Monday, 2014-12-08

*** igordcard has joined #openstack-ironic00:04
*** Masahiro has joined #openstack-ironic00:07
*** alexpilotti has quit IRC00:08
*** Masahiro has quit IRC00:11
*** smoriya has joined #openstack-ironic00:19
*** Masahiro has joined #openstack-ironic00:44
*** ryanpetrello has joined #openstack-ironic00:44
*** ryanpetrello has quit IRC00:51
*** ryanpetrello has joined #openstack-ironic01:00
*** igordcard has quit IRC01:15
*** naohirot has joined #openstack-ironic01:19
naohirotgood morning ironic01:20
*** yuanying has joined #openstack-ironic01:30
*** yuanying_ has quit IRC01:33
*** ryanpetrello has quit IRC01:37
*** chenglch has joined #openstack-ironic01:42
*** Haomeng has joined #openstack-ironic01:54
*** Masahiro has quit IRC02:01
*** Masahiro has joined #openstack-ironic02:04
*** ryanpetrello has joined #openstack-ironic02:10
*** zyluo has joined #openstack-ironic02:38
*** ramineni has joined #openstack-ironic02:41
openstackgerritTan Lin proposed openstack/ironic: Add AMT-PXE-Driver to deploy cloud on PC  https://review.openstack.org/13518402:42
*** ryanpetrello has quit IRC02:44
*** ryanpetrello has joined #openstack-ironic02:51
ramineniJoshNang: hi, there?02:52
*** achanda has joined #openstack-ironic03:00
*** achanda has quit IRC03:02
*** Haomeng has quit IRC03:06
*** Masahiro has quit IRC03:07
*** chenglch has quit IRC03:16
*** Haomeng has joined #openstack-ironic03:17
*** zyluo has quit IRC03:19
*** zyluo has joined #openstack-ironic03:21
*** ryanpetrello has quit IRC03:23
*** Masahiro has joined #openstack-ironic03:30
*** david-lyle_afk has quit IRC03:31
*** Masahiro has quit IRC03:35
*** Masahiro has joined #openstack-ironic03:40
*** david-lyle_afk has joined #openstack-ironic03:43
*** Masahiro has quit IRC03:48
*** david-lyle_afk has quit IRC03:50
*** Masahiro has joined #openstack-ironic03:52
*** bradjones has quit IRC03:53
*** zyluo has quit IRC03:53
*** zyluo has joined #openstack-ironic03:54
*** david-lyle_afk has joined #openstack-ironic04:02
*** david-lyle_afk has quit IRC04:02
*** Masahiro has quit IRC04:02
*** lazy_prince has quit IRC04:08
*** lazy_prince has joined #openstack-ironic04:09
*** Masahiro has joined #openstack-ironic04:09
*** jerryz has joined #openstack-ironic04:13
*** yuanying_ has joined #openstack-ironic04:15
*** jmanko has joined #openstack-ironic04:17
*** yuanying has quit IRC04:18
*** jmankov has quit IRC04:20
*** Marga_ has joined #openstack-ironic04:35
*** david-lyle_afk has joined #openstack-ironic05:01
*** rushiagr_away is now known as rushiagr05:07
*** pensu has joined #openstack-ironic05:21
*** Marga_ has quit IRC05:33
*** Marga_ has joined #openstack-ironic05:35
*** Masahiro has quit IRC05:38
*** Masahiro has joined #openstack-ironic05:38
openstackgerritTan Lin proposed openstack/ironic-specs: Bare Metal Trust Using Intel TXT  https://review.openstack.org/13390205:48
*** enterprisedc has quit IRC05:54
*** victor_lowther has quit IRC05:59
*** k4n0 has joined #openstack-ironic06:01
*** cuihaozhi has joined #openstack-ironic06:02
*** victor_lowther has joined #openstack-ironic06:02
cuihaozhihi, when i boot instance from nova, if i must create a subnet with neutron?06:03
cuihaozhibecause  nova-compute.log :  "Network requires port_security_enabled and subnet associated in order to apply security groups."06:04
Haomengcuihaozhi: hi06:12
cuihaozhiHaomeng,hi06:12
Haomengcuihaozhi: yes, nova will select default subnet which is created by neutron06:13
Haomengcuihaozhi: neutron will select one of them06:14
cuihaozhiHaomeng: thank you, i try it :)06:14
Haomengcuihaozhi: but if we have multi networks that are L2, we have to input one net-id as the argument for nova boot06:14
Haomengcuihaozhi: welcome06:14
cuihaozhiHaomeng: ok, i just create 1 net and 1 subnet. test enviroment for ironic :DD06:15
Haomengcuihaozhi: ok06:16
Haomengcuihaozhi: you can take the devstack env as reference06:16
*** victor_lowther has quit IRC06:16
Haomengcuihaozhi: that  is good example06:16
Haomengcuihaozhi: but it use vm as bm06:16
Haomengcuihaozhi: if you are trying to boot bm with physical network, maybe our ironic support neutron flat net only06:17
*** victor_lowther has joined #openstack-ironic06:17
cuihaozhiHaomeng: ye, i use flat net follow the install-guide06:17
Haomengcuihaozhi: ok06:18
Haomengcuihaozhi: good luck06:18
*** Marga_ has quit IRC06:20
cuihaozhiHaomeng: if pxe server run succece,which process i can see? dnsmasq?06:23
Haomengcuihaozhi: yes, and check the pxe conf06:24
Haomengcuihaozhi: but it is better to monitor the server's console output06:24
Haomengcuihaozhi: or redirect the os serial dev to pyhsical serial, and we can run ipmitool to monitor the os console output via pyhsical serial over lan06:25
cuihaozhiHaomeng: thank u very much. i will check them and run again.06:26
Haomengcuihaozhi: ok06:27
*** Masahiro has quit IRC06:29
*** mrda is now known as mrda-away06:31
*** Masahiro has joined #openstack-ironic06:31
*** tylerdurden has joined #openstack-ironic06:32
*** shakamunyi has quit IRC06:34
*** chenglch has joined #openstack-ironic06:46
cuihaozhiHaomeng: sorry another question, dnsmasq interface(like:tapb77dd3e2-9e) should be in bridge br-int? is that right?07:16
cuihaozhiHaomeng:i think need another phys-eth interface in same brige, right?07:17
Haomengcuihaozhi: did you run devstack to install the env?07:17
Haomengcuihaozhi: do you want to real pyhsical server?07:17
cuihaozhiHaomeng: em, i haven't use devstack before07:18
cuihaozhiHaomeng:i can control the physical server'power with ironic node-set-power-state now07:18
Haomengcuihaozhi: you want to use devstack env to control the physical server?07:19
Haomengcuihaozhi: devsstack will use vm as bm to run ironic provision07:19
Haomengcuihaozhi: if you run with real pyhsical server, try to follow this doc - http://docs.openstack.org/developer/ironic/deploy/install-guide.html07:20
Haomengcuihaozhi: to setup neutron flat net to connect to physical server07:20
cuihaozhiHaomeng: em, yes i follow this doc.07:20
Haomengcuihaozhi: so if can not control server power by node-set-power-state, is your current issue, right?07:21
Haomengcuihaozhi: can you ping from ironic conductor to ipmi ip?07:21
Haomengcuihaozhi: did you run with ipmi_pxe driver?07:21
cuihaozhiHaomeng:ipmi_pxe drver yes07:21
Haomengcuihaozhi: ok, ping the ipmi ip from conductor side to see if it works07:22
cuihaozhiHaomeng: current issue is when physerver start,it can't find pxe server good..07:22
Haomengcuihaozhi: make sure your ipmi port in switch is connected with same L2 for our ironic conductor physical network port07:22
Haomengcuihaozhi: dont worry, check step by step07:23
Haomengcuihaozhi: ping ipmi node first to make sure ipmi works07:23
cuihaozhiHaomeng: thank u,i will check bridge again.07:23
Haomengcuihaozhi: then reboot server and tcpdump the dhcp ra packages from conductor physical network ports07:24
cuihaozhiHaomeng:ok i check it :))07:24
Haomengcuihaozhi: to see if the physical server's dhcp request can be sent to conductor's physical nic07:24
Haomengcuihaozhi: then to check dnsmasq binding interfaces07:25
Haomengcuihaozhi: to make sure the interface is connected to the physical nic which geting the dhcp request from bm side07:25
Haomengcuihaozhi: ok07:25
cuihaozhiHaomeng: my all servers in same host, is this problem?07:25
cuihaozhiHaomeng:all openstack service07:25
Haomengcuihaozhi: no07:25
Haomengcuihaozhi: that is devstack default env I think07:26
