Monday, 2020-03-23

*** Lucas_Gray has quit IRC00:27
*** Lucas_Gray has joined #openstack-ironic00:31
*** dking_desktop has joined #openstack-ironic01:38
*** Lucas_Gray has quit IRC02:03
*** ociuhandu has joined #openstack-ironic02:20
*** ociuhandu has quit IRC02:30
*** ociuhandu has joined #openstack-ironic02:31
*** ociuhandu has quit IRC02:36
*** mkrai has joined #openstack-ironic03:08
*** mmethot_ has joined #openstack-ironic03:20
*** mmethot has quit IRC03:22
*** uzumaki has quit IRC03:29
*** _mmethot_ has joined #openstack-ironic03:31
*** mmethot_ has quit IRC03:34
*** chihhsin has quit IRC03:34
*** chihhsin has joined #openstack-ironic03:35
*** ricolin_ has joined #openstack-ironic03:46
*** mkrai has quit IRC03:49
*** mkrai has joined #openstack-ironic03:49
*** ricolin_ has quit IRC04:17
*** yaawang has quit IRC04:40
*** yaawang has joined #openstack-ironic04:40
*** ociuhandu has joined #openstack-ironic05:14
*** ociuhandu has quit IRC05:19
*** mkrai has quit IRC05:22
*** mkrai has joined #openstack-ironic05:24
*** dking_desktop has quit IRC05:26
*** mkrai has quit IRC05:32
*** mkrai has joined #openstack-ironic05:32
openstackgerritKaifeng Wang proposed openstack/networking-generic-switch master: [Trivial] doc fix  https://review.opendev.org/71404505:49
arne_wiebalckGood morning, ironic!06:44
*** mkrai has quit IRC07:03
openstackgerritKaifeng Wang proposed openstack/ironic-python-agent master: Adds poll mode deployment support  https://review.opendev.org/69446107:05
*** mkrai has joined #openstack-ironic07:08
openstackgerritKaifeng Wang proposed openstack/ironic-python-agent master: Adds poll mode deployment support  https://review.opendev.org/69446107:10
*** k_mouza has joined #openstack-ironic07:12
*** k_mouza has quit IRC07:16
*** dtantsur|afk is now known as dtantsur07:18
dtantsurmorning ironic07:18
arne_wiebalckdtantsur: gm o/07:23
etingofo/07:27
*** yaawang has quit IRC07:29
*** yaawang has joined #openstack-ironic07:30
*** jawad_axd has joined #openstack-ironic07:49
*** dougsz has joined #openstack-ironic07:56
*** ociuhandu has joined #openstack-ironic07:56
*** yaawang has quit IRC07:58
*** dougsz has quit IRC08:00
*** mbeierl has quit IRC08:04
*** mbeierl1 has joined #openstack-ironic08:04
*** mbeierl1 is now known as mbeierl08:06
iurygregorygood morning dtantsur etingof arne_wiebalck and Ironic o/08:08
arne_wiebalckiurygregory: o/08:08
*** tkajinam has quit IRC08:15
*** dougsz has joined #openstack-ironic08:20
*** belmoreira has joined #openstack-ironic08:23
*** amoralej|off is now known as amoralej08:41
*** ktibi has joined #openstack-ironic08:48
*** ociuhandu has quit IRC08:49
*** ociuhandu has joined #openstack-ironic08:50
*** rpittau|afk is now known as rpittau08:52
rpittaugood morning ironic! o/08:52
iurygregorymorning rpittau o/08:54
rpittauhey iurygregory :)08:54
*** ociuhandu has quit IRC08:55
*** lucasagomes has joined #openstack-ironic09:01
*** diga has joined #openstack-ironic09:32
digaHi Ironic09:34
digasome zuul gates are failing on this patch, not sure reason behind it because patch changes are not impacting to any of these gates - https://review.opendev.org/#/c/69332809:35
patchbotpatch 693328 - ironic - DRAC : idrac-redfish inspect updates pxe port - 6 patch sets09:35
*** ociuhandu has joined #openstack-ironic09:37
rpittaudiga: the failing test is actually the one you modified in the patch09:37
digaokay09:37
rpittauorr well, not you, the one that is modified in the patch :)09:38
diga:) No problem09:38
digaI will talk to Mahendra09:38
*** ociuhandu has quit IRC09:41
openstackgerritRiccardo Pittau proposed openstack/ironic-inspector master: Use openstacksdk for ironic module  https://review.opendev.org/67217909:42
*** derekh has joined #openstack-ironic09:43
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: [WIP] Use tinycore 11  https://review.opendev.org/71164709:44
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: [WIP] Use tinycore 11  https://review.opendev.org/71164709:44
*** mkrai has quit IRC09:52
*** ktibi_ has joined #openstack-ironic09:57
*** ktibi has quit IRC10:00
*** k_mouza has joined #openstack-ironic10:00
*** alexmcleod has joined #openstack-ironic10:04
openstackgerritIury Gregory Melo Ferreira proposed openstack/networking-generic-switch master: Disable ironic-tempest-ipa-wholedisk-direct-tinyipa-multinode  https://review.opendev.org/71441010:11
*** mkrai has joined #openstack-ironic10:13
*** dougsz has quit IRC10:19
*** hoonetorg has quit IRC10:24
*** dougsz has joined #openstack-ironic10:32
*** hoonetorg has joined #openstack-ironic10:37
* dtantsur sighs at ^^^10:37
openstackgerritRiccardo Pittau proposed openstack/ironic-lib master: Explicitly set ramdisk type  https://review.opendev.org/71441810:54
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent master: Explicitly set ramdisk type  https://review.opendev.org/71441910:56
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent master: Explicitly set ramdisk type  https://review.opendev.org/71441910:57
yolandahi, good morning... i'm continuing testing ironic/pxe on supermicros, and i'm getting this error now: No partition with UUID 0x00000000 found on device /dev/sda . I have an sda disk, looking at inspector logs it detects it properly (but it has partitions as well). What can be the problem?11:01
yolandacan it be because it is already partitioned?11:01
openstackgerritMark Goddard proposed openstack/bifrost stable/train: Add release note for CentOS 8 and Ansible 2.8  https://review.opendev.org/71442011:04
mgoddardmorning11:04
mgoddarddtantsur, rpittau: Would like to get ^ merged then make a bifrost train release11:05
dtantsurlooking11:05
dtantsurmgoddard: thanks. we may need to release it as a minor (not patch) version because of the impact.11:06
dtantsurI think the version number is still free since we haven't released Ussuri.11:06
openstackgerritRiccardo Pittau proposed openstack/networking-baremetal master: Explicitly set ramdisk type  https://review.opendev.org/71442111:07
yolandawhen i look at inspection of the node, in driver_internal_info, i see  'root_uuid_or_disk_id': '0x00000000' , that's a result of inspection?11:11
dtantsuryolanda: nope, it's a temporary thing from, presumably, a previous deployment?11:12
yolandai started deployment from scratch, removing all ironic bits11:12
dtantsurI don't remember for sure, but ironic-inspector cannot even modify driver_internal_info11:12
dtantsurmaybe it's an artifact of some internal logic in the boot interface?..11:13
dtantsurdoes it break you anyhow?11:13
yolandayep, i cannot deploy ... when it tries to copy the deployment image, i see that "No partition with UUID 0x000 found on device /dev/sda" . So the image is not copied to hard disk, and it just reboots on IPA again11:13
dtantsurmgoddard: and forgot to say: good job with centos 8 support on train! it was an important gap to close.11:14
dtantsuryolanda: okay, it's a runtime problem (unrelated to inspection). is it a whole disk image?11:14
yolandayep, deploying in the context of baremetal IPI11:14
mgoddarddtantsur: thanks :) the patch didn't end up as bad as I'd expected11:14
dtantsurme too :)11:15
dtantsuryolanda: any differences from your previous deployments? changed image?11:15
yolandai changed machines... i am testing on my local supermicros11:16
yolandaso this is a new deployment on an internal lab11:16
dtantsurit's not the first time I hear about root_uuid_or_disk_id being zero..11:16
yolandaspecific with hardware?11:17
dtantsurI need to dive into the code to update myself. iurygregory or arne_wiebalck do either of you remember anything about ^^?11:17
dtantsuryolanda: should not be. more likely to the image somehow.11:17
iurygregorydtantsur, reading11:17
yolandai can send you logs of inspector/conductor if they are useful11:18
dtantsuryolanda: inspector is likely unrelated. ramdisk logs would be most useful probably..11:18
iurygregoryyou trying wholedisk image or partition image?11:19
yolandaiurygregory, whole disk, it's a baremetal IPI11:19
yolandaand first time that i try on those machines11:19
iurygregoryuefi boot right?11:19
yolandayep11:20
iurygregorycan you share the ipa logs ?11:20
yolandai see in conductor, some logs... None"; prepare_image: result "{'result': 'prepare_image: image (rhcos-44.81.202003062006-0-compressed.x86_64.qcow2) written to device /dev/sda root_uuid=0x00000000'}", 2020-03-23 10:39:17.742 1 DEBUG ironic.drivers.modules.agent_base [-] Installing the bootloader for node ae7c756c-3b19-4d47-a203-fae69d2f065e on partition 0x00000000, 2020-03-23 10:39:17.903 1 DEBUG ironic.drivers.modules.agent_client [-] Agent11:21
yolandacommand image.install_bootloader for node ae7c756c-3b19-4d47-a203-fae69d2f065e returned result None, error {'message': 'Error finding the disk or partition device to deploy the image onto: No partition with UUID 0x00000000 found on device /dev/sda', 'code': 404, 'type': 'DeviceNotFound', 'details': 'No partition with UUID 0x00000000 found on device /dev/sda'},11:21
