Wednesday, 2023-08-30

rpittaugood morning ironic! o/06:47
rpittauif anyone has a moment please +W https://review.opendev.org/c/openstack/metalsmith/+/892965 so we can release metalsmith :)08:52
mmalchukgood morning ironic! o/09:46
opendevreviewHarald Jensås proposed openstack/ironic master: devstack - fix IPv6 ping  https://review.opendev.org/c/openstack/ironic/+/89315110:48
iurygregorygood morning Ironic11:35
iurygregoryrpittau, if you have some time https://review.opendev.org/c/openstack/python-ironicclient/+/89156011:49
opendevreviewVerification of a change to openstack/metalsmith master failed: Remove CentOS Stream 8 jobs  https://review.opendev.org/c/openstack/metalsmith/+/89296512:39
rpittauof course12:46
rpittauiurygregory: I'll add it to my list12:47
iurygregoryrpittau, tks! (if I recall JayF is holding the release so we can include it)12:47
rpittauI'll try to get to it before EOD12:48
iurygregoryty!12:51
TheJuliagood morning13:33
rpittaugood morning TheJulia :)13:35
masgharGood morning!13:39
iurygregory good morning TheJulia =)13:40
masgharI have a question: I am trying to move the local-link-connection inspection hook into ironic (link to inspector implementation: https://opendev.org/openstack/ironic-inspector/src/branch/master/ironic_inspector/plugins/local_link_connection.py)13:41
masgharAnd my ramdisk is not collecting any LLDP information for my VM's network interface. I tried increasing the timeout to 180s, but same result13:42
masgharIs there some kind of switch configuration I should do in bifrost?13:42
iurygregoryI think you need pa-collect-lldp=1 as kernel parameter13:43
iurygregoryipa-collect-lldp=1 *13:43
masgharlet me try that, thanks13:44
iurygregorycheck the ironic.conf under [inspector] extra_kernel_params, to see what is there13:45
masgharI added ipa-inspection-collectors=lldp; and now also added ipa-collect-lldp=113:50
iurygregoryfingers crossed13:51
masgharno change13:56
opendevreviewMerged openstack/ironic master: devstack - fix IPv6 ping  https://review.opendev.org/c/openstack/ironic/+/89315113:57
rpittaumasghar: now that I see that, shouldn't that be lldp_basic ?13:58
rpittaualso I think the ipa-collect-lldp kernel param is deprecated in  favor of the collectors13:58
masgharyes, I added just to be sure. lldp_basic was another hook, let me see13:59
rpittauit says indeed lldp in the docs https://docs.openstack.org/ironic-python-agent/latest/admin/how_it_works.html14:01
masgharYes, the lldp-basic hook will not be migrated as per the spec: https://specs.openstack.org/openstack/ironic-specs/specs/approved/merge-inspector.html#inspection-hooks14:03
masghar(fwiw, the eth0 interface on the VM is part of the virbr0 bridge)14:06
opendevreviewJulia Kreger proposed openstack/ironic master: Enable OVN CI  https://review.opendev.org/c/openstack/ironic/+/88508714:19
opendevreviewRafal Lewandowski proposed openstack/bifrost master: Fix for lack of log rotation in Bifrost  https://review.opendev.org/c/openstack/bifrost/+/89319514:23
rpittaumasghar: I'm not sure that will work in bifrost with libvirt, maybe TheJulia or hjensas can give a hint here ?14:25
TheJuliahuh, what?14:25
rpittau:D14:25
TheJuliaI didn't do it!14:25
* TheJulia hides14:25
masghar:P14:26
TheJuliaso the lldp hook just won't get data in CI14:26
opendevreviewRafal Lewandowski proposed openstack/bifrost master: Fix for lack of log rotation in Bifrost  https://review.opendev.org/c/openstack/bifrost/+/89319514:26
TheJuliasince there is no lldp, the kernel param is still a think afaik14:26
masgharI am not trying anything on CI, just running it on a local bifrost setup14:27
TheJuliastill won't collect data, you need an actual physical switch14:27
masgharah right! In that case I should introduce that in my setup somehow...14:28
masghara virtual switch?14:29
masgharbut you said actual physical switch14:29
TheJuliayeah, real physical enterprise switches put lldp bridgeport data packet updates to the wire14:32
TheJuliavirtual switches, not really14:32
masgharalright, I should maybe try to get my hands on one then14:40
masgharthank you!14:40
TheJuliaoh where oh where did my brain go15:31
TheJuliafolks, reminder. When we cut releases upstream, we need to update release_mappings.py15:37
TheJuliafor numbered versions15:37
rpittaummm I think I've never done that for bugfix, only for stable15:40
rpittaushould we that for bugfix branches too ?15:40
TheJuliaon master at least15:41
TheJuliait doesn't need to land on the branch15:41
rpittauok15:42
TheJuliathe upgrade modeling needs to be able to relate numbered versions15:42
