| *** k_mouza has quit IRC | 00:01 | |
| *** jdandrea has joined #openstack-ironic | 00:02 | |
| *** rcernin has joined #openstack-ironic | 00:03 | |
| *** jdandrea has quit IRC | 00:04 | |
| *** MentalSiege has quit IRC | 00:11 | |
| *** rcernin has quit IRC | 00:24 | |
| *** rcernin has joined #openstack-ironic | 00:27 | |
| *** rcernin has quit IRC | 01:18 | |
| *** k_mouza has joined #openstack-ironic | 01:32 | |
| *** browzing has joined #openstack-ironic | 01:32 | |
| *** browzing has left #openstack-ironic | 01:46 | |
| *** browzing has joined #openstack-ironic | 01:47 | |
| *** rcernin has joined #openstack-ironic | 01:55 | |
| *** k_mouza has quit IRC | 01:58 | |
| *** rcernin has quit IRC | 02:02 | |
| *** rcernin has joined #openstack-ironic | 02:15 | |
| *** Qianbiao has joined #openstack-ironic | 02:16 | |
| *** zzzeek has quit IRC | 02:19 | |
| *** rcernin has quit IRC | 02:20 | |
| *** zzzeek has joined #openstack-ironic | 02:22 | |
| *** rcernin has joined #openstack-ironic | 02:23 | |
| *** ociuhandu has joined #openstack-ironic | 02:24 | |
| *** ociuhandu has quit IRC | 02:28 | |
| *** rcernin has quit IRC | 02:38 | |
| *** zzzeek has quit IRC | 02:49 | |
| *** zzzeek has joined #openstack-ironic | 02:51 | |
| *** rloo has quit IRC | 02:57 | |
| *** rcernin has joined #openstack-ironic | 03:34 | |
| *** rcernin has quit IRC | 03:39 | |
| *** k_mouza has joined #openstack-ironic | 03:58 | |
| *** k_mouza has quit IRC | 04:03 | |
| *** Qianbiao has quit IRC | 04:20 | |
| *** pmannidi_ has quit IRC | 04:33 | |
| *** pmannidi has joined #openstack-ironic | 04:40 | |
| *** rcernin has joined #openstack-ironic | 05:18 | |
| *** rcernin has quit IRC | 05:26 | |
| *** rcernin has joined #openstack-ironic | 05:40 | |
| *** rcernin has quit IRC | 05:45 | |
| *** uzumaki has quit IRC | 05:52 | |
| *** gyee has quit IRC | 06:07 | |
| *** rcernin has joined #openstack-ironic | 06:09 | |
| *** uzumaki has joined #openstack-ironic | 06:14 | |
| *** tzumainn has quit IRC | 06:16 | |
| *** moshiur has joined #openstack-ironic | 06:32 | |
| *** rcernin has quit IRC | 06:49 | |
| *** spotz has quit IRC | 06:54 | |
| *** antonym has quit IRC | 06:56 | |
| *** antonym has joined #openstack-ironic | 06:57 | |
| *** xinliang has joined #openstack-ironic | 07:12 | |
| *** rcernin has joined #openstack-ironic | 07:38 | |
| *** Qianbiao has joined #openstack-ironic | 07:54 | |
| arne_wiebalck | Good morning, ironic! | 07:56 |
|---|---|---|
| *** rpittau|afk_ is now known as rpittau | 07:57 | |
| rpittau | good morning ironic! o/ | 07:57 |
| *** rcernin has quit IRC | 08:17 | |
| *** rcernin has joined #openstack-ironic | 08:42 | |
| *** tosky has joined #openstack-ironic | 08:45 | |
| *** rcernin has quit IRC | 08:46 | |
| *** ociuhandu has joined #openstack-ironic | 08:56 | |
| *** ociuhandu has quit IRC | 08:58 | |
| *** ociuhandu has joined #openstack-ironic | 08:59 | |
| *** lucasagomes has joined #openstack-ironic | 09:02 | |
| *** ociuhandu has quit IRC | 09:19 | |
| *** ociuhandu has joined #openstack-ironic | 09:25 | |
| *** rcernin has joined #openstack-ironic | 09:27 | |
| *** ociuhandu has quit IRC | 09:30 | |
| arne_wiebalck | Re-installing (or rebuilding instances) with Ironic: is there a way to protect other disks on the system and ensure the same disk as before is picked for the image? | 09:44 |
| *** derekh has joined #openstack-ironic | 09:44 | |
