Friday, 2020-10-23

*** anuradha1904 has quit IRC00:07
*** akiselev has joined #openstack-ironic00:16
*** w14161_ has joined #openstack-ironic00:17
openstackgerritMerged openstack/ironic master: Allow passing rootfs_uuid for the standalone case  https://review.opendev.org/75897000:18
*** w14161 has quit IRC00:20
TheJuliatrandles: \o/00:24
TheJuliatrandles: interesting considering power status, at least in upstream code points directly to chassis power status00:25
*** gyee has quit IRC00:44
openstackgerritlikui proposed openstack/ironic-python-agent master: update lower-constraints.txt  https://review.opendev.org/75923800:49
openstackgerritEric Xie proposed openstack/networking-generic-switch master: Limit netmiko not to use version 3.3.2  https://review.opendev.org/75933601:03
*** Goneri has quit IRC01:27
*** jawad_axd has joined #openstack-ironic01:54
*** jawad_axd has quit IRC01:58
*** Qianbiao has joined #openstack-ironic02:01
*** jawad_axd has joined #openstack-ironic02:15
*** jawad_axd has quit IRC02:20
*** jawad_axd has joined #openstack-ironic02:35
*** jawad_axd has quit IRC02:40
*** rcernin has quit IRC02:51
*** jawad_axd has joined #openstack-ironic02:56
*** jawad_axd has quit IRC03:01
*** jawad_axd has joined #openstack-ironic03:17
*** rcernin has joined #openstack-ironic03:19
*** rcernin has quit IRC03:19
*** rcernin has joined #openstack-ironic03:19
*** jawad_axd has quit IRC03:21
*** jawad_axd has joined #openstack-ironic03:38
*** jawad_axd has quit IRC03:42
*** ricolin has joined #openstack-ironic03:43
*** jawad_axd has joined #openstack-ironic03:58
*** jawad_axd has quit IRC04:03
*** pmannidi has joined #openstack-ironic04:26
*** sai438 has quit IRC04:28
*** jawad_axd has joined #openstack-ironic05:00
*** jawad_axd has quit IRC05:05
*** bhagyashris is now known as bhagyashris|sick05:09
*** happy-contrib-43 has quit IRC05:10
*** tzumainn has quit IRC05:26
openstackgerritKafilat Adeleke proposed openstack/sushy master: Adds sushy library overview  https://review.opendev.org/75790706:13
*** yolanda has quit IRC06:14
*** smutugrigg has joined #openstack-ironic06:19
smutugrigghi ironic o/06:19
smutugrigghi urygregory, I was wondering if I could ask for some assistance with my Outreachy application please?06:20
smutugriggsorry iurygregory06:20
*** rpittau|afk is now known as rpittau06:21
rpittaugood morning ironic! o/06:21
rpittauHappy Friday!06:21
*** Qianbiao has quit IRC06:32
*** jawad_axd has joined #openstack-ironic06:40
*** jtomasek has joined #openstack-ironic06:41
arne_wiebalckGood morning, ironic!06:48
rpittauhey arne_wiebalck :)06:54
arne_wiebalckhey rpittau, good morning!06:54
jandersgood morning rpittau o/06:55
jandersHappy Friday! :)06:55
jandershey arne_wiebalck06:55
arne_wiebalckhey janders o/06:55
jandersarne_wiebalck thanks for good questions at yesterday's session!06:56
arne_wiebalckjanders: did anyone answer already ... I haven't checked yet tbh :)06:57
*** Qianbiao has joined #openstack-ironic06:58
rpittauhey janders :)06:59
jandersarne_wiebalck we were answering in near-realtime07:00
jandersarne_wiebalck will go check if the answers got properly posted07:00
arne_wiebalckoh, rly, I had the chat open for 15mins or so but did not see any updated07:01
arne_wiebalckupdates07:01
arne_wiebalckbut I remember now someone telling me it sometimes requires to reload the page :-S07:01
jandersyeah we had to keep doing it to see the questions coming in07:02
jandersinsane07:02
jandersit looks like some of our answers are still there - but some (by Tim) disappeared (!)07:04
*** fgofurov has joined #openstack-ironic07:04
jandersactually I take this back07:04
jandersjust reshuffled, not disappeared07:04
*** hoonetorg has quit IRC07:07
*** hoonetorg has joined #openstack-ironic07:20
iurygregorygood morning Ironic07:24
iurygregorysmutugrigg, sure07:24
jandersgood morning iurygregory o/07:25
iurygregoryhey janders o/07:25
rpittauhey iurygregory :)07:26
ajyaGood morning, ironic07:26
iurygregoryrpittau, o/07:26
rpittauhey ajya :)07:26
iurygregoryhey ajya o/07:26
ajyajanders: can you take a look at this story - https://storyboard.openstack.org/#!/story/2004519 I left a comment there07:26
ajyahi, rpittau, iurygregory07:27
rpittauI thought there were more sessions of open infra today :/07:27
iurygregorysame07:27
rpittauanyone and everyone, if you have a minute, we really need this -> https://review.opendev.org/75780807:29
patchbotpatch 757808 - ironic-python-agent-builder - Use centos element for dib on focal - 2 patch sets07:29
iurygregoryI thought I had +2 things for ipa-b for focal at least one patch you mentioned =)07:30
