Thursday, 2020-06-11

*** jmlowe has joined #openstack-glance00:24
*** jmlowe has quit IRC00:33
openstackgerritkayluu proposed openstack/glance-specs master: Update proposal for duplication image download  https://review.opendev.org/73468300:55
*** Liang__ has joined #openstack-glance01:18
*** Liang__ has quit IRC02:06
*** Liang__ has joined #openstack-glance02:10
*** Liang__ has quit IRC02:15
*** Liang__ has joined #openstack-glance02:21
*** jmlowe has joined #openstack-glance02:41
*** Liang__ has quit IRC02:44
*** rcernin has quit IRC03:08
*** rcernin has joined #openstack-glance03:54
*** rcernin has quit IRC03:55
*** rcernin has joined #openstack-glance03:55
*** evrardjp has quit IRC04:33
*** evrardjp has joined #openstack-glance04:33
*** Liang__ has joined #openstack-glance04:56
*** gyee has quit IRC05:11
*** Liang__ has quit IRC05:38
*** Liang__ has joined #openstack-glance05:39
*** Liang__ has quit IRC05:43
*** Liang__ has joined #openstack-glance05:44
*** ratailor has joined #openstack-glance05:44
*** m75abrams has joined #openstack-glance05:54
*** m75abrams has joined #openstack-glance05:56
*** udesale has joined #openstack-glance06:02
*** udesale has quit IRC06:17
*** udesale has joined #openstack-glance06:18
*** belmoreira has joined #openstack-glance06:38
*** jmlowe has quit IRC06:45
*** jawad_axd has joined #openstack-glance07:21
openstackgerritRajat Dhasmana proposed openstack/glance_store master: Don't allow image creation with encrypted nfs volumes  https://review.opendev.org/73250607:29
*** rcernin has quit IRC08:00
*** rcernin has joined #openstack-glance08:50
*** rcernin has quit IRC09:17
*** Liang__ has quit IRC09:31
*** ratailor has quit IRC09:38
*** ratailor has joined #openstack-glance09:38
*** threestrands has quit IRC11:10
*** rcernin has joined #openstack-glance11:37
*** rcernin has quit IRC11:43
*** ratailor has quit IRC12:02
*** tkajinam has quit IRC12:25
*** vkmc has quit IRC12:32
*** mnaser has quit IRC12:32
*** gmann has quit IRC12:33
*** nicolasbock has quit IRC12:33
*** vkmc has joined #openstack-glance12:33
*** nicolasbock has joined #openstack-glance12:33
*** gmann has joined #openstack-glance12:33
*** mnaser has joined #openstack-glance12:33
*** m75abrams has quit IRC12:35
*** m75abrams has joined #openstack-glance12:40
dansmithabhishekk: did you happen to see my query from yesterday?13:38
*** jmlowe has joined #openstack-glance13:38
abhishekkdansmith, sorry I was on leave yesterday13:47
dansmithabhishekk: no problem, sorry to bug you anyway, but you have "correct answer affinity" :)13:48
abhishekk:D13:48
abhishekkdansmith, yes that config is sufficient13:49
dansmithabhishekk: okay, it doesn't seem to be working in a ci job13:49
abhishekkdansmith, you are using devstack right?13:49
dansmithabhishekk: it's in zuul, so, yeah :)13:50
dansmithdoes this require wsgi_mode too?13:50
abhishekkyes13:50
abhishekkWSGI_MODE=mod_wsgi13:50
abhishekkotherwise it will not trigger taskflow13:50
dansmithah, okay.. and is there some delay between uploading and when it is converted?13:50
abhishekkso with taskflow it first uploads image to staging area13:50
abhishekkthen it converts it there itself13:51
abhishekkand then it will import it to glance backend13:51
abhishekkso you need to specify os_glance_staging_store in glance-api.conf as well13:51
dansmithI have that, copied from my own config, so coo13:52
abhishekkgreat13:52
dansmithI was just wondering if there is a race between the upload saying it's done and something trying to use it,13:52
dansmithbut devstack probably takes longer to get tempest going so probably not a problem13:52
abhishekkyes, there will not be any problem13:53
abhishekkbecause the image will be marked active only when everything is done13:53
dansmithwell, that only matters if something watches and waits13:54
abhishekkyes13:54
abhishekkwill be around next couple of hours, let me know if you have any questions13:55
