Tuesday, 2022-10-04

*** ysandeep|out is now known as ysandeep04:37
*** raukadah is now known as chandankumar04:48
noonedeadpunkjrosser_: yup, it's https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/85933707:15
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server stable/xena: Upgrade erlang version  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/86020807:29
noonedeadpunkNeilHanlon: no, that's valid failure... doh07:30
*** ysandeep is now known as ysandeep|lunch08:08
*** ysandeep|lunch is now known as ysandeep10:18
noonedeadpunkhm, what does provide tgtadm....10:28
jrosser_for ubuntu https://packages.ubuntu.com/search?searchon=contents&keywords=tgtadm&mode=exactfilename&suite=jammy&arch=any10:47
jrosser_but i am going to guess this is centos10:47
anskiyafaik, osa doesn't install tgtadm for centos, as it's using rdstool from cinder venv10:55
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder master: Add nfs and ceph jobs to templates  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/85933710:57
noonedeadpunkyeah, for centos it should be jsut different helper be used10:57
noonedeadpunkjrosser_: oh, well I thought we use lioadm for redhat and tgtadm for ubuntu...10:58
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible-os_cinder/src/branch/master/defaults/main.yml#L226-L22810:58
noonedeadpunkMaybe we indeed can just use rdstool if it's smth universal....10:58
anskiynoonedeadpunk: that should be the case: lio on red hat and tgtadm on deb10:59
noonedeadpunkalso I realized that our cinder role does need love10:59
noonedeadpunkAs no reason to define bunch of iscsi stuff for rdb or nfs I guess11:00
anskiyI don't think you can use rdstool with tgt, as it is specifically designed to be used with kernel-space targets11:00
anskiythat is, all its code is just messing with stuff in /sys11:00
noonedeadpunkyeah, well I never used rdstool so was not sure how it does work11:01
anskiyand the reasoning behind using lio on rhel is that it's theirs recommended way to usi iSCSI11:02
anskiywell, that thing can support discard/unmap, whilst tgtadm can't, at least that's what I've found on the internets. The downside of LIO is that it's just one kernel thread (not sure if you could scale it up a bit via /sys knobs), whereas tgtd is multithreaded11:04
anskiystill, I'm using tgt now for my first couple of customers VMs, and I already can't wait till I throw this thing away :)11:06
noonedeadpunkBut is discard a required thing for thinpool lvm? My recollections from Xen time does bring memories of free space being reclaimed somehow by default11:07
noonedeadpunkTHough, I think that discard was added to boot options11:07
noonedeadpunkbut xen was using lvm natively and not through iscsi11:08
anskiyit is required. For thin LVM volume you start small and then it grows until allocated size == max size, unless you can prevent it with discarad/unmap11:09
noonedeadpunkbut hm, I think we actually used kvm as well these days...11:09
anskiyand, my bad: the problem is not that tgt does not allow discard/unmap -- it's that it send that command in a way, that thin LVM doesn't understands it11:09
noonedeadpunkbut if you have an image that does have discard defined when formating drive - do you also need tgt to pass it as well?11:11
noonedeadpunktbh I never used lvm for cinder, it was always ceph or nfs...11:11
anskiyand the only suggestion that I've found (without diving into tgt's code) was this: https://github.com/mwilck/discard0#questions-and-anwers. tgt sends FALLOC_FL_PUNCH_HOLE which LVM doesn't understand11:11
noonedeadpunkyeah, well, that sucks then...11:11
anskiynoonedeadpunk: you need four things: first is discard mount option/fstrim in guest, then unmap in libvirt domxml, next is allowing to pass it via your iSCSI implementation and then it's LVM11:13
anskiyand all of these four things should "speak the same language" :)11:13
noonedeadpunkyeah, I knew about 3 of them, but as I said never used lvm and kvm through iscsi11:13
noonedeadpunkgood to know11:13
anskiywell, it's more like "that thing would do for now", as at the beginning I wasn't ready to setup and deal with ceph cluster along with openstack itself, which now I would see as a mistake, but well...11:15
noonedeadpunkI wonder if blockio will be same in terms of discard?11:16