iurygregoryI will look after one more coffee =D07:31
rpittauit was probably the one that depends on that07:32
* iurygregory facepalm hahah07:32
openstackgerritEmmanouil Bagakis proposed openstack/ironic-python-agent master: Updated Implementation of string interpolation delay on LOG messages  https://review.opendev.org/75920307:32
iurygregoryrpittau, done07:36
rpittauthanks iurygregory :)07:36
iurygregorynow we just need another core for https://review.opendev.org/#/c/757812/07:36
*** tosky has joined #openstack-ironic07:36
patchbotpatch 757812 - ironic-python-agent - Run dib ipa src jobs on ubuntu focal - 5 patch sets07:36
QianbiaoHi, may noline give a review on https://review.opendev.org/#/c/752006/ https://review.opendev.org/757606 https://review.opendev.org/75760707:40
patchbotpatch 752006 - ironic (stable/ussuri) - opt: Enhance old stable branches to use latest pyt... - 8 patch sets07:40
patchbotpatch 757606 - ironic (stable/train) - opt: Enhance old stable branches to use latest pyt... - 2 patch sets07:40
patchbotpatch 757607 - ironic (stable/stein) - opt: Enhance old stable branches to use latest pyt... - 3 patch sets07:40
*** jtomasek has quit IRC07:43
rpittauit seems we finished the audit \o/07:46
iurygregorybeer time07:47
iurygregory\o/07:47
rpittauoh I miss beer breakfast07:47
iurygregoryhahaha this would be normal in CZ XD07:47
rpittau:)07:48
smutugrigghi iurygregory, sorry was called away07:51
iurygregorysmutugrigg, np07:51
smutugriggI am trying to complete my final application and need to understnad if there are additional questions that Ironic would like me to answer?07:51
iurygregoryI know you need to record your contribution in the website to be eligible07:52
smutugriggYes I have completed that step07:53
smutugriggthe application is now asking if there is any provide any additional information that ironic would like me to probide as part of the application07:53
*** anuradha1904 has joined #openstack-ironic07:54
smutugriggIt has also asked me to build a Outreachy internship project timeline with a nominated mentor =)07:54
janderswrapping up for the day, have a great weekend everyone! o/07:56
arne_wiebalckjanders: yes, all answers are there ... seems like I simply missed to refresh the page!07:56
iurygregorysmutugrigg, let me look here07:56
jandersarne_wiebalck I really dont think you should need to07:56
smutugriggthanks07:56
arne_wiebalckjanders: sorry about this, and thanks for the answers!07:56
jandersarne_wiebalck platform FAIL!07:57
jandersarne_wiebalck you're most welcome!07:57
arne_wiebalckjanders: yeah!07:57
iurygregorysmutugrigg, I would mention how is your skill level for the technologies the project will use, this would help the reviewers08:00
*** DjeufackZane has joined #openstack-ironic08:00
smutugriggthanks iurygregory, do I need to create a timeline or is that something to work on if selected?08:02
iurygregoryI don't think it would be necessary08:03
iurygregoryI think the projects have already in ther description some timeline idea08:04
*** jtomasek has joined #openstack-ironic08:05
smutugriggthank iurygregory, then I might reference the timelines from the documenation provided if that is OK with you?08:05
iurygregoryyes08:05
smutugriggGreat thanks heaps iurygregory, as always, very much appreciated.08:06
smutugriggnight ironic o/08:14
*** smutugrigg has quit IRC08:16
*** jtomasek has quit IRC08:19
*** Qianbiao has quit IRC08:30
openstackgerrithuwenhui proposed openstack/ironic master: Fix the bug for updating the dhcp-ops of tenant ports unnecessarily with multiable tenant networks.  https://review.opendev.org/75937208:30
*** k_mouza has joined #openstack-ironic08:31
*** derekh has joined #openstack-ironic08:37
*** jawad_axd has quit IRC08:37
*** jawad_axd has joined #openstack-ironic08:38
anuradha1904Hello stevebaker, rpittau: What changes do I need to make in the following https://review.opendev.org/#/c/756682/8/ironic/common/driver_factory.py@131 patch? I am bit confused. Is there anything else to add?08:50
patchbotpatch 756682 - ironic - Changes to add exception in "default_interface()" ... - 9 patch sets08:50
*** Qianbiao has joined #openstack-ironic08:53
openstackgerritVerification of a change to openstack/ironic-python-agent-builder failed: Use centos element for dib on focal  https://review.opendev.org/75780809:01
*** jawad_ax_ has joined #openstack-ironic09:13
*** jawad_axd has quit IRC09:15
openstackgerritMerged openstack/ironic master: Use centos as base element for dib images  https://review.opendev.org/75781109:16
