09:00:24 #startmeeting karbor 09:00:25 Meeting started Tue May 9 09:00:24 2017 UTC and is due to finish in 60 minutes. The chair is yuval. Information about MeetBot at http://wiki.debian.org/MeetBot. 09:00:26 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 09:00:28 The meeting name has been set to 'karbor' 09:00:31 Hello everybody 09:00:37 and welcome to Karbor's weekly meeting 09:01:03 we have a few things on the agenda today 09:01:13 hi 09:01:13 ( https://wiki.openstack.org/wiki/Meetings/Karbor ) 09:02:18 hey jiaopengju 09:02:39 hi yuval 09:02:46 hi 09:03:06 hello 09:03:08 let's wait a bit for chenying_ zhonghua2 zengchen 09:03:14 yay 09:03:16 :) 09:03:53 waiting for chenhuayi 09:03:53 #topic Files backup scene 09:04:02 zhonghua2 is in conference. 09:04:07 jiaopengju: you put this topic, right? 09:04:13 yes 09:04:34 jiaopengju is from china mobile. 09:06:08 jiaopengju: would you like to ask something, discuss something specific about it? 09:07:19 he has a use case file backup, he want to use karbor to backup file, so that it can be used in their openstack cloud. 09:08:26 that's what i want to say 09:09:16 ok, regarding 'where to backup', in karbor we have an object called 'bank' which is an abstraction of an object storage 09:10:17 regarding 'how to backup': what did you have in mind? guest agent? 09:10:26 yes, I have tested it mounth ago 09:10:43 So he submit a topic about file backup. what we need be discuss it that whether karbor need consider this use case file backup, what's is the solution about it? As we know, file this resource is not managed by openstack, how to query, how to protect? 09:11:28 yuval guest agent is one optional way to get and protect the files in vm. 09:12:10 jiaopengju: could be a guest agent or os specific - scp 09:12:25 one of the challenges we have here, is the restore target 09:12:51 I think guest agent would be better. 09:13:34 How to use scp in this situation? scp the files to karbor node and then backup them ? 09:13:39 scp this way is not invasive. 09:15:19 scp will have some security problems 09:15:38 jiaopengju: which security problems? 09:16:06 So the guest agent is provided by karbor or integrate with other opensource backup software? 09:16:30 if we choose use guest agent to get/backup file in the vm ? 09:17:13 scp this way. It means that use need provide the usename/password about the vm. 09:17:15 chenying_: we can have a protection plugin for each 09:17:55 In our environment, we always disabled the port 22 and users' password should not be used by the backup service(I think) 09:18:50 yuval: we can have a protection plugin for each. You mean two plugins about integrate with guest agent in the vm? 09:19:12 chenying_: we can have a protection plugin for scp and a protection plugin to interact with each guest agent 09:20:41 jiaopengju: let's say you don't use scp. How will karbor interact with the guest agent? 09:20:46 yuval I see. But the guest agent, Does it means that karbor need provide it? 09:21:28 jiaopengju What's your oppions about the guest agent? 09:21:44 chenying_: I'm speaking theoretically first 09:21:44 yuval: how about http? 09:21:59 jiaopengju: you want the guest agent to leave an open http port? 09:23:50 that will be one way to achieve the guest agent. 09:24:41 It is one communication way between plugins and guest agent. 09:25:19 What I concerned most is how the users can use it conveniently 09:26:15 The deployment about guest agent to vm is another problom. 09:28:20 if scp will give more conveniently and consider the 'security problems(I think)' , I think it can be acceptted. 09:28:53 jiaopengju: what about restore? you intend on restoring into running nova instances? 09:30:17 At the same time ,we should consider the impression to karbor node of the data flow that generated by the backup 09:30:30 yuval: yes 09:30:39 jiaopengju: what do you mean? 09:31:53 when using scp, kabor node and vms will have data transfer 09:31:59 the data transfer rate control? 09:32:06 sorry about my english 09:32:35 chenying_: that's what I want to say, you know me 09:34:29 jiaopengju: btw, we plan on integrating a freezr plugin in karbor 09:34:59 jiaopengju: I see you are active there as well 09:35:47 yes, I am testing freezer as well 09:36:56 jiaopengju: it doesn't contradict. As I said, we plan on creating a plugin for it in karbor 09:37:17 integrating a freezr plugin in karbor only for backuping files. IMO, it is too heavy for user. 09:40:25 karbor do well on backup management, but our need comes from users(include true user and engineers) ask me to add file backups, so that we can meet the users' needs . 09:41:45 jiaopengju: we would definitely like to hear more about your use case, and how you plan to use Karbor for it. Mind if we continue this in Karbor channel later? 09:41:45 So I am confusing how to meet this need when we use karbor 09:42:01 ok 09:42:13 jiaopengju So now the volume and vm protection plugins can meet your requirements? 09:42:23 yes! 09:42:50 I have tested for mounths 09:42:52 jiaopengju: I know it is late in China now, and tomorrow I'm attending a convention. Want to schedule in Karbor channel, Thursday 15:00 China time? 09:43:19 yuval He want use karbor to protect volume/VM and file, in one sinlge backup service. 09:43:29 chenying_: I understand 09:43:39 yuval: ok, thank you very much 09:43:48 chenying_: can you come as well? 09:44:00 I am OK. I will. 09:44:24 great 09:44:36 #topic Volume backup restore 09:44:37 chenying_: ? 09:45:00 yes this topic is mine. 09:45:15 chenying_: Volume backups are block-level aware. Karbor should not try to mount these volumes anyhow 09:46:13 yuval If we can support file level protection and restore. I think we don't need consider restore a file form volume backups/ 09:46:29 chenying_: similar to what jiaopengju said? 09:46:41 yuval Yes. 09:47:05 The key is file-level restoration. 09:47:48 chenying_: the tricky thing is that currently restoring a resource is creating the resource 09:47:58 chenying_: into a project 09:48:13 chenying_: when we speak about a file, we need to restore into an instance 09:48:48 I understand. 09:49:16 chenying_: we can solve by adding the instance uuid or network address (in case of an in guest agent) into the parameterised restore 09:50:46 some infor about the instance could be pass by the parameter of restore API. I think it is OK. 09:51:21 chenying_: great 09:51:27 anything else on that? 09:51:57 Now I don't have any more topic. 09:52:08 #topic open discussion 09:52:25 chenying_: we should be releasing an intermediary release soon 09:53:16 chenying_: let's see if we can have it by end of next week 09:54:28 yuval OK. 09:54:47 great 09:54:49 thanks for attending 09:54:54 :) 09:55:08 bye 09:55:10 bye 09:55:11 #endmeeting