| *** ttsiouts has quit IRC | 00:02 | |
| *** macza has quit IRC | 00:07 | |
| *** mattw4 has joined #openstack-meeting | 00:16 | |
| *** mattw4 has quit IRC | 00:24 | |
| *** mattw4 has joined #openstack-meeting | 00:24 | |
| *** eharney has quit IRC | 00:34 | |
| *** tetsuro has joined #openstack-meeting | 00:35 | |
| *** TxGirlGeek has quit IRC | 00:37 | |
| *** Liang__ has joined #openstack-meeting | 00:46 | |
| *** TxGirlGeek has joined #openstack-meeting | 00:51 | |
| *** TxGirlGeek has quit IRC | 00:55 | |
| *** erlon has joined #openstack-meeting | 00:58 | |
| *** igordc has quit IRC | 00:59 | |
| *** mahatic has quit IRC | 00:59 | |
| *** Qiming has quit IRC | 00:59 | |
| *** Qiming has joined #openstack-meeting | 01:00 | |
| *** mattw4 has quit IRC | 01:06 | |
| *** slaweq has joined #openstack-meeting | 01:11 | |
| *** slaweq has quit IRC | 01:16 | |
| *** erlon has quit IRC | 01:17 | |
| *** jamesmcarthur has joined #openstack-meeting | 01:24 | |
| *** jamesmcarthur has quit IRC | 01:28 | |
| *** whoami-rajat has joined #openstack-meeting | 01:32 | |
| *** mriedem has quit IRC | 01:39 | |
| *** erlon has joined #openstack-meeting | 01:40 | |
| *** njohnston has quit IRC | 01:53 | |
| *** bobh has joined #openstack-meeting | 01:57 | |
| *** erlon has quit IRC | 02:10 | |
| *** arne_wiebalck_ has joined #openstack-meeting | 02:19 | |
| *** pcarver has quit IRC | 02:19 | |
| *** pcarver has joined #openstack-meeting | 02:19 | |
| *** edleafe has quit IRC | 02:19 | |
| *** arne_wiebalck has quit IRC | 02:20 | |
| *** arne_wiebalck_ is now known as arne_wiebalck | 02:20 | |
| *** hongbin has joined #openstack-meeting | 02:22 | |
| *** devananda has quit IRC | 02:27 | |
| *** dmacpher__ has quit IRC | 02:34 | |
| *** bobh has quit IRC | 02:37 | |
| *** chason_ has joined #openstack-meeting | 02:37 | |
| *** manjeets_ has joined #openstack-meeting | 02:39 | |
| *** lifeless has quit IRC | 02:40 | |
| *** lifeless has joined #openstack-meeting | 02:41 | |
| *** sw3_ has joined #openstack-meeting | 02:42 | |
| *** samP_ has joined #openstack-meeting | 02:44 | |
| *** chason has quit IRC | 02:46 | |
| *** toabctl has quit IRC | 02:46 | |
| *** vabada has quit IRC | 02:46 | |
| *** manjeets has quit IRC | 02:46 | |
| *** sw3 has quit IRC | 02:46 | |
| *** samP has quit IRC | 02:46 | |
| *** DinaBelova has quit IRC | 02:46 | |
| *** samP_ is now known as samP | 02:46 | |
| *** sw3_ is now known as sw3 | 02:46 | |
| *** vabada has joined #openstack-meeting | 02:46 | |
| *** freerunner has joined #openstack-meeting | 02:46 | |
| *** njohnston has joined #openstack-meeting | 02:47 | |
| *** psachin has joined #openstack-meeting | 02:49 | |
| *** mhen has quit IRC | 02:49 | |
| *** mhen has joined #openstack-meeting | 02:51 | |
| *** iyamahat has quit IRC | 02:58 | |
| *** yamahata has quit IRC | 02:59 | |
| *** ekcs has quit IRC | 03:11 | |
| *** slaweq has joined #openstack-meeting | 03:11 | |
| *** apetrich has quit IRC | 03:14 | |
| *** slaweq has quit IRC | 03:15 | |
| *** njohnston has quit IRC | 03:27 | |
| *** imsurit_ofc has joined #openstack-meeting | 03:58 | |
| *** tetsuro has quit IRC | 04:05 | |
| *** nnsingh has joined #openstack-meeting | 04:18 | |
| *** lifeless has quit IRC | 04:30 | |
| *** yamahata has joined #openstack-meeting | 04:46 | |
| *** alex_xu has quit IRC | 04:49 | |
| *** rcernin has quit IRC | 05:05 | |
| *** rcernin has joined #openstack-meeting | 05:07 | |
| *** slaweq has joined #openstack-meeting | 05:11 | |
| *** slaweq has quit IRC | 05:16 | |
| *** Bhujay has joined #openstack-meeting | 05:20 | |
| *** Bhujay has quit IRC | 05:21 | |
| *** Bhujay has joined #openstack-meeting | 05:21 | |
| *** hongbin has quit IRC | 05:23 | |
| *** haleyb has quit IRC | 05:29 | |
| *** sridharg has joined #openstack-meeting | 05:48 | |
| *** lifeless has joined #openstack-meeting | 05:51 | |
| *** ekcs has joined #openstack-meeting | 05:51 | |
| *** iyamahat has joined #openstack-meeting | 06:00 | |
| *** diablo_rojo has quit IRC | 06:04 | |
| *** Bhujay has quit IRC | 06:07 | |
| *** Bhujay has joined #openstack-meeting | 06:07 | |
| *** Bhujay has quit IRC | 06:08 | |
| *** Bhujay has joined #openstack-meeting | 06:08 | |
| *** Bhujay has quit IRC | 06:10 | |
| *** Bhujay has joined #openstack-meeting | 06:10 | |
| *** slaweq has joined #openstack-meeting | 06:11 | |
| *** Bhujay has quit IRC | 06:11 | |
| *** Bhujay has joined #openstack-meeting | 06:11 | |
| *** radeks has joined #openstack-meeting | 06:12 | |
| *** Bhujay has quit IRC | 06:13 | |
| *** ekcs has quit IRC | 06:13 | |
| *** Bhujay has joined #openstack-meeting | 06:13 | |
| *** Bhujay has quit IRC | 06:14 | |
| *** radeks_ has joined #openstack-meeting | 06:14 | |
| *** Bhujay has joined #openstack-meeting | 06:14 | |
| *** Bhujay has quit IRC | 06:16 | |
| *** Bhujay has joined #openstack-meeting | 06:16 | |
| *** slaweq has quit IRC | 06:16 | |
| *** Bhujay has quit IRC | 06:17 | |
| *** radeks has quit IRC | 06:17 | |
| *** Bhujay has joined #openstack-meeting | 06:17 | |
| *** Bhujay has quit IRC | 06:19 | |
| *** Bhujay has joined #openstack-meeting | 06:19 | |
| *** Bhujay has quit IRC | 06:20 | |
| *** Bhujay has joined #openstack-meeting | 06:20 | |
| *** Bhujay has quit IRC | 06:22 | |
| *** Bhujay has joined #openstack-meeting | 06:22 | |
| *** Bhujay has quit IRC | 06:23 | |
| *** Bhujay has joined #openstack-meeting | 06:23 | |
| *** vishakha has joined #openstack-meeting | 06:30 | |
| *** sridharg has quit IRC | 06:37 | |
| *** sridharg has joined #openstack-meeting | 06:38 | |
| *** browny_ is now known as browny | 06:42 | |
| *** Luzi has joined #openstack-meeting | 06:43 | |
| *** ekcs has joined #openstack-meeting | 06:54 | |
| *** slaweq has joined #openstack-meeting | 06:56 | |
| *** radeks_ has quit IRC | 07:16 | |
| *** rcernin has quit IRC | 07:20 | |
| *** sridharg has quit IRC | 07:28 | |
| *** sridharg has joined #openstack-meeting | 07:29 | |
| *** radeks_ has joined #openstack-meeting | 07:32 | |
| *** apetrich has joined #openstack-meeting | 07:32 | |
| *** pcaruana has joined #openstack-meeting | 07:36 | |
| *** imsurit_ofc has quit IRC | 07:39 | |
| *** cloudrancher has quit IRC | 07:47 | |
| *** cloudrancher has joined #openstack-meeting | 07:47 | |
| *** cloudrancher has quit IRC | 07:48 | |
| *** cloudrancher has joined #openstack-meeting | 07:48 | |
| *** cloudrancher has quit IRC | 07:49 | |
| *** cloudrancher has joined #openstack-meeting | 07:49 | |
| *** cloudrancher has quit IRC | 07:50 | |
| *** cloudrancher has joined #openstack-meeting | 07:51 | |
| *** e0ne has joined #openstack-meeting | 07:52 | |
| *** ralonsoh has joined #openstack-meeting | 07:59 | |