*** ociuhandu has joined #openstack-ironic09:19
arne_wiebalckI just learnt the hard way that the APIs cache the nodes' conductor affinity ... is there an option to control this (enable/disable, TTL, ...)?09:24
arne_wiebalckThis is sth to be aware of when you replace controller nodes without restarting all API s.09:25
*** DjeufackZane has quit IRC09:28
iurygregoryarne_wiebalck, ouch!09:34
arne_wiebalckIt *seems* that nova removes the resource provider if this happens, so it loses memory that this node exists. #bad09:41
*** ociuhandu has quit IRC10:08
rpittaummm arne_wiebalck I think that deserves at least a story in storyboard if you have the time10:08
arne_wiebalckrpittau: an RFE to make it controllable?10:09
rpittauwell I was thinking a "report" of the issue and yes, maybe an RFE could be a follow up, or just mix all together10:10
arne_wiebalckrpittau: maybe there should also be sth in the admin docs: "Replacing conductor nodes"10:10
rpittauarne_wiebalck: yep, that would be nice10:10
iurygregoryarne_wiebalck, ++10:15
arne_wiebalckhttps://storyboard.openstack.org/#!/story/200827710:19
rpittaugreat, thanks!10:20
*** k_mouza has quit IRC10:23
*** k_mouza has joined #openstack-ironic10:23
*** dtantsur|afk is now known as dtantsur10:39
dtantsurmorning/afternoon ironic10:41
dtantsurwow so much happened in the channel over night10:41
dtantsurTheJulia: re tripleo, flat networks and ironic https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/features/baremetal_overcloud.html is what I wrote long ago10:42
*** k_mouza has quit IRC10:43
iurygregorymorning dtantsur o/10:49
*** yolanda has joined #openstack-ironic10:57
*** Qianbiao has quit IRC11:02
*** k_mouza has joined #openstack-ironic11:13
*** k_mouza has quit IRC11:17
*** k_mouza has joined #openstack-ironic11:17
openstackgerritAnuradha proposed openstack/ironic master: Rewrite devstack/tools/ironic/scripts/create-node.sh in Python  https://review.opendev.org/75876211:24
*** Qianbiao has joined #openstack-ironic11:25
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Add CI jobs with Redfish and UEFI  https://review.opendev.org/74443411:43
*** thiagop has joined #openstack-ironic11:55
*** rh-jelabarre has joined #openstack-ironic11:59
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Add CI jobs with Redfish and UEFI  https://review.opendev.org/74443412:13
rpittaummm CI is taking friday afternoon off12:16
arne_wiebalckTheJulia: I promoted graphical consoles to the agenda for the PTG.12:28
dtantsurarne_wiebalck: is there anything to discuss?12:33
dtantsuror lemme put it a bit more direct: are you going to volunteer to do the work and need directions? :)12:33
arne_wiebalckdtantsur: did you check the item I put on the agenda?12:33
dtantsurarne_wiebalck: answer to the question there: yes!12:34
dtantsurI don't mind having a discussion too much, but I personally have nothing to add12:34
rpittauarne_wiebalck: they are what's been done so far, but  there might be some work to refactor the current console as well12:35
dtantsurmmm, the CI seems really broken now12:36
arne_wiebalckI was thinking it would be good to confirm that the patches are the starting point, and also to discuss initial steps/directions to pick up this work.12:36
rpittaudtantsur: yep12:36
dtantsursqlalchemy.exc.ArgumentError: column object 'temp_started_at' already assigned to table 'nodes'12:36
dtantsuryou're seeing the same ^^?12:36
rpittauI'm seeing a lot of errors with mirrors and package installation in general12:36
arne_wiebalckAnd to introduce ebagakis who will work on this.12:36
arne_wiebalckIt does not have to be long, more so that everyone is aware and on the same page.12:37
rpittauarne_wiebalck: that sounds good for a quick talk12:37
dtantsuryep12:37
arne_wiebalckdtantsur: rpittau: ++12:37
dtantsurrpittau: there was an upper-constraints update https://opendev.org/openstack/requirements/commit/d8d2e848ec057c47963d33dbd44479fc28e6f38b12:38
dtantsurit might have broken us12:38
rpittauoh didn't see that, I was actually talking about ubuntu and tinycore packages12:38
*** Qianbiao has quit IRC12:38
*** Qianbiao has joined #openstack-ironic12:39
rpittaubut yeah I see that could add some entropy to what was supposed to be a quiet friday12:39
*** k_mouza has quit IRC12:39
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Add CI jobs with Redfish and UEFI  https://review.opendev.org/74443412:44
*** Qianbiao has quit IRC12:48
*** Qianbiao has joined #openstack-ironic12:48
*** akiselev has quit IRC12:52
TheJuliafeedback session starting shortly12:55
