Wednesday, 2023-05-03

opendevreviewJulia Kreger proposed openstack/ironic-python-agent master: Fix checksum validation logic  https://review.opendev.org/c/openstack/ironic-python-agent/+/88210900:26
TheJuliaso that should fix things along with a change to ironic itself.00:30
TheJuliawell, the devstack plugin not to hand an md5 checksum in00:30
opendevreviewSteve Baker proposed openstack/ironic stable/2023.1: On rpc service stop, wait for node reservation release  https://review.opendev.org/c/openstack/ironic/+/88211403:50
rpittaugood morning ironic! o/07:45
dmelladorpittau morning ;)08:21
dtantsura wild dmellado appears! hi, long time no see. do you bifrost still? :)08:29
jandershey rpittau dmellado dtantsur and Ironic o/08:32
rpittauhey janders dmellado :)08:35
opendevreviewMerged openstack/ironic-python-agent master: Fix checksum validation logic  https://review.opendev.org/c/openstack/ironic-python-agent/+/88210908:42
opendevreviewVerification of a change to openstack/ironic master failed: Remove use of nomodeset by default  https://review.opendev.org/c/openstack/ironic/+/88157609:58
opendevreviewDmitry Tantsur proposed openstack/ironic-python-agent master: Add network interface speed to the inventory  https://review.opendev.org/c/openstack/ironic-python-agent/+/87915610:20
dtantsurfolks, looking for a 2nd +2 on https://review.opendev.org/c/openstack/ironic-specs/+/880941 please10:21
opendevreviewMerged openstack/ironic-specs master: Amend the inspector merger spec with details about PXE filters  https://review.opendev.org/c/openstack/ironic-specs/+/88094110:43
dtantsurbifrost CS9 is still broken, right? anyone looking into it?11:25
rpittaudtantsur: haven't checked since last week11:49
rpittauI've also seen some issues with standalone redfish11:54
rpittauand it looks like snmp job doesn't really work on jammy :/11:54
dtantsurI think standalone redfish is something TheJulia's patch is fixing12:37
dtantsurhttps://review.opendev.org/c/openstack/ironic/+/88209712:38
dtantsurrpittau: ^^12:39
rpittauah cool12:46
rpittauapproved12:47
TheJuliagood morning13:26
opendevreviewHarald Jensås proposed openstack/ironic-python-agent master: Add support for CentOS SUM files  https://review.opendev.org/c/openstack/ironic-python-agent/+/88215213:29
opendevreviewVerification of a change to openstack/ironic master failed: Remove autocommit, again.  https://review.opendev.org/c/openstack/ironic/+/86283213:48
TheJulia:(....13:49
TheJuliaoh, still running13:49
* TheJulia needs to wake up13:49
TheJuliahjensas: I left a comment on that change, code wise it looks good, but you need two more tests :)13:51
TheJulia... and a release note13:51
TheJulia:)13:51
opendevreviewMerged openstack/ironic master: Change wholedisk image checksum to sha256  https://review.opendev.org/c/openstack/ironic/+/88209713:59
TheJuliayay!14:02
dtantsurTheJulia: discussing md5 on the metal3 meeting now14:10
dtantsurpeople have reservations about removing it completely. I'll relay any further feedback.14:13
* dtantsur is not fond of just turning it off without deprecation either, but this ship has sailed, I guess14:14
TheJuliaI mean... there is no good path given folks just won't change if we don't force it14:17
TheJuliagot a link to the meeting14:17
TheJulia?14:18
dtantsurIt's over already. When we discussed this at the PTG, I thought we would put up a deprecation warning first.14:35
dtantsurThe problem is, BMO has md5 as part of its public API.14:35
JayFyou can enable md5 still via config, yeah?14:36
dtantsurRequires rebuilding IPA14:36
TheJulia... we could supply it as a kernel arg to allow a conductor side option14:47
TheJuliawould that be... acceptable?14:47
dtantsureven just a kernel arg would be fine14:48
TheJuliasure14:48
TheJuliaI don't see any issue with that14:48
JayFUh, I do?14:49
JayFIt's a security setting. 14:49
JayFWe typically don't expose those to dynamic setting14:50
TheJuliadtantsur: do you guys force raw conversion in metal3?14:50
JayFI would presume someone with access enough to collide an MD5 hash would also have access to inject a kernel cli config14:50
dtantsurTheJulia: I think it's happening by default, right?14:51
TheJuliadtantsur: then... I *believe* the hash is getting updated to sha25614:51
dtantsurYeah, possibly. Maybe it's not such an issue for us. (Hard to verify for me - we don't use images in OpenShift)14:51
