| rpittau | good morning ironic! o/ | 07:33 |
|---|---|---|
| opendevreview | Pierre Riteau proposed openstack/tenks master: Remove Python 2 leftovers https://review.opendev.org/c/openstack/tenks/+/848698 | 07:35 |
| Kirill_ | Hi. i'm a new dev and now working on vnc console for Ironic. i used this as a start https://review.opendev.org/c/openstack/ironic/+/396661. And have a workable version. But i also know about solution with Graphical Console Interface (https://review.opendev.org/c/openstack/ironic-specs/+/306074).i'm a bit confused who can help me with this and should we discuss it here or talk in another channel?) Thanks | 07:50 |
| opendevreview | Mark Goddard proposed openstack/ironic-python-agent-builder stable/yoga: Add smartmontools package to DIB image https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/848607 | 08:06 |
| opendevreview | Mark Goddard proposed openstack/ironic-python-agent-builder stable/xena: Add smartmontools package to DIB image https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/848608 | 08:06 |
| opendevreview | Mark Goddard proposed openstack/ironic-python-agent-builder stable/wallaby: Add smartmontools package to DIB image https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/848609 | 08:06 |
| opendevreview | Mark Goddard proposed openstack/ironic-python-agent-builder stable/wallaby: Add smartmontools package to DIB image https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/848609 | 08:07 |
| opendevreview | Swapnil Machikar proposed openstack/ironic-tempest-plugin master: Add iDRAC Redfish sync boot mode test https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/848709 | 09:13 |
| opendevreview | Pierre Riteau proposed openstack/tenks master: Use yoga upper constraints for openstack-tox-py36 https://review.opendev.org/c/openstack/tenks/+/848731 | 09:32 |
| arne_wiebalck | Good morning rpittau and Ironic! | 09:34 |
| rpittau | hey arne_wiebalck :) | 09:34 |
| arne_wiebalck | Location-aware scheduling, e.g. making sure instances go to a specific rack in the DC, what do people do to achieve this? | 09:35 |
| arne_wiebalck | (the best I have come up with so far is to have per rack resource classes and flavors ... is there a better way?) | 09:36 |
| opendevreview | Pierre Riteau proposed openstack/tenks master: Use yoga upper constraints for openstack-tox-py36 https://review.opendev.org/c/openstack/tenks/+/848731 | 10:32 |
| dtantsur | Kirill_: hi and welcome! | 10:55 |
| dtantsur | Kirill_: I think the graphical console work is the right foundation to build on. The iDRAC proof-of-concepts relied on old-style drivers that don't even exist any more. | 10:55 |
| dtantsur | Since serial and graphical consoles are not mutual exclusive, we need to have both at the same time. | 10:56 |
| dtantsur | (and yes, this is the right channel to discuss it) | 10:56 |
| Kirill_ | got it. So some my thoughts: we can create a new graphical console for vnc. But we also have rdp console(for example) and it also graphical. should we relocate it to new interface? | 11:08 |
| Kirill_ | whould not it be better to stay in one interface (console interface) and give a possibility to activate several consoles. which are not mutual exclusive. we already providing console type during get/enable requests | 11:10 |
| Kirill_ | @dtantsur (mark check) | 11:17 |
| opendevreview | Jacob Anders proposed openstack/ironic master: Prevent clear_job_queue and reset_idrac failures on older iDRACs https://review.opendev.org/c/openstack/ironic/+/846859 | 11:27 |
| janders | ajya dtantsur hopefully ^ should be all good to go | 11:28 |
| janders | thank you for your reviews | 11:28 |
| dtantsur | Kirill_: an ability to have several console interface implementations active at once will be much more work than finishing the (already approved by the community) idea of a graphical console interface. | 11:30 |
| janders | arne_wiebalck I'm trying to track down an eTag related issue on a Lenovo server. It seems it's somehow being given two eTags (weak and strong) and not liking it: https://bugzilla.redhat.com/show_bug.cgi?id=2084059#c15 | 11:39 |
| janders | do you have any thoughts on this? haven't seen this failure mode before | 11:39 |
