[Openstack-operators] CentOS 7.3 libvirt appears to be broken for virtio-scsi and ceph with cephx auth

Erik McCormick emccormick at cirrusseven.com
Wed Dec 21 00:27:09 UTC 2016

On Tue, Dec 20, 2016 at 11:57 AM, Mike Lowe <jomlowe at iu.edu> wrote:
> I got a rather nasty surprise upgrading from CentOS 7.2 to 7.3.  As far as I can tell the libvirt 2.0.0 that ships with 7.3 doesn’t behave the same way as the 1.2.17 that ships with 7.2 when using ceph with cephx auth during volume attachment using virtio-scsi.  It looks like it fails to add the cephx secret.  The telltale signs are "No secret with id 'scsi0-0-0-1-secret0’” in the /var/log/libvirt/qemu instance logs.  I’ve filed a bug here https://bugzilla.redhat.com/show_bug.cgi?id=1406442 and there is a libvirt mailing list  thread about a fix for libvirt 2.5.0 for what looks like this same problem https://www.redhat.com/archives/libvir-list/2016-October/msg00396.html  I’m out of ideas for workarounds having had kind of a disastrous attempt at downgrading to libvirt 1.2.17, so if anybody has any suggestions I’m all ears.
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

What's extra annoying is that I can't find RPM's for the old libvirt
version (1.2.17-13) that I'd been using previously. I have KVM that I
build from SRPM a while ago, but not libvirt. I can find the libvirt
SRPM, but my ceph libs are still 0.80.11 and the librados2-devel and
librbd1-devel packages that the libvirt SRPM depends on are no longer
available. I get not supporting older releases, but why delete it

>From another post, it also sounds like there's an issue with this
release when running with cpu_mode=host-model, which I am, so that'll
be another mess. This is what I get for not running a local repo I

If anyone has copies of libvirt-1.2.17-13 RPMs for EL7 lying about,
please do post a link. I would be very grateful. I'm trying to roll
out a few new computes and it sounds like I'll be running into this
without them.


More information about the OpenStack-operators mailing list