| *** Bhujay has quit IRC | 08:13 | |
| *** kopecmartin|off is now known as kopecmartin | 08:28 | |
| *** radeks__ has joined #openstack-meeting | 08:36 | |
| *** radeks_ has quit IRC | 08:39 | |
| *** brault has joined #openstack-meeting | 08:42 | |
| *** aojea has joined #openstack-meeting | 08:44 | |
| *** brault has quit IRC | 08:45 | |
| *** imsurit_ofc has joined #openstack-meeting | 08:49 | |
| *** priteau has joined #openstack-meeting | 08:53 | |
| *** hyunsikyang has quit IRC | 08:55 | |
| *** Bhujay has joined #openstack-meeting | 08:56 | |
| *** imsurit_ofc has quit IRC | 08:59 | |
| *** hyunsikyang has joined #openstack-meeting | 09:05 | |
| *** david-lyle has joined #openstack-meeting | 09:16 | |
| *** dklyle has quit IRC | 09:19 | |
| *** snierodz has joined #openstack-meeting | 09:20 | |
| *** cloudrancher has quit IRC | 09:21 | |
| *** cloudrancher has joined #openstack-meeting | 09:21 | |
| *** cloudrancher has quit IRC | 09:22 | |
| *** a-pugachev has joined #openstack-meeting | 09:23 | |
| *** cloudrancher has joined #openstack-meeting | 09:23 | |
| *** cloudrancher has quit IRC | 09:24 | |
| *** cloudrancher has joined #openstack-meeting | 09:24 | |
| *** aojea has quit IRC | 09:28 | |
| *** aojea has joined #openstack-meeting | 09:28 | |
| *** david-lyle has quit IRC | 09:29 | |
| *** lhinds has quit IRC | 09:31 | |
| *** dklyle has joined #openstack-meeting | 09:32 | |
| *** aojea has quit IRC | 09:32 | |
| *** lhinds has joined #openstack-meeting | 09:34 | |
| *** Liang__ has quit IRC | 09:38 | |
| *** david-lyle has joined #openstack-meeting | 09:49 | |
| *** ysandeep has joined #openstack-meeting | 09:51 | |
| *** dklyle has quit IRC | 09:51 | |
| *** ysandeep has quit IRC | 09:53 | |
| *** david-lyle has quit IRC | 09:56 | |
| *** a-pugachev has quit IRC | 09:58 | |
| *** a-pugachev has joined #openstack-meeting | 09:59 | |
| *** dklyle has joined #openstack-meeting | 10:00 | |
| *** arne_wiebalck_ has joined #openstack-meeting | 10:03 | |
| *** iyamahat has quit IRC | 10:05 | |
| *** arne_wiebalck_ has quit IRC | 10:07 | |
| *** redrobot has quit IRC | 10:11 | |
| *** nnsingh has quit IRC | 10:17 | |
| *** erlon has joined #openstack-meeting | 10:18 | |
| *** aojea has joined #openstack-meeting | 10:28 | |
| *** M0nk3Ee has quit IRC | 10:29 | |
| *** M0nk3Ee has joined #openstack-meeting | 10:29 | |
| *** a-pugachev has quit IRC | 10:30 | |
| *** psachin has quit IRC | 10:31 | |
| *** sridharg has quit IRC | 10:32 | |
| *** sridharg has joined #openstack-meeting | 10:34 | |
| *** sridharg has quit IRC | 10:36 | |
| *** sridharg has joined #openstack-meeting | 10:36 | |
| *** Bhujay has quit IRC | 10:37 | |
| *** niceplace has quit IRC | 10:40 | |
| *** niceplace has joined #openstack-meeting | 10:41 | |
| *** Bhujay has joined #openstack-meeting | 10:53 | |
| *** iyamahat has joined #openstack-meeting | 10:54 | |
| *** aojea has quit IRC | 10:59 | |
| *** a-pugachev has joined #openstack-meeting | 10:59 | |
| *** lpetrut has joined #openstack-meeting | 11:03 | |
| *** yamahata has quit IRC | 11:19 | |
| *** iyamahat has quit IRC | 11:19 | |
| *** yamahata has joined #openstack-meeting | 11:20 | |
| *** abishop has joined #openstack-meeting | 11:25 | |
| *** ganso has joined #openstack-meeting | 11:28 | |
| *** yamahata has quit IRC | 11:40 | |
| *** jpich has joined #openstack-meeting | 11:44 | |
| *** e0ne has quit IRC | 11:44 | |
| *** bbowen has quit IRC | 11:48 | |
| *** e0ne has joined #openstack-meeting | 11:52 | |
| *** a-pugachev has quit IRC | 12:00 | |
| *** aojea has joined #openstack-meeting | 12:02 | |
| *** a-pugachev has joined #openstack-meeting | 12:03 | |
| *** a-pugachev has quit IRC | 12:04 | |
| *** a-pugachev has joined #openstack-meeting | 12:05 | |
| *** Bhujay has quit IRC | 12:34 | |
| *** Bhujay has joined #openstack-meeting | 12:35 | |
| *** Bhujay has quit IRC | 12:36 | |
| *** Bhujay has joined #openstack-meeting | 12:36 | |
| *** Bhujay has quit IRC | 12:37 | |
| *** Bhujay has joined #openstack-meeting | 12:40 | |
| *** Bhujay has quit IRC | 12:42 | |
| *** radez has joined #openstack-meeting | 12:44 | |
| *** irclogbot_1 has quit IRC | 12:48 | |
| *** dmacpher has joined #openstack-meeting | 12:49 | |
| *** bobh has joined #openstack-meeting | 12:55 | |
| *** irclogbot_1 has joined #openstack-meeting | 12:59 | |
| *** helenafm has joined #openstack-meeting | 13:01 | |
| *** bbowen has joined #openstack-meeting | 13:04 | |
| *** eumel8 has joined #openstack-meeting | 13:11 | |
| *** irclogbot_1 has quit IRC | 13:13 | |
| *** a-pugachev has quit IRC | 13:16 | |
| *** bobh has quit IRC | 13:19 | |
| *** artom has joined #openstack-meeting | 13:24 | |
| *** eharney has joined #openstack-meeting | 13:26 | |
| *** edmondsw_ has joined #openstack-meeting | 13:27 | |
| *** edmondsw has quit IRC | 13:29 | |
| *** edmondsw_ is now known as edmondsw | 13:29 | |
| *** edleafe- has joined #openstack-meeting | 13:30 | |
| *** bbowen has quit IRC | 13:30 | |
| *** irclogbot_1 has joined #openstack-meeting | 13:30 | |
| *** edleafe- is now known as edleafe | 13:31 | |
| *** bbowen has joined #openstack-meeting | 13:34 | |
| *** irclogbot_1 has quit IRC | 13:35 | |
| *** radeks__ has quit IRC | 13:36 | |
| *** eharney has quit IRC | 13:40 | |
| *** haleyb has joined #openstack-meeting | 13:43 | |
| *** redrobot has joined #openstack-meeting | 13:43 | |
| *** mmethot has quit IRC | 13:48 | |
| *** irclogbot_1 has joined #openstack-meeting | 13:50 | |
| *** mmethot has joined #openstack-meeting | 13:52 | |
| *** priteau has quit IRC | 13:52 | |
| *** e0ne has quit IRC | 13:53 | |
| *** eharney has joined #openstack-meeting | 13:53 | |
| *** Liang__ has joined #openstack-meeting | 13:56 | |
| *** e0ne has joined #openstack-meeting | 13:59 | |
| *** bbowen_ has joined #openstack-meeting | 13:59 | |
| *** Liang__ is now known as LiangFang | 14:00 | |
| *** bbowen has quit IRC | 14:01 | |
| *** bbowen_ is now known as bbowen | 14:06 | |
| *** radeks__ has joined #openstack-meeting | 14:08 | |
| *** factor has joined #openstack-meeting | 14:14 | |
| *** davidsha has joined #openstack-meeting | 14:16 | |
| *** priteau has joined #openstack-meeting | 14:23 | |
| *** priteau has quit IRC | 14:28 | |
| *** brault has joined #openstack-meeting | 14:33 | |
| *** brault has quit IRC | 14:33 | |
| *** brault has joined #openstack-meeting | 14:45 | |
| *** hongbin has joined #openstack-meeting | 14:48 | |
| *** brault has quit IRC | 14:49 | |
| *** efried has quit IRC | 14:52 | |
| *** ganso has left #openstack-meeting | 14:56 | |
| *** nickthetait has joined #openstack-meeting | 14:57 | |
| *** mriedem has joined #openstack-meeting | 14:58 | |
