Tuesday, 2022-02-15

arne_wiebalckGood morning, Ironic!07:05
hjensasGood morning, Ironic.07:09
hjensasAny diskimage-builder dhcp-all-interfaces element users, can I ask for reviews on https://review.opendev.org/c/openstack/diskimage-builder/+/82598307:10
rpittaugood morning ironic! o/08:02
rpittaudib fix has merged \o/ please have a look at https://review.opendev.org/c/openstack/bifrost/+/827293 when you have a minute08:41
dtantsurmorning folks09:30
opendevreviewDmitry Tantsur proposed openstack/ironic master: CI: use a custom cirros partition image instead of the default  https://review.opendev.org/c/openstack/ironic/+/82788209:34
opendevreviewDmitry Tantsur proposed openstack/ironic master: CI: set the tempest plugin's partition_netboot option  https://review.opendev.org/c/openstack/ironic/+/82748109:37
opendevreviewDmitry Tantsur proposed openstack/ironic master: CI: use a custom cirros partition image instead of the default  https://review.opendev.org/c/openstack/ironic/+/82788210:26
iurygregorygood morning Ironic o/11:26
MahnoorAsgharo/11:30
opendevreviewDmitry Tantsur proposed openstack/ironic master: CI: use a custom cirros partition image instead of the default  https://review.opendev.org/c/openstack/ironic/+/82788211:42
opendevreviewMerged openstack/ironic master: Set correct initrd_filename for iPXE when using Swift  https://review.opendev.org/c/openstack/ironic/+/82877012:00
opendevreviewDmitry Tantsur proposed openstack/ironic master: CI: use a custom cirros partition image instead of the default  https://review.opendev.org/c/openstack/ironic/+/82788212:59
opendevreviewDmitry Tantsur proposed openstack/ironic stable/xena: Set correct initrd_filename for iPXE when using Swift  https://review.opendev.org/c/openstack/ironic/+/82918612:59
opendevreviewDmitry Tantsur proposed openstack/ironic bugfix/19.0: Set correct initrd_filename for iPXE when using Swift  https://review.opendev.org/c/openstack/ironic/+/82918712:59
opendevreviewDmitry Tantsur proposed openstack/ironic stable/wallaby: Set correct initrd_filename for iPXE when using Swift  https://review.opendev.org/c/openstack/ironic/+/82918813:00
dtantsuriurygregory: not sure if you've already requested a bifros release, but maybe we should add https://review.opendev.org/c/openstack/bifrost/+/826307 to finish with breaking changes13:50
dtantsurideally https://review.opendev.org/c/openstack/bifrost/+/826465 too, it's trivial13:50
TheJuliagood morning13:58
MahnoorAsgharGood morning13:58
TheJuliadtantsur: I  just realized, that change won't be backwards compatible... I guess a release note item is needed13:59
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Continue decomposing the "How to" documentation  https://review.opendev.org/c/openstack/bifrost/+/82924514:02
dtantsurTheJulia: you mean, the Notify change? the first one has a note.14:03
dtantsurTheJulia: could you elaborate why you think it won't work and before which ironic change?14:04
dtantsuroslo.service has been using sd_notify since forever14:04
TheJuliaThen why were we dependent upon the ironic change?14:04
dtantsurand bifrost updates ironic on each installation, so I'm really puzzled14:04
dtantsurTheJulia: to be able to test it14:04
TheJuliaand before hand it was still getting called by oslo.service?14:04
dtantsurTheJulia: yep. just too late to be useful for error detection14:05
TheJuliaahh!14:05
TheJuliaokay14:05
TheJuliaI misunderstood14:05
TheJuliaI'm still waking up14:05
dtantsurehhmm, I mean too early. before ironic actually finishes starting.14:05
dtantsurno worries ;)14:05
TheJuliareview updatecd14:05
TheJuliaupdated14:05
dtantsurthx! and good morning14:06
iurygregorydtantsur, ack I haven't pushed yet let me review =)14:06
iurygregorygood morning TheJulia =)14:07
opendevreviewArne Wiebalck proposed openstack/ironic master: [doc][trivial] Fixing typos in RBAC documentation  https://review.opendev.org/c/openstack/ironic/+/82924914:10
opendevreviewDmitry Tantsur proposed openstack/ironic master: CI: use a custom cirros partition image instead of the default  https://review.opendev.org/c/openstack/ironic/+/82788214:13
dtantsurI think this ^^ is getting somewhere finally14:13
opendevreviewDmitry Tantsur proposed openstack/ironic master: CI: set the tempest plugin's partition_netboot option  https://review.opendev.org/c/openstack/ironic/+/82748114:13
opendevreviewArne Wiebalck proposed openstack/ironic master: [doc][trivial] Fixing typos in RBAC documentation  https://review.opendev.org/c/openstack/ironic/+/82924914:14