NobodyCamGood morning Ironic Folks, Happy Hump day!15:37
TheJuliaGood morning NobodyCam 15:38
JayFIt's only Wednesday :| 15:39
JayFgood morning15:39
opendevreviewJulia Kreger proposed openstack/ironic master: Support longer checksums for redfish firmware upgrade  https://review.opendev.org/c/openstack/ironic/+/88216315:48
opendevreviewJulia Kreger proposed openstack/ironic master: Support sha256/sha512 with the ilo firmware upgrade logic  https://review.opendev.org/c/openstack/ironic/+/88216415:48
opendevreviewJulia Kreger proposed openstack/ironic-python-agent master: Fix nvidia hardware manager url parser to permit https  https://review.opendev.org/c/openstack/ironic-python-agent/+/88141015:59
rpittaugood night! o/16:02
JayFA blogpost I wrote a while ago about OpenStack testing metrices just got published -> https://www.gresearch.co.uk/blog/article/invisible-work-of-openstack-testing-matrices/16:03
iurygregorymorning Ironic16:08
iurygregoryo/16:08
* iurygregory is a bit late today because of medical exams16:08
TheJuliagood morning!16:12
iurygregorywhat are the dates for the summit?16:18
TheJuliajune 13th through 15th16:21
TheJuliayou will need to check if you can do visa on arrival or electronic travel authority, or if you'll need to pull a visa entirely16:22
TheJuliaJayF: a possible option is an on-connection configuration option like we do with disk erasure settings16:24
JayFas long as it's more secure than "inject pxe" to override :D 16:25
TheJuliayeah, it would be under the cover of the https session between ironic and the agentg16:25
TheJuliaagent16:26
JayFthat's what I thought :D ++16:27
TheJuliaI... Think I already started that patch somewhere16:29
TheJuliatoo many things in progress16:30
TheJuliayeah, I already codified it16:31
TheJuliain the original patch16:31
opendevreviewMahnoor Asghar proposed openstack/ironic master: Add to Redfish hardware inventory collection  https://review.opendev.org/c/openstack/ironic/+/88178316:32
iurygregorytks TheJulia , yeah I can use eTA (just need to double check since my US visa is in my old passport, but the visa is still valid)16:39
iurygregorynow I need to hope that the flight to vancouver will be like the same price of the one I booked last year to Columbus (but had to cancel)16:39
JayFI'd strongly suspect it'd be cheaper16:41
JayFit's international for you in either case, and Vancouver is a larger airport16:41
iurygregoryyeah, checking on the american airlines it seems cheaper, just need a confirmation from the travel agency and talk with my manager16:42
opendevreviewJulia Kreger proposed openstack/ironic master: Permit Ironic to notify IPA it can support MD5  https://review.opendev.org/c/openstack/ironic/+/88216816:53
TheJuliadtantsur: ^16:53
dtantsurnice!17:10
TheJulianot explicitly tested it, but I copied the var name over and that is a pattern we've used a few times to do params like that17:13
opendevreviewJulia Kreger proposed openstack/metalsmith master: Update MD5 checksum references  https://review.opendev.org/c/openstack/metalsmith/+/88217017:17
opendevreviewDmitry Tantsur proposed openstack/ironic master: [WIP] Migrate the inspector's /continue API  https://review.opendev.org/c/openstack/ironic/+/87594417:18
opendevreviewDmitry Tantsur proposed openstack/ironic master: [DNM] Test new inspection code path  https://review.opendev.org/c/openstack/ironic/+/88149217:19
opendevreviewDmitry Tantsur proposed openstack/ironic master: [WIP] Very basic in-band inspection with a new "agent" interface  https://review.opendev.org/c/openstack/ironic/+/87781417:22
TheJuliaSo neighbors have recommended taking the waterfront downtown train18:06
opendevreviewVerification of a change to openstack/ironic-python-agent stable/zed failed: Fix UTF-16 result handling for efibootmgr  https://review.opendev.org/c/openstack/ironic-python-agent/+/88165818:54
opendevreviewVerification of a change to openstack/ironic master failed: Remove use of nomodeset by default  https://review.opendev.org/c/openstack/ironic/+/88157619:14
TheJuliaci why do you hate me19:57
TheJuliaoh, that was arm gate19:57
opendevreviewHarald Jensås proposed openstack/ironic-python-agent master: Add support for CentOS SUM files  https://review.opendev.org/c/openstack/ironic-python-agent/+/88215220:04
stevebaker[m]good morning20:46
