December 2020 - openstack-discuss

[Diversity] Diversity and Inclusion WG Meeting Change for January
by Amy Marrich 07 Dec '20

07 Dec '20

Due to the end of year holidays and the fact some people may still be out we will be moving our January meeting. As our backup meeting date is on Martin Luther King Day, the WG has selected January 11 to meet in IRC. As always I'll send out a reminder in the days leading up to the meeting. Thanks, Amy (spotz)

1 0

[ci] Kernel panics in the guest vm
by Slawek Kaplonski 07 Dec '20

07 Dec '20

Hi, Since some time I noticed that quite often some scenario jobs are failing due to issue with SSH to the guest vm and when I was checking the reason of this SSH failure, it seems that it's due to Kernel panic in the guest vm, like e.g. [1]: [ 0.000000] Console: colour VGA+ 80x25 [ 0.000000] printk: console [tty1] enabled [ 0.000000] printk: console [ttyS0] enabled [ 0.000000] ACPI: Core revision 20190703 [ 0.000000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns [ 0.000000] APIC: Switch to symmetric I/O mode setup [ 0.000000] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.000000] ..MP-BIOS bug: 8254 timer not connected to IO-APIC [ 0.000000] ...trying to set up timer (IRQ0) through the 8259A ... [ 0.000000] ..... (found apic 0 pin 2) ... [ 0.000000] ....... failed. [ 0.000000] ...trying to set up timer as Virtual Wire IRQ... [ 0.000000] ..... failed. [ 0.000000] ...trying to set up timer as ExtINT IRQ... [ 0.000000] ..... failed :(. [ 0.000000] Kernel panic - not syncing: IO-APIC + timer doesn't work! Boot with apic=debug and send a report. Then try booting with the 'noapic' option. [ 0.000000] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.3.0-26-generic #28~18.04.1-Ubuntu [ 0.000000] Hardware name: OpenStack Foundation OpenStack Nova, BIOS 1.13.0-1ubuntu1 04/01/2014 [ 0.000000] Call Trace: [ 0.000000] dump_stack+0x6d/0x95 [ 0.000000] panic+0xfe/0x2d4 [ 0.000000] check_timer+0x5e8/0x685 [ 0.000000] ? radix_tree_lookup+0xd/0x10 [ 0.000000] setup_IO_APIC+0x182/0x1ca [ 0.000000] apic_intr_mode_init+0x1f5/0x1f8 [ 0.000000] x86_late_time_init+0x1b/0x22 [ 0.000000] start_kernel+0x4cb/0x58b [ 0.000000] x86_64_start_reservations+0x24/0x26 [ 0.000000] x86_64_start_kernel+0x74/0x77 [ 0.000000] secondary_startup_64+0xa4/0xb0 [ 0.000000] ---[ end Kernel panic - not syncing: IO-APIC + timer doesn't work! Boot with apic=debug and send a report. Then try booting with the 'noapic' option. ]--- Logstash [2] is telling me that it is problem not only in neutron related jobs. Maybe someone of You was already trying to investigate such issue and maybe You have some ideas what we can do with it? In this specific example above [1], it was Cirros 0.5.1 image used. But I didn't check if that is the case in all other cases TBH. [1] https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/… [2] http://logstash.openstack.org/#dashboard/file/logstash.json?query=message%3…'t%20work!%20%20Boot%20with%20apic%3Ddebug%20and%20send%20a%20report.%20%20Then%20try%20booting%20with%20the%20'noapic'%20option.%5C%22 -- Slawek Kaplonski Principal Software Engineer Red Hat

3 3

[tripleo] CI jobs failures on RDO project
by Daniel Pawlik 07 Dec '20

07 Dec '20

Hello, We are facing an outage in our cloud providers. That's why from time to time you can have problems validating CI jobs in RDO project. We are doing our best to fix the issues as soon as possible. Kindly regards, Dan

