opendevreview | cid proposed openstack/ironic master: Save ``configdrive`` in an auxiliary table https://review.opendev.org/c/openstack/ironic/+/933622 | 04:55 |
---|---|---|
opendevreview | cid proposed openstack/ironic master: [WIP] Add inspection rules https://review.opendev.org/c/openstack/ironic/+/918303 | 05:07 |
opendevreview | cid proposed openstack/ironic master: Save ``configdrive`` in an auxiliary table https://review.opendev.org/c/openstack/ironic/+/933622 | 05:23 |
rpittau | good morning ironic! o/ | 08:30 |
rpittau | "Package 'qemu' has no installation candidate" of course | 08:34 |
opendevreview | Riccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04 https://review.opendev.org/c/openstack/ironic/+/934150 | 08:39 |
opendevreview | Riccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04 https://review.opendev.org/c/openstack/ironic/+/934150 | 08:54 |
mnasiadka | Good morning ironic | 09:47 |
mnasiadka | I have a fleet of servers that have a USB based NIC (probably some weird internal interface) with 12:34:56:78:90:cd mac address | 09:47 |
mnasiadka | Any idea how to filter those out from ironic-inspector discovered ports when add_ports = all? | 09:48 |
mnasiadka | (because every server has that bloody NIC with the same mac address - so we end up with a conflict on enrollment) | 09:48 |
opendevreview | Riccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04 https://review.opendev.org/c/openstack/ironic/+/934150 | 10:48 |
iurygregory | good morning ironic | 11:15 |
dtantsur | mnasiadka: mmm, may be a case for a downstream inspection hook | 11:24 |
mnasiadka | I worked that around by building IPA image without usb kernel modules ;-) | 11:26 |
dtantsur | that's one way to do it :) | 11:34 |
opendevreview | Dmitry Tantsur proposed openstack/bifrost master: [DNM] Try ironic change without fast-track https://review.opendev.org/c/openstack/bifrost/+/934231 | 11:41 |
opendevreview | Michal Nasiadka proposed openstack/networking-generic-switch master: Add vlan aware VMs support https://review.opendev.org/c/openstack/networking-generic-switch/+/928490 | 11:51 |
opendevreview | Michal Nasiadka proposed openstack/networking-generic-switch master: Add vlan aware VMs support https://review.opendev.org/c/openstack/networking-generic-switch/+/928490 | 11:57 |
opendevreview | Dmitry Tantsur proposed openstack/ironic master: Inspection: account for disable_power_off https://review.opendev.org/c/openstack/ironic/+/934233 | 11:59 |
opendevreview | Dmitry Tantsur proposed openstack/ironic-python-agent master: [WIP] Lockdown mode https://review.opendev.org/c/openstack/ironic-python-agent/+/934234 | 12:18 |
opendevreview | Riccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04 https://review.opendev.org/c/openstack/ironic/+/934150 | 13:08 |
opendevreview | Riccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04 https://review.opendev.org/c/openstack/ironic/+/934150 | 13:17 |
opendevreview | yatin proposed openstack/ironic unmaintained/zed: [Stable Only] pin virtualbmc/sushy-tools/ironic-tempest-plugin to last released tag https://review.opendev.org/c/openstack/ironic/+/934140 | 13:18 |
cardoe | mnasiadka / dtantsur: https://bugs.launchpad.net/ironic/+bug/2086723 I proposed there that we make port adding a hook. | 15:29 |
cardoe | JayF: are the ironic-wsgi-api comments correct now on https://docs.openstack.org/ironic/latest/install/install.html ? | 15:33 |
dtantsur | cardoe: isn't it already a hook in the new inspection implementation? | 15:34 |
opendevreview | Dmitry Tantsur proposed openstack/ironic-python-agent master: Add a command to lock down the agent https://review.opendev.org/c/openstack/ironic-python-agent/+/934234 | 15:39 |
mnasiadka | It's a hook in new inspection implementation from what I've seen | 16:04 |
mnasiadka | I might think of improving that with a filter of bad macs that is configurable - if that's something that would get accepted | 16:05 |
cardoe | add ports is a hook? | 16:13 |
cardoe | hrm okay I must have been looking at the old code or redfish | 16:13 |
cardoe | Alright TheJulia I'm gonna ping ya cause I feel like I'm going crazy... | 16:14 |
cardoe | So I swear the policy permissions changed to 2024.2, like I can't run clean operations anymore as the admin on the project where my nodes are. I can only do so as OS_SYSTEM_SCOPE=all | 16:14 |
TheJulia | Not off the top of my head, but happy to look … just not this morning. I have a doctor’s appt | 16:15 |