opendevreviewVerification of a change to openstack/ironic master failed: Remove autocommit, again.  https://review.opendev.org/c/openstack/ironic/+/86283220:51
TheJuliagood morning stevebaker[m] 20:53
JayFWe still have grenade problems, I think20:54
JayF> 2023-05-03 20:17:33.375 | + /opt/stack/new/grenade/projects/60_nova/resources.sh:create:113 :   openstack server create --image cirros-0.5.2-x86_64-disk --flavor baremetal --security-group nova_grenade --nic net-id=17de8689-6d80-4f5e-94d2-bb14fc70d571 nova_server1 --wait20:55
JayFthis 500'd, it's the same flavor problem20:55
TheJuliayeah21:00
TheJuliait doesn't record the post to create which was a 500 though21:00
TheJuliaat least, not in nova-api's log21:00
TheJulia10.209.0.197 - - [03/May/2023:20:17:35 +0000] "POST /compute/v2.1/servers HTTP/1.1" 500 802 "-" "python-novaclient"21:02
TheJuliaMay 03 20:17:35.809427 np0033934537 devstack@n-api.service[85091]: DEBUG nova.api.openstack.wsgi [None req-bb9b4386-7047-40c5-8ed8-9237a4e0407b nova_grenade nova_grenade] Action: 'create', calling method: <bound method ServersController.create of <nova.api.openstack.compute.servers.ServersController object at 0x7feb7a614970>>, body: {"server": {"name": "nova_server1", "imageRef": "37cc7ca5-64f4-40ce-91ec-82e504aeebcf", 21:09
TheJulia"flavorRef": "05ad8cb1-94c4-4a1e-9370-f5946d79b757", "min_count": 1, "max_count": 1, "security_groups": [{"name": "ec567d71-f379-4cd3-8082-66d43dba3835"}], "networks": [{"uuid": "17de8689-6d80-4f5e-94d2-bb14fc70d571"}]}} {{(pid=85091) _process_stack /opt/stack/old/nova/nova/api/openstack/wsgi.py:511}}21:09
TheJuliaMay 03 20:17:36.071689 np0033934537 devstack@n-api.service[85091]: DEBUG nova.network.neutron [None req-bb9b4386-7047-40c5-8ed8-9237a4e0407b nova_grenade nova_grenade] validate_networks() for [('17de8689-6d80-4f5e-94d2-bb14fc70d571', None, None, None, None, None)] {{(pid=85091) validate_networks /opt/stack/old/nova/nova/network/neutron.py:2623}} <-- last thing that happens in the logs21:12
TheJuliaI think this is an issue with the network not being right or known21:15
TheJuliatake a look aroudn that time in https://6e35da529aad4707b8b4-f6495af2602100b34baeae26a45cd2d3.ssl.cf1.rackcdn.com/862832/7/gate/ironic-grenade/2dd0a0d/controller/logs/screen-q-svc.txt21:18
JayFMay 03 20:17:35.753890 np0033934537 neutron-server[85856]: INFO neutron.wsgi [None req-42c5ba4d-70d3-4a95-802f-9d3041ca5586 nova_grenade nova_grenade] 10.209.0.197 "GET /v2.0/security-groups/nova_grenade HTTP/1.1" status: 404  len: 328 time: 0.011001321:22
JayFMay 03 20:17:35.796444 np0033934537 neutron-server[85856]: INFO neutron.wsgi [None req-572b1f31-3404-4ad8-90cf-482a0a514a0b nova_grenade nova_grenade] 10.209.0.197 "GET /v2.0/security-groups?name=nova_grenade HTTP/1.1" status: 200  len: 2969 time: 0.039465021:22
JayFthat's weird 21:22
TheJuliaif it is a quota issue... then https://github.com/openstack/nova/blob/master/nova/network/neutron.py#L2656 would only raise an exception if it was <= 021:27
TheJuliabut less than 0 means over committed21:27
JayFis that a bug? should that catch the 0 case, too?21:27
TheJulialess than 0, available ports would have to be start out as -121:28
TheJuliafeels like an off by 1 error to me21:28
TheJuliabut ... given the logging state, I'm not sure if we're actually hitting there or not. We definitely get to the port list query21:28
TheJuliabased upon the neutron log21:28
TheJuliaactually, that compare is after the subtrction21:43
TheJuliaso it could be zero to -121:43
TheJuliabut... that gives us a lead, are quotas in a healthy state21:43
opendevreviewVerification of a change to openstack/ironic master failed: Remove use of nomodeset by default  https://review.opendev.org/c/openstack/ironic/+/88157621:48
TheJuliawasn't pingable21:49
JayFI'm sorry, I'm not doing an awesome job of helping. Not feeling very well today and the brain is moving slowly.21:51
opendevreviewMerged openstack/ironic-python-agent stable/zed: Fix UTF-16 result handling for efibootmgr  https://review.opendev.org/c/openstack/ironic-python-agent/+/88165821:51
TheJuliano worries21:53
TheJuliaI'm kind of stumped21:53
JayFMaybe worthwhile to summarize findings on the list and see if anyone from another project has ideas?21:53
TheJuliaheadline will be "grenade unreliable"21:54
TheJuliaI'm likely going to disappear in a little bit21:55
TheJuliaI can resume looking tomorrow22:02

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!