* noonedeadpunk needs to read more docs11:17
anskiybesides, nova desperately needs a patch to allow uploading directly to Ceph when you aren't locating emphemeral storage on Ceph too: that thing would just go through Glance's HTTP11:17
noonedeadpunkwell, it depends I'd say11:18
anskiynoonedeadpunk: it defaults to fileio and I don't specifically remember, but for some reason I was assured that it was the right setting for LVM+iSCSI11:18
noonedeadpunkas this can be also considered as way to backup things11:19
noonedeadpunkI think it's up to user to define fileio or blockio. from what I read blockio does report directly to lvm, while fileio goes through cache11:20
noonedeadpunkSo with blockio you don't get cache and thus loose in performance, but when talking about hypervisor with dozens of vms, likely it doesn't make that much sense11:21
noonedeadpunkanskiy: also why to use epehemeral at all ? :D11:21
anskiynoonedeadpunk: quick grep in cinder's source finds iscsi_iotype only in `cinder/volume/targets/iet.py`11:22
noonedeadpunkUm https://opendev.org/openstack/cinder/src/branch/master/cinder/volume/drivers/lvm.py#L12611:23
anskiyyeah, but that's just and option declaration11:23
anskiyand it says IET, which, I suppose, some sort of target, which is different from LIO and TGT11:24
anskiynoonedeadpunk: is this some wording joke? :)11:25
noonedeadpunkwell, I mean they can pass get_driver_options jsut as kwargs somewhere as well11:26
noonedeadpunkbut have no idea if it's used for real11:27
anskiynoonedeadpunk: jokes aside, I still would prefer local storage first (especially when you have working block live migration now), and would add Ceph for it as another option11:28
noonedeadpunkregarding ephemeral? Nah, it's just that usecases for ephemerals are not really wide. While they have some neats and likely for CI/CD and local storage it's nice to have but overall - meh11:29
*** dviroel|afk is now known as dviroel11:30
noonedeadpunkAnd with ephemerals you need to spawn waaaaay more flavors then jsut use BFV11:31
anskiywell, from quickly poking it, I can only see that one downside for "backups" (image from existent instance), which I hope to rework on my side and upstream one day. And there are many properties like "preserve ephemeral" on rebuild and such11:31
noonedeadpunkBut again, why given there's cinder?11:32
noonedeadpunkAnd also you need to lock compute per storage backend.11:32
noonedeadpunkSo if you want to have slow/fast ceph pools - you can't do that with ephemerals (or well only based on computes and aggregates)11:33
anskiybecause all the cinder drivers for "local" storage are bad :) You can match flavor property to aggregate11:34
noonedeadpunkyeah, the local storage is only valid usecase I'd say. But for local storage you still will need to upload images through API11:34
anskiyyes, unless, you patch Nova :)11:35
anskiyand then, you don't! :)11:35
noonedeadpunkum, I do know how to do that with ceph. But does lvm also have COW nowadays?11:36
KSRHello - testing testing11:37
jrosser_hello KSR11:38
KSRThanks, just testing if I was able to write without a certificate11:38
KSRWe are running openstack ussuri latest 21.2.10 and we have a known bug: https://review.opendev.org/c/openstack/horizon/+/829706 11:39
KSRAre there any plans to add this to a release or can it be cherrypicked by hand?11:39
anskiynoonedeadpunk: you already have this mechanic in nova: https://opendev.org/openstack/nova/src/branch/master/nova/image/glance.py#L227, which bypasses Glance HTTP and goes directly to Ceph to get the desired Image, so, there should be added some `_upload_handlers` here: https://opendev.org/openstack/nova/src/branch/master/nova/image/glance.py#L222, like for download11:40
noonedeadpunkKSR: you can set `horizon_git_install_branch: 920cbb82d20be33074eec52abc6022f5ff97e569` (it's SHA hash of this patch) to your user_variables11:41
jrosser_KSR: note that ussuri is a release in "extended maintainance" now https://docs.openstack.org/openstack-ansible/latest/11:41
KSROk thanks I'll try that. Any plans to include it in a release?11:42
noonedeadpunkwe can't make any new releases of Ussuri because of EM state11:42
KSRAnd do you know if it's included in future releases? If so we migth just consider an upgrade11:42
