Wednesday, 2024-11-06

opendevreviewcid proposed openstack/ironic master: Save ``configdrive`` in an auxiliary table  https://review.opendev.org/c/openstack/ironic/+/93362204:55
opendevreviewcid proposed openstack/ironic master: [WIP] Add inspection rules  https://review.opendev.org/c/openstack/ironic/+/91830305:07
opendevreviewcid proposed openstack/ironic master: Save ``configdrive`` in an auxiliary table  https://review.opendev.org/c/openstack/ironic/+/93362205:23
rpittaugood morning ironic! o/08:30
rpittau"Package 'qemu' has no installation candidate" of course08:34
opendevreviewRiccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04  https://review.opendev.org/c/openstack/ironic/+/93415008:39
opendevreviewRiccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04  https://review.opendev.org/c/openstack/ironic/+/93415008:54
mnasiadkaGood morning ironic09:47
mnasiadkaI have a fleet of servers that have a USB based NIC (probably some weird internal interface) with 12:34:56:78:90:cd mac address09:47
mnasiadkaAny idea how to filter those out from ironic-inspector discovered ports when add_ports = all?09:48
mnasiadka(because every server has that bloody NIC with the same mac address - so we end up with a conflict on enrollment)09:48
opendevreviewRiccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04  https://review.opendev.org/c/openstack/ironic/+/93415010:48
iurygregorygood morning ironic11:15
dtantsurmnasiadka: mmm, may be a case for a downstream inspection hook11:24
mnasiadkaI worked that around by building IPA image without usb kernel modules ;-)11:26
dtantsurthat's one way to do it :)11:34
opendevreviewDmitry Tantsur proposed openstack/bifrost master: [DNM] Try ironic change without fast-track  https://review.opendev.org/c/openstack/bifrost/+/93423111:41
opendevreviewMichal Nasiadka proposed openstack/networking-generic-switch master: Add vlan aware VMs support  https://review.opendev.org/c/openstack/networking-generic-switch/+/92849011:51
opendevreviewMichal Nasiadka proposed openstack/networking-generic-switch master: Add vlan aware VMs support  https://review.opendev.org/c/openstack/networking-generic-switch/+/92849011:57
opendevreviewDmitry Tantsur proposed openstack/ironic master: Inspection: account for disable_power_off  https://review.opendev.org/c/openstack/ironic/+/93423311:59
opendevreviewDmitry Tantsur proposed openstack/ironic-python-agent master: [WIP] Lockdown mode  https://review.opendev.org/c/openstack/ironic-python-agent/+/93423412:18
opendevreviewRiccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04  https://review.opendev.org/c/openstack/ironic/+/93415013:08
opendevreviewRiccardo Pittau proposed openstack/ironic master: Add support for Ubuntu 24.04  https://review.opendev.org/c/openstack/ironic/+/93415013:17
opendevreviewyatin proposed openstack/ironic unmaintained/zed: [Stable Only] pin virtualbmc/sushy-tools/ironic-tempest-plugin to last released tag  https://review.opendev.org/c/openstack/ironic/+/93414013:18
cardoemnasiadka / dtantsur: https://bugs.launchpad.net/ironic/+bug/2086723 I proposed there that we make port adding a hook.15:29
cardoeJayF: are the ironic-wsgi-api comments correct now on https://docs.openstack.org/ironic/latest/install/install.html ?15:33
dtantsurcardoe: isn't it already a hook in the new inspection implementation?15:34
opendevreviewDmitry Tantsur proposed openstack/ironic-python-agent master: Add a command to lock down the agent  https://review.opendev.org/c/openstack/ironic-python-agent/+/93423415:39
mnasiadkaIt's a hook in new inspection implementation from what I've seen16:04
mnasiadkaI might think of improving that with a filter of bad macs that is configurable - if that's something that would get accepted16:05
cardoeadd ports is a hook?16:13
cardoehrm okay I must have been looking at the old code or redfish16:13
cardoeAlright TheJulia I'm gonna ping ya cause I feel like I'm going crazy...16:14
cardoeSo I swear the policy permissions changed to 2024.2, like I can't run clean operations anymore as the admin on the project where my nodes are. I can only do so as OS_SYSTEM_SCOPE=all16:14
TheJuliaNot off the top of my head, but happy to look … just not this morning. I have a doctor’s appt16:15
