dustymabe changed the topic of #fedora-coreos to: Fedora CoreOS :: Find out more at https://getfedora.org/coreos/ :: Logs at https://libera.irclog.whitequark.org/fedora-coreos
mheon has quit [Ping timeout: 252 seconds]
daMaestro has joined #fedora-coreos
daMaestro has quit [Quit: Leaving]
Turnikov has quit [Ping timeout: 246 seconds]
Turnikov has joined #fedora-coreos
arnulfo_7 has joined #fedora-coreos
daMaestro has joined #fedora-coreos
arnulfo_7 has quit [Quit: Leaving]
Turnikov has quit [Ping timeout: 260 seconds]
zp has quit [Read error: Connection reset by peer]
zp has joined #fedora-coreos
daMaestro has quit [Quit: Leaving]
bgilbert has quit [Ping timeout: 260 seconds]
zp has quit [Read error: Connection reset by peer]
zp has joined #fedora-coreos
baude has quit [Quit: Leaving]
misuto has quit [Remote host closed the connection]
misuto has joined #fedora-coreos
wmealing has joined #fedora-coreos
* wmealing waves
<wmealing> I realise this is fedora-coreos not necessarily rhel's core os.. but i figured there might be an overlap
<wmealing> i'm trying to chase down a release schedule for rhels core os, which i imagine is strongly based fedora-coreos release schedule
<wmealing> is there such a beast ?
<wmealing> ok, i'll try and chase it down another way. Sorry for the interruption.
<wmealing> have a good one.
wmealing has left #fedora-coreos [ERC 5.4 (IRC client for GNU Emacs 28.2)]
saschagrunert has joined #fedora-coreos
troglodito has quit [Ping timeout: 252 seconds]
troglodito has joined #fedora-coreos
Betal has quit [Quit: WeeChat 3.8]
saschagrunert has quit [Remote host closed the connection]
apiaseck has joined #fedora-coreos
jpn has joined #fedora-coreos
wkawka has joined #fedora-coreos
hank has quit [Quit: I'M OUT]
hank has joined #fedora-coreos
fifofonix has joined #fedora-coreos
<travier[m]> wmealing: RHEL CoreOS is release with OpenShift
<travier[m]> so follow that schedule. Not the Fedora schedule
<travier[m]> s/follow/follows/
flokli has quit [Quit: WeeChat 3.7.1]
vgoyal has joined #fedora-coreos
flokli has joined #fedora-coreos
jpn has quit [Ping timeout: 248 seconds]
Turnikov has joined #fedora-coreos
jpn has joined #fedora-coreos
jpn has quit [Ping timeout: 268 seconds]
mheon has joined #fedora-coreos
nalind has joined #fedora-coreos
<jlebon> dustymabe: when you have a sec, can you stamp the PRs in https://github.com/coreos/coreos-assembler/pulls?q=is%3Apr+is%3Aopen+yumrepos-branch ?
<dustymabe> jlebon: done
<jlebon> thanks!
<dustymabe> darknao: FYI another report of possible ceph issues: https://github.com/coreos/fedora-coreos-tracker/issues/1393
<dustymabe> can you add your info there (assuming it looks similar)?
<darknao> dustymabe: ah! that's exactly it! thanks!
<dustymabe> darknao: is your setup easy enough to reproduce? i.e. if we wanted to test a theory (usually stuff like this is new kernel related) could we give you instructions and you run the test?
jpn has joined #fedora-coreos
<darknao> well, I was about to spin up a new test vm with an OSD on it so I could try the testing/next release and see if there is any improvment
<dustymabe> sweet - yeah that will be good data
<dustymabe> the other test I want you to run is overriding the kernel in `37.20230110.3.1` to be the old kernel from `37.20230110.3.1`
<darknao> ah that should be even easier
<dustymabe> darknao: it should be something along the lines of `sudo systemctl stop zincati && sudo rpm-ostree override replace https://bodhi.fedoraproject.org/updates/FEDORA-2022-90162a1d88 --reboot`
plarsen has joined #fedora-coreos
<dustymabe> darknao: either way - if you could add your info to the ticket as soon as you get a chance.. it will help anyone else looking at it
baude has joined #fedora-coreos
<darknao> dustymabe: at first glance, 37.20230110.3.1 with kernel-6.0.15-300.fc37 seems to work just fine
<darknao> I'll keep it running a few minutes and check later again, then update the ticket with the results
<darknao> thanks again dustymabe++
<zodbot> darknao: Karma for dustymabe changed to 2 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any
Turnikov has quit [Ping timeout: 248 seconds]
Turnikov has joined #fedora-coreos
<dustymabe> darknao: thanks for the info
fifofonix has quit [Quit: Textual IRC Client: www.textualapp.com]
apiaseck has quit [Read error: Connection reset by peer]
Betal has joined #fedora-coreos
fifofonix has joined #fedora-coreos
jpn has quit [Ping timeout: 255 seconds]
jpn has joined #fedora-coreos
<jlebon> ravanelli: found another issue in the testiso PR. testing a patch then will push it up. :)
<jlebon> dustymabe: thoughts on folding your commits in https://github.com/coreos/coreos-assembler/pull/3298/commits into the main "kola: Refactor testiso tests" commit? planning to fold mine as well since they're mostly minor tweaks to the main change
jpn has quit [Ping timeout: 246 seconds]
Turnikov has quit [Ping timeout: 248 seconds]
shoragan has quit [Read error: Connection reset by peer]
jpn has joined #fedora-coreos
shoragan has joined #fedora-coreos
jpn has quit [Ping timeout: 248 seconds]
<dustymabe> jlebon: yeah I don't care
<dustymabe> go for it
<jlebon> ok done :)
jlebon has quit [Remote host closed the connection]
jlebon has joined #fedora-coreos
jpn has joined #fedora-coreos
jpn_ has joined #fedora-coreos
jpn has quit [Ping timeout: 248 seconds]
<dustymabe> travier[m]: jlebon: FYI this will affect silverblue and IoT: https://github.com/coreos/fedora-coreos-tracker/issues/1394
jpn_ has quit [Ping timeout: 252 seconds]
<ravanelli> jlebon: Thanks for checking/finding it ;)
jpn has joined #fedora-coreos
bgilbert has joined #fedora-coreos
jpn has quit [Ping timeout: 248 seconds]
<baude> hello bgilbert i was hoping you could answer a few questions for me wrt ignition if you have a minuteS?