| arne_wiebalck | Use case is reinstalling a data server without draining it first. | 09:44 |
| *** rcernin has quit IRC | 09:45 | |
| *** ociuhandu has joined #openstack-ironic | 09:54 | |
| *** rcernin has joined #openstack-ironic | 09:58 | |
| *** k_mouza has joined #openstack-ironic | 09:59 | |
| *** k_mouza has quit IRC | 10:03 | |
| *** dtantsur|afk is now known as dtantsur | 10:18 | |
| dtantsur | morning ironic | 10:18 |
| *** rcernin has quit IRC | 10:27 | |
| *** ricolin has quit IRC | 10:28 | |
| xinliang | morning dtantsur | 10:32 |
| dtantsur | folks, looking for a 2nd +2 on https://review.opendev.org/c/openstack/ironic/+/769961 | 10:33 |
| rpittau | dtantsur: I have that in my list, I'll check it now | 10:41 |
| dtantsur | thank you! | 10:41 |
| *** derekh has quit IRC | 10:46 | |
| *** tosin has joined #openstack-ironic | 10:46 | |
| *** uzumaki has quit IRC | 10:48 | |
| *** xinliang has quit IRC | 10:58 | |
| iurygregory | good morning Ironic o/ | 10:58 |
| *** rcernin has joined #openstack-ironic | 11:04 | |
| *** k_mouza has joined #openstack-ironic | 11:05 | |
| *** rpittau is now known as rpittau|bbl | 11:09 | |
| dtantsur | iurygregory: if you have a minute today, would be good to request a sushy victoria release (unless you have already) | 11:15 |
| *** mkowalski has quit IRC | 11:19 | |
| *** mkowalski has joined #openstack-ironic | 11:31 | |
| *** rcernin has quit IRC | 11:35 | |
| *** Rahman has joined #openstack-ironic | 11:47 | |
| *** moshiur has quit IRC | 11:49 | |
| iurygregory | dtantsur, my bad I had the change locally and I forgot to push | 11:52 |
| * iurygregory just got back from breakfast =) | 11:52 | |
| iurygregory | here we go https://review.opendev.org/c/openstack/releases/+/772504 | 11:53 |
| iurygregory | I did only for victoria | 11:53 |
| dtantsur | yep | 12:12 |
| *** ociuhandu has quit IRC | 12:19 | |
| *** ociuhandu has joined #openstack-ironic | 12:19 | |
| tosin | Hello Ironic! I've tried running tox -e linters but I keep getting this error | 12:24 |
| tosin | http://paste.openstack.org/show/801983/ | 12:24 |
| *** ociuhandu has quit IRC | 12:24 | |
| tosin | I've installed tox, is there anything else I'm missing? | 12:24 |
| dtantsur | mmm, python3-venv? | 12:24 |
| dtantsur | if on ubuntu or a derivative | 12:24 |
| dtantsur | otherwise python3-virtualenv, I guess | 12:25 |
| openstackgerrit | Merged openstack/ironic master: Common framework for configuring secure boot https://review.opendev.org/c/openstack/ironic/+/769961 | 12:25 |
| tosin | OK I'll try that. thank you | 12:25 |
| *** ricolin has joined #openstack-ironic | 12:34 | |
| tosin | dtantsur: still getting the same error | 12:37 |
| dtantsur | interesting. which system are you on? did you try installing both packages (venv and virtualenv)? | 12:39 |
| *** ociuhandu has joined #openstack-ironic | 12:56 | |
| tosin | ubuntu system | 12:59 |
| tosin | yes i installed venv | 12:59 |
| *** rpittau|bbl is now known as rpittau | 12:59 | |
| tosin | couldn't install virtualenv | 13:00 |
| *** dsneddon has quit IRC | 13:03 | |
| *** rh-jelabarre has joined #openstack-ironic | 13:04 | |
| iurygregory | strange .-. | 13:14 |
| tosin | it's probably a problem with my system. trying to troubleshoot | 13:15 |
| iurygregory | https://docs.openstack.org/ironic/latest/contributor/dev-quickstart.html#python-prerequisites did you try like this? | 13:16 |
