Thursday, 2013-04-25

*** markwash has quit IRC00:05
*** lbragstad has joined #openstack-meeting00:11
*** cp16net is now known as cp16net|away00:16
*** cp16net|away is now known as cp16net00:16
*** salv-orlando has quit IRC00:21
*** spzala has joined #openstack-meeting00:28
*** zb has joined #openstack-meeting00:40
*** bdpayne has quit IRC00:41
*** zbitter has quit IRC00:42
*** bdpayne has joined #openstack-meeting00:43
*** bdpayne has quit IRC00:44
*** nati_ueno has joined #openstack-meeting00:46
*** ewindisch has joined #openstack-meeting00:46
*** chuck_ is now known as zul00:50
*** ewindisch has quit IRC00:51
*** nati_ueno has quit IRC00:53
*** ewindisch has joined #openstack-meeting00:53
*** nati_ueno has joined #openstack-meeting00:53
*** tomoe_ has joined #openstack-meeting00:53
*** zbitter has joined #openstack-meeting00:54
*** spzala has quit IRC00:54
*** zb has quit IRC00:54
*** Nachi has joined #openstack-meeting00:55
*** nati_ueno has quit IRC00:56
*** zb has joined #openstack-meeting00:57
*** ryanpetrello has quit IRC00:57
*** zbitter has quit IRC00:59
*** ryanpetrello has joined #openstack-meeting01:03
*** gongysh has quit IRC01:04
*** Nachi has quit IRC01:04
*** nati_ueno has joined #openstack-meeting01:05
*** nati_ueno has quit IRC01:09
*** zbitter has joined #openstack-meeting01:09
*** ewindisch has quit IRC01:09
*** ayoung has joined #openstack-meeting01:10
*** Mandell has quit IRC01:10
*** zb has quit IRC01:12
*** lloydde has joined #openstack-meeting01:20
*** zzs has quit IRC01:22
*** lloydde has quit IRC01:24
*** ryanpetrello has quit IRC01:26
*** vkmc_ has joined #openstack-meeting01:27
*** terry7 has quit IRC01:27
*** ewindisch has joined #openstack-meeting01:28
*** ryanpetrello has joined #openstack-meeting01:29
*** kolbrich has joined #openstack-meeting01:30
*** ryanpetrello has quit IRC01:30
*** zb has joined #openstack-meeting01:30
*** novas0x2a|laptop has quit IRC01:30
*** vkmc has quit IRC01:31
*** patelna__ has quit IRC01:31
*** patelna_ has quit IRC01:31
*** dims has quit IRC01:31
*** cp16net is now known as cp16net|away01:32
*** zbitter has quit IRC01:33
*** ryanpetrello has joined #openstack-meeting01:35
*** vkmc_ is now known as vkmc01:35
*** cp16net|away is now known as cp16net01:35
*** vkmc has quit IRC01:35
*** vkmc has joined #openstack-meeting01:35
*** cp16net is now known as cp16net|away01:35
*** ryanpetrello has quit IRC01:35
*** jhenner has joined #openstack-meeting01:38
*** vincent_hou_ has quit IRC01:40
*** markwash has joined #openstack-meeting01:41
*** _spn_ has joined #openstack-meeting01:42
*** dontalton has joined #openstack-meeting01:45
*** dwcramer has joined #openstack-meeting01:46
*** anniec has quit IRC01:47
*** noslzzp has quit IRC01:57
*** rmohan has quit IRC02:02
*** novas0x2a|laptop has joined #openstack-meeting02:02
*** rmohan has joined #openstack-meeting02:03
*** zbitter has joined #openstack-meeting02:03
*** zb has quit IRC02:06
*** jhenner has quit IRC02:07
*** stevemar has joined #openstack-meeting02:09
*** gyee has quit IRC02:13
*** cp16net|away is now known as cp16net02:14
*** lillie has quit IRC02:18
*** lillie has joined #openstack-meeting02:18
*** lillie- has joined #openstack-meeting02:19
*** markmcclain has joined #openstack-meeting02:20
*** matiu has quit IRC02:24
*** koolhead17 has quit IRC02:34
*** fnaval has joined #openstack-meeting02:41
*** fnaval has quit IRC02:41
*** fnaval has joined #openstack-meeting02:42
*** martine has joined #openstack-meeting02:47
*** koolhead17 has joined #openstack-meeting02:47
*** dwcramer has quit IRC02:52
*** _spn_ has quit IRC02:53
*** ryanpetrello has joined #openstack-meeting02:53
*** ryanpetrello has quit IRC02:54
*** bdperkin has joined #openstack-meeting03:01
*** stevemar2 has joined #openstack-meeting03:01
*** stevemar has quit IRC03:02
*** tomoe_ has quit IRC03:06
*** tomoe_ has joined #openstack-meeting03:06
*** dontalton has quit IRC03:07
*** vkmc has quit IRC03:07
*** yguang has joined #openstack-meeting03:09
*** johnthetubaguy has joined #openstack-meeting03:10
*** stevemar2 has quit IRC03:12
*** yguang is now known as yaguang03:18
*** zbitter has quit IRC03:21
*** yaguang has quit IRC03:22
*** zbitter has joined #openstack-meeting03:22
*** martine has quit IRC03:26
*** johnthetubaguy1 has joined #openstack-meeting03:27
*** johnthetubaguy has quit IRC03:29
*** bdpayne has joined #openstack-meeting03:32
*** cp16net is now known as cp16net|away03:37
*** sandywalsh has quit IRC03:47
*** kolbrich has quit IRC03:50
*** cp16net|away is now known as cp16net04:01
*** jaypipes has joined #openstack-meeting04:02
*** ladquin has quit IRC04:05
*** rshade98 has quit IRC04:09
*** rshade98 has joined #openstack-meeting04:09
*** jlk has joined #openstack-meeting04:13
*** jlk has left #openstack-meeting04:14
*** markmcclain has quit IRC04:16
*** yguang has joined #openstack-meeting04:17
*** SergeyLukjanov has joined #openstack-meeting04:22
*** lbragstad has quit IRC04:28
*** sandywalsh has joined #openstack-meeting04:36
*** koolhead17 has quit IRC04:36
*** koolhead17 has joined #openstack-meeting04:49
*** davidha has joined #openstack-meeting04:49
*** zbitter has quit IRC04:49
*** zb has joined #openstack-meeting04:49
*** davidhadas has quit IRC04:50
*** garyk has quit IRC04:51
*** AlanClark has quit IRC04:51
*** aclark_ has joined #openstack-meeting04:52
*** koolhead17 has quit IRC04:54
*** SergeyLukjanov has quit IRC04:56
*** Mandell has joined #openstack-meeting04:58
*** otherwiseguy has quit IRC04:58
*** dguitarbite has joined #openstack-meeting05:01
*** sacharya has quit IRC05:02
*** dguitarbite has quit IRC05:04
*** jcoufal has joined #openstack-meeting05:06
*** bdpayne has quit IRC05:17
*** boris-42 has joined #openstack-meeting05:20
*** fnaval_ has joined #openstack-meeting05:21
*** fnaval has quit IRC05:21
*** mrunge has joined #openstack-meeting05:29
*** cp16net is now known as cp16net|away05:38
*** garyk has joined #openstack-meeting05:42
*** dguitarbite has joined #openstack-meeting05:47
*** Mike656 has quit IRC05:50
*** SergeyLukjanov has joined #openstack-meeting05:58
*** bdpayne has joined #openstack-meeting06:00
*** bdpayne has quit IRC06:17
*** hartsocks has joined #openstack-meeting06:21
*** hartsocks has quit IRC06:21
*** bdpayne has joined #openstack-meeting06:25
*** yguang has quit IRC06:29
*** Daviey has quit IRC06:30
*** cp16net|away is now known as cp16net06:37
*** matiu has joined #openstack-meeting06:39
*** eglynn has quit IRC06:47
*** lillie- is now known as lillie06:48
*** Daviey has joined #openstack-meeting06:49
*** johnthetubaguy1 has quit IRC06:58
*** enikanorov has joined #openstack-meeting06:59
*** oubiwann_ has quit IRC07:03
*** oubiwann has joined #openstack-meeting07:04
*** jtomasek has joined #openstack-meeting07:12
*** eglynn has joined #openstack-meeting07:18
*** IlyaE has quit IRC07:19
*** eglynn has quit IRC07:24
*** bdpayne has quit IRC07:26
*** almaisan-away is now known as al-maisan07:33
*** oubiwann has quit IRC07:39
*** matiu has quit IRC07:41
*** oubiwann has joined #openstack-meeting07:43
*** dguitarbite has quit IRC07:44
*** tomoe__ has joined #openstack-meeting07:50
*** tomoe_ has quit IRC07:50
*** salv-orlando has joined #openstack-meeting07:56
*** oubiwann has quit IRC08:03
*** eglynn has joined #openstack-meeting08:07
*** oubiwann has joined #openstack-meeting08:07
*** Mandell has quit IRC08:09
*** Mandell has joined #openstack-meeting08:16
*** gongysh has joined #openstack-meeting08:39
*** derekh has joined #openstack-meeting08:48
*** henrynash_ has joined #openstack-meeting08:56
*** psedlak has joined #openstack-meeting08:57
*** henrynash has quit IRC08:57
*** henrynash_ is now known as henrynash08:57
*** Razique has joined #openstack-meeting09:03
*** zbitter has joined #openstack-meeting09:07
*** zbitter is now known as zaneb09:07
*** egallen has joined #openstack-meeting09:08
*** zb has quit IRC09:09
*** darraghb has joined #openstack-meeting09:12
*** afazekas has joined #openstack-meeting09:12
*** salv-orlando has quit IRC09:17
*** zaneb has quit IRC09:17
*** darraghb has quit IRC09:19
*** Yada has quit IRC09:19
*** darraghb has joined #openstack-meeting09:20
