| *** tosky has quit IRC | 00:30 | |
| *** mlavalle has quit IRC | 01:32 | |
| *** macz_ has quit IRC | 02:04 | |
| *** ricolin_ has joined #openstack-meeting-3 | 02:48 | |
| *** hemanth_n has joined #openstack-meeting-3 | 02:53 | |
| *** ricolin_ has quit IRC | 02:59 | |
| *** priteau has quit IRC | 02:59 | |
| *** bcafarel has quit IRC | 03:00 | |
| *** bcafarel has joined #openstack-meeting-3 | 03:25 | |
| *** psachin has joined #openstack-meeting-3 | 03:42 | |
| *** macz_ has joined #openstack-meeting-3 | 05:10 | |
| *** macz_ has quit IRC | 05:15 | |
| *** macz_ has joined #openstack-meeting-3 | 05:48 | |
| *** psachin has quit IRC | 05:50 | |
| *** macz_ has quit IRC | 05:52 | |
| *** macz_ has joined #openstack-meeting-3 | 06:09 | |
| *** macz_ has quit IRC | 06:14 | |
| *** lpetrut has joined #openstack-meeting-3 | 07:06 | |
| *** slaweq has joined #openstack-meeting-3 | 07:13 | |
| *** ralonsoh has joined #openstack-meeting-3 | 07:21 | |
| *** slaweq has quit IRC | 07:39 | |
| *** slaweq has joined #openstack-meeting-3 | 07:42 | |
| *** eolivare has joined #openstack-meeting-3 | 07:44 | |
| *** macz_ has joined #openstack-meeting-3 | 07:53 | |
| *** macz_ has quit IRC | 07:57 | |
| *** belmoreira has joined #openstack-meeting-3 | 07:59 | |
| *** macz_ has joined #openstack-meeting-3 | 08:14 | |
| *** macz_ has quit IRC | 08:19 | |
| *** tosky has joined #openstack-meeting-3 | 08:45 | |
| *** yamamoto has quit IRC | 08:49 | |
| *** macz_ has joined #openstack-meeting-3 | 08:55 | |
| *** yamamoto has joined #openstack-meeting-3 | 08:57 | |
| *** macz_ has quit IRC | 09:00 | |
| *** e0ne has joined #openstack-meeting-3 | 09:12 | |
| *** yamamoto has quit IRC | 09:16 | |
| *** macz_ has joined #openstack-meeting-3 | 09:16 | |
| *** macz_ has quit IRC | 09:21 | |
| *** yamamoto has joined #openstack-meeting-3 | 09:44 | |
| *** yamamoto has quit IRC | 09:50 | |
| *** macz_ has joined #openstack-meeting-3 | 09:58 | |
| *** yamamoto has joined #openstack-meeting-3 | 09:59 | |
| *** macz_ has quit IRC | 10:03 | |
| *** macz_ has joined #openstack-meeting-3 | 10:19 | |
| *** macz_ has quit IRC | 10:24 | |
| *** yamamoto has quit IRC | 10:25 | |
| *** yamamoto has joined #openstack-meeting-3 | 10:27 | |
| *** yamamoto has quit IRC | 10:36 | |
| *** yamamoto has joined #openstack-meeting-3 | 10:37 | |
| *** yamamoto has quit IRC | 10:37 | |
| *** macz_ has joined #openstack-meeting-3 | 10:40 | |
| *** macz_ has quit IRC | 10:45 | |
| *** yamamoto has joined #openstack-meeting-3 | 10:46 | |
| *** macz_ has joined #openstack-meeting-3 | 11:01 | |
| *** macz_ has quit IRC | 11:05 | |
| *** yamamoto has quit IRC | 11:07 | |
| *** yamamoto has joined #openstack-meeting-3 | 11:30 | |
| *** priteau has joined #openstack-meeting-3 | 11:34 | |
| *** macz_ has joined #openstack-meeting-3 | 11:42 | |
| *** macz_ has quit IRC | 11:47 | |
| *** yamamoto has quit IRC | 11:49 | |
| *** yamamoto has joined #openstack-meeting-3 | 11:53 | |
| *** hemanth_n has quit IRC | 12:16 | |
| *** macz_ has joined #openstack-meeting-3 | 12:24 | |
| *** macz_ has quit IRC | 12:29 | |
| *** yamamoto has quit IRC | 12:50 | |
| *** yamamoto has joined #openstack-meeting-3 | 13:05 | |
| *** yamamoto has quit IRC | 13:05 | |
| *** yamamoto has joined #openstack-meeting-3 | 13:05 | |
| *** macz_ has joined #openstack-meeting-3 | 13:06 | |
| *** macz_ has quit IRC | 13:10 | |
