Monday, 2022-01-10

arne_wiebalckGood morning, Ironic!07:18
jandershey arne_wiebalck and Ironic o/07:24
jandersHappy New Year 2022!07:25
arne_wiebalckhey janders, good morning and happy new year!07:25
rpittaugood morning ironic! o/08:32
arne_wiebalckhey rpittau o/09:05
arne_wiebalckrpittau: if you have a moment, could you please have another look at https://review.opendev.org/c/openstack/ironic-python-agent/+/821244 to see if we can move this one forward?09:06
rpittauhey arne_wiebalck :)09:07
rpittausure thing, I'll have a look in a couple of minutes09:09
arne_wiebalckrpittau: thanks!09:09
jandershey rpittau o/09:18
rpittauhey janders09:19
rpittauarne_wiebalck: it looks good to me, just a small thing, I think you don't need the new reqs in test-requirements.txt as you have already tooz in requirements.txt and kazoo is not imported directly10:11
* dtantsur exits hibernation10:19
arne_wiebalckrpittau: true, I can remove it10:20
opendevreviewArne Wiebalck proposed openstack/ironic-python-agent master: Burn-in: Dynamic network pairing  https://review.opendev.org/c/openstack/ironic-python-agent/+/82124410:23
jandershey dtantsur o/10:26
rpittauarne_wiebalck: you left tooz :)10:30
arne_wiebalcksigh10:31
arne_wiebalckyes, sorry10:31
opendevreviewArne Wiebalck proposed openstack/ironic-python-agent master: Burn-in: Dynamic network pairing  https://review.opendev.org/c/openstack/ironic-python-agent/+/82124410:33
iurygregorygood morning Ironic o/11:11
arne_wiebalckthanks rpittau 11:16
jandershey iurygregory o/12:07
iurygregoryjanders, o/12:07
jandersSee you tomorrow Ironic o/ have a great day everyone.12:58
arne_wiebalckbye janders o/13:02
iurygregorybye janders o/13:13
dtantsurrpittau: re your stream9 patch: deprecate stream8 at the same time? given python 3.6?14:08
rpittaummmm in theory yes14:12
rpittauwell in practice also :D14:12
rpittauI can add a note in the reno in the follow up14:12
dtantsurrpittau: oh, and you need to update the installation docs :)14:14
rpittauright! this follow up is becoming bigger and bigger :)14:15
* dtantsur realizes he needs to change his testing environment to S914:15
* iurygregory should do the same14:17
TheJuliaGood morning15:02
rpittaugood morning TheJulia :)15:02
dtantsurmorning TheJulia 15:05
opendevreviewMerged openstack/bifrost master: Move /httpboot to /var/lib/ironic  https://review.opendev.org/c/openstack/bifrost/+/82274315:06
rpittaucan I get one more review for https://review.opendev.org/c/openstack/bifrost/+/819058 please? :)15:08
iurygregorygood morning TheJulia 15:19
TheJuliarpittau: when will the node set be available ?15:35
rpittauTheJulia: technically it's already there, what's missing is the naming in the config15:36
rpittauthe alias15:36
TheJuliarpittau: is there an ETA for that alias?15:37
rpittauTheJulia: actually let me double-check, it might be there already as it was planned for end of last year/beginning of new year15:42
rpittauyep it's there 15:43
TheJuliarpittau: ahh, cool15:43
rpittauI can change that in the follow up as well15:43
TheJuliarpittau: the reason I was asking was because it would be awful to merge the change and have the use of cs9 (am I the only one whose brain things cs == counterstrike?) and it never get changed15:43
TheJuliafor testing that is15:43
TheJuliarpittau: you know, I think that is fair to just in place edit and single core approve if it works.15:44
rpittauok, let me change that now then15:44
TheJuliacool cool15:44
rpittauand yes, CS _is_ counterstrike15:45
dtantsurheh15:45
* TheJulia wishes she didn't loose her sporks in the divorce so she could feel better about her old handle EvilSpork15:45
opendevreviewRiccardo Pittau proposed openstack/bifrost master: Run bifrost on CentOS Stream 9  https://review.opendev.org/c/openstack/bifrost/+/81905815:46
rpittaudone15:46
TheJuliaThanks!15:46
opendevreviewRiccardo Pittau proposed openstack/bifrost master: Run bifrost on CentOS Stream 9  https://review.opendev.org/c/openstack/bifrost/+/81905815:46
rpittauand typo fixed :D15:46
TheJulia\p/15:46
TheJuliaerr15:46
TheJulia\o/15:46
TheJuliaany last reviews on https://github.com/OpenStackweb/ironic-website/pull/46 ?15:48