TheJuliaAny objections to running the ?monday? session longer? or maybe doing a second session that day?12:55
*** akiselev has joined #openstack-ironic12:58
TheJuliahttps://summit.openinfra.dev/a/event/2480512:58
TheJuliaiurygregory: rpittau: I'm guessing from the spreadsheet that no oddities were found?12:59
rpittauTheJulia: no objections from me, just how much longer ? :)12:59
rpittauTheJulia: no weird things except for the twin patches13:00
TheJuliaThere was an interesting thought yesterday plus the ipmi or bmc proxy idea13:00
TheJuliarpittau: the merge ones?13:00
iurygregoryTheJulia, yeah =)13:00
TheJuliaonly on the victoria right?13:00
rpittauTheJulia: https://static.opendev.org/project/opendev.org/gerrit-diffs/openstack/python-ironicclient.git/master/0000.txt AND https://static.opendev.org/project/opendev.org/gerrit-diffs/openstack/python-ironicclient.git/master/0002.txt13:01
rpittaumaster on python-ironicclient13:01
rpittauthey were verified though, there was a quick chat on #opendev about that13:02
dtantsurTheJulia: morning. which sessions starts shortly? Oo13:03
openstackgerritDmitry Tantsur proposed openstack/ironic-inspector master: Fix database migrations with SQLAlchemy 1.3.20  https://review.opendev.org/75942013:04
dtantsurrpittau: fun ^^^13:04
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Add CI jobs with Redfish and UEFI  https://review.opendev.org/74443413:04
TheJuliadtantsur: summit feedback session13:05
*** Qianbiao has quit IRC13:05
rpittaudtantsur: they changed that in a minor release ? or was it deprecated ? oO13:05
dtantsurO_o13:05
*** Qianbiao has joined #openstack-ironic13:05
dtantsurrpittau: no idea, I'm about to file it13:05
rpittautoo many oO13:05
rpittauok13:05
rpittaunot even minor.... that's weird13:07
*** akiselev has quit IRC13:07
iurygregoryomg that was funny13:07
iurygregoryI'm watching from the session link not the zoom link13:08
iurygregorymusic time lol13:09
*** jawad_ax_ has quit IRC13:10
*** rloo has joined #openstack-ironic13:10
*** jawad_axd has joined #openstack-ironic13:11
*** jawad_axd has quit IRC13:12
iurygregorycrazy people =( bad =(13:12
*** jawad_axd has joined #openstack-ironic13:12
*** jawad_axd has quit IRC13:13
iurygregorydtantsur it's the feedback session13:13
*** ianychoi_ has joined #openstack-ironic13:13
*** jawad_axd has joined #openstack-ironic13:13
TheJuliaso we got trolled13:14
TheJuliabecasue I tweeted the zoom link13:14
TheJuliathey are getting a new url13:14
dtantsursigh13:14
rpittau:/13:14
TheJuliahttps://zoom.us/j/95495383034?pwd=b1FtQnNrY3h4eXo0RlhVKzdJQTVZQT0913:15
dtantsurokay, a report has been sent: https://github.com/sqlalchemy/sqlalchemy/issues/566913:16
*** ianychoi has quit IRC13:16
iurygregoryyeah =(13:17
dtantsuron the bright side: it seems to be reasonably doable to test secure boot on VMs13:18
dtantsur("reasonably", "UEFI", hahaha)13:18
*** akiselev has joined #openstack-ironic13:20
iurygregoryhahaha13:20
dtantsurbut according to the internet it boils down to which NVRAM variables you supply to the VM13:21
dtantsurand newer libvirt makes it easy to use, but RHEL 8 doesn't have newer libvirt..13:21
*** akiselev has quit IRC13:24
rpittauThis problem sounds familiar....13:24
*** priteau has quit IRC13:28
*** akahat has quit IRC13:29
*** stevebaker has quit IRC13:29
*** k_mouza has joined #openstack-ironic13:29
*** akahat has joined #openstack-ironic13:31
*** Qianbiao has quit IRC13:32
*** Qianbiao has joined #openstack-ironic13:33
TheJulia:(13:42
*** outbrito has joined #openstack-ironic13:42
openstackgerritAnuradha proposed openstack/ironic master: Rewrite devstack/tools/ironic/scripts/create-node.sh in Python  https://review.opendev.org/75876213:43
*** thiagop has quit IRC13:44
*** tzumainn has joined #openstack-ironic13:48
openstackgerritAija Jaunteva proposed x/sushy-oem-idrac master: [WIP] Update export, import configuration  https://review.opendev.org/75942513:50
*** k_mouza has quit IRC13:51
dtantsurUEFI in bifrost: VM boots and does exactly nothing. zero. no output, no actions. any ideas?13:51
TheJuliadtantsur: the firmware being used?13:53
TheJuliaethernet interface type?13:53
dtantsurTheJulia: identical to what we do in devstack13:53
dtantsursame13:53
TheJulia:\13:54
dtantsurTheJulia: generated VM XML if you want to check: https://69f02ed4a1f3a2992e8c-851002f2a2f4fd257d2d88d1bd1bf1ab.ssl.cf2.rackcdn.com/744434/13/check/bifrost-integration-redfish-uefi-ubuntu-focal/cb7f2ab/logs/testvm1_dump.xml13:54
TheJulia:(13:54
dtantsurmaybe 512M is too little?13:54
TheJuliawell, it was an idea13:54
TheJuliaoh, yeah, that is13:54