*** Yada has joined #openstack-meeting09:21
*** derekh has quit IRC09:21
*** jhenner has joined #openstack-meeting09:26
*** Ng has left #openstack-meeting09:34
*** matiu has joined #openstack-meeting09:38
*** egallen has quit IRC09:38
*** shang has quit IRC09:41
*** al-maisan is now known as almaisan-away09:47
*** oubiwann has quit IRC10:02
*** plomakin has joined #openstack-meeting10:03
*** shang has joined #openstack-meeting10:03
*** oubiwann has joined #openstack-meeting10:04
*** tomoe__ has quit IRC10:05
*** tomoe_ has joined #openstack-meeting10:06
*** oubiwann has quit IRC10:09
*** tomoe_ has quit IRC10:10
*** shardy_afk is now known as shardy10:11
*** oubiwann has joined #openstack-meeting10:13
*** zynzel has quit IRC10:14
*** davidha has quit IRC10:17
*** timello has quit IRC10:23
*** zynzel has joined #openstack-meeting10:23
*** shang has quit IRC10:25
*** Yada has quit IRC10:26
*** garyk has quit IRC10:29
*** topol has joined #openstack-meeting10:30
*** Razique has quit IRC10:32
*** shang has joined #openstack-meeting10:42
*** oubiwann has quit IRC10:47
*** derekh has joined #openstack-meeting10:47
*** oubiwann has joined #openstack-meeting10:51
*** dprince has joined #openstack-meeting10:53
*** afazekas has quit IRC10:55
*** salv-orlando has joined #openstack-meeting10:59
*** martine has joined #openstack-meeting11:02
*** jcoufal has quit IRC11:02
*** pcm__ has joined #openstack-meeting11:04
*** davidha has joined #openstack-meeting11:05
*** vkmc has joined #openstack-meeting11:08
*** SergeyLukjanov has quit IRC11:14
eglynnsandywalsh: just looking at your stacktach BPs, confused a little about https://blueprints.launchpad.net/nova/+spec/libvirt-exists-support11:16
eglynnsandywalsh: IIRC compute.instance.exists notifications are emitted with libvirt11:16
eglynnsandywalsh: but what's missing is the ComputeDriver.get_all_bw_counters() implementation for libvirt11:16
eglynnsandywalsh: (or is it a case of the .exists notification missing some additional info in the libvirt case?)11:17
*** openstack` has joined #openstack-meeting17:27
-zelazny.freenode.net- [freenode-info] if you're at a conference and other people are having trouble connecting, please mention it to staff: http://freenode.net/faq.shtml#gettinghelp17:27
davidkranzsdague: THis looks like one of those tricky judgement calls about how bad a bug is and whether it justifies an incompatible change to fix it.17:27
sdagueafazekas: will do17:27
sdagueafazekas: updated17:28
*** hartsocks has joined #openstack-meeting17:29
sdagueany other critical reviews?17:29
sdagueI admit I'm still getting back into the swing of things post summit17:29
davidkranzsdague: Most of the other reviews just need to be approved at this point.17:30
sdagueor any other topics of note?17:30
giulivocan I shout here a question also sent to the ml?17:31
davidkranzsdague: Are you going to put a comment in the nova patch https://review.openstack.org/#/c/25887/17:31
sdaguedavidkranz: sure17:31
giulivo*shoot17:31
davidkranzsdague: Thanks.17:31
*** anniec has quit IRC17:32
giulivoafter a blueprint is drafted or a commit pushed for review, is the submitter in charge of searching for an approver/review17:32
sdaguegiulivo: for code, the reviewers check their review queue regularly17:32
sdaguefor blueprints, we should do it here17:33
giulivoso for code no need to worry, correct?17:33
sdaguegiulivo: correct17:33
giulivothanks :)17:34
sdagueif you feel the code isn't getting enough eyes, bring it up at the weekly meeting here17:34
sdaguebut in general that should just happen in the background17:34
giulivono no, it is the opposite17:34
sdagueok, anything else from folks?17:34
sdaguegoing once17:35
sdaguegoing twice17:35
sdagueok, I'm going to say we're done for the day17:35
sdague#endmeeting17:35
sdagueeven though meeting bot is broken17:35
sdaguesee you all in #openstack-qa17:36
*** giulivo has left #openstack-meeting17:36
*** meera has quit IRC17:38
*** openstack` has joined #openstack-meeting17:38
-pratchett.freenode.net- [freenode-info] channel flooding and no channel staff around to help? Please check with freenode support: http://freenode.net/faq.shtml#gettinghelp17:38
*** eglynn has joined #openstack-meeting17:40
*** SergeyLukjanov has joined #openstack-meeting17:41
*** psedlak has quit IRC17:42
*** jog0 has joined #openstack-meeting17:42
*** jaypipes has joined #openstack-meeting17:42
*** gyee has quit IRC17:44
*** donaldngo_hp has quit IRC17:47
*** beyounn has joined #openstack-meeting17:48
*** dolphm has joined #openstack-meeting17:51
*** dolphm has quit IRC17:51
*** plomakin has quit IRC17:54
*** darraghb has quit IRC17:54
*** dolphm has joined #openstack-meeting17:54
*** eglynn has quit IRC17:55
*** plomakin has joined #openstack-meeting17:56
*** nicolae_ has joined #openstack-meeting17:56
*** afazekas has quit IRC17:56
*** jcoufal has joined #openstack-meeting17:58
*** egallen has quit IRC17:58
*** DanD_ has quit IRC17:59
bdpayne#startmeeting OpenStack Security Group18:00
openstack`Meeting started Thu Apr 25 18:00:21 2013 UTC.  The chair is bdpayne. Information about MeetBot at http://wiki.debian.org/MeetBot.18:00
openstack`Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.18:00
openstack`The meeting name has been set to 'openstack_security_group'18:00
*** jeblair is now known as jeblairtestnick18:00
bdpaynegood morning / afternoon / evening everyone18:00
*** ijw has joined #openstack-meeting18:00
bdpaynehopefully everyone is recovered from the summit18:00
bdpaynecould we start with a role call?18:01
*** jeblairtestnick is now known as jeblair18:01
bdpayneanyone here for the OSSG meeting?18:02
*** hartsocks has quit IRC18:02
harlowjai'll chime in :-p18:02
*** dwcramer has quit IRC18:02
bdpaynehi!18:02
harlowjahi!18:03
nicolae_hi!18:03
*** mordred has quit IRC18:03
*** mordred has joined #openstack-meeting18:03
beyounnhi18:03
harlowjathe message queue security stuff is interesting to me right now, maybe ewindisch has some ideas :)18:03
*** kolbrich has quit IRC18:03
bdpayneindeed, that's on the agenda for discussion today18:03
harlowjacool18:03
harlowjaseems like multiple paths that could be taken18:03
*** plomakin1 has joined #openstack-meeting18:03
harlowjabe nice to agree on just 1 :-p18:04
bdpayneok, let's get started18:04
bdpayneif nothing else, I'll have a nice log of myself typing18:04
bdpayne#topic Summit Wrapup18:04
bdpayneThere were a lot of security related discussion at the summit this time around18:04
harlowjadef18:05
bdpayneSeems to be growing each time, which is great18:05
harlowja*which is great imho18:05
harlowjaya18:05
bdpayne:-)18:05
*** plomakin has quit IRC18:05
harlowjanow just to make some of it reality, thats the hard part, haha18:05
bdpayneThemes I saw included key management / secret management, storage encryption, message queue / rpc security18:05
bdpayneAlso some interesting talks on using hadoop for log analysis18:05
bdpayneAnd, of course, there was the NSA keynote18:06
bdpayneany other topics from the summit worth calling attention to?18:06
harlowjahmmm, i remember one in nova about how to do live migration securely18:06
bdpayneinteresting… that's a tricky problem18:06
*** openstack has joined #openstack-meeting18:07
*** ChanServ sets mode: +o openstack18:07
bdpayneok, that's something we can keep an eye out for18:07
harlowjadef18:07
ewindischbdpayne: I suggested that rootwrap, for as long as it is used, should probably use linux system capabilities, rather than simply sudo to full root access.18:07
bdpayneahh yes, the root wrap discussion18:08
bdpaynethat's a good one too18:08
harlowjanever ending root wrap discussion :-p18:08
bdpaynelinux capabilities does seem a useful possibility18:08
ewindischor at the very least, have the rootwrap process drop all privileges except execvp, so it can do things like logging, more safely18:08
bdpayneI recall there being some concerns about non-linux systems, but that shouldn't be a show stopper18:08
ewindischwe can put conditionals around the platform18:08
bdpayneso, yeah, lots of things for security people to work on18:08
harlowjavery much so18:09
bdpaynefrom an OSSG perspective, we got 8-ish new members to the group18:09