cuihaozhiHaomeng: ok.07:26
Haomengcuihaozhi: but make sure nova conf is configured to use our ironic driver07:26
Haomengcuihaozhi: for such all-in-one env, have to change nova.conf, and our ironic will be this compute node with ironic hypervisor type07:27
cuihaozhiHaomeng: em, i find ovs-brige is different with install-guide.07:28
cuihaozhiHaomeng: port like "int-br-eth2" not auto added in bridge br-int such as.07:28
cuihaozhiHaomeng: then i added it myself and try again.07:29
Haomengcuihaozhi: in guide there is  - ovs-vsctl add-port br-eth2 eth207:30
Haomengdid you "restarting the Neutron Open vSwitch agent,"07:30
Haomengcuihaozhi: yes, based on guide, it should be auto created, but I did not verify such document steps, if it is wrong, we can fix it07:31
cuihaozhiHaomeng: ye, but my dnsmasq'interface("tapxxxxx") in br-int bridge, is that right?07:31
Haomengthat should be devstack env for vms07:31
HaomengI think07:31
*** dlpartain has joined #openstack-ironic07:40
*** subscope has joined #openstack-ironic07:40
*** rameshg87 has joined #openstack-ironic08:05
openstackgerritRamakrishnan G proposed openstack/ironic-specs: Enable iscsi_ilo driver to share boot images  https://review.openstack.org/13729108:09
*** Masahiro has quit IRC08:11
*** jistr has joined #openstack-ironic08:16
*** Masahiro has joined #openstack-ironic08:16
cuihaozhiHaomeng: hi, i deleted error instance from nova,but ironic still display "the node reservation by $compute_node", what can i do for reuse the node?08:26
Haomengcuihaozhi: can you check from ironic side - ironic node-list08:26
Haomengcuihaozhi: to see if the instance_uuid is removed already08:27
cuihaozhiHaomeng: instace_uuid is None, but node-show display reservation is $compute_hostname08:27
Haomengcuihaozhi: that should be wrong status08:27
Haomengcuihaozhi: the workaround is try to restart the conductor service and delete it by ironc node-delete08:28
cuihaozhiHaomeng: api said "is locked by host localhost.localdomain", shold i modify database direct?08:30
Haomengcuihaozhi: :)08:30
Haomengcuihaozhi: go ahead:)08:31
cuihaozhiHaomeng: :)08:32
Haomengcuihaozhi: :)08:33
Haomengcuihaozhi: suggest to delete and recreate another node to avoid more data issue08:33
cuihaozhiHaomeng: ye.thanks for suggest :)08:34
Haomeng:)08:35
*** athomas has joined #openstack-ironic08:38
*** jcoufal has joined #openstack-ironic08:54
*** ifarkas has joined #openstack-ironic08:59
*** MattMan has joined #openstack-ironic09:00
*** jiangfei has joined #openstack-ironic09:01
rameshg87Haomeng, hi09:01
*** Masahiro has quit IRC09:05
*** vdrok_ has joined #openstack-ironic09:07
*** Masahiro has joined #openstack-ironic09:08
*** vdrok has quit IRC09:08
*** vdrok_ is now known as vdrok09:08
vdrokmorning ironic09:08
*** naohirot has quit IRC09:10
openstackgerritRamakrishnan G proposed openstack/ironic-specs: New driver interface for RAID configuration  https://review.openstack.org/13589909:13
rameshg87morning vdrok09:14
vdrokmorning rameshg8709:14
*** erwan_taf has joined #openstack-ironic09:14
*** humble00 has joined #openstack-ironic09:15
*** sambetts has joined #openstack-ironic09:16
*** derekh has joined #openstack-ironic09:18
*** humble00 has quit IRC09:25
*** wanghua has joined #openstack-ironic09:26
*** ndipanov has joined #openstack-ironic09:27
cuihaozhiHaomeng: follow the install-guide ,if i need add ipaddr to br-eth2?09:31
*** dtantsur|afk is now known as dtantsur09:34
dtantsurMorning!09:34
sambettsMorning dtantsur!09:37
dtantsursambetts, o/09:37
sambettsdtantsur: I have a question about Vendor Passthru, whats the scope of functionality thats meant to be provided by them?09:38
dtantsursambetts, ideally, playing with vendor-specific functions that can't find their place in existing interfaces for now09:39
dtantsurwe're kind of misusing it though...09:39
sambettswith the Cisco UCS driver, they want to use the vendor passthru to provide API access to faults and other UCS specfic information, however in comments on the Juno spec, there was a lot of adversity to making syncronous calls to UCSM to get this information09:42
sambettsso I'm wondering what infrastructure is in place to allow a driver to provide that functionality asyncronously09:44
sambettsor if that functionality even fits in the scope of Iroinc09:44
sambettss/Iroinc/Ironic09:45
*** romcheg has joined #openstack-ironic09:53
*** igordcard has joined #openstack-ironic09:54
*** Masahiro has quit IRC09:56
cuihaozhihi, when i use ironic deploy phys-server, if i need to disable neutron-dhcp-agent?09:58
*** Masahiro has joined #openstack-ironic10:00
*** kurtrao has quit IRC10:00
*** kurtrao has joined #openstack-ironic10:00
*** igordcard has quit IRC10:01
*** Masahiro has quit IRC10:09
sambettsdtantsur: any ideas? or is there anywhere its documented?10:15
dtantsursambetts, well yeah, folks don't really like Ironic to make synchronous calls to the BMC. Why do you want to expose this kind of information? Is it used for deploy etc?10:16
sambettsmonitoring and exposing that information to the other services I believe10:18
dtantsursambetts, I'm not pretty sure it's within Ironic scope...10:20
*** igordcard has joined #openstack-ironic10:22
sambettsI think there is a misconception that Ironic == Baremetal for OpenStack instead of just provisioning10:22
sambettsdtantsur: where do you think that baremetal monitoring etc fits within the Baremetal program?10:24
dtantsursambetts, I'm not sure, that's part of a long discussion what Ironic is and is not. Probably devananda is the best person to ask. Ceilometer is responsible for monitoring in OpenStack, generally speaking10:25
*** bradjones has joined #openstack-ironic10:25
sambettsdtantsur, does there not need to be a layer between ceilometer and the baremetel though? I've not seen much of Ceilometer, but I would have thought having drivers for baremetal would cross project boundries10:26
*** wanghua has quit IRC10:28
dtantsursambetts, yeah, that's why I'm not 100% sure. This not the first time we're faced with this problem. Maybe worth raising it on the meeting?10:28
*** wanghua has joined #openstack-ironic10:29
openstackgerritDmitry Tantsur proposed openstack/ironic-specs: Introduce driver capabilities  https://review.openstack.org/12892710:29
sambettsdtantsur, Yeah, I'll have to set my alarm for this one though, its quite early for our timezones isn't it?10:32
dtantsurpretty much :( it's like 6am for me10:33
sambetts5am for me :(10:33
cuihaozhihello, if i need start neutron-dhcp-agent with boot instance from nova?10:36
*** pelix has joined #openstack-ironic10:36
dtantsurcuihaozhi, hi, IIRC yes10:40
*** sdake has quit IRC10:44
*** andreykurilin_ has joined #openstack-ironic10:44
openstackgerritSatoru Moriya proposed openstack/ironic: Use Literal Blocks to write code sample in docstring  https://review.openstack.org/13996510:44
rameshg87dtantsur, can you please have a look at https://review.openstack.org/#/c/139602/10:46
smoriyaHello, Ironic10:46
rameshg87dtantsur, needs an approval :)10:46
smoriyaI've just post a bug fix patch10:47
smoriyaThis is my first patch to Ironic and so if I missed something please let me know :)10:47
rameshg87smoriya, hi, welcome .. :)10:49
smoriyarameshg87, hi10:49
cuihaozhidtantsur: hi, how can i make  "wait call back" instance failed?10:50
*** jistr has quit IRC10:51
rameshg87cuihaozhi, you can just issue a delete request to the instance in "wait call back"10:52