iurygregorywe used to add the ones for bugfix https://github.com/openstack/ironic/blob/master/ironic/common/release_mappings.py#L53415:43
iurygregorybut seems like we missed some of the 22.*15:44
TheJuliayeah15:44
rpittaugood night! o/15:50
opendevreviewJulia Kreger proposed openstack/ironic master: Utilize the JSON-RPC port  https://review.opendev.org/c/openstack/ironic/+/87921515:56
opendevreviewMahnoor Asghar proposed openstack/ironic master: [WIP] Add inspection hooks  https://review.opendev.org/c/openstack/ironic/+/89266116:09
opendevreviewMerged openstack/metalsmith master: Remove CentOS Stream 8 jobs  https://review.opendev.org/c/openstack/metalsmith/+/89296516:12
opendevreviewJay Faulkner proposed openstack/ironic master: Correct bindep.txt entries for bookworm  https://review.opendev.org/c/openstack/ironic/+/89322516:31
opendevreviewJulia Kreger proposed openstack/ironic master: Transiton to Storage resource from SimpleStorage  https://review.opendev.org/c/openstack/ironic/+/89225216:36
TheJuliastevebaker[m]: quick review for you when you: https://review.opendev.org/c/openstack/diskimage-builder/+/89319616:39
JayFnice, that patch seems to have fixed the py311 unit tests, they are running now in zuul16:41
JayFfun16:41
JayFI'm curious if we'll pass :)16:41
JayFalmost certainly yes as I'm sure I've accidentally run them on 3.11 locally16:42
mmalchukfolks, please review: https://review.opendev.org/q/hashtag:ironic-week-prio+(status:open+OR+status:merged)+topic:extend-dib-checksum16:46
JayFmmalchuk: you sure that DIB_CHECKSUM change you made got backported that far?16:47
JayFmmalchuk: just sanity checking16:47
mmalchukJayF sure16:47
mmalchukthey stacked16:47
JayFI'm saying for https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/892926/16:48
JayFthat adds support for other checksums16:48
JayFthat was added in a DIB change16:48
JayFare you sure that DIB change got backported and was released for those releases?16:48
mmalchukI did DIB change16:48
JayFit's gotta be released, too, I think, for the backports to land16:48
mmalchukalso ask for tag16:49
JayFyeah, basically once that release happens16:49
JayFthe bump should happen in openstack/requirements for the constraints file for that stable/ version16:49
JayFthen we can put it in IPA-B16:49
JayFotherwise if we release IPA-B before DIB, we release broken DIB_CHECKSUM support16:49
TheJuliaso the underlying conundrum is I think dib's branches are more for convenience16:49
TheJuliaI'm not sure we would release from them16:50
mmalchukyep, this need also urgent fix :https://review.opendev.org/c/openstack/diskimage-builder/+/89319616:50
JayFYeah I have +1 on it but I don't have core in DIB16:50
JayFTheJulia: mmalchuk: Then I'm not convinced we should backport it since we do release stable/ versions of IPA-B16:50
mmalchuknp, waiting for Steve16:50
clarkbdib doesn't branch fwiw16:51
mmalchukit would be nice to land code in the git. yep, dib have a master only16:52
clarkbmmalchuk: why are you asking for tags if there is an unmerged urgent fix?16:52
JayFSo that means we do have to reject the extend DIB_CHECKSUM patches in stable/ in IPA-B16:52
mmalchukclarkb proposed today only16:52
clarkback16:52
mmalchukJayF no! not affected16:53
mmalchukJayF there is no async in IPA-B16:53
JayFI'm not sure what you mean; but I put a comment on the change so if I'm wrong please put it there and I'll have another look16:53
JayFI want to be defensive here so we don't release an IPA-B that just won't work :(16:53
mmalchukDIB uses async, IPA-B not16:53
JayFwhat does async mean in this case16:53
mmalchukexec in bash with & and use wait call16:54
mmalchukasync everywhere async)16:54
TheJulia*but* ipa-b can consume latest dib...16:54
mmalchukTheJulia ipa-и 16:55
JayFTheJulia: https://github.com/openstack/ironic-python-agent-builder/blob/stable/2023.1/tox.ini#L1316:55
mmalchukTheJulia ipa-b uses own call to checksums16:55
JayFTheJulia: in theory, yes. in CI, we tie it to the constaints for that release16:55
mmalchukhere https://review.opendev.org/q/hashtag:ironic-week-prio+(status:open+OR+status:merged)+topic:extend-dib-checksum16:55
JayFmmalchuk: am I misremembering? Wasn't there a change to make DIB_CHECKSUM work in diskimage-builder proper?16:56
JayFyeah this https://github.com/openstack/diskimage-builder/commit/43e47f1912ce07e65181355d4f5c52298a8fba2816:56
JayFdoesn't https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/892913 depend on ^^^16:56
mmalchukJayF yes it uses async and this only in dib16:57
mmalchukipa-b use: https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/88129916:57