| *** yamamoto has quit IRC | 13:10 | |
| *** belmoreira has quit IRC | 13:11 | |
| *** belmoreira has joined #openstack-meeting-3 | 13:14 | |
| *** macz_ has joined #openstack-meeting-3 | 13:27 | |
| *** macz_ has quit IRC | 13:31 | |
| *** yamamoto has joined #openstack-meeting-3 | 13:37 | |
| *** macz_ has joined #openstack-meeting-3 | 13:47 | |
| *** macz_ has quit IRC | 13:52 | |
| *** yamamoto has quit IRC | 13:54 | |
| *** mlavalle has joined #openstack-meeting-3 | 13:55 | |
| *** jeremyfreudberg has joined #openstack-meeting-3 | 13:58 | |
| jeremyfreudberg | #startmeeting sahara | 14:02 |
|---|---|---|
| openstack | Meeting started Thu Feb 18 14:02:17 2021 UTC and is due to finish in 60 minutes. The chair is jeremyfreudberg. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:02 |
| *** openstack changes topic to " (Meeting topic: sahara)" | 14:02 | |
| openstack | The meeting name has been set to 'sahara' | 14:02 |
| tosky | hi | 14:03 |
| jeremyfreudberg | hi! | 14:05 |
| jeremyfreudberg | #topic open discussion | 14:05 |
| *** openstack changes topic to "open discussion (Meeting topic: sahara)" | 14:05 | |
| tosky | no many updates here - I guess the major update is about the upcoming changes to two big plugins? | 14:06 |
| jeremyfreudberg | i'm working on getting some answers about future plans for cdh/hdp | 14:07 |
| tosky | (also: there are a few reviews in the sahara.* world with a +2 by me, so ready for another +2 :) | 14:07 |
| jeremyfreudberg | e.g. would there be developer subscriptions, would there be clones | 14:07 |
| jeremyfreudberg | the conversation is a bit slow going, but we'll see where it goes | 14:08 |
| jeremyfreudberg | oh, i'll take a look | 14:08 |
| *** yamamoto has joined #openstack-meeting-3 | 14:08 | |
| jeremyfreudberg | so, ptl nominations are in month, and i'll nominate myself again for X | 14:09 |
| jeremyfreudberg | but i think X will be the last | 14:10 |
| tosky | oh | 14:11 |
| tosky | I can understand | 14:11 |
| tosky | a bit sad, but I can understand | 14:12 |
| jeremyfreudberg | yeah, i just don't have the time... | 14:15 |
| jeremyfreudberg | and there's not much interest in sahara anyway | 14:15 |
| *** psahoo has joined #openstack-meeting-3 | 14:16 | |
| jeremyfreudberg | anyway, that's all for today | 14:18 |
| jeremyfreudberg | i will provide an update about status of plugins when i can | 14:18 |
| tosky | thanks | 14:19 |
| jeremyfreudberg | #endmeeting | 14:19 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 14:19 | |
| openstack | Meeting ended Thu Feb 18 14:19:50 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:19 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/sahara/2021/sahara.2021-02-18-14.02.html | 14:19 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/sahara/2021/sahara.2021-02-18-14.02.txt | 14:19 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/sahara/2021/sahara.2021-02-18-14.02.log.html | 14:19 |
| *** jeremyfreudberg has left #openstack-meeting-3 | 14:20 | |
| *** macz_ has joined #openstack-meeting-3 | 14:29 | |
| *** macz_ has quit IRC | 14:34 | |
| *** macz_ has joined #openstack-meeting-3 | 14:50 | |
| *** tosky has quit IRC | 14:51 | |
| *** tosky_ has joined #openstack-meeting-3 | 14:51 | |
| *** tosky_ is now known as tosky | 14:51 | |
| *** macz_ has quit IRC | 14:54 | |
| *** yamamoto has quit IRC | 14:57 | |
| *** psahoo has quit IRC | 15:58 | |