*** ijw has quit IRC18:09
bdpaynewould love to get more of the group engaged and think about how we can distribute the work of tracking and helping with all of these features18:09
bdpaynegiven the light attendance today, I'll leave that as an action item18:09
harlowja:)18:09
bdpayneironic, perhaps18:10
*** radez_g0n3 is now known as radez18:10
harlowjalikely everyone still trying to figure out what to do about havana, haha18:10
bdpayneok, let's move forward18:10
nicolae_is the "secure live migration" issue described anywhere in more detail?18:10
jeblairbdpayne: we had to restart meetbot; you may want to "#startmeeting openstack security group" again18:10
bdpayneahh18:10
harlowjanicolae_: let me see if i can find anything, sorta remember which session it was in18:10
*** Bruce has joined #openstack-meeting18:10
bdpayne#startmeeting OpenStack Security Group18:10
openstackMeeting started Thu Apr 25 18:10:57 2013 UTC.  The chair is bdpayne. Information about MeetBot at http://wiki.debian.org/MeetBot.18:10
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.18:10
*** openstack changes topic to " (Meeting topic: OpenStack Security Group)"18:11
openstackThe meeting name has been set to 'openstack_security_group'18:11
bdpayneI'll need to check the conference sessions to find the live migration stuff18:11
ewindischlive migrations depend on an ssh key18:11
bdpaynemay be an ether pad18:11
*** ravikumar_hp has quit IRC18:12
bdpayneI know that I've spoken with Vish about this stuff a bit as well18:12
ewindischeither every compute node has every other machine's public key, or they just share a private key.18:12
bdpaynegood times :-)18:12
harlowjaya, so the general problem is as ewindisch says18:12
nicolae_oh, doesn't sound good :)18:12
bdpayneso let's talk a little about the message security work18:12
bdpayne#topic Message Queue Security18:12
*** openstack changes topic to "Message Queue Security (Meeting topic: OpenStack Security Group)"18:12
*** plomakin1 has quit IRC18:12
bdpayneThere's a very active email thread in -dev this morning18:12
bdpaynehttp://lists.openstack.org/pipermail/openstack-dev/2013-April/007916.html18:13
bdpaynethis is a proposal from Red Hat18:13
bdpaynethere was also a proposal by erindisch at the summit18:13
bdpaynearg.. that's ewindisch18:13
bdpayneI do agree with the notion that we should probably, as a community, decide on a single good path18:14
bdpayneany thoughts?18:14
harlowjahttp://lists.openstack.org/pipermail/openstack-dev/2013-April/thread.html#7916 also for the full thread18:14
*** lbragstad has quit IRC18:14
*** anniec has joined #openstack-meeting18:14
*** cp16net is now known as cp16net|away18:14
harlowjabdpayne i'd like to reach a comprimse of sorts, since i believe there won't be a 1 ideal solution, but that doesn't mean we can't agree on something :-p18:14
bdpayneewindisch what is your take?  I haven't had a chance to read the full thread18:15
ewindischThe shared key solution is much more architecturally heavy, and the RedHat guys seem to gloss over that, imho. Basically, they suggest we take convenience over security, in some cases.18:15
ewindischand if we remove the convenience for more security, we get more architecturally heavy.18:15
ewindischthat isn't necessarily a bad thing, but I feel they're a bit unwilling to admit it, at any rate.18:16
*** novas0x2a|laptop has quit IRC18:16
bdpayneok, fair point18:16
bdpayneI feel like shared keys doesn't scale as well, which is basically what you're saying18:16
bdpayneand cloud is really all about scale18:16
bdpaynepeople are often scared of pki, but it has many benefits18:16
*** jhenner has quit IRC18:17
harlowjaa dev on our side had an interesting idea, about putting the control network in a vpn, securing that vpn, then leaving the rest of the stuff intact (and only opening the public url endpoints), but maybe thats different/not related18:17
bdpaynewell, I would encourage people to chime in on the Red Hat thread18:17
*** dontalton has quit IRC18:17
ewindischharlowja: I honestly think that is a different concern altogether.18:18
bdpaynethat's not a bad idea, but it solves a different set of security problems18:18
bdpayneyeah, that18:18
bdpayne:-)18:18
harlowjaya, it sounded neat, haha18:18
bdpaynealso, ewindisch is your stuff available as a blueprint atm?18:18
*** derekh has joined #openstack-meeting18:19
ewindischbdpayne: very roughly. It doesn't have details. It should.18:19
*** nsavin has joined #openstack-meeting18:19
bdpaynegiven today's email thread, I wonder if it is time to flush it out18:19
ewindischI can take an AI to update the blueprint with a more concrete proposal18:19
*** jog0 has quit IRC18:19
bdpayneand then have a discussion about pros and cons of each18:20
harlowjai'd like that, i trust ewindisch with security more than i trust myself ;)18:20
*** jog0 has joined #openstack-meeting18:20
bdpayneewindisch I'm happy to help you out, if that's useful18:20
harlowjamaybe nsavin u can help also18:20
bdpaynejust drop me a line18:20
ewindischbdpayne: I'd appreciate it.18:20
bdpaynegroovy18:20
bdpayneok, I have one more topic to discuss18:21
bdpayne#topic OpenStack Security Configuration Guide18:21
*** openstack changes topic to "OpenStack Security Configuration Guide (Meeting topic: OpenStack Security Group)"18:21
bdpayneso this is coming together but there are still some details to finalize18:21
harlowjacool18:22
bdpaynekeith would have the latest, but I can give some updates18:22
*** derekh has quit IRC18:22
bdpaynebasically, we are still looking for June18:22
*** johnthetubaguy has quit IRC18:22
bdpaynethe facilitator we wanted has a conflict with the first week in June18:22
bdpayneso we are looking for either a difference facilitator, or a different week18:23
bdpayneso that's in flux a bit18:23
bdpaynelocation appears to be out in Maryland18:23
bdpayneparticipation is at around 10 people or so18:23
bdpayneI'd love to got some more OpenStack specific people18:23
bdpaynewhich is to say we have a lot of security folks with a medium amount of OpenStack experience18:24
bdpayneI'd like to complement that with OpenStack people that have a medium amount of security experience (or more)18:24
bdpaynehopefully we'll have 2-3 more people that can be involved18:24
ewindischbdpayne: are you seeking volunteers, recommendations?18:24
bdpaynecommitment would be a full week out in Maryland sometime in June (likely 1st or 3rd week)18:24
bdpayneseeking volunteers atm18:24
bdpaynesorry, I'm not selling it well enough18:25
bdpayne:-)18:25
*** lbragstad has joined #openstack-meeting18:25
harlowjalol18:25
bdpayneanyway, if you're interested, then drop me a line18:25
ewindischbdpayne: I'd have to check on time availability, but I'm interested.18:25
bdpayneand I'll continue with more updates on this for future meetings18:25
bdpayneewindisch sounds good, I think you'd be an assest18:25
ewindischat any rate, I'm fairly local.18:25
bdpayneor asset, as the case may be18:26
*** hartsocks has joined #openstack-meeting18:26
harlowjahmmm, i'll chat with y! people here18:26
bdpaynesounds great, thanks harlowja18:26
harlowjacan maybe volunteer one of them, haha18:26
bdpayne#topic Open Discussion18:26
*** openstack changes topic to "Open Discussion (Meeting topic: OpenStack Security Group)"18:26
bdpayneanything else for today?18:26
bdpayne(we normally just run til 1803018:26
*** mestery_ is now known as mestery18:26
harlowjalive migration stuff, i can sumarrize what i remember18:26
bdpayne*183018:26
bdpayneok18:26
harlowjai remember stuff like, can we have an intermediary give those keys out for only the duration of live migration (aka a orchestration layer) or can we eliminate the sharing of those keys entirely via some other mechanism (orchestration layer possibly establishing a secure tunnel for the live migration and telling the compute nodes to use said tunnel...)....18:27
Randy_PerrymanNeed to read the list and find your Information on the Security Document18:27
harlowjasome kind of intermediary that connects the hypervisors for the duration of the live migration (And resize operation)18:27
harlowjai think it came up in https://etherpad.openstack.org/HavanaUnifyMigrateAndLiveMigrate but nothing documented there18:27