anskiynoonedeadpunk: then you just `if` here: https://opendev.org/openstack/nova/src/branch/master/nova/virt/libvirt/driver.py#L3107 for some variable, like `glance.enabled_rbd_upload`, I hope this wouldn't be too hard for me :)11:43
KSRnoonedeadpunk: Thanks11:43
noonedeadpunkKSR: I'm quite sure it is included11:43
KSRThanks guys!11:43
jrosser_KSR: on the patch you linked see "cherry picks" at the top right, you can see which branches that code is on11:43
noonedeadpunkanskiy: my point returns back to why use epehemerals for ceph as a concept11:43
noonedeadpunkcinder does have ceph driver and it's quite good maintained11:44
jrosser_but like noonedeadpunk says it is really trivial to update the SHA for horizon in your existing deployment11:44
anskiynoonedeadpunk: nono, ephemeral with local storage, I just need to directly upload images to Glance Ceph pool11:44
noonedeadpunkahhhhhh11:44
noonedeadpunkok, gotcha11:44
anskiyhence I would need that patch11:44
noonedeadpunkyes, true, that does make sense indeed11:45
KSRjrosser_: Where to cherry pick openstack horizon source?11:45
noonedeadpunkKSR: you don't need to11:45
jrosser_you already have the example....11:45
jrosser_noonedeadpunk> KSR: you can set `horizon_git_install_branch: 920cbb82d20be33074eec52abc6022f5ff97e569` (it's SHA hash of this patch) to your user_variables11:45
noonedeadpunkpatch already merged to stable/ussuri. So using SHA wil ldo the trick11:45
KSRnoonedeadpunk: Thanks I'll do that then.. Just wanted to know if there was an alternative. 11:46
jrosser_KSR: in a lot of ways a point release of OSA just updates a bunch of SHA in a file11:46
jrosser_you can do exactly the same in your user_variables.yml whenever you need11:46
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core version to 2.13.4  https://review.opendev.org/c/openstack/openstack-ansible/+/85750612:19
*** frenzyfriday is now known as frenzyfriday|food12:22
*** ysandeep is now known as ysandeep|out14:04
*** dviroel is now known as dviroel|lunch14:50
noonedeadpunk#startmeeting openstack_ansible_meeting15:00
opendevmeetMeeting started Tue Oct  4 15:00:14 2022 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:00
noonedeadpunk#topic rollcall15:00
noonedeadpunko/15:00
NeilHanlono/ double booked for this but will have it up on the screen :) g'day folks15:00
noonedeadpunkthanks!15:01
jrosser_o/ hello15:01
noonedeadpunk#topic office hours15:05
noonedeadpunkSo first thing - Xena is broken due to cloudsmith dropped erlang version we were using15:05
noonedeadpunkThis also blocking Xena as upgrade jobs are also broken15:06
noonedeadpunk*Yoga15:06
noonedeadpunkTo unblock we need this https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/86020815:06
noonedeadpunkBut also, what's more important, I'm not sure if we should continue consuming cloudsmith....15:07
noonedeadpunkI really can't follow their updates and don't really understand policies either15:07
noonedeadpunkAs they've dropped completely erlang 23 now but some 22 are still there15:07
noonedeadpunkBut what's worse - I'm not sure what alternatives are15:08
noonedeadpunkNext thing - https://review.opendev.org/q/topic:osa%252Ftest_volumes seems passing and functional now. So feel free to review that15:10
noonedeadpunkQuestion about mariadb version bump: https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/858555 - should we backport it? As sounds like it's worthy thing to backport considering it will allow to sync debian and redhat versions15:11
anskiyI'm running 10.6.9 for quite some time now (since I've found that fix for not backuping redo log, if you remember) and it seems fine (if that helps in any way).15:13
noonedeadpunkyep, that's quite useful info I'd say15:15
jrosser_sounds reasonable to backport - though it's unusual15:16
noonedeadpunkyeah, we should add release note when backporting15:17
jrosser_then this is lingering around https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/85598515:19
noonedeadpunkYeah. I think we need to drop debian-11 from there15:20
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Update rabbitmq to 3.10.7-1  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/85598515:20
noonedeadpunkI kind of wonder when next long-term mariadb will be...15:21
noonedeadpunkAs I feel somehow uncomfortable with 10.6 when having 10.10 as current one15:22