cuihaozhirameshg87: thank u, but if i deleted the node, i should init the node infomations again, is there have another way?10:54
rameshg87cuihaozhi, i mean you can set the provisioning state to deleted10:54
rameshg87cuihaozhi, are you using nova with ironic ?10:54
cuihaozhirameshg87: yes i use nova.10:54
cuihaozhirameshg87:ok, nova delete :)10:55
rameshg87cuihaozhi, yes10:55
*** ramineni has quit IRC11:00
*** rameshg87 has quit IRC11:03
dtantsurram<TAB>11:03
dtantsuroh c'mon folks, why can't you stay in channel? >_<11:03
pensuHi all, I am running Ironic devstack setup and I need to change DHCP config, but I don't see any dhcp.conf file anywhere.....11:04
pensuthe scenario is I don't want pxelinux.0 bootloader, I already have a bootloader, I directly want to transfer kernel and initrd images...11:05
sambettsdtantsur: Do you use ZNC?11:06
*** jistr has joined #openstack-ironic11:09
*** Masahiro has joined #openstack-ironic11:10
pensubut I can't figure out where does I change DHCP config....11:10
*** smoriya has quit IRC11:12
chenglchpensu: dnsmasq11:14
*** Masahiro has quit IRC11:14
chenglchHi all , I found ironic can set dhcp_provider=none, then how to use the external dhcp server?11:20
pensuchenglch: dhsmasq doesn't use any config file either, the space is just empty "--config-file= " , that's it.....and the files it does use, don't seem to have any config options...11:21
chenglchpensu: when you use nova boot, ironic will add data to  --dhcp-optsfile11:24
dtantsursambetts, I do11:26
pensuchenglch: okay, so there is no way I can go past bootloader? I mean it would be generated on fly, how exactly I stop it from passing pxelinux.0?11:29
cuihaozhiHi all, when i boot instance, the phys-node start with pxe report "ARP timeout";and tcpdump tapxxxx on ironic-conductor display not replay for dhcp request? where can i check it?11:30
openstackgerritMerged openstack/ironic: Fix for broken deploy of iscsi_ilo driver  https://review.openstack.org/13960211:31
chenglchpensu: ironic.conf has tftp_root=' ', pxe_bootfile_name=' ' configuration.11:34
pensuchenglch: yeah, that looks something nice.....will check it out....thanks...:)11:41
chenglchpensu: :)11:42
*** lazy_prince is now known as killer_prince12:09
*** luisjariz has joined #openstack-ironic12:09
*** andreykurilin_ has quit IRC12:14
*** jistr has quit IRC12:27
*** jistr has joined #openstack-ironic12:28
*** luisjariz has quit IRC12:32
*** sambetts has quit IRC12:34
openstackgerritVladyslav Drok proposed openstack/ironic: Fix image_info passed to IPA for image download  https://review.openstack.org/13998812:41
*** pensu has quit IRC12:42
*** sambetts has joined #openstack-ironic12:42
*** Masahiro has joined #openstack-ironic12:44
*** Masahiro has quit IRC12:49
*** rameshg87 has joined #openstack-ironic13:01
*** dprince has joined #openstack-ironic13:04
*** athomas has quit IRC13:05
*** alexpilotti has joined #openstack-ironic13:08
*** athomas has joined #openstack-ironic13:14
*** Haomeng has quit IRC13:21
*** Haomeng has joined #openstack-ironic13:23
*** naohirot has joined #openstack-ironic13:38
*** chenglch has quit IRC13:50
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Store good MAC's and interfaces in node_info after processing  https://review.openstack.org/14000513:59
*** trown|call has joined #openstack-ironic14:03
*** trown has quit IRC14:03
*** trown|call has quit IRC14:04
*** trown has joined #openstack-ironic14:05
*** trown has quit IRC14:05
*** trown has joined #openstack-ironic14:05
*** krtaylor has quit IRC14:09
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Separate validating NIC data into a new plugin  https://review.openstack.org/14001014:13
openstackgerritVladyslav Drok proposed openstack/ironic: Fix image_info passed to IPA for image download  https://review.openstack.org/13998814:13
dtantsurifarkas, could you review a couple of discoverd patches ^^^ please14:14
*** mikedillion has joined #openstack-ironic14:17
ifarkasdtantsur, sure thing ;-)14:21
*** ryanpetrello has joined #openstack-ironic14:22
*** mjturek has joined #openstack-ironic14:23
*** rloo has joined #openstack-ironic14:26
*** krtaylor has joined #openstack-ironic14:30
*** Masahiro has joined #openstack-ironic14:33
*** Masahiro has quit IRC14:38
*** jerryz has quit IRC14:40
*** dlpartain has quit IRC14:44
naohirotjroll: good morning14:50
naohirotNobodyCam: good morning14:51
naohirotI just would like to let you know that I'm not able to attend Tuesday's IRC meeting, so I updated the white board iRMC status.14:52
naohirotplease find it14:53
naohirotsee you, good night ironic14:53
*** naohirot has quit IRC14:54
NobodyCammorning Ironic14:56
NobodyCammorning naohirot14:57
*** rushiagr is now known as rushiagr_away15:06
openstackgerritOpenStack Proposal Bot proposed openstack/ironic: Updated from global requirements  https://review.openstack.org/13976215:07
*** rameshg87 has quit IRC15:08
*** rameshg87 has joined #openstack-ironic15:09
dtantsurmorning, NobodyCam15:10
NobodyCammorning dtantsur15:10
*** killer_prince is now known as lazy_prince15:13
rloohello Ironickers and Pixie Boots15:19
dtantsurrloo, hi :)15:20
sambettshello, rloo15:20
rloohey dtantsur, if you have a minute. I have a question about https://review.openstack.org/#/c/139602/1/ironic/common/images.py. (maybe I need more caffeine)15:21
dtantsursure15:21
rloodtantsur: why isn't the solution something like fetch(context, kernel_uuid, kernel_path, force_raw=CONF.force_raw_images)?15:21
rlooafternoon sambetts!15:21
*** igordcard has quit IRC15:22
dtantsurlemme remember...15:23
NobodyCammorning sambetts and rloo15:23
dtantsurrloo, I'm not sure there's no point in talking about 'raw' kernel and ramdisk images, is it?15:23
rloodtantsur: then why does fetch() have that parameter?15:23
dtantsurrloo, for instance images?15:24
* dtantsur is not sure15:24
sambettsMorning NobodyCam15:25
dtantsurrloo, looks like image_cache does use force_raw. so IIRC the idea was that there's no point in raw images for kernel and ramdisk15:25
rloodtantsur: hmm. I looked at the patch that broke it but I didn't want to read the rationale behind that patch. There is something 'odd'.15:25
rloodtantsur: https://review.openstack.org/#/c/130880/ was the patch15:26
NobodyCam:)15:27
dtantsurrloo, I think it says that raw-vs-nonraw is not something that can be declared in the configuration; it should be detected by the driver15:27
*** dprince_ has joined #openstack-ironic15:36
*** dprince has quit IRC15:36
openstackgerritZhiQiang Fan proposed openstack/ironic: rename oslo.concurrency to oslo_concurrency  https://review.openstack.org/13978215:38
openstackgerritMerged stackforge/ironic-discoverd: Store good MAC's and interfaces in node_info after processing  https://review.openstack.org/14000515:39
*** k4n0 has quit IRC15:40
rloodtantsur: ok, that makes sense. thx.15:40
*** mikedillion has quit IRC15:40
*** zz_jgrimm is now known as jgrimm15:45
*** ndipanov has quit IRC15:50
dtantsurifarkas, thank you for reviewing, please also have a look at https://review.openstack.org/#/c/140010 once you have some time15:53
openstackgerritVictor Lowther proposed openstack/ironic-specs: New Ironic provisioner state machine.  https://review.openstack.org/13382815:54
jrollmorning everybody :)15:54
rloohi dtantsur. wrt the driver-capabilities spec, I see you moved it to backlog, but didn't update it to reflect some questions I had. Should I copy/paste the same questions or not bother. It is possible I will be consistent and ask the same questions later :-)15:54