| *** awaugama has joined #openstack-meeting | 14:59 | |
| *** rosmaita has joined #openstack-meeting | 15:00 | |
| fungi | gagehugo mentioned in #openstack-security that he's not around to chair the security sig meeting today | 15:03 |
|---|---|---|
| fungi | anybody have anything to bring up? if not, we can skip | 15:03 |
| rosmaita | i do! | 15:03 |
| *** LiangFang has quit IRC | 15:04 | |
| rosmaita | i added OSSA to a cinder bug that may have security implications, would appreciate it if someone could take a look | 15:04 |
| *** carlos_silva has joined #openstack-meeting | 15:04 | |
| rosmaita | https://bugs.launchpad.net/cinder/+bug/1799221 | 15:04 |
| openstack | Launchpad bug 1799221 in Cinder queens "cinder-volume can create truncated volumes when masking glanceclient errors" [Undecided,In progress] - Assigned to Brian Rosmaita (brian-rosmaita) | 15:04 |
| nickthetait | how was it reported/discovered> | 15:05 |
| nickthetait | ? | 15:05 |
| rosmaita | it's a public bug, the security implication is kind of a long shot implication of it | 15:06 |
| *** Liang__ has joined #openstack-meeting | 15:07 | |
| nickthetait | okay, thanks for bringing it to our attention | 15:07 |
| rosmaita | yeah, i will be happy if you decide it's nothing to worry about | 15:08 |
| rosmaita | :) | 15:08 |
| rosmaita | just want to be thorough | 15:08 |
| fungi | in that case, let's start a meeting | 15:08 |
| fungi | #startmeeting security | 15:09 |
| openstack | Meeting started Thu Jan 17 15:09:08 2019 UTC and is due to finish in 60 minutes. The chair is fungi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:09 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:09 |
| *** openstack changes topic to " (Meeting topic: security)" | 15:09 | |
| openstack | The meeting name has been set to 'security' | 15:09 |
| fungi | #topic cinder bug 1799221 | 15:09 |
| *** openstack changes topic to "cinder bug 1799221 (Meeting topic: security)" | 15:09 | |
| openstack | bug 1799221 in Cinder queens "cinder-volume can create truncated volumes when masking glanceclient errors" [Undecided,In progress] https://launchpad.net/bugs/1799221 - Assigned to Brian Rosmaita (brian-rosmaita) | 15:09 |
| rosmaita | yeah, that's a public bug, the security implications weren't obvious immediately | 15:10 |
| fungi | interesting, i didn't see an e-mail from lp about that addition | 15:10 |
| rosmaita | and would probably require a bunch of failures in various places to be a real problem | 15:10 |
| rosmaita | i assigned it to OSSN first (not sure why) | 15:10 |
| rosmaita | and then reassigned to OSSA | 15:10 |
| rosmaita | not sure if that makes a difference | 15:10 |
| nickthetait | thats fine | 15:11 |
| *** Liang__ has quit IRC | 15:11 | |
| fungi | well, one is for dated advisories announcing backported fixes to supported stable branches, the other is for addenda to the security guide containing guidance to deployers/users | 15:11 |
| rosmaita | yeah, i really just wanted to get your attention for someone to take a look in case it's something we need to tell people about | 15:12 |
| fungi | skimming, it's not immediately obvious to me how a malicious actor could leverage this bug to achieve anything. mind elaborating on the exploit scenario(s) you were worried about? | 15:13 |
| rosmaita | well, as the glanceclient is downloading an image, it does an instream checksum/hash validation | 15:14 |
| *** armstrong has joined #openstack-meeting | 15:14 | |
| rosmaita | if the checksum doesn't match it will throw an exception | 15:14 |
| rosmaita | which from pike on, cinder is ignoring | 15:14 |
| rosmaita | so i believe it's possible that if somehow you could change the image data in glance, then you could create a bootable volume from it | 15:15 |
| rosmaita | but you'd need to already be "in" the cloud or have compromised glance to make this work | 15:16 |
| fungi | if you're in a position to change the image data in glance, can you generally also change the checksum to match it? | 15:16 |
| nickthetait | seems to me like an attacker would need ability to manipulate network speed and MITM | 15:17 |
| rosmaita | fungi: probably, you'd need to modify the database | 15:17 |
| rosmaita | glance won't allow checksum change via api even for admin | 15:18 |
| rosmaita | maybe there would be a way to redirect the glance data and replace it with your own | 15:19 |
| rosmaita | but you'd have to have compromised a bunch of stuff to get that to happen, i would think | 15:19 |
| rosmaita | so i think it's a pretty long shot that this could be an attack | 15:19 |
| fungi | so the attacker who can't alter the checksum but is still able to alter the image contents and also able to trigger an ioerror in cinder could coerce nova into booting that altered image | 15:20 |
| rosmaita | yeah, you've got it exactly | 15:20 |
| rosmaita | actually, | 15:20 |
| *** radeks__ has quit IRC | 15:21 | |
| rosmaita | it's more that the compromised data would trigger a glanceclient exception that cinder would ignore | 15:21 |
| *** radeks__ has joined #openstack-meeting | 15:21 | |
| fungi | but needs to be an ioerror exception, specifically | 15:21 |
| rosmaita | yes | 15:21 |
| fungi | and not enospc i guess | 15:22 |
| rosmaita | right | 15:22 |
| fungi | my opinion, vmt hat on, is that this is a class c1 report per our taxonomy | 15:22 |
| rosmaita | yeah, it's an EPIPE taht glance throws | 15:22 |
| fungi | #link https://security.openstack.org/vmt-process.html#incident-report-taxonomy OpenStack VMT Report Taxonomy | 15:22 |
| nickthetait | i would agree with that designation | 15:23 |
| fungi | so it's worth fixing if possible, and might warrant a note (ossn) | 15:23 |
| fungi | also someone might consider getting a cve assigned for it, but the vmt doesn't need one since we wouldn't issue an advisory (ossa) | 15:23 |
| fungi | i'll add a comment to the bug | 15:24 |
| nickthetait | ok | 15:24 |
| fungi | rosmaita: thanks for bringing this up! | 15:24 |
| fungi | #action fungi comment on bug 1799221 | 15:24 |
| openstack | bug 1799221 in Cinder queens "cinder-volume can create truncated volumes when masking glanceclient errors" [Undecided,In progress] https://launchpad.net/bugs/1799221 - Assigned to Brian Rosmaita (brian-rosmaita) | 15:24 |
| *** aojea has quit IRC | 15:24 | |
| rosmaita | thanks | 15:25 |
| fungi | #topic nova bug 1811870 | 15:25 |
| *** openstack changes topic to "nova bug 1811870 (Meeting topic: security)" | 15:25 | |
| openstack | bug 1811870 in OpenStack Compute (nova) "libvirt reporting incorrect value of 4k (small) pages" [High,In progress] https://launchpad.net/bugs/1811870 - Assigned to Stephen Finucane (stephenfinucane) | 15:25 |
