October 2014 - Openstack-stable-maint

Neutron backports for security group performance
by Ihar Hrachyshka 11 Nov '14

11 Nov '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, there is a series of Neutron backports in the Juno queue that are intended to significantly improve service performance when handling security groups (one of the issues that are main pain points of current users): - - https://review.openstack.org/130101 - - https://review.openstack.org/130098 - - https://review.openstack.org/130100 - - https://review.openstack.org/130097 - - https://review.openstack.org/130105 The first four patches are optimizing db side (controller), while the last one is to avoid fetching security group rules by OVS agent when firewall is disabled. AFAIK we don't generally backport performance improvements unless they are very significant (though I don't see anything written in stone that says so), but knowing that those patches fix pain hotspots in Neutron, and seem rather isolated, should we consider their inclusion? Should we come up with some "official" rule on how we handle performance enhancement backports? /Ihar -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUUMAvAAoJEC5aWaUY1u57ZkMIAJmae7GdQ3rhRZVpUZkCGAUK 7i2qPqjVh0Qu++kgcMmbM6YPnT4p//OuOAiU9ak8l46TWdeqw9cC0vsGO4Es4MKC rX8pAT/KBgX4FPzTGxhHBk8g5XpD9i6SutGfdFBmoFwj0eV8BAxNTD2A+hmM2ZHO QLBAcNFYhh/9QSnfpdx885z6M+iQ8n91oo1lqugZEdtmpNdrY2nW0ovFHTfj/9ku qznykok80JBNl1KO15Aaru3aHJUoj8/C8ek+UzLN0VP0W+H2zJQJVbGBny1BIVYm odvijGbxvq2rN90HbtUUqNwcM6Mfbc76fDT/agJo4hIDxXfvzsQpKY8iegiEiOc= =bBLb -----END PGP SIGNATURE-----

6 12

neutron: a new runtime dependency sneaked in via rootwrap filter
by Ihar Hrachyshka 30 Oct '14

30 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, it seems that we've missed a new runtime dependency being backported recently into Icehouse. The patch is [1], and it introduced conntrack-tools dependency for L3 agent. This turned out as a problem for existing distributions, specifically RHOSP5 [2] which is built for both RHEL6 and RHEL7. In case of RHEL7, conntrack-tools is not available neither in base OS repos nor in RHOSP5 specific ones. So Red Hat will need to import the package into RHOSP5 repos. That's not convenient but doable. The problem starts when you consider importing the package for RHEL6 too. It may turn out that some support from kernel may be missing (we're going to check that in the very near future). If RHEL6 conntrack-tools won't play nice, we'll be forced to patch the fix out for the platform. I wonder whether we'll consider reverting the patch in upstream if that's the case? So my general point is that we should pay more attention to those kind of runtime dependencies sneaking into stable branches, because it may result in huge problems in downstream. Also, consider this email as a heads-up for other distributions. Should we update release notes for the latest release to include that info? [1]: https://review.openstack.org/#/c/124375/ [2]: https://bugzilla.redhat.com/show_bug.cgi?id=1158871 /Ihar -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUUjnrAAoJEC5aWaUY1u57EgEH/1+IFY+ungkDPNMlC1ALuL7m nRlqGfj9G6EnSPHdtxcYRfr+6OsVHUsWBGyy10Gscw/A4C4rumvTogSHrsf1h96t 6+RQPNbUi183tSvukX49dt+yZjrlIgTDBfS4yK8Akgmn6ICSaJnGvoL85B8eqojf eIaZsIkFRzotS+aCztj0jCmsl5OardQ3BS6z7pxGPmpImt9/rzje4qtj8Lu1QMu9 FvxvZejiDqimbspOY/gtY854Nm6VuX/eIY4EGskjOVUU6nFp6y0alKHIPNEnA+DU QWeJuJ78gmDE7F0X8h8N2R2Cg1cxGvJC+GnzL1u+Nu6vPiDgQ9ZDJULfrinpXoQ= =ubTF -----END PGP SIGNATURE-----