TheJuliawe can't forget to occasionally post content there :(15:48
rpittauI'll have a quick look15:49
TheJuliawe really ought to hold some sort of midcycle coupled with review jamming non-core contributor patches15:56
dtantsur++15:56
iurygregory++15:58
rpittauheh would be nice15:59
TheJuliawould also be a good time to talk through some patch backstories16:00
TheJuliahopefully no relation to origins like GCC got16:00
dtantsurmeeting? :)16:01
* TheJulia wonders if she should start the meeting?16:01
iurygregoryI was about to ask :D16:01
TheJulia#startmeeting ironic16:01
opendevmeetMeeting started Mon Jan 10 16:01:40 2022 UTC and is due to finish in 60 minutes.  The chair is TheJulia. Information about MeetBot at http://wiki.debian.org/MeetBot.16:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:01
opendevmeetThe meeting name has been set to 'ironic'16:01
TheJulia#chair iurygregory 16:01
opendevmeetCurrent chairs: TheJulia iurygregory16:01
dtantsuro/16:01
rpittauo/16:01
erbarro/16:01
* TheJulia hands the microphone to iurygregory :)16:01
rpiosoo/16:01
iurygregoryo/16:01
ajyao/16:01
iurygregoryWelcome back everyone! Happy New Year!16:02
stendulkero/16:02
rlooo/16:02
iurygregory#topic Announcements / Reminder16:03
iurygregoryanyone has something to announce /remind us?16:03
arne_wiebalcko/16:03
* iurygregory does a quick check on openstack ML to see if there is something16:04
TheJuliaI think we've got 11 weeks until Yoga release16:04
TheJuliaor maybe 1216:05
iurygregoryit's on Marc 11 so around 11 weeks16:06
dtantsuryeah, the first release freezes will be around mid-February16:06
iurygregorythe second bugfix we will release on begin of Feb16:06
iurygregory#info check your emails for "2022 Individual Director Election and Bylaws Amendments"16:07
iurygregoryif you are a contributor you probably received an email to vote =)16:07
iurygregoryanything else? =)16:09
TheJuliaI think that is it16:09
iurygregoryok, let's move on16:09
iurygregory#topic Review Action items from prior meeting16:10
iurygregoryI've checked and we don't have any past action items16:10
iurygregory#topic Review subteam status reports16:10
dtantsurwho cares about last year's action items? :)16:10
iurygregoryonly if we had something important XD16:11
iurygregory#link https://etherpad.opendev.org/p/IronicWhiteBoard16:11
iurygregorystarting around L6316:11
TheJuliawe should really just dogpile on a troubleshooting/set of work one day16:13
dtantsuriurygregory: we haven't really talked about rootwrap/privsep for inspector16:15
dtantsurthe iptables driver at least requires sudo16:15
TheJuliayeah16:16
dtantsurmaybe we can make privsep optional when the dnsmasq driver is used?16:16
TheJuliaI think steve baker may have looked at that recently...16:16
TheJuliaI think that would be good but may also be fairly complex at the same time16:16
dtantsuryeah, this is what caused me to remember about inspector :)16:16
TheJuliaoh good, at least my memory slightly works :)16:16
dtantsurnot really, the dnsmasq driver does not use sudo by default, only when you provide restart/shutdown commands16:16
iurygregorydtantsur, good catch16:16
dtantsurI *think*16:17
iurygregorymake it optional would be a good thing16:17
TheJuliadtantsur: I was more thinking from the entire process model standpoint but I don't have my head wrapped around it heavily16:17
iurygregorymaybe I can sync with stevebaker[m] to see what he thinks (my timezone now permits this :D)16:19
dtantsuryeah...16:19
dtantsur++16:19
* iurygregory iurygregory to talk with stevebaker[m] about privsep on inspector16:20
iurygregory#action  iurygregory to talk with stevebaker[m] about privsep on inspector16:20
* iurygregory was using / instead of # <facepalm>16:20
iurygregorywe have updates on the topics, moving on16:21
iurygregory#topic Priorities for the coming week16:21
iurygregory#link https://review.opendev.org/q/hashtag:ironic-week-prio+status:open16:21
dtantsurI have some stuff to suggest!16:22
iurygregoryany patches to add to our list? \o/16:22
iurygregorydtantsur, go ahead :D16:22
dtantsurhttps://review.opendev.org/c/openstack/ironic/+/821219 enabled foreign keys for sqlite16:22