| *** dougsz has joined #openstack-ironic | 13:18 | |
| rpittau | tosin: interesting, which project are you running that on? | 13:20 |
| tosin | rpittau: ansible collections | 13:21 |
| tosin | https://opendev.org/openstack/ansible-collections-openstack/src/branch/master/plugins/modules | 13:22 |
| tosin | https://opendev.org/openstack/ansible-collections-openstack/src/branch/master/plugins/modules | 13:23 |
| rpittau | tosin: which version of ubuntu? | 13:24 |
| tosin | 20.04 | 13:24 |
| rpittau | tosin: you should try installing the tox package, it should bring all the required deps with it, at least it did for me | 13:32 |
| tosin | i just installed again according to the docs iurygregory just sent, still getting errors :( | 13:37 |
| iurygregory | D: | 13:38 |
| openstackgerrit | Bob Fournier proposed openstack/ironic master: For Supermicro BMCs, set the BootSourceOverrideEnable value when changing boot device https://review.opendev.org/c/openstack/ironic/+/772239 | 13:48 |
| dtantsur | bfournie: feel free to extract my detect_vendor change into ^^^ | 13:52 |
| dtantsur | since your patch is likely going to merge earlier (and get backported) | 13:52 |
| *** jdandrea has joined #openstack-ironic | 13:57 | |
| *** paras333 has quit IRC | 13:59 | |
| *** paras333 has joined #openstack-ironic | 13:59 | |
| *** tzumainn has joined #openstack-ironic | 13:59 | |
| *** rloo has joined #openstack-ironic | 14:01 | |
| bfournie | dtantsur: ok will do | 14:07 |
| TheJulia | good morning | 14:11 |
| *** hjensas is now known as hjensas|afk | 14:16 | |
| *** sshnaidm|ruck is now known as sshnaidm|afk | 14:20 | |
| iurygregory | good morning TheJulia | 14:27 |
| erbarr | good morning Ironic | 14:27 |
| iurygregory | morning erbarr | 14:31 |
| erbarr | good morning iurygregory | 14:32 |
| erbarr | iurygregory, have you seen issues with OVS when running devstack inside a devstack cloud instance? | 14:37 |
| TheJulia | erbarr: reduced mtu? | 14:37 |
| iurygregory | I haven't =( | 14:38 |
| erbarr | TheJulia, no more like the ovs bridge inside the cloud instance devstack doesn't work at all, even outside of using devstack in that instance just using netplan to configure an ovs bridge makes that network go poof, if i don't use the openvswitch: {} flag in the netplan bridge description i think a linux bridge is made and that seems to be okay | 14:39 |
| openstackgerrit | Bob Fournier proposed openstack/ironic master: For Supermicro BMCs, set the BootSourceOverrideEnable value when changing boot device https://review.opendev.org/c/openstack/ironic/+/772239 | 14:43 |
| TheJulia | erbarr: is networkmanager trying to do anything with the interfaces? | 14:47 |
| erbarr | TheJulia, Unit NetworkManager.service could not be found. | 14:50 |
| TheJulia | okay... weird | 14:50 |
| TheJulia | I wonder what is managing networking? | 14:50 |
| erbarr | TheJulia i see networkd-dispatcher.service and networking.service running | 14:52 |
| dtantsur | morning TheJulia | 14:57 |
| dtantsur | and erbarr | 14:58 |
| erbarr | good day dtantsur | 14:59 |
| *** MentalSiege has joined #openstack-ironic | 15:00 | |
| *** sshnaidm|afk is now known as sshnaidm|ruck | 15:07 | |
| TheJulia | erbarr: anything in the system logs maybe tearing down the bridge? That sounds like what is occuring | 15:10 |