| fungi | sean-k-mooney brought this one to my attention earlier today | 15:25 |
| fungi | basically there was a bug fixed upstream in libvirt but not backported to the versions carried in a lot of popular distros | 15:26 |
| fungi | this opens a potential denial of service condition on nova hypervisor hosts | 15:27 |
| *** lpetrut has quit IRC | 15:27 | |
| fungi | my openstack vmt opinion is that this is class c2 (vulnerability in a dependency) and might warrant an ossn as well | 15:27 |
| fungi | but feedback on that is welcome | 15:28 |
| fungi | ideally major distros would get the fix backported, but it looks like stephenfin may be putting together a workaround for it | 15:28 |
| *** hongbin has quit IRC | 15:29 | |
| *** hongbin has joined #openstack-meeting | 15:29 | |
| nickthetait | i dont understand how this one affects openstack yet | 15:30 |
| fungi | i think the implication is that on an affected hypervisor if small page size is set, an authenticated malicious actor could create a denial of service condition by overrunning memory | 15:32 |
| *** Luzi has quit IRC | 15:33 | |
| *** Linkid has quit IRC | 15:33 | |
| nickthetait | yeah that piece makes sense | 15:33 |
| fungi | #link https://www.redhat.com/archives/rhsa-announce/2018-June/msg00038.html [RHSA-2018:1997-01] Important: libvirt security and bug fix update | 15:34 |
| *** rossella_s has quit IRC | 15:34 | |
| fungi | so if there's to be an ossn, it should likely mention that not overriding the page size configuration could mitigate the risk on hypervisor hosts running an affected distro | 15:35 |
| fungi | falls into the category of vulnerabilities in popular openstack dependencies, but whether it's severe enough to prioritize for an ossn is debatable | 15:35 |
| nickthetait | okay | 15:36 |
| fungi | i told sean-k-mooney i'd bring it up in the security sig meeting today, so... now i have! ;) | 15:37 |
| fungi | #action fungi comment on bug 1811870 | 15:37 |
| openstack | bug 1811870 in OpenStack Compute (nova) "libvirt reporting incorrect value of 4k (small) pages" [High,In progress] https://launchpad.net/bugs/1811870 - Assigned to Stephen Finucane (stephenfinucane) | 15:37 |
| fungi | #link https://launchpad.net/bugs/1811870 libvirt reporting incorrect value of 4k (small) pages Edit | 15:38 |
| fungi | #topic bug 1734320 | 15:38 |
| *** openstack changes topic to "bug 1734320 (Meeting topic: security)" | 15:38 | |
| openstack | bug 1734320 in OpenStack Compute (nova) "Eavesdropping private traffic" [Undecided,In progress] https://launchpad.net/bugs/1734320 - Assigned to sean mooney (sean-k-mooney) | 15:38 |
| fungi | #link https://launchpad.net/bugs/1734320 Eavesdropping private traffic | 15:39 |
| fungi | this one has been triaged by the openstack vmt as a class b2 report for now, but we're keeping an eye on it | 15:40 |
| fungi | the issue involves several projects and there's still no clear path forward to resolution at the moment | 15:41 |
| fungi | sean-k-mooney is working on this one, but mentioned to me that his latest attempt is also turning out to be problematic | 15:42 |
| nickthetait | :S | 15:42 |
| fungi | bringing it up as a security-relevant bug at least, effectively a vulnerability, but which could use some help and additional input from subject matter experts | 15:43 |
| fungi | and whatever solution is eventually arrived at is quite likely to not be entirely backportable to supported stable branches | 15:43 |
| fungi | anyway, if anyone has any ideas, please feel free to chime in on that bug | 15:44 |
| nickthetait | alright | 15:44 |
| fungi | #topic bug 1765834 | 15:45 |
| openstack | bug 1765834 in Swift3 "Need to verify content of v4-signed PUTs" [Undecided,New] https://launchpad.net/bugs/1765834 | 15:45 |
| *** openstack changes topic to "bug 1765834 (Meeting topic: security)" | 15:45 | |
| fungi | #link https://launchpad.net/bugs/1765834 Need to verify content of v4-signed PUTs | 15:45 |
| fungi | just now remembered that there's an agenda etherpad and looked at it | 15:46 |
| fungi | #link https://etherpad.openstack.org/p/security-agenda Security SIG Meeting Agenda | 15:46 |
| fungi | and this bug was included | 15:46 |
| *** a-pugachev has joined #openstack-meeting | 15:46 | |
| fungi | i recently switched this report to public, triaged as a class d hardening opportunity | 15:47 |
| fungi | doesn't look like anyone is working on a fix, so if anyone is interested in tackling that one it's a welcomed security improvement | 15:48 |
| fungi | oh, i take that back, tim burke has some patches attached to the bug from back when it was still private | 15:49 |
| fungi | so it may be that they just need testing and someone could reach out to him about getting them pushed into gerrit | 15:49 |
| fungi | #topic open discussion | 15:50 |
| *** openstack changes topic to "open discussion (Meeting topic: security)" | 15:50 | |
| fungi | we've got 10 minutes remaining in the hour if anybody has anything else to bring up | 15:50 |
| rosmaita | i think it's a good sign that there's not a lot to talk about! | 15:51 |
| fungi | yes, indeed | 15:52 |
| nickthetait | nothing new from me | 15:52 |
| fungi | seeing as the two of you are the only other apparent attendees today, i'll take that as a cue to wrap it up | 15:52 |
| fungi | thanks everyone! | 15:53 |
| fungi | #endmeeting | 15:53 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:53 | |
| openstack | Meeting ended Thu Jan 17 15:53:09 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:53 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/security/2019/security.2019-01-17-15.09.html | 15:53 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/security/2019/security.2019-01-17-15.09.txt | 15:53 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/security/2019/security.2019-01-17-15.09.log.html | 15:53 |
| *** rosmaita has left #openstack-meeting | 15:53 | |
| nickthetait | later | 15:53 |
| *** helenafm has left #openstack-meeting | 15:54 | |
| *** radeks__ has quit IRC | 15:55 | |
| *** pkovar has joined #openstack-meeting | 15:56 | |
| eumel8 | #startmeeting openstack_i18n_meeting | 16:00 |
| openstack | Meeting started Thu Jan 17 16:00:04 2019 UTC and is due to finish in 60 minutes. The chair is eumel8. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| *** TxGirlGeek has joined #openstack-meeting | 16:00 | |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: openstack_i18n_meeting)" | 16:00 | |
| openstack | The meeting name has been set to 'openstack_i18n_meeting' | 16:00 |
| *** nickthetait has left #openstack-meeting | 16:00 | |
| eumel8 | o/ | 16:00 |
| eumel8 | howdy | 16:00 |
| jpich | o/ | 16:01 |
| eumel8 | everyone here for I18n team meeting? | 16:01 |
