[openstack-dev] [nova] Stable disk device instance rescue reviews for libvirt and possible implementation by other virt drivers

2016-05-24 Thread Lee Yarwood
his implemented outside of libvirt. Thanks in advance, Lee -- Lee Yarwood Red Hat PGP : A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: ope

[openstack-dev] [nova][stable/liberty] Are release tarballs still provided via Launchpad?

2016-01-20 Thread Lee Yarwood
Hello all, $subject, for example with Kilo : https://launchpad.net/nova/kilo/2015.1.2/+download/nova-2015.1.2.tar.gz If not, should we be using http://tarballs.openstack.org/nova/ directly for these stable releases? Thanks in advance, Lee -- Lee Yarwood Senior Software Engineer Red Hat PGP

[openstack-dev] [nova][cinder][barbican] Why is Cinder creating symmetric keys in Barbican for use with encrypted volumes?

2017-05-25 Thread Lee Yarwood
s in advance, Lee [1] https://specs.openstack.org/openstack/nova-specs/specs/pike/approved/libvirt-qemu-native-luks.html [2] http://lists.openstack.org/pipermail/openstack-dev/2016-November/106956.html -- Lee Yarwood A5D1 9385 88CB 7E5F

Re: [openstack-dev] [nova][cinder][barbican] Why is Cinder creating symmetric keys in Barbican for use with encrypted volumes?

2017-05-25 Thread Lee Yarwood
On 25-05-17 11:38:44, Duncan Thomas wrote: > On 25 May 2017 at 11:00, Lee Yarwood wrote: > > This has also reminded me that the plain (dm-crypt) format really needs > > to be deprecated this cycle. I posted to the dev and ops ML [2] last > > year about this but received

Re: [openstack-dev] [nova][cinder][barbican] Why is Cinder creating symmetric keys in Barbican for use with encrypted volumes?

2017-05-26 Thread Lee Yarwood
On 25-05-17 11:00:26, Lee Yarwood wrote: > Hello all, > > I'm currently working on enabling QEMU's native LUKS support within Nova > [1]. While testing this work with Barbican I noticed that Cinder is > creating symmetric keys for use with encrypted volumes : > &g

Re: [openstack-dev] [nova][cinder][barbican] Why is Cinder creating symmetric keys in Barbican for use with encrypted volumes?

2017-05-26 Thread Lee Yarwood
On 26-05-17 17:25:15, Duncan Thomas wrote: > On 25 May 2017 12:33 pm, "Lee Yarwood" wrote: > > On 25-05-17 11:38:44, Duncan Thomas wrote: > > On 25 May 2017 at 11:00, Lee Yarwood wrote: > > > This has also reminded me that the plain (dm-crypt) format really

Re: [openstack-dev] [nova][cinder][barbican] Why is Cinder creating symmetric keys in Barbican for use with encrypted volumes?

2017-05-31 Thread Lee Yarwood
ith the native LUKS support in QEMU we can now skip the use of the front-end encryptors entirely. We simply provide the passphrase via a libvirt secret associated with the volume that is then passed to QEMU in a secure fashion [1] to unlock the LUKS volume. [1] https://www.berrange.com/posts/2016/04/

[openstack-dev] [skip-level-upgrades][upgrades] Denver PTG room & etherpad

2017-08-21 Thread Lee Yarwood
f you were present at the previous discussions in Boston! https://etherpad.openstack.org/p/queens-PTG-skip-level-upgrades Thanks in advance and see you in Denver! Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33

Re: [openstack-dev] [skip-level-upgrades][upgrades] Denver PTG room & etherpad

2017-09-05 Thread Lee Yarwood
On 21-08-17 15:56:53, Lee Yarwood wrote: > Hello all, > > This is a brief announcement to highlight that there will be a skip > level upgrades room again at the PTG in Denver. I'll be chairing the > room and have seeded the etherpad below with a few goal and topic ideas.