dtantsurhttps://review.opendev.org/c/openstack/ironic/+/820909 somewhat simplifies enabled_***_interfaces16:22
rpittauI added https://review.opendev.org/c/openstack/bifrost/+/81905816:22
ajyacan these be added - https://review.opendev.org/c/openstack/ironic/+/822781 https://review.opendev.org/c/openstack/ironic/+/823701/ ?16:23
dtantsurthen we have bifrost combined ironic chain: https://review.opendev.org/c/openstack/bifrost/+/819649 https://review.opendev.org/c/openstack/bifrost/+/819640 https://review.opendev.org/c/openstack/bifrost/+/820390 https://review.opendev.org/c/openstack/bifrost/+/82047916:23
dtantsurfinally https://review.opendev.org/c/openstack/ironic/+/822329 allows web servers to disable our caching16:23
dtantsurany ideas/objections?16:24
TheJuliano objections here16:24
TheJuliaI'm surprised we've not hit caching issues before16:24
TheJuliathen again I bet folks tend to just use new file names or ID's16:24
dtantsurI don't think it's common for people to have images generated on fly16:25
dtantsurwe may be the only ones :)16:25
iurygregoryno objections from me also, ajya dtantsur feel free to add the hashtag =)16:25
iurygregorydtantsur, probably because we like to dangerous things :D16:26
dtantsurexactly :)16:26
dtantsurTheJulia: we also respect Last-Modified already16:26
TheJuliaheh16:26
TheJuliadtantsur: true,, and that does address a huge chunk of it16:26
dtantsurbut not Cache-Control: no-store16:27
TheJuliaas long as it gets updated16:27
ajyaiurygregory: thanks, done16:27
TheJuliaalthough, I do remember we had someone who had a bogus last-modified from a server once16:27
TheJulia4-ish years ago16:27
dtantsursweeet16:27
TheJuliaAnyway, onward?16:28
dtantsuryep16:28
iurygregorycool \o/16:29
iurygregory#topic Baremetal SIG16:29
iurygregory#link https://etherpad.opendev.org/p/bare-metal-sig16:29
iurygregoryarne_wiebalck, anything you would like to say?16:30
arne_wiebalckTheJulia: summarised the SIG's activities for the foundation's annual report.16:30
arne_wiebalckthanks TheJulia 16:30
TheJuliaHappy to help!16:30
TheJuliaI'd love for us to somehow get some operators talking about size and scope16:30
arne_wiebalckFor meetings, we have a tentative show-and-tell of an Ironic deployment scheduled for March.16:31
TheJuliagranted, difficult16:31
TheJuliawell16:31
TheJuliathat could work too :)16:31
arne_wiebalckWe have a free slot in February if someone feels like it :)16:31
arne_wiebalckThere are some potential topics on the ethepad.16:31
arne_wiebalck*etherpad16:32
arne_wiebalckUnless someone comes forward, I will try to find a volunteer :-D16:32
arne_wiebalckOh, and no meeting in January we said.16:33
TheJuliawe should do a thing on scaling ironic16:33
arne_wiebalckThat is it, I think.16:33
TheJuliaNobodyCam: hint hint16:33
NobodyCamyawn, stretch Good Morning Ironic'ers16:34
iurygregorygood morning NobodyCam :D 16:34
arne_wiebalckhey NobodyCam o/16:34
NobodyCam++ on Scaling great topic16:34
NobodyCamMorning arne_wiebalck iurygregory, TheJulia :) o/16:35
TheJuliaIt would be a good opportunity to talk about common pain points, ways to kind of route around them, and then kind of what does an ideal layout look like16:35
TheJuliaAnd I think we could do a deck, if folks want to collaborate I can start it I guess and shoot for febuary ?16:35
NobodyCamyea16:36
arne_wiebalcksure16:36
iurygregory\o/16:36
iurygregorygreat news :D16:36
arne_wiebalckwe also have https://techblog.web.cern.ch/techblog/post/conductor-groups/16:36
arne_wiebalck(scaling Ironic) which may give some ideas16:36
NobodyCam+++ 16:36
arne_wiebalckdeal then :), thanks!16:37
arne_wiebalckiurygregory: back to you I guess16:37
iurygregoryarne_wiebalck, thank you!16:37
iurygregory#topic RFE review16:37
iurygregoryanyone has an RFE that would like to discuss?16:37
TheJuliaI haven't looked at RFE's or even bugs in storyboard recently due to everything going on16:39
iurygregoryno worries, moving on :D16:39
TheJuliamainly bugs16:39
iurygregory#topic Open discussion16:39
dtantsuryeah, me neither16:39
TheJuliadtantsur: my most favorite one is what happens when the bmc disappears mid-authentication refresh16:40