| eumel8 | one :) | 16:01 |
| *** diablo_rojo has joined #openstack-meeting | 16:01 | |
| eumel8 | no special topics on the list so lets start with | 16:02 |
| eumel8 | #topic Open Discussion | 16:02 |
| *** openstack changes topic to "Open Discussion (Meeting topic: openstack_i18n_meeting)" | 16:02 | |
| *** brault has joined #openstack-meeting | 16:04 | |
| eumel8 | my changes for the translation build script are merged today, so next step will be a new release of openstackdocstheme | 16:05 |
| *** jamesmcarthur has joined #openstack-meeting | 16:05 | |
| eumel8 | just looking for the last proposal... | 16:05 |
| *** efried has joined #openstack-meeting | 16:05 | |
| *** hongbin has quit IRC | 16:08 | |
| *** brault has quit IRC | 16:08 | |
| *** hongbin has joined #openstack-meeting | 16:09 | |
| *** hongbin has quit IRC | 16:13 | |
| eumel8 | done: https://review.openstack.org/#/c/631550/ | 16:15 |
| eumel8 | diablo_rojo: are you around or only sneaking through the meeting room? ;) | 16:16 |
| eumel8 | just ask for the status of storyboard translations. but I see there is still no import #link https://review.openstack.org/#/c/625393/ | 16:19 |
| *** donghao has quit IRC | 16:20 | |
| diablo_rojo | eumel8, around for the release meeting that is happening :) | 16:20 |
| eumel8 | diablo_rojo: I see ;) | 16:21 |
| diablo_rojo | I would totally come to your meetings if they were a little later. I just am a weak human that likes sleep. | 16:22 |
| *** brault has joined #openstack-meeting | 16:24 | |
| *** e0ne has quit IRC | 16:25 | |
| eumel8 | diablo_rojo: don't worry, we are here till 17:00 UTC | 16:25 |
| *** mattw4 has joined #openstack-meeting | 16:26 | |
| eumel8 | maybe, pkovar is awake? | 16:26 |
| *** macza has joined #openstack-meeting | 16:28 | |
| pkovar | hello | 16:28 |
| eumel8 | anyway, I would handover | 16:28 |
| eumel8 | ah | 16:28 |
| eumel8 | the clock is set to half ;) | 16:29 |
| *** brault has quit IRC | 16:29 | |
| eumel8 | #endmeeting | 16:29 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 16:29 | |
| openstack | Meeting ended Thu Jan 17 16:29:18 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:29 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack_i18n_meeting/2019/openstack_i18n_meeting.2019-01-17-16.00.html | 16:29 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack_i18n_meeting/2019/openstack_i18n_meeting.2019-01-17-16.00.txt | 16:29 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack_i18n_meeting/2019/openstack_i18n_meeting.2019-01-17-16.00.log.html | 16:29 |
| pkovar | #startmeeting doc_team | 16:29 |
| openstack | Meeting started Thu Jan 17 16:29:51 2019 UTC and is due to finish in 60 minutes. The chair is pkovar. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:29 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:29 |
| *** openstack changes topic to " (Meeting topic: doc_team)" | 16:29 | |
| openstack | The meeting name has been set to 'doc_team' | 16:29 |
| pkovar | oops wrong team name | 16:30 |
| pkovar | #endmeeting | 16:30 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 16:30 | |
| openstack | Meeting ended Thu Jan 17 16:30:27 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:30 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/doc_team/2019/doc_team.2019-01-17-16.29.html | 16:30 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/doc_team/2019/doc_team.2019-01-17-16.29.txt | 16:30 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/doc_team/2019/doc_team.2019-01-17-16.29.log.html | 16:30 |
| pkovar | #startmeeting docteam | 16:30 |
| openstack | Meeting started Thu Jan 17 16:30:40 2019 UTC and is due to finish in 60 minutes. The chair is pkovar. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:30 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:30 |
| *** openstack changes topic to " (Meeting topic: docteam)" | 16:30 | |
| openstack | The meeting name has been set to 'docteam' | 16:30 |
| pkovar | #topic roll call | 16:30 |
| *** openstack changes topic to "roll call (Meeting topic: docteam)" | 16:30 | |
| *** iyamahat has joined #openstack-meeting | 16:30 | |
| pkovar | who is up for meeting? | 16:30 |
| eumel8 | don't be nervous ;) | 16:30 |
| eumel8 | o/ | 16:31 |
| pkovar | i know i know | 16:31 |
| pkovar | my first time... almost | 16:31 |
| eumel8 | the big stage | 16:31 |
| pkovar | /me feels like a rock star | 16:31 |
| eumel8 | at a minimum | 16:31 |
| pkovar | heh | 16:32 |
| pkovar | i don't see anything in the agenda list | 16:32 |
| pkovar | there are reviews | 16:33 |
| pkovar | and more reviews | 16:33 |
| pkovar | if you want to help | 16:33 |
| pkovar | this is a message for all :) | 16:33 |
| eumel8 | yes, Sir! | 16:34 |
| eumel8 | some are on the radar | 16:34 |
| pkovar | anything else to cover? | 16:36 |
| pkovar | or shall we... ? | 16:36 |
| eumel8 | question regarding #link https://www.openstack.org/four-opens/ | 16:36 |
| eumel8 | there is an ugly link at the end of the page "Read the Book". That points to the Git repo. Should that be build on docs.o.o? | 16:38 |
| *** ijw has joined #openstack-meeting | 16:39 | |
| *** lpetrut has joined #openstack-meeting | 16:39 | |
| eumel8 | I mean it's like in Matrix mode now ;) | 16:40 |
| pkovar | hm not sure | 16:40 |
| pkovar | who maintains that page anyway? | 16:41 |
| pkovar | is that part of the foundation site? | 16:41 |
| pkovar | the link to git looks suboptimal | 16:41 |
| pkovar | but i don't know if there is a built version somewhere? | 16:42 |
| eumel8 | I think so, it's foundation stuff | 16:42 |
| pkovar | jamesmcarthur to the rescue? :) | 16:42 |
| eumel8 | rofl | 16:42 |
| pkovar | one would expect a link to pdf or something | 16:43 |
| pkovar | #link https://www.openstack.org/four-opens/ | 16:43 |
| eumel8 | I would have interests to translate the page, but that needs translation jobs, and then build/publishing etc. | 16:44 |
| pkovar | right | 16:44 |
| pkovar | maybe bring this up in the mailing list to get more attention | 16:44 |
| eumel8 | I can propose someting and then we see what will happen. | 16:45 |
| pkovar | sounds good eumel8 | 16:45 |
| pkovar | thank | 16:45 |
| pkovar | s | 16:45 |
| eumel8 | ok | 16:45 |
| eumel8 | next topic | 16:46 |
| pkovar | #info eumel8 to draft a solution for book link in https://www.openstack.org/four-opens/ | 16:46 |
| pkovar | #next | 16:46 |
| pkovar | what's next sir? | 16:46 |
| eumel8 | We have the OpenStack Ops Meetup in town on March 7-8 | 16:46 |
| jamesmcarthur | pkover: right now it's in the git repo b/c it's still a work in progress | 16:47 |
| eumel8 | if you would like to join and discuss someting together with the ops guys. | 16:47 |