*** malini1 has joined #openstack-meeting18:28
harlowjai can fire an email to the main dev thread, asking if we should at least document it somewhere18:28
*** malini has quit IRC18:28
bdpayneok, thanks for the details there… certainly worth collecting more info18:28
harlowjadef, i know at least at y! we don't want hypervisors talking to each other, so live migration is sorta hard in that case :-p18:29
harlowjabut an intermediary aiding that process might be acceptable18:29
harlowja*hand-holding the hypervisors in a way, haha18:29
bdpayneinteresting18:30
bdpayneok, I think that's all for today18:30
bdpaynethanks everyone… nice to see some new faces in here18:30
bdpayne#endmeeting18:30
*** openstack changes topic to "OpenStack meetings || Development in #openstack-dev || Help in #openstack"18:30
openstackMeeting ended Thu Apr 25 18:30:18 2013 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)18:30
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_security_group/2013/openstack_security_group.2013-04-25-18.10.html18:30
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_security_group/2013/openstack_security_group.2013-04-25-18.10.txt18:30
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_security_group/2013/openstack_security_group.2013-04-25-18.10.log.html18:30
*** malini has joined #openstack-meeting18:30
*** Randy_Perryman has quit IRC18:30
harlowjabdpayne: the reason for not wanting connectivity, is what happens if someone breaks out of a hypervisor, giving them those shared ssh keys would be bad :p18:31
*** jcoufal has quit IRC18:31
harlowjaits bad enough already due to the MQ itself and such18:31
*** SunSlayer has left #openstack-meeting18:31
harlowjalikely someone could just jump on the MQ and start triggering live migrations right now, haha18:31
harlowja*not so awesome*18:31
bdpayneoh, I completely agree!18:32
*** davidha has joined #openstack-meeting18:32
ewindischharlowja: I'm wondering if the host (losing the VM) can generate a short-lived key/token, send that to the host receiving the VM, then have that host use that key/token to pull off some mechanism.18:32
*** lbragstad has quit IRC18:32
*** malini1 has quit IRC18:33
ewindischyou'd need some transport mechanism that understands this and can be easily manipulated for the short-lived access control mechanism.18:33
ewindisch(SSH is not a good solution here)18:33
ewindisch"lots of MQ messages!"18:34
*** natedmac has left #openstack-meeting18:34
*** plomakin has joined #openstack-meeting18:35
*** davidhadas has joined #openstack-meeting18:36
*** jhullinge has quit IRC18:36
*** lbragstad has joined #openstack-meeting18:37
*** zul has quit IRC18:38
*** sirushti is now known as zz_sirushti18:38
*** novas0x2a|laptop has joined #openstack-meeting18:38
*** nicolae_ has quit IRC18:40
*** davidhadas has quit IRC18:41
*** harlowja_ has joined #openstack-meeting18:50
*** dontalton has joined #openstack-meeting18:51
*** harlowja has quit IRC18:52
*** harlowja_ is now known as harlowja18:52
*** dontalton2 has joined #openstack-meeting18:53
*** yamahata has quit IRC18:54
*** dontalton has quit IRC18:56
*** otherwiseguy has joined #openstack-meeting18:56
*** adjohn has joined #openstack-meeting18:56
*** cp16net|away is now known as cp16net18:57
*** yamahata has joined #openstack-meeting18:57
*** dg_ has quit IRC18:58
*** tomoe_ has quit IRC19:01
*** anniec has quit IRC19:02
*** mrunge has quit IRC19:03
*** dwcramer has joined #openstack-meeting19:05
*** mrunge has joined #openstack-meeting19:07
*** flaper87 has joined #openstack-meeting19:08
*** shengjie_ has joined #openstack-meeting19:09
*** Swaminathan has joined #openstack-meeting19:09
*** lindj_ has joined #openstack-meeting19:10
*** anniec has joined #openstack-meeting19:13
*** anniec has quit IRC19:14
*** mrunge has quit IRC19:16
*** henrynash_ has joined #openstack-meeting19:17
*** dontalton2 is now known as dontalton19:17
*** henrynash has quit IRC19:18
*** henrynash_ is now known as henrynash19:18
*** dwcramer has quit IRC19:20
*** lindj_ has left #openstack-meeting19:20
*** dwcramer has joined #openstack-meeting19:25
*** Swaminathan has quit IRC19:26
*** malini has left #openstack-meeting19:26
*** sandywalsh has quit IRC19:26
*** psedlak has joined #openstack-meeting19:27
*** psedlak has quit IRC19:29
*** martine_ has joined #openstack-meeting19:30
*** brunnhilde has joined #openstack-meeting19:31
*** martine has quit IRC19:31
harlowjaewindisch: i agree, something like that is needed, some kind of 'session' key or something, that is only valid for a certain amount of time for which live migration can be allowed to 'work'19:34
*** kolbrich has joined #openstack-meeting19:34
*** eglynn has joined #openstack-meeting19:36
*** sandywalsh has joined #openstack-meeting19:39
*** IlyaE has quit IRC19:47
*** devcamcar has joined #openstack-meeting19:52
*** plomakin has quit IRC19:53
*** dprince has quit IRC19:53
*** dontalton has quit IRC19:57
*** gyee has joined #openstack-meeting19:58
*** lindj_ has joined #openstack-meeting20:00
*** lloydde has joined #openstack-meeting20:01
*** bdpayne has quit IRC20:01
*** jhenner has joined #openstack-meeting20:04
*** kebray has quit IRC20:07
*** dontalton has joined #openstack-meeting20:09
*** dolphm has quit IRC20:10
*** timello has quit IRC20:10
*** ayoung has quit IRC20:13
*** radez is now known as radez_g0n320:16
*** SergeyLukjanov has quit IRC20:17
*** devcamcar has quit IRC20:17
*** aclark__ has joined #openstack-meeting20:18
*** aclark_ has quit IRC20:19
*** lbragstad has quit IRC20:20
*** lloydde has quit IRC20:20
*** johnthetubaguy has joined #openstack-meeting20:21
*** IlyaE has joined #openstack-meeting20:21
*** lbragstad has joined #openstack-meeting20:22
*** shardy has left #openstack-meeting20:26
*** pcm__ has quit IRC20:27
*** troytoman-away is now known as troytoman20:27
*** reed has quit IRC20:29
*** reed_ has joined #openstack-meeting20:29
*** aclark__ has quit IRC20:29
*** mkollaro has joined #openstack-meeting20:37
*** johnthetubaguy has quit IRC20:38
*** reed_ has quit IRC20:41
*** kolbrich has quit IRC20:41
*** IlyaE has quit IRC20:44
*** jhenner has quit IRC20:48
*** dwcramer has quit IRC20:49
*** adalbas has quit IRC20:56
*** crank has quit IRC20:57
*** cp16net is now known as cp16net|away21:00
dansmithit's meetin' tam!21:01
*** Vek has joined #openstack-meeting21:01
russellb#startmeeting nova21:01
openstackMeeting started Thu Apr 25 21:01:24 2013 UTC.  The chair is russellb. Information about MeetBot at http://wiki.debian.org/MeetBot.21:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.21:01
*** openstack changes topic to " (Meeting topic: nova)"21:01
openstackThe meeting name has been set to 'nova'21:01
russellbHowdy!21:01
russellbwho's here?21:01
sdagueo/21:01
dansmith-o/21:01
beagleso/21:01
morganfainbergo/21:01
driptonhi21:01
cyeohHi21:01
russellbpeople!21:01
* Vek tries to decide...21:01
*** sacharya has quit IRC21:01
harlowjame21:02
russellb#link https://wiki.openstack.org/wiki/Meetings/Nova21:02
russellb#topic havana blueprints21:02
*** openstack changes topic to "havana blueprints (Meeting topic: nova)"21:02
morganfainbergI'm virtually here (at best) :P21:02
russellb#link http://lists.openstack.org/pipermail/openstack-dev/2013-April/007788.html21:02
russellbI posted that message earlier this week, please take a moment to read it if you haven't21:02
cburgess_presnet21:02
mikalMorning21:02
*** crank has joined #openstack-meeting21:02
russellbThe most important thing at this point in the cycle is that we get a roadmap put in place21:02
devananda\o21:03
russellbyou can find the roadmap in progress here:21:03
russellb#link https://blueprints.launchpad.net/nova/havana21:03
russellbSo, if there's something you plan to work on, please file a blueprint21:03
russellbor multiple blueprints if it's complex enough to need to be broken up into stages21:03
*** tpatil has joined #openstack-meeting21:03
harlowjaalot of stuff is still up for discussion isn't it? especially the orchestration/conductor pieces...21:03