abhishekkjokke_, rosmaita, smcginnis glance meeting at #openstack-glance13:59
*** rosmaita has quit IRC13:59
*** rosmaita has joined #openstack-glance14:00
dansmiththanks!14:06
*** udesale_ has joined #openstack-glance14:19
*** jawad_axd has quit IRC14:20
*** udesale has quit IRC14:22
*** jdillaman has joined #openstack-glance15:13
*** sean-k-mooney has joined #openstack-glance15:13
dansmithabhishekk: when I turn on mod_wsgi in a devstack job in upstream CI, g-api starts but devstack never finds it15:21
dansmithlooks like it's getting 503 from apache failing to proxy15:22
dansmiththis worked in my local devstack, but is there something else I need to do?15:22
dansmithapache tls-proxy log shows this:15:23
dansmith2020-06-11 14:59:39.532624 [proxy:error] [pid 15204:tid 140023944947456] (111)Connection refused: AH00957: HTTP: attempt to connect to 10.0.1.13:19292 (10.0.1.13) failed15:23
abhishekkdansmith, need to check, not sure at this moment :(15:26
dansmithabhishekk: does mod_wsgi not get tested in the gate? I don't see any jobs that use it15:26
dansmithhow do task-based features get tested?15:26
abhishekkdansmith, they are not getting tested at the moment for glance15:27
dansmithoye :/15:27
dansmithg-api is showing listening on port 19191, but that's for registry right?15:27
abhishekkyes15:27
dansmithshould g-api be listening on 19292 and 19191 or what?15:27
abhishekk929215:27
dansmithbind_port in glance-api.conf seems to be 19191, so maybe it's just misconfiguring that in the mod_wsgi case?15:28
dansmithor does registry run as a standalone python service and api runs inside mod_wsgi, via apache?15:29
abhishekkyes api runs inside mod_wsgi via apache15:29
dansmithokay I see the glance tls proxy conf which listens on 9292, which proxies to 1929215:30
dansmither, 1929215:30
dansmithand the 9191 to 1919115:30
dansmithand I see in g-api log that it listens on 1919115:31
dansmithbut I don't see the wsgi config to actually load the glance api, like I do for nova and cinder15:31
abhishekksounds confusing, because 9191 is used for registry :/15:32
dansmiththat's what I'm saying15:32
dansmiththis totally worked for me locally in devstack15:33
abhishekkyeah, I am using same for development since its introduced15:34
dansmithshould g-api show listening on 19191 and 19292 in the same log file?15:35
dansmithor should there be a g-reg for 19191 and g-api for 19292?15:35
dansmithI don't even see any config that configures apache to run either15:35
abhishekkthats what I am checking now15:35
dansmithokay, glance-api.conf is configured for 19292 and registry.conf is set for 1919115:36
dansmithbut the g-api log shows 19191 only15:36
abhishekkwhen I restart g-api locally it shows only log message for 919115:37
abhishekkJun 11 15:36:27 akekane-victoria glance-api[4463]: DEBUG glance.common.config [-] registry_port                  = 9191 {{(pid=4463) log_opt_values /usr/local/lib/python3.6/dist-packages/oslo_config/cfg.py:2581}}15:37
dansmithokay that's what I see in the log15:38
dansmithand you see apache is listening on 19292?15:38
abhishekkand for 9292 it shows wsgi15:38
abhishekkJun 11 15:38:13 akekane-victoria glance-api[4688]: INFO eventlet.wsgi.server [-] (4734) wsgi starting up on http://0.0.0.0:929215:38
dansmithwhat log is that?15:39
abhishekkjust pasted15:39
dansmithI mean g-api also?15:39
abhishekkyes15:40
dansmithwhat does your /etc/systemd/system/devstack@g-api.service look like?15:40
abhishekklet me checl15:40
abhishekkhttp://paste.openstack.org/show/794649/15:41
dansmithlooks to me like the devstack job is configuring it to run /usr/local/bin/glance-api15:41
dansmithyeah, so isn't that weird? that's not mod_wsgi right?15:42
abhishekkyes15:42
abhishekkhmm, yes15:43
dansmithI'm thinking maybe it's *not* doing mod_wsgi.. it's either uwsgi or ... standalone python http server ?15:43
dansmithand the tls proxy config of the upstream devstack job isn't starting or proxying to that standalone service or something15:43
