openstack/nova — Week of 2026-07-04

Policy and test scaffolding. The largest change by far is a rework of policy scope enforcement testing, trimming roughly 2,400 net lines from the test suite (986946). Alongside it, mtty support landed for exercising fake mdevs, and the vTPM CI job was renamed and extended to cover vGPU testing via the same mtty path — giving the mediated-device code paths a functional gate without real hardware.

Feature and config cleanup. The long-unused shutdown_terminate instance flag was removed, and the libvirt driver dropped its dependency on [libvirt] num_memory_encrypted_guests, deriving the limit from libvirt itself instead. Several rounds of dead-code removal and type fixes in privsep, utils, and libvirt logging round out the maintenance sweep, along with a pyproject packaging update.

Bug fixes. The websockify proxy no longer mutates global config on each connection, and noVNC traffic logging is now gated on debug=True. On the compute side, init_host pre-loads flavor and system_metadata to avoid repeated lazy loads, live-migration ensures resource limits are set before _call_livem_checks_on_host, and the security-group port query now restricts returned fields. Smaller fixes address a CLI-exit stacktrace, a mis-scoped mock, and a regression test for bug #2153425.