October 25, 2025

Stackers Network Digest — October 25, 2025

31 threads · 72 messages · openstack-discuss

The Big Picture

With the OpenInfra Summit Europe wrapped in Paris-Saclay, the community turned full attention to the virtual PTG (October 27–31) — and the week's traffic was largely schedule announcements as teams locked agendas. But the standout story wasn't logistics: it was a forward-looking call to arms on post-quantum cryptography, framed by Red Hat's OpenStack Security Product Manager as an existential, multi-year cross-project effort. Underneath, governance housekeeping continued, with two project teams marked inactive and a Telemetry PTL handoff. R-23 to 2026.1 Gazpacho.

The Big Story — Post-Quantum Cryptography

Jean-Philippe Jung opened a cross-project PQC discussion that should be on every team's radar. His framing: powerful enough quantum computers to break classical crypto are expected around 2029–2030, meaning OpenStack needs ML-KEM "urgently" and ML-DSA "as soon as possible" — with sufficient upstream coverage by early 2028 so operators have time to roll it out. A quick AI-assisted scan turned up 17 different cryptographic modules in widely-used OpenStack repos, 7 of which haven't received a commit in over two years. He's asking the TC to drive consolidation (his target: five or fewer crypto libraries) and to treat this as a "cryptographic agility" exercise, since the first NIST PQC algorithms may yet be superseded. See the Post-quantum OpenStack wiki. Expect this thread to anchor security discussions through Gazpacho and beyond.

PTG Logistics — What's Scheduled

The week was dense with PTG agenda posts. Highlights:

  • Ironic — four full days (Mon–Thu). Notable items: Flamingo retro, "should we move back to a PTL model?", post-eventlet world (deferred tasks, async/await), "let's stop maintaining sushy as a separate project?", cross-projects with Neutron (VXLAN attachments), Nova (graphical console follow-up), and Cinder/Nova (booting from NVMe-over-TCP). Etherpad.
  • Neutron — Tue/Wed only, with cross-projects with Ironic and Nova on Wednesday. Etherpad.
  • Cinder — Tue–Fri starting 14:00 UTC; cross-team sessions planned with Eventlet, Nova, Glance, and Ironic. Etherpad.
  • Manila — cross-projects with Horizon (Manila UI testing, Tue 15:00 UTC) and Nova (all things VirtioFS, Wed 17:00 UTC). Etherpad.
  • Glance — proposing cross-project sessions on image encryption / disk format enforcement (Nova + Cinder, 1h) and making multiattach workflow compatible with multiple Glance workers (Cinder).
  • Horizon integration-tests session Tuesday 28 at 16:00 UTC, using Manila UI as the first plugin example; the OpenInfra User Group Kenya story — hosted by former Outreachy intern Agnes Nduta — runs the same day at 16:30 UTC.
  • Eventlet removal — 1h discussion Tuesday 28 at 15:00 UTC. Etherpad.
  • Cross-deployment session — Michał Nasiadka (Kolla) and Dmitriy Rabotyagov (OSA) invited OpenStack-Helm and Puppet to a joint session on shared deployment problems. Etherpad.

Contributor/maintainer experience also got a dedicated push from Jeremy Stanley: a community office hour at 14:00 UTC Thursday in the maint-contrib-xp track, plus reminders to fill in the Flamingo maintainer and contributor surveys.

Governance & Process

TC weekly summary (R-23). The ironic-inspector repositories have been removed, with the functionality long-since merged into Ironic. Michał Nasiadka is the new TC liaison for Requirements and Release Management. The TC marked Vitrage and Venus as inactive — deliverables will be dropped from 2026.1 Gazpacho, and the project teams retired in 2026.2 if activity doesn't resume. The TC is also kicking off an APAC-friendly monthly meeting cadence.

Telemetry PTL handoff. Matthias Runge is stepping down and proposed Juan Larriba — the previous PTL — to take over.

Contributing to someone else's Gerrit change. A useful primer thread surfaced for newer contributors asking how to push a new patch set onto an existing Kolla-Ansible change rather than open a separate one.

Development & Technical Decisions

oslo.messaging container fix for QManager. Dmitriy Rabotyagov pinged for a +W on the stable/2024.2 backport; 2024.1 already merged, leaving 2024.2 with a behavioral regression until the backport lands.

Nova live-resize and Octavia LB resize both came up again as operator-friendly features asked about for 2026.1 — both remain ongoing design debates.

Nova persistent PXE boot for VMs — Sean Mooney opened an 11-message thread (Nova/Neutron) worth following.

Operator Notes

RabbitMQ exchange-durability mismatch in "fresh" Kolla-Ansible 2025.1 deploys. Jonathan Proulx ran into inequivalent arg 'durable' for exchange 'nova' (received true, current false) after reinstalling nodes — a sign that lingering rabbit state from earlier attempts may not be as fresh as expected.

Nova database connection points to nova_cell in Kolla-Ansible. İzzettin Erdem flagged that for non-multi-cell deployments, the [database] connection still points at the cell DB rather than the main nova DB. Launchpad bug 2088264 has been open without updates for nearly a year.

Nova scheduler CPU-pinning performance regression. Same operator at scale (1200+ hypervisors, Kolla-Ansible Ussuri) reported bulk VM deploys taking 15 minutes vs ~1–2 minutes on Yoga, with the scheduler burning time computing NUMA topology pinning, plus some VMs ending up with 2–3 IPs from Neutron. Worth flagging to the Nova scheduler team.

NUMA memory distribution via flavor metadata — Javier Charne shared a working flavor recipe (hw:mem_page_size=2MB, hw:numa_nodes=2) for spreading memory across two NUMA nodes with hugepages.

Keystone + Keycloak OIDC returning 403. Tyler Wilson is working through the Kolla-Ansible IdP setup guide and seeing handle_unscoped_token / apply_mapping_filter failures despite a green Keycloak event log and correct attribute mapping.

Ceph Jaeger tracing limited to OSD only — operator asked whether ceph/ceph PR 59365 (adding MON/MGR/RGW tracers) is the path forward.

Community & Events

The next Ops Radio Hour ran October 31 during the PTG, focused on refactoring ops-facing activities across the Ops meetup, Large Scale SIG, Public Cloud SIG, and Scientific SIG. The group is trialing Matrix (#openstack-ops:opendev.org) as a more synchronous channel. Public Cloud SIG also held its usual bi-weekly meeting on October 22. And in Outreachy news, applicant Abhijith P C introduced himself and is picking up Ironic docs work (bug 2072349, page-heading rewrites) as a first contribution.