*** kbyrne has quit IRC15:55
rloomorning jroll15:55
NobodyCammorning jroll15:55
*** rushiagr_away is now known as rushiagr15:55
dtantsurrloo, oh could you please at least leave a comment, mentioning that you had some questions? I'm afraid I don't have time for this spec though...15:55
*** ndipanov has joined #openstack-ironic15:56
rloodtantsur: no worries.  umm, do you want me to just update the backlog one then? cuz I think we want to land it still.15:57
NobodyCammorning victor_lowther15:57
NobodyCam:-p15:57
dtantsurrloo, oh if you could update it, it would be awesome :)15:58
rloodtantsur: will do.15:58
dtantsurthanks15:58
*** kbyrne has joined #openstack-ironic16:00
ifarkasdtantsur, yeah, I will do that too16:01
victor_lowthermorning16:02
dtantsurvictor_lowther, o/16:06
*** david-lyle_afk is now known as david-lyle16:06
openstackgerritRuby Loo proposed openstack/ironic-specs: Introduce driver capabilities  https://review.openstack.org/12892716:10
*** rushiagr is now known as rushiagr_away16:12
rameshg87ifarkas, hi16:16
*** sdake has joined #openstack-ironic16:17
sdakemorning16:17
devanandao/16:18
openstackgerritOpenStack Proposal Bot proposed openstack/ironic: Updated from global requirements  https://review.openstack.org/13976216:18
NobodyCammorning rameshg87 sdake and devananda16:18
devanandadtantsur, sambetts: hi! saw your ping. what's up?16:18
rameshg87NobodyCam, morning (though it's night here) :)16:18
NobodyCamhehehehe :)16:18
dtantsurdevananda, morning. we were discussing with sambetts to what extend passthru should be used to provide vendor-specific information (e.g. health) from a node16:19
dtantsurmorning, sdake, rameshg8716:19
sambettsdevananda, dtantsur: you beat me to it :-P16:19
ifarkasrameshg87, hi16:20
rameshg87dtantsur, morning :)16:20
rameshg87ifarkas, got a chance to look at https://review.openstack.org/#/c/135899/16:20
rameshg87ifarkas, ?16:21
devanandasambetts: there is already a ceilometer<->ironic integration16:21
*** erwan_taf has quit IRC16:21
*** Marga_ has joined #openstack-ironic16:21
*** Marga_ has quit IRC16:21
sambettsdevananda, dtantsur: I've been asked to look over the Cisco UCSM plugin work, and I was going through your comments on the specs posted for the Juno cycle, and there was a lot of discussion around the use of syncronous vendor calls to get things like the nodes firmware version etc.16:21
rameshg87ifarkas, i think it's time we got somebody to look at that16:21
ifarkasrameshg87, yeah, I have already seen the update. What are the changes?16:22
sdakehey guys, my deploy ramdisk locks up when trying to boot fedora atomic, can anyone take a look and offer suggestions on next debug  steps?16:22
sdakehttp://paste.fedoraproject.org/157504/1801674416:22
*** Masahiro has joined #openstack-ironic16:22
rameshg87ifarkas, i just removed the commit msg to say "it's ready"16:22
*** Marga_ has joined #openstack-ironic16:22
*** achanda has joined #openstack-ironic16:22
*** mikedillion has joined #openstack-ironic16:22
rameshg87ifarkas, only the commit msg was changed16:22
rameshg87ifarkas, we need someone to take a look at it :)16:23
devanandasambetts: with some proposals to revamp that, as it wasn't handling vendor specifics outside of IPMI very well16:23
rameshg87sdake, guess it has notified ironic conductor to continue the installation, isn't ironic-conductor doing something with that bare metal ?16:23
jrollsdake: I don't know what this means, but seems like something that should be looked into maybe Dec  8 05:28:24 (none) daemon.err tgtd: iser_ib_init(3351) Failed to initialize RDMA; load kernel modules?16:24
sambettsdevananda: Ah, I was just writing to ask about that, because the UCSM driver won't be using IPMI16:24
devanandasambetts: yea. synchronous calls are pretty heavily discouraged. there have been several discussious as to why ...16:24
*** anderbubble has joined #openstack-ironic16:25
rameshg87ifarkas, are you planning to pursue this still: https://review.openstack.org/107981 ?16:25
ifarkasrameshg87, yes, once the general raid interface spec is accepted16:25
sambettsdevananda: Yes, I heard many of them at the Summit16:25
devanandasambetts: have a look at these specs: https://review.openstack.org/#/q/owner:%22Jim+Mankovich%22+status:open,n,z16:26
devanandasambetts: those cover the proposed changes to ironic and ceilometer to make it easier to support16:26
devanandasambetts: non-IPMI-based extensions to monitoring16:26
rameshg87ifarkas, i guess you will revise the spec to implement the interfaces that we defined in 135899, right ?16:26
*** Masahiro has quit IRC16:26
ifarkasrameshg87, yeah, exactly16:26
rameshg87ifarkas, okay16:27
devanandasambetts: I'm sure jmanko would apprecieate some more eyes / input on them from other stakeholders, too16:27
rameshg87devananda, can you please have a look at https://review.openstack.org/#/c/137291/ , you had questions and i had replied as comments inline.16:27
sambettsdevananda: thats great thanks! s16:28
sambettsdevananda: My only other question would be about information such as something like firmware version which isn't going to change regularly and doesn't really fit into the sensor monitoring model, you mentioned in the juno spec about storing it in the ironic DB, so that when queried it simply retreived it from there? what would be the process to keep that information in the DB up to date?16:31
devanandasambetts: we don't have a great answer for that in the current code, but its being worked into this cycle's theme - https://review.openstack.org/13382816:32
*** marcoemorais has joined #openstack-ironic16:35
*** achanda has quit IRC16:37
sambettsdevananda: Great! I'll keep my eye on those 2 blueprints, thanks :D16:37
*** achanda has joined #openstack-ironic16:38
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Separate validating NIC data into a new plugin  https://review.openstack.org/14001016:38
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Wait for power off state before calling discovery done  https://review.openstack.org/14006416:39
devanandasambetts: well, Jim has four BP up :)16:39
sdakejroll rdma is infiniband - I am pretty sure we don't need infiniband drivers16:39
* sambetts looks16:39
sdakerameshg87 at that point in the console log, the deploy locks up16:40
sdakeI just sorted out there is a magic port 1000016:40
jrollsdake: dunno, that error comes from tgtd which is the iscsi daemon I believe16:40
*** marcoemorais1 has joined #openstack-ironic16:40
sdakejroll same rror comes out via cirros deploy16:41
sdakecirros deploy works16:41
jrollhuh, idk16:41
rameshg87sdake, "nullwaiting for notice of complete" says it has notified ironic-conductor to continue the deployment16:41
rameshg87sdake, what do you see in ironic-conductor logs ?16:41
sdakecool thats a good bone16:41
*** marcoemorais has quit IRC16:42
sdakerameshg87 my logs are long gone from last night, but I'll get it going again in a bit16:42
sdakeI notice there isa magic port 10000 that should be triggered by ironic16:42
rameshg87sdake, yeah,16:42
*** achanda has quit IRC16:42
sdakei'm going to put some debug in and see if that isn't happening and why16:42
rameshg87sdake, that is to indicate the bare metal that i am done with deployment and restart16:42
sdakeyou mentioned nullwaiting16:42
sdakewhere is that?16:42
sambettsdevananda: thanks v.much :-)16:43
jrollsdake: I'd wonder if 1000 is open in your firewall16:43
rameshg87sdake, you wanted to debug on the bare metal or you wanted to debug on ironic-conductor ?16:43