[openstack-dev] [skip-level-upgrades][fast-forward-upgrades] PTG summary

2017-09-20 Thread Lee Yarwood
fline-migration [3] https://governance.openstack.org/tc/reference/tags/assert_supports-upgrade.html [4] https://governance.openstack.org/tc/reference/tags/assert_supports-accessible-upgrade.html [5] https://github.com/NguyenHoaiNam/Jump-Over-Release/blob/test_dynamic_section/README.md -- Lee Yarwood

Re: [openstack-dev] [skip-level-upgrades][fast-forward-upgrades] PTG summary

2017-09-28 Thread Lee Yarwood
ant to reach out to him to help craft the agenda for the session based on our discussions in Denver. Thanks again, Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 __ OpenStack Development

Re: [openstack-dev] [skip-level-upgrades][fast-forward-upgrades] PTG summary

2017-09-28 Thread Lee Yarwood
sic-flow [2] https://github.com/openstack-dev/grenade/blob/03de9e0fc7f4fc50a00db5d547413e26cf0780dd/grenade.sh#L315-L317 [3] https://github.com/openstack-dev/grenade/blob/master/projects/60_nova/resources.sh#L134-L137 [4] https://github.com/openstack-dev/grenade/blob/master/projects/70_cinder/resou

Re: [openstack-dev] [Openstack-operators] [skip-level-upgrades][fast-forward-upgrades] PTG summary

2017-09-29 Thread Lee Yarwood
pu with libvirt) etc upgrades that require reboots or instances to be restarted (either hard or via live-migration). If you're unable or just unwilling to take downtime for instances that can't be moved when these components require an update then you have bigger problems IMHO. Regar

[openstack-dev] [tripleo][quickstart][rdo] shipping python-virtualbmc in Newton to allow undercloud upgrades from Newton to Queens

2017-10-04 Thread Lee Yarwood
ed) FWIW I can deploy successfully on Newton with these changes and then upgrade the undercloud to Pike just fine. Would anyone be able to confirm *if* we could ship python-virtualbmc in the Newton relevant repos? Thanks in advance, Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64

Re: [openstack-dev] [tripleo][quickstart][rdo] shipping python-virtualbmc in Newton to allow undercloud upgrades from Newton to Queens

2017-10-04 Thread Lee Yarwood
e > reason. Yeah we appear to be shipping python-pyghmi-1.0.12-1.el7.noarch in newton-testing and that meets the requirements of python-virtualbmc allowing me to directly install it from the Ocata repos. Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 si

Re: [openstack-dev] [tripleo][quickstart][rdo] shipping python-virtualbmc in Newton to allow undercloud upgrades from Newton to Queens

2017-10-05 Thread Lee Yarwood
Adding rdo-list in an attempt to get more feeback regarding this proposal, tl;dr can we ship python-virtualbmc in Newton? On 04-10-17 12:08:25, Lee Yarwood wrote: > Hello all, > > I'm currently working to get the tripleo-spec for fast-forward upgrades > out of WIP and merged ah

Re: [openstack-dev] [tripleo][quickstart][rdo] shipping python-virtualbmc in Newton to allow undercloud upgrades from Newton to Queens

2017-10-05 Thread Lee Yarwood
On 05-10-17 09:33:29, Steven Hardy wrote: > On Wed, Oct 4, 2017 at 1:08 PM, Lee Yarwood wrote: > > Hello all, > > > > I'm currently working to get the tripleo-spec for fast-forward upgrades > > out of WIP and merged ahead of the Queens M-1 milestone next wee

Re: [openstack-dev] [rdo-list] [tripleo][quickstart][rdo] shipping python-virtualbmc in Newton to allow undercloud upgrades from Newton to Queens

2017-10-05 Thread Lee Yarwood
https://review.rdoproject.org/r/9981 Add python-virtualbmc to Newton Thanks! Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 signature.asc Description: PGP signature __ OpenStack Development M