| openstackgerrit | Dmitry Tantsur proposed openstack/bifrost master: Trivial: remove a duplicate variable https://review.opendev.org/c/openstack/bifrost/+/772557 | 15:13 |
| erbarr | TheJulia, on dmsg i only see this related https://usercontent.irccloud-cdn.com/file/IuN11eBm/image.png | 15:19 |
| arne_wiebalck | Re-post from this morning: When re-installing, or rebuilding instances, with Ironic, is there a way to protect other disks on the system and ensure the same disk as before is picked for the image? Use case is reinstalling a data server without draining it first. | 15:25 |
| openstackgerrit | Dmitry Tantsur proposed openstack/bifrost master: Automatically configure the idrac hardware type https://review.opendev.org/c/openstack/bifrost/+/772562 | 15:37 |
| dtantsur | arne_wiebalck: sounds like you want to disable cleaning? | 15:37 |
| *** strigazi has quit IRC | 15:45 | |
| *** strigazi has joined #openstack-ironic | 15:47 | |
| *** ociuhandu has quit IRC | 15:56 | |
| *** ociuhandu has joined #openstack-ironic | 15:57 | |
| *** MentalSiege has quit IRC | 15:57 | |
| *** MentalSiege has joined #openstack-ironic | 15:59 | |
| *** ociuhandu has quit IRC | 16:01 | |
| Qianbiao | arne_wiebalck maybe use a disk root hint? | 16:03 |
| Qianbiao | and disable clean disk | 16:04 |
| *** ociuhandu has joined #openstack-ironic | 16:04 | |
| *** jamesden_ has joined #openstack-ironic | 16:11 | |
| *** jamesdenton has quit IRC | 16:11 | |
| *** Qianbiao has quit IRC | 16:13 | |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Add centralized secure boot documentation https://review.opendev.org/c/openstack/ironic/+/772376 | 16:16 |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Redfish secure boot management https://review.opendev.org/c/openstack/ironic/+/771493 | 16:16 |
| *** Rahman has quit IRC | 16:27 | |
| tzumainn | hi! random question - has anyone ever used boot-from-volume with multipath? | 16:29 |
| * dtantsur runs away screaming | 16:29 | |
| tzumainn | ... that's a "omg it's so easy" scream, right.... ? | 16:29 |
| dtantsur | I don't know, I'm scared of this technology. I won't be surprised if nobody has tried. | 16:30 |
| tzumainn | haha, okay! | 16:30 |
| tzumainn | I noted a few references to multipath inside the ironic code, so I didn't know if that meant... something...?... but I can't find a ton of documentation regarding it | 16:31 |
| *** ociuhandu_ has joined #openstack-ironic | 16:31 | |
| dtantsur | yeah, looks like it was considered an option | 16:31 |
| dtantsur | in the end, it's between iPXE and Cinder, we don't have much say in it | 16:32 |
| tzumainn | okay - thanks! I'll poke around some more | 16:32 |
| arne_wiebalck | dtantsur: even with disabled cleaning it would go through the disk selection again, no? | 16:34 |
| dtantsur | arne_wiebalck: not if you use root device hints | 16:35 |
| *** ociuhandu has quit IRC | 16:35 | |
| dtantsur | which you really, really have to use if you have several disks anyway | 16:35 |
| arne_wiebalck | dtantsur: I only used them so far when I have to. | 16:35 |
| arne_wiebalck | dtantsur: the vast majority worked without. | 16:36 |
| *** ociuhandu_ has quit IRC | 16:36 | |
| dtantsur | and you have to whenever you have more than one disk ;) | 16:36 |
| dtantsur | but yeah, you're not alone in this | 16:36 |
| dtantsur | anyway, root device hints is the answer | 16:36 |