TheJulia | cardoe: if you can file a bug, detail steps, and detail any policy error messages or other errors you get, that will at least help orient me while looking, when I can look | 16:28 |
TheJulia | My current location is somewhat anti-work at the moment. https://usercontent.irccloud-cdn.com/file/IhQtXdPf/1730910515.JPG | 16:28 |
JayF | cardoe: almost certainly not, you wanna clean it up? | 16:28 |
JayF | cardoe: re: wsgi docs | 16:29 |
opendevreview | Jay Faulkner proposed openstack/ironic master: Remove postgresql testing and documentation https://review.opendev.org/c/openstack/ironic/+/931055 | 16:52 |
opendevreview | Jay Faulkner proposed openstack/ironic master: Remove postgresql testing and documentation https://review.opendev.org/c/openstack/ironic/+/931055 | 16:56 |
rpittau | good night! o/ | 16:57 |
JayF | \o | 16:58 |
dtantsur | WARNING oslo_utils.imageutils.format_inspector [None req-8ad6f6a6-40c4-41b6-ab6b-7d275849cff5 None None] Safety check mbr on gpt failed because MBR PTE 0 has invalid boot flag: oslo_utils.imageutils.format_inspector.SafetyViolation: MBR PTE 0 has invalid boot flag | 17:13 |
dtantsur | JayF: this is bad news ^^ | 17:13 |
cardoe | JayF: yeah I can try. | 17:13 |
dtantsur | oslo.utils rejects some of our valid images, it probably affects your IPA patch too | 17:13 |
JayF | Have you reported the bug to oslo folks yet? | 17:14 |
dtantsur | Just discovered it | 17:14 |
JayF | ack, yeah, it'd be ideal if we fix it via them | 17:14 |
JayF | rather than reverting our structural change | 17:14 |
JayF | s/via/with/ | 17:14 |
JayF | I do wonder if in the interim we could specifically ignore that response? | 17:16 |
dtantsur | for a protocol that was invented decades ago, IRC is surprisingly unusable if you don't have a perfect 100% reliable broadband connection... | 17:16 |
dtantsur | JayF: it's simply an exception from the validator.. maybe we can filter out the mbr check? | 17:17 |
JayF | I think we should approach oslo team first before making a decision | 17:17 |
JayF | and go from there | 17:17 |
dtantsur | yep | 17:17 |
dtantsur | I'll try to reproduce the issue locally first | 17:17 |
JayF | but I suspect we can except SafetyViolation if msg == 'that exact string'; pass | 17:17 |
JayF | or whatever | 17:17 |
JayF | if we *have to* in the shorter term | 17:17 |
dtantsur | JayF: I may be crazy.. but it seems from the logs that this fails on trying to validate the IPA kernel O__O | 17:23 |
JayF | that's intersting | 17:24 |
JayF | *interesting | 17:24 |
JayF | makes it easy to repro | 17:24 |
dtantsur | If so, then good news: it probably does not affect IPA. Bad news: we need to rethink what we validate.. | 17:24 |
JayF | Well; I see it slightly differently? | 17:29 |
JayF | This is still a bug in the validator. | 17:29 |
JayF | We should fix the validator. | 17:29 |
JayF | Although I guess we should *never* be converting an IPA kernel | 17:29 |
JayF | so we probably shouldn't validate it either | 17:29 |
JayF | maybe burn the candle from both ends on this one? | 17:29 |
dtantsur | I can confirm that GPTInspector is used for kernels, but I cannot reproduce the failure.. | 17:29 |
dtantsur | (sorry, I cannot keep a reasonable conversation here - my internet is too unstable) | 17:34 |
JayF | Maybe get a free irccloud.com account to use while you're flakey? | 17:36 |
JayF | or just use this as an opportunity to look at IRC less :D | 17:36 |
dtantsur | JayF: https://bugs.launchpad.net/ironic/+bug/2086810 | 17:42 |
JayF | ++ perfect, ty | 17:43 |
dtantsur | Getting late here, I'll follow-up on it tomorrow if nobody picks it up | 17:43 |
* dtantsur is learning about future support of OCI artefacts in podman | 17:45 | |
JayF | o/ | 17:48 |
dtantsur | Okay, I got a person to talk to about distributing qcow2 files via OCI images, which apparently is a thing that exists for podman's internal purposes (VM images for MacOS) | 17:49 |
dtantsur | Will email them tomorrow | 17:49 |
dtantsur | o/ | 17:49 |
opendevreview | Doug Goldstein proposed openstack/ironic master: add qemu-img to necessary dependency list https://review.opendev.org/c/openstack/ironic/+/934262 | 17:52 |
cardoe | dtantsur: yeah which is along the lines of what I was talking about of just using it for blob data. It's how helm charts are OCI images. | 17:55 |
cardoe | https://github.com/openstack/glance/commit/806e5146569e5194e10834c104d826aaca20a9e1 just an aside too... glance supports "compressed" container and "docker" container format. | 17:56 |