noonedeadpunkI'm already unsure if there will be any LTS release in the future....15:23
noonedeadpunkAh, found, `A new long-term support MariaDB Server version will be announced for General Availability approximately once every two years`15:24
noonedeadpunk10.6 was released 6 Jul 2021. So one more year to wait....15:25
noonedeadpunkI hope there will be upgrade path lol15:26
noonedeadpunkbtw, ansible 2.13 now fails on Rocky 9 somehow15:27
noonedeadpunkoh hardening role15:29
noonedeadpunkit also somewhat fails on debian git-core isntallation which is super weird15:30
noonedeadpunkrocky is quite consistant on where it fail: https://zuul.opendev.org/t/openstack/build/6a530b60ab1342baae9adac39368d796/log/job-output.txt#792115:31
noonedeadpunkoh my https://opendev.org/openstack/ansible-hardening/src/branch/master/library/get_users15:33
noonedeadpunklol, TIL about that15:34
jrosser_oh i was just going to say i bet thats a python3 problem15:35
noonedeadpunkhow that works for other distros15:36
jrosser_$massive_hack ?15:36
noonedeadpunkyeah....15:36
noonedeadpunkShould we move that to plugins?15:36
noonedeadpunkAs hardening used to be quite "stadalone" thing15:37
noonedeadpunkI'm not even sure we used config_tmeplate there15:37
jrosser_no15:37
jrosser_i dunno really - theres not really any reuse of that module anywhere15:37
jrosser_so moving it to plugins is not totally necessary15:38
noonedeadpunkAnd I can't imagine possible usecase elsewhere15:38
NeilHanlon🤔15:38
jrosser_maybe better to fix it in place first15:38
noonedeadpunkagree15:38
noonedeadpunkdoes even modules need shebang?15:40
noonedeadpunkhow does all stuff in https://opendev.org/openstack/openstack-ansible-plugins/src/branch/master/plugins/modules work lol15:40
noonedeadpunkor it's also $massive_hack....15:41
NeilHanlonansible docs for writing modules use shebang.. but not clear if needed15:41
noonedeadpunkshouldn't they be using ansible_python_interpreter....15:43
noonedeadpunkOh, and for rocky we don't have discovered_python_interpreter, that's why it falls back to shebang I guess15:43
NeilHanlonhttps://drop1.neilhanlon.me/irc/uploads/72ea47b1e577fbfc/image.png 15:43
NeilHanlonfrom: https://docs.ansible.com/ansible/latest/dev_guide/developing_program_flow_modules.html#id1415:44
noonedeadpunkI'd say should be safe to drop shebang then15:45
NeilHanlonagreed15:45
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-hardening master: Remove sebang from get_users  https://review.opendev.org/c/openstack/ansible-hardening/+/86027615:46
noonedeadpunkalso sounds like some ansible behaviour has changed with 2.13 regarding to shebangs15:46
noonedeadpunkand they also check for discovered interpreter...15:47
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins master: Drop shebangs from ansible modules  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/86027715:49
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core version to 2.13.4  https://review.opendev.org/c/openstack/openstack-ansible/+/85750615:50
noonedeadpunklet's see if that helps...15:50
noonedeadpunkthough we should really look how to workaround non-defined discovered_python_interpreter for rocky (as we explicitly provide interpreter with env var which disables discovery)15:51
noonedeadpunkin any case that's all I have for you today15:53
noonedeadpunk#endmeeting16:00
opendevmeetMeeting ended Tue Oct  4 16:00:08 2022 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:00
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-10-04-15.00.html16:00
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-10-04-15.00.txt16:00
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-10-04-15.00.log.html16:00
*** dviroel|lunch is now known as dviroel16:21
psyminIs there an example like this for centos/rocky ? https://docs.openstack.org/openstack-ansible/yoga/user/network-arch/example.html18:25
NeilHanlonpsymin: you can use this as an* example, but I plan to re-do it using systemd-networkd at some point soon. https://git.shrug.pw/linuxadminbooks/AdvancedLinuxAdmin/src/branch/main/ansible/playbooks/files/interfaces.sh20:14
NeilHanlonwherein I use ansible to deploy openstack ansible 🤔20:15
*** dviroel_ is now known as dviroel|afk20:37

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!