| *** elod has joined #openstack-meeting-3 | 15:58 | |
| *** lpetrut has quit IRC | 16:00 | |
| gibi | #startmeeting nova | 16:00 |
| openstack | Meeting started Thu Feb 18 16:00:15 2021 UTC and is due to finish in 60 minutes. The chair is gibi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: nova)" | 16:00 | |
| openstack | The meeting name has been set to 'nova' | 16:00 |
| lyarwood | o/ | 16:00 |
| gibi | o\ | 16:00 |
| artom | ~o~ | 16:00 |
| gmann | o/ | 16:00 |
| artom | Wait, I want to be Adam Driver from Star Wars | 16:00 |
| artom | +o+ | 16:00 |
| dansmith | o/ | 16:01 |
| elod | o/ | 16:01 |
| gibi | #topic Bugs (stuck/critical) | 16:01 |
| *** openstack changes topic to "Bugs (stuck/critical) (Meeting topic: nova)" | 16:02 | |
| gibi | no critical bug | 16:02 |
| gibi | #link 12 new untriaged bugs (-1 since the last meeting): #link https://bugs.launchpad.net/nova/+bugs?search=Search&field.status=New | 16:02 |
| gibi | Is there any specific bug we need to discussi? | 16:02 |
| *** sean-k-mooney has joined #openstack-meeting-3 | 16:03 | |
| bauzas | \o | 16:03 |
| stephenfin | o/ | 16:03 |
| sean-k-mooney | o/ | 16:03 |
| gibi | if no specific bug then | 16:04 |
| gibi | #topic Gate status | 16:04 |
| *** openstack changes topic to "Gate status (Meeting topic: nova)" | 16:04 | |
| gibi | I don't track any high visibility gate failure so I think the gate is fine :) | 16:04 |
| gibi | tell me if not : | 16:05 |
| dansmith | nothing specific to nova that I know of, | 16:05 |
| dansmith | but perf hasn't been great | 16:05 |
| dansmith | I'm still pushing on some things | 16:05 |
| dansmith | did we merge that patch to convert two jobs to parallel? I don't think we did | 16:05 |
| lyarwood | we did | 16:05 |
| lyarwood | no issues thus far AFAICT | 16:05 |
| sean-k-mooney | oh nice | 16:05 |
| dansmith | oh cool | 16:05 |
| lyarwood | https://review.opendev.org/c/openstack/nova/+/775293 | 16:05 |
| gmann | yeah | 16:06 |
| sean-k-mooney | lyarwood: any update on the cirros image rebuild? | 16:06 |
| lyarwood | dansmith: btw, did you want to push ahead with the standalone grenade job removal ahead of the actual migration of grenade to zuulv3? | 16:06 |
| dansmith | lyarwood: well, I was deferring to you on that... I thought you wanted to wait | 16:06 |
| dansmith | just being not on focal doesn't seem like a huge deal to me, | 16:07 |
| dansmith | but if it is, then ... that's fine | 16:07 |
| lyarwood | sean-k-mooney: only that the fix for q35 landed but the cirros team don't see a release coming soon, going to send a mail later about hosting a dev build somewhere for us to use | 16:07 |
| gmann | yeah may be waiting for migration nova grenade to zuulv3 is better | 16:07 |
| lyarwood | well that assumes that someone is working on it | 16:07 |
| gmann | dansmith: it is not focal. all legacy are on bionic | 16:07 |
| dansmith | gmann: I know | 16:07 |
| lyarwood | I've not got the bandwidth at the moment | 16:07 |
| lyarwood | so we either put it off and continue to consume resources | 16:08 |
| sean-k-mooney | lyarwood: ok yes i see https://github.com/cirros-dev/cirros/issues/64 is closed thanks. | 16:08 |
| lyarwood | or switch to just multinode now and migrate to focal later in the cycle | 16:08 |
| gmann | I need to check, i think i have patch for that but id not resume | 16:08 |
| lyarwood | yeah you do | 16:08 |