yolandalet me paste ipa log now11:21
dtantsurnote for myself: root_uuid_or_disk_id comes from IPA after writing the image11:22
*** ricolin_ has joined #openstack-ironic11:23
arne_wiebalcksorry, connectivity brownout11:24
openstackgerritMerged openstack/bifrost stable/train: Add release note for CentOS 8 and Ansible 2.8  https://review.opendev.org/71442011:25
arne_wiebalckyolanda: this sounds like the bootloader installation, so I guess the image was installed, but now the IPA cannot find the partition with 0x000 ... this breaks the deployment, the node still boots from the network and hence into the IPA ... does that make sense?11:26
arne_wiebalckyolanda: no, it does not :)11:27
dtantsurokay, so this value (in case of whole disk images) comes from hexdump11:27
arne_wiebalckyolanda: since the log clearly says it cannot find the disk to deploy the  image onto11:27
dtantsuryolanda: is it UEFI or legacy boot?11:28
* arne_wiebalck has to leave, is back in 2 hrs11:28
dtantsurdoes your image use GTP or MBR?11:28
yolandadtantsur, UEFI11:29
dtantsur* GPT11:29
iurygregoryMBR is normally for SW Raid11:30
dtantsurI don't think yolanda is using software RAID11:30
iurygregoryyeah11:30
yolandai need to check but i'd say GPT11:31
dtantsurmy question is whether the IPI images use MBR or GPT inside of them11:31
yolandalet me check11:31
iurygregoryshould be GPT I would say11:31
dtantsurI've seen an exactly similar thing in another case with UEFI11:31
dtantsurI think the solution was to make ironic use efibootmgr11:32
dtantsurthe ramdisk logs can probably help more11:32
yolandatrying to upload logs11:32
iurygregoryyeah11:32
iurygregorythe ipa logs would tell how the check for efi went11:33
dtantsurbut in any case, we need to fix the 0x00.. issue11:33
* dtantsur wonders if get_disk_identifier works corrrectly for GPT11:33
dtantsurit mentions MBR quite explicitly11:34
yolandahttps://paste.centos.org/view/891091aa11:35
yolandaramdisk of one of the machines11:35
dtantsuryolanda: it's from inspection, I think11:36
rpittauyolanda: what's the version of the base os ?11:36
rpittaulooks like centos 7 ?11:37
yolandacentos 7 yes11:37
iurygregorypython2.7...11:37
rpittauyeah11:37
iurygregory=O11:37
yolandai mean, IPA is centos711:38
rpittauwould be curious about the ipa version there11:38
rpittauyep11:38
yolandathe image i want to install is RHCOS11:38
rpittauyeah but the problem might be the version of ipa on that ipa-ramdisk11:38
iurygregorymaybe it's an old one without the efi changes..11:39
rpittaufor example11:39
dtantsurprobably11:40
dtantsurhonestly, I'm staring at the code, and I cannot understand why it's even supposed to work..11:40
dtantsurthe zero ID is a thing in the CI as well: https://zuul.opendev.org/t/openstack/build/5a609496cadf449fa7a13eafdebb28d1/log/controller/logs/ironic-bm-logs/node-0_no_ansi_2020-03-17-15:54:33_log.txt#147911:41
yolandalet me check where i get ipa from... should be rdo11:41
etingofTheJulia, re ipmi indicators - so far I do not see where that unknown argument error comes from. I will debug your patch to figure that.11:43
dtantsurrpittau, iurygregory, we don't have a CI job with UEFI and whole disk images, do we?11:43
yolandayep, https://images.rdoproject.org/train/rdo_trunk/11:43
yolandacurrent-tripleo folder11:44
dtantsurugh. folks, I think this code path is hopelessly broken.11:44
rpittaudtantsur: no, we don't11:44
dtantsurI wonder if anyone has ever tested a GPT whole disk image with local boot..11:44
iurygregoryI know bfournie testes wholedisk image + efi while I did the changes in ipa11:45
iurygregorytested*11:45
yolandai tested these images in HPE machines last week, worked fine for me11:45
rpittaudtantsur: I think the wholedisk+uefi is in the todo list for the CI11:46
yolandait was same scenario... uefi boot, pxe boot11:46
iurygregorygood to hear that11:46
*** rpittau is now known as rpittau|bbl11:47
*** mkrai has quit IRC11:48
*** mkrai_ has joined #openstack-ironic11:48
* iurygregory goes and start working in add a job with wholedisk+uefi11:49
dtantsuryolanda: mmm, so it used to work?11:50
dtantsurI'm putting the findings in https://storyboard.openstack.org/#!/story/200745511:50
yolandadtantsur, first time that i test on this hardware11:50
yolandabut used to work in HPE, i was testing that scenario last week11:50
iurygregory I know people used uefi+wholedisk and it was working11:50
dtantsurokay, good. I still don't see how it can possibly work (see the story), but it helps.. a bit.11:51
*** rh-jelabarre has joined #openstack-ironic11:54
dtantsuryolanda: I'd be really curious to see the ramdisk logs for deployment11:55
dtantsurideally, a successful deployment as well11:55
dtantsurto compare11:55
bfourniedtantsur, iurygregory; yep, I created a uefi whole disk image using "openstack overcloud image build" and installed on a Dell set for uefi. I don't have the logs any more though11:56
yolandaramdisk for HPE boxe you mean?11:56
*** rh-jelabarre has quit IRC11:56
dtantsuryolanda: I definitely the logs from the failing box, but ideally from HPE too11:57
yolandai paste ramdisk from the failing box11:57
yolandahttps://paste.centos.org/view/891091aa11:57
dtantsuryolanda: it's from inspection, we need deployment.11:57
dtantsuron a per-hipster world it would be from /var/log/ironic/deploy11:58
dtantsur* pre-hipster11:58
yolandaok let me paste that11:59
*** rh-jelabarre has joined #openstack-ironic12:00
*** rh-jelabarre has quit IRC12:00
yolandahttps://paste.centos.org/view/90b457fa12:02
*** ociuhandu has joined #openstack-ironic12:02
dtantsuryolanda: thanks! there's also an lsblk file in the same archive, could you paste it?12:03
* iurygregory looks12:03
dtantsuractually, there is an lsblk dump in the logs12:04
yolandain ironic? i cannot find any lsblk12:04
yolandaps, lshw, iptables, ip_addr, df, journal12:05
dtantsuryolanda: weird, but anyway. I've found what I was looking for.12:05
yolandaseems there are some errors related to partitions there...12:06
dtantsurwell, I still don't understand how this all could possibly work before...12:08
dtantsuryolanda: are you using the same IPA and instance image as before?12:10
yolandadtantsur, yes, i always collected ipa from there12:11
yolandathere is an ipa-downloader container that takes care of downloading ipa from rdo12:12
dtantsurCan someone please read my findings on https://storyboard.openstack.org/#!/story/2007455 and tell me what I'm missing?12:12
dtantsuryolanda: you seem to be missing the iurygregory's efibootmgr patches. they might fix your situation, even though the bug stays..12:15
yolandadtantsur, where can i grab those images then? i am using current-tripleo12:17
yolandahttps://github.com/metal3-io/ironic-ipa-downloader/blob/master/get-resource.sh#L1012:18
dtantsurhttps://images.rdoproject.org/train/rdo_trunk/current-tripleo/ should be recent enough, dunno why the patch is not there..12:18
dtantsuralthough things take time to propagate there12:19
dtantsuryolanda: can you switch to https://tarballs.opendev.org/openstack/ironic-python-agent/dib/files/ temporary (skipping inspection if you can)?12:19
yolandasure, let me try12:20
yolandacentos8 ipa?12:21
*** ociuhandu has quit IRC12:21
arne_wiebalckdtantsur: so, the issue is around installing the bootloader?12:21
dtantsurTheJulia: re ipa-builder and checkout: there are DIB args for that. I agree that an argument could be easier..12:21
*** khansa has joined #openstack-ironic12:21
dtantsuryolanda: yep12:21
dtantsurarne_wiebalck: tl;dr https://storyboard.openstack.org/#!/story/200745512:22
arne_wiebalckdtantsur: from what I remember, the uuid was only passed for partition images initially12:22
arne_wiebalckdtantsur: when I added this for RAID, I asked where the ID comes from12:22
arne_wiebalckdtantsur: for RAID, this is now part of the image and taken from there12:22
arne_wiebalckdtantsur: I never understood where the uuid would have come from for other cases12:23
dtantsurarne_wiebalck: see the story. I feels like it's all wrong.. but people report it working for a while.12:23
dtantsurI need to talk to TheJulia when she's online. She may have an idea why this all is happening..12:24
openstackgerritMerged openstack/ironic master: Add indicators REST API endpoints  https://review.opendev.org/65178512:29
etingofwow! ^12:37
*** rh-jelabarre has joined #openstack-ironic12:40
dtantsurcongrats :)12:54
*** ociuhandu has joined #openstack-ironic12:54
openstackgerritIlya Etingof proposed openstack/ironic master: Support burning configdrive into boot ISO  https://review.opendev.org/68725012:55
*** ociuhandu has quit IRC12:58
openstackgerritIury Gregory Melo Ferreira proposed openstack/ironic master: Follow-up releasenote use_secrets  https://review.opendev.org/71443513:03
dtantsurrpittau|bbl: ehmm, we have no logs for https://fc8933f96044d5a5cb6e-2093f8081c337530c67183f7eaa6e193.ssl.cf2.rackcdn.com/672179/58/check/openstack-tox-functional-py36/3dc98ca/job-output.txt13:04