| janders | 'If-Match': 'W/"553b2ac3d03428a98ef","553b2ac3d03428a98ef"' - seems it is being fed same eTag as weak and strong for some reason | 11:40 |
| iurygregory | good morning Ironic | 11:41 |
| janders | hey iurygregory o/ | 11:41 |
| Kirill_ | thanks dtantsur(sorry i can't get how to answer here). Got it | 11:54 |
| opendevreview | Dmitry Tantsur proposed openstack/bifrost master: [WIP] Stop passing ironic_url to ansible https://review.opendev.org/c/openstack/bifrost/+/848741 | 12:24 |
| opendevreview | Merged openstack/ironic-lib master: Remove python version 2 pkgs from bindep https://review.opendev.org/c/openstack/ironic-lib/+/830319 | 12:26 |
| opendevreview | Jacob Anders proposed openstack/ironic master: Prevent clear_job_queue and reset_idrac failures on older iDRACs https://review.opendev.org/c/openstack/ironic/+/846859 | 12:27 |
| janders | thank you for the review ajya | 12:34 |
| janders | dtantsur iurygregory when you have time, can I please ask for some +2s for ^? | 12:34 |
| ajya | welcome, janders | 12:34 |
| iurygregory | janders, sure will look today | 12:36 |
| janders | iurygregory ty! | 12:37 |
| janders | arne_wiebalck further to the eTag question above, myself and dtantsur are wondering if we may need to consider splitting the strong and weak eTags and try them separately... | 12:39 |
| iurygregory | I think we had a scenario where we need both ... (this seems like a deja vu...) | 12:42 |
| janders | iurygregory one vendor's fix is another's vendor breakage... hard to win this eh? | 12:43 |
| iurygregory | yes! | 12:43 |
| janders | we may try all combinations... | 12:44 |
| janders | brute force approach | 12:44 |
| dtantsur | I *hope* we're fine trying them separately.. assuming they don't somehow change after each attempt.... | 12:44 |
| janders | uh oh | 12:44 |
| janders | I think that may be a possibility | 12:44 |
| janders | once I figure that out I think I won't need to carry house keys anymore | 12:44 |
| janders | will just pick the locks | 12:44 |
| janders | :D | 12:44 |
| janders | there was that movie about a guy cracking some legendary safes, will find the name | 12:45 |
| janders | we're not quite at that level yet but feels like turning in that direction | 12:45 |
| mraineri | arne_wiebalck: I can look into pushing it to EPEL; haven't done that before so I may need some help | 12:46 |
| mraineri | But I can certainly get it in GitHub as a starting point | 12:46 |
| janders | https://www.imdb.com/title/tt13024674/ < that's the movie I had in mind | 12:47 |
| iurygregory | janders, don't get yourself locked out of your house =P | 12:48 |
| janders | iurygregory will try not to | 12:49 |
| janders | see you tomorrow Ironic o/ | 12:50 |
| rpittau | bye janders o/ | 12:50 |
| janders | thank you for the +2 rpittau | 12:50 |
| rpittau | np :) | 12:54 |
| opendevreview | Martin André proposed openstack/ironic stable/ussuri: Fix installation of virtualbmc with py36 in devstack https://review.opendev.org/c/openstack/ironic/+/847548 | 12:57 |
| derekh__ | TheJulia: I missed your ping a few days ago, you were asking about backporting of https://review.opendev.org/c/openstack/ironic-python-agent/+/846177 | 13:22 |
| mraineri | arne_wiebalck: Not having success with getting the RPM files pushed to PyPI (they get rejected as an invalid distribution) | 13:23 |
| mraineri | But I have them posted on the release of the project on GitHub: https://github.com/DMTF/Redfish-Tacklebox/releases | 13:23 |
| mraineri | So, that's all set for you to try out | 13:23 |
| dtantsur | I'm quite sure RPMs are not distributed via PyPI.. | 13:23 |
| TheJulia | dtantsur++ | 13:23 |
| dtantsur | good morning TheJulia | 13:23 |
| derekh__ | TheJulia: yes, ideally I think I'd like it in bugfix/8.6 and 8.3 , do I need to first propose to stable ? or just the bugfix branches? | 13:23 |
| mraineri | Yeah, I didn't look into it too much yet and had a suspicion that might be the case | 13:24 |
| TheJulia | derekh__: tl;dr in order based upon time | 13:24 |
| TheJulia | derekh__: truthfully I wouldn't mind backporting all the way to wallaby since we're seeing some networkmanager differences on centos9 which is somewhat to be expected as well | 13:25 |
| * TheJulia feels like a zombie | 13:26 | |
| TheJulia | We had people shooting off fireworks until after midnight | 13:27 |