1 0

[networking-ovs-dpdk]
by Elanchezian Settu 07 Dec '20

07 Dec '20

Hi, Tried ovs-dpdk installation in below setup and noticing it fails with OVS-DPDK initialization timeout problem. Herewith I had attached the local.conf file, which I had used for my setup bring up. Server: Ubuntu 18.04 latest OpenStack: Stein OVS-DPDK: Master byte-compiling /usr/local/lib/python3.6/dist-packages/networking_ovs_dpdk/agent/ovs_dpdk_firewall.py to ovs_dpdk_firewall.cpython-36.pyc running install_egg_info Copying networking_ovs_dpdk.egg-info to /usr/local/lib/python3.6/dist-packages/networking_ovs_dpdk-2015.1.1.dev275-py3.6.egg-info running install_scripts /usr/local/lib/python3.6/dist-packages/pbr/packaging.py:410: EasyInstallDeprecationWarning: Use get_header header = easy_install.get_script_header("", executable, is_wininst) ++/opt/stack/networking-ovs-dpdk/devstack/plugin.sh:source:35 popd /opt/stack/ovs ++/opt/stack/networking-ovs-dpdk/devstack/plugin.sh:source:36 start_ovs_dpdk ++/opt/stack/networking-ovs-dpdk/devstack/libs/ovs-dpdk:start_ovs_dpdk:19 '[' -e /etc/init.d/ovs-dpdk ']' ++/opt/stack/networking-ovs-dpdk/devstack/libs/ovs-dpdk:start_ovs_dpdk:20 sudo service ovs-dpdk start Job for ovs-dpdk.service failed because a timeout was exceeded. See "systemctl status ovs-dpdk.service" and "journalctl -xe" for details. +/opt/stack/networking-ovs-dpdk/devstack/libs/ovs-dpdk:start_ovs_dpdk:1 exit_trap +./stack.sh:exit_trap:528 local r=1 ++./stack.sh:exit_trap:529 jobs -p +./stack.sh:exit_trap:529 jobs= +./stack.sh:exit_trap:532 [[ -n '' ]] +./stack.sh:exit_trap:538 '[' -f '' ']' +./stack.sh:exit_trap:543 kill_spinner +./stack.sh:kill_spinner:438 '[' '!' -z '' ']' +./stack.sh:exit_trap:545 [[ 1 -ne 0 ]] +./stack.sh:exit_trap:546 echo 'Error on exit' Error on exit +./stack.sh:exit_trap:548 type -p generate-subunit +./stack.sh:exit_trap:549 generate-subunit 1607341696 1042 fail +./stack.sh:exit_trap:551 [[ -z /opt/stack/logs/screen ]] +./stack.sh:exit_trap:554 /home/ubuntu/devstack/tools/worlddump.py -d /opt/stack/logs/screen Traceback (most recent call last): File "/home/ubuntu/devstack/tools/worlddump.py", line 255, in <module> sys.exit(main()) File "/home/ubuntu/devstack/tools/worlddump.py", line 239, in main sys.stdout = os.fdopen(sys.stdout.fileno(), 'w', 0) File "/usr/lib/python3.6/os.py", line 1017, in fdopen return io.open(fd, *args, **kwargs) ValueError: can't have unbuffered text I/O Exception ignored in: <_io.TextIOWrapper name='<stdout>' mode='w' encoding='UTF-8'> OSError: [Errno 9] Bad file descriptor ubuntu@ubuntu:~/devstack$ ubuntu@ubuntu:~/devstack$ systemctl status ovs-dpdk.service ● ovs-dpdk.service - LSB: Open vSwitch DPDK Loaded: loaded (/etc/init.d/ovs-dpdk; generated) Active: failed (Result: timeout) since Mon 2020-12-07 12:05:38 UTC; 15s ago Docs: man:systemd-sysv-generator(8) Process: 21377 ExecStart=/etc/init.d/ovs-dpdk start (code=killed, signal=TERM) Tasks: 2 (limit: 9830) CGroup: /system.slice/ovs-dpdk.service ├─21984 sudo ovs-vsctl --may-exist add-port br-enp24s0f1 enp24s0f1 -- set Interface enp24s0f1 type=dpdk options:dpdk-devargs=0000:18:00.1 other_config:pci_address=0000:18:00.1 other_config:driver=igb_uio other_config:p └─21985 ovs-vsctl --may-exist add-port br-enp24s0f1 enp24s0f1 -- set Interface enp24s0f1 type=dpdk options:dpdk-devargs=0000:18:00.1 other_config:pci_address=0000:18:00.1 other_config:driver=igb_uio other_config:previo Dec 07 12:00:41 ubuntu sudo[21775]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/stack/DPDK-v18.11/usertools/dpdk-devbind.py -b igb_uio 0000:5e:00.1 Dec 07 12:00:41 ubuntu sudo[21775]: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 07 12:00:42 ubuntu sudo[21775]: pam_unix(sudo:session): session closed for user root Dec 07 12:00:42 ubuntu ovs-dpdk[21377]: add-port command: ovs-vsctl --may-exist add-port br-enp24s0f1 enp24s0f1 -- set Interface enp24s0f1 type=dpdk options:dpdk-devargs=0000:18:00.1 other_config:pci_address=0000:18:00.1 Dec 07 12:00:42 ubuntu sudo[21984]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/ovs-vsctl --may-exist add-port br-enp24s0f1 enp24s0f1 -- set Interface enp24s0f1 type=dpdk options:dpdk-devargs=0000:18:00.1 other_ Dec 07 12:00:42 ubuntu sudo[21984]: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 07 12:00:42 ubuntu ovs-vsctl[21985]: ovs|00001|vsctl|INFO|Called as ovs-vsctl --may-exist add-port br-enp24s0f1 enp24s0f1 -- set Interface enp24s0f1 type=dpdk options:dpdk-devargs=0000:18:00.1 other_config:pci_address=0000:18 Dec 07 12:05:38 ubuntu systemd[1]: ovs-dpdk.service: Start operation timed out. Terminating. Dec 07 12:05:38 ubuntu systemd[1]: ovs-dpdk.service: Failed with result 'timeout'. Dec 07 12:05:38 ubuntu systemd[1]: Failed to start LSB: Open vSwitch DPDK. ubuntu@ubuntu:~/devstack$ Thanks & Regards, Elan This message may contain confidential and privileged information. If it has been sent to you in error, please reply to advise the sender of the error and then immediately delete it. If you are not the intended recipient, do not read, copy, disclose or otherwise use this message. The sender disclaims any liability for such unauthorized use. NOTE that all incoming emails sent to Gigamon email accounts will be archived and may be scanned by us and/or by external service providers to detect and prevent threats to our systems, investigate illegal or inappropriate behavior, and/or eliminate unsolicited promotional emails (“spam”).