Re: [openstack-dev] [tripleo][quickstart][rdo] shipping python-virtualbmc in Newton to allow undercloud upgrades from Newton to Queens

2017-10-12 Thread Lee Yarwood
On 05-10-17 09:57:26, Lee Yarwood wrote: > On 05-10-17 09:33:29, Steven Hardy wrote: >> This sounds reasonable to me, but note another option for testing >> fast-forward overcloud upgrades would be to deploy a trunk/pike >> undercloud, then use it to deploy a newton

[openstack-dev] [tripleo][quickstart] Trying to create a release config for a Master UC and Newton OC

2017-11-01 Thread Lee Yarwood
ar/log/yum.log $ The weird thing is that the repo-setup role doesn't appear to run at all with the above config. Something is obviously changing the repos and running `yum update -y` prior to the overcloud instances being provisioned but I can't seem to track it down. Any suggestions would be

Re: [openstack-dev] [tripleo][quickstart] Trying to create a release config for a Master UC and Newton OC

2017-11-10 Thread Lee Yarwood
On 01-11-17 18:50:23, Lee Yarwood wrote: > Hello all, > > I'm attempting save future contributors to the fast forward upgrades feature > some time by introducing a quickstart release config that deploys a Master UC > and Newton OC: > > config: Provide a Master UC an

Re: [openstack-dev] [tripleo][quickstart] Trying to create a release config for a Master UC and Newton OC

2017-11-10 Thread Lee Yarwood
On 10-11-17 09:25:14, Lee Yarwood wrote: > On 01-11-17 18:50:23, Lee Yarwood wrote: > > Hello all, > > > > I'm attempting save future contributors to the fast forward upgrades feature > > some time by introducing a quickstart release config that deploys a

[openstack-dev] [tripleo][ffu] Fast-forward upgrades M2 progress report

2017-12-08 Thread Lee Yarwood
ast few months! Cheers, Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 signature.asc Description: PGP signature __ OpenStack Development Mailing List (not for usage questions) Unsubscr

Re: [openstack-dev] [nova][stable] What nova needs to get to newton end of life

2017-12-15 Thread Lee Yarwood
sk to backport all the way to > Newton. FWIW this is the master change - https://review.openstack.org/#/c/528012/ Cheers, Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 signature.asc Description: PGP signature

[openstack-dev] [nova] Native QEMU LUKS decryption review overview ahead of FF

2018-01-22 Thread Lee Yarwood
ore detail, background etc. Thanks in advance, Lee -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 signature.asc Description: PGP signature __ OpenStack Development Mailing List (not for usage

Re: [openstack-dev] [nova] Native QEMU LUKS decryption review overview ahead of FF

2018-01-23 Thread Lee Yarwood
A breif progress update in-line below. On 22-01-18 14:22:12, Lee Yarwood wrote: > Hello, > > With M3 and FF rapidly approaching this week I wanted to post a brief > overview of the QEMU native LUKS series. > > The full series is available on the following topic, I'll g

Re: [openstack-dev] [nova] Native QEMU LUKS decryption review overview ahead of FF

2018-01-24 Thread Lee Yarwood
On 23-01-18 16:52:30, Corey Bryant wrote: > On Tue, Jan 23, 2018 at 8:44 AM, Lee Yarwood wrote: >> grenade-dsvm-neutron-multinode-live-migration is currently failing due >> to our use of the Ocata UCA on stable/pike leading to the following >> issue with the libvirt 2.

Re: [openstack-dev] [nova] Native QEMU LUKS decryption review overview ahead of FF

2018-01-24 Thread Lee Yarwood
On 23-01-18 13:44:49, Lee Yarwood wrote: > A breif progress update in-line below. > > On 22-01-18 14:22:12, Lee Yarwood wrote: > > Hello, > > > > With M3 and FF rapidly approaching this week I wanted to post a brief > > overview of the QEMU native LUKS se

Re: [openstack-dev] [nova] Can not rebuild boot-from-volume instance

2016-07-13 Thread Lee Yarwood
gs > block_device_mapping in image and one provied manually. > But rebuilding instance from the image ignores the block_device_mapping > attribute. Should we > replace all origin volumes by new volumes provided byimage > block_device_mapping attribute > according to device name? I *

Re: [openstack-dev] [nova] focused review pipeline of bug fix changes?