abhishekkhttps://review.opendev.org/#/c/54548315:45
rosmaitadansmith: yes, the mod_wsgi is a badly named option15:45
dansmithrosmaita: so confirming that "not uwsgi" results in a standalone?15:45
abhishekkso its running as a standalone service?15:45
rosmaitayes, though i haven't looked at that in a while15:46
dansmithand I'm guessing that nobody runs with tls proxy enabled in their local devstack, and so the lack of a job for this means nobody noticed it was broken in that arrangement?15:46
rosmaitaprobably15:47
dansmithbummer15:47
dansmithI still don't understand why glance-api as run by systemd isn't listening on both ports like it seems to when abhishekk runs it locally15:47
dansmithis there something in glance-api.conf that says "start an api and a registry" ?15:49
abhishekknope15:49
dansmithI figured since glance seems to take the config dir, it would start up whatever was configured15:49
dansmithabhishekk: this is the job I'm looking at: https://zuul.opendev.org/t/openstack/build/8afb850f7844450389823d7f84b90c61/logs15:49
abhishekklooking15:50
dansmithhere's the g-api log, you can see it doesn't even parse 19292 in configs: https://zuul.opendev.org/t/openstack/build/8afb850f7844450389823d7f84b90c61/log/controller/logs/screen-g-api.txt15:50
dansmitheven though 19292 is in the glance-api.conf and it claims to be reading glance-api.conf15:50
abhishekklet me see, I guess I can explain this15:51
abhishekkgive me 5 minutes15:51
dansmiththanks15:51
abhishekkso its a mess of how config options are read in glance15:53
abhishekkif you see api and registry conf both have bind_port option defined under default section15:53
abhishekkand we parse entire /etc/glance directory at service start which overrides the config option value to 19191 from registry for g-api15:54
dansmithyup15:55
dansmith...okay15:55
abhishekkand this is the only reason why its listening on 1919115:56
dansmithokay are you saying I could just point apache at 19191 and it would work for api? the ports don't need to be separate?15:57
*** belmoreira has quit IRC15:57
abhishekkyou could try that as registry is not used any more15:59
dansmithokay I'm confused15:59
abhishekkwait15:59
dansmithI could also just set the registry port to the same value in devstack localrc15:59
abhishekkthe public_endpoint in glance is showing https://10.0.1.13:929215:59
abhishekknot sure that will help16:01
abhishekkis it possible to ignore registry at all?16:01
dansmithI dunno what that means.. we're not ever really starting g-reg that I know of.. sounds like the glance devstack module needs some serious work16:02
abhishekk+116:02
*** gyee has joined #openstack-glance16:03
dansmithlemme just try setting the bind_port in g-reg.conf to be the same thing and see if that at least unblocks me16:03
abhishekkack16:03
dansmithbut sounds like the g-reg part of the devstack module needs to be gutted so we're not even generating that config16:03
abhishekkI have submitted patch for removal of registry but its stuck in controversy16:04
dansmithremoval of it in glance?16:04
abhishekkfrom devstack16:04
dansmithoh, okay16:05
abhishekkhttps://review.opendev.org/#/c/708062/16:05
abhishekkBecause we cannot remove it from glance unless its removed from devstack, otherwise everyone will be (no comments)16:06
dansmithright16:06
abhishekkdansmith, I will be back in short after dinner16:06
dansmithack thanks16:07
*** udesale_ has quit IRC17:19
abhishekkdansmith, any progress?17:23
dansmithjob just finished, will check in a sec17:23
abhishekkack17:23
dansmithabhishekk: my job didn't work, but it finished devstack and has a bunch of glance accesses in the log17:28
dansmithso that's progress17:28
abhishekkdansmith, I am looking at glance-api.conf17:29
dansmithit's still not converting the image on upload though17:29
abhishekkwants to point out some issues there17:29
abhishekkenabled_backends = cheap:file, robust:rbd17:29