*** ociuhandu has joined #openstack-ironic13:04
dtantsurrpittau|bbl: more importantly, we seem to be breaking bifrost: https://zuul.opendev.org/t/openstack/build/d5e038dd2f754275ba4ff163bb5d68e6/log/logs/ironic-inspector.log#57313:05
dtantsurI may have a fix for that, hold on13:08
*** ociuhandu has quit IRC13:08
*** rpittau|bbl is now known as rpittau13:08
rpittaudtantsur: bifrost is fixed by starting inspector after ironic-api13:08
rpittaudtantsur: https://review.opendev.org/71360813:09
patchbotpatch 713608 - bifrost - [DNM] Test run inspector after ironic-api - 1 patch set13:09
dtantsurrpittau: we cannot rely on the ordering, we need to fix inspector13:09
openstackgerritIlya Etingof proposed openstack/ironic master: Add `network_data` field to ironic node object  https://review.opendev.org/68791013:09
*** amoralej is now known as amoralej|lunch13:09
rpittaudtantsur: yep, I'm not saying that, that's why I did only a test patch while still working on the openstacksdk migration13:10
*** ociuhandu has joined #openstack-ironic13:11
dtantsurrpittau: try adding something like http://paste.openstack.org/show/791023/ to your patch13:11
dtantsurit may also fix the functional tests13:11
rpittaudtantsur: the error on bifrost is the same issue that is breaking the functional test btw13:11
*** ociuhandu has quit IRC13:13
*** ociuhandu has joined #openstack-ironic13:14
rpittaudtantsur: that worked13:15
dtantsurneat13:15
dtantsurI guess the SDK does more on initialization than ironicclient..13:15
*** ociuhandu has quit IRC13:16
rpittaudtantsur: yeah, I was doing a test and I saw the connection to ironic during the initialization, that's why I thought of an issue on the discovery as I was saying on the sdks channel13:16
*** ociuhandu has joined #openstack-ironic13:16
*** ociuhandu has quit IRC13:16
*** ociuhandu has joined #openstack-ironic13:18
*** rloo has joined #openstack-ironic13:18
yolandadtantsur, i started to use centos 8 ipa... but seems it's not doing anything. It loads centos8 but sits there, and no activity on logs13:20
dtantsurweird13:21
yolandahttps://tarballs.opendev.org/openstack/ironic-python-agent/dib/files/ - centos8 one13:21
yolandahttps://imgur.com/a/VhesOyH13:22
yolandajust sits there13:22
dtantsurare you sure it's not doing anything? maybe just the output is silenced?13:23
yolandano logs13:23
yolandaanything on ironic-inspector13:24
dtantsuryolanda: I'd suggest skipping inspection, it may not work in our configuration13:24
dtantsurpython-hardware is not in these ramdisks13:24
yolandahow can i disable that? removing inspector interfaces?13:25
*** gudrutis2 has joined #openstack-ironic13:25
dtantsurI'm not sure how to do it in metal3, to be honest13:25
gudrutis2And I am back. Hi Ironic, how have you been?13:25
yolandadtantsur, in ironic.conf?13:26
dtantsuryolanda: I mean.. it's not ironic that starts inspection, it's metal3 in your case13:26
dtantsurhi gudrutis2, surviving successfully13:26
dtantsuryolanda: you can try setting the default_inspect_interface to fake, but I suspect metal3 may not like it13:26
iurygregoryhi gudrutis2 welcome back o/ doing good so far, and you?13:26
rpittauhey gudrutis2 , fighting for toilet paper as the rest of the world :)13:27
yolandaok let me check13:27
iurygregoryrpittau, I can try to send some for you (here in CZ np atm)13:27
rpittauiurygregory: just kidding, fortunately, but thanks :)13:27
gudrutis2dtantsur: in germany you doing pretty well with infection/death ratio, so I am not surprised :)13:27
openstackgerritRiccardo Pittau proposed openstack/ironic-inspector master: Use openstacksdk for ironic module  https://review.opendev.org/67217913:28
iurygregoryrpittau, good \o/13:28
dtantsurgudrutis2: yeah, they seem to have it in check.. for now13:30
*** tzumainn has joined #openstack-ironic13:31
openstackgerritIury Gregory Melo Ferreira proposed openstack/networking-generic-switch master: [WIP] Fix CI  https://review.opendev.org/71441013:34
*** ociuhandu has quit IRC13:36
*** ociuhandu_ has joined #openstack-ironic13:36
iurygregory ngs seems broken let's see how it goes13:38
openstackgerritRiccardo Pittau proposed openstack/python-ironicclient master: Explicitly set ramdisk type  https://review.opendev.org/71444313:44
rpittauiurygregory: s/seems/is , I was also testing it :)13:46
*** ociuhandu_ has quit IRC13:46
*** ociuhandu has joined #openstack-ironic13:46
iurygregoryrpittau, gotcha13:47
openstackgerritTzu-Mainn Chen proposed openstack/ironic master: Add node lessee field  https://review.opendev.org/70686413:49
openstackgerritRiccardo Pittau proposed openstack/sushy master: Explicitly set ramdisk type  https://review.opendev.org/71444713:49
* TheJulia wipes sleep from h er eyes13:50
openstackgerritRiccardo Pittau proposed openstack/sushy-tools master: Explicitly set ramdisk type  https://review.opendev.org/71444813:53
rpittaugood morning TheJulia :)13:53
TheJuliadtantsur: or maybe we should just document the example argument pass-through13:54
openstackgerritRiccardo Pittau proposed openstack/virtualbmc master: Explicitly set ramdisk type  https://review.opendev.org/71444913:56
dtantsurmorning TheJulia14:05
dtantsurI bet you won't like seeing https://storyboard.openstack.org/#!/story/200745514:06
openstackgerritMark Goddard proposed openstack/bifrost master: Don't install python openwsman package  https://review.opendev.org/71445114:06
*** amoralej|lunch is now known as amoralej14:06
iurygregorygood morning TheJulia14:09
openstackgerritIury Gregory Melo Ferreira proposed openstack/ironic master: Wholedisk+Uefi job  https://review.opendev.org/71445314:09
openstackgerritIury Gregory Melo Ferreira proposed openstack/ironic master: Wholedisk+Uefi job  https://review.opendev.org/71445314:11
TheJuliayolanda: could you get a partition list from that machine somehow?14:13
TheJuliaspecifically wondering what the uefi boot partition's contents look like14:13
yolandai'm testing with downstream image now, that shows different logs. Let me paste14:14
TheJuliayolanda: looks like the contents of sda2 is what we're going to need to look at14:15
TheJuliaand then sda114:15
yolandathat's with downstream... https://paste.centos.org/view/53694b0d14:17
yolandain this case it doesnt' seem to throw errors on that14:18
TheJuliaThe agent thinks it is in bios mode or is intended for bios mode14:22
*** ociuhandu_ has joined #openstack-ironic14:22
TheJuliait sees a bios boot header on the image and combined with bios mode it goes "okay, don't need to do anything here"14:22
yolandai have the machines set to UEFI14:24
*** ociuhand_ has joined #openstack-ironic14:24
yolandaneed to go for lunch but i'll continue debugging later14:25
*** ociuhandu has quit IRC14:25
TheJuliaso _is_bootloader_booted doesn't check the running boot mode :(14:26
* TheJulia starts on a fix14:26
*** ociuhand_ has quit IRC14:27
*** ociuhandu_ has quit IRC14:27
*** ociuhandu has joined #openstack-ironic14:27
*** ociuhandu_ has joined #openstack-ironic14:30
*** ociuhand_ has joined #openstack-ironic14:32
*** ociuhandu has quit IRC14:33
TheJuliadtantsur: yolanda: is the partition pre-encrypted?14:35
*** ociuhandu_ has quit IRC14:36
*** mkrai_ has quit IRC14:37
*** ociuhand_ has quit IRC14:43
dtantsurTheJulia: I don't know, but seems so14:44
dtantsuryeah, in BIOS mode we won't go into the bootloader14:44
*** cdearborn has joined #openstack-ironic14:44
dtantsurwhat I don't understand how it even works for UEFI when we don't use efibootmgr14:44
etingofopinions wanted: what's the best place for network_data validation - boot interface or node ORM object?14:44
iurygregoryrpittau, wondering about "maybe put this phrase after the next one ?" my idea was,  the information in the begin would highlight more that it's necessary the config.14:46
dtantsuretingof: option #3: API layer?14:46
iurygregorydtantsur, well it can go to grub2 in some cases...14:46
dtantsuriurygregory: right, and I see now way for that "going to grub2" to work.. but people report it does.14:47
dtantsurI'm confused as heck14:47
iurygregoryyeah14:47
rpittauiurygregory: ok, mmm then maybe rephrase the entire paragraph as there is some repetition14:50
TheJuliadtantsur: we should be able to find the bootloader in the existing partitions.. *should*14:50
TheJuliayolanda: patch inbound, just writing a reno14:50
iurygregoryrpittau, ok let me think a little bit here =)14:50
dtantsurTheJulia: I think it also only works for legacy boot14:50
dtantsurfor UEFI we seem to always require efibootmgr or grub14:50
dtantsurin the latter case, we're trying to find a root partition via hexdump that is arguably MBR-specific14:51
dtantsursee other findings in https://storyboard.openstack.org/#!/story/200745514:51
dtantsurI do suspect that I'm missing something still since it's reported to work..14:51
openstackgerritJulia Kreger proposed openstack/ironic-python-agent master: Return false for MBR bootloader check on UEFI machines  https://review.opendev.org/71446814:53