2016-07-13 Thread Lee Yarwood
enstack-dev/2016-July/098792.html > [2] http://45.55.105.55:3000/dashboard/db/openstack-bugs > [3] > https://github.com/markuszoeller/openstack/blob/master/scripts/gerrit/bug_fix_histogram.py Thanks for bringing this up Markus! IMHO tags against either in-progress launchpad bugs and/or ger

Re: [openstack-dev] [ptg] etherpad for Fast Forward Upgrading?

2018-02-15 Thread Lee Yarwood
fu-ptg-rocky I'll get this added to the list now and will send a separate note to the ML later today seeking additional input on the agenda. Cheers, -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76

Re: [openstack-dev] [ptg] etherpad for Fast Forward Upgrading?

2018-02-15 Thread Lee Yarwood
is not listed in [2]. > > Indeed, the etherpad is missing, and I realize we don't have anyone > signed up yet to clearly lead that track... > > Is anyone interested in leading that track ? I did sign up a while ago, I've just failed to follow up during the last few week

[openstack-dev] [ffu][upgrades] Dublin PTG room and agenda

2018-02-19 Thread Lee Yarwood
pad, I'd really like to see some concrete action items finally come from these discussions ahead of R. Thanks in advance and see you in Dublin! -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 signature.asc Description: PGP sign

[openstack-dev] [nova][cinder] Concurrent requests to attach the same non-multiattach volume to multiple instances can succeed

2018-04-10 Thread Lee Yarwood
could be due to a complete lack of locking when creating the initial attachment but I might be missing something here. I've marked this as impacting both Nova and Cinder for now while but if I'm honest this strikes me as something we need to resolve in c-api alone. Cheers, -- L

Re: [openstack-dev] Reminder to add "nova-status upgrade check" to deployment tooling

2018-06-14 Thread Lee Yarwood
stack.org/nova/latest/cli/nova-status.html > [3] https://review.openstack.org/#/c/575125/ Cheers, -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 __ OpenStack Development Mailing L

Re: [openstack-dev] minimum libvirt version for nova-compute

2018-06-20 Thread Lee Yarwood
t the moment. I'm stating that, > especially because we had this topic a few weeks ago. We can bump the minimum here but then we have to play a game of working out the oldest version the above fix was backported to across the various distros. I'd rather see this address by the Libvir

Re: [openstack-dev] minimum libvirt version for nova-compute

2018-06-20 Thread Lee Yarwood
On 20-06-18 07:32:08, Matt Riedemann wrote: > On 6/20/2018 6:54 AM, Lee Yarwood wrote: > > We can bump the minimum here but then we have to play a game of working > > out the oldest version the above fix was backported to across the > > various distros. I'd rather see t

Re: [openstack-dev] minimum libvirt version for nova-compute

2018-06-21 Thread Lee Yarwood
On 20-06-18 13:54:29, Lee Yarwood wrote: > On 20-06-18 07:32:08, Matt Riedemann wrote: > > On 6/20/2018 6:54 AM, Lee Yarwood wrote: > > > We can bump the minimum here but then we have to play a game of working > > > out the oldest version the above fix was backported

Re: [openstack-dev] [cinder][nova] Proper behavior for os-force_detach

2018-07-24 Thread Lee Yarwood
_ > >> > OpenStack Development Mailing List (not for usage questions) > >> > Unsubscribe: > >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > >> > http://lists.openstack.org/cgi-bin/mailman/listinfo/op

Re: [openstack-dev] [Openstack-operators] [nova][cinder] Disabling nova volume-update (aka swap volume; aka cinder live migration)