*** marcoemorais1 has quit IRC16:43
sdakeI run without a firewall typically ;-)16:43
sdakewell I am running in devstack with pxe+ssh driver16:43
jrollok, just making sure16:44
*** jgrimm has quit IRC16:44
sdakethe deploy ramdisk is the same between cirros or atomic16:44
*** marcoemorais has joined #openstack-ironic16:45
rameshg87sdake, i would suggest run the same thing again and watch the ironic-conductor logs16:46
rameshg87sdake, because the deploy ramdisk seems to have done it's part :)16:46
*** achanda has joined #openstack-ironic16:46
sdakethe null wait, that indicates the ramdisk has been deployed?16:46
sdakerather the image the ramdisk wants ?16:46
sdakeits getting hung up on the nc I suspect16:46
*** marcoemorais has quit IRC16:47
rameshg87sdake, yes, deploy ramdisk is waiting here actually: https://github.com/openstack/diskimage-builder/blob/master/elements/deploy-ironic/init.d/80-deploy-ironic#L56-L5716:48
*** pensu has joined #openstack-ironic16:48
sdakeyup16:48
*** romcheg has quit IRC16:49
*** romcheg has joined #openstack-ironic16:49
rameshg87sdake, and once ironic-conductor completes deployments it is supposed to do this: https://github.com/openstack/ironic/blob/master/ironic/drivers/modules/deploy_utils.py#L391-L39816:49
rameshg87sdake, so you are getting stuck somewhere before actually16:49
*** romcheg has quit IRC16:50
rameshg87NobodyCam, hi16:50
rameshg87NobodyCam, what's pet / snowflake care ? https://review.openstack.org/#/c/135899/6/specs/backlog/raid-interface.rst16:50
sdakerameshg87 oddly looking at the logs, there is no run of the echo near that netcat16:51
clif_hHackThePlanet16:51
*** Marga_ has quit IRC16:51
clif_hlol >_<16:51
rameshg87sdake, i didn't get you16:51
sdakeoh "waiting for notice"16:51
sdakeit says "nullwaiting for notice"16:51
rameshg87sdake, ah16:51
rameshg87sdake, the "null" is actually from curl16:52
sdakewonder what the null print is16:52
rameshg87sdake, the command before16:52
sdakeright16:52
*** sambetts_ has joined #openstack-ironic16:52
NobodyCamrameshg87: treatning nodes as unique snowflakes,16:52
*** sambetts has quit IRC16:53
NobodyCamrameshg87: we have used the terms pet vs cattle16:55
rameshg87NobodyCam, still it's not clear to me :)16:55
rameshg87NobodyCam, may be plain english is required to educate me16:55
NobodyCamironic should treat modes as cattle, all the same, nothing unique16:56
rameshg87NobodyCam, and what is "modes" here ?16:56
NobodyCamrameshg87: nodes :_p16:57
devanandahttp://www.computerweekly.com/blogs/cwdn/2013/04/treat-cloud-servers-like-cattle-not-puppies.html16:57
devanandagoing even further - http://robhirschfeld.com/2014/03/17/mayflies/16:57
* NobodyCam has only had two cups of coffee16:57
*** rushiagr_away is now known as rushiagr16:57
NobodyCamahh thank you devananda16:57
* rameshg87 wonders what this is all about16:57
devanandarameshg87: the first link above may be more helpful for background16:58
rameshg87devananda, thanks :)16:58
*** sambetts_ is now known as sambetts16:58
devanandahum... it's more marketing speak than I had expected from the title :(16:59
NobodyCambrb17:00
devanandarameshg87: better link: http://www.theregister.co.uk/2013/03/18/servers_pets_or_cattle_cern/17:00
devanandawith cute pictures, lol17:00
*** romcheg has joined #openstack-ironic17:02
*** krtaylor has quit IRC17:04
*** krtaylor has joined #openstack-ironic17:06
openstackgerritMerged stackforge/ironic-discoverd: Separate validating NIC data into a new plugin  https://review.openstack.org/14001017:07
*** PaulCzar has joined #openstack-ironic17:09
*** anderbubble has left #openstack-ironic17:11
rameshg87victor_lowther, now i got one more which i am googling for the meaning https://review.openstack.org/#/c/135899/617:12
victor_lowtherrameshg87: hmmm?17:13
rameshg87victor_lowther, i hope you meant to generalize raid config across all driver17:13
rameshg87victor_lowther, am i correct ? :)17:13
victor_lowtherYes.17:13
* dtantsur also finally understood this pet-cattle thing17:14
NobodyCam:)17:14
*** anderbubble_ has joined #openstack-ironic17:14
*** anderbubble_ has joined #openstack-ironic17:15
victor_lowtherSpecifying target size, RAID level, number of disks, whether a volume can share physical disks with another volume, interface type, and media type should be enough info for a lower-level driver to intelligently lay out RAID volumes.17:15
*** anderbubble_ is now known as anderbubble17:16
rameshg87victor_lowther, why would it need number of disks ?17:16
rameshg87victor_lowther, that is dependent on the physical disks that the machine is having, right ?17:16
victor_lowtherand as long as you have reasonable fallback rules about what to do with interface type and media type you can potentially make those optional.17:16
victor_lowtherbecause saying "make me a RAID 5" can bedone with just 3 disks17:17
*** ndipanov has quit IRC17:17
victor_lowtheror all 20 something of the,.17:17
victor_lowtherPretty much only RAID1 has a good default on number of disks to use.17:17
*** athomas has quit IRC17:18
victor_lowtherand even that can be hazy if your RAID controller understands RAID1e.17:18
*** openstackgerrit has quit IRC17:19
*** openstackgerrit has joined #openstack-ironic17:20
*** tylerdurden has quit IRC17:20
victor_lowthermore to the point, I do not expect folks riding herd on Ironic to live in total ignorance of how any physical disks a machine has.17:20
*** rameshg87 has quit IRC17:20
victor_lowtherbecause you have to plan from something.17:20
*** rameshg87 has joined #openstack-ironic17:20
rameshg87victor_lowther, okay17:22
victor_lowtherand (aside from people using RAID5 on modern hardware being functionally insane), the two mode common RAID layouts I use on cloudy type workloads are:17:22
victor_lowther1 big RAID1017:22
victor_lowther1 RAID 1 for the OS, everything else as a JBOD17:22
victor_lowtherfirst for non-storage nodes17:22
devanandavictor_lowther: at some level, there *has* to be a systematic awareness of how many disks that machine should have. If nothing else, for fault detection.17:22
victor_lowthersecond for stirage nodes.17:23
victor_lowtherdevananda: yes17:23
devanandavictor_lowther: yup. those are the same two I've seen most commonly.17:23
devanandathough there are people who still use RAID6 eg. for storage-appliance nodes17:24
victor_lowtheryeah17:27
victor_lowtherbut even then, you need to tell the RAID driver how many disks to use for that RAID617:27
victor_lowtheralthough allowing 'min' and 'max' might be decent values to allow as well.17:28
victor_lowtherno matter how much my inner type purist loathes the idea. :)17:28
devanandavictor_lowther: what if we express it as: no_raid, mirrored_root, all_raid(level=N)17:29
victor_lowthereh.17:29
devanandarather than attempt to model all arbitrary possibilities, which is not an exercise I look forward to17:30
*** ndipanov has joined #openstack-ironic17:30
victor_lowtherhm?17:31
rameshg87devananda, by all_raid, do you mean to put all physical disks into raid level N ?17:31
devanandain the fullness of time, the disk/raid topology needs to be a flavor extra_spec, so Nova can schedule on it17:31
victor_lowtherI have no intention of modelling all arbitrary posibilities.17:31
devanandarameshg87: yup17:32
victor_lowtherbut if we want to deliberately restrict what can be done in a driver-independent fashion I am OK with that.17:32
devanandavictor_lowther: that's what I'm thinking, yes.17:33