iurygregoryanything we should discuss?16:40
dtantsurTheJulia: sounds like a horror story16:40
TheJuliadtantsur: 4 bugs and counting wrapped into one patch :(16:41
* TheJulia looks at the cats trying to remove her window blinds16:41
TheJuliaI've got nothing, besides we shoudl do a midcycle soon16:42
rpittau++16:43
iurygregorymaybe we can start with a doodle? :D16:43
iurygregorywho is interested in participating in the midcycle? 16:43
iurygregoryo/16:43
NobodyCamI'd like to put an official happy new year in the record16:43
TheJuliaiurygregory: o/16:43
* arne_wiebalck realises the mid cycle at CERN is almost 2 years ago already16:43
rpittauarne_wiebalck: :/16:44
dtantsur:(16:44
iurygregory='(16:44
dtantsurc'mon, I'm not paying for the internet to get upset16:44
TheJuliaarne_wiebalck: I was thinking of that this morning16:44
arne_wiebalckdtantsur: heh16:44
iurygregorydtantsur, you can blame arne_wiebalck this time16:44
arne_wiebalckonce things are calm again, I guess we are happy to welcome you again :) 16:44
iurygregory\o/16:45
rpittau\o/16:45
* arne_wiebalck is trying to get dtantsur value for internet money16:45
dtantsurI usually extract some suffering out of it16:45
rpittauI'm not sure we want to go down the internet-suffering path now!16:46
iurygregoryrpittau++16:46
dtantsurthat's literally our profession :)16:46
rpittau:D16:46
TheJuliaoh my16:47
TheJuliaI suspect this meeting is Fin16:47
iurygregoryand it's monday... so this make things worse16:47
* iurygregory is trying to understand Fin...16:48
TheJuliaiurygregory: done16:48
TheJuliaiurygregory: end, etc16:48
dtantsurI hope everyone who celebrates new year has enjoyed the holidays!16:48
iurygregoryTheJulia, oh :D I was trying to find the word in english 16:49
iurygregoryso, who is going to send the email about the midcycle? 16:49
TheJuliadtantsur: I need like another week off, can we somehow make the break longer?16:50
dtantsur+++16:50
dtantsurI haven't had enough snow16:50
TheJuliasnow++16:50
TheJuliaI might be able to go up the tramway, put some in a box, but I don't think it would make it to germany as snow :)16:51
dtantsurnope :)16:51
dtantsurat least so far no snow has made it to Düsseldorf without turning into a heavy rain16:51
iurygregorysnow++16:52
TheJuliaI just had a depressing throught16:52
TheJuliaabout snow in general, and climate change16:52
iurygregory=(16:53
dtantsurthere can be depressing thoughts there indeed16:53
iurygregoryyeah =(16:54
TheJuliaanyway, shall we end today's meeting so we can proceed with taking over the world16:54
iurygregoryso, I think we are good with our meeting \o/16:54
iurygregoryyeah :D16:55
iurygregoryI will run the next meeting16:55
iurygregoryThanks everyone!16:55
rpittauthanks iurygregory 16:55
TheJuliacool, thanks everyone!16:55
TheJulia#endmeeting16:55
opendevmeetMeeting ended Mon Jan 10 16:55:26 2022 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:55
opendevmeetMinutes:        https://meetings.opendev.org/meetings/ironic/2022/ironic.2022-01-10-16.01.html16:55
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/ironic/2022/ironic.2022-01-10-16.01.txt16:55
opendevmeetLog:            https://meetings.opendev.org/meetings/ironic/2022/ironic.2022-01-10-16.01.log.html16:55
* dtantsur is now eyeing places in Germany where you can get some snow experience without meeting too many people in the process16:56
rpittaubye everyone, see you tomorrow o/16:58
TheJuliadtantsur: as in moving?17:02
dtantsurTheJulia: well, in the near future visiting. moving is not off the tables as well, but highly depends on my wife's future career17:03
TheJuliaYeah17:03
TheJuliaI honestly wish we lived up one of the local mountains17:04
dtantsuryeah17:04
TheJulia*but* getting up/down them can be a pain17:04
dtantsurI sometimes think we should move south, closer to the alps17:04
dtantsurDüsseldorf is nice, but the weather in winter is unbearable. and the landscape is flat as a table.17:05
dtantsurTheJulia: assuming you really need to get up/down :)17:06
TheJuliadtantsur: true... and the cold weather does cause my right knee to ache17:06
dtantsur:(17:07