5 8

regression?
by Ihar Hrachyshka 29 Oct '14

29 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi John/all, it turned out that [1] broke DHCPv6, fixed by [2] (I've backported [2] to Juno). [1] was also backported to Icehouse [3], and I wonder whether we need to backport [2] to the branch. Though the code from [1] is present in the branch, I'm not sure whether we should consider DHCP port not created for IPv6 networks as a bug in Icehouse where we probably didn't have the feature implemented yet. Still, there may be other issues with not backporting the fix to Icehouse, so if you have some bad scenarios in mind, please tell me. [1]: https://review.openstack.org/#/c/116832/ [2]: https://review.openstack.org/#/c/123671/ [3]: https://review.openstack.org/#/c/123074/ Cheers, /Ihar -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUUO/cAAoJEC5aWaUY1u57wmAH/AvTXZ8d7GqMz094V+GbRWGF ZnRC/rRSwVQe47+YffvLDsGmf4NArUj/ThN2VXWWHiCuDUXXf/G902ZsZV8G6mF5 mSNX4bEF8alp5HUgIaj7yUSNUHqw5gOO24ZxLlPpSOaKKGfPV2qzf7BZl4HVOjfs pWizKD6eRH24nNwrhfdXezJ0ZuSQFqN5A3lQ3GqVgL/hTbnKr2mL+JsGZyoAlGuP 3dmQAo/zBCW1Z1KOI3JyKBY78iiTy26FFwg1HCftht4NfO7RXS6G7qHYVOGf08Oc /EDhwzThcIYSn+lxFhFUP27kAPhCKeiP62m55wAv1c2mDdw2NBe786C9QjW5oQc= =Yqtb -----END PGP SIGNATURE-----

1 0

Stable check of openstack/tempest failed
by jenkins＠openstack.org 29 Oct '14

29 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : FAILURE in 49m 31s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : SUCCESS in 55m 43s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 47m 13s - periodic-tempest-dsvm-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-juno/e… : SUCCESS in 47m 11s - periodic-tempest-dsvm-neutron-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-jun… : SUCCESS in 1h 00m 27s - periodic-tempest-dsvm-postgres-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 44m 54s

2 1

Stable check of openstack/tempest failed
by jenkins＠openstack.org 24 Oct '14

24 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 1h 25m 39s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : SUCCESS in 55m 05s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : FAILURE in 48m 55s - periodic-tempest-dsvm-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-juno/b… : SUCCESS in 53m 29s - periodic-tempest-dsvm-neutron-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-jun… : SUCCESS in 59m 33s - periodic-tempest-dsvm-postgres-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 51m 56s

2 1

stable/juno open for business
by Alan Pevec 17 Oct '14

17 Oct '14

Hi all, just a reminder that stable/juno branches are now open for backports and, as Ihar reminded me: we need to pay attention on whether the patch is included in juno before doing icehouse push from now on! Cheers, Alan

2 1

Stable check of openstack/keystone failed
by jenkins＠openstack.org 17 Oct '14

17 Oct '14

Build failed. - periodic-keystone-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-docs-icehouse/4… : SUCCESS in 3m 22s - periodic-keystone-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python26-icehou… : FAILURE in 29m 51s - periodic-keystone-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python27-icehou… : FAILURE in 26m 49s

4 3

openstack/requirements:icehouse needs update to pass integration job
by Ihar Hrachyshka 17 Oct '14

17 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, currently all requirements updates in Icehouse fail as in [1]: 'dib-utils' is not a global requirement but it should be,something went wrong The following patch [2] should be merged to unblock other patches for the branch. Please review, /Ihar [1]: http://logs.openstack.org/48/124648/2/check/check-requirements-integration-… [2]: https://review.openstack.org/#/c/129190/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUQOWfAAoJEC5aWaUY1u57Y1gIANMBAwAHQVUcuf3h9+cjBIvy 4jiY1XwVTb4mgFchsMA5tLkgSbTZeiSoV2R53z+hC2jD+6YsKXRalPP46yPgEp/X M8VtWkv0ZmX7DAcYK0eqpj1Bpcjg3cke95oGnX/ePvD011Nt+OyISMk0n5RLtYnF JmJ0jr/Ok6mxdoNvUatPxj8gegHG0gG+rqA4Iy+OV0MX/61pffwaM2akZsTGgKBY ze9XM8w+DnjE3U7xzAxpBssaCz8AFiYkvYId5UnI5o9+4eMym+1XiAqrw8hsllhj YwT8k3hOG4/UJrPkc85iXyE6+OVzg8DMK5OxyPho9j5KWHfaf6ePc7FlCgmCOtw= =V0xl -----END PGP SIGNATURE-----

1 0

Stable check of openstack/keystone failed
by jenkins＠openstack.org 16 Oct '14

16 Oct '14

Build failed. - periodic-keystone-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-docs-icehouse/6… : SUCCESS in 2m 44s - periodic-keystone-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python26-icehou… : FAILURE in 23m 35s - periodic-keystone-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python27-icehou… : FAILURE in 28m 09s

2 1

Need to get patch reviewed please ...
by Jay S. Bryant 15 Oct '14

15 Oct '14

All, https://review.openstack.org/126371 <--- This fixes a nasty bug where the swift object auditor can become like a fork bomb. Could we get reviews on this and get it merged please? Thanks! Jay

2 1