| arne_wiebalck | hmm, so far I relied on the algorithm to pick the smallest disk | 16:36 |
| arne_wiebalck | but, yes, I see there is some risk | 16:36 |
| dtantsur | the same algorithm will apply on rebuild | 16:37 |
| arne_wiebalck | but so far we did not have the use case of keeping data | 16:37 |
| arne_wiebalck | dtantsur: right, but this time there is data on the other disks | 16:37 |
| arne_wiebalck | dtantsur: that is a different situation | 16:37 |
| dtantsur | yep | 16:37 |
| arne_wiebalck | :) | 16:37 |
| dtantsur | so, root device hints + you can now disable cleaning per node (in Wallaby) | 16:37 |
| arne_wiebalck | this is mostly for disk replacements | 16:37 |
| arne_wiebalck | I would probably need a root device hint based on the physical position of the drive | 16:38 |
| arne_wiebalck | so that when a disk is replaced, it uses the same slot | 16:38 |
| arne_wiebalck | what I would really need is an automatic root device hint | 16:39 |
| dtantsur | can be done as part of inspection? | 16:39 |
| arne_wiebalck | exactly | 16:39 |
| *** gyee has joined #openstack-ironic | 16:40 | |
| arne_wiebalck | it would pick the disk during inspection, set it and use that hint until I change it | 16:40 |
| arne_wiebalck | this would clash with s/w raid I guess ... | 16:40 |
| arne_wiebalck | hmm | 16:40 |
| arne_wiebalck | thanks dtantsur, that gives me sth to think about ... :) | 16:41 |
| dtantsur | sw raid can set the hint if you mark a logical disk as root | 16:41 |
| TheJulia | meeeeting brains | 16:49 |
| *** ociuhandu has joined #openstack-ironic | 16:49 | |
| openstackgerrit | Dmitry Tantsur proposed openstack/bifrost master: Enable ironic debug logs by default https://review.opendev.org/c/openstack/bifrost/+/772572 | 16:53 |
| *** ociuhandu has quit IRC | 16:53 | |
| arne_wiebalck | dtantsur: you mean, if inspection rules picked a disk, I will need to overwrite this choice when configuring the target_raid_configuration? | 16:56 |
| arne_wiebalck | dtantsur: that would work | 16:56 |
| dtantsur | arne_wiebalck: I think our RAID code can do it for you, if any logical disk is configured as root | 16:57 |
| arne_wiebalck | dtantsur: ok, I see! | 16:57 |
| dtantsur | rpioso: hi! do you by chance know if R430 is *actually* capable of booting in secure boot mode | 17:01 |
| dtantsur | (by *actually* I mean: the redfish interface supports it, but I cannot make it boot any operating system) | 17:01 |
| *** lucasagomes has quit IRC | 17:02 | |
| rpioso | dtantsur: I do not have any experience with that model and my team hasn't tried secure boot. | 17:03 |
| dtantsur | okie | 17:03 |
| *** rh-jelabarre has quit IRC | 17:06 | |
| dtantsur | TheJulia: I have a feeling your EFI patches broke EFI whole disk images... | 17:07 |
| dtantsur | since https://opendev.org/openstack/ironic-python-agent/src/branch/master/ironic_python_agent/extensions/image.py#L297-L301 now runs before efibootmgr | 17:07 |
| dtantsur | although.. it probably should work (but it does not for me) | 17:09 |
| dtantsur | what's stranger, no EFI fallback happens either | 17:10 |
| dtantsur | ahemmm, of course pre-built CentOS images are not UEFI compatible, why would they? | 17:17 |
| dtantsur | sorry, false alert (need to fix the error message though) | 17:18 |
| *** rh-jelabarre has joined #openstack-ironic | 17:22 | |
| *** rh-jelabarre has quit IRC | 17:23 | |
| *** rh-jelabarre has joined #openstack-ironic | 17:23 | |