TheJuliaI remember you said you would be in Düsseldorf for about as long as you had said, but that was also before pandemic17:07
dtantsuryeah.. anyway, it's not up to me to decide at this point17:08
TheJuliayeah17:09
dtantsurI can work from home, but I'd highly prefer that my wife does not :D17:09
TheJulia:)17:09
dtantsur(she deals with antibiotic-resistant bacteria, among other things)17:09
TheJuliaIt can stress a relationship quite a bit, and even then changes can create new/additional stressors17:09
TheJuliaand... yeah17:09
opendevreviewMerged openstack/ironic master: Add dhcp options for each ip_version once  https://review.opendev.org/c/openstack/ironic/+/82381717:23
opendevreviewMerged openstack/ironic master: Make bootloader installation failures fatal for whole disk images  https://review.opendev.org/c/openstack/ironic/+/82372317:23
arne_wiebalckhmm, ^^ didn't we rely on some flexibility during failures, e.g. for stream8 on top of s/w RAID?17:26
opendevreviewHarald Jensås proposed openstack/ironic stable/xena: Add dhcp options for each ip_version once  https://review.opendev.org/c/openstack/ironic/+/82401217:26
opendevreviewHarald Jensås proposed openstack/ironic stable/wallaby: Add dhcp options for each ip_version once  https://review.opendev.org/c/openstack/ironic/+/82401317:27
dtantsurarne_wiebalck: not sure. at least we don't seem to have left a common about it17:27
dtantsurhjensas_: bugfix/19.0 as well please17:28
arne_wiebalckdtantsur: I think s/w RAID on UEFI will break since it uses grub2-install which fails due to lack of secure boot support on stream817:28
dtantsurarne_wiebalck: I think we skip grub-install on UEFI, no?17:28
opendevreviewHarald Jensås proposed openstack/ironic bugfix/19.0: Add dhcp options for each ip_version once  https://review.opendev.org/c/openstack/ironic/+/82401417:28
arne_wiebalckdtantsur: not on s/w RAID17:29
dtantsurcc mgoddard 17:29
arne_wiebalckdtantsur: one more incentive to move to efibootmgr for s7w RAID17:29
arne_wiebalck*s/w RAID17:29
hjensas_dtantsur: done, looks like the issue is in bugfix/18.x as well. Do we need to backport there as well?17:30
dtantsuris there a reason why we don't do it already?17:30
arne_wiebalckdtantsur: we carry this technical debt with us for a while now :-S17:30
dtantsurhjensas_: ideally, but the CI is pretty broken there now17:30
arne_wiebalckdtantsur: the "why" question was for me?17:31
hjensas_dtantsur: ok, I'll propose the changes ...17:31
dtantsurarne_wiebalck: yep17:31
opendevreviewHarald Jensås proposed openstack/ironic bugfix/18.1: Add dhcp options for each ip_version once  https://review.opendev.org/c/openstack/ironic/+/82401517:31
arne_wiebalckdtantsur: no reason, we just need to test and the code is quite convoluted17:31
opendevreviewHarald Jensås proposed openstack/ironic bugfix/18.0: Add dhcp options for each ip_version once  https://review.opendev.org/c/openstack/ironic/+/82401617:31
arne_wiebalckdtantsur: I think stevebaker[m] had a look some months ago and saw no reason to not move17:31
dtantsuris it something either of you could take a look into?17:32
dtantsurI'd rather not rely on silencing errors forever :)17:32
mgoddardarne_wiebalck: oops, didn't mean to break SW RAID17:32
arne_wiebalckdtantsur: totally agree17:32
mgoddardcould we go for a more specific condition for now?17:33
arne_wiebalckmgoddard: didn't assume this :-D17:33
opendevreviewMerged openstack/ironic master: Use driver_internal_info methods for driver utils  https://review.opendev.org/c/openstack/ironic/+/81850517:33
arne_wiebalckmgoddard: and not sure you did, actually17:33
mgoddarde.g. wholedisk + UEFI + SW RAID17:33
arne_wiebalckright17:33
arne_wiebalckon stream8 17:33
dtantsurarne_wiebalck: would it be possible for you to test it once more?17:33
arne_wiebalckdtantsur: the just merged pacth?17:33
dtantsuryeah17:33
arne_wiebalckyes, will try some time later this week17:34
* arne_wiebalck is upgrading Ironic tomorrow17:34
dtantsurI'd expect https://opendev.org/openstack/ironic-python-agent/src/branch/master/ironic_python_agent/extensions/image.py#L791-L794 to always apply to whole disk images17:34
dtantsurpartition images may be an issue, of course17:34