victor_lowtherthe crazy people with their weird requirements can use vendor_passthrough.17:33
devanandavictor_lowther: rather than allowing something either free-form (which ends up being driver-specific) or piggybacking on cinder volume specs (which has been floated several times, but not gotten any real traction over the last four cycles)17:33
*** lazy_prince is now known as killer_prince17:34
*** Marga_ has joined #openstack-ironic17:36
rameshg87devananda, and what's mirrored_root ? RAID 1 ?17:37
*** Marga_ has quit IRC17:37
devanandarameshg87: yes. this covers the options that victor_lowther already described17:37
jrollI find it interesting how much RAID complicates ironic17:37
devanandajroll: frustrating, too17:38
victor_lowtherjroll: it is a large body of legacy knowledge17:38
jrolldevananda: right, I was trying to put it lightly17:38
victor_lowtherthat vms are lergely insulated from17:38
jroll:)17:38
devanandathinking about it breaks the abstraction17:38
*** Marga_ has joined #openstack-ironic17:38
devanandaat least, thinking about it in the way we are accustomed to :)17:38
victor_lowtherit breaks Nova's abstractions, sure.17:39
devanandaright - it breaks the compute-instance abstraction17:39
NobodyCamwow lots of lag17:39
victor_lowtherbut it is a thing you have to care about for redundancy, uptime, and performance reasons on metal.17:39
jrollright, I understand why we need to consider it, but it just sucks :|17:40
devanandavictor_lowther: redundancy and uptime are not things I should care about w.r.t. individual instances in a cloud model17:40
victor_lowtherbecause even though physical boxes are cattle, killing them out of schedule is Bad and you still force-feed them antibiotics. :)17:41
devanandaheh17:41
jrollhaha17:41
jrollI'm a huge fan of using the cloud model for instances built by ironic17:42
jrollhowever I don't think everyone is17:42
sdakerameshg87 does the system that is being deployed require alot of memory to deal with the iscsi stuff (for a 6gb image)17:42
devanandaso, what do ya'll think of, as an initial sketch of an LCD for modelling RAIDs within Ironic ....17:42
jrollnot sure if that's good or bad17:42
devananda* should there be a RAID? yes/no17:42
devananda* should it be a RAID1 of the first two disks? yes/no17:42
devananda* should it be a RAID(N) of all the disks? yes/no17:43
victor_lowtherfor suitable definition of "first"17:43
devanandaright -- the details are up to each driver17:43
victor_lowtherdevananda: Not too sure of that.17:43
devanandak k. it's just a strawman17:44
*** pcrews has joined #openstack-ironic17:44
victor_lowtherFor a concrete example, take a Dell R720XD.17:44
victor_lowtherFront of machine is all spindles17:44
victor_lowthereither 12 3.5" disks or 24 2.5"17:44
PaulCzaris there a way I can set extra dhcp options via ironic?  or do I need to run neutron port-update to do it ?17:44
victor_lowtherIt is a common ask to put the OS on the two 2.5" spindles in the rear17:45
devanandaI actually dont want to spend much time on it -- going to take a few things off my backlog, then try to to the state model I started last week17:45
devanandavictor_lowther: sure - and that would reasonably be a driver optimization, IMO17:45
devanandavictor_lowther: my point is, the location of the OS RAID is not something which Nova needs to schedule on17:46
victor_lowtherand where those appear from the raid controller's POV depends on the controller, the backplanes involved, and how everything is cabled internally.17:46
victor_lowtherRight, it is not.17:46
devanandavictor_lowther: whether the node *has* a two-disk RAID for the OS is something Nova cares about17:46
victor_lowtherNova should not know or care.17:46
victor_lowtherbut Ironic should17:46
devanandawell. the driver should.17:46
devanandaI don't see why ConductorManager should care17:46
victor_lowtherMore to the point, the operator should.17:47
devanandafair17:47
*** Marga_ has quit IRC17:47
victor_lowtherand they should be able to give the driver enough info to place the virtual drives in approximately the right location when the RAID is being ZAPPED into existence.17:47
devanandaperhaps a way for operator to inform the driver of preferences, driver to execute those preferences (or error) on the hardware,17:47
victor_lowtherAfter that, it should be hands off.17:48
devanandaso we need two interfaces defined (well, more than that, but the rest will fall out from these)17:48
victor_lowtherand that is what I thought the JSON blob in rameshg87's spec was talking about.17:48
devanandanova-ironic, for describing the node properties which inform scheduling17:48
devanandaoperator-driver, for suggesting particulars about how the raid on *that* machine should be set up17:49
devanandabecause, yes, the operator does, at some point, need to care about each machine17:50
victor_lowtherthat class of machine, at least17:50
victor_lowtherto keep them from becoming pets. :)17:50
devanandaeven if that's a script which asserts a given behavior across an identical fleet17:50
jroll++ for class17:50
devanandaright17:50
victor_lowtherthat is wondering more into orchestration territory.17:51
devanandajroll: I'm loathe to encode orchestration into Ironic's API, which "assert this change across this class of machines" would require17:51
devanandaheh17:51
jrollha17:51
jrolldevananda: it should be on the operator side17:51
devanandajroll: ++17:51
devanandaI'm all for providing tools to enable that17:52
devanandaeg, tagging17:52
victor_lowtherthe operator-ironic API should expose some suitably abstracted physical disk info17:52
jrollfor node in the_relevant_nodes_i_found: ironic node-update replace properties/raidstuff=blah17:52
jrollyeah17:52
devanandajroll: yes, exactly17:52
victor_lowtherand allow you to push a semi-detailed raid config to it17:53
victor_lowtheronce the arrays are created the nova-ironic API can update the relavent node properties for scheduling purposes.17:53
victor_lowtherand enforcing the same RAID layout across a given class of machines then becomes the orchestrator's problem17:55
victor_lowtherbe it heat, crowbar, or whatever.17:55
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Refactoring: split discoverd.py into 2 modules  https://review.openstack.org/14010217:56
rameshg87victor_lowther, but are the *semi-details* only the LCDs that we talked about ?17:56
victor_lowtherFrom my POV, more the comments I made to your spec17:57
victor_lowtherpush something detailed enough for the RAID driver to figure it out for itself17:58
victor_lowtheror push an exact config (although that will probably be vendor-specific)17:58
NobodyCambrb17:58
*** Marga_ has joined #openstack-ironic17:59
*** Marga_ has quit IRC17:59
rameshg87ifarkas, hi18:00
rameshg87ifarkas, i am not sure if you have been following the above ^^18:00
*** achanda has quit IRC18:01
*** derekh has quit IRC18:02
*** achanda has joined #openstack-ironic18:02
rameshg87victor_lowther, devananda, thanks i will revise the spec18:02
openstackgerritMerged openstack/ironic: Updated from global requirements  https://review.openstack.org/13976218:03
*** dlaube has joined #openstack-ironic18:04
devanandarameshg87: I just posted a comment18:05
rameshg87devananda, thanks, let me take a look18:05
*** achanda has quit IRC18:06
vdrokJayF, jroll, hi! I have a question about ipa18:07
jrollvdrok: don't ask to ask, just ask :)18:07
vdrokand hi everyone18:07
jrollalso, hi :D18:08
vdrokjroll, ipa requires to have checksum in image_info that's passed to it18:08