<bgilbert> baude: sure
<baude> just to level set, I am interested in seeing ignition "work" with hyperv
<baude> i assume it isat least two things: teach ignition to recognize it is in hyperv AND teach it what to do when it is
<bgilbert> well, one thing. Ignition doesn't try to autodetect platforms because that has security implications. it depends on being booted with an ignition.platform.id=<identifier> kernel argument
<bgilbert> FCOS and RHCOS build separate images for each platform with the correct kernel argument set
<baude> ok ok
<bgilbert> so yes, Ignition itself just needs to learn how to fetch userdata
<baude> ok
<baude> do you have ideas on how you want that done?
<bgilbert> the more annoying part is all of the plumbing needed to make FCOS/RHCOS images for the new format
<baude> or is that open for debate
<bgilbert> because it touches many repos
<bgilbert> baude: I don't know HyperV. is there a userdata mechanism?
<baude> understood
<baude> im actively trying to determine that ... ofc this is not my sweet spot, so i may be not looking for exactly the right terms
<bgilbert> we've found that cloud platforms almost always support userdata and local hypervisors almost always... don't
<bgilbert> so we have to hack something up
<baude> hahahah
<bgilbert> VMware and VirtualBox have guest variables that we can make work, qemu has fw_cfg which isn't meant for this either
<bgilbert> basically we need a way for the host to set something that can be read from the guest
<baude> yup
<baude> do any of these use cdrom media for this?
<bgilbert> we have reluctantly supported it in some cases, but it's a last resort
<bgilbert> those cases being: where it's the API specified by the platform, like Azure and OpenStack
<bgilbert> the reason is
<bgilbert> if the CD doesn't show up, is that because there's no userdata (so we should continue) or because we're still detecting hardware (so we shouldn't)?
<bgilbert> timeouts are subject to false negatives
<baude> understood, i have experience with cloud-init upstream
<bgilbert> hah. yeah
<baude> im googling on the topic and i also asked a windows engineering group i happen to follow
<bgilbert> looks like there's something called a "hyper-v integration service" that does host-guest communication
<bgilbert> haven't found info yet on whether a custom integration would require host-side code
<bgilbert> or is possible
jpn has joined #fedora-coreos
<baude> requires userland apps, but ofc
<bgilbert> is not really what we want, since it requires a host-side process to open a socket and send data
<bgilbert> yeah
<bgilbert> may mean that they don't also provide the thing we want
<baude> yeah we also dont want to have to have anything special in the vm ... that is asking for it
<baude> i think that is the one that is limited to 2k?
<baude> that also requires special sauce in the guest apparently
<bgilbert> there's always special sauce in the guest
<bgilbert> looking
<bgilbert> hv_kvp_daemon is shipped in the kernel source for some reason?
<bgilbert> looks like it starts up, opens a socket, and receives get/set commands
<bgilbert> in principle Ignition could do the same, wait for the set command for the Ignition variable, and then shut down the socket
<bgilbert> which brings us back to timeouts, unfortunately
<bgilbert> also assumes that the host-side code always re-sends variables when the socket is opened
<bgilbert> if it doesn't, we're breaking any attempt to run hv_kvp_daemon in the real root
<bgilbert> this is the first time that we've had a K-V protocol where we're the passive side
jpn has quit [Ping timeout: 248 seconds]
<bgilbert> baude: did you get the 2k limit from https://www.altaro.com/hyper-v/key-value-pair-data-exchange-3-linux/?