TheJuliadtantsur: likely bios specific behavior is occuring as well in terms of the machine working after reboot. We've seen tons of that before as well14:54
etingofwe can do that at the API level as well, however I see for properties (for example) we do it at the DB level and for raid at the interface level...14:56
* arne_wiebalck is wondering how he could boot UEFI nodes with dual-mode images14:59
openstackgerritIury Gregory Melo Ferreira proposed openstack/ironic master: Follow-up releasenote use_secrets  https://review.opendev.org/71443515:00
arne_wiebalckTheJulia: this is only when the boot mode is not set on the node?15:00
dtantsurarne_wiebalck: there was an attempt to implement that, I don't think it has been finished15:00
dtantsurmmm, meeting time?15:00
TheJulia#startmeeting ironic15:00
openstackMeeting started Mon Mar 23 15:00:25 2020 UTC and is due to finish in 60 minutes.  The chair is TheJulia. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
*** kaifeng_ has joined #openstack-ironic15:00
*** openstack changes topic to " (Meeting topic: ironic)"15:00
openstackThe meeting name has been set to 'ironic'15:00
arne_wiebalckdtantsur: to implement what, sorry?15:00
dtantsurarne_wiebalck: support for dual-boot images15:00
kaifeng_o/15:00
rajiniro/15:00
dtantsuro/15:00
rpioso\o15:00
etingof\o15:00
TheJuliadtantsur: I _suspect_ if we can't use uefibootmgr, we're dead in the water15:00
cdearborno/15:00
iurygregoryo/o/15:00
rpittauo/15:00
erbarro/15:00
TheJuliahonestly15:00
TheJuliaAnyway!15:00
arne_wiebalckdtantsur: it seems to work for us :)15:00
dtantsurgood :)15:00
TheJuliaGood morning everyone! It is time for another meeting if the ironic minds!15:01
rlooo/15:01
arne_wiebalcko/15:01
*** ricolin_ has quit IRC15:01
TheJuliaOur agenda is on the wiki!15:01
TheJulia#link https://wiki.openstack.org/wiki/Meetings/Ironic#Agenda_for_next_meeting15:01
TheJuliaSeems we have a few topics so we should go ahead and get started!15:01
*** ricolin_ has joined #openstack-ironic15:01
TheJulia#topic Announcements / Reminders15:01
*** openstack changes topic to "Announcements / Reminders (Meeting topic: ironic)"15:02
mgoddard\o15:02
ajyao/15:02
TheJulia#info We are engering the end of the Ussuri cycle, and as such deadlines are coming up.15:02
*** ociuhandu has joined #openstack-ironic15:02
TheJulia#info Extra-ATC submissions must take place by March 26th, or R-715:03
TheJulia#info Non-client library freeze is April 2nd. (ironic-lib, sushy)15:03
openstackgerritMerged openstack/virtualbmc master: Fix stop command by using default SIGTERM handler in children  https://review.opendev.org/71303815:03
TheJulia#info Client library freeze and the Ussuri-3 milestone for the openstack community is April 9th.15:04
rloodoes that extra-atc submission mean anything, now that it is going virtual?15:04
TheJulia#info Cycle Highlightes are also due on the 9th.15:04
dtantsurrloo: ATC also participate in elections, for example15:04
TheJuliarloo: extra-atc can be granted for people that aid discussion, or that help others in irc.15:04
rlooah, then yes, it means something. thx!15:05
TheJuliaExtra-ATC is also valid for ?11? months15:05
TheJuliaso in theory, 2 election rounds.15:05
TheJuliaDoes anyone have anything to raise or remind us of this week?15:05
* dtantsur reminds to stay safe15:06
*** ociuhandu has quit IRC15:06
TheJuliaYes, everyone, please stay safe!15:06
TheJuliaAlso, everyone! Reviews!15:07
TheJuliaShall we carry on?15:07
iurygregory++15:07
rpittaulet's15:07
TheJulia#topic Review action items from previous meeting15:08
*** openstack changes topic to "Review action items from previous meeting (Meeting topic: ironic)"15:08
TheJuliaiurygregory: you had an action item to document supported branch policy, I believe you posted it?15:08
iurygregoryTheJulia, https://review.opendev.org/71366015:08
patchbotpatch 713660 - ironic - Document our policies for stable branches - 2 patch sets15:08
TheJuliamost excellent15:08
iurygregorywe just need to reach a consensus on the text15:09
iurygregory=)15:09
* TheJulia adds to the list of patches for the week15:09
TheJuliaMoving on!15:10
TheJulia#topic Review subteam status reports15:10
*** openstack changes topic to "Review subteam status reports (Meeting topic: ironic)"15:10
TheJulia#link https://etherpad.openstack.org/p/IronicWhiteBoard15:10
TheJuliaStarting at line 25115:11
TheJuliaarne_wiebalck: thanks for the scale testing notes!15:11
iurygregoryrpittau, are we tracking the CI work in the status report?15:11
arne_wiebalckTheJulia: will add more data as it comes in :)15:11
arne_wiebalckTheJulia: looks good so far15:11
TheJuliaRegarding the Bare Metal SIG whitepaper, would it help if we did some scheduled "editing the doc times"?15:11
arne_wiebalckI think so ... this is dangling since so long now.15:12
rpittauiurygregory: no, I'm adding a section now as I have the story as well15:12
TheJuliaarne_wiebalck: yeah :(15:12
arne_wiebalckTheJulia: let's just schedule sth and finish it15:12
TheJuliak15:13
* arne_wiebalck is naive maybe15:13
TheJuliaAnyone have any ideal time windows?15:13
TheJuliaor days?15:13
TheJuliaLooks like multitenancy patches are still in review15:13
dtantsurTheJulia: start a doodle?15:13
TheJulia#action TheJulia to send out a doodle for whitepaper15:14
arne_wiebalckthanks15:14
TheJuliaI saw network_data discussion in irc earlier, so that is a good sign15:14
TheJuliadtantsur: can you add your disk device selection patch to priorites to review if they are not already there15:15
* etingof is working on dhcpless full-throttle now days15:15
TheJuliaetingof: <315:15
dtantsurTheJulia: added earlier today15:15
TheJulia<315:15
*** ociuhandu has joined #openstack-ironic15:16
TheJuliaLooks like iurygregory has made good progress on retooling some tempest jobs for simplification of CI load :)15:16
*** ociuhandu has quit IRC15:16
iurygregoryit's working with redfish15:16
TheJulia\o/15:16
iurygregoryI would appreciate feedback to see if this is the way we want to move or not15:16
TheJuliaiurygregory: maybe put the patch(s) on the list to review?15:17
*** TxGirlGeek has joined #openstack-ironic15:17
iurygregoryTheJulia, sure15:17
TheJuliaUpdates look good to me, shall we carry on to priorities for the week?15:17
iurygregory++15:18
rpittauyup15:18
TheJulia#topic Deciding on priorities for the coming week15:18
*** openstack changes topic to "Deciding on priorities for the coming week (Meeting topic: ironic)"15:18
TheJulia#link https://etherpad.openstack.org/p/IronicWhiteBoard15:19
TheJuliaLine 12215:19
etingofshould we review pending sushy patches?15:20
TheJuliaetingof: yes, very much so given the short time we'll ahve on them15:20
* TheJulia is marking out merged patches15:20
* TheJulia is amused by the "race lottery"15:21
* etingof can gather sushy patches pending reviews on the whiteboard15:21
TheJuliasounds good15:23
TheJuliathere are a lot of things on the board today. I'm going to delete the merged items now15:23
TheJuliaAnyone interested in making the pxe module smarter about what format messages to return for neutron integrated stacks?15:24
iurygregoryTheJulia, I can15:24
TheJuliahttps://review.opendev.org/#/c/714212/15:24
patchbotpatch 714212 - ironic - "dual stack" support for PXE/iPXE - 7 patch sets15:25
TheJuliaAlready did it :)15:25
rpittauI'm too slow :(15:25
iurygregoryoh =)15:25
iurygregoryrpittau, no you are not slow15:25
TheJuliaI can add it to the list if people are interested15:25
dtantsurlet's try15:27
*** gyee has joined #openstack-ironic15:27
TheJuliadone!15:28
* TheJulia moves the 3 sushy items up15:28
TheJuliaThe list looks good to me, hopefully this many of us will be able to focus on reviews and trying to get some code merged as we're starting to run out of time in the cycle.15:29
*** khansa has quit IRC15:29
TheJuliaShall we move on to Discussion topics?15:29
iurygregory++15:29
TheJulia#topic Discussion15:30
*** openstack changes topic to "Discussion (Meeting topic: ironic)"15:30
TheJuliaThe first item I believe was added by iurygregory noticing that HP's 3rd party CI logs were inaccessible and they were now attempting to run python2 jobs15:30
TheJuliaunfortunately, I don't see anyone from HP here this morning.15:31
iurygregoryyeah =(15:31
TheJuliaiurygregory: Would you be able to draft an email to stendulker and copy me?15:31
iurygregoryI can't access any job logs from HPE CI15:31
iurygregoryTheJulia, sure!15:31
iurygregoryyou can put as action item15:31
TheJuliaiurygregory: if you don't have his email address, just let me know15:31
TheJulia#action iurygregory to reach out to HPE regarding CI status15:32
iurygregoryI'm also wondering if other 3rd party CI have py2 jobs running15:32
iurygregoryI hope not =)15:32
TheJuliaI am 98% sure I already talked to Dell folks about changing all of their jobs to python315:32
rajinirAll Dell CI jobs are Python3 now15:32
