The Big Picture

The week was dominated by CI instability and the last days of election nominations. Gazpacho sits at R-6 with a dense run of deadlines, and the gates kept buckling under upstream Python churn: setuptools' pkg_resources removal forced the community to resurrect "x-static" repositories, and a fresh testtools regression took out py310 jobs. Underneath the firefighting, the TC made a notable structural decision — resetting the Oslo and Requirements leadership models so they can elect PTLs — a candid acknowledgment that the libraries nearly every project depends on are dangerously thin on maintainers.

Development & Technical Decisions

CI kept breaking, and the team kept holding rechecks. Takashi Kajinami flagged consistent POST_FAILURE in openstack-tox-py310 (and other py310 jobs), traced to testtools and fixed in testtools 2.8.4 — but the CI image needs rebuilding to pull the fix, so the standing advice was to avoid mass rechecks or merges until CI status is verified. This came on top of the ongoing setuptools pkg_resources fallout, which (per the TC's R-6 summary) required resurrecting x-static repositories so the Horizon team could work around upstream Python changes. Stephen Finucane's proactive work was credited with keeping the situation from being far worse. Separately, melanie witt reported the nova-live-migration-ceph job failing 100% on master since Feb 12, failing in the post stage on missing virtlockd services.

An iproute2 change that bites ovn-bgp-agent in production. Maximilian Stinsky-Damke surfaced a sharp operational gotcha: newer iproute2 packages moved the default rt_tables file from /etc/iproute2/ to /usr as part of a "stateless config" shift. On RHEL-based systems (Rocky Linux confirmed; Debian suspected), upgrading iproute2 saves any modified /etc/iproute2/rt_tables as .rpmsave and doesn't recreate the original — and ovn-bgp-agent hard-requires that file, failing with FileNotFoundError. His proposed fix (bug 2141421, review 976242) adds a privileged helper that recreates the directory and copies the default file if missing. Operators running ovn-bgp-agent should watch for this after any iproute2 upgrade.

A multi-cell Nova test environment stumps an operator. Tyler Wilson hit CantStartEngineError: No sql_connection parameter is established when live-migrating in a two-cell setup, with no visible activity in the cell conductors — a classic multi-cell database-connection-string puzzle that drew help on the list.

Security

OSSA-2026-002 (CVE-2026-24708) — Nova, errata 1. Jeremy Stanley issued an errata correcting the CVE identifier for the previously announced Nova resize vulnerability. Dan Smith (Red Hat) reported that by writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user can convince Nova's Flat image backend to call qemu-img without a format restriction, performing an unsafe resize that could destroy data on the host. Only compute nodes using the Flat backend (typically use_cow_images=False) are affected (Nova <30.2.2, >=31.0.0 <31.2.1, >=32.0.0 <32.1.1). The errata's key point: CVE-2026-24708 is the correct identifier, not CVE-2026-24709, which the original advisory referenced in places. Patches are available for dalmatian, epoxy, flamingo, and gazpacho. If you run the Flat image backend, patch.

Heads Up / Action Needed

• Nominations closed Feb 18, 23:45 UTC. As of the R-6 summary, 27 project teams still lacked a PTL nominee. Late-week candidacies included Carlos Silva (Manila), René Ribaud (Nova), Goutham Pacha Ravi (TC), Douglas Viroel (Watcher), and Rafael Weingärtner (CloudKitty).
• CIVS opt-in required: to vote in the private CIVS polls you must opt in your Gerrit email before the election starts (Feb 25, 23:45 UTC).
• PTG team sign-up due March 1, 7:00 UTC (Kendall Nelson). The April 20–24 PTG needs teams loaded in at the start for cleaner scheduling.
• Masakari at risk: with no PTL nominee by deadline, Sei Sano publicly urged the outgoing PTL to self-nominate, warning the project could be marked inactive — even as team members noted renewed momentum.

Community & Events

The TC's R-6 notes recorded two contrasting outcomes: Monasca is officially closed (173 open changes abandoned across its repositories), while Cyborg is reviving with a new PTL nominee and fresh team structure. The Digital Sovereignty WG posted its meeting recap and a time poll, and the Public Cloud SIG met as usual. Sunbeam proposed Ahmad Hassan for sunbeam-core, René Ribaud asked the Nova team to reserve dedicated bug-scrubbing time in meetings, and the Ops Radio Hour survey stayed open through Feb 25 ahead of the Feb 27 session. A couple of operator how-tos rounded out the week, including kolla-ansible Ironic baremetal setup and OVS-to-OVN migration interest.