Thursday, 2023-05-25

gmanndansmith: can you re-review this, removed glance scope setting also as that is also now enabled in devastack by default https://review.opendev.org/c/openstack/nova/+/88355702:13
gmanngibi: bauzas: ^^ can either of you check this RBAC old default new job 02:13
opendevreviewmelanie witt proposed openstack/nova master: libvirt: Configure and teardown ephemeral encryption secrets  https://review.opendev.org/c/openstack/nova/+/82675404:37
opendevreviewmelanie witt proposed openstack/nova master: imagebackend: Add support to libvirt_info for LUKS based encryption  https://review.opendev.org/c/openstack/nova/+/82675504:37
opendevreviewmelanie witt proposed openstack/nova master: Support create with ephemeral encryption for qcow2  https://review.opendev.org/c/openstack/nova/+/87093204:37
opendevreviewmelanie witt proposed openstack/nova master: Support resize with ephemeral encryption  https://review.opendev.org/c/openstack/nova/+/87093304:37
opendevreviewmelanie witt proposed openstack/nova master: Add encryption support to convert_image  https://review.opendev.org/c/openstack/nova/+/87093404:37
opendevreviewmelanie witt proposed openstack/nova master: Add hw_ephemeral_encryption_secret_uuid image property  https://review.opendev.org/c/openstack/nova/+/87093504:37
opendevreviewmelanie witt proposed openstack/nova master: Add encryption support to qemu-img rebase  https://review.opendev.org/c/openstack/nova/+/87093604:37
opendevreviewmelanie witt proposed openstack/nova master: Support snapshot with ephemeral encryption  https://review.opendev.org/c/openstack/nova/+/87093704:37
opendevreviewmelanie witt proposed openstack/nova master: Support rescue with ephemeral encryption  https://review.opendev.org/c/openstack/nova/+/87367504:37
opendevreviewmelanie witt proposed openstack/nova master: Update driver BDMs with ephemeral encryption image properties  https://review.opendev.org/c/openstack/nova/+/87093904:37
opendevreviewmelanie witt proposed openstack/nova master: libvirt: Introduce support for qcow2 with LUKS  https://review.opendev.org/c/openstack/nova/+/77227304:37
opendevreviewmelanie witt proposed openstack/nova master: block_device: Add encryption attributes to swap disks  https://review.opendev.org/c/openstack/nova/+/88431204:37
opendevreviewmelanie witt proposed openstack/nova master: WIP raw imagebackend support  https://review.opendev.org/c/openstack/nova/+/88431304:37
opendevreviewmelanie witt proposed openstack/nova master: DNM test ephemeral encryption + resize: qcow2, raw  https://review.opendev.org/c/openstack/nova/+/86241605:01
*** ministry is now known as __ministry05:51
dansmithgmann: yep13:40
kashyapdansmith: That CirrOS 0.5.2 is fixed now: https://github.com/cirros-dev/cirros/issues/10214:17
kashyapThey bumped the kernel.14:17
sean-k-mooneyfinally14:17
dansmithkashyap: hah, we just bumped to 6.0 :)14:17
kashyapLOL14:17
dansmithbut yeah, I need to survey for guest kernel crashes since the bump14:17
sean-k-mooneywe are on 6.1 no?14:17
kashyapOh, wait - there are more guest kernel crashes after the bump?14:18
sean-k-mooneyi asked them to bump the kernel like 2 years ago to fix some of the kernel issues14:18
dansmithI meant 6.x14:18
sean-k-mooneythats a diffent kernel fix then the one i asked them to bump for before14:19
sean-k-mooneybut in anycase we are not using that anymore but it might be useful on stable i guess14:19
dansmithkashyap: no, I'm saying we bumped to cirros 6.x a few days ago and I need to survey to see if the kernel crashes have stopped14:20
kashyapAaah, like that14:20
kashyapMakes sense, yes.14:20
kashyapsean-k-mooney: Which one did you ask?  We asked this update to solve these sort of crashes: https://kashyapc.fedorapeople.org/CirrOS_segfault/guest-boot-console-and-segfault.txt14:21
sean-k-mooneykashyap: it was related to https://github.com/cirros-dev/cirros/issues/6914:21
* kashyap clicks14:23
sean-k-mooneywe worked aroudn it with https://github.com/lyarwood/cirros/commit/c8972ca3dcde2bedc00cbeda0e0ccb8fcbf92883 but chattign to lee i found a fixed kernel bug that had been released in an newer verison14:23
kashyapOh, this, the IO-APIC one.14:23
sean-k-mooneyya so there was a fix for the apic issue in a later kernel package14:23
sean-k-mooneywe worked around it with the kernel parmater 14:23
sean-k-mooneybut the package never got updated at least not at the time14:24
sean-k-mooneyit may have been since14:24
kashyapAh, nod14:24
dansmithkashyap: from this morning: https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_f3e/883602/2/gate/nova-ceph-multistore/f3e5585/testr_results.html15:35
dansmithguest kernel crash, but it's the IO-APIC variant15:35
kashyapdansmith: Ohh, is it with CirrOS 6.1?15:36
dansmithshould be, it's from this morning on master15:36
kashyapIf it's IO-APIC variant one; then the immediate thing that comes to mind is does this image also needs "no_timer_check" to its kernel parameter15:36
dansmithyep https://zuul.opendev.org/t/openstack/build/f3e558513e3f4a6c8e9c0ceb50a023e1/log/job-output.txt#205615:37
dansmithwell, it ran a hundred other tests with that image and configuration of course15:37
dansmithbut if that's something we should always be using in devstack, you should add that :)15:37
kashyapUnderstood; I've added it to my plate to see if there's any other way around here, besides the kernel parameter15:39
fricklerkashyap: I missed that kernel bump issue because I was on holiday. iiuc it will still need a release, like 0.5.3?15:40
kashyapdansmith: Why do you mention the hundred other tests?  Is it as a "contrasting" success of what tests are actually passing?15:41
dansmithkashyap: no I'm saying it's clearly not "this requires this flag to work at all"15:41
kashyapfrickler: See the issue mentioned here: https://github.com/cirros-dev/cirros/issues/10215:41
fricklerkashyap: yes, I don't see a release for that15:41
fricklerI'l check with smoser15:42
kashyapdansmith: Aah, like that.  Noted.  I was only thinking of th IO-APIC + timer panic15:42
kashyapfrickler: smoser seems to point me to a build?15:43
kashyapfrickler: Please mention your thoughts on that ticket, to keep everything in one place15:43
frickleryes, that's kind of a testing build. updated the issue, good point15:45
*** tosky_ is now known as tosky16:20
opendevreviewAlexey Stupnikov proposed openstack/nova master: Translate VF network capabilities to port binding  https://review.opendev.org/c/openstack/nova/+/88443919:53
*** sfinucan is now known as stephenfin21:52
opendevreviewmelanie witt proposed openstack/nova master: WIP raw imagebackend support  https://review.opendev.org/c/openstack/nova/+/88431322:19
opendevreviewmelanie witt proposed openstack/nova master: DNM test ephemeral encryption + resize: qcow2, raw  https://review.opendev.org/c/openstack/nova/+/86241622:20

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!