| rpittau | bye, see you later at the midcycle o/ | 17:27 |
| *** rpittau is now known as rpittau|afk | 17:27 | |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic-python-agent master: Fix error message with UEFI-incompatible images https://review.opendev.org/c/openstack/ironic-python-agent/+/772575 | 17:28 |
| dtantsur | TheJulia: thoughts ^^^? | 17:28 |
| *** dougsz has quit IRC | 17:29 | |
| TheJulia | dtantsur: quick question, w/r/t ansible modules, looks like the new pip that strips py2 out completely has broken older branches which grab get-pip .py.... | 17:31 |
| TheJulia | perhaps time to just kill the old em branch testing? | 17:31 |
| TheJulia | at least for master? | 17:31 |
| dtantsur | yup, the get-pip URL is now different for python 2 | 17:31 |
| TheJulia | do you know if that is getting changed? | 17:32 |
| dtantsur | TheJulia: I don't disagree with that, but I also wasn't the add who added them, you need to talk to sshnaidm|ruck | 17:32 |
| TheJulia | sshnaidm|ruck: o/ tosin is trying to figure out why her changes are failing older CI branches and it looks like they are failing upon get-pip.py staring up | 17:32 |
| sshnaidm|ruck | TheJulia, yeah, we hit same problems in tripleo.. | 17:33 |
| sshnaidm|ruck | TheJulia, dtantsur I think I'll set these jobs non-voting until we find out how to fix it | 17:33 |
| TheJulia | I think tosin would much appreciate it | 17:34 |
| TheJulia | But also advocate getting rid of excess testing that doesn't make sense | 17:34 |
| * TheJulia goes back to mentoring | 17:34 | |
| sshnaidm|ruck | TheJulia, well, it turns out people still use rocky SDK, on some debian versions.. | 17:34 |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Add a few words about UEFI user images https://review.opendev.org/c/openstack/ironic/+/772577 | 17:35 |
| dtantsur | bfournie: despite all the struggles above, looks like secure boot setting is actually working! | 17:36 |
| TheJulia | sshnaidm|ruck: we literally cannot support stuff forever though | 17:36 |
| TheJulia | just saying... | 17:36 |
| sshnaidm|ruck | TheJulia, of course | 17:37 |
| sshnaidm|ruck | some modules are not supported there and we don't run checks on them in old branches | 17:37 |
| sshnaidm|ruck | but I see actually patches in devstack that should fix this problem, so need to wait a little I suppose | 17:44 |
| sshnaidm|ruck | tosin, let's wait till tomorrow ^ https://review.opendev.org/q/I88ba370de8887a05c473fe7c19a61a319e8812d2 | 17:45 |
| tosin | thank you =) | 18:06 |
| *** dsneddon has joined #openstack-ironic | 18:08 | |
| *** dsneddon has quit IRC | 18:17 | |
| openstackgerrit | Dmitry Tantsur proposed openstack/metalsmith master: Do not wipe instance_info on normal unprovisioning https://review.opendev.org/c/openstack/metalsmith/+/772581 | 18:19 |
| dtantsur | epically shut myself in the foot with secure boot and ^^ | 18:20 |
| dtantsur | TheJulia: we may need to figure some way for users to build images suitable for secure boot | 18:27 |
| bfournie | dtantsur: \o/ | 18:31 |
| dtantsur | Failed to tear down from cleaning for node 20ceb670-a334-4b6d-8fae-f9e725287517, reason: HTTP GET https://10.9.103.30/redfish/v1/Systems/System.Embedded.1 returned code 500. unknown er | 18:37 |
| dtantsur | ror Extended information: none | 18:37 |
| dtantsur | well, thank you, I hate you too | 18:37 |