| derekh__ | TheJulia: sounds like a long night | 13:29 |
| dtantsur | ugh | 13:29 |
| ajya | Hi, can these 2 backports get 2nd core reviewer - https://review.opendev.org/c/openstack/ironic/+/848450 https://review.opendev.org/c/openstack/ironic/+/848451 (thanks rpittau as first). | 13:29 |
| * TheJulia ponders more coffee before first meeting | 13:30 | |
| dtantsur | mm, coffee | 13:33 |
| opendevreview | Derek Higgins proposed openstack/ironic-python-agent stable/yoga: Gather details about bond interfaces if present https://review.opendev.org/c/openstack/ironic-python-agent/+/848742 | 13:33 |
| dtantsur | ajya: will put on my list, if nobody beats me to it | 13:33 |
| ajya | thanks, dtantsur | 13:35 |
| iurygregory | ajya, can you push a backport of "Fix redfish-virtual-media for newer iDRACs" to ironic bugfix/19.0 and bugfix/18.1? | 13:39 |
| ajya | iurygregory: ok | 13:40 |
| iurygregory | tks! | 13:40 |
| rpittau | looking for approval for the ansible bump in bifrost if anyone has a minute https://review.opendev.org/c/openstack/bifrost/+/843847 thanks! | 13:41 |
| iurygregory | rpittau, looking now | 13:42 |
| opendevreview | Merged openstack/ironic-lib master: CI: Removing job queue https://review.opendev.org/c/openstack/ironic-lib/+/842612 | 13:52 |
| opendevreview | Aija Jauntēva proposed openstack/ironic bugfix/19.0: Fix redfish-virtual-media for newer iDRACs https://review.opendev.org/c/openstack/ironic/+/848717 | 14:09 |
| opendevreview | Aija Jauntēva proposed openstack/ironic bugfix/18.1: Fix redfish-virtual-media for newer iDRACs https://review.opendev.org/c/openstack/ironic/+/848747 | 14:10 |
| dtantsur | TheJulia: I've just realized that Columbus is in Ohio (yeah, I'm bad at the US geography), and that feels weird given the recent news.. | 14:12 |
| opendevreview | Merged openstack/bifrost master: Use Ansible 5.x https://review.opendev.org/c/openstack/bifrost/+/843847 | 14:32 |
| TheJulia | dtantsur: yeah :( | 14:37 |
| TheJulia | In more than one way, for me | 14:37 |
| TheJulia | dtantsur: on a plus side, Columbus is a bit of a microcosm, but still :\ | 15:00 |
| opendevreview | Merged openstack/ironic bugfix/20.2: Fix redfish-virtual-media for newer iDRACs https://review.opendev.org/c/openstack/ironic/+/848595 | 15:05 |
| opendevreview | Merged openstack/ironic stable/xena: Fix redfish-virtual-media for newer iDRACs https://review.opendev.org/c/openstack/ironic/+/848450 | 15:07 |
| opendevreview | Merged openstack/ironic stable/wallaby: Fix redfish-virtual-media for newer iDRACs https://review.opendev.org/c/openstack/ironic/+/848451 | 15:09 |
| Kirill_ | dtantsur: one more topic to discuss) As you know vnc requires a vnc hand shake. in this case novnc_proxy needs a vnc password which is on Ironic side. In my solution: when Nova sends get_console request in answer it gets url and also this password. on next step Nova puts vnc password into DB->'console_auth_tokens' table. then novnc_proxy takes from this table password and use it for hand shake. Is it a good solution? | 15:33 |
| Kirill_ | <dtantsur>: or we have another way for sharing such creds between components? thanks | 15:35 |
| dtantsur | Kirill_: I cannot really comment for the Nova side (do they already have this table?). I don't feel very easy to publish a password in our API.. I need to remember what we do for console. TheJulia do you still have the console stuff in the context? | 15:36 |
| TheJulia | dtantsur: loading | 15:39 |
| TheJulia | the tapes are spinning, please wait | 15:39 |
| TheJulia | whiiiirrrllll beep boop. | 15:40 |
| Kirill_ | dtantsur: about 'console_auth_tokens' table. it contains a significant infor for novnc_proxy like:token_hash,console_type,updated_at and so on. each time when user tries to access console, looks inside it. per my understanding its not a bad place for password))) but better if someone confirm it | 15:43 |
| TheJulia | So I remember rescue originally had an idea of self generation and providing the password on the api surface response. I remember we didn't really like like and kind of swapped things around so it is always supplied. However in this case we can't really avoid that | 15:44 |