russellbto get it on the havana roadmap, you will need to set the assignee, propose it for havana, and select a milestone that you feel is realistic for when you can have it completed21:04
russellbharlowja: yes, lots will be under discussion, we just need to take our best shot at a roadmap21:04
harlowjaok, roadmap seems hard when its still under discussion :-p21:04
harlowjabut ok21:04
russellbthe reason we do all this is to communicate amongst ourselves, as well as to the larger community what it is we're working on21:04
sdagueyeh, the starting point should be all the stuff which has concensus21:04
dansmithrussellb: so for the migration cleanup and the object stuff, I'm happy to go off and file those blueprints now, if that's cool21:04
russellblots of blueprints are filed but not on the roadmap, those are the ones in flux a bit, and that's ok21:04
russellbdansmith: yes please do21:05
dansmithI was waiting until today for some undefined and silly reason, I guess21:05
sdaguewhich I think there is a lot from summit, so best to take russellb's approach and get that all in21:05
mikalI'm on vacation this week, I'll catch up with mine next week21:05
russellbmikal: sounds good21:05
*** mkollaro has quit IRC21:05
*** senhuang has joined #openstack-meeting21:05
russellbmy goal is to have a good first cut at this done in about 1.5 weeks from now21:05
russellba couple other comments on the blueprint process ...21:05
cburgess_dansmith: Is the migration one for the general cleanup and unifying all the migration code stuff and cleaning up evactuate etc?21:06
russellbat the end of the release cycle, the blueprint list is effectively our feature list, and what we use to build release notes21:06
russellbas you are reviewing, please be looking for feature patches without a blueprint, and ask for one to be filed21:06
dansmithcburgess_: yeah, and unifying all of that to conductor, as we discussed21:06
harlowjadansmith: please can we finish discussion on that before it suddenly appears21:06
russellbanother review thing ... when reviewing patches that have a blueprint, please make sure it is on the roadmap before approving21:07
dansmithharlowja: appearing as a placeholder can happen before we hash out all the details21:07
harlowjaok21:07
*** matiu has joined #openstack-meeting21:07
russellbif something needs to be ACKed for the roadmap, you can ask me, or anyone on nova-drivers21:07
*** reed has joined #openstack-meeting21:07
russellband it can either be approved, or they may ask for a discussion to make sure there is concensus on the ML first21:07
harlowjasounds good21:08
russellbok, that's all my notes on blueprint process.  any questions on the process?  also feel free to discuss specific blueprints if you'd like.21:08
russellbwe can also discuss them in open discussion at the end.21:08
boris-42hi all21:08
sdaguermk and vishy were looking various nova-network => mutnauq upgrade things, any idea if either of them are going to put in something for deprecating nova-network?21:08
*** huats_ has joined #openstack-meeting21:08
*** topol has quit IRC21:09
russellbsdague: that's a good point, we need something for that.21:09
dansmithlong live nova-network!21:09
russellbsdague: it's unclear what code work is needed ... it's basically "figure out the migration path"21:09
sdagueyeh, true, though I imagine some of that upgrade code will need to be in tree21:10
russellbyep21:10
sdaguebut it's worth not loosing as a thing21:10
russellbi'll add that to  my notes for something to chase down21:10
mikalYeah, its likely they'll need to configure multiple API endpoints for example21:10
*** spzala has quit IRC21:10
russellbagreed21:10
rmksdague: I think that may have been cburgess actually21:10
rmkand hi yes I am here21:10
sdaguermk: ok, it was day 4, so I was a little fuzzy by then :)21:10
russellbone of the problems is that no one person has taken clear ownership over this effort21:10
rmksdague: no worries, I was a zombie too by then21:11
russellba few people volunteered to do some necessary research21:11
*** HenryG has joined #openstack-meeting21:11
russellbso maybe i'll take it for now, at least to track who is researching what21:11
russellband keep it moving21:11
vishyrussellb: I think you could consider me+garyk as the owners21:11
russellbvishy: ok that would be awesome21:11
russellbvishy: i'll file a nova blueprint and set you as the assignee (since we can have only one)21:12
senhuangvishy: do you have any update on the blue print to coordinate the schedulign of nova and cinder using current rpc mechanism?21:12
russellbvishy: do you want to file a blueprint for it?21:12
russellbvishy: not sure what we'd call it ... perhaps it's just deprecate-nova-network, and it's just whatever we need to complete to feel good about doing that21:12
harlowjasenhuang: i'd like to see that also, or maybe u can create one?21:13
*** notmyname_ has joined #openstack-meeting21:14
senhuangharlowja: i have one for unified resource placement module, which is more like a centralized approach that sits on top of nova and cinder21:14
*** jcooley_ has joined #openstack-meeting21:14
*** pvo_ has joined #openstack-meeting21:14
*** troytoma` has joined #openstack-meeting21:14
harlowjasenhuang: so there u go, how can we make that start to appear :-p21:14
russellbok, let's cover a few other topics, then we can come back to specific blueprints at the end21:14
russellb#topic feature patch proposal deadline21:14
*** openstack changes topic to "feature patch proposal deadline (Meeting topic: nova)"21:14
russellb#link http://lists.openstack.org/pipermail/openstack-dev/2013-April/007823.html21:14
russellbI put out this proposal on the list earlier this week21:14
russellbbasically if we're going to reject patches for coming in too late, i want to communicate that clearly ahead of time21:15
harlowjathat seems to be ok with me21:15
russellbi picked a date out of the air, which was 2 weeks ahead of the official feature freeze21:15
sdagueI think it's a good call21:15
dansmith+100021:15
sdague+121:15
senhuang+121:15
*** fungi has quit IRC21:15
*** troytoman has quit IRC21:15
*** pvo has quit IRC21:15
*** notmyname has quit IRC21:15
*** huats has quit IRC21:15
*** jcooley has quit IRC21:15
morganfainberg+121:15
*** notmyname_ is now known as notmyname21:15
*** jcooley_ is now known as jcooley21:15
*** pvo_ is now known as pvo21:15
cburgess_+1 FIrm dates are great we can all work toward that and plan.21:15
cyeoh+121:15
boris-42+121:15
russellbok cool.21:15
russellbit would be good to record your support on the ML thread21:15
harlowjasure21:15
dansmithrussellb: gee, I think that has enough support21:16
driptonI didn't know Dan got a thousand votes.21:16
harlowjajust might want to be some wording when this happens to not piss people off, haha21:16
russellbif anyone has an objection let me know ... otherwise I'll work on making sure it's communicated effectively21:16
russellbharlowja: well that's why i'm trying to establish it as early as possible, so it's not a surprise ... unless it's your fault for not paying attention21:16
dansmithdripton: as you know, a bunch of +1's don't add up to a +2 :)21:17
harlowjarussellb: agreed21:17
sdaguedripton: it's binary, so it's only 8 votes21:17
russellbdansmith: aw, harsh man, they do to me, depending on who the +1s are from :)21:17
morganfainbergsdague: lol21:17
dansmithsdague: nice21:17
dansmithrussellb: heh, well, I was trying to downplay my obvious over-vote for that, given that everyone else only allocated +1 for it :)21:18
russellbalright, next topic, maybe we can finally disagree on something21:18
russellb#topic baremetal split21:18
*** openstack changes topic to "baremetal split (Meeting topic: nova)"21:18
russellb#link http://lists.openstack.org/pipermail/openstack-dev/2013-April/007979.html21:18
russellb#link https://wiki.openstack.org/wiki/BaremetalSplitRationale21:18
harlowjadrum roll21:19
harlowjanm, ha21:19
russellbplease review that, ponder it, and make your opinion known if you have one21:19
rmkI don't even know what this is yet but yes21:19
russellbyeah, it was just posted today21:19
russellbso people need time to review it21:19
russellbbut i wanted to make sure awareness was raised.21:19
russellbdevananda: ^21:19