dtantsuralso pc-1.0 vs just pc, dunno13:54
dtantsur(this is re machine type)13:54
TheJuliapc-1.0, aiui, is just an alias13:54
dtantsurtrying13:58
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Add CI jobs with Redfish and UEFI  https://review.opendev.org/74443413:58
openstackgerritAija Jaunteva proposed openstack/ironic master: [WIP] Add import, export configuration to idrac-redfish  https://review.opendev.org/75942814:00
*** jawad_axd has quit IRC14:00
fgofurovdtantsur: there is a teams problem while we are admitting you to join the meeting14:02
*** k_mouza has joined #openstack-ironic14:03
dtantsurfgofurov: yep, seems so14:03
fgofurovCan you please join metal3 community meeting14:03
fgofurovHere is the link: https://zoom.us/j/97255696401?pwd=ZlJMckNFLzdxMDNZN2xvTW5oa2lCZz09#success14:03
TheJuliareviews on trying to fix uefi via ipmi would be appreciated14:04
TheJuliahttps://review.opendev.org/#/c/757198/14:04
patchbotpatch 757198 - ironic - IPMI: Handle vendor set boot device differences - 4 patch sets14:04
* iurygregory looks14:04
dtantsurrpittau, iurygregory: if you're curious, the meeting above is about conductor scaling with metal314:05
iurygregoryjoined14:05
fgofurovyeah, welcome whoever interested14:05
rpittauI actually need to leave now, have a great weekend everyone o/14:05
*** rpittau is now known as rpittau|afk14:06
TheJuliaerbarr: is dell ci happier today?14:09
*** k_mouza has quit IRC14:14
*** jawad_axd has joined #openstack-ironic14:20
*** k_mouza has joined #openstack-ironic14:23
Qianbiao TheJulia I have a quick review with  https://review.opendev.org/#/c/757198/, is the patch need a special code from every vendor?14:32
patchbotpatch 757198 - ironic - IPMI: Handle vendor set boot device differences - 4 patch sets14:32
Qianbiaolike Huawei will have a special code too? Should I provide a code for that.14:33
TheJuliaI don't think so unless there is a special need14:33
TheJuliaSupermicro is the one that we *know*14:33
TheJuliacisco MAY be another, but I don't have enough info14:33
Qianbiaoaha, ok. Only special vendor need a special code.14:33
TheJuliayup14:33
Qianbiaogotcha ty14:34
*** Goneri has joined #openstack-ironic14:42
dtantsurTheJulia: (re UEFI) increased RAM, set machine_type=pc, no luck15:04
openstackgerritJay Faulkner proposed openstack/ironic-python-agent master: Allow manual setting of Ironic API Version  https://review.opendev.org/75945115:05
* dtantsur is very suspicious of ^^15:06
JayFdtantsur: is that a reference to my patch :D I'm happy to chat about it15:07
dtantsurJayF: I haven't looked at it yet, but manually setting microversions is one of the things that are considered no-no in most of cases, hence my suspicions15:08
JayFWe have a use case for this -- a given node's API access to Ironic in our environment is restricted by an intermediate proxy. Enabling "/" on that proxy makes it significantly more discoverable that an Ironic API lives behind it.15:09
JayFSo by allowing this value to be set manually -- and disable autodetection -- we avoid having to open up more API surface area to the networks that our nodes are on.15:09
JayFFWIW, TheJulia was on board with this feature yesterday. I'm happy to have a more in-depth discussion about it though.15:11
dtantsuroh hmm15:12
TheJuliayeah15:12
dtantsuryeah, a bit exotic case, but I guess it's justified here15:12
TheJuliasuper high security environments are not going to want any unauthenticated discovery15:12
dtantsurnote that you can also get microversions from headers15:13
JayFI also discovered that IRONIC_MIN_API_VERSION == the API version I run IPA against :D15:13
dtantsurheh15:13
JayFso I hope Julia never gets around to that TODO to bump it, at least not until I bump my whole environment :D15:13
dtantsurbut yeah, GET /v1/lookup will likely give you microversions too15:13
TheJuliame, get back to TODOs... HAHAHAHAHAHAHA15:13
JayFThat was one of the things I considered when thinking about patching it downstream, but I thought this solution is cleaner15:14
JayFespecially since if set with the kernel CLI, it's trivial to bump it simultaneous with an Ironic upgrade15:14
JayFTheJulia: todo(eventually): ...15:14
dtantsurJayF: what exactly are you trying to hide? won't /v1/lookup expose it just as well?15:14
JayFdtantsur: first of all, I like the way julia put it15:14
JayF> super high security environments are not going to want any unauthenticated discovery15:14
dtantsuryep, but what can you discover there that you cannot discover through /v1/lookup?15:15
JayFsecondly, assuming a case with a bad actor on the network, scanning for interesting services/apis15:15