| * dtantsur is wondering if we need to retry error 500 in sushy | 18:38 | |
| dtantsur | especially on GET, c'mon! | 18:38 |
| *** k_mouza has quit IRC | 18:48 | |
| *** ianw_pto is now known as ianw | 18:59 | |
| eandersson | For the IPA is Ubuntu 20.04 Focal not the way to go? 18.04 is breaking due to pip, but 20.04 is trying to install packages that don't exist. | 19:09 |
| TheJulia | dtantsur: there is a secure boot template for whole disk images that should be good in tripleo-common's definitions. Realistically the upstream centos image also a *appears* to be good from a contents in the image standpoint | 19:27 |
| JayF | TheJulia: I think some of your notes got truncated at https://etherpad.opendev.org/p/ironic-wallaby-midcycle line 85 | 19:41 |
| * iurygregory just got back | 19:43 | |
| iurygregory | I lost the session for the midcyle today right? | 19:44 |
| JayF | midcycle is in 15 minutes | 19:44 |
| JayF | at least per my calendar | 19:44 |
| JayF | 20:00 UTC | 19:44 |
| TheJulia | dtantsur: also, my uefi changes from before christmas should make the universe happier in most cases | 19:45 |
| TheJulia | yeah, in 15 | 19:45 |
| TheJulia | JayF: thanks, ran into board meeting as I was typing thoughts out | 19:45 |
| JayF | ah, no problem :) I was just trying to do prework and assumed someone accidentally deleted the rest of the line or something | 19:46 |
| dtantsur | TheJulia: I'm not sure what they do, but a UEFI image built with DIB won't boot | 19:46 |
| * dtantsur tries RHCOS which is known to work | 19:49 | |
| TheJulia | dtantsur: what arguments did you use for dib based? | 19:49 |
| iurygregory | oh cool \o/ | 19:49 |
| dtantsur | TheJulia: vm block-device-efi | 19:51 |
| dtantsur | note that it does boot, just not with secure boot on | 19:51 |
| TheJulia | efi boots correct? | 19:52 |
| dtantsur | EFI itself - yes | 19:52 |
| TheJulia | weird... | 19:52 |
| TheJulia | i wonder if the dib stuff puts the unsigned binaries in place or something | 19:52 |
| dtantsur | once you enable secure boot, the machine refuses to boot it | 19:52 |
| dtantsur | and it must be on shim level since I do not get past the iDRAC boot menu | 19:53 |
| TheJulia | Yeah | 19:53 |
| dtantsur | which makes me suspect nobody puts shim in place :) | 19:53 |
| TheJulia | this could be | 19:53 |
| TheJulia | try manually installing shim in the image? | 19:53 |
| dtantsur | let me check with RHCOS image first, maybe I'm doing something wrong | 19:54 |
| dtantsur | aha, RHCOS boots | 19:54 |
| dtantsur | so neither Dell nor I are probably at fault :) | 19:54 |
| TheJulia | \o/ | 19:57 |
| dtantsur | yeah, no shim inside the centos image. sigh. SIGH | 19:58 |
| dtantsur | I don't want to fix DIB.... | 19:58 |
| TheJulia | I think it is just the package needs to be installed | 19:59 |
| TheJulia | anyway! midcycle time in moments | 19:59 |
| dtantsur | actually, no, it does have shim, I looked at a wrong image | 20:06 |
| dtantsur | aha, it's grub itself, not a shim. but why? | 20:13 |
| *** tosin has quit IRC | 20:13 | |
| *** tosin has joined #openstack-ironic | 20:15 | |
| dtantsur | I suspect I know why: DIB rebuilds the grub image | 20:16 |
| dtantsur | okay, the internet told me ubuntu ships images with UEFI support. on to them! | 20:21 |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Add a few words about UEFI user images https://review.opendev.org/c/openstack/ironic/+/772577 | 20:23 |