rmkhonestly bare metal doesn't fit well at all in nova21:19
devanandayep, thanks21:19
devanandai believe it's still waiting moderation on the -tc list, too21:19
russellbOpenStack Bare Metal (Ironic)21:19
mikalrussellb: does a split count as a new incubation request for the TC?21:19
russellbi'm a fan of the codename.21:19
russellbmikal: yes, it will be a TC issue to consider21:19
dansmithI've already said this, but I'm +1 on the Ironic proposal21:19
morganfainbergi'd say in the current way baremetal works, it would be good to move it out of nova into it's own project.21:20
russellbmikal: but I'd like to drive more broad consensus before the TC votes on it or anything21:20
devanandamikal: as far as i've been told, this would bypass incubation and follow the same path Cinder took21:20
harlowjame to, it will be interesting to see how it plays out, hopefully good in the end21:20
morganfainbergrussellb: agreed on the code name.21:20
rmkThe name I'm impartial to but +as_many_as_possible to splitting it out21:20
*** lglenden has joined #openstack-meeting21:20
rmkThe use case is just so vastly different than dealing with VMs21:20
devanandamikal: since the code's already in a core project21:20
russellbbut what we *don't* want is for this to be seen as a fast track method to being an incubated project21:21
rmkaside from being cleaner, it gives the project a much better chance of success since it'll be able to adapt to vastly different bare metal needs21:21
russellbas in, instead of starting off on your own, try to grow in an existing project and split off, because it's easier/quicker21:21
devanandarussellb: indeed21:21
senhuangdevananda: will this bare metal project also support one VM is spawned on the bare metal and possesses all the resources exclusively?21:21
russellbrmk: yeah, agreed, i'm pretty sold on the idea21:21
rmkrussellb: It seems to me this was more a result of discovering that it didn't fit well than anything intentional21:21
russellbrmk: oh sure, not accusing that here, i'm just worried about precedent, and abuse of the pattern elsewhere21:22
devanandasenhuang: i'm not sure i follow your question, but i think the answer is yes, it already does21:22
dansmithrmk: I'm skeptical of that devananda guy and his intentions21:22
mikalHeh21:22
rmkdansmith: totally21:22
devananda:)21:22
rmkhe's pretty sketchy21:22
dansmithlong hair and everything21:22
sdagueheh21:22
mikalI think it can't hurt to run it quickly through the TC, and perhaps truncate the incubation process21:22
morganfainbergrussellb: as long as it's clear the reason for the split, i think it shouldn't become a pattern.21:22
mikaldansmith: he also bites his dogs!21:22
sdagueyeh, well during the review cycle it was clear it fit oddly21:22
dansmithmikal: *gasp*21:23
rmkit's probably easier to figure out if anyone objects to this21:23
russellbi think i saw him with a trench coat on, too21:23
rmkbecause it seems like we couldn't possibly be in more agreement21:23
russellbwhich can't be good21:23
*** fungi has joined #openstack-meeting21:23
devanandasenhuang: take a look at https://github.com/tripleo/incubator/blob/master/README.md and see if that answers some of your questions. it's a special case for baremetal21:23
senhuangdevananda: okay. cool. thanks!21:23
russellbyep, so everyone here seems happy with it ... please continue comments on list21:23
devanandamikal: only when necessary!21:23
russellbeven +1s on the list are quite helpful to showing consensus21:23
russellbanything else on bare metal?21:24
harlowjadevananda: are the ntt people working with u, might be useful to have there advice, since they are likely using the code that exists and might know more about the migration path?21:24
devanandaharlowja: very little21:24
*** markmcclain has quit IRC21:24
russellbwe would have to go through a deprecation path for this21:24
*** mkollaro has joined #openstack-meeting21:24
harlowjadevananda: hmmm, interesting21:24
russellbjust like any other drastic change like this ... a deprecation cycle, migration path21:24
devanandasince they handed the project to us iat the grizzly sumit, they've been pretty quiet21:25
devanandaarata sends in patches and bug fixes often21:25
sdaguedevananda: it would be nice to try to draw them in on the new effort21:25
devanandaand the ISI folks added tilera/pdu support right after FF ended21:25
russellbyep, that landed for havana21:25
devanandasdague: indeed. mikyung was in the session when we talked about this21:25
devanandaand didn't voice any objection21:25
devanandawhich is about as much assent as i have gotten from them :)21:26
harlowjaya, wonder if they can provide more input, since my guess is ntt, isi are using it more than at least y! is21:26
harlowjaso there feedback would seem pretty valueable if u can draw said feedback out of them21:26
devanandai'll try to ping them directly // off list and see21:26
russellbok cool, one more quick topic, then we can go to open discussion21:27
russellb#topic bugs21:27
*** openstack changes topic to "bugs (Meeting topic: nova)"21:27
senhuangwe also have usage for it in some dev/ops. one comment I got from them is that it would be nice to have a common api to provision bare metal and vm..21:27
russellblet's not let all this fun future work let us forget about bugs :)21:27
russellb#link http://webnumbr.com/untouched-nova-bugs21:27
russellb34 untriaged bugs right now21:27
russellbnot *terrible*, but we should be watching, as we probably have bug reports coming in as people try out grizzly21:27
senhuangrussllb: could you response to my comment on but https://bugs.launchpad.net/nova/+bug/104924921:28
uvirtbotLaunchpad bug 1049249 in nova "Remove plugging of internal classes from configuration" [High,Confirmed]21:28
russellb*everyone* can help with triage, if you're not sure how, see this page:21:28
russellb#link http://webnumbr.com/untouched-nova-bugs21:28
russellbsenhuang: i guess it's valid as long as that option exists21:29
russellbsenhuang: the compromise/solution has been moving things to entrypoints with short names21:29
senhuangrussellb: okay. i probably need more guide on this bug..21:29
russellbso it'll still be pluggable, technically, but not so obviously directly exposed in the config file21:29
*** adjohn has quit IRC21:29
*** bdpayne has joined #openstack-meeting21:29
russellbany other bug comments or questions?21:30
*** adjohn has joined #openstack-meeting21:30
russellbif we all triage just a couple this week, we'll be in much better shape (that goes for most weeks, really ..)21:30
boris-42yes21:30
*** IlyaE has joined #openstack-meeting21:30
boris-42should I report bug for each race condition?21:30
boris-42before adding UC?21:30
harlowjamore races, eck :(21:31
boris-42less races=)21:31
morganfainbergrussellb: the URL link form webnumbr shows only one bug?  am I misunderstanding the function of that link?21:31
russellbmorganfainberg: it showed 34 for me?21:31
harlowjaboris-42: the glass is half-full, good attitude21:31
sdagueboris-42: you've got a blueprint for all the UC stuff though right?21:31
sdagueI'd just use that21:31
russellbagreed, the bp is fine ...21:31
russellbtechnically you can associate bugs to a blueprint21:31
russellbbut ... no need to create extra work unnecessarily21:32
sdagueyeh, but I think the bp is fine, the uc work is a well known quantity21:32
russellbif you *want* to create bugs, it's fine with me, but you don't have to21:32
* russellb nods21:32
morganfainbergrussellb: something off in my web-browser then.  *shrug*21:32
driptonmorganfainberg: it shows 38 for me, but only displays one of them due to windowing.  Says "1 of 38"21:32
morganfainbergdripton: i think it's an extension going dumb on my browser.21:32
harlowjaboris-42: has there been any thought on the races that are at a level above the DB?21:32
harlowjaread/write/modify types21:32
russellbyou can also look at https://bugs.launchpad.net/nova/+bugs?search=Search&field.status=New21:33
russellbnot quite the same, but close enough21:33
boris-42russellb what do you prefer adding bugs or not for races?) I just don't now is there any reason for spamming bug tracker?)21:33
russellbjust use the bp21:33
boris-42russellb ok21:34