| jamesmcarthur | sorry - pkovar: ^ | 16:47 |
| pkovar | jamesmcarthur: thanks for the update | 16:47 |
| pkovar | #info the book in a WIP | 16:47 |
| pkovar | #info the book is a WIP | 16:47 |
| *** aprice has joined #openstack-meeting | 16:48 | |
| pkovar | eumel8: thanks for the heads up | 16:48 |
| *** tosky has joined #openstack-meeting | 16:48 | |
| pkovar | i guess we can assume they would be interested in discussing docs | 16:48 |
| eumel8 | dependly on that there are still some days left to make a session proposal for Denver Summit. | 16:49 |
| pkovar | i personally don't have anything specific other than ops guide progress | 16:49 |
| eumel8 | ops guide, of course | 16:49 |
| pkovar | right | 16:51 |
| pkovar | last few times this topic was proposed by the ops group themselves | 16:51 |
| pkovar | and that worked well i think | 16:51 |
| eumel8 | yes | 16:52 |
| *** yamahata has joined #openstack-meeting | 16:52 | |
| tosky | o/ | 16:52 |
| pkovar | tosky: hello there | 16:52 |
| tosky | if the topic is still the roll call, I'd like to ask: during the last PTG we discussed about moving forward with moving forward the merging of api-ref to the rest of the doc | 16:53 |
| tosky | was there any change or progress? | 16:54 |
| pkovar | #topic open floor | 16:54 |
| *** openstack changes topic to "open floor (Meeting topic: docteam)" | 16:54 | |
| pkovar | oops | 16:54 |
| pkovar | tosky: right, might be the good time to look for volunteers to coordinate this | 16:55 |
| pkovar | thanks for bringing this up | 16:55 |
| pkovar | as with the last docs migration, it was quite time intensive | 16:56 |
| pkovar | time is the commodity i am lacking recently :) | 16:56 |
| tosky | you tell me | 16:57 |
| pkovar | does somebody want to volunteer to send a call for interested volunteers? | 16:57 |
| pkovar | #topic merging of api-ref to the rest of the doc | 16:58 |
| *** openstack changes topic to "merging of api-ref to the rest of the doc (Meeting topic: docteam)" | 16:58 | |
| tosky | maybe it would be useful to have a summary of the steps needed - or would writing the workflow be part of the volunteers work? | 16:58 |
| pkovar | #info need volunteers to coordinate | 16:58 |
| pkovar | good point, i can help with writing down some of the steps, but would need help | 16:59 |
| *** eharney has quit IRC | 16:59 | |
| pkovar | we have it tracked in etherpads all over the place | 16:59 |
| pkovar | and there's some docs in the contrib guide | 16:59 |
| pkovar | tosky: time is up, move to #openstack-doc? | 17:00 |
| tosky | I may help with the real process (and the patches), and act as guinea pig with the sahara repository | 17:00 |
| tosky | sure | 17:00 |
| pkovar | thanks | 17:00 |
| pkovar | #endmeeting | 17:00 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 17:00 | |
| openstack | Meeting ended Thu Jan 17 17:00:37 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 17:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/docteam/2019/docteam.2019-01-17-16.30.html | 17:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/docteam/2019/docteam.2019-01-17-16.30.txt | 17:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/docteam/2019/docteam.2019-01-17-16.30.log.html | 17:00 |
| eumel8 | thx | 17:00 |
| *** a-pugachev has quit IRC | 17:08 | |
| *** a-pugachev has joined #openstack-meeting | 17:10 | |
| *** jpich has left #openstack-meeting | 17:12 | |
| *** eharney has joined #openstack-meeting | 17:14 | |
| *** lpetrut has quit IRC | 17:18 | |
| *** mattw4 has quit IRC | 17:21 | |
| *** radeks__ has joined #openstack-meeting | 17:23 | |
| *** a-pugachev has quit IRC | 17:24 | |
| *** a-pugachev has joined #openstack-meeting | 17:25 | |
| *** sridharg has quit IRC | 17:27 | |
| *** kopecmartin is now known as kopecmartin|off | 17:37 | |
| *** a-pugachev_ has joined #openstack-meeting | 17:41 | |
| *** pkovar has left #openstack-meeting | 17:41 | |
| *** a-pugachev has quit IRC | 17:41 | |
| *** a-pugachev_ is now known as a-pugachev | 17:41 | |
| *** davidsha has quit IRC | 17:44 | |
| *** munimeha1 has joined #openstack-meeting | 17:51 | |
| *** manjeets_ is now known as manjeets | 17:51 | |
| *** igordc has joined #openstack-meeting | 18:04 | |
| *** e0ne has joined #openstack-meeting | 18:14 | |
| *** e0ne has quit IRC | 18:16 | |
| *** bobh has joined #openstack-meeting | 18:23 | |
| *** a-pugachev has quit IRC | 18:25 | |
| *** armstrong has quit IRC | 18:34 | |
| *** e0ne has joined #openstack-meeting | 18:36 | |
| *** yamahata has quit IRC | 18:37 | |
| *** iyamahat has quit IRC | 18:37 | |
| *** bobh has quit IRC | 18:39 | |
| *** jbadiapa has quit IRC | 18:48 | |
| *** iyamahat has joined #openstack-meeting | 18:49 | |
| *** ociuhandu has joined #openstack-meeting | 18:49 | |
| *** ociuhandu has quit IRC | 18:49 | |
| *** brault has joined #openstack-meeting | 18:52 | |
| *** radeks__ has quit IRC | 18:56 | |
| *** jbadiapa has joined #openstack-meeting | 19:03 | |
| *** yamahata has joined #openstack-meeting | 19:08 | |
| *** ttsiouts has joined #openstack-meeting | 19:11 | |
| *** ttsiouts has quit IRC | 19:11 | |
| *** bobh has joined #openstack-meeting | 19:18 | |
| *** awaugama_ has joined #openstack-meeting | 19:26 | |
| *** rfolco has joined #openstack-meeting | 19:28 | |
| *** awaugama has quit IRC | 19:29 | |
| *** jamesmcarthur has quit IRC | 19:33 | |
| *** iyamahat_ has joined #openstack-meeting | 19:33 | |
| *** radeks__ has joined #openstack-meeting | 19:33 | |
| *** lpetrut has joined #openstack-meeting | 19:35 | |
| *** iyamahat has quit IRC | 19:36 | |
| *** iyamahat__ has joined #openstack-meeting | 19:38 | |
| *** iyamahat_ has quit IRC | 19:40 | |
| *** abishop has quit IRC | 19:44 | |
| *** e0ne has quit IRC | 19:44 | |
| *** rfolco has quit IRC | 19:49 | |
| *** jamesmcarthur has joined #openstack-meeting | 19:50 | |
| *** erlon has quit IRC | 20:04 | |
| *** toabctl has joined #openstack-meeting | 20:05 | |
| *** jamesmcarthur has quit IRC | 20:06 | |
| *** jamesmcarthur has joined #openstack-meeting | 20:08 | |
| *** pcaruana has quit IRC | 20:09 | |
| *** hyunsikyang has quit IRC | 20:10 | |
| *** hyunsikyang has joined #openstack-meeting | 20:11 | |
| *** awaugama_ has quit IRC | 20:16 | |
| *** awaugama_ has joined #openstack-meeting | 20:16 | |
| *** jamesmcarthur has quit IRC | 20:21 | |
| *** jamesmcarthur has joined #openstack-meeting | 20:22 | |
| *** Guest5017 has joined #openstack-meeting | 20:23 | |
| *** Guest5017 is now known as Linkid | 20:24 | |
| *** awaugama_ has quit IRC | 20:26 | |
| *** hongbin has joined #openstack-meeting | 20:27 | |
| *** erlon has joined #openstack-meeting | 20:33 | |
| *** lpetrut has quit IRC | 20:36 | |
