansmith: sure | 18:20 |
| opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Extract share management from ComputeManager https://review.opendev.org/c/openstack/nova/+/999349 | 19:02 |
| opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Support cold migration with virtiofs shares https://review.opendev.org/c/openstack/nova/+/989633 | 19:02 |
| opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Rewrite share admin guide and add user guide https://review.opendev.org/c/openstack/nova/+/1000166 | 22:03 |
| opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Rewrite share admin guide and add user guide https://review.opendev.org/c/openstack/nova/+/1000166 | 22:07 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!