vdrokto download image18:08
jrollvdrok: yes18:08
vdrokjroll, but if the image is not from glance, what is the preferred way to handle it?18:09
vdrokrequire to include it in instance_info?18:09
vdrokor make it optional on ipa side?18:09
rameshg87sdake, it doesn't need a lot of memory. iscsi stuff exposes local disk and ironic-conductor writes the image, so most of the work is take care by ironic-conductor18:09
jrollvdrok: how does this work without glance? do you have code?18:10
JayFI don't think it's a good idea to download and image a disk without checking the hash of the image18:10
jrollvdrok: ^18:10
JayFregardless of the source of the image.18:10
jrollyeah18:10
*** Marga_ has joined #openstack-ironic18:10
*** Masahiro has joined #openstack-ironic18:11
vdrokjroll, jayf, there's no code for ipa driver now, there's something here, but its wip https://review.openstack.org/#/c/136741/18:11
*** jistr has quit IRC18:11
vdrokmaybe just pass the url in image_info urls18:11
jrollvdrok: ah, right, I see18:11
*** Marga_ has quit IRC18:12
rameshg87jroll, regarding https://bugs.launchpad.net/ironic/+bug/139460918:12
jrollrameshg87: yes?18:12
rameshg87jroll, instead of putting bash scripts inside IPA ramdisk18:12
rameshg87jroll, why not enhance IPA to add a command to expose a disk over iscsi18:13
vdrokjroll, JayF, then will be adding checksum to instance_info, thanks18:13
rameshg87jroll, and then we should be able to use it with existing infrastructure18:13
jrollrameshg87: I want this to work with the iscsi deploy driver without changing the driver :)18:13
*** Marga_ has joined #openstack-ironic18:13
jrollrameshg87: so I don't want ironic to have to call a command18:13
rameshg87jroll, hmm, okay18:14
*** Masahiro has quit IRC18:15
*** Marga_ has quit IRC18:16
rameshg87jroll, yeah makes sense. but i still wonder why to bring bash scripts in ?18:17
rameshg87jroll, why not add functionality to IPA that acts based on arguments :)18:18
jrollrameshg87: maybe, I'd be ok with that :)18:18
rameshg87jroll, like whatever you had mentioned deploy_method="iscsi" or deploy_method="agent" (default)18:19
JayFI'd even make it more like18:19
JayFemulate-pxe-ramdisk on the kernel commandline18:19
JayFand if you don't get it18:19
*** mikedillion has quit IRC18:19
jrollright, yeah18:19
JayFerm, if you get the setting, you'd not start IPA, and instead have the iscsi stuff start18:20
*** harlowja_away is now known as harlowja18:20
jrollI was just thinking that copying a bash script would be easier than porting it to python :P18:20
*** mikedillion has joined #openstack-ironic18:20
sdakerameshg87 cool thanks for the info, I'll keep debugging, iscsi_deploy.continue_deploy did the job, but it may not be returning a root_uuid18:20
sdakethe 6gig dd takes a bit of time18:20
rameshg87sdake, won't take that long, keep looking :)18:21
sdakeon the plus side, I've become an expert in how ironci works ;-)18:21
rameshg87sdake, great :)18:21
sdakeI really like the architecture18:22
sdakeversioned objects rock18:22
sdakeI've copied alot of ironic into magnum18:22
*** mikedillion has quit IRC18:22
sdakeprobably would have been faster to fork ironic into magnum but then I wouldn't have understood the codebase18:22
openstackgerritMerged openstack/python-ironicclient: VendorPassthru commands to support different HTTP methods  https://review.openstack.org/13425318:23
rameshg87jroll, okay, but it's not a lot of code in there in PXE ramdisk. bringing into one code base seems better to me. :)18:24
*** Marga_ has joined #openstack-ironic18:24
sdakehas anyone thought of making the pxe+ssh use pxe+libvirt for power control instead?18:24
jrollrameshg87: that's fine, I would +1 that patch :)18:25
sdakeatm, if a instance gets wedged, ironic gets wedged18:25
jrollsdake: the ssh driver basically ssh's somewhere (sometimes localhost) and runs virsh, VBoxControl, etc depending on the hypervisor18:25
sdakei see18:26
sdakethanks that helps18:26
jrollnp18:26
jrollsdake: a cool use case for that is local dev18:26
* rameshg87 realises it's time to go to bed18:26
jrollrun 3 VMs on your laptop, one runs devstack, the other 2 are for ironic to test with18:26
sdakeya agree thatis how I am using it18:26
jrollironic can ssh back18:26
*** Marga_ has quit IRC18:26
*** rameshg87 has quit IRC18:26
sdakebut nova delete doesn't actually delete18:27
sdakeit gets stuck18:27
jrollthat sounds like a bug18:28
jrollor something weird in configs, that should work18:28
sdakeagree18:28
NobodyCamhave a good night ramesh8718:28
NobodyCamramshg87 even18:29
*** igordcard has joined #openstack-ironic18:29
jrollsdake: I should say that does work, all the time, in devstack in the gate18:29
sdakereproducer is to use this image: http://dl.fedoraproject.org/pub/alt/stage/21_RC5/Cloud/Images/x86_64/Fedora-Cloud-Atomic-20141203-21.x86_64.qcow218:29
*** andreykurilin_ has joined #openstack-ironic18:33
*** pelix has quit IRC18:39
*** marcoemorais has joined #openstack-ironic18:42
*** ndipanov is now known as ndipanov_gone18:47
*** sdake has quit IRC18:47
*** Marga_ has joined #openstack-ironic18:48
*** Marga_ has quit IRC18:48
*** eghobo has joined #openstack-ironic18:49
*** eghobo has quit IRC18:52
*** igordcard has quit IRC18:55
*** Marga_ has joined #openstack-ironic18:57
*** marcoemorais has quit IRC18:59
*** marcoemorais has joined #openstack-ironic18:59
*** marcoemorais has quit IRC18:59
*** marcoemorais has joined #openstack-ironic18:59
*** davideagnello has joined #openstack-ironic19:00
*** jiangfei has quit IRC19:01
*** jiangfei has joined #openstack-ironic19:02
*** spandhe has joined #openstack-ironic19:02
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Refactoring: split discoverd.py into 2 modules  https://review.openstack.org/14010219:06
dtantsurifarkas is gonna hate me for this patch ^^^ :D19:06
dtantsurbut that will be tomorrow :) and now calling it a day, g'night everyone19:07
*** dtantsur is now known as dtantsur|afk19:07
*** eghobo has joined #openstack-ironic19:08
*** Marga_ has quit IRC19:09
*** pensu has quit IRC19:09
*** igordcard has joined #openstack-ironic19:10
*** dprince_ has quit IRC19:11
*** Marga_ has joined #openstack-ironic19:12
*** marcoemorais has quit IRC19:12
*** Marga_ has quit IRC19:13
*** marcoemorais has joined #openstack-ironic19:13
*** Marga_ has joined #openstack-ironic19:13
*** Marga_ has quit IRC19:17
NobodyCamnoght dtantsur|afk19:18
NobodyCamnight even19:18
NobodyCamgeneral question, as an operator are tenants of bare metal nodes allowed to reflash bios/device roms?19:20
NobodyCamquestion is comming from https://review.openstack.org/#/c/13390219:21
ShrewsNobodyCam: that would be an odd thing to allow IMO, but i'm not an operator19:22
victor_lowtherI would put that in the "hahaha... oh, you are serious. HAHAHAHA!" category.19:23
Shrewsoh, i watched that talk a while back19:23
NobodyCamI was thinking of some type of "hot fix" that the tenant needed / wanted.19:23
*** eghobo has quit IRC19:23
ShrewsNobodyCam: the talk made sense at the time, but i don't remember the "tenant reflashing bios" part19:24
openstackgerritRuby Loo proposed openstack/ironic: Update dev quick-start for devstack  https://review.openstack.org/14012419:24
victor_lowtheryeah, I was the guy who kept asking how they can prevent BIOS flashes to start with as opposed to just catching it after the fact.19:24
*** erwan_taf has joined #openstack-ironic19:24
victor_lowtherwell, that is the thing.19:25