| *** irclogbot_1 has quit IRC | 20:38 | |
| *** a-pugachev has joined #openstack-meeting | 20:47 | |
| *** takashin has joined #openstack-meeting | 20:52 | |
| *** cdent has joined #openstack-meeting | 20:53 | |
| *** irclogbot_1 has joined #openstack-meeting | 20:53 | |
| *** ralonsoh has quit IRC | 20:59 | |
| melwitt | #startmeeting nova | 21:00 |
| openstack | Meeting started Thu Jan 17 21:00:02 2019 UTC and is due to finish in 60 minutes. The chair is melwitt. Information about MeetBot at http://wiki.debian.org/MeetBot. | 21:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 21:00 |
| *** openstack changes topic to " (Meeting topic: nova)" | 21:00 | |
| openstack | The meeting name has been set to 'nova' | 21:00 |
| melwitt | howdy everyone, welcome to the nova meeting | 21:00 |
| mriedem | o/ | 21:00 |
| takashin | o/ | 21:00 |
| edleafe | \o | 21:00 |
| melwitt | #topic Release News | 21:00 |
| *** openstack changes topic to "Release News (Meeting topic: nova)" | 21:00 | |
| melwitt | #link Stein release schedule: https://wiki.openstack.org/wiki/Nova/Stein_Release_Schedule | 21:00 |
| melwitt | last week was the s-2 milestone and spec freeze | 21:01 |
| efried | o/ | 21:01 |
| melwitt | with the new release process, the release team is supposed to propose releases for libs that need it, | 21:01 |
| melwitt | but I haven't seen any releases proposed for any of our libs, so I need to look into that | 21:01 |
| melwitt | seems unlikely none need a release | 21:01 |
| melwitt | #info s-3 feature freeze is March 7 | 21:02 |
| mriedem | on the lib release thing, | 21:02 |
| mriedem | i think os-vif recently had a release which is breaking some ovn jobs intermittently | 21:02 |
| mriedem | so might want to talk to sean-k-mooney about that | 21:02 |
| mriedem | or maybe it's not released, but then the ovn jobs would have to be running os-vif from source... | 21:03 |
| melwitt | #action melwitt check with sean-k-mooney on latest os-vif release breaking ovn jobs intermittently | 21:03 |
| melwitt | thanks | 21:03 |
| melwitt | #link Stein runway etherpad: https://etherpad.openstack.org/p/nova-runways-stein | 21:03 |
| melwitt | #link runway #1: https://blueprints.launchpad.net/nova/+spec/conf-max-attach-volumes (melwitt) [END 2019-01-18] https://review.openstack.org/#/q/topic:bp/conf-max-attach-volumes+(status:open+OR+status:merged) | 21:03 |
| melwitt | I need to address review feedback on ^ | 21:04 |
| melwitt | #link runway #2: https://blueprints.launchpad.net/nova/+spec/per-aggregate-scheduling-weight (yikun) [END 2019-01-28] https://review.openstack.org/#/c/628163/ | 21:04 |
| melwitt | #link runway #3: <empty> | 21:04 |
| melwitt | I'm going to update the blueprint status tracking etherpad and send an update to the ML hopefully today | 21:05 |
| melwitt | so we can get a better picture of where we are right now and what we need to do | 21:05 |
| melwitt | I think that's all I have for release news. anyone have anything else for release news before we move on? | 21:06 |
| melwitt | #topic Bugs (stuck/critical) | 21:06 |
| *** openstack changes topic to "Bugs (stuck/critical) (Meeting topic: nova)" | 21:06 | |
| melwitt | no critical bugs in the link | 21:06 |
| melwitt | #link 64 new untriaged bugs (same since the last meeting): https://bugs.launchpad.net/nova/+bugs?search=Search&field.status=New | 21:06 |
| melwitt | #link 15 untagged untriaged bugs (up 1 since the last meeting): https://bugs.launchpad.net/nova/+bugs?field.tag=-*&field.status%3Alist=NEW | 21:06 |
| melwitt | as usual, we need to do more bug triage and get the new bug number down | 21:07 |
| melwitt | #link bug triage how-to: https://wiki.openstack.org/wiki/Nova/BugTriage#Tags | 21:07 |
| *** igordc has quit IRC | 21:07 | |
| melwitt | #help need help with bug triage | 21:07 |
| melwitt | Gate status | 21:07 |
| melwitt | #link check queue gate status http://status.openstack.org/elastic-recheck/index.html | 21:07 |
| melwitt | hm, this says overall categorization rate of 0%? http://status.openstack.org/elastic-recheck/data/integrated_gate.html | 21:08 |
| melwitt | something is weird here | 21:08 |
| mriedem | need to follow up with clarkb | 21:09 |
| melwitt | ok, will have to ask infra folks | 21:09 |
| melwitt | 3rd party CI | 21:09 |
| *** igordc has joined #openstack-meeting | 21:09 | |
| * cdent realizes the time | 21:10 | |
| melwitt | #link 3rd party CI status http://ciwatch.mmedvede.net/project?project=nova&time=7+days | 21:10 |
| clarkb | aroo | 21:10 |
| melwitt | hay clarkb | 21:10 |
| clarkb | oh ya I noticed that too. I thought maybe we just werent failing much | 21:10 |
| clarkb | (we have had a low number of gating changes but its odd) | 21:10 |
| mriedem | we're actually failing a lot, but we can move to -infra | 21:10 |
| melwitt | ok, 3rd party CI, looks like the vmware CI is working again, powervm out-of-tree has been failing 100% | 21:11 |
| melwitt | xenserver CI 100% fail | 21:11 |
| melwitt | ok, moving on | 21:12 |
| melwitt | #topic Reminders | 21:12 |
| *** openstack changes topic to "Reminders (Meeting topic: nova)" | 21:12 | |
| efried | edmondsw: ---^ powervm CI, I noticed that too. FYI. | 21:12 |
| melwitt | #link Stein Subteam Patches n Bugs: https://etherpad.openstack.org/p/stein-nova-subteam-tracking | 21:13 |
| melwitt | nothing much going on in there ^ | 21:13 |
| edmondsw | efried yeah, I've got someone looking at it | 21:13 |
| melwitt | thanks edmondsw | 21:13 |
| melwitt | ok, moving on | 21:13 |
| melwitt | #topic Stable branch status | 21:13 |
| *** openstack changes topic to "Stable branch status (Meeting topic: nova)" | 21:13 | |
| melwitt | #link stable/rocky: https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/rocky,n,z | 21:13 |
| melwitt | #link stable/queens: https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/queens,n,z | 21:13 |
| melwitt | #link stable/pike: https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/pike,n,z | 21:14 |
| *** mattw4 has joined #openstack-meeting | 21:14 | |
| melwitt | not too many rocky patches, but queens and pike have a lot to review | 21:14 |
| melwitt | anything else for stable branches before we move on? | 21:14 |
| melwitt | #topic Subteam Highlights | 21:14 |
| *** openstack changes topic to "Subteam Highlights (Meeting topic: nova)" | 21:14 | |
| melwitt | efried: want to give a scheduler update? | 21:15 |
| efried | YES! | 21:15 |
| melwitt | \o/ | 21:15 |
| efried | #link n-sch meeting minutes http://eavesdrop.openstack.org/meetings/nova_scheduler/2019/nova_scheduler.2019-01-14-14.01.html | 21:15 |
| efried | Nailed down the time for the extraction checkpoint hangout, which has since happened. | 21:15 |