TheJuliacardoe: if you can file a bug, detail steps, and detail any policy error messages or other errors you get, that will at least help orient me while looking, when I can look16:28
TheJuliaMy current location is somewhat anti-work at the moment. https://usercontent.irccloud-cdn.com/file/IhQtXdPf/1730910515.JPG16:28
JayFcardoe: almost certainly not, you wanna clean it up?16:28
JayFcardoe: re: wsgi docs16:29
opendevreviewJay Faulkner proposed openstack/ironic master: Remove postgresql testing and documentation  https://review.opendev.org/c/openstack/ironic/+/93105516:52
opendevreviewJay Faulkner proposed openstack/ironic master: Remove postgresql testing and documentation  https://review.opendev.org/c/openstack/ironic/+/93105516:56
rpittaugood night! o/16:57
JayF\o16:58
dtantsurWARNING oslo_utils.imageutils.format_inspector [None req-8ad6f6a6-40c4-41b6-ab6b-7d275849cff5 None None] Safety check mbr on gpt failed because MBR PTE 0 has invalid boot flag: oslo_utils.imageutils.format_inspector.SafetyViolation: MBR PTE 0 has invalid boot flag17:13
dtantsurJayF: this is bad news ^^17:13
cardoeJayF: yeah I can try.17:13
dtantsuroslo.utils rejects some of our valid images, it probably affects your IPA patch too17:13
JayFHave you reported the bug to oslo folks yet?17:14
dtantsurJust discovered it17:14
JayFack, yeah, it'd be ideal if we fix it via them17:14
JayFrather than reverting our structural change17:14
JayFs/via/with/17:14
JayFI do wonder if in the interim we could specifically ignore that response?17:16
dtantsurfor a protocol that was invented decades ago, IRC is surprisingly unusable if you don't have a perfect 100% reliable broadband connection...17:16
dtantsurJayF: it's simply an exception from the validator.. maybe we can filter out the mbr check?17:17
JayFI think we should approach oslo team first before making a decision17:17
JayFand go from there17:17
dtantsuryep17:17
dtantsurI'll try to reproduce the issue locally first17:17
JayFbut I suspect we can except SafetyViolation if msg == 'that exact string'; pass 17:17
JayFor whatever17:17
JayFif we *have to* in the shorter term17:17
dtantsurJayF: I may be crazy.. but it seems from the logs that this fails on trying to validate the IPA kernel O__O17:23
JayFthat's intersting17:24
JayF*interesting17:24
JayFmakes it easy to repro17:24
dtantsurIf so, then good news: it probably does not affect IPA. Bad news: we need to rethink what we validate..17:24
JayFWell; I see it slightly differently?17:29
JayFThis is still a bug in the validator.17:29
JayFWe should fix the validator. 17:29
JayFAlthough I guess we should *never* be converting an IPA kernel17:29
JayFso we probably shouldn't validate it either17:29
JayFmaybe burn the candle from both ends on this one?17:29
dtantsurI can confirm that GPTInspector is used for kernels, but I cannot reproduce the failure..17:29
dtantsur(sorry, I cannot keep a reasonable conversation here - my internet is too unstable)17:34
JayFMaybe get a free irccloud.com account to use while you're flakey?17:36
JayFor just use this as an opportunity to look at IRC less :D 17:36
dtantsurJayF: https://bugs.launchpad.net/ironic/+bug/208681017:42
JayF++ perfect, ty17:43
dtantsurGetting late here, I'll follow-up on it tomorrow if nobody picks it up17:43
* dtantsur is learning about future support of OCI artefacts in podman17:45
JayFo/17:48
dtantsurOkay, I got a person to talk to about distributing qcow2 files via OCI images, which apparently is a thing that exists for podman's internal purposes (VM images for MacOS)17:49
dtantsurWill email them tomorrow17:49
dtantsuro/17:49
opendevreviewDoug Goldstein proposed openstack/ironic master: add qemu-img to necessary dependency list  https://review.opendev.org/c/openstack/ironic/+/93426217:52
cardoedtantsur: yeah which is along the lines of what I was talking about of just using it for blob data. It's how helm charts are OCI images.17:55
cardoehttps://github.com/openstack/glance/commit/806e5146569e5194e10834c104d826aaca20a9e1 just an aside too... glance supports "compressed" container and "docker" container format.17:56
cardoeJayF: actually the docs are correct. We're telling pbr to generate it specifically instead of relying on the old magical gen which wouldn't work.18:25