opendevreviewDmitry Tantsur proposed openstack/ironic master: [DNM] Testing the CI  https://review.opendev.org/c/openstack/ironic/+/82750014:14
opendevreviewHarald Jensås proposed openstack/ironic-lib master: Add platform:base-py[2|3] to bindep  https://review.opendev.org/c/openstack/ironic-lib/+/82927214:23
iurygregorydtantsur, re https://review.opendev.org/c/openstack/bifrost/+/826307 I will request a major release for bifrost, wdyt?14:35
dtantsurI think there are many changes that justify it, yes14:35
iurygregorycool =)14:35
* iurygregory will wait for all CI runs =)14:35
opendevreviewRiccardo Pittau proposed openstack/bifrost master: Fix dib ipa jobs  https://review.opendev.org/c/openstack/bifrost/+/82729314:49
TheJuliamy brain doesn't want to wake up it seems14:50
iurygregorymy brain was sleeping when I thought that 19.1 was good for Ironic release15:11
opendevreviewIury Gregory Melo Ferreira proposed openstack/ironic master: Fix release mapping (19.1 -> 20.0)  https://review.opendev.org/c/openstack/ironic/+/82930815:14
opendevreviewMerged openstack/bifrost master: Use Type=notify in systemd units for services  https://review.opendev.org/c/openstack/bifrost/+/82646515:19
opendevreviewArne Wiebalck proposed openstack/ironic master: [doc][trivial] Fixing typos in RBAC documentation  https://review.opendev.org/c/openstack/ironic/+/82924915:20
opendevreviewVerification of a change to openstack/bifrost master failed: Stop using sub-sections of driver_info  https://review.opendev.org/c/openstack/bifrost/+/82630715:32
arne_wiebalckTheJulia: brief RBAC question if you have a moment: what is the reason the `list` policies are done in code rather than in the policy definition? What I mean is: the policy is `"baremetal:node:list": "role:reader` while effectively, i.e. by code, the rule is `"baremetal:node:list": "(role:reader and scope:system) or (role:reader and project_id:%(node.owner)s`, no?15:48
opendevreviewMahnoor Asghar proposed openstack/ironic master: [WIP] Create API documentation from docstrings  https://review.opendev.org/c/openstack/ironic/+/82720016:04
TheJuliaarne_wiebalck: hmm16:14
TheJuliaarne_wiebalck: because effectively anyone can ask for a list, the query if they are not system scope ends up being project based16:15
TheJuliaand if project based, then nodes are either invisible or not based upon the account used16:16
TheJuliabut also, we can't evaluate project_id matching until we're way down inside the request handling16:17
TheJuliabecause it is a filtered view16:18
TheJuliaarne_wiebalck: I guess the tl;dr is that is how it worked based upon the spec16:20
arne_wiebalckI was wondering if there was a technical reason since the rule is short but requires some implicit knowledge16:22
arne_wiebalckbut I guess list may be a special case16:22
TheJuliaYeah, initial list *is* a super special case16:23
arne_wiebalcksince there is nothing upfront to check the project id / owner against16:23
arne_wiebalckok, I was just wondering :)16:23
arne_wiebalckwe're moving to RBAC and are adapting/transferring our rules ...16:24
TheJuliauseful to override if you just want to lock all ironic down to one tenant16:24
TheJuliaor system...16:25
arne_wiebalckyeah ... our nova is not system scope atm16:25
arne_wiebalckand I am kind of hesistant to change this16:25
arne_wiebalckanyway ... I can report once we have new rules on our experience :)16:26
arne_wiebalck*I can report on our experience once we have new rules16:26
arne_wiebalck(better to read)16:26
TheJuliamost operators run with configurations which are functionally helping enable the original bug the entire effort seeks to fix16:28
TheJuliaso migration is... obviously... tricky16:28
TheJuliawhich has also started to become this expectation of operation too, which is... depressing to say the least.16:30
arne_wiebalckfor operators I think maintaining a comprehensible rule set is an important aspect16:33
arne_wiebalckif the default rules match what you do: perfect16:34
arne_wiebalckif not, try to minimizing the delta, keeping it comprehensible, and do the transition in a low-risk way is not obvious to balance16:35
arne_wiebalck*trying to minimize16:35
rpittaugood night! o/17:02
dtantsurhey-hey folks, I've got you a working cirros partition image https://review.opendev.org/c/openstack/ironic/+/82788217:43
dtantsur(only on UEFI, as explained yesterday)17:43
iurygregoryYAY17:48
iurygregorytime to open a beer and celebrate \o/17:49