| efried | #link ML discussion of placement extraction checkpoint meeting http://lists.openstack.org/pipermail/openstack-discuss/2019-January/#1712 | 21:15 |
| efried | Discussed reshaper patches. See ^ for a more complete summary of that discussion. | 21:15 |
| efried | Discussed bandwidth series. Meeting tomorrow (Fri) at 1700 UTC. | 21:15 |
| efried | #link series to reduce placement traffic and do other sensible cleanup in how the resource tracker / report client operates, starting at https://review.openstack.org/#/c/615677 | 21:15 |
| efried | This should now be ready for final reviews. cdent, jaypipes, mriedem on the hook. Others welcome to have a gander. | 21:15 |
| efried | Requested CERN to pull down & test that ^ and | 21:16 |
| efried | #link single pass instance info fetch in host manager https://review.openstack.org/#/c/623558/ | 21:16 |
| efried | END | 21:16 |
| melwitt | great, thank you | 21:16 |
| melwitt | gmann left a note on the agenda that there is no update for the API subteam this week | 21:16 |
| melwitt | moving on | 21:16 |
| melwitt | #topic Stuck Reviews | 21:16 |
| *** openstack changes topic to "Stuck Reviews (Meeting topic: nova)" | 21:16 | |
| melwitt | nothing in the agenda, so assuming no stuck reviews | 21:17 |
| melwitt | #topic Open discussion | 21:17 |
| *** openstack changes topic to "Open discussion (Meeting topic: nova)" | 21:17 | |
| melwitt | I have one item here I thought I'd ask about | 21:17 |
| melwitt | (melwitt): I saw mnestratov update the patch (https://review.openstack.org/449818) for this bp https://blueprints.launchpad.net/nova/+spec/config-drive-support-for-virtuozzo-containers today. It's a driver feature parity bp AFAICT. Should we consider approving it since the implementation is already proposed and updated recently? | 21:17 |
| mriedem | are you aware of the history? | 21:18 |
| melwitt | I saw the patch update pop up in the nova channel and wondered | 21:18 |
| melwitt | no | 21:18 |
| mriedem | read the comments and/or talk to tonyb | 21:18 |
| tonyb | say what? | 21:18 |
| mriedem | i believe there was a security concern and the original attempt at this was reverted by mikal | 21:18 |
| mriedem | tonyb: config drive support for virtuozzo (ploop) | 21:18 |
| mriedem | https://review.openstack.org/#/c/204259/ | 21:19 |
| * tonyb reads | 21:19 | |
| mriedem | maybe the new approach is fine, idk | 21:19 |
| melwitt | ok. thanks for that context | 21:20 |
| melwitt | my thought was if it's something simple, might be ok to consider approving if it's already implemented. but if it's complicated or otherwise fraught with peril, then yeah, different thing | 21:21 |
| tonyb | The original one was reverted as it made ext4 a valid configdive format which we dont (didn't) want to do | 21:21 |
| tonyb | the new version looks different and I *think* it addresses that issue | 21:22 |
| melwitt | thanks | 21:23 |
| melwitt | maybe I'll ML about it. not sure otherwise how to get in touch with mnestratov and potential reviewers | 21:24 |
| melwitt | does anyone have anything else they'd like to talk about for open discussion before we wrap up? | 21:24 |
| efried | Interesting bit of trivia I found out the other day. Maybe some of you already know about this. | 21:24 |
| efried | In meetings, you can get the HTML logs to flush immediately with the #save command (normally they wait til #endmeeting to flush). | 21:24 |
| efried | That doesn't work for normal channels, though, for some rather arcane reasons. | 21:24 |
| efried | However, I discovered that the flush to eavesdrop for normal channels happens on the actual quarter hour (I had thought it just lagged randomly). | 21:24 |
| *** ijw has quit IRC | 21:25 | |
| efried | that is all | 21:25 |
| melwitt | interesting. can anyone #save or just the chair? | 21:26 |
| melwitt | anyway, if that was a request for periodic #save commands during the meeting, let me know later | 21:27 |
| melwitt | thanks everyone! | 21:27 |
| *** ijw has joined #openstack-meeting | 21:27 | |
| melwitt | #endmeeting | 21:27 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 21:27 | |
| openstack | Meeting ended Thu Jan 17 21:27:18 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 21:27 |
| *** eharney has quit IRC | 21:27 | |
| cdent | thanks melwitt | 21:27 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-01-17-21.00.html | 21:27 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-01-17-21.00.txt | 21:27 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-01-17-21.00.log.html | 21:27 |
| *** cdent has left #openstack-meeting | 21:28 | |
| *** takashin has left #openstack-meeting | 21:28 | |
| efried | melwitt: just the chair(s). And it wasn't. This came about because I was doing something where I wanted to link a discussion in a regular channel, but had to sit there refreshing eavesdrop until it caught up, which was annoying. Led me to go looking for some way to make it happen manually, and... | 21:30 |
| melwitt | ah, gotcha. cool | 21:30 |
| *** bobh has quit IRC | 21:30 | |
| *** tosky has left #openstack-meeting | 21:33 | |
| *** efried has quit IRC | 21:34 | |
| *** ijw has quit IRC | 21:36 | |
| *** efried has joined #openstack-meeting | 21:38 | |
| *** bbowen has quit IRC | 21:39 | |
| *** a-pugachev_ has joined #openstack-meeting | 21:39 | |
| *** a-pugachev has quit IRC | 21:42 | |
| *** a-pugachev_ is now known as a-pugachev | 21:42 | |
| *** ijw has joined #openstack-meeting | 21:44 | |
| *** mriedem has quit IRC | 21:49 | |
| *** jamesmcarthur has quit IRC | 21:52 | |
| *** jamesmcarthur has joined #openstack-meeting | 21:53 | |
| *** mriedem has joined #openstack-meeting | 21:56 | |
| *** mattw4 has quit IRC | 22:01 | |
| *** rcernin has joined #openstack-meeting | 22:02 | |
| *** jamesmcarthur has quit IRC | 22:03 | |
| *** radeks__ has quit IRC | 22:05 | |
| *** mattw4 has joined #openstack-meeting | 22:05 | |
| *** imacdonn has quit IRC | 22:07 | |
| *** imacdonn has joined #openstack-meeting | 22:07 | |
| *** efried has quit IRC | 22:21 | |
| *** efried has joined #openstack-meeting | 22:30 | |
| *** igordc has quit IRC | 22:50 | |
| *** iyamahat__ has quit IRC | 22:58 | |
| *** iyamahat has joined #openstack-meeting | 23:03 | |
| *** a-pugachev has quit IRC | 23:11 | |
| *** a-pugachev has joined #openstack-meeting | 23:11 | |
| *** efried has quit IRC | 23:15 | |
| *** mriedem has quit IRC | 23:17 | |
| *** igordc has joined #openstack-meeting | 23:19 | |
| *** igordc has quit IRC | 23:36 | |
| *** hongbin has quit IRC | 23:38 | |
| *** igordc has joined #openstack-meeting | 23:48 | |
| *** a-pugachev has quit IRC | 23:49 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!