<baude> i saw later it is much larger
<baude> 16000 characters or more, iirc 1mb
jpn has joined #fedora-coreos
<bgilbert> HV_KVP_EXCHANGE_MAX_VALUE_SIZE in <linux/hyperv.h> is 2048, but it's not clear to me whether that's an arbitrary limit or whether the protocol actually supports larger
<bgilbert> 2048 would be the lowest limit in any platform we support, but it's large enough to be workable
<bgilbert> e.g. the AWS limit is 16k
<baude> yeah, im struggling with how the key/value gets *set* in the windows host
<bgilbert> because Ignition supports config merge/replace directives that give URLs to other configs
<dustymabe> jlebon: let's see if this covers our pruner conversation from earlier this week: https://github.com/coreos/fedora-coreos-releng-automation/pull/167
<baude> i really dont like the idea of messing with a windows registry ... bgilbert are you like minded?
<bgilbert> it's not ideal but I'm not surprised
<bgilbert> on VMware, outside of an OVF context, you have to manually hack up the .vmx metadata file
<baude> i just can see it now ... podman machine messed up my registry and now windows is completely useless
<bgilbert> on QEMU you have to go around libvirt or manually inject qemu args into the domain XML
<bgilbert> heh
<baude> if only i knew what wmi is :)
<bgilbert> looks like a management API
<bgilbert> those are PowerShell fragments
<baude> yuyp
<baude> and they fiddle with the registry evidently
<bgilbert> the fact that stuff goes in the registry isn't inherently scary, I think. it's a database
<bgilbert> I'd expect that these would go into a key for the particular VM
<bgilbert> wait, does it use the registry? that might just be on Windows guests
<baude> the powershell fragments done seem to work
<bgilbert> do or don't?
<baude> dont
<bgilbert> oh, how so?
<baude> i dunno .... i am a windows spazz
<bgilbert> my current sense is that this is the way. we'd need to
<bgilbert> 1) verify that we can set a property and have hv_kvp_daemon pick it up
<bgilbert> 2) stop hv_kvp_daemon, delete its data files, restart it, and verify that the property is restored
<bgilbert> (i.e. that the props are re-sent on every new host-guest connection)
<baude> lol, i tried to start the kvp daemon in fedora and it just hung
<baude> good stuff
<bgilbert> I suppose this is used on Linux by approximately no one :-(
<bgilbert> 3) figure out the timeout issue. it's unavoidable here but we can probably set a reasonably short one, if the property doesn't come in with the initial burst
<bgilbert> 4) write Ignition code
<bgilbert> we might not get past 1 of course
<baude> im working on 1
<baude> so i can see pool 3 and it def has content
<bgilbert> from the guest?
<baude> ya
<bgilbert> nice
<baude> using cat though, it is 100% unstructured
<bgilbert> binary blob
<baude> bgilbert, for shits and giggles ...
<baude> is it possible to run ignition manually?
<baude> i.e. manually point it at a file ?
<bgilbert> it's dangerous, so we discourage it, but yes
<bgilbert> what do you want to test?
<baude> i'd be interested in see if i can extract a basic ignition something from this and run it
<baude> that kind of gives us a warm and fuzzy sort
<baude> of
<baude> though i could also see myself shelfing this and taking a nap instead ... and hitting it next week :)
<bgilbert> "Ignition" is actually a bunch of separate invocations that run in series
<baude> ok
<bgilbert> I can give you instructions, but tbh if you can get a valid JSON blob out of the K-V store, that's plenty
<baude> like it parses through jq?
<bgilbert> yeah, that's good enough
wkawka has quit [Quit: Client closed]
<bgilbert> filed https://github.com/coreos/ignition/issues/1538 to capture this discussion
jpn has quit [Quit: Lost terminal]
<bgilbert> we don't currently have plans to prioritize this work from the CoreOS side (that'd have to be an internal discussion) but PRs would be very welcome
<bgilbert> baude: thanks for pursuing this! feel free to ping with any questions / followup discussion
<dustymabe> bgilbert: it appears to me that the traditional `AZURE_AUTH_LOCATION` file based method of authing with the azure go sdk (as described in https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authorization#use-file-based-authentication) isn't goint to be an option for us any longer. I don't see any completely file based options in
<bgilbert> dustymabe: the current auth method is super-clunky, I don't mind if we replace it
<bgilbert> there are already platforms where we define our own JSON format for credentials
<dustymabe> yeah. I like the platforms where we can use the same auth mechanism for both kola/ore AND the cloud CLI native tool
<bgilbert> true
<dustymabe> ok i'll try to figure out something
daMaestro has joined #fedora-coreos
baude has quit [Quit: Leaving]
gursewak_ has joined #fedora-coreos
jpn has joined #fedora-coreos
gursewak has quit [Ping timeout: 246 seconds]
jpn has quit [Read error: Connection reset by peer]
nalind has quit [Quit: bye for now]
jpn has joined #fedora-coreos
jpn has quit [Read error: Connection reset by peer]
gursewak_ has quit [Ping timeout: 252 seconds]
gursewak has joined #fedora-coreos
jpn has joined #fedora-coreos
jpn has quit [Ping timeout: 248 seconds]
jpn has joined #fedora-coreos
jpn has quit [Read error: Connection reset by peer]
jpn has joined #fedora-coreos
daMaestro has quit [Quit: Leaving]
jlebon has quit [Quit: leaving]
vgoyal has quit [Remote host closed the connection]
vgoyal has joined #fedora-coreos
daMaestro has joined #fedora-coreos