1 0

[neutron] Bug deputy report (week starting on 2020-11-30)
by Bernard Cafarelli 07 Dec '20

07 Dec '20

Hi neutrinos, time to start last bug deputy rotation for 2020, here are the bugs reported in week 49. A pretty normal range of bugs from CI fixes to scaling enhancements, most in progress. Two are unassigned right now: OVN tempest failure ( https://bugs.launchpad.net/neutron/+bug/1906490) and DHCP agent leases fix with segments (https://bugs.launchpad.net/neutron/+bug/1906406) New RFE: * [RFE] add new extension "device-profile" for port - https://bugs.launchpad.net/neutron/+bug/1906602 New extension for device_profile notion of Cyborg project - already discussed and approved Critical * oom killer kills mysqld process on the node running fullstack tests - https://bugs.launchpad.net/neutron/+bug/1906366 Patch to limit resources used in FT tests: https://review.opendev.org/c/openstack/neutron/+/764907 * SSH failures in the neutron-ovn-tempest-ovs-release-ipv6-only job - https://bugs.launchpad.net/neutron/+bug/1906490 Unassigned * neutron_tempest_plugin.api.admin.test_dhcp_agent_scheduler.DHCPAgentSchedulersTestJSON.test_dhcp_port_status_active is failing often - https://bugs.launchpad.net/neutron/+bug/1906654 https://review.opendev.org/c/openstack/neutron/+/755313 may help here, to confirm High * [ovn] Tempest tests failing while creating security group driver with KeyError: 'remote_address_group_id' - https://bugs.launchpad.net/neutron/+bug/1906500 Broke after a recent merge (and not tested in gates), fix at https://review.opendev.org/c/openstack/neutron/+/765101 * [OVN Octavia Provider] OVN provider not setting member offline correctly on create when admin_state_up=False - https://bugs.launchpad.net/neutron/+bug/1906568 Fix for tempest test in https://review.opendev.org/c/openstack/ovn-octavia-provider/+/765213 Medium * [segments] dnsmasq can't delete lease for instance due to mismatch between client ip and local addr - https://bugs.launchpad.net/neutron/+bug/1906406 With routed provider networks, DHCP agent at startup receives all leases, not only those from its segment Unassigned * MTU for networks with enabled vlan transparency should be 4 bytes lower - https://bugs.launchpad.net/neutron/+bug/1906318 Assigned to slaweq * [L2][scale] add a trunk size config option for bundle flow install - https://bugs.launchpad.net/neutron/+bug/1906487 New option to help with large set of flows installation: https://review.opendev.org/c/openstack/neutron/+/765072 Low * dns-integration api extension shouldn't be enabled by ovn_l3 plugin if there is no corresponding ML2 extension driver enabled - https://bugs.launchpad.net/neutron/+bug/1906311 Patch https://review.opendev.org/c/openstack/neutron/+/764831 * [L3] router HA port concurrently deleting - https://bugs.launchpad.net/neutron/+bug/1906375 Happened on rocky but code did not change since, patch in progress https://review.opendev.org/c/openstack/neutron/+/764913 * [L2] current binding port get type errors - https://bugs.launchpad.net/neutron/+bug/1906381 Patch in progress at https://review.opendev.org/c/openstack/neutron/+/764917 * Wrong error message when removing interface from router - https://bugs.launchpad.net/neutron/+bug/1906508 Suggested fix https://review.opendev.org/c/openstack/neutron/+/765129 -- Bernard Cafarelli

1 0

[security] Auto-renewing trusted user certificates for Openstack services using the ACME protocol
by Stanislav Dimov 07 Dec '20