dtantsuranyway, need to go now, see you tomorrow17:36
dtantsuro/17:36
arne_wiebalcko/17:36
arne_wiebalckdtantsur: right, but I think we require the root fs UUID to be provided17:38
opendevreviewVerification of a change to openstack/ironic master failed: Use driver_internal_info methods for redfish driver  https://review.opendev.org/c/openstack/ironic/+/81850817:41
arne_wiebalckbye everyone o/18:12
stevebaker[m]good morning19:36
TheJuliagood morning stevebaker[m] 19:37
stevebaker[m]iurygregory, TheJulia : I spent yesterday getting my head around root/rootwrap/privsep for IPA/ironic/inspector. I think I know the shape of it all now19:38
TheJuliastevebaker[m]: \o/19:42
stevebaker[m]as far as inspector goes, its just the dnsmasq restart thing. I think it can just be converted to privsep, and privsep will only launch a process when a dnsmasq stop/start is requested19:45
stevebaker[m]TheJulia: as for ironic, I'm going to convert this to use pycdlib, so no mount will be required to extract files from the iso https://opendev.org/openstack/ironic/src/branch/master/ironic/common/images.py#L60319:47
stevebaker[m]TheJulia: but create_vfat_image will require privsep I think. Unless you can think of an alternative (some other mount-without-root mechanism, delete the function) https://opendev.org/openstack/ironic/src/branch/master/ironic/common/images.py#L8419:50
opendevreviewVerification of a change to openstack/ironic master failed: Use driver_internal_info methods for redfish driver  https://review.opendev.org/c/openstack/ironic/+/81850819:56
TheJuliaI thought there was a python library out there to interact with fat filesystems directly20:08
stevebaker[m]TheJulia: yeah I found https://pypi.org/project/pyfatfs/ but the readme scared me off "It currently is in an early development state and expected to be unstable and contain bugs."  Its not in openstack requirements, I haven't checked rpm packaging20:12
TheJuliaYeah, that would scare me off too20:20
TheJuliastevebaker[m]: I *wonder* if I was thinking of mtools20:21
TheJuliaand my browser doesn't support ftp....20:22
TheJuliawhat has the world come to20:22
iurygregorystevebaker[m], hey o/20:28
iurygregorystevebaker[m], for ironic we are tracking things in https://storyboard.openstack.org/#!/story/200970420:29
iurygregoryTheJulia, the idea is to convert to mtools20:30
iurygregoryand the iso part we will be using pycdlib20:31
iurygregoryso if I got right we only need privsep in the case dnsmasq? dtantsur mentioned that iptables would require sudo, so if all drivers in inspector will need privsep we won't make it optional 20:34
stevebaker[m]iurygregory, dtantsur : I agree with all that, but please note I'm proposing to *add* a new privsep function to copy root-readable files out of /boot/efi/EFI/<redhat> https://review.opendev.org/c/openstack/ironic/+/82136321:03
iurygregorystevebaker[m], any more context you can provide about it? no other way to do this without privsep? =)21:16
stevebaker[m]iurygregory: not that I can see. /boot/efi is mount root read only, and rpm packaging installs files as root read only. My proposal is that ironic carries this complexity so that all of the configuration tools can do less, and things just work21:19
iurygregorystevebaker[m], got it =) can you create a story for this when possible? 21:20
stevebaker[m]iurygregory: the end result of that work is working grub network boot https://review.opendev.org/c/openstack/bifrost/+/80722021:20
stevebaker[m]sure thing21:20
stevebaker[m]TheJulia: ok, mtools looks like the business, aside from terrible gnu docs21:49
opendevreviewVerification of a change to openstack/ironic master failed: Ensure 'port' is up2date after binding:host_id  https://review.opendev.org/c/openstack/ironic/+/82381122:36
opendevreviewSteve Baker proposed openstack/ironic master: Use mtools mcopy in create_vfat_image  https://review.opendev.org/c/openstack/ironic/+/82407522:37
opendevreviewSteve Baker proposed openstack/ironic master: Use mtools mcopy in create_vfat_image  https://review.opendev.org/c/openstack/ironic/+/82407522:41
jandersgood morning Ironic o/23:46

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!