<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" style="font-size:11pt; color:#000000; font-family:'Comic Sans MS',Fantasy,cursive">
<p>Lee</p>
<p><br>
</p>
<p>That change is in my test version or was till I reverted it with <a href="https://review.openstack.org/#/c/391418" class="x_OWAAutoLink" id="LPlnk870092">https://review.openstack.org/#/c/391418</a>,</p>
<p>If you live migrate with the change you mentioned the instance goes to error when you try to hard reboot</p>
<p><br>
</p>
<div id="x_Signature">
<div id="x_divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<div style="font-family:Tahoma; font-size:13px">
<div class="x_BodyFragment"><font size="2"><span style="font-size:10pt">
<div class="x_PlainText"><br>
<br>
<br>
<br>
<br>
<br>
Paul Carlton<br>
Software Engineer<br>
Cloud Services <br>
Hewlett Packard Enterprise<br>
BUK03:T242<br>
Longdown Avenue<br>
Stoke Gifford<br>
Bristol BS34 8QZ<br>
<br>
Office: +44 (0) 1173 162189<br>
Mobile: +44 (0)7768 994283<br>
Email: paul.carlton@hpe.com<br>
Hewlett-Packard Enterprise Limited registered Office: Cain Road, Bracknell, Berks RG12 1HN Registered No: 690597 England.
<br>
The contents of this message and any attachments to it are confidential and may be legally privileged. If you have received this message in error, you should delete it from your system immediately and advise the sender. To any recipient of this message within
HP, unless otherwise stated you should consider this message and attachments as "HP CONFIDENTIAL".<br>
<br>
</div>
</span></font></div>
</div>
</div>
</div>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Lee Yarwood <lyarwood@redhat.com><br>
<b>Sent:</b> 01 November 2016 14:58:58<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [nova] [cinder] Issue with live migration of instances with encrypted volumes</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">On 01-11-16 12:02:55, Carlton, Paul (Cloud Services) wrote:<br>
> Daniel<br>
> <br>
> Yes, thanks, but the thing is this does not occur with regular volumes!<br>
> The process seems to be you need to connect the volume then the encryptor.<br>
> In pre migration at the destination I connect the volume and then setup the encryptor and that works fine, but in post migration<br>
> at destination it rebuilds the instance xml and defines the vm which calls _get_guest_storage_config which does another call to<br>
> connect_volume. This seems redundant to me, because it is already connected,<br>
> but it works for normal volumes and if I bypass it for encrypted volumes<br>
> it just fails with the same error when the same function is<br>
> called as part of a subsequent hard reboot.<br>
<br>
Try rebasing on the following change that reworked <br>
post_live_migration_at_destination to fetch the domain XML from libvirt<br>
instead of asking Nova to rebuild it :<br>
<br>
libvirt: fix serial console not correctly defined after live-migration<br>
<a href="https://review.openstack.org/#/c/356335/">https://review.openstack.org/#/c/356335/</a><br>
<br>
I think you've highlighted that this caused issues with hard rebooting<br>
elsewhere right?<br>
<br>
Lee<br>
<br>
> From: Daniel P. Berrange <berrange@redhat.com><br>
> Sent: 01 November 2016 11:29:51<br>
> To: OpenStack Development Mailing List (not for usage questions)<br>
> Subject: Re: [openstack-dev] [nova] [cinder] Issue with live migration of instances with encrypted volumes<br>
> <br>
> On Tue, Nov 01, 2016 at 11:22:25AM +0000, Carlton, Paul (Cloud Services) wrote:<br>
> > I'm working on a bug <a href="https://bugs.launchpad.net/nova/+bug/1633033">https://bugs.launchpad.net/nova/+bug/1633033</a> with the live migration of<br>
> ><br>
> > instances with encrypted volumes. I've submitted a work in progress version of a patch<br>
> ><br>
> > <a href="https://review.openstack.org/#/c/389608">https://review.openstack.org/#/c/389608</a> but I can't overcome an issue with an iscsi command<br>
> ><br>
> > failure that only occurs for encrypted volumes during the post migration processing, see<br>
> ><br>
> > <a href="http://paste.openstack.org/show/587535/">http://paste.openstack.org/show/587535/</a><br>
> ><br>
> ><br>
> > Does anyone have any thoughts on how to proceed with this issue?<br>
> <br>
> No particular ideas, but I wanted to point out that the scsi_id command<br>
> shown in that stack trace has a device path that points to the raw<br>
> iSCSI LUN, not to the dm-crypt overlay. So it looks like you're hitting<br>
> a failure before you get the encryption part, so encryption might be<br>
> unrelated.<br>
<br>
-- <br>
Lee Yarwood<br>
Senior Software Engineer<br>
Red Hat<br>
<br>
PGP : A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76<br>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</div>
</span></font>
</body>
</html>