iurygregoryrajinir, tks!15:32
TheJuliarajinir: Thanks!15:32
TheJuliaOkay, next topic then!15:32
TheJuliaMigrate from oslo.rootwrap to oslo.privsep. I don't know who added this, but it seems like a thing15:33
rpittauTheJulia: I did15:33
iurygregoryI saw the thread on openstack-discuss15:33
rpittauthere was a topic in the ML about that, it's a proposed goal for V release15:33
iurygregoryrpittau, ++15:33
* TheJulia hands the microphone over15:33
rpittaumaybe we can start having a look at it since other projects (nove) moved there already15:34
TheJuliaI guess that is reasonable, although I've been hoping cycle goals get re-thought15:34
TheJuliaOh, that is good and does help a lot15:34
iurygregoryrpittau, I've started looking at it =)15:34
rpittauI believe it's a good idea in general, not a super high priority15:34
rpittauiurygregory: heh ok, nvm then :)15:34
TheJuliarpittau: My impression from this discussion is the same15:34
TheJuliaiurygregory: awesome!15:34
iurygregoryI will work on a etherpad with the projects we need to update15:35
TheJuliaWell we have nothing listed for Baremetal SIG and I already have an action tiem for that. And no listed RFE's for review. One worth noting, I did start updating the old kexec RFE with some thoughts and comments becuase I'm trying to sort through how to make it all work in the machenery15:36
TheJuliaI'm also hacking it out and will hopefully have it working during one of the quarentine days ahead.15:36
TheJuliaiurygregory: awesome15:36
TheJuliaSo I guess we're good to proceed to Open Discussion?15:36
iurygregory++15:37
dtantsuryeah15:37
TheJulia#topic Open Discussion15:37
*** openstack changes topic to "Open Discussion (Meeting topic: ironic)"15:37
TheJuliaso is everyone doing okay?15:37
dtantsurDo we need a virtual ironic (un)conference? :)15:37
TheJuliaI think it could be a good idea. Maybe have a rule for everyone to wear crazy hats?15:38
dtantsurWe could even have a post-conference beer-n-chat15:38
* iurygregory will use a pikachu hat15:38
TheJulia++15:38
dtantsuriurygregory: I need to see that!15:38
iurygregorydtantsur, hahahaha you can check on instagram =)15:39
* dtantsur will15:39
rpittauI still have my goofy hat from disneyland, can that work ?15:39
TheJuliaShall I put together a "un-conference video call, and bring your best crazy hat, and then enjoy a pint?"15:39
TheJuliaerr, a doodle15:39
iurygregoryTheJulia, ++15:39
TheJuliaExcellent!15:39
openstackgerritMerged openstack/sushy-cli master: Update commands to generate docs, renos and pdf  https://review.opendev.org/70682615:40
TheJuliaI like the idea of just trying to do it Wednesday or Thursday, personally15:40
dtantsurI'd take Friday, fewer meetings for me15:40
dtantsurbut we can doodle it15:41
TheJuliak15:41
TheJuliaWheee I have a jury summons coming in the mail :(15:41
dtantsurgreat time for that15:41
TheJuliaiurygregory: by the way, if you logout and log back into gerrit, you'll have some more rights on a few repos.15:42
etingofbtw, we have quite a lot of pending sushy-cli patches15:42
dtantsurTheJulia: I think refreshing a page is enough for iurygregory :)15:42
iurygregoryTheJulia, \o/15:42
iurygregoryetingof, I'll take a look15:42
TheJuliadtantsur: not for group memberships if memory serves15:42
dtantsurmmm, maybe15:42
dtantsurit's easy to check15:42
TheJuliayeah15:42
iurygregoryI can see after a f515:43
TheJuliaAnyway, is there anything else to dsicuss today?15:44
iurygregorythanks for the opportunity, I will do my best o/15:44
TheJuliaiurygregory: Thank you for being an active reviewer!15:45
rloo++++15:45
iurygregory=)15:46
TheJuliafor our unconference, shall I just send out a bluejeans link or something?15:46
*** dking_desktop has joined #openstack-ironic15:46
dtantsurworks for me15:47
TheJulia"The SPUC - Sanity Preservation Un-Conference" ?15:48
iurygregory++15:48
* TheJulia feels that is an ironic title if there ever was one15:48
dtantsurlol, like it15:48
dtantsurshall we announce it on the ML/twitter/etc or keep it more private?15:48
TheJuliaI was going to post it to the ML15:48
dtantsur++15:50
TheJuliaAnyway, I think we're done for the day! Thanks everyone and happy reviewing changes!15:50
TheJulia#endmeeting15:51
*** openstack changes topic to "Bare Metal Provisioning | Status: http://bit.ly/ironic-whiteboard | Docs: http://docs.openstack.org/ironic/ | Bugs: https://storyboard.openstack.org/#!/project_group/75 | Contributors are generally present between 6 AM and 12 AM UTC, If we do not answer, please feel free to pose questions to openstack-discuss mailing list."15:51
openstackMeeting ended Mon Mar 23 15:51:50 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:51
openstackMinutes:        http://eavesdrop.openstack.org/meetings/ironic/2020/ironic.2020-03-23-15.00.html15:51
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/ironic/2020/ironic.2020-03-23-15.00.txt15:51
openstackLog:            http://eavesdrop.openstack.org/meetings/ironic/2020/ironic.2020-03-23-15.00.log.html15:51
openstackgerritMerged openstack/bifrost master: Don't install python openwsman package  https://review.opendev.org/71445115:52
*** ijw_ has joined #openstack-ironic15:53
*** dsneddon has joined #openstack-ironic15:56
*** ijw has quit IRC15:57
openstackgerritIlya Etingof proposed openstack/ironic master: Add `network_data` field to ironic node object  https://review.opendev.org/68791016:08
*** ociuhandu has joined #openstack-ironic16:11
etingofa thought of network_data validation: the benefit of doing that within the boot interface is that we can have different validation schemata per node...16:18
*** ociuhandu has quit IRC16:18
TheJuliawell, driver class which could be overriden I guess: )16:18
dtantsuretingof: boot interface is certainly not the place, I guess you mean the deploy interface16:19
dtantsurmmm, I can see where you're coming from re boot interface..16:19
dtantsurthere is a bit of ambiguouty here.16:20
dtantsurboot interface is where you process the file, but it's agnostic to the exact ramdisk16:20
etingofI meant this -- https://github.com/openstack/ironic/blob/master/ironic/drivers/modules/redfish/boot.py#L58416:20
TheJuliathere is, but we've got precedence for "as more information" is populated validation checking16:20
TheJuliaThis is also true about the ramdisk16:20
dtantsurthe deploy interface is what is aware of IPA16:20
dtantsurbut it's not the code that actually touches network_data16:20
* dtantsur will probably just rely on etingof's best judgement16:21
TheJuliarealistically, there is no way to validate in advance because the machine would need to be up16:21
TheJuliatrue as well :\16:21
dtantsuryeah, it's still about a sanity check16:21
TheJuliaThat is quite a conundrum too16:21
dtantsurI'd stick it in the API for the sake of simplicity.. but I'm not going to -1 other reasonable approaches.16:21
TheJuliayeah, implementer is likely going going to have to find the best happy place16:22
dtantsuretingof: we've just delegated the decision to you :)16:22
TheJuliaetingof: congrats!16:22
openstackgerritMerged openstack/ironic master: Follow-up releasenote use_secrets  https://review.opendev.org/71443516:22
etingofdoes it make sense to account for different nodes using different ramdisks using different network data schemata?16:23
dtantsurnot much, really16:24
etingofif we do validation at the DB or API levels, then that ^ is impossible16:24
dtantsurit's not impossible, but chances are very high it will never happen16:24
dtantsurnow, I have an argument for doing it in the API layer16:24
dtantsurand a quite decisive with my API SIG hat on16:24
dtantsurif we do it there, we can version the schema16:24
dtantsuralthough.. now that I think about it, it's unlikely to ever change as well16:24
* dtantsur needs to grab a snack16:25
*** mbeierl has quit IRC16:27
TheJuliaBaremetal SIG doodle: https://doodle.com/poll/k4wnmuay34mvh94v16:27
*** mbeierl has joined #openstack-ironic16:30
* etingof is not certain how to version a JSON schema within ironic API considering that the schema (1) evolves independently and (2) is not versioned by itself...16:31
TheJuliado we version instance_info?16:33
TheJulianope16:33
TheJuliaWhile not "pefect", it is practical not to16:33
*** riuzen has joined #openstack-ironic16:33
TheJuliaperfect16:33
* TheJulia remembers the debates over this like 5 years ago16:33
TheJuliaor version driver_info? Which we CAN'T because 3rd party driver parameters16:33
riuzenGuys, what is the difference between flat and neutron when we define enabled_network_interfaces= ? Any reference I can read?16:34
TheJuliariuzen: https://docs.openstack.org/ironic/latest/install/configure-tenant-networks.html talks about it a little bit. the TL;DR flat is for preconfigured static networks where neutron just manages DHCP. neutron is for interface plugging/more dynamic networks where neutron actually manages switch configurations.16:37
