Tuesday, 2021-06-29

* dtantsur yawns06:04
iurygregorygood morning Ironic06:07
* iurygregory grabs more coffee to wake up06:08
stendulkerGood morning iurygregory o/06:12
jandershey dtantsur iurygregory stendulker o/06:20
dtantsur\o06:20
stendulkerGood morning janders dtantsur 06:20
iurygregorymorning stendulker janders dtantsur o/06:21
arne_wiebalckGood morning iurygregory dtantsur stendulker janders and Ironic!06:26
* arne_wiebalck feels being late this morning06:26
iurygregorymorning arne_wiebalck o/06:26
iurygregoryarne_wiebalck, I think dtantsur is early :D06:26
stendulkermorning arne_wiebalck 06:26
arne_wiebalckiurygregory: yeah! :-D06:26
dtantsurheh, true :) my wife has early studies in a lab today06:27
iurygregorylab ++ :D06:32
dtantsuryeah, and they're doing some fun stuff today (IIUC, growing bacteria and extracting something from them)06:43
cenne:)06:44
cenneGood mornings everyone. 06:44
iurygregorydtantsur, nice!06:44
iurygregorymorning cenne 06:44
dtantsurcenne: morning!06:44
cenneo/06:45
* cenne stretches a bit too.06:46
cenneyay, bacteria are cute.  They sure must be having fun.06:49
* cenne imagines cloudy vials06:50
dtantsurright :)06:50
dtantsurTheJulia: hi! is the following a correct assessment: to fully use node ownership one needs Keystone?08:06
opendevreviewMerged openstack/ironic stable/wallaby: Fix ramdisk boot option handling  https://review.opendev.org/c/openstack/ironic/+/79826808:49
opendevreviewMerged openstack/ironic master: Allow ramdisk_image_download_source in instance_info for ramdisk deploy  https://review.opendev.org/c/openstack/ironic/+/79750809:02
opendevreviewMerged openstack/ironic master: Clean up vendor prefixes for iRMC boot  https://review.opendev.org/c/openstack/ironic/+/79687909:02
opendevreviewVerification of a change to openstack/ironic failed: Cache AgentClient on Task, not globally  https://review.opendev.org/c/openstack/ironic/+/79767409:12
opendevreviewMerged openstack/ironic master: Update the clear job id's constant  https://review.opendev.org/c/openstack/ironic/+/79643209:37
Ondrej_hello, good afternoon. I'm trying to setup LACP bond with DHCP less but seems like config is not valid for this one. Json schema is not allowing me to do so: https://github.com/openstack/ironic/blob/stable/wallaby/ironic/api/controllers/v1/network-data-schema.json#L17810:48
Ondrej_shouldn't it be 802.3ad ? 10:48
dtantsurProbably? I don't remember what the authority of this file is, either nova or cloud-init10:49
dtantsurOndrej_: right: https://review.opendev.org/c/openstack/nova/+/78879010:51
dtantsurwe probably copied this file before this fix. could you propose a fix for ironic?10:52
Ondrej_I will but I never did one so far. Can you please point me to doc how can i do that?10:55
dtantsurOndrej_: https://docs.opendev.org/opendev/infra-manual/latest/developers.html is the official documentation10:57
dtantsurif you have any problems, let me or anyone here know10:57
dtantsur(if you realise that you don't have time for it, let us know as well)10:57
dtantsuradditionally, this is how you create a release note: https://docs.openstack.org/ironic/latest/contributor/faq.html#create-a-new-release-note10:58
Ondrej_thank you, I'll follow that and hopefully make it happen soon :D10:59
jandersvmud213 CC dtantsur w/r/t https://storyboard.openstack.org/#!/story/2008784 (adding custom CA certs to BMC so that the BMC can verify https vmedia image sources)11:23
jandersI've done some testing on this, by default none of the BMCs had any issue connecting to untrusted https:// source11:24
vmud213janders: Thanks for confirming.11:24
vmud213But this is for a different use case11:24
janders( I tested across Dell R640, HP e910 and a couple SuperMicro machines)11:25
iurygregoryI'm wondering if they try to validate something :D11:25
vmud213the vmedia may not honour the certificates but the UEFI-HTTPS honours11:25
jandershaving said that it may be possible to configure them to be more strict, but this was outside of the scope of my test11:25
jandersvmud213 I understand11:25
janderswith the R640, it does have a couple of fields in the GUI which allow configuring custom CA cert and enabling strict SSL checking11:27
jandersI haven't explored the RedFish side of it11:27
vmud213janders: ack. that's pretty much confirms what i heard of virtual media devices11:28
opendevreviewMerged openstack/ironic master: Cache AgentClient on Task, not globally  https://review.opendev.org/c/openstack/ironic/+/79767411:32
jandersvmud213 no worries, I will let you know if I find more information of interest11:33
janderssee you tomorrow Ironic o/11:41
iurygregorybye janders o/12:06
dtantsurJFYI I'm proposing https://review.opendev.org/798655, hopefully it will make more newcomers aware of release notes12:55
iurygregorydtantsur, ++13:11
opendevreviewMerged openstack/ironic master: Upgrade oslo.db version  https://review.opendev.org/c/openstack/ironic/+/79681113:17