JayFhttps://docs.openstack.org/ironic-inspector/latest/user/usage.html#scope what's the equivalent of this in in-tree inspection?19:21
JayFbasically I'm confused where/how you'd set scope on the node to match with a rule19:22
JayFdtantsur: Are you gonna be around next monday after the ironic meeting? I think the three of us (me/you/cid) doing a sync on inspection rules would impart me and CID with enough context to pull it over the line19:43
opendevreviewGhanshyam proposed openstack/ironic-tempest-plugin master: Remove stable/2023.1 job from master gate  https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/93427819:51
opendevreviewJay Faulkner proposed openstack/ironic master: [WIP] Add inspection rules  https://review.opendev.org/c/openstack/ironic/+/91830320:15
opendevreviewJay Faulkner proposed openstack/ironic master: Remove postgresql testing and documentation  https://review.opendev.org/c/openstack/ironic/+/93105520:24
JayFI'd /really/ appreciate if we could land https://review.opendev.org/c/openstack/ironic/+/933686 before we require another round of lint fixups20:43
cardoeI gave it my +2. I'm hoping for https://review.opendev.org/c/openstack/ironic/+/927544 as well.21:35
cardoeCause that'll fix us across the board with newer pip.21:35
JayFI'm uploader on that, but added a +121:40
cardoeI've touched it too so I'm just a +121:55
cardoeTheJulia: here's the report I made about my policy oddness https://bugs.launchpad.net/ironic/+bug/208682321:55
cardoeAgain I'm happy to be told I'm doing stuff wrong and complicating things.21:55
cardoeTheJulia: hopefully things are okay I just realized where that photo was :(21:59
JayFcardoe: asked for more info (a redacted ironic.conf; confirmation no custom policy in play)22:05
cardoedone22:14
JayFcardoe: https://review.opendev.org/c/openstack/ironic/+/896570 has been waiting review since approximately the beginning of time22:14
JayFI don't know why other cores haven't looked at it, but I'm happy to land it if you have time to review22:14
JayFI think TheJulia has rebased that 9001 times22:15
cardoeSo my question is how does it relate to chassis?22:16
cardoeAre the child nodes part of 1 chassis?22:16
JayFchassis is deprecated and not a part of parent/child node at all22:16
JayFthere's a parent node field on node, if it's set, bam, that's your parent22:16
cardoeah okay. I had assumed that chassis was like the parent22:16
JayFit's meant to model a situation where you have both a server and a piece of hardware inside (DPU) which both have BMCs22:17
cardoebut if that's going away then makes sense.22:17
JayFwell22:17
JayFit's never going away22:17
JayFwe just don't hook it up to anything22:17
JayFAPI compat means leaving stuff around 22:17
cardoeI mean it makes sense to have children.22:17
cardoeCause you can have a big chassis with nodes that have other things inside them.22:17
cardoeanyway, I will read through this now.22:19
JayFthere's a good spec to read up on it22:45
JayFif you need more background for the review22:45
opendevreviewJay Faulkner proposed openstack/networking-generic-switch stable/2023.2: Do not make actual device changes in bind_port()  https://review.opendev.org/c/openstack/networking-generic-switch/+/89611222:59
JayFiurygregory: dtantsur: I have no idea if we care about bugfix/9.9 or not; but some zuul config issue there is preventing the security fix from landing and we didn't notice: https://review.opendev.org/c/openstack/ironic-python-agent/+/927984 -- please fix or abandon 23:11
opendevreviewJay Faulkner proposed openstack/ironic-tempest-plugin master: Validate automatic lessee  https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/92754523:12
JayFPTG priorities doc needs some reviews; https://review.opendev.org/c/openstack/ironic-specs/+/93409223:16
JayFhttps://review.opendev.org/c/openstack/ironic/+/933104 would help out CI reliability23:16
opendevreviewVerification of a change to openstack/ironic-python-agent master failed: Correct invalid docstrings; s/Found/Error/  https://review.opendev.org/c/openstack/ironic-python-agent/+/91159823:33

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!