cardoe | JayF: actually the docs are correct. We're telling pbr to generate it specifically instead of relying on the old magical gen which wouldn't work. | 18:25 |
JayF | https://docs.openstack.org/ironic-inspector/latest/user/usage.html#scope what's the equivalent of this in in-tree inspection? | 19:21 |
JayF | basically I'm confused where/how you'd set scope on the node to match with a rule | 19:22 |
JayF | dtantsur: Are you gonna be around next monday after the ironic meeting? I think the three of us (me/you/cid) doing a sync on inspection rules would impart me and CID with enough context to pull it over the line | 19:43 |
opendevreview | Ghanshyam proposed openstack/ironic-tempest-plugin master: Remove stable/2023.1 job from master gate https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/934278 | 19:51 |
opendevreview | Jay Faulkner proposed openstack/ironic master: [WIP] Add inspection rules https://review.opendev.org/c/openstack/ironic/+/918303 | 20:15 |
opendevreview | Jay Faulkner proposed openstack/ironic master: Remove postgresql testing and documentation https://review.opendev.org/c/openstack/ironic/+/931055 | 20:24 |
JayF | I'd /really/ appreciate if we could land https://review.opendev.org/c/openstack/ironic/+/933686 before we require another round of lint fixups | 20:43 |
cardoe | I gave it my +2. I'm hoping for https://review.opendev.org/c/openstack/ironic/+/927544 as well. | 21:35 |
cardoe | Cause that'll fix us across the board with newer pip. | 21:35 |
JayF | I'm uploader on that, but added a +1 | 21:40 |
cardoe | I've touched it too so I'm just a +1 | 21:55 |
cardoe | TheJulia: here's the report I made about my policy oddness https://bugs.launchpad.net/ironic/+bug/2086823 | 21:55 |
cardoe | Again I'm happy to be told I'm doing stuff wrong and complicating things. | 21:55 |
cardoe | TheJulia: hopefully things are okay I just realized where that photo was :( | 21:59 |
JayF | cardoe: asked for more info (a redacted ironic.conf; confirmation no custom policy in play) | 22:05 |
cardoe | done | 22:14 |
JayF | cardoe: https://review.opendev.org/c/openstack/ironic/+/896570 has been waiting review since approximately the beginning of time | 22:14 |
JayF | I don't know why other cores haven't looked at it, but I'm happy to land it if you have time to review | 22:14 |
JayF | I think TheJulia has rebased that 9001 times | 22:15 |
cardoe | So my question is how does it relate to chassis? | 22:16 |
cardoe | Are the child nodes part of 1 chassis? | 22:16 |
JayF | chassis is deprecated and not a part of parent/child node at all | 22:16 |
JayF | there's a parent node field on node, if it's set, bam, that's your parent | 22:16 |
cardoe | ah okay. I had assumed that chassis was like the parent | 22:16 |
JayF | it's meant to model a situation where you have both a server and a piece of hardware inside (DPU) which both have BMCs | 22:17 |
cardoe | but if that's going away then makes sense. | 22:17 |
JayF | well | 22:17 |
JayF | it's never going away | 22:17 |
JayF | we just don't hook it up to anything | 22:17 |
JayF | API compat means leaving stuff around | 22:17 |
cardoe | I mean it makes sense to have children. | 22:17 |
cardoe | Cause you can have a big chassis with nodes that have other things inside them. | 22:17 |
cardoe | anyway, I will read through this now. | 22:19 |
JayF | there's a good spec to read up on it | 22:45 |
JayF | if you need more background for the review | 22:45 |
opendevreview | Jay Faulkner proposed openstack/networking-generic-switch stable/2023.2: Do not make actual device changes in bind_port() https://review.opendev.org/c/openstack/networking-generic-switch/+/896112 | 22:59 |
JayF | iurygregory: dtantsur: I have no idea if we care about bugfix/9.9 or not; but some zuul config issue there is preventing the security fix from landing and we didn't notice: https://review.opendev.org/c/openstack/ironic-python-agent/+/927984 -- please fix or abandon | 23:11 |
opendevreview | Jay Faulkner proposed openstack/ironic-tempest-plugin master: Validate automatic lessee https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/927545 | 23:12 |
JayF | PTG priorities doc needs some reviews; https://review.opendev.org/c/openstack/ironic-specs/+/934092 | 23:16 |
JayF | https://review.opendev.org/c/openstack/ironic/+/933104 would help out CI reliability | 23:16 |
opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Correct invalid docstrings; s/Found/Error/ https://review.opendev.org/c/openstack/ironic-python-agent/+/911598 | 23:33 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!