2018-08-21 Thread Lee Yarwood
heading off this class of bug by disabling it for non-cinder > callers. I'm definitely in favor of hiding this from users eventually but wouldn't this require some form of deprecation cycle? Warnings within the API documentation would also be useful and even something we could backport to

Re: [openstack-dev] [stable][nova] Nominating melwitt for nova stable core

2018-08-30 Thread Lee Yarwood
week with > no negative votes I think it's a done deal. Of course +1/-1 from existing > nova-stable-maint [2] is also good feedback. > > [1] https://review.openstack.org/#/admin/groups/530,members > [2] https://review.openstack.org/#/admin/groups/540,members +1 from

Re: [openstack-dev] [puppet] [placement]

2018-09-17 Thread Lee Yarwood
[1] and would be happy to help with this puppet extraction. Cheers, Lee [1] https://gitlab.com/lyarwood/placement-distgit -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76 signature.asc Description: PGP signature _

Re: [openstack-dev] [puppet] [placement]

2018-09-18 Thread Lee Yarwood
On 17-09-18 08:48:01, Emilien Macchi wrote: > On Mon, Sep 17, 2018 at 5:29 AM Lee Yarwood wrote: > > > FWIW I've also started work on the RDO packaging front [1] and would be > > happy to help with this puppet extraction. > > > > Good to know, thanks. > Onc

Re: [openstack-dev] [tripleo][openstack-ansible][nova][placement] Owners needed for placement extraction upgrade deployment tooling

2018-10-31 Thread Lee Yarwood
On 30-10-18 14:29:12, Emilien Macchi wrote: > On the TripleO side, it sounds like Lee Yarwood is taking the lead with a > first commit in puppet-placement: > https://review.openstack.org/#/c/604182/ > > Lee, can you confirm that you and your team are working on it for Stein >

[openstack-dev] [nova][cinder] Addressing mangled LUKS passphrases (bug#1633518)

2016-10-21 Thread Lee Yarwood
Lee [1] https://launchpad.net/bugs/1633518 [2] https://review.openstack.org/#/c/309614/ [3] https://review.openstack.org/#/c/386670/ -- Lee Yarwood Senior Software Engineer Red Hat PGP : A5D1 9385 88CB 7E5F BE64 6618 BCA6

Re: [openstack-dev] [nova] [cinder] Issue with live migration of instances with encrypted volumes

2016-11-01 Thread Lee Yarwood
Does anyone have any thoughts on how to proceed with this issue? > > No particular ideas, but I wanted to point out that the scsi_id command > shown in that stack trace has a device path that points to the raw > iSCSI LUN, not to the dm-crypt overlay. So it looks like you're h

Re: [openstack-dev] [nova] [cinder] Issue with live migration of instances with encrypted volumes

2016-11-02 Thread Lee Yarwood
on and thus working around your issue. Lee > From: Lee Yarwood > Sent: 01 November 2016 14:58:58 > To: OpenStack Development Mailing List (not for usage questions) > Subject: Re: [openstack-dev] [nova] [cinder] Issue with live migration of > instances with encrypted volumes >

Re: [openstack-dev] [nova] [cinder] Issue with live migration of instances with encrypted volumes

2016-11-02 Thread Lee Yarwood
e multiple times on the destination host. Lee > From: Lee Yarwood > Sent: 02 November 2016 08:17:35 > To: OpenStack Development Mailing List (not for usage questions) > Subject: Re: [openstack-dev] [nova] [cinder] Issue with live migration of > instances with encrypted volumes &g

Re: [openstack-dev] [nova] Do we have users of CryptsetupEncryptor and if so why?

2016-11-08 Thread Lee Yarwood
On 07-11-16 17:42:02, Lee Yarwood wrote: > Hello all, > > The following bug was recently discovered where encrypted volumes > created prior to Newton use a slightly mangled passphrase : > > The passphrase used to encrypt or decrypt volumes was mangled prior to Newton > https