TheJuliayeah, those are disjointed operations16:57
JayFoh boy16:57
mmalchukand there is no async16:57
JayFso we use the DIB_CHECKSUM var that DIB uses16:58
JayFand reimplement it ourself16:58
mmalchuksure)16:58
JayFand want to backport it to DIB releases that wouldn't support those values outside of ipa-b?16:58
JayFer, ^ is not exactly right but I mean, we want to backport it to releases where the matching DIB wouldn't understand, e.g. DIB_CHECKSUM=sha256?16:58
mmalchukClark ask me to)16:58
JayFI'm just struggling with what this means for a backport16:59
JayFbecause IPA-B mostly presents a DIB-like interface, and references DIB docs16:59
JayFthis change getting backported would somewhat invalidate that on stable branches16:59
JayFbut because the feature itself is new, DIB_CHECKSUM=blah would've been completely ignored before, now we do a thing16:59
JayFit's probably OK? 16:59
TheJuliaI don't think it is entirely new, I think previously it just did md5 ages ago17:00
mmalchukok17:00
JayFah17:00
TheJuliabut it is a bit fuzzy and most likely okay17:00
JayFI'm basically on the border17:00
mmalchukwe later add DIB_CHECKSUM=sha512 or whatever and drop MD517:00
JayFwhich we usually default to "yes" if we're on the border17:00
JayFmmalchuk: that change will not be backportable :D 17:00
mmalchukbut we need to17:01
mmalchukbecause DIB don't have branches17:01
JayFipa-builder, as configured and treated right now17:01
JayFwhen it branches17:01
JayFis stickied to the version of DIB in upper-constraints.txt for that release17:02
JayFso e.g. stable/2023.1 IPA-B would *never* install a DIB version with changes to DIB_CHECKSUM=md5 gone *unless* someone forced it to17:02
JayFand it's this way for a reason, it's not arbitrary17:02
JayFbecause you may need to make an IPA ramdisk for stable/victoria, using distros from the era of stable/victoria which have been retired from master-dib17:03
mmalchukvictoria not interested, but xena17:04
JayFeither way, you get the idea :) we can't break the old versions against old versions of dib17:04
JayFand we don't test old versions against new versions of dib17:04
JayFif that's wrong, we can talk about changing it, but I am not sure I'm clever enough to find a better way to organize it :)17:05
clarkbold dib does both md5 and sha256. FWIW my understanding is that md5 is still acceptable for data integrity checks. I undersatnd that people want to kill it to remove any confusion or misapplication but I'm pretty sure its fine for this particular use case17:07
clarkbits there so that when you upload it to a cloud provider or copy it from one host to another you can ensure bits don't flip17:07
JayFclarkb: very yes, although mmalchuk left :) 17:07
TheJuliastevebaker[m]: re-review if your up to it https://review.opendev.org/c/openstack/ironic-python-agent/+/88879417:09
TheJuliaclarkb: I've got folks that just want to have a default for all md5 to be disabled.17:10
clarkbside note: these hashes are largely useless when uploading to glance because glance ends up converting images in many cases and the bits change so you have no way of checking the cloud actually got the correct bits in many cases17:11
iurygregoryJayF, if you have time today https://review.opendev.org/c/openstack/python-ironicclient/+/891560 so we can move with the release later =)17:11
JayFI'm in review mode right now, good timing17:12
iurygregory:D17:12
JayFyou just got to the top of the list17:12
TheJuliaclarkb: for ramdisk/initramfs, it doesn't, and the checksums can still be compared afaik17:12
clarkbthats nice17:12
TheJuliaits not like a qcow2 it can re-pack17:12
clarkbto be fair I'm only aware of one instance where we had a bad upload corrupt an image so incidence is low. but after that happened I tried to determien if we could guard against it by comparing hashes post upload and realized you can't17:13
clarkbmakes sense that simpler "lower level" images like ramdisks wouldn't have conversion issues the same way though17:13
TheJuliaaiui, the whole driver is also so one can take checksums and compare them later on for the downloaded artifacts to make sure MITM attack hasn't occured17:14
opendevreviewVerification of a change to openstack/ironic stable/wallaby failed: [iRMC] Fix parse_driver_info bug enforcing SNMP v3 under FIPS mode  https://review.opendev.org/c/openstack/ironic/+/88524617:15
opendevreviewJulia Kreger proposed openstack/ironic master: Add missing release mappings for 22.0 and 22.1  https://review.opendev.org/c/openstack/ironic/+/89323217:33