dansmiththat works for me locally, btw17:30
abhishekkthere should not be space between two options17:30
dansmithokay17:30
abhishekkOhh, earlier it not used to work17:30
dansmithseemed to work fine for me17:30
abhishekkas DictConfigOpt does not support it17:30
abhishekknot tested recently though17:31
abhishekknow look at last section where rbd config is defined17:31
abhishekk[robust] config section17:31
abhishekknope its good17:31
abhishekksorry17:31
dansmithso, devstack probably never does a show on the image later to see if the conversion worked,17:32
dansmithbut later nova complained that the image is not raw17:32
dansmithnova is configured to require raw images because of rbd17:32
abhishekkwhere can I find devstack logs?17:32
dansmithhttps://zuul.opendev.org/t/openstack/build/22908a60c2de4fe6ba2bcdbef2191d75/logs17:33
abhishekkfound it17:33
abhishekkis it because devstack uses openstack image create command?17:34
abhishekkI guess that's the reason17:34
dansmithoh jeez17:35
dansmithinstead of what?17:35
abhishekkglance image-create17:35
sean-k-mooneythe clance client17:35
dansmithI did this manually on my local test, didn't use the conversion but was trying to make this automatic17:35
dansmithhaha17:35
dansmithyet another thing osc doesn't do?17:35
abhishekkfor conversion purpose we need to use glance image-create-via-import command17:35
abhishekkosc is not uptodate with glance17:36
sean-k-mooneyabhishekk: well nova is useing the api17:36
sean-k-mooneyso i dont think that is related17:37
abhishekknova is not using import workflow17:37
abhishekkits using traditional image upload api17:37
sean-k-mooneyfor snapshots17:37
dansmithright, this is the original image upload in devstack17:38
abhishekkyep17:38
*** rosmaita has left #openstack-glance17:38
dansmithunrelated to nova, so I'm sure abhishekk is right17:38
sean-k-mooneythe orginal image uplad is goingt too the file backend17:38
dansmithabhishekk: so can we change devstack to use glance client for the image upload all the time17:38
dansmithsean-k-mooney: yes it is, it has to17:38
abhishekkyes, lots of work17:38
sean-k-mooneyso we dont care about the format right17:38
dansmithwe do17:38
dansmithit needs to be raw17:39
dansmithso that when we copy it to rbd it's raw, which is necessary17:39
sean-k-mooneywe are expecting the image convertion to happen as part of the copy-form-image import later17:39
dansmithno17:39
sean-k-mooney*i was expecting ^17:39
dansmithno, an image can't be in two different formats in two different stores, AFAIK17:39
dansmiththose would have to be separate images I think17:39
sean-k-mooneyoh ok thats much more limiting17:40
dansmithI dunno about that.. the multistore thing is just saying "I have copies of this file in [$places]"17:40
abhishekkdansmith, yes those should be separate images17:40
dansmithright17:40
sean-k-mooneyi guess that make sense17:40
sean-k-mooneythe format is a property of the image not where its stored17:41
*** rosmaita has joined #openstack-glance17:41
sean-k-mooneyso ya i guess the conversion would have to happen on inital upload17:41
abhishekkyep17:41
abhishekkdansmith, I can spend some time to check whether glanceclient can be used instead of osc in devstack17:42
dansmithabhishekk: okay thanks, that'd be much appreciated17:42
sean-k-mooneyabhishekk: it could be used but long term we should actully update osc17:42
dansmithabhishekk: I guess the other option is to make the ceph plugin upload a second raw copy of it and configure tempest to do that17:43
abhishekkdansmith, +117:43
sean-k-mooneyyou dont even need to have the ceph plugin do that17:43
sean-k-mooneyyou can specify a different image url to use17:43
abhishekkI also need to work on changing ceph plugin so that it can be used in multistore configuration17:44
sean-k-mooneyor addtional image depending on what you want17:44
dansmithsean-k-mooney:  there is no cirros raw image to fetch that I know of17:44