openstackgerritChristopher Dearborn proposed openstack/ironic master: Fix issue where server fails to reboot  https://review.opendev.org/71449116:41
*** belmoreira has quit IRC16:43
etingofI think your decision to delegate this decision to me has been a questionable decision16:43
etingofI lean towards boot/deploy interface approach because it seems most flexible16:44
etingofsomehow I suspect that dtantsur does not share my gut feeling on this ;)16:45
riuzenTheJulia: So, I should choose neutron as network interface if I use openstack provider network?16:46
TheJuliariuzen: if it is static and preconfigured switch side and everything is just attached to the provider network, then I believe you'll want flat.16:47
iurygregoryrpittau, good news we have a fix for the ngs16:48
iurygregoryhttps://review.opendev.org/#/c/714410/16:49
patchbotpatch 714410 - networking-generic-switch - [WIP] Fix CI - 2 patch sets16:49
iurygregorywill change the commit message =)16:49
iurygregorykaifeng_, your patch will be good after this one merges https://review.opendev.org/#/c/714410/16:49
patchbotpatch 714410 - networking-generic-switch - [WIP] Fix CI - 2 patch sets16:49
* etingof goes for a walk in a gas mask16:50
* iurygregory wonders where etingof found masks to buy....16:50
* etingof read on the news that they set up vending machines in some cities 16:51
* TheJulia is hoping 3d printer stuffs will arrive soon to begin making masks16:51
iurygregoryetingof, WUT?!16:52
rpittauiurygregory: great news :)16:52
iurygregoryvending machines with masks ++16:52
openstackgerritIury Gregory Melo Ferreira proposed openstack/networking-generic-switch master: Fix CI  https://review.opendev.org/71441016:53
rpittaua bit late for carneval and a bit early for halloween for the masks16:53
iurygregoryrpittau, here it's mandatory, you can only go out if you are wearing a mask (need to have mouth and nose covered)16:54
JayFin the US they're telling people wearing a mask only helps if you're symptomatic, and doesn't help prevent transmission TO you16:55
JayFwhich isn't really accurate, but they're lying to try and save the masks for the medicial folks16:55
TheJuliaso much propganda...16:55
iurygregoryJayF, yeah, we can't use the medical ones here16:55
iurygregorybasically you can make your own mask using cotton clothes etc16:56
TheJuliaDoes anyone have filter effiency data for at home things like coffee filters, cotten rounds?16:56
riuzenTheJulia : Ok I'll try it. Thank you. I simulate it on top of KVM btw.16:56
TheJuliaI spent a few hours trying to find a 3d editor that didn't crash and didn't drive me crazy because I want to modify the face mask STL design that the ?PLACTIVE? folks published. Mainly also cartridge defect in that changing it requires lots of work.16:57
JayFI've just been staying inside and clorox wiping anything that gets delivered.16:58
iurygregoryhttps://twitter.com/BrnoNewsCTV/status/124210273417992601716:59
TheJulianice!16:59
TheJuliaJayF: Reasonable, but we've been struggling to get certain things like eggs/milk delivered so tactical missions to obtain supplies are going to become a thing if the supply lines still seem crazy.17:00
JayFWell, we'll go out to shop. Trying not to use grocery delivery services here as they are booked up, and Vanessa+I are not in the high risk group if we caught the virus anyway.17:01
JayF(like, grocery shop, occassionally, not going out all the time)17:01
TheJuliahttps://doodle.com/poll/krtn9p4z7xx9pa29 <-- For the Sanity Preservation Un-Conference17:07
JayFWhat is the purpose of this? Conversation and sanification of those who need it? Actual Ironic work?17:08
dking_desktopWhen trying "server create...", I get an error in Ironic conductor about "Could not find these security groups (specified via ironic config) in neutron", but the security group does exist in "openstack security group show". What are some things to check?17:08
rpittaugood night! o/17:08
*** rpittau is now known as rpittau|afk17:08
dtantsurJayF: both!17:09
*** lucasagomes has quit IRC17:10
iurygregorydking_desktop, the security group is set in the config?17:10
*** diga has quit IRC17:10
TheJuliaJayF: I just sent an email to openstack-discuss on the topic :)17:11
dking_desktopiurygregory: Yes, it's set in the ironic.conf for the ironic-conductor as the cleaning and provisioning network security group, as well as using it with the "server create" command.17:12
JayFI'm not on the openstack list these days, not enough time to drink in that firehose17:12
TheJuliaOh, its not a firehose...17:12
TheJuliadking_desktop: Sounds like your using the neturon network_interface and your missing the security group settings17:12
TheJuliaOkay, way more messages than I thought so still firehose-ey17:13
TheJuliahttp://lists.openstack.org/pipermail/openstack-discuss/2020-March/013521.html17:13
dking_desktopTheJulia: yes. Where would I set those?17:13
TheJuliadking_desktop: who owns the security groups?17:13
dking_desktopIt should be admin. I haven't setup any users manually yet.17:14
TheJuliacleaning_network_security_groups, provisioning_network_security_groups should both have UUIDs of the groups, and ensure that the ironic service user can see the security groups.17:15
*** jawad_axd has quit IRC17:17
dking_desktopAh, they need the UUIDs, and not the group names?17:17
TheJuliaI believe so17:17
TheJulianames are not unique in neutron17:17
dtantsuryeah, we support names for networks, but it's a bit risky17:18
dking_desktopThat seems frustrating as I won't know the UUIDs before deploy, and I deploy Ironic along with the rest of the services. So, I'd have to go back and edit the config after.17:18
TheJuliadking_desktop: oh..17:18
TheJuliano17:18
TheJuliaoh! your trying to do the ironic deploy dynamically?17:19
TheJuliayeah, you'll need to create the networks and populate them into the config17:19
TheJuliathat being said, really double check access because names should work, just are not the best way to handle it17:19
dking_desktopYeah, that, too. I'm using kolla-ansible for the deploy.17:19
dtantsurthe same chicken-and-egg problem that we had with tripleo17:21
dtantsurhence names for networks17:21
dking_desktopYeah. Eventually, I'd like to be able to use names for the deploy_kernel and deploy_ramdisk, too, for the same reason.17:22
dtantsurI hit this all the time, for some reason I assume we support them..17:23
iurygregoryand pray that the user won't use the same name again...17:23
*** gregwork has joined #openstack-ironic17:24
dking_desktopTheJulia: How would I check the access? I suppose shell into the ironic-conductor container and attempt to connect to neutron from there? Also, would it be different than when it deploy with network_interface=flat ? Because that works.17:25
TheJuliadking_desktop: use the same credentials in the ironic.conf to run `openstack network list`17:26
TheJuliadking_desktop: flat doesn't use security groups, so that is why it works17:26
TheJuliadking_desktop: you might want to skim through https://docs.openstack.org/ironic/latest/install/configure-tenant-networks.html if you haven't already17:32
dking_desktopAnd yes, with the creds from the ironic-conductor ironic.conf [neutron] section, I can connect and see the desired entries both in "openstack network list" and "openstack security group list"17:33
dking_desktopThank you. That's the guide where I saw to set those values.17:34
dking_desktopI might try to use the id instead, just in case, but the names are unique.17:35
*** dtantsur is now known as dtantsur|afk17:36
dtantsur|afkg'night17:36
*** ktibi_ has quit IRC17:40
openstackgerritJulia Kreger proposed openstack/ironic-python-agent master: Return false for MBR bootloader check on UEFI machines  https://review.opendev.org/71446817:41
*** mmethot_ has joined #openstack-ironic17:44
*** _mmethot_ has quit IRC17:46
openstackgerritArne Wiebalck proposed openstack/ironic-python-agent master: [trivial] Fix comment for Software RAID restart  https://review.opendev.org/71450317:56
*** riuzen has quit IRC17:56
openstackgerritMerged openstack/sushy-cli master: Add system/manager/chassis inventory show command  https://review.opendev.org/70600517:57
arne_wiebalckbye everyone o/18:01
*** derekh has quit IRC18:02
openstackgerritJulia Kreger proposed openstack/ironic master: Make deploy step failure logging indicate the error  https://review.opendev.org/71451118:19
TheJuliao/18:19
*** naved001 has quit IRC18:21
openstackgerritIury Gregory Melo Ferreira proposed openstack/ironic master: Add info on how to enable ironic-tempest-plugin  https://review.opendev.org/71290118:23
etingofshould we ship network_data schema with ironic? or leave that to the operator to take care about?18:24
etingofthe schema is (kind of) published on docs.openstack by now18:25
dking_desktopTheJulia: So, changing to the UUID instead of the name certainly did something. It got much further this time, and I fixed an error I found with the port. However, It is not telling me, in slightly different error message, that "Security group <UUID> does not exist".18:26