| lyarwood | tbh I think it's worth more to kill the standalone job now | 16:08 |
| lyarwood | and then migrate to focal later | 16:08 |
| gmann | ok, I will look into that. cannot remember the status | 16:08 |
| dansmith | lyarwood: that's fine with me | 16:08 |
| lyarwood | dansmith: cool | 16:08 |
| lyarwood | dansmith: have you looked at using your async approach during the upgrade in grenade btw? | 16:09 |
| lyarwood | dansmith: for the db migrations etc | 16:09 |
| dansmith | lyarwood: nope not yet, but I could work on that maybe next week and see | 16:09 |
| lyarwood | dansmith: cool if not I'd love to help post m3 along with the focal migration stuff | 16:10 |
| sean-k-mooney | grenade uses devstack underneat right | 16:10 |
| lyarwood | right but the upgrade part isn't part of that AFAIK | 16:10 |
| gmann | grenade zuulv3 yes, legacy use d-g | 16:10 |
| sean-k-mooney | so if you set the envar it might work maybe a DNM test patch would be worth giving it a try | 16:10 |
| dansmith | I too am stretched pretty thin, but this is high payoff work if it helps | 16:10 |
| dansmith | sean-k-mooney: well, there's actual grenade things that could be parallelized | 16:10 |
| dansmith | which I assume is what he meant | 16:11 |
| lyarwood | yup indeed | 16:11 |
| sean-k-mooney | ah right | 16:11 |
| gibi | moving on | 16:11 |
| gibi | #topic Runway status | 16:11 |
| *** openstack changes topic to "Runway status (Meeting topic: nova)" | 16:11 | |
| gibi | I did a scan of the open bps | 16:12 |
| gibi | we have a pretty long list that are close to being merged | 16:12 |
| bauzas | we're 3 weeks from FF, right? | 16:12 |
| sean-k-mooney | march 11th i think | 16:12 |
| sean-k-mooney | so about that | 16:13 |
| gibi | yes | 16:13 |
| bauzas | https://releases.openstack.org/wallaby/schedule.html | 16:13 |
| bauzas | yeah, 3 weeks | 16:13 |
| *** kashyap has joined #openstack-meeting-3 | 16:13 | |
| gibi | let me copy some link here if you need some review targets :) | 16:13 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/libvirt-default-machine-type : review ongoing | 16:13 |
| sean-k-mooney | and 2 weeks for non-client libs | 16:13 |
| gibi | #link https://review.opendev.org/q/topic:bp/routed-networks-scheduling : review ongoing | 16:13 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/libvirt-driver-ip-metadata : had 2 +2 at some point but needs a quick review from sean-k-mooney before we approve | 16:13 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/support-interface-attach-with-qos-ports : the last necessary patch needs a second core | 16:14 |
| sean-k-mooney | gibi: ill review that after the meeting | 16:14 |
| gibi | sean-k-mooney: thanks | 16:15 |
| gibi | also there are things that also close but still need work | 16:15 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/nova-support-webvnc-with-password-anthentication : has multiple negative feedback | 16:15 |
| bauzas | gibi: once I'm free from routed networks, you're next | 16:15 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/compact-db-migrations-wallaby : nova_api db patches needs review | 16:15 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/modernize-os-hypervisors-api : the api code landed, the python-novaclient patch and the policy patch needs some work | 16:15 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/allow-disabling-cpu-flags : good progress, but there is an open discussion in the review about a config option | 16:15 |