opendevreviewMerged openstack/ironic-python-agent-builder stable/zed: Add libaio engine for fio on Centos/Rhel9  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/88648917:51
stevebaker[m]good morning18:05
opendevreviewJulia Kreger proposed openstack/ironic master: Add missing release mappings for 22.0 and 22.1  https://review.opendev.org/c/openstack/ironic/+/89323218:05
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: Intentional break to investigate grub2 boot ops  https://review.opendev.org/c/openstack/ironic/+/89323818:05
TheJuliagood morning stevebaker[m] 18:08
JayFhttps://review.opendev.org/c/openstack/ironic/+/893225 fixes those annoying py3.11 timeouts18:20
JayFand hey, our unit tests pass on 3.11 \o/18:20
TheJuliaso with mysql == sadness, but with mariadb == happiness?18:22
JayFno, mysql-client doesn't exist on debian18:22
JayFthe timeouts were because bindep was bailing super early18:22
TheJuliaoh, that explains it only lasting 1 minute 30 seconds18:23
JayFthey have 'default-mysql-client' and 'virtual-mysql-client' which appear to both point to mariadb-client18:23
JayFand I decided to just make it clear in bindep.txt what was happening18:23
TheJuliacool cool18:26
TheJuliaThanks!18:26
opendevreviewMerged openstack/ironic-python-agent-builder stable/zed: Add checksum generation support  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/89292518:34
opendevreviewMerged openstack/ironic-python-agent stable/2023.1: Handle the node being locked  https://review.opendev.org/c/openstack/ironic-python-agent/+/89259318:40
opendevreviewMerged openstack/python-ironicclient master: Firmware Interface support  https://review.opendev.org/c/openstack/python-ironicclient/+/89156018:42
JayFHas anyone run ironic-ui recently?18:49
JayFIt's in the list of things that need a release, it's got no meaningful commits in a year+18:49
* JayF created the release patch and -W -1 it himself here https://review.opendev.org/c/openstack/releases/+/89327418:56
TheJuliarun, dunno. but we haven't gotten reports that it is outright broken afaik18:56
JayFI don't feel good about just rubber stamping a release18:57
JayFbut I also don't feel good if it works and we don't do anything with it18:58
jrosseri run it on Z18:58
jrosserand 2023.1 in the lab18:59
opendevreviewJay Faulkner proposed openstack/ironic-ui master: DNM: Dummy change testing CI  https://review.opendev.org/c/openstack/ironic-ui/+/89327518:59
TheJuliaThen zigo's change at least passing seems okay18:59
JayFjrosser: you mind putting that comment on https://review.opendev.org/c/openstack/releases/+/893274 ?19:00
JayFjrosser: not sure how much you gerrit tbh if that's a hardship I can proxy it19:00
jrosserdone :)19:01
* TheJulia goes back to reading a very long document while waiting for a CI job to fail.19:01
opendevreviewJay Faulkner proposed openstack/ironic master: Fully monkey patch eventlet for consistent behavior  https://review.opendev.org/c/openstack/ironic/+/88799620:08
opendevreviewJay Faulkner proposed openstack/ironic master: DNM: Testing Nova-Ironic driver lessee change.  https://review.opendev.org/c/openstack/ironic/+/88912220:21
opendevreviewJulia Kreger proposed openstack/ironic master: PXE: Remove DHCP option 210 from being set  https://review.opendev.org/c/openstack/ironic/+/89328620:30
opendevreviewJulia Kreger proposed openstack/ironic master: Enable OVN CI  https://review.opendev.org/c/openstack/ironic/+/88508720:37
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: Test grub+ovn-dhcp-opt-210  https://review.opendev.org/c/openstack/ironic/+/89328720:37
opendevreviewJulia Kreger proposed openstack/ironic master: CI: Fix our internal MTU settings  https://review.opendev.org/c/openstack/ironic/+/89311220:46
opendevreviewMerged openstack/ironic-python-agent-builder stable/yoga: Add checksum generation support  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/89296620:53
opendevreviewJay Faulkner proposed openstack/bifrost master: DNM: Verify bifrost jobs can be run w/zuul on ansible 8  https://review.opendev.org/c/openstack/bifrost/+/89329121:24
opendevreviewJay Faulkner proposed openstack/ironic master: DNM: Testing Ironic jobs w/Zuul running ansible 8  https://review.opendev.org/c/openstack/ironic/+/89329522:30
JayFFYI: all voting bifrost jobs passed w/ansible 8, and the Ironic jobs look on their way to the same (already have some passing, the others got kicked off successfully so no apparent impact)23:21
JayFthey are gonna change the default on monday so I thought it prudent to test :)23:21
TheJuliaAwesome23:22

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!