07 Dec '20

Hello all, I have recently started exploring Openstack with the goal of using it to replace my current private cloud infrastructure. I have been reading the docs about security and I noticed that there isn't really a (straight forward) way of securing Openstack services communication with user provided, trusted, SSL certificates. I believe this should not be the case. My current infrastructure uses a privately hosted CA, that supports the ACME protocol. All my hosts submit CSRs to it, and respond to the ACME challenges in order to get it signed. All certificates are short-lived (1h), but never expire thanks to the ACME automation. I have achieved this through an open source project called Smallstep Step CA and Smallstep Step CLI tools. It is dead easy to set up. All of the tools needed to achieve this can also be containerized, for simplicity. Thus, I propose the following solution (keep in mind I am not an Openstack developer): Addition of an ACME client, with a configurable ACME URL, to all (or as many as possible) Openstack services, that can submit CSRs to an ACME server (basically almost identical to the already implemented Openstack Let's Encrypt functionality for public endpoints). Also, optionally, the creation of a new Openstack service, using the Smallstep Step CA, which can sign the CSRs, and thus eliminate the need for a manual setup of a separate Smallstep CA host. I am providing some links to the Smallstep repositories and documentation for easier access: https://github.com/smallstep/certificates https://github.com/smallstep/cli https://github.com/smallstep/hello-mtls https://smallstep.com/docs/ Thank you for your time and consideration. Kind regards, Stanislav

1 0

octavia flavor question
by Satish Patel 06 Dec '20

06 Dec '20

Folks, I am deployed Octavia and now trying to understand how does flavor play there role using this guide https://docs.openstack.org/octavia/latest/admin/flavors.html In my octavia.conf i have statically defined nova flavor so when i spin up LB it always use m1.amphora (UUID: 8651951f-e478-4efb-b298-cf3150d38472) which has 1vCPU/2GB memory. # grep amp_flavor_id /etc/octavia/octavia.conf amp_flavor_id = 8651951f-e478-4efb-b298-cf3150d38472 Question: how do I create or tell octavia to use multiple nova flavors for example, I want 3 flavors m1.amphora - 1vCPU/2GB/20GB disk m2.amphora - 4vCPU/4GB/20GB disk m3.amphora - 8vCPU/8GB/40GB disk (with HugePage and CPUpinning support) I want my users to have the option to select whatever flavor they like. how does that fit here? I didn't find any document explaining that feature to select your desired nova flavor. Did I miss something?

3 3

[tripleo][ussuri] overcloud deploy increase timeout/wai time to load initramfs to deploy os
by Ruslanas Gžibovskis 06 Dec '20

06 Dec '20

Hi all, To deploy initramfs takes longer time (around 17 min). And while it is loading, overcloud deploy sais: ' Went to status ERROR due to "Message: No valid host was found. , Code: 500" '. the remote compute is in a different continent, so speed is quite slow. is it possible to increase wait time? Thank you. Regards. -- Ruslanas Gžibovskis +370 6030 7030

1 0

[rdo][centos8][repos] CentOS8 RDO-USSURI repo missing openvswitch2.13
by Ruslanas Gžibovskis 05 Dec '20

05 Dec '20

Hi all, I have an issue, in CentOS8 repos for RDO. It is refering to openvswitch2.13 name, but in the repos I can see openvswitch packages with version in version field, looks like in dependency field it is missing dash (-) or smth... here is a paste of repos and error message [0]. Or any other way how this could be fixed? thanks. and packages I can see [1] here. [0] http://paste.openstack.org/show/xEalilL1rRJSDTzNCGt1/ [1] http://paste.openstack.org/show/VLWrNFpRLatwq5qXP2kD/ -- Ruslanas Gžibovskis +370 6030 7030