| gibi | #link https://blueprints.launchpad.net/nova/+spec/smarter-usb-devices : discussion seems to be concluded, implementation needs code review | 16:15 |
| gibi | bauzas: thanks, I try to get you out of routed net :) | 16:15 |
| bauzas | also, that's not a BP but I promised to rework on https://review.opendev.org/c/openstack/nova/+/761452/ and I'd appreciate reviews | 16:16 |
| bauzas | unless we merge features that touch the RPC API | 16:16 |
| gibi | bauzas: is that patch out of WIP state? | 16:17 |
| dansmith | yeah I didn't realize there was stuff to look at on that | 16:17 |
| gibi | bauzas: I don't remember seeing a review with RPC bump recently | 16:17 |
| bauzas | gibi: this change needs rebase due to the shelve API change from cyborg | 16:18 |
| bauzas | 5.13 IIRC | 16:18 |
| sean-k-mooney | gibi: https://blueprints.launchpad.net/nova/+spec/port-scoped-sriov-numa-affinity is code complete for the sriov portion and i hope to have teh draft of the numa vswitch part done by the end of the week | 16:18 |
| bauzas | and it's WIP because Zuul was mean to me | 16:18 |
| dansmith | bauzas: no change from nov 24, | 16:18 |
| dansmith | I thought you had other things to fix on that? | 16:19 |
| bauzas | dansmith: technically, once I make support for 5.13, it should be ready for reviews | 16:19 |
| gibi | sean-k-mooney: ack I will try to look at it | 16:19 |
| dansmith | bauzas: okay | 16:19 |
| bauzas | dansmith: but I fought weird issues with the jobs | 16:19 |
| gibi | bauzas: ok | 16:19 |
| bauzas | dansmith: and I can't see why they're failing, hence the WIP | 16:20 |
| dansmith | bauzas: okay I thought the gate problem was because you actually broke the api and weren't setting the new version right or something | 16:20 |
| artom | I've switched https://blueprints.launchpad.net/nova/+spec/pci-socket-affinity to 'Needs code review' FWIW, since I assume that's why it was not showing up in that list | 16:20 |
| dansmith | but must be something else? | 16:20 |
| bauzas | dansmith: maybe, a rebase is serisouly needed asap, so we can have time for fixing the problem at time for FF | 16:20 |
| dansmith | bauzas: ack, yeah, we should be landing that at or just before M3, so.. time is close | 16:21 |
| bauzas | but I was dragged on some PEP484 discussions :p | 16:21 |
| gibi | bauzas: :p | 16:21 |
| dansmith | *eyeroll* | 16:21 |
| gibi | artom: sorry, I missed that now I'm awar that bp also has code to review, thanks | 16:21 |
| artom | We've not yet recovered the Gerrit/Lauchpad integration bot, right? | 16:22 |
| gibi | (honestly the broken gerrit - launchpad intergration does not help either) | 16:22 |
| gibi | artom: right | 16:22 |
| artom | There's my answer :P | 16:22 |
| gibi | any other feature we need to talk about? | 16:23 |
| gmann | #link https://review.opendev.org/q/topic:%22bp%252Fremove-tenant-id%22+(status:open%20OR%20status:merged) | 16:23 |
| gmann | I will re-review the remove-tenant-id series, most of nova changes are in good shape. Brian mentioned that one change in simple-tenant-usage API route did not work which I need to debug why. | 16:23 |
| gmann | but this is on top of https://review.opendev.org/c/openstack/nova/+/622336/29 for microversion number | 16:24 |