victor_lowtheronce someone has root, most systems cannot stop the tenants from flashing the bios and firmware19:25
NobodyCamwith the spec I linked above that would cause the node to fail the delete / taredown tests19:25
victor_lowtherthe most they can do is catch it after the fact and reflash19:26
NobodyCamya and some times there is a valid reason to flash a firmware19:26
victor_lowtherright, there are.19:26
victor_lowtherbut the tenant should never be doing it by themselves.19:26
victor_lowtherbecause they are leasing the hardware, they do not own it.19:27
*** dprince has joined #openstack-ironic19:27
victor_lowtherand it opens too many attack vectors.19:27
NobodyCamso request a node with the new requirments and migrate the data ... tare down the old nod19:27
victor_lowtheryes, and hope they did not backdoor the firmware.19:28
* NobodyCam assumes the new firmware would come from a trusted source19:28
victor_lowtherTXT lets you see if the firmware has been tampered19:28
devanandain all such discussions, we need to distinguish between untrusted multi-tenant, trusted multi-tenant, and single-tenant19:29
devanandawe've got users in each of those categories today19:29
victor_lowtherNobodyCam: and if I were an attacker with sufficent resources, I would let you think that it had.19:29
devanandaunfortunately, TXT does not address SATA or USB firmware ....19:30
victor_lowtherIndeed19:30
victor_lowtherand most firmware/hardware does not have a mechanism to prevent flashes in the first place.19:30
victor_lowtherwhich sucks.19:31
victor_lowtherso instead we just get to operate with the risk that someone has pwnz0red the system, and hopefully we can detect that.19:32
*** Marga_ has joined #openstack-ironic19:32
devanandayup19:32
*** zz_jgrimm has joined #openstack-ironic19:33
*** Marga_ has quit IRC19:33
victor_lowtherwith vms, at least the hypervisor is auditable (for opensource ones, at least)19:33
*** andreykurilin_ has quit IRC19:33
victor_lowtherby and large, firmware is not.19:33
victor_lowtherbut enough paranoid ranting.19:34
*** Marga_ has joined #openstack-ironic19:37
*** Marga_ has quit IRC19:38
*** Marga_ has joined #openstack-ironic19:38
*** Marga_ has quit IRC19:38
*** shakamunyi has joined #openstack-ironic19:38
*** krtaylor has quit IRC19:40
*** zz_jgrimm is now known as jgrimm19:40
*** jcoufal has quit IRC19:44
*** Marga_ has joined #openstack-ironic19:51
*** Marga_ has quit IRC19:54
*** krtaylor has joined #openstack-ironic19:55
*** Marga_ has joined #openstack-ironic19:59
*** Masahiro has joined #openstack-ironic19:59
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Refactoring: split discoverd.py into 2 modules  https://review.openstack.org/14010220:02
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Refactoring: consolidate standard plugins in one module  https://review.openstack.org/14013420:02
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Refactoring: drop features incompatible with Kilo changes  https://review.openstack.org/14013520:02
openstackgerritDmitry Tantsur proposed stackforge/ironic-discoverd: Refactoring: cap complexity at 15 and coverage at 90  https://review.openstack.org/14013620:02
*** Masahiro has quit IRC20:04
*** Marga_ has quit IRC20:06
*** rushiagr is now known as rushiagr_away20:11
*** subscope_ has joined #openstack-ironic20:14
*** mrda-away is now known as mrda20:16
mrdaMorning Ironic20:16
dlaubeg'morning mrda20:19
dlaubeand everyone else for that matter20:19
mrdamorning dlaube20:23
*** alexpilotti has quit IRC20:27
NobodyCammornign mrda dlaube :)20:27
*** anderbubble has quit IRC20:27
mrdahey NobodyCam20:28
*** erwan_taf has quit IRC20:31
NobodyCam:)20:43
*** eghobo has joined #openstack-ironic20:52
NobodyCambrb fresh coffee is ready20:53
*** dprince has quit IRC20:55
*** marcoemorais has quit IRC21:03
*** marcoemorais has joined #openstack-ironic21:03
openstackgerritMerged openstack/ironic-specs: Introduce driver capabilities  https://review.openstack.org/12892721:10
*** ifarkas has quit IRC21:12
*** Marga_ has joined #openstack-ironic21:16
jrollvictor_lowther: there are ways to prevent tenants from successfully flashing firmware, jfyi :)21:21
jroll19:20:02       NobodyCam | general question, as an operator are tenants of bare metal nodes allowed to reflash bios/device roms? <- you have to assume they will try, even if they aren't "allowed" to21:22
victor_lowtherjroll: yes, but the are not widespread.21:22
*** andreykurilin_ has joined #openstack-ironic21:22
jrollright21:23
jrolljust throwing that out there21:23
victor_lowtherSecure hardware allows you to physically disable the erase/reprogram functionality.21:25
victor_lowtherEspecially paranoid hardware (like the yubikey) does not allow flashing at all.21:25
NobodyCambrb21:26
victor_lowtherIf you are brave and have the pinouts, you might be able to disable flash capabilities with a magnifying glass and an xacto knife. :)21:27
jrolllol21:29
* JayF updated IPA subteam status on the whiteboard21:35
jrollthanks21:37
*** subscope_ has quit IRC21:48
*** Masahiro has joined #openstack-ironic21:48
*** erwan_taf has joined #openstack-ironic21:50
*** Masahiro has quit IRC21:53
*** igordcard has quit IRC21:53
*** igordcard has joined #openstack-ironic21:55
*** jgrimm is now known as zz_jgrimm21:57
*** zz_jgrimm is now known as jgrimm21:58
*** Marga_ has quit IRC22:02
*** erwan_taf has quit IRC22:04
*** anderbubble has joined #openstack-ironic22:04
JayFadam_g: just advertised your fix for 1398128 in #openstack-qa ... would like to get these intermittant gate failures fixed so I can start back the IPA-voting-on-Ironic conversation22:08
adam_gJayF, ah, cool thanks!22:12
*** igordcard has quit IRC22:12
*** Marga_ has joined #openstack-ironic22:15
*** Marga_ has quit IRC22:15
*** Marga_ has joined #openstack-ironic22:22
*** anderbubble has quit IRC22:23
*** Marga_ has quit IRC22:27
*** Marga_ has joined #openstack-ironic22:29
*** andreykurilin_ has quit IRC22:30
*** andreykurilin_ has joined #openstack-ironic22:31
*** ChuckC has quit IRC22:32
*** spandhe has quit IRC22:34
*** spandhe has joined #openstack-ironic22:35
*** spandhe has quit IRC22:37
jrollJayF: https://review.openstack.org/#/c/139782/22:39
*** spandhe has joined #openstack-ironic22:39
*** Marga_ has quit IRC22:39
*** Marga_ has joined #openstack-ironic22:44
*** alexpilotti has joined #openstack-ironic22:47
NobodyCambrb22:47
*** Marga_ has quit IRC22:48
*** vdrok has quit IRC22:50
openstackgerritJay Faulkner proposed openstack/ironic-python-agent: Use oslo.utils and oslo.concurrency  https://review.openstack.org/13811622:51
*** Marga_ has joined #openstack-ironic22:59
*** Marga_ has quit IRC23:02
*** marcoemorais has quit IRC23:07
*** Marga_ has joined #openstack-ironic23:07
*** marcoemorais has joined #openstack-ironic23:08
*** alexpilotti has quit IRC23:11
*** ryanpetrello has quit IRC23:12
*** ChuckC has joined #openstack-ironic23:14
*** ryanpetrello has joined #openstack-ironic23:14
*** ryanpetrello has quit IRC23:20
*** marcoemorais1 has joined #openstack-ironic23:32
*** marcoemorais has quit IRC23:33
*** Masahiro has joined #openstack-ironic23:37
*** Masahiro has quit IRC23:41
*** jgrimm is now known as zz_jgrimm23:41
*** marcoemorais1 has quit IRC23:46
*** marcoemorais has joined #openstack-ironic23:46
*** eghobo has quit IRC23:48
*** marcoemorais has quit IRC23:50
*** marcoemorais has joined #openstack-ironic23:50
*** spandhe has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!