JayFthey won't even *know* to go to /v1/lookup, or that an Ironic API lives somewhere behind that IP15:15
JayFit's about discoverability15:15
dtantsurso you can just bind ironic API to /banana/v1 :)15:15
JayFif you say "hey, I'm an Ironic API of Ocata version", then the attacker knows, for  absolutely free, that they can hit /v1/lookup and get node information15:15
dtantsurI'm not going to block the patch, just seems like you can achieve it easier by binding ironic API to some weird root15:16
JayFdtantsur: that's kinda fair, but I  don't think this patch is too crazy, and you know as well as I do that moving my Ironic API to /banana/ is the sort of pain I won't be able to endure15:16
dtantsurheh15:16
dtantsurright, okay, I'm fine with that as long as it carries a warning "do not use unless you really know what you're doing"15:16
JayFThe real fix for this problem is https://specs.openstack.org/openstack/ironic-specs/specs/not-implemented/no-ipa-to-conductor.html15:17
JayFWhich we just don't have time to implement right now, but remains on the radar generally here15:17
JayFdtantsur: ++ I can put a warning label on it, that's sensible15:17
dtantsurcool15:18
dtantsurfor those curious: lookup does expose microversions: http://paste.openstack.org/show/799324/15:18
arne_wiebalckbye everyone, have a good weekend o/15:19
JayFyou know, there is an alternate fix for this then15:19
JayF /v1/lookup has not changed payload in all our versions15:19
JayFwe could just always do lookup at MIN_IRONIC_VERSION, and glean the api microversion without an additional request15:19
JayFbut it's /probably/ bad to assume that /v1/lookup won't ever change15:19
dtantsurwe can think about it when it does15:20
dtantsuror use the try-fallback approach15:20
JayFI'm a big fan of my current approach for one big reason: it's already done, with a unit test, just needs a reno and it's done.15:20
dtantsurheh, okay15:21
JayFbut I could see a strong argument that doing our detection against /v1/lookup (or circumventing that detection altogether as described above) would be a better answer15:21
dtantsurat the very least, an ability to hardcode a version is useful for testing15:21
JayF++15:21
JayFdtantsur: is this a sufficient "stay away" in the reno? >Deployers in highly-secure environments can now manually set Ironic API version instead of relying on unauthentication autodetection via ipa-ironic-api-version on the kernel command line. This is not a reccomended configuration.15:24
openstackgerritJay Faulkner proposed openstack/ironic-python-agent master: Allow manual setting of Ironic API Version  https://review.opendev.org/75945115:26
openstackgerritMerged openstack/python-ironicclient master: Update create node from file example  https://review.opendev.org/75912415:29
*** Qianbiao has quit IRC15:30
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Stop using deprecated iPXE parameters  https://review.opendev.org/75945815:34
dtantsurJayF: probably fine, yes15:34
JayFThanks! I wouldn't have put the warning in there.15:34
JayFI always assumed, I guess maybe a bad assumption, that most deployers don't go looking for IPA config options unless they know what they need.15:34
JayFBut I have absolutely zero perspective  on what it's like to be a non-ironic-dev deploying Ironic :D15:34
dtantsursome people like trying random stuff in hope it fixes their vaguely related problems15:35
JayFmakes sense15:35
JayFI will say, in my case, the fallback 100% worked15:35
JayFI just couldn't leave that traceback on every request. It would've been cruel to the ops who would've chased that wild goose every time.15:35
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Add CI jobs with Redfish and UEFI  https://review.opendev.org/74443415:36
dtantsurmaybe UEFI doesn't work because we have displays and VNC in testing VMs?15:38
openstackgerritMerged openstack/ironic-python-agent-builder master: Use centos element for dib on focal  https://review.opendev.org/75780815:38
dtantsurI'm fully in the wild uninformed guesses territory15:38
openstackgerritJay Faulkner proposed openstack/ironic-python-agent master: Allow manual setting of Ironic API Version  https://review.opendev.org/75945115:38
dtantsurbrb, thanks Intel for DSP drivers that panic every week at least once15:41
JayFdtantsur: Has someone just tried spinning up a devstack and getting one of those VMs running UEFI manually?15:41
dtantsurJayF: it Works In DevStack already15:42
JayFah, trying to do it in standalone?15:42
dtantsurI'm trying the seemingly same thing in Bifrost now15:42