| gibi | gmann: yeah I aware of that but the novnc patch before it is blocked with negative review at the moment | 16:24 |
| gmann | which need more work | 16:24 |
| gmann | yeah | 16:24 |
| gmann | so we are still going in same order right? | 16:24 |
| gmann | novnc first then remove-tenant-id | 16:24 |
| gibi | those patches currently orderd, it can be reordered if needed you need to change the microversions | 16:24 |
| gibi | I mean the author need to change the microversion | 16:25 |
| gibi | if reordering is needed | 16:25 |
| gmann | yeah, | 16:25 |
| sean-k-mooney | im hoping we can still complete https://specs.openstack.org/openstack/nova-specs/specs/wallaby/approved/libvirt-vdpa-support.html this cycle too but i have been held up by hardware avaiablity until recently. im hoping to move that along next week. no api chagne with this one however so no conflict with ^ | 16:25 |
| gmann | let's see how it goes | 16:25 |
| gibi | yeah | 16:25 |
| gibi | moving on then | 16:25 |
| gibi | #topic Release Planning | 16:25 |
| gibi | #topic Release Planning | 16:25 |
| *** openstack changes topic to "Release Planning (Meeting topic: nova)" | 16:25 | |
| gibi | as it was mentioned already we have 3 weeks until feature freeze | 16:26 |
| gibi | and two weeks until non client lib freeze | 16:26 |
| gibi | I think we made an os-vif relese this week | 16:26 |
| gibi | is there any outstanding commit for os-vif or os-traits / os-resource-classes? | 16:26 |
| gibi | sorry I mixed up | 16:27 |
| gibi | we did an os-traits release | 16:27 |
| sean-k-mooney | os-vif i dont think so | 16:27 |
| gibi | Ok | 16:28 |
| gibi | I opened an etherpad for xena ptg #link https://etherpad.opendev.org/p/nova-xena-ptg | 16:28 |
| gibi | you can dump your topic there | 16:28 |
| gibi | for the ptg | 16:28 |
| gibi | any other release releated thing to discuss? | 16:29 |
| gibi | then | 16:30 |
| gibi | #topic Stable Branches | 16:30 |
| *** openstack changes topic to "Stable Branches (Meeting topic: nova)" | 16:30 | |
| gibi | tempest-slow job is fixed -> Rocky gate is OK \o/ | 16:30 |
| gibi | other stable branches seem OK | 16:30 |
| sean-k-mooney | gibi: do we have anythin to do for placment? | 16:30 |
| gibi | EOM(elod) | 16:30 |
| gibi | sean-k-mooney: release wise? I don't track anything pressing for placement | 16:30 |
| gibi | sean-k-mooney: or for ptg wise? | 16:30 |
| sean-k-mooney | cool | 16:30 |
| sean-k-mooney | release wise | 16:31 |
| sean-k-mooney | we mention the libs like os-traits | 16:31 |
| sean-k-mooney | just wanted to make sure it was good otherwise. we can move on | 16:31 |
| gibi | yeah os-traits are good now I think | 16:31 |
| gibi | sean-k-mooney: OK | 16:31 |
| gibi | so above you see stable status from elod | 16:31 |
| gibi | anything else from stable side to mention? | 16:31 |
| gibi | #topic Sub/related team Highlights | 16:32 |
| *** openstack changes topic to "Sub/related team Highlights (Meeting topic: nova)" | 16:32 | |
| gibi | Libvirt (bauzas) | 16:33 |
| bauzas | honestly, haven't looked this time | 16:33 |
| bauzas | but I think we're all good | 16:33 |
| gibi | ack | 16:34 |
| gibi | #topic Open discussion | 16:34 |
| *** openstack changes topic to "Open discussion (Meeting topic: nova)" | 16:34 | |
| gibi | no topic on the agenda | 16:34 |
| sean-k-mooney | i wanted to highlihgt http://lists.openstack.org/pipermail/openstack-discuss/2021-February/020580.html | 16:35 |