*** naved001 has joined #openstack-ironic18:27
dking_desktopThat is in the ironic-conductor logs. But again, I checked with the creds from its ironic.conf under [neutron], and I can connect, and I can even show that UUID.18:27
TheJuliaetingof: define define18:29
TheJuliaerr18:29
TheJuliasorry, define ship18:29
etingofrepo-wise18:29
etingofand package-wise later on18:29
TheJuliaetingof: an example in docs maybe18:29
etingofexample of the schema? nova schema is huge18:29
TheJuliaetingof: maybe simplified?18:30
TheJuliaminimal fields kind of thing?18:30
*** alexmcleod has quit IRC18:30
etingofnot really, hold on18:31
TheJuliaetingof: Maybe take the example data from bifrost?18:31
TheJuliaI'm thinking purely to help someone create their own, not everything possible18:31
*** k_mouza has quit IRC18:32
etingofhere it is -- https://github.com/openstack/nova/blob/master/doc/api_schemas/network_data.json18:32
TheJuliadking_desktop: is networking-baremetal running in neutron as well?18:32
etingofwhy would one want to create a schema while it's already done and functionally hardwired into glean/cloud-init18:32
etingofif I were an operator, I would just curl it down and use without even looking inside18:33
etingofthat schema is not feature-reach, it's just declarative syntax that takes up so much bytes...18:34
etingof*rich18:34
dking_desktopTheJulia: How do I check for networking-baremetal?18:34
TheJuliadking_desktop: it is another ml2 plugin18:35
dking_desktopTheJulia: Also, I just checked in neutron-server.log, and I can see the request coming in for the security group, and the log shows a success, and the DEBUG entry even shows all the whole security group info being sent back!18:35
TheJuliaetingof: I'm just thinking a practical operator example ought to be in documentation18:35
* etingof is confused18:36
TheJuliadking_desktop: where in the entire process is provisioning breaking down? I'm wondering if your vif might not be valid and if it is right at the end of the deploy process18:37
dking_desktopOh, no, that's not the security group info. That's just the info for the port. But the response is a 200.18:37
etingofI imagine the majority of the operators just take ironic ramdisk and go ahead... why would they be interested in messing with nova metadata schema?18:37
TheJuliaetingof: they need to provide schema compliant data to manually deploy18:37
TheJuliaso our friends in metal3 will need to create a json document that can be leveraged18:37
etingofwell, for that I'd just hlink nova docs18:38
TheJuliadking_desktop: so the port you have set as the vif is also viewable buy the account ironic is operating as?18:39
etingofe.g. https://docs.openstack.org/nova/latest/user/metadata.html#nova-metadata18:39
dking_desktopI'm not positive. I run "openstack server create ...", and I'm watching the ironic-conductor logs. I see that the conductor attaches to the node, and then moves the state to deploying, checks the power state, then unbinds instance ports, adds provisioning network, and then it requests the security group and neutron logs show a 200 response, and then ironic-conductor reports that the security group does not ex18:39
dking_desktop...unless the 200 response could include a not found response, I suppose.18:40
etingofthey have cut&paste network_data.json to serve as a prototype...18:40
TheJuliadk, it can18:40
TheJuliadking_desktop: 200 with an empty list18:41
etingofhowever the schema is something I'd never expect any sane person to ever look into18:41
dking_desktopThe port that I'm seeing is the "openstack baremetal port" entry. I did have another such port, but I removed it to just work with one.18:41
TheJuliaetingof: Yeah.... I was going to say something similar and then decided I needed more coffee18:41
TheJuliaI'e already demonstrated a lack of sanity18:41
*** k_mouza has joined #openstack-ironic18:41
etingofcoffee! I forgot my coffeepot on the oven!18:42
TheJuliaDOH!18:42
TheJuliaHopefully it will still return "418 I'm a teapot"18:44
dking_desktopOh, yes! I see it. The same server logs show the connection from ironic-conductor and also from my deploy host's "openstack" query. The successful one has a len of 2603, but the one from ironic has a len of 267. So, that's possibly where it fails.18:44
*** amoralej is now known as amoralej|off18:44
TheJuliadking_desktop: your on the right track!18:44
etingofwith the emergence of smart freezers, we need a new RFC for that18:44
TheJuliafeel free to post patches with more debug logging18:45
etingof*fridges18:45
dking_desktopThe query is a bit different, but I don't think that matters. Success: "GET /v2.0/security-groups/547caee8-1139-49b7-bd45-9549c34e30f9 HTTP/1.1"  Failed: "GET /v2.0/security-groups?fields=id&id=547caee8-1139-49b7-bd45-9549c34e30f9 HTTP/1.1"18:46
TheJuliaetingof: it is never too late to submit an April Fools RFC... just might not be posted until next year.18:46
*** k_mouza has quit IRC18:46
etingofanyway, my uncertainty is about the schema file (which is highly reusable), not network_data.json (which is indeed site-specific)18:46
TheJuliadking_desktop: interesting, we have to do the elongated query because some oeprators have huge lists of groups and the neutron query count was compounding to something absurd18:47
dking_desktopBoth give a status of 200. I'm assuming that rules out authentication issues.18:47
etingofthis schema, should we borrow it from nova and ship with ironic (in battery included spirit)?18:47
TheJuliabut not authorization to see18:47
TheJuliaetingof: likely a good idea18:47
etingofor rather point the operator to nova to grab from?18:47
dking_desktopYeah, I suspected that it was just limiting the response fields.18:47
dking_desktopI could try a tcpdump to see what's in the packets.18:48
*** kaifeng_ has quit IRC18:49
TheJuliaetingof: we don't control nova's docs, so likely best to copy and cross-link18:55
etingofwill etc/ironic be a reasonable location for schema file?18:56
TheJulialikely18:58
etingof10x18:58
TheJuliahjensas: does it make sense to block https://review.opendev.org/#/c/700002 on an ironic-inspector patch? or just note it? I know many don't re-inspect after starting out, but *shrug*19:02
patchbotpatch 700002 - ironic - Additional IP addresses to IPv6 stateful ports - 15 patch sets19:02
TheJuliahjensas: of course, ironic-inspector would need a patch for that too19:03
*** ricolin_ has quit IRC19:24
TheJuliatzumainn: hey, you around?19:25
dking_desktopTheJulia: So, I checked with tcpdump. I see that when Ironic checks, there's two requests sent to Neutron, with the same X-OpenStack-Request-ID. Shortly after that, I see two incomplete 200 responses going back to their respective ports. I see several incomplete packets. Then, finally, I see two complete 404 responses going back the the respective ports.19:45
dking_desktopI can't find the logs for the 404s. neutron-server logs only seem to show the 200s. I'm using kolla-ansible, so I'm using haproxy on the ports, but I don't know of anything else that would be causing a problem.19:47
TheJuliadking_desktop: if they are full length packet captures, it might be good to post because something is afoot :(19:48
*** jawad_axd has joined #openstack-ironic19:48
tzumainnTheJulia, yep! what's up?19:50
TheJuliaWith regards to 708678, that is just that the bind profile can't be updated by a non-admin user correct?19:54
TheJuliaerr, mac address I thought19:54
TheJuliatonyb: Have you heard of anyone trying to do software raid on a POWER machine with ironic?19:57
tzumainnTheJulia, I think so, yes - that's the one command that I updated in the patch, right?19:58
tzumainnohhhh should I be separating that out into two commands? one for the mac?19:59
TheJuliatzumainn: Eh, I _think_ so, differing rights and all. The huge concern I have is if a unprivilged user happens to know a vifid on another network, and requests their machine's port be bound to that other network.19:59
tzumainnTheJulia, yeah, that makes a ton of sense - okay, I have to re-setup my environment a bit, but I'll try and get an updated PR out soon20:00
TheJuliatzumainn: sorry :(20:00
tzumainnthanks for pointing that out!20:00
tzumainnoh, not at all20:00
tzumainnbetter to get it right :)20:00
tonybTheJulia: no but it's just linux at that point and I can't think of much in the I/O subsystem that'd make it any harder20:00
tonybTheJulia: why do you ask?20:01
TheJuliatzumainn: yeah, I'd rather not have a CVE filing against ironic :)20:01
TheJuliatonyb: https://review.opendev.org/#/c/696156/20:01
patchbotpatch 696156 - ironic-python-agent - Software RAID: Add UEFI support - 8 patch sets20:01
tonybTheJulia: I'll have a quick look I have a mild panic when thinking about GPT and power and /boot but I also think that's mostly history and the situation is okay now20:03
TheJuliatonyb: eek, didn't mean to cause mild panic20:04
TheJuliawell, I'm sure it is mild over other panics20:04