opendevreviewcenne proposed openstack/ironic master: [WIP] Add `boot_mode` and `secure_boot` to node object and expose in api  https://review.opendev.org/c/openstack/ironic/+/79705513:19
TheJuliadtantsur: your assumption about owners is basically correct. The same effect could be achieved with middleware and enabled policy checking, but basically keystone is the only mode where all of the policies and view filtering will work as intended. Granted they could use the field just as informational storage if they wanted to.13:22
dtantsurTheJulia: okay, cool. Background: there are talks about multi-tenancy in the metal3 world13:22
dtantsur(also good morning)13:22
dtantsurI wonder if for standalone we could enable the mode of operation where project == user (from HTTP basic)13:22
dtantsur(we're unlikely to require it in metal3, but it could make the whole thing much nicer)13:23
TheJuliadtantsur: sure, have a middleware layer that populates it into the context's project_id13:23
dtantsurmore background: https://docs.google.com/document/d/1XY7LD2d55RMgCY5ip28dxc9XHrvtyZpsRo1wj0WrfEM/edit13:23
TheJuliaAnd then turn on policies :)13:24
dtantsurand we'll need some notion of admins too13:24
cennethanks dtantsur. that reno link should probably come in handy for me. :)13:24
dtantsurcenne: it should indeed, you're welcome13:24
dtantsurthe discussion on #opendev will probably result in rejection of the infra-manual patch though13:25
dtantsurbut we need to keep improving our contributor docs13:25
opendevreviewDhuldev Valekar proposed openstack/ironic stable/wallaby: Update the clear job id's constant  https://review.opendev.org/c/openstack/ironic/+/79866513:27
TheJuliadtantsur: yeah, system_scope: all inside the context object13:28
dtantsurright. I guess for metal3 case we could have system admins and project admins13:29
opendevreviewDhuldev Valekar proposed openstack/ironic stable/victoria: Update the clear job id's constant  https://review.opendev.org/c/openstack/ironic/+/79866613:30
TheJuliayeah, they can't have the rights at the same time, fwiw. anything implying project is scoped as project access13:30
TheJuliaseparation of duties and most restrictive access models13:31
dtantsuryep. How I see it is that several BMO instances will access ironic as project admins, so that their nodes are separate.13:31
dtantsurwhile local access for debugging will be with system admin rights13:31
opendevreviewDhuldev Valekar proposed openstack/ironic stable/ussuri: Update the clear job id's constant  https://review.opendev.org/c/openstack/ironic/+/79866713:32
opendevreviewDmitry Tantsur proposed openstack/ironic master: Ramdisk: do not require image_source  https://review.opendev.org/c/openstack/ironic/+/79868113:32
opendevreviewDhuldev Valekar proposed openstack/ironic stable/train: Update the clear job id's constant  https://review.opendev.org/c/openstack/ironic/+/79866813:33
* TheJulia is now very glad I did all the rbac work13:34
TheJuliareview jam in like 14 minutes?!13:46
iurygregoryI can join =)13:48
dtantsurdo we have an agenda?13:49
TheJuliaI didn't put patches on the list, but some of the patches are still open and we have ironic-week-prio13:49
* TheJulia makes agenda real quick13:50
* iurygregory is wondering why some patches on the list doesn't have the hashtag =(13:51
opendevreviewDmitry Tantsur proposed openstack/ironic master: Ramdisk: do not require image_source  https://review.opendev.org/c/openstack/ironic/+/79868113:53
* dtantsur evaluates his energy level13:53
iurygregorysince you woke up early I would say is < 50%13:55
TheJuliaiurygregory: isnt required really14:00
iurygregoryTheJulia, can you hear ?14:01
dtantsurway below 50%, hence my question14:01
TheJuliaiurygregory: I can, can you hear you14:01
TheJuliadtantsur: sleep() ? :)14:01
dtantsura few hours more...14:02
* dtantsur feels that he still hasn't recovered after the exam and the preceding heat14:02
TheJulia:(14:07
TheJuliaiurygregory: https://review.opendev.org/c/openstack/ironic/+/778957 the devstack change I was talking about14:07
TheJuliastill wip14:07
arne_wiebalckTheJulia: https://bugs.launchpad.net/nova/+bug/193395514:20
cennesorry re metting. browser / network trouble14:28
cenne*meeting14:28
opendevreviewDmitry Tantsur proposed openstack/ironic master: Ramdisk: do not require image_source  https://review.opendev.org/c/openstack/ironic/+/79868114:31
viks_Hi, is there any way we can provision MAC os on mac mini using ironic?14:39
TheJuliaviks_: I mean, if you have a disk image of MacOS... and you have a ramdisk that can boot on the mac mini, and the mac mini can be set to network boot by default, I guess maybe14:41
TheJuliaviks_: keep in mind, it is a consumer grade device and that is a use case far outside it's design parameters14:41
viks_TheJulia: ok... thanks14:42