russellb#topic open discussion21:34
*** openstack changes topic to "open discussion (Meeting topic: nova)"21:34
devanandaharlowja: afaik, no one's really looking at those races above db/api -- except for quotas21:34
harlowjadevananda: durn21:34
devanandaharlowja: if you have some in mind, please open bug reports and tag with 'db'21:34
boris-42harlowja I think that there is also a lot of races=)21:34
harlowjakk, i have a few, do orphaned resources count21:34
harlowjaboris-42: 100% agreed21:34
sdagueyeh, even better is tests21:34
russellbyay tests.21:35
boris-42<3 tests21:35
sdaguethen we can keep them from showing up again21:35
boris-42Btw I have some question about pci devices...21:35
boris-42There is already about 4 BP for that!21:36
boris-42One task but 4 BP =)21:36
russellbyes that area is a bit of a mess21:36
russellba good example of what happens when people don't talk enough21:37
boris-42probably we should chose one of that21:37
russellbyeah.21:37
boris-42There is also problems with USB21:37
*** eharney has quit IRC21:37
boris-42if we are using host dev pci passthrough in libvirt21:37
*** anniec has joined #openstack-meeting21:37
harlowjasdague agreed on tests, but if u just look at pieces of the nova code, u can spot these things, but maybe its just my mindset21:37
boris-42then we are able to passthrough only USB controllers21:37
senhuangI have a question on the nova's api extension21:37
*** martine_ has quit IRC21:38
harlowjaoh thats a good one, senhuang what happened to the nova extension refactoring effort thingy21:38
sdagueharlowja: then bring tests to the table that demonstrate it21:38
boris-42We should make a little bit different operation for USBs21:38
harlowjasdague: sounds good :)21:38
harlowjachallenge accepted :-p21:38
*** mikal has quit IRC21:38
senhuangharlowja: i am still researching on how to do api extension for nova21:38
russellbboris-42: i think you're on the right track by going back and documenting your design21:39
*** mikal has joined #openstack-meeting21:39
russellbboris-42: then hopefully everyone interested can discuss if it meets their requirements21:39
russellbboris-42: and the people most involved with the libvirt driver can provide feedback as well21:39
russellbboris-42: then we can move forward21:39
harlowjasenhuang: just in general how to do them, or how to make the api extension mechanism easier?21:39
cyeohre: API extension framework I'd appreciate any feedback on https://review.openstack.org/#/c/27276/ - would like to get that moving soon as we can't really do much v3 API work until at least some basic support is in.21:39
harlowjafor the later i thought there was https://etherpad.openstack.org/NovaAPIExtensionFramework21:39
senhuangharlowja: on general how to do it21:39
harlowjaya, with chris21:39
*** adjohn has quit IRC21:40
morganfainbergcyeoh: i'll look it over today/tomorrow and give you feedback21:40
harlowjasenhuang: i can try to help, its not so clear21:40
boris-42russellb Yes I am working on it, so there should be some changes in my approach to provide PCI passthrough and USB passthrough in one common approach=)21:40
senhuangharlowja: that is pretty cool! thanks21:40
cyeohmorganfainberg: thanks!21:40
harlowjasenhuang: ya cyeoh just pointed that out21:40
russellbboris-42: ok21:40
*** anniec_ has joined #openstack-meeting21:40
*** johnthetubaguy has joined #openstack-meeting21:40
senhuangcyeoh: that is awesome. i will look at it21:41
*** anniec has quit IRC21:41
*** anniec_ is now known as anniec21:41
*** mkollaro has quit IRC21:42
russellbany other topics for the day?21:42
russellbplease ping me anytime over the next week if you need assistance getting blueprints in shape21:42
senhuangany one have time to take at look at this blue print?21:42
senhuanghttps://blueprints.launchpad.net/nova/+spec/unified-rpm21:43
boris-42btw is there some info about no downtime migrations?21:43
russellbboris-42: i wasn't in that session, so not sure what was discussed21:43
devanandaa lot was discussed about versioned db objects21:43
harlowjarussellb: i'd like to hear how conductor can become something like orchestration, or understand at least from a design perspective how, just so i can accomodate it in my wiki and blueprints and such21:44
devanandaIMO, that led to being able to do no-downtime-db-upgrades21:44
russellbsenhuang: yeah, i saw that one ... it seems like there's not clear consensus on how to approach that problem yet.21:44
devanandaor no downtime service upgrades for all services, including db and conductor21:44
devanandaso, are there any BP up for versioned db objects?21:44
senhuangrussellb: maybe we could first provide a well-defined api extension and achieve consensus on the api?21:45
russellbharlowja: I started talking about this on a thread on the ML today.  I feel like we've got some work combining code paths for migrate/live-migrate/resize/evacuate, and part of that will be moving it to conductor.  that's the first step here.21:45
harlowjahow does moving it to conductor work?21:45
russellbsenhuang: has there been a ML thread on this?21:45
dansmithdevananda: well, we're focused on internal objects first,21:45
senhuangrussellb: not yet21:45
dansmithdevananda: then versioning those and isolating schema changes along with that21:45
*** adjohn has joined #openstack-meeting21:45
harlowjarussellb: i hear lots of moving to conductor but never have seen how it would get there or even if it makes sense there, shouldn't that be part of the discussion?21:45
dansmithdevananda: I think we don't expect to really hit the big versioning parts until post-H, realistically21:45
russellbsenhuang: ok, that's where we need to discuss it basically.  I think having a proposal for what the API would look like would aid that discussion.21:45
senhuangrussellb: i am in discussions with garyk on the api21:45
devanandadansmith: yes. i mean, is that plan written up anywhere?21:46
russellbsenhuang: but it's not clear that there is even agreement that it should be a new separate thing, so we need to work through that.21:46
dansmithdevananda: the internal objects one?21:46
dansmithdevananda: I just filed a blueprint, and we talked about it on IRC a bit, but I need to fill out the blueprint with more details  yet21:46
devanandadansmith: i could see maybe 3 BPs covering internal versioned objects, then rpc forwards/backwards compat, then db stuff21:46
russellbharlowja: it has been discussed a whole bunch, and we had a session dedicated to cleaning up these code paths where we discussed it further.21:46
devanandadansmith: ack21:46
harlowjarussellb: where's the docs on how that will be done?21:47
dansmithdevananda: yeah, I've got three now, actually, almost exactly like that.. still need to make the deps between then and fill out the details21:47
sdaguesenhuang: things like that really need to get to general concensus on the mailing list first21:47
devanandadansmith: great :)21:47
devanandaboris-42: ^21:47
senhuangrussellb: that is true. i think i still need to provide more details21:47
russellbsenhuang: ok, sounds good21:47
senhuangsdague: yep. that is probably a good idea21:47
harlowjarussellb: can u possible re-explain to me how said stuff fits in the conductor21:47
*** lbragstad has quit IRC21:48
devanandarussellb: on the conductor-does-evacuate stuff, i'd like Heat considered in that situation too21:48
harlowjadevananda: me too, or at least a common library for this stuff21:48
harlowjawhich nova uses21:48
devanandarussellb: as in, if there's an auto scaling group, how that'll be impacted by conductor doing things automagically21:48
sdaguedevananda: you realize "evacuate" isn't what it sounds like, right? :)21:48
harlowjawe shouldn't keep on reimplementing custom workflows21:48
russellbdevananda: sure.  note that we're *not* talking about doing anything automatically21:48
devanandarussellb: ahh. didn't realize that :)21:48
russellbnothing automagic, all triggered from the outside like it si now21:49
dansmithdevananda: I don't want conductor doing automagic stuff, btw21:49
devanandasdague: i /think/ i know what it does21:49
*** ewindisch has quit IRC21:49
russellbthis is just about turning a bunch of separate code paths doing much of the same thing into common code where it makes sense21:49