3 3

[tripleo] TripleO CI Summary: Unified Sprint 36
by Rafael Folco 04 Dec '20

04 Dec '20

Greetings, The TripleO CI team has just completed **Unified Sprint 36** (Nov 13 thru Dec 03). The following is a summary of completed work during this sprint cycle: - Added Tempest cleanup support: https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/76240… - Ported jobs running against tripleo-ansible stable/train to centos-8 - ansible-role-collect-logs role is packaged now and available for train onwards - All the jobs are migrated to vexxhost and rdo-cloud nodeset is - removed - Continued merging changes to wire-up content provider jobs across TripleO related projects to remove docker.io dependencies: https://review.opendev.org/#/q/topic:new-ci-job - Designed a dependency pipeline to early detect breakages in the base OS: https://hackmd.io/14KFQiyWSBCRsfJmBZNARw?both - component standalone-upgrade - Enable the component-ci-testing repo if it is installed: https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/764767 - https://review.rdoproject.org/r/#/c/31200/ Adds tripleo component standalone-upgrade-master/victoria/ussuri - Redundant content providers for the upgrade jobs to reduce resource usage: https://review.opendev.org/761188 - Tempest scenario manager improvements: 1. https://review.opendev.org/c/openstack/tempest/+/753689 2. https://review.opendev.org/c/openstack/tempest/+/754081 3. https://review.opendev.org/c/openstack/tempest/+/755072 - Promoter configuration fix: https://review.rdoproject.org/r/#/c/28014/ - Created a new job in downstream for 16.2 component pipeline which deploys multiple overcloud stack using a single undercloud node: - https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/763786 - https://review.opendev.org/c/openstack/tripleo-quickstart/+/761061 - Added OSP 13 ansible openstack collection tests job - Wrote test cases for cockpit (telegraf container bump to python3): https://review.rdoproject.org/r/#/c/30492/ - Removed ubi-8 based jobs: https://review.opendev.org/760426 - Ansible-collections-openstack improvements: 1. ttps://review.opendev.org/c/openstack/ansible-collections-openstack/+/764379 <https://review.opendev.org/c/openstack/ansible-collections-openstack/+/7643…> 2. https://review.opendev.org/c/openstack/ansible-collections-openstack/+/7643… 3. https://review.opendev.org/c/openstack/ansible-collections-openstack/+/7644… 4. https://review.opendev.org/c/openstack/ansible-collections-openstack/+/7640… Upstream promotions [1] Ruck/Rover recorded notes [2]. NEXT SPRINT =========== The planned work for the next sprint is to continue work started in the previous sprint: The Ruck and Rover shifts for the upcoming weeks are scheduled as follows: Dec 7: Sorin Sbarnea (zbr), Marios Andreou (marios) Dec 14: Chandan Kumar (chandankumar), Amol Kahat (akahat) Dec 21: Bhagyashri Shewale (bhagyashris), Soniya Vyas (soniya29) Dec 28: Sandeep Yadav (ysandeep), Sagi Shnaidman (sshnaidm) Jan 4: Wesley Hayutin (weshay), Poja Jadhav (pojadhav) Please direct questions or queries to them regarding CI status or issues in #tripleo, ideally to whomever has the ‘|ruck’ suffix on their nick. Ruck/rover notes to be tracked in hackmd [2]. Thanks, --rfolco [1] http://dashboard-ci.tripleo.org/d/HkOLImOMk/upstream-and-rdo-promotions?org… [2] https://hackmd.io/R0kCgz_7SHSix_cNgoC9pg -- Folco

1 0

[Diversity] Diversity & Inclusion Meeting 12/7
by Amy Marrich 04 Dec '20

04 Dec '20

The Diversity & Inclusion WG invites members of all OSF projects to our next meeting Monday, December 7th, at 17:00 UTC in the #openstack-diversity channel. The agenda can be found at https://etherpad.openstack.org/p/diversity -wg-agenda. Please feel free to add any other topics you wish to discuss at the meeting. Thanks, Amy (spotz)

1 0

[baremetal-sig][ironic] Tue Dec 8, 2pm UTC: Ironic and Redfish Interop Profiles
by Arne Wiebalck 04 Dec '20

04 Dec '20

Dear all, The Bare Metal SIG will meet on Tue Dec 8 at 2pm UTC. This time there will be a 10 minute "topic-of-the-day" presentation by Richard Pioso: 'An Introduction to Ironic Redfish Interoperability Profiles' So, if you would like to learn how to validate if hardware is fit for use with Redfish and Ironic, find all the details for this meeting on the SIG's etherpad: https://etherpad.opendev.org/p/bare-metal-sig Everyone is welcome, don't miss out! Cheers, Arne

2 1

[rdo][centos8] OVS and OVN packages
by Tony Liu 04 Dec '20

04 Dec '20

Hi, I see OVN package ovn2.13-central-20.09.0-2.el8.x86_64.rpm and OVS in openvswitch2.13-2.13.0-60.el8.x86_64.rpm [1]. But I can't find them in [2]. Where are they built? Which source package is it based, [3] and [4]? [1] http://mirror.centos.org/centos/8/nfv/x86_64/openvswitch-2/Packages/o/ [2] https://cbs.centos.org/koji/packages [3] https://github.com/ovn-org/ovn/archive/v20.09.0.tar.gz [4] https://github.com/openvswitch/ovs/archive/v2.13.1.tar.gz Thanks! Tony

2 2

[ironic] : Third-party ML2 plugins for Openstack ironic with virtual networks
by fsbiz＠yahoo.com 04 Dec '20

04 Dec '20

Is anyone using virtual networks for their Openstack Ironic installations? Our flat network is now past 3000 nodes and I am investigating Arista's ML2 plugin and / or Mellanox's NEO as the ML2 plugin. In addition to scaling we also have additional requirements like provisioning a bare-metal serverin a conference room away from the DC for demo purposes. I have general questions on whether anyone is actually using the above two (or any other ML2 plugins)with their Openstack ironic installations ? Thanks,Fred.