| sean-k-mooney | nova has 2 public security bugs which we shoudl assess | 16:35 |
| sean-k-mooney | the second one https://launchpad.net/bugs/1798904 | 16:35 |
| openstack | Launchpad bug 1798904 in os-vif "tenant isolation is bypassed if port admin-state-up=false" [Critical,Confirmed] - Assigned to sean mooney (sean-k-mooney) | 16:35 |
| *** kashyap has left #openstack-meeting-3 | 16:35 | |
| sean-k-mooney | i think will be covered by a patch that is currenlty under review so i will test that as part of my testing of that patch and cofim i fthe latest comments i lefat are correct | 16:36 |
| sean-k-mooney | the first bug https://bugs.launchpad.net/nova/+bug/1552042 | 16:36 |
| openstack | Launchpad bug 1552042 in OpenStack Compute (nova) "Host data corruption through nova inject_key feature" [Medium,In progress] - Assigned to Matt Riedemann (mriedem) | 16:36 |
| sean-k-mooney | has an abandonded patch that possibel fixes it https://review.opendev.org/c/openstack/nova/+/324720/ | 16:36 |
| sean-k-mooney | but its a few years old and im not super famialr with this area | 16:37 |
| sean-k-mooney | it would be good if we could re triage that and see if it still exist andif the patch is still valid | 16:37 |
| sean-k-mooney | the second bug is related to file injection which is deprecated so as a ptg topic i would like to discuss if we can finally remove that form the api and what that would involve | 16:38 |
| bauzas | what says the security team on both ? | 16:38 |
| bauzas | they aren't embargoed so I guess those aren't critical | 16:39 |
| sean-k-mooney | the embargos expired | 16:39 |
| bauzas | do we have workarounds for the flaws ? | 16:39 |
| sean-k-mooney | not really | 16:40 |
| sean-k-mooney | we have potentally a way to fix both | 16:40 |
| bauzas | well, the advisory is incomplete | 16:40 |
| bauzas | on both | 16:40 |
| sean-k-mooney | right because we did not fully triage them | 16:40 |
| sean-k-mooney | in any case the secuity team has a long standing policy which they have relitvly recently started enforcing again | 16:41 |
| sean-k-mooney | to not let security bugs sit in the prive state indefintly | 16:41 |
| sean-k-mooney | it look like they have gone through the security tracked project and made public any that have long exceeded that embargo period with no recent activity | 16:42 |
| bauzas | https://security.openstack.org/vmt-process.html | 16:42 |
| gibi | I can try to look at the old file injection fix to see if it make sense | 16:42 |
| sean-k-mooney | for nova that is just these two bugs | 16:42 |
| bauzas | for people unaware of the process, this guide helps ^ | 16:42 |
| sean-k-mooney | gibi: i think its just removing a fall back wehre libguest fs is not avaiable | 16:43 |
| gibi | yeah, and we assume libguestfs is safe while the fallback is the real problem | 16:43 |
| sean-k-mooney | yes | 16:43 |
| bauzas | sean-k-mooney: gibi: my take is that given the VMT fully reviewed the impacts and the embargo expired on both, then we just need to treat them as usual bugs | 16:44 |
| sean-k-mooney | that is my breif understanding but i have only looked at this for 30mins | 16:44 |
| bauzas | sean-k-mooney: gibi: but we can debate on the priority | 16:44 |
| sean-k-mooney | bauzas: yes they are now normal bugs but i think we shoudl try to fix them this cycle | 16:44 |
| gibi | bauzas: yeah, I'm fine treating them as normal bugs | 16:45 |