dansmithdevananda: I want heat doing all the orchestration of failover type stuff from the outside entirely21:49
*** Mandell has quit IRC21:49
russellband also, in the cases of migration and such, we have compute nodes telling each other what to do21:49
devanandadansmith: ++21:49
russellbwe don't want any compute nodes telling any other compute nodes what to do at all21:49
sdaguedevananda: the current "evacuate" action restarts vms that were on a machine that it toast21:49
russellbso the solution is to move most of the processing up a layer21:49
devanandasdague: cool. that's what i thought21:49
harlowjarussellb: so thats great, but thats not explaining how conductor will do it, thats just explaining the general principle right, how does conductor change to be said thing, especially when i am planning something that can do said tasks also, likely something that will use this heat library21:50
russellbharlowja: dude, chill21:50
russellb:)21:50
harlowjatrying, just i don't get it :-p21:50
*** Sri_ has joined #openstack-meeting21:50
russellbharlowja: i think more formal state tracking is good, but we need a place for it to plug in cleanly, and we don't have that yet21:50
senhuangi agree on the general principles :-)21:50
russellbso this code cleanup is step 121:50
harlowjaconfused, isn't making the foundation correct step #1?21:51
russellbhave to look at the steps it will take to get to where you want to go, and i really believe these are the first steps21:51
harlowjathen moving said code cleanup onto said foundation21:51
russellbwe have to do it in logical steps, not an enormous patch set that rewrites everything21:51
russellbi understand what you want, and i think we can get there21:52
harlowjaisn't that possible with a good foundation?21:52
sdagueharlowja: it seemed pretty clear in the room that it was a pretty good incremental cleanup21:52
russellb... in stages21:52
harlowjai still think it can be done in stages, with a good common library first though, not secondary :-p21:52
sdagueI really think it's unrelated to orchestration21:52
harlowjasdague: how so?21:52
sdagueharlowja: hey, nothing prevents you from proposing alternative incremental code21:52
harlowjasdague: and thats where its a waste of time to do21:53
russellbtrue :)21:53
russellbso here's the thing ...21:53
russellbwe have code21:53
russellba whole bunch of it21:53
russellbwe want to do some cleanup, combining, and slight restructuring of that code as an incremental step21:53
sdaguebut I think rehashing consolodating the migration paths isn't very useful, because it's a huge win21:53
sdaguefrom a verification stand point especially, as right now the whole live migrate path isn't testing at all in gate21:54
sdaguewhich is the suck21:54
*** afazekas has joined #openstack-meeting21:54
sdaguebut at the end of the day, code talks. bring something more clean, and more useful to the table, and it will be evaluated.21:55
dansmitheveryone interested in doing the work for the unified migrations path seems to be in agreement,21:55
dansmithso I don't think we really have a problem here21:55
harlowjasdague: i have code for the foundation of this, haha21:55
russellbwould be good to see it on the list21:56
russellbi don't think i have seen it yet21:56
dansmithharlowja: propose it and we'll handle it in gerrit21:56
harlowjait was shown in the summit :)21:56
sdaguedude, I have piles of code :) that doesn't mean it's more useful for openstack in all situations.21:56
russellbyeah, but lots of people weren't at the summit21:56
russellbi also had a session conflict (rpc stuff, and i'm one of the few maintainers of that code)21:56
harlowjaok, will send that out again21:57
russellbk21:57
dansmithI have to run21:57
russellbanything else?  just a few minutes left in our time.21:57
russellbk, later dansmith21:57
harlowjajust i'd like to really understand clearly how the future of conductor fits into the plans, even incrementally21:57
russellbi honestly am not sure how to better explain it21:57
harlowjawrite it down?21:58
harlowjadraw pictures?21:58
russellbwe can continue out-of-meeting21:58
russellbthanks everyone!21:58
russellb#endmeeting21:58
*** openstack changes topic to "OpenStack meetings || Development in #openstack-dev || Help in #openstack"21:58
openstackMeeting ended Thu Apr 25 21:58:41 2013 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)21:58
openstackMinutes:        http://eavesdrop.openstack.org/meetings/nova/2013/nova.2013-04-25-21.01.html21:58
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/nova/2013/nova.2013-04-25-21.01.txt21:58
openstackLog:            http://eavesdrop.openstack.org/meetings/nova/2013/nova.2013-04-25-21.01.log.html21:58
sdaguethanks russellb21:58
senhuangthanks, guys21:59
senhuangbye21:59
harlowjarussellb: so i'd like to see something like https://wiki.openstack.org/wiki/File:New-arch.png but for say how the conductor would fit in21:59
boris-42thanks, bye21:59
harlowjahow it would work for that run_instance path21:59
harlowjathat would be useful to me, and i think many others21:59
*** lglenden has quit IRC22:00
harlowjaand then maybe some documentation on what that makes better, scale, stabilitiy...?22:00
*** danwent has quit IRC22:00
russellbharlowja: let's move to #openstack-nova22:01
harlowjakk22:01
*** Vek has left #openstack-meeting22:01
*** tpatil has quit IRC22:01
*** litong01 has quit IRC22:02
*** johnthetubaguy has quit IRC22:02
*** senhuang has quit IRC22:03
*** eglynn has quit IRC22:04
*** cburgess_ has quit IRC22:04
*** anniec has quit IRC22:05
*** cburgess has joined #openstack-meeting22:05
*** ayoung has joined #openstack-meeting22:05
*** anniec has joined #openstack-meeting22:08
*** markwash has quit IRC22:09
*** bdpayne has quit IRC22:11
*** dontalton has quit IRC22:15
*** novas0x2a|laptop has quit IRC22:15
*** hartsocks has quit IRC22:15
*** anteaya has quit IRC22:15
*** markpeek has quit IRC22:15
*** _cerberus_ has quit IRC22:15
*** branen has quit IRC22:15
*** akshayms has quit IRC22:15
*** dontalton has joined #openstack-meeting22:15
*** novas0x2a|laptop has joined #openstack-meeting22:15
*** hartsocks has joined #openstack-meeting22:15
*** anteaya has joined #openstack-meeting22:15
*** _cerberus_ has joined #openstack-meeting22:15
*** branen has joined #openstack-meeting22:15
*** akshayms has joined #openstack-meeting22:15
*** dhellmann is now known as dhellmann-away22:15
*** asalkeld has joined #openstack-meeting22:15
*** henrynash has quit IRC22:16
*** boris-42 has quit IRC22:19
*** Bruce has quit IRC22:25
*** hartsocks has quit IRC22:27
*** jaypipes has quit IRC22:31
*** bdpayne has joined #openstack-meeting22:34
*** danwent has joined #openstack-meeting22:35
*** boris-42 has joined #openstack-meeting22:37
*** hartsocks has joined #openstack-meeting22:38
*** IlyaE has quit IRC22:40
*** boris-42 has quit IRC22:49
*** stevemar has quit IRC22:49
*** otherwiseguy has quit IRC22:53
*** flwang has quit IRC22:56
*** hartsocks has quit IRC23:01
*** danwent has quit IRC23:03
*** henrynash has joined #openstack-meeting23:04
*** flaper87 has quit IRC23:04
*** hartsocks has joined #openstack-meeting23:04
*** beagles has quit IRC23:06
*** gongysh has joined #openstack-meeting23:06
*** koolhead17 has joined #openstack-meeting23:08
*** hartsocks has quit IRC23:20
*** hartsocks has joined #openstack-meeting23:20
*** hartsocks has quit IRC23:26
*** sacharya has joined #openstack-meeting23:29
*** dprince has joined #openstack-meeting23:30
*** afazekas has quit IRC23:31
*** dprince has quit IRC23:33
*** hartsocks has joined #openstack-meeting23:36
*** hartsocks has quit IRC23:37
*** garyTh has quit IRC23:38
*** anniec has quit IRC23:41
*** otherwiseguy has joined #openstack-meeting23:41
*** hartsocks has joined #openstack-meeting23:45
*** timello has joined #openstack-meeting23:47
*** fnaval has quit IRC23:50
*** flwang has joined #openstack-meeting23:54
*** dontalton has quit IRC23:55
*** dontalton has joined #openstack-meeting23:57
*** lindj_ has quit IRC23:58
*** troytoma` is now known as troytoman-away23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!