abhishekkwhat is the priority, I am having long weekend this time starting from tomorrow17:44
sean-k-mooneyhttps://github.com/openstack/devstack/blob/master/stackrc#L655-L71717:44
abhishekkif its urgent, I will put some time tomorow17:44
sean-k-mooneydansmith: ah ok17:44
dansmithabhishekk: me too of course, no not that urgent :)17:45
dansmithabhishekk: working in the next week or so would be great17:45
abhishekkdansmith, cool, will keep you posted17:45
dansmithabhishekk: thanks a lot for your continued help and patience :)17:45
abhishekkdansmith, no problem :D17:46
sean-k-mooneydansmith: isnt http://download.cirros-cloud.net/0.5.1/cirros-0.5.1-x86_64-disk.img a raw image17:46
dansmithno17:46
dansmithit's a qcow17:46
dansmiththat's what we use currently17:46
sean-k-mooneyoh ok .img is ment to be used for raw image but ok we could have devstack convert it17:47
sean-k-mooneyor just use glance client i guess17:47
abhishekkack17:47
abhishekkdansmith, just one question out of curiosity, where did you changed/override the port setting?17:49
abhishekksaw it17:49
dansmithabhishekk: https://review.opendev.org/#/c/734184/11/.zuul.yaml17:50
abhishekkI was still looking at PS 10 :D17:50
dansmithsean-k-mooney: right, could convert it (which is what I did in my local test), I was just hoping to have glance magically do it for me so we don't end up with more changes required17:50
sean-k-mooneydansmith: we could convert it with a preplay book but this is where the current image uplad is happneing https://github.com/openstack/devstack/blob/e0f051ced7c7cd760b6d502e8d95027f5029d6e8/functions#L39617:51
dansmithyeah17:52
dansmithsean-k-mooney: is that something I can control with just our zuul config?17:52
sean-k-mooneya pre playbook yes17:52
sean-k-mooneyyou have to do a trick with creating a local.sh17:53
sean-k-mooneybut i can show you an example17:53
sean-k-mooneyso here is an example https://review.opendev.org/#/c/681807/3/playbooks/nfv/pinning.yaml17:54
sean-k-mooneyit create a local.sh that create flavor for numa testing17:55
sean-k-mooneythat runs right at the end of devstack17:55
sean-k-mooneyand this is how you use it in the job https://review.opendev.org/#/c/681807/3/.zuul.yaml@41317:55
sean-k-mooneyso the pre playbook runs before devstack starts and creates the local.sh which devstack then run right before if finishes and tempest starts17:56
sean-k-mooneyyou can then just change the image ref to use in the tempest config https://review.opendev.org/#/c/681807/3/.zuul.yaml@45917:57
sean-k-mooneylike i was changing the flavor17:57
dansmithack yeah, okay.. I think probably better in the long run to make the ceph plugin just do this, but good to know that I have that as an option17:57
sean-k-mooneythe local.sh is sourced by devstack so all variables and function are avaiable to it17:58
dansmithif for some reason that becomes contentious17:58
sean-k-mooneyya or just add a flag to devstack to have it convet to a given format before upload17:58
sean-k-mooneydevstack is already using qemu-img info17:58
sean-k-mooneyso calling convert is not really a big change17:59
dansmithyeah17:59
abhishekkgood to know17:59
sean-k-mooneythis is how i hack together jobs quirckly when i neeed to tweak thing that are a pain in the ass to set up otherwise.  long term there are better options but is nice to use locally too18:00
sean-k-mooneye.g. the local.sh18:00
dansmithyeah18:01
abhishekksigning out for the day18:09
dansmitho/18:18
abhishekko/18:23
*** sean-k-mooney has quit IRC18:33
*** m75abrams has quit IRC20:20
*** gyee has quit IRC20:36
*** rcernin has joined #openstack-glance21:48
*** rcernin has quit IRC21:48
*** rcernin has joined #openstack-glance21:49
*** threestrands has joined #openstack-glance22:20
*** rosmaita has left #openstack-glance22:40
*** tkajinam has joined #openstack-glance22:46
*** rcernin has quit IRC23:48
*** rcernin has joined #openstack-glance23:51

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!