JayFI see15:42
dtantsurand yeah, I'll poke it locally now15:42
dtantsurafter the reboot (grrrr)15:42
* JayF knows very little about UEFI, just trying to rubber-duck15:43
*** DjeufackZane has joined #openstack-ironic15:44
*** gyee has joined #openstack-ironic15:48
TheJuliaJayF: dtantsur: I have, but ages ago :(15:57
dtantsurUnknown error when attempting to call Galaxy at 'https://galaxy.ansible.com/api/': The read operation timed out16:01
dtantsuroh ffs16:01
dtantsur"msg": "Request failed: <urlopen error timed out>", "url": "https://download.cirros-cloud.net/0.5.1/cirros-0.5.1-x86_64-disk.img"16:04
* dtantsur flips table and leaves16:04
clarkbwe should cache the cirros image on our test nodes fwiw16:08
dtantsurwe do, it's local16:08
*** w14161_ has quit IRC16:09
dtantsuraaand same story locally: a completely empty console log. nothing. no traces.16:09
*** w14161 has joined #openstack-ironic16:10
* dtantsur is seriously lost16:14
TheJulia:(16:33
TheJuliacalling and being reliant upon galaxy being up is sligtly alarming :(16:39
*** k_mouza has quit IRC16:40
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Stop using deprecated iPXE parameters  https://review.opendev.org/75945816:49
*** akiselev has joined #openstack-ironic16:49
*** arne_wiebalck_ has joined #openstack-ironic16:50
*** phrobb_ has joined #openstack-ironic16:50
*** DjeufackZane has quit IRC16:51
*** ianw has quit IRC16:51
*** persia_ has joined #openstack-ironic16:51
*** jawad_axd has quit IRC16:52
*** persia has quit IRC16:57
*** arne_wiebalck has quit IRC16:57
*** phrobb has quit IRC16:57
*** patchbot has quit IRC16:57
*** ajya has quit IRC16:57
*** arne_wiebalck_ is now known as arne_wiebalck16:57
*** phrobb_ is now known as phrobb16:57
*** patchbot has joined #openstack-ironic16:58
dtantsuranother issues in the inspector CI \o/17:02
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Add CI jobs with Redfish and UEFI  https://review.opendev.org/74443417:02
dtantsurif somebody who still has sanity wants to lose it:https://zuul.opendev.org/t/openstack/build/84fb9312c09e4048b53985d381c4c017/log/controller/logs/screen-ironic-inspector-api.txt#72417:10
dtantsurironic-inspector-api cannot talk to memcached17:10
dtantsuron this positive note I'm wishing you a great weekend17:12
*** dtantsur is now known as dtantsur|afk17:12
TheJuliahave a wonderful weekend dtantsur|afk17:12
NobodyCamGood Morning Ironic folks17:13
TheJuliaNobodyCam: I think it is post-summit nap time, tbh17:13
NobodyCamHave a good weekend dtantsur|afk17:13
NobodyCam:)17:13
TheJuliaI kind of really want to, I have 3 hours until my next meeting17:13
NobodyCamoh yea I was a down circuit issue until like 3 am, so I would vote for nap time17:14
*** ianw has joined #openstack-ironic17:23
TheJuliaugh17:26
*** derekh has quit IRC17:33
openstackgerritJulia Kreger proposed openstack/ironic-tempest-plugin master: Tear down raid sets  https://review.opendev.org/75714117:55
openstackgerritMerged openstack/ironic stable/train: DRAC: Fix RAID create_config clean step  https://review.opendev.org/75060518:15
openstackgerritJulia Kreger proposed openstack/ironic-python-agent master: Support partition image efi contents  https://review.opendev.org/74804918:16
*** fgofurov has quit IRC18:22
*** outbrito has quit IRC18:30
*** ociuhandu has joined #openstack-ironic18:36
openstackgerritJulia Kreger proposed openstack/ironic-python-agent master: Add fstab pointer to EFI partition  https://review.opendev.org/74826018:37
anuradha1904Hi TheJulia: For the patch https://review.opendev.org/#/c/758762/ , the CI build for requirements is failing even when after locally testing, the local-constraints are successful, I am doing the local test using the command `tox -r -vv -e lower-constraints`, what can possibly be the problem here?18:46
anuradha1904I have fixed the pep8 issues that were earlier mentioned in the review. Thank you very much for your help.18:46
patchbotpatch 758762 - ironic - Rewrite devstack/tools/ironic/scripts/create-node.... - 5 patch sets18:46
anuradha1904lower-constraints*18:47
clarkbanuradha1904: I think you need to drop the comments in the lower-constraints file so it is just the package name and version specifier18:59
clarkbhttps://zuul.opendev.org/t/openstack/build/e85909deade341b8a19707179055447c/log/job-output.txt#814-817 shows you that the comparison doesn't match because of the extra info there19:00
akiselevHi TheJulia: I added two stories on logs filename format as we discussed yesterday: https://storyboard.openstack.org/#!/story/2008280 Add node name to ironic-inspector ramdisk log filename and https://storyboard.openstack.org/#!/story/2008281  Add node name to ironic-conductor ramdisk log filename19:03