| iurygregory | dtantsur, if the information is in the internet ofc is true =D | 20:26 |
| dtantsur | I'm going to check :) | 20:27 |
| dtantsur | In the end, it may not be the images, it may be something broken in ironic around whole disk images... | 20:43 |
| dtantsur | the other possibility is that iDRAC misbehaves when seeing a secure boot request (and keeps misbehaving when secure boot is off) | 20:49 |
| TheJulia | dtantsur: are you sure your running master, it could also be flags, or name order differences from expected | 20:52 |
| dtantsur | it's a fresh bifrost environment | 20:52 |
| * TheJulia goes and addresses the french bread dough that is apparently filing petition to vote | 20:53 | |
| dtantsur | I only managed to boot RHCOS, nothing else so far | 20:53 |
| dtantsur | which makes me think nothing else works with secure boot, except that it continues to fail if I disable secure boot manually and reboot.. | 20:53 |
| TheJulia | can you dump the nvram firmware image list ? | 20:53 |
| TheJulia | yeah, the machine should halt | 20:53 |
| dtantsur | TheJulia: to dump anything I need it to boot.. | 20:54 |
| * dtantsur tries ubuntu without secure boot from the beginning | 20:54 | |
| dtantsur | will continue tomorrow, see you! | 20:54 |
| *** dtantsur is now known as dtantsur|afk | 20:55 | |
| * janders is making himself a large coffee before reading through the Secure RBAC spec | 20:58 | |
| TheJulia | dtantsur|afk: my thought is we're updating the nvram with the wrong efi binary | 20:58 |
| janders | (just approaching 7am here :) ) | 20:58 |
| TheJulia | dtantsur|afk: or centos has the file names swapped... that may be the thing that is happening | 20:58 |
| TheJulia | dtantsur|afk: so by dump, thinking what is listed in the nvram for the file | 20:58 |
| TheJulia | final meeting of the day | 21:00 |
| TheJulia | stevebaker: you around | 21:04 |
| TheJulia | ? | 21:04 |
| stevebaker | whoops | 21:04 |
| TheJulia | heh | 21:05 |
| *** k_mouza has joined #openstack-ironic | 21:06 | |
| *** hjensas|afk is now known as hjensas | 21:09 | |
| *** k_mouza has quit IRC | 21:10 | |
| TheJulia | janders: a very big mug of coffee | 21:21 |
| janders | TheJulia 330ml is the largest cappuccino cup I have. Did not hesitate to use it :) | 21:23 |
| *** k_mouza has joined #openstack-ironic | 21:25 | |
| *** k_mouza has quit IRC | 21:30 | |
| *** paras333 is now known as paras|done_for_t | 21:42 | |
| *** paras|done_for_t is now known as paras|time_to_le | 21:42 | |
| *** rcernin has joined #openstack-ironic | 22:16 | |
| *** rcernin has quit IRC | 22:24 | |
| *** rcernin has joined #openstack-ironic | 22:24 | |
| *** k_mouza has joined #openstack-ironic | 22:26 | |
| *** k_mouza has quit IRC | 22:31 | |
| *** bfournie has quit IRC | 22:47 | |
| *** jdandrea has quit IRC | 22:49 | |
| *** early has quit IRC | 22:59 | |
| *** bfournie has joined #openstack-ironic | 23:03 | |
| *** early has joined #openstack-ironic | 23:16 | |
| *** tosky has quit IRC | 23:18 | |
| *** k_mouza has joined #openstack-ironic | 23:26 | |
| *** k_mouza has quit IRC | 23:30 | |
| TheJulia | janders: by chance are you going to be leaving review feedback on the secure-rbac spec today? | 23:33 |
| janders | TheJulia yes! | 23:41 |
| TheJulia | okay | 23:43 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!