2 1

devstack multinode: MTU tag not sent in Libvirt XML created from Nova
by Shashi, Yatindra 04 Dec '20

04 Dec '20

Hi All, I am using devstack-train version. Can you guys tell me which source file or function should I look when I get mtu size in the network-info but not in the libvirtxml parsed like below log Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: DEBUG nova.network.os_vif_util [None req-31d5b683-9e85-455e-95fd-b110de636fe4 admin admin] Converting VIF {"id": "d0358b23-d96b-4394-969d-32858b60e261", "addre ss": "fa:16:3e:46:97:e0", "network": {"id": "991289bb-6794-4673-b32c-e0f2296a8949", "bridge": "br-int", "label": "shared", "subnets": [{"cidr": "192.168.233.0/24", "dns": [], "gateway": {"address": "192.168.233.1 ", "type": "gateway", "version": 4, "meta": {}}, "ips": [{"address": "192.168.233.237", "type": "fixed", "version": 4, "meta": {}, "floating_ips": []}], "routes": [], "version": 4, "meta": {"dhcp_server": "192.16 8.233.2"}}], "meta": {"injected": false, "tenant_id": "ac158184024043faba836ec3d347d0d7", "mtu": 1450, "physical_network": null, "tunneled": true}}, "type": "ovs", "details": {"connectivity": "l2", "port_filter": true, "ovs_hybrid_plug": false, "datapath_type": "system", "bridge_name": "br-int"}, "devname": "tapd0358b23-d9", "ovs_interfaceid": "d0358b23-d96b-4394-969d-32858b60e261", "qbh_params": null, "qbg_params": null , "active": false, "vnic_type": "normal", "profile": {}, "preserve_on_delete": false, "meta": {}} {{(pid=8579) nova_to_osvif_vif /opt/stack/nova/nova/network/os_vif_util.py:516}} Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: DEBUG nova.network.os_vif_util [None req-31d5b683-9e85-455e-95fd-b110de636fe4 admin admin] Converted object VIFOpenVSwitch(active=False,address=fa:16:3e:46:97: e0,bridge_name='br-int',has_traffic_filtering=True,id=d0358b23-d96b-4394-969d-32858b60e261,network=Network(991289bb-6794-4673-b32c-e0f2296a8949),plugin='ovs',port_profile=VIFPortProfileOpenVSwitch,preserve_on_del ete=False,vif_name='tapd0358b23-d9') {{(pid=8579) nova_to_osvif_vif /opt/stack/nova/nova/network/os_vif_util.py:553}} Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: DEBUG nova.objects.instance [None req-31d5b683-9e85-455e-95fd-b110de636fe4 admin admin] Lazy-loading 'pci_devices' on Instance uuid 997103d3-0a60-4ce2-a85d-c42 eb24cfd8b {{(pid=8579) obj_load_attr /opt/stack/nova/nova/objects/instance.py:1090}} Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: DEBUG nova.virt.libvirt.driver [None req-31d5b683-9e85-455e-95fd-b110de636fe4 admin admin] [instance: 997103d3-0a60-4ce2-a85d-c42eb24cfd8b] End _get_guest_xml xml=<domain type="acrn"> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <uuid>997103d3-0a60-4ce2-a85d-c42eb24cfd8b</uuid> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <name>instance-00000001</name> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <memory>1048576</memory> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <vcpu>1</vcpu> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <metadata> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:instance xmlns:nova="http://openstack.org/xmlns/libvirt/nova/1.0"> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:package version="20.1.2"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:name>cl_acrn</nova:name> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:creationTime>2020-12-04 09:11:22</nova:creationTime> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:flavor name="ds1G"> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:memory>1024</nova:memory> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:disk>10</nova:disk> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:swap>0</nova:swap> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:ephemeral>0</nova:ephemeral> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:vcpus>1</nova:vcpus> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </nova:flavor> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:owner> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:user uuid="b4646b0d513645c8ab6d0656b2e699ed">admin</nova:user> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:project uuid="ac158184024043faba836ec3d347d0d7">admin</nova:project> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </nova:owner> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <nova:root type="image" uuid="b3464729-fdb5-435e-9eff-3525760afa5b"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </nova:instance> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </metadata> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <os> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <type>hvm</type> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <loader>/usr/share/acrn/bios/OVMF.fd</loader> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <boot dev="hd"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </os> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <features> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <acpi/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <apic/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </features> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <clock offset="utc"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <devices> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <disk type="file" device="disk"> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <driver type="raw" cache="none"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <source file="/opt/stack/data/nova/instances/997103d3-0a60-4ce2-a85d-c42eb24cfd8b/disk"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <target dev="vda" bus="virtio"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </disk> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <interface type="bridge"> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <mac address="fa:16:3e:46:97:e0"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <model type="virtio"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <source bridge="br-int"/> --> Why no mtu set in xml Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <target dev="tapd0358b23-d9"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <virtualport type="openvswitch"> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: <parameters interfaceid="d0358b23-d96b-4394-969d-32858b60e261"/> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </virtualport> Dez 04 10:11:22 acrn1-NUC7i7DNHE nova-compute[8579]: </interface> : I checked the solution mentioned in [ https://bugs.launchpad.net/nova/+bug/1747496] and the source code which it said to add is already in my nova code. Anyone have any suggestions? Mit freundlichen Grüßen/ with best regards, Yatindra Shashi IoTG DE- Intel Corporation Munich, Germany Intel Deutschland GmbH Registered Address: Am Campeon 10-12, 85579 Neubiberg, Germany Tel: +49 89 99 8853-0, www.intel.de Managing Directors: Christin Eisenschmid, Gary Kershaw Chairperson of the Supervisory Board: Nicole Lau Registered Office: Munich Commercial Register: Amtsgericht Muenchen HRB 186928