tonybTheJulia: I'll probably have some fairly "basic" and strange questions after I review it20:04
* TheJulia reloads the stats dashboard20:04
TheJuliatonyb: no worries20:04
* TheJulia clsoes the stats dashboard20:04
* tonyb had to write the initial GPT on power support in grub20:04
TheJuliatonyb: Well, I guess it is good I raised the question...20:05
tonybTheJulia: yes it is :)  Thank you20:07
dking_desktopTheJulia: http://paste.openstack.org/show/791047/ Sorry about all that info.20:08
dking_desktopThe security group ID is 547caee8-1139-49b7-bd45-9549c34e30f920:09
*** dougsz has quit IRC20:14
TheJuliadking_desktop: look at the post with the binding profile update "pology"20:16
TheJuliahmm, looks like console garbage from the output20:17
TheJuliadking_desktop: so binding_profile validation is failing somewhere deep inside of neutron and it is telling us the security group doesn't exist in that process :(20:18
dking_desktopWell, I captured it with tee.20:18
dking_desktopOh, that sounds interesting.20:19
JayFHave you ensured the Neutron SG shows up when doing an `openstack security group list` as *the exact user that Ironic is connecting to Neutron as*?20:19
TheJuliaJayF: they have, the packet captures between neutron and ironic show ironic sees the group20:19
JayFdamn :(20:19
TheJuliasomething in port binding is just going sideways on validation :(20:20
TheJuliaI suspect time to fire up neutron in debug mode and see if it dumps out the bnding data.20:20
JayFYou could add a subscriber, in neutron, to the port crud events and log what it's seeing20:20
TheJuliaand the process of enumerating through validations20:20
JayF(if neutron in debug doesn't give it away)20:20
dking_desktopI've already had neutron-server with debug=True. I think some of the logs I've shown had the DEBUG lines in them.20:21
dking_desktopOf course, those logs have a lot in them, so that's why I've been having to filter through it.20:21
TheJuliadking_desktop: what do you get if you grep for "req-fff2e8c2-d510-4f98-8d2b-4c18442283f0"20:22
dking_desktopI'm sure I've misconfigured something, since I've just been playing hit or miss with most of it. But at least I can say that things work well for the flat network.20:22
dking_desktopAbout 9 lines, which I can post if necessary, but I did see these relevant entries at the end: "default default] POST failed (client error): The resource could not be found." and "default default] No notification will be sent due to unsuccessful status code: 404 after /var/lib/kolla/venv/lib/python2.7/site-packages/neutron/pecan_wsgi/hooks/notifier.py:79", and then there's the 404 for "POST /v2.0/ports"20:24
*** jawad_axd has quit IRC20:28
*** jawad_axd has joined #openstack-ironic20:29
*** jawad_axd has quit IRC20:33
TheJuliarpioso: etingof: I've posted a couple comments on https://review.opendev.org/#/c/710751 and I'm wondering what the path forward is since I'm really confused about the current -1, as I suspect etingof may be as well.20:44
patchbotpatch 710751 - sushy - Add `set_system_boot_options` method - 4 patch sets20:44
TheJuliadking_desktop: I suspect it is time to ask in #openstack-neutron for insight :(20:45
dking_desktopOh, good point! Thank you so much for the help with this one so far. I didn't even really know where to begin when I started.20:46
TheJuliadking_desktop: I feel bad that I feel like we haven't been as much help as we could be, but the fact the exception is coming from deep inside neutron is kind of... worrisome.20:55
TheJuliaetingof: rpioso: I noticed an x/sushy-opem-idrac patch was added to the vendor priorities. Just FYI, ironic-core doesn't have privileges on that repo so I _suspect_ you both may need to take a look at it.20:55
dking_desktopYeah. I'm totally sure that I've just horribly set up some option. I just don't know how to find it from that end.20:55
dking_desktopThanks for the help.20:56
TheJuliadtantsur|afk: I kind of wonder if you should rebase your ipa change on top of the uefi software raid change in order to save headaches in the long run and just get the patches stacked for landing in rapid succession20:59
openstackgerritArne Wiebalck proposed openstack/ironic master: [doc] Add documentation for retirement support  https://review.opendev.org/71341021:19
openstackgerritMerged openstack/bifrost master: Fix dhcp job  https://review.opendev.org/71230421:22
JayF^^ I knew nothing about retirement, this is amazing!21:28
arne_wiebalckJayF: Thanks. Relatively simple change, but hopefully helpful for operators :)21:29
JayFI'm writing up an internal doc that is in that category of things, so it's just super timely.21:29
arne_wiebalckcategory of things == life cycle management?21:30
JayFyes, exactly21:34
JayFand I've often wanted a flag like that in the past -- for instnace, in OnMetal, we once had a customer report a hardware issue on an active machine, but they didn't want to reprovision to fix (it was a missing ram stick?)21:35
JayFso we could've flagged it retired, made sure it didn't get provisioned to anyone else, and fixed once torn down21:35
arne_wiebalckyes, there was a discussion about a "take-out-of-prod-for-a-while" flag ... in the end we decided this is different (so we called this one retirement), but it could be used of course :)21:37
JayFI mean, I can use the flag for whatever, no matter what it's called for21:37
JayFI sure as hell have put nodes in maintenance for things other than maintenancing them :P21:37
arne_wiebalckthere are also scoped introspection rules in the pipeline, this allows to store rules for different hardware types and avoids flushing all the rules in between (which is handy if you have a heterogeneous fleet to manage)21:37
arne_wiebalckoh, yes :-D21:37
arne_wiebalckhttps://review.opendev.org/#/c/702215/ in case you're interested21:39
patchbotpatch 702215 - ironic-inspector - Added scope to introspection rules. - 14 patch sets21:39
JayFI don't know enough about inspector (and never really have) to have an informed opinion on what that even means21:42
JayFbut I'm sure it's awesome :D21:43
arne_wiebalcklol21:43
openstackgerritMerged openstack/sushy-cli master: Add systems, managers and chassis listing commands  https://review.opendev.org/70646121:56
openstackgerritMerged openstack/sushy-cli master: Add system boot device/mode commands  https://review.opendev.org/70639221:56
openstackgerritMerged openstack/sushy-cli master: Add `--insecure` and `--tls-certificates` options  https://review.opendev.org/71205821:56
* etingof noticed a merge party is unfolding \o/22:00
openstackgerritMerged openstack/ironic-python-agent master: Explicitly set ramdisk type  https://review.opendev.org/71441922:01
openstackgerritVerification of a change to openstack/ironic-python-agent failed: [trivial] Fix comment for Software RAID restart  https://review.opendev.org/71450322:01
openstackgerritMerged openstack/ironic-prometheus-exporter stable/train: DevStack support and Redfish job  https://review.opendev.org/71140222:05
TheJuliayeessss... a merge party indeed22:05
TheJuliaer, yaaasss22:05
TheJuliaavoiding doing frustrating things, I did code review22:07
openstackgerritMerged openstack/ironic-prometheus-exporter master: Add documentation  https://review.opendev.org/71327422:07
TheJuliahjensas: fyi, tagged you on https://review.opendev.org/#/c/714212/22:08
patchbotpatch 714212 - ironic - "dual stack" support for PXE/iPXE - 7 patch sets22:08
etingofcodetherapy it is22:09
rpiosoTheJulia: Ack re: x/sushy-oem-drac patch.22:23
*** mbeierl has quit IRC22:23
*** mbeierl has joined #openstack-ironic22:32
*** ktibi_ has joined #openstack-ironic22:39
*** ktibi_ has quit IRC22:44
*** persia has quit IRC22:46
*** persia_ has joined #openstack-ironic22:47
hjensasTheJulia: regarding - https://review.opendev.org/#/c/700002 on an ironic-inspector patch?22:56
patchbotpatch 700002 - ironic - Additional IP addresses to IPv6 stateful ports - 15 patch sets22:56
hjensasTheJulia: I don't think we need anything in inspector. When inspection uses neutron networks the same code path adding multiple addresses in ironic is used. And in the other case we have a dynamic pool of addresses in the non-neutron dhcp server for inspection.22:57
*** tkajinam has joined #openstack-ironic22:57
TheJuliahjensas: the network_type field?23:31
hjensasTheJulia: if I get it right inspector does a "patch" when adding local_link_connection. So it should'nt overwrite the 'networ_type' field?23:33
hjensasTheJulia: I may be wrong there.23:33
TheJuliahjensas: I may have misunderstood your comment then23:34
hjensasTheJulia: my first iteration did'nt allow mixing network_type with a switch_id and port_id. I changed that so network_type can be mixed with other data.23:36
hjensasTheJulia: I will take another look at Inspector to check if it will overwrite the entire field, or just update/add the relevant keys.23:38

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!