anuradha1904okay, got it, will remove it then. Is there however any way to test the changes, because while testing using `tox -r -vv -e lower-constraints`, I did not face any problem locally ?19:03
anuradha1904clarkb: Thank you very much for your help.19:04
openstackgerritJulia Kreger proposed openstack/ironic-python-agent master: Add fstab pointer to EFI partition  https://review.opendev.org/74826019:06
clarkbanuradha1904: https://zuul.opendev.org/t/openstack/build/e85909deade341b8a19707179055447c/console#2/0/15/ubuntu-bionic that shows you the command that was run: `src/opendev.org/openstack/requirements/playbooks/files/project-requirements-change.py src/opendev.org/openstack/ironic master`19:07
openstackgerritVerification of a change to openstack/ironic-python-agent failed: Run dib ipa src jobs on ubuntu focal  https://review.opendev.org/75781219:13
*** ociuhandu has quit IRC19:14
anuradha1904clarkb: I am sorry, can you elaborate a bit, how to run the command locally? I did not understand the command structure. Is there documentation to refer to this information? Thank you.19:16
clarkbanuradha1904: this is a centralized job to ensure consistency with the openstack/requirements project. So what it does is runs the playbooks/files/project-requirements-change.py script from the openstack/requirements project19:21
clarkbthe requirements project may have docs on running thsi locally, I'm not sure19:21
anuradha1904clarkb: oh got it now, thank you very much.19:22
iurygregoryanuradha1904, after you clone the requirements repository if you just need to do the following19:24
iurygregoryhttp://paste.openstack.org/show/799339/19:25
anuradha1904iurygregory: Thank you very much.19:26
openstackgerritRuby Loo proposed openstack/ironic-specs master: move node from rebuild 'deploy failed' to 'active'  https://review.opendev.org/75951119:27
TheJuliarloo: my brain just twitched a little19:37
TheJuliarloo: fwiw, I think it is needed19:39
TheJuliaI'm just worried about misuse19:39
*** rcernin has quit IRC19:55
openstackgerritAnuradha proposed openstack/ironic master: Changes to add exception in "default_interface()" function  https://review.opendev.org/75668220:01
rlooTheJulia: yeah. i dunno. we had discussed at last PTG and I felt the need to get that written before this upcoming PTG cuz... shame on me for volunteering and not doing it :-(20:11
rlooTheJulia: i figure if nova has such a thing, then it would be ok in ironic. but we can discuss :)20:12
openstackgerritRuby Loo proposed openstack/ironic-specs master: move node from rebuild 'deploy failed' to 'active'  https://review.opendev.org/75951120:15
TheJuliaI swear I did that in the early TripleO days...20:39
TheJuliaat least, used it that way20:39
TheJuliabut it is all a blur20:40
*** vesper has joined #openstack-ironic20:44
*** bhagyashris has joined #openstack-ironic20:47
*** ianw has quit IRC20:50
*** patchbot has quit IRC20:50
*** Goneri has quit IRC20:50
*** bfournie has quit IRC20:50
*** bhagyashris|sick has quit IRC20:50
*** vesper11 has quit IRC20:50
*** sdanni has quit IRC20:50
*** ianw has joined #openstack-ironic20:50
*** patchbot has joined #openstack-ironic20:50
*** Goneri has joined #openstack-ironic20:50
*** bfournie has joined #openstack-ironic20:50
*** sdanni has joined #openstack-ironic20:50
akiselevTheJulia: PTAL https://storyboard.openstack.org/#!/story/2008280 https://storyboard.openstack.org/#!/story/200828120:50
*** sdanni has quit IRC20:53
*** ociuhandu has joined #openstack-ironic21:14
openstackgerritRuby Loo proposed openstack/ironic-specs master: move node from rebuild 'deploy failed' to 'active'  https://review.opendev.org/75951121:16
*** ociuhandu has quit IRC21:19
TheJuliaakiselev: lgtm, Have a good weekend21:20
openstackgerritVerification of a change to openstack/ironic-python-agent failed: update lower-constraints.txt  https://review.opendev.org/75923821:21
*** rajinir has quit IRC21:25
akiselevTheJulia: Thank you! Have a nice weekend!21:29
*** bdodd_ has quit IRC21:44
*** rcernin has joined #openstack-ironic22:00
*** akiselev has quit IRC22:09
*** rloo has quit IRC22:14
*** anuradha1904 has quit IRC22:39
*** k_mouza has joined #openstack-ironic22:42
*** k_mouza has quit IRC22:46
*** rcernin has quit IRC22:59
*** bdodd has joined #openstack-ironic23:45
*** tosky has quit IRC23:46
*** rcernin has joined #openstack-ironic23:50

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!