TheJuliaGenerally we recommend using hardware with Baseboard Management Controllers so we can facilitate power control and boot device control. We do have enough logic that we *should* be able to find the efi bootloader and register it14:42
TheJuliathat *is* on x86_64 hardware. The newer arm gear, no idea14:42
TheJuliaalso, they have basically said only macos will run on their hardware14:42
viks_TheJulia: Ok thanks... 14:47
TheJuliacenne: no worries :)14:49
cennehi, I found a minor  bug in the webapi-version-history. Should I fix it in my patch, or make a new one? 15:19
TheJuliacenne: define bug for us real quick :)15:19
TheJuliaprior version I take it?15:19
cenneyes. the listing 15:22
cennemissed a newline so, it comes up clobbered in the rendered version15:22
* cenne did the same. that's how i found it is not as intended15:22
TheJuliaI'd just fix it in your change then, tbh15:23
cennekay! done. :)15:24
opendevreviewcenne proposed openstack/ironic master: [WIP] Add `boot_mode` and `secure_boot` to node object and expose in api  https://review.opendev.org/c/openstack/ironic/+/79705515:36
TheJuliabfournie: you around?16:11
bfournieTheJulia: yes, just in a meeting16:11
TheJuliaon rhcos, you saw char 0xfeff as the first character right?16:12
bfournieTheJulia: yes 16:12
TheJuliafreaky16:12
bfournieTheJulia: I read where that was expected but let me find the reference16:12
TheJuliaI've got the same code failing on downstream partition images which start the same exct way16:12
bfournieoh16:12
bfournieTheJulia: its failing because of that prefix?16:14
TheJuliaI *think*... somehow it is str(var)16:14
TheJuliastill doesn't explain why one is happier and one is less happy16:16
TheJuliaand only on partition images16:16
TheJuliaahh, its the py2 compatbility16:19
dtantsuryeah, python 2.7 has a lot of quirks that 3.6+ does not have16:22
TheJuliayeah16:22
TheJuliayou can have unicode strings in py3, where as in 2.7 it tries to force strings16:22
TheJuliaodd we only hit this in one case16:23
opendevreviewcenne proposed openstack/ironic master: [WIP] Add `boot_mode` and `secure_boot` to node object and expose in api  https://review.opendev.org/c/openstack/ironic/+/79705517:50
opendevreviewJulia Kreger proposed openstack/ironic-python-agent stable/train: Train only - Fix py3 support for bootloader default config load  https://review.opendev.org/c/openstack/ironic-python-agent/+/79873218:15
bfournieTheJulia: question on ^, so it works with python 2 if you use encoding='utf-16'?18:36
TheJuliabfournie: nope, it throws up and fails.18:45
bfournieTheJulia: ah I see, that's why you need to the warning18:46
TheJuliayeah18:46
bfournies/to the/the/18:46
TheJuliathere *is* apparently a utf-16-le and utf-16-be, but I'm kind of at the point where I just need to get something in on stable/train to fix downstream18:46
bfourniesure18:49
TheJulia*and* why spend a bunch of time on py at this point when we know py3 works just ifne.18:49
* TheJulia wonders why there are numerous sirens18:49
opendevreviewJulia Kreger proposed openstack/ironic-python-agent stable/train: Train only - Fix py3 support for bootloader default config load  https://review.opendev.org/c/openstack/ironic-python-agent/+/79873218:53
TheJuliabfournie: ^^18:53
TheJuliaso we have a big fire just down the road. Now 4 fire engines18:54
bfournieTheJulia: all set...   brush fire?18:54
TheJuliabfournie: looks like car fire that became a brush fire18:55
bfournieoh boy18:55
TheJuliaon a plus side, I don't really see much smoke in that direction18:57
bfourniethat's good18:57
TheJuliaand the wind is not trong, just slightly gusty18:57
opendevreviewcenne proposed openstack/ironic master: Add `boot_mode` and `secure_boot` to node object and expose in api  https://review.opendev.org/c/openstack/ironic/+/79705519:07
* cenne is sooo done.19:09
cennemysterious bug hunting to continue tomorrow19:10
cenne*fingers crossed* for TheJulia19:11
cennehoping the fire doesn't get bad.19:12
cenneI shall take leave now for today. 19:15
cenneTake care.19:15
TheJuliagoodnight cenne 19:16
TheJulia:)19:16
cennegn.  :waves:19:18
opendevreviewJulia Kreger proposed openstack/ironic-inspector master: Add rbac scope enforcement handling to devstack plugin  https://review.opendev.org/c/openstack/ironic-inspector/+/79835919:35
opendevreviewJulia Kreger proposed openstack/ironic master: WIP Scoped RBAC Devstack Plugin support  https://review.opendev.org/c/openstack/ironic/+/77895719:46
opendevreviewJulia Kreger proposed openstack/ironic-python-agent master: Catch ismount not being handled  https://review.opendev.org/c/openstack/ironic-python-agent/+/79839421:15
opendevreviewJulia Kreger proposed openstack/ironic-inspector master: Add rbac scope enforcement handling to devstack plugin  https://review.opendev.org/c/openstack/ironic-inspector/+/79835921:44
TheJuliaokay, that *should* help21:44
jandersgood morning Ironic o/22:57

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!