| sean-k-mooney | the port one i have been trying to fix since 2017 i would really like to get that off my plate | 16:45 |
| bauzas | sean-k-mooney: do you have time on owning them ? | 16:46 |
| bauzas | https://bugs.launchpad.net/nova/+bug/1552042 is assigned to mriedem, so... :) | 16:46 |
| openstack | Launchpad bug 1552042 in OpenStack Compute (nova) "Host data corruption through nova inject_key feature" [Medium,In progress] - Assigned to Matt Riedemann (mriedem) | 16:46 |
| sean-k-mooney | i can proably own the other one | 16:46 |
| bauzas | well, if you have time on it, I can offer reviews | 16:46 |
| sean-k-mooney | we can discuss this outside the meeting if we want | 16:46 |
| gibi | I can own the injection one | 16:47 |
| gibi | OK, anything else for today? | 16:47 |
| gibi | if not then | 16:50 |
| gibi | thank you for joining | 16:50 |
| gibi | see you around | 16:50 |
| bauzas | gibi++ | 16:50 |
| gibi | #endmeeting | 16:50 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 16:50 | |
| openstack | Meeting ended Thu Feb 18 16:50:17 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:50 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/nova/2021/nova.2021-02-18-16.00.html | 16:50 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/nova/2021/nova.2021-02-18-16.00.txt | 16:50 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/nova/2021/nova.2021-02-18-16.00.log.html | 16:50 |
| *** sean-k-mooney has left #openstack-meeting-3 | 16:52 | |
| *** macz_ has joined #openstack-meeting-3 | 16:56 | |
| *** elod has left #openstack-meeting-3 | 16:57 | |
| *** macz_ has quit IRC | 17:01 | |
| *** macz_ has joined #openstack-meeting-3 | 17:17 | |
| *** macz_ has quit IRC | 17:22 | |
| *** e0ne has quit IRC | 17:23 | |
| *** e0ne has joined #openstack-meeting-3 | 18:01 | |
| *** macz_ has joined #openstack-meeting-3 | 18:09 | |
| *** macz_ has quit IRC | 18:14 | |
| *** ralonsoh has quit IRC | 18:15 | |
| *** macz_ has joined #openstack-meeting-3 | 18:30 | |
| *** macz_ has quit IRC | 18:35 | |
| *** e0ne_ has joined #openstack-meeting-3 | 19:08 | |
| *** e0ne has quit IRC | 19:08 | |
| *** eolivare has quit IRC | 19:19 | |
| *** e0ne_ has quit IRC | 20:09 | |
| *** slaweq has quit IRC | 20:21 | |
| *** e0ne has joined #openstack-meeting-3 | 20:22 | |
| *** e0ne_ has joined #openstack-meeting-3 | 20:24 | |
| *** e0ne has quit IRC | 20:24 | |
| *** jamesmcarthur has joined #openstack-meeting-3 | 20:26 | |
| *** mgagne has quit IRC | 21:08 | |
| *** jamesmcarthur has quit IRC | 21:12 | |
| *** jamesmcarthur has joined #openstack-meeting-3 | 21:14 | |
| *** jamesmcarthur has quit IRC | 21:26 | |
| *** jamesmcarthur has joined #openstack-meeting-3 | 21:37 | |
| *** jamesmcarthur has quit IRC | 21:39 | |
| *** jamesmcarthur has joined #openstack-meeting-3 | 21:40 | |
| *** belmoreira has quit IRC | 21:50 | |
| *** yamamoto has joined #openstack-meeting-3 | 22:18 | |
| *** jamesmcarthur has quit IRC | 22:38 | |
| *** jamesmcarthur has joined #openstack-meeting-3 | 23:07 | |
| *** jamesmcarthur has quit IRC | 23:15 | |
| *** jamesmcarthur_ has joined #openstack-meeting-3 | 23:15 | |
| *** tosky has quit IRC | 23:31 | |
| *** jamesmcarthur_ has quit IRC | 23:53 | |
| *** jamesmcarthur has joined #openstack-meeting-3 | 23:54 | |
| *** jamesmcarthur has quit IRC | 23:59 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!