1 0

[release] Release countdown for week R-19, Nov 30 - Dec 04
by Herve Beraud 04 Dec '20

04 Dec '20

Greetings Everyone! Development Focus ----------------- We are now past the Wallaby-1 milestone. Teams should now be focused on feature development and completion of release cycle goals [0]. [0] https://governance.openstack.org/tc/goals/selected/wallaby/index.html General Information ------------------- Our next milestone in this development cycle will be Wallaby-2, on 21 January, 2021. This milestone is when we freeze the list of deliverables that will be included in the Wallaby final release, so if you plan to introduce new deliverables in this release, please propose a change to add an empty deliverable file in the deliverables/wallaby directory of the openstack/releases repository. Now is also generally a good time to look at bugfixes that were introduced in the master branch that might make sense to be backported and released in a stable release. If you have any question around the OpenStack release process, feel free to ask on this mailing-list or on the #openstack-release channel on IRC. Upcoming Deadlines & Dates -------------------------- Cinder Spec Freeze: 18 December, 2020 Manila Spec Freeze: 25 December, 2020 Wallaby-2 Milestone: 21 January, 2021 Hervé Beraud (hberaud) and the Release Management Team -- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/ https://twitter.com/4383hberaud -----BEGIN PGP SIGNATURE----- wsFcBAABCAAQBQJb4AwCCRAHwXRBNkGNegAALSkQAHrotwCiL3VMwDR0vcja10Q+ Kf31yCutl5bAlS7tOKpPQ9XN4oC0ZSThyNNFVrg8ail0SczHXsC4rOrsPblgGRN+ RQLoCm2eO1AkB0ubCYLaq0XqSaO+Uk81QxAPkyPCEGT6SRxXr2lhADK0T86kBnMP F8RvGolu3EFjlqCVgeOZaR51PqwUlEhZXZuuNKrWZXg/oRiY4811GmnvzmUhgK5G 5+f8mUg74hfjDbR2VhjTeaLKp0PhskjOIKY3vqHXofLuaqFDD+WrAy/NgDGvN22g glGfj472T3xyHnUzM8ILgAGSghfzZF5Skj2qEeci9cB6K3Hm3osj+PbvfsXE/7Kw m/xtm+FjnaywZEv54uCmVIzQsRIm1qJscu20Qw6Q0UiPpDFqD7O6tWSRKdX11UTZ hwVQTMh9AKQDBEh2W9nnFi9kzSSNu4OQ1dRMcYHWfd9BEkccezxHwUM4Xyov5Fe0 qnbfzTB1tYkjU78loMWFaLa00ftSxP/DtQ//iYVyfVNfcCwfDszXLOqlkvGmY1/Y F1ON0ONekDZkGJsDoS6QdiUSn8RZ2mHArGEWMV00EV5DCIbCXRvywXV43ckx8Z+3 B8qUJhBqJ8RS2F+vTs3DTaXqcktgJ4UkhYC2c1gImcPRyGrK9VY0sCT+1iA+wp/O v6rDpkeNksZ9fFSyoY2o =ECSj -----END PGP SIGNATURE-----

1 0

[Interop]
by Kanevsky, Arkady 03 Dec '20

03 Dec '20

Team, I looked at https://www.openstack.org/brand/interop/. Looks like it had not been touched for a while. It does not list any add-on powered program. But it does list latest approved 2020.06 guidelines. Should we add it a verbiage for orchestration and DNS add-ons? And shortly about file system. Thanks, Arkady Kanevsky, Ph.D. SP Chief Technologist & DE Dell EMC office of CTO Dell Inc. One Dell Way, MS PS2-91 Round Rock, TX 78682, USA Phone: 512 7204955