dtantsurand review ;)17:49
iurygregorybefore the beer =P17:49
dtantsurideally :D17:49
dtantsurI think my script to build the image may increase your desire for beer17:49
dtantsurfolks, especially TheJulia, wdyt about https://storyboard.openstack.org/#!/story/2007664 ? we may submit it for outreachy18:20
TheJuliadtantsur: i like it18:21
dtantsurthx!18:24
dtantsurback to the CI topic: https://review.opendev.org/c/openstack/ironic/+/827481 and https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/827340 together finally make the jobs test what they should be testing18:24
arne_wiebalckbye everyone, see you on Friday o/18:26
iurygregoryhttps://review.opendev.org/c/openstack/ironic/+/829308 if anyone can do a quick review it would be good :)18:34
dtantsuriurygregory: I wonder which changes you consider to be breaking?18:41
iurygregoryhttps://zuul.opendev.org/t/openstack/build/e5174d1d8d68491aa01d9a2e3e020a4b/log/tox/list-changes-results.log#1932-194318:50
dtantsuriurygregory: the 2nd is definitely just a bug fix18:50
iurygregoryspecially the first one I would say18:50
dtantsurquestionable, but I can live with it18:51
iurygregoryyeah, the second I was considering a bugfix =)18:51
dtantsurI'm not sure how useful it is to signal that we no longer support ancient IPA18:51
iurygregoryLet us see what others think about it18:52
opendevreviewJulia Kreger proposed openstack/ironic-python-agent-builder master: Create random character devices so systemd does not crash  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/82939118:53
TheJuliadtantsur: ^^ ouch18:53
dtantsurO__o18:54
iurygregorywoot18:55
TheJuliamanually created the devices, repacked the ramdisk, the stupid thing booted just fine18:56
TheJulianot in fips mode, boots just fine too18:56
dtantsurTheJulia: https://github.com/systemd/systemd/issues/4167 doesn't seem immediately related, it's about lack of entropy, not the devices being present18:56
dtantsurI wonder what the difference in FIPS mode is. /dev/urandom too insecure?18:57
TheJuliadtantsur: the discussion shifted, but that is the fundimental issue18:57
dtantsurTheJulia: I can't quite agree. "systemd: uninitialized urandom read" is just a warning, I see it in my cirros testing.18:57
TheJulianah, the kernel basically gives you what would be /dev/random if you ask for urandom18:58
TheJuliadtantsur: on rhel, the machine quite literally crashes hard, I've got someone opening a bz against rhel18:58
TheJuliaand found the same basic issue reported against rhel7.4 too :(18:58
dtantsurTheJulia: I totally believe you, just saying that the linked but is about warnings, not crashing18:59
dtantsurso maybe linking to it is confusing18:59
TheJuliaperhaps18:59
TheJuliaI need to lay down18:59
TheJuliathe wind storm is not getting any better, my migraine is getting worse, and the meds are making my stomach hate me18:59
dtantsurouch :(19:00
dtantsurI hope you get better soon19:00
TheJuliathanks19:01
iurygregorytake care TheJulia =)19:04
opendevreviewMerged openstack/ironic-python-agent bugfix/8.4: Update .gitreview for bugfix/8.4  https://review.opendev.org/c/openstack/ironic-python-agent/+/82912019:18
stevebaker[m]good morning19:29
dtantsurmorning stevebaker[m] 19:30
dtantsuryou're serving as my reminder that I'm working too late :)19:31
stevebaker[m]dtantsur: heh :)19:32
dtantsursee you tomorrow folks19:38
iurygregorybe back later, bye everyone o/19:53
opendevreviewVerification of a change to openstack/bifrost master failed: Stop using sub-sections of driver_info  https://review.opendev.org/c/openstack/bifrost/+/82630721:12
opendevreviewHarald Jensås proposed openstack/ironic-lib master: DNM - Test CI  https://review.opendev.org/c/openstack/ironic-lib/+/82940821:15
opendevreviewHarald Jensås proposed openstack/ironic-lib master: DNM - Add platform:base-py[2|3] to bindep  https://review.opendev.org/c/openstack/ironic-lib/+/82927221:31
opendevreviewMerged openstack/ironic master: [doc][trivial] Fixing typos in RBAC documentation  https://review.opendev.org/c/openstack/ironic/+/82924921:45
opendevreviewHarald Jensås proposed openstack/ironic-lib master: Add platform:base-py[2|3] to bindep  https://review.opendev.org/c/openstack/ironic-lib/+/82927221:55
opendevreviewVerification of a change to openstack/ironic-python-agent master failed: Move prepare_boot_partitions_for_softraid to raid_utils  https://review.opendev.org/c/openstack/ironic-python-agent/+/82681422:16

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!