| TheJulia | We presently store the url on the request, but.. we would need a synchronous call to get console data most likely since I suspect it can't even be cached really | 15:45 |
| TheJulia | they have short lifetimes generally from what I'm aware | 15:45 |
| TheJulia | and I'm not really a fan of a password on a url, but I have seen some patches out there that do just that... | 15:47 |
| TheJulia | hmm, what do we return on get console | 15:49 |
| Kirill_ | TheJulia: ironic provides url and console type, i've added password field. | 15:51 |
| Kirill_ | this field is used by nova, user does not see it | 15:52 |
| TheJulia | inside the console info field, so nested one level down | 15:52 |
| TheJulia | yeah, I see it in the shellinabox driver, and a driver for VNC would be sensible as long as it is not stored. I believe they are single use... but I could be very wrong on that | 15:53 |
| TheJulia | Kirill_: so yeah, I suspect that is likely okay in the grand scheme of the universe if it can be returned, and is not stored... | 15:54 |
| TheJulia | \o/ https://github.com/openstack/ironic/blob/master/ironic/common/policy.py#L812-L821 | 15:56 |
| TheJulia | I planned ahead! | 15:56 |
| TheJulia | eh, lessee member might be needed at some point... | 15:57 |
| TheJulia | Depends on how nova, in the future once RBAC is all sorted, how it issues the request. | 15:57 |
| Kirill_ | TheJulia: seems that i didn't get this( what do you mean "if it can be returned, and is not stored...". so the idea of storing password in 'console_auth_tokens' is not good? the problem is that nova_compute_ironic asks url but novnc_proxy only use this table. whould you like to send password/console_info request from proxy to ironic? | 16:04 |
| opendevreview | Dmitry Tantsur proposed openstack/bifrost master: Stop passing ironic_url to ansible modules https://review.opendev.org/c/openstack/bifrost/+/848741 | 16:20 |
| TheJulia | Kirill_: storing it in ironic is not a good idea | 16:23 |
| TheJulia | I have no issue nor real concern what nova does with it | 16:23 |
| TheJulia | Kirill_: nova makes a get console call if memory serves, so just having it in the reply as you suggested, sounds good to me | 16:24 |
| arne_wiebalck | janders: that is totally possible, my fix for this was mostly to solve my problem :) | 16:25 |
| arne_wiebalck | mraineri: I have not done that either ... let me know if you need any help and I can get you in touch with some folks here who have done it | 16:25 |
| dtantsur | Will anyone be terribly upset if I deprecate the redeploy playbook from bifrost? It's not tested in the CI, and is honestly quite trivial. | 16:30 |
| TheJulia | no objection | 16:30 |
| TheJulia | I only had it there as an example | 16:30 |
| TheJulia | (story of our lives and whatnot) | 16:30 |
| rpittau | good night! o/ | 16:31 |
| Kirill_ | TheJulia: thanks! need to ponder what we just discussed) | 16:37 |
| opendevreview | Dmitry Tantsur proposed openstack/bifrost master: [WIP] Deprecate os_ironic_node_info https://review.opendev.org/c/openstack/bifrost/+/848765 | 16:37 |
| TheJulia | I guess I need to get a file out, and get back to addressing the sharp edges on the anaconda driver | 16:53 |
| TheJulia | Hmm.. maybe I need a large grinder | 16:56 |
| dtantsur | see you tomorrow folks o/ | 17:15 |
| TheJulia | o/ | 17:17 |
| TheJulia | JayF: so I was looking at https://review.opendev.org/c/openstack/ironic/+/834709/5/ironic/common/images.py, and wondering if we should just issue a HEAD request | 17:34 |
| TheJulia | that should tell us *for sure* | 17:34 |
| TheJulia | and technically the glance call already does the same afaik | 17:34 |
| TheJulia | so it is not like it would be a huge behavior change... | 17:35 |
| * TheJulia ponders | 17:49 | |
| opendevreview | Merged openstack/ironic-python-agent master: CI: Removing ironic job queue https://review.opendev.org/c/openstack/ironic-python-agent/+/842605 | 18:10 |
| TheJulia | dtantsur: I seem to remember recently chatting about nuking the adoption requirement for rebuild to be functional... am I remembering correctly | 21:57 |
| opendevreview | Julia Kreger proposed openstack/ironic master: Make anaconda non-image deploys sane https://review.opendev.org/c/openstack/ironic/+/834709 | 22:04 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!