2 4

[tripleo] wallaby-1 milestone and open specs
by Marios Andreou 03 Dec '20

03 Dec '20

Hi TripleO a reminder that this week is the Wallaby-1 milestone. As discussed at the last tripleo irc meeting [1] we should merge all specs by wallaby-1 if we are going to realistically deliver those things during W. Some specs have now merged and if you didn't already do so you can read them at [2]. There are still a few that are in review [3]. Call to all core reviewers please try and find time to review those over the next few days, in particular: network ports v2 @ [4], frrouter/bgp @ [5] and ephemeral heat [6]. Proposers of those specs please try respond quickly to reviewer comments so we can merge asap. thank you marios [1] http://eavesdrop.openstack.org/meetings/tripleo/2020/tripleo.2020-11-24-14.… [2] https://opendev.org/openstack/tripleo-specs/src/branch/master/specs/wallaby [3] https://review.opendev.org/q/project:openstack/tripleo-specs+status:open [4] https://review.opendev.org/c/openstack/tripleo-specs/+/760536 [5] https://review.opendev.org/c/openstack/tripleo-specs/+/758249 [6] https://review.opendev.org/c/openstack/tripleo-specs/+/765000

2 1

[neutron][stable] Backport of the patch which bumps RPC version
by Slawek Kaplonski 03 Dec '20

03 Dec '20

Hi, Some time ago we backported in Neutron patch [1] which caused bug [2]. Patch [1] was merged in the Ussuri development cycle so it is already in Ussuri and Victoria. Our mistake was that we merged it then without bump of the RPC version and without code which would provide backward compatybility between old agent and new neutron-server and that's why [2] happens. Now, as we know that, we have proposed patch [3] to fix it in master branch. And my question is - can we backport fix [3] to the stable/victoria and stable/ ussuri to fix the original issue caused by [1] there? In general I know that we shouldn't do that but here are the reasons why we would like to do it in this specific case: - rpc version which we want to change now wasn't changed since Train at least so there will be no any conflict with that, - bump rpc version now and provide backward compatybility on neutron-server will make upgrades Train->Ussuri and minor updates in Ussuri easier as there will be no similar issue like is described in [2] anymore, - patch [1] was already included in Ussuri and Victoria from master branch, it wasn't really cherry-picked there so it actually should be there since the beginning. Based on those reasons mentioned about and also becuase in general it is forbiden by stable policy to backport changes like that to stable branches I would like to know opinion from wider community, especially stable-core-maint team, about what would be the best approach to fix that issue: backport of [3] to stable/{ussuri,victoria} or revert [1] in stable/{ussuri,victoria}. [1] https://review.opendev.org/c/openstack/neutron/+/712632 [2] https://bugs.launchpad.net/neutron/+bug/1903531 [3] https://review.opendev.org/c/openstack/neutron/+/764108 -- Slawek Kaplonski Principal Software Engineer Red Hat

2 2

[neutron] default(ish) firewall rules
by Vladimir Prokofev 03 Dec '20

03 Dec '20

Hello. I'm running Queens private cloud with few separate projects inside. Guests in those projects have 2 networks - public, which is a provider network with public IP addresses, and private which is a VXLAN overlay network specific to the project. That's the setup, now here's the issue. They're mostly Windows guests there, and they tend to have browser service enabled on both public and private networks. This leads to situations where guests from one project can see guests in other projects over a public network via NetBIOS/SMB protocols, which is undesirable. I have two partial solutions in mind. Create some default firewall rule, similar to that exists by default for DHCP protocol that prohibit guests to act as DHCP server, but for UDP 137-139 port range. But not only I completely forgot how to do this(I think I saw some documentation about it ~2 years ago), but this will also block said protocol over private networks too, which is not an ideal solution. I would still love it if someone could point me to a proper documentation here. Second option is to add similar entries to security group rules. This will allow public/private interface differentiation by applying different security group to different interfaces, but introduces the possibility for cloud operator to delete those entries(either by mistake, or explicitly) which will lead to protocol being allowed once again. Anyone has any idea of a better solution here?

2 3

[tripleo] next meeting Tuesday Dec 08 @ 1400 UTC in #tripleo
by Marios Andreou 03 Dec '20

03 Dec '20

The next scheduled TripleO irc meeting is ** Tuesday 08th December at 1400 UTC in #tripleo. ** ** https://etherpad.opendev.org/p/tripleo-meeting-items ** Please add anything you want to raise at https://etherpad.opendev.org/p/tripleo-meeting-items This could be anything including review requests, blocking issues or to socialise ongoing or planned work. Our last meeting was held on Nov 24th - you can find the logs there http://eavesdrop.openstack.org/meetings/tripleo/2020/tripleo.2020-11-24-14.… thanks, marios

1 0

[ussuri] [neutron] deploy an additional compute node that resides in a different network
by Pavlos Basaras 03 Dec '20

03 Dec '20

1 1

[neutron] Drivers meeting agenda for 04.12.2020
by Slawek Kaplonski 03 Dec '20

03 Dec '20

Hi, Agenda for drivers meeting [1] this week have to new RFEs to discuss: * https://bugs.launchpad.net/neutron/+bug/1905115 * https://bugs.launchpad.net/neutron/+bug/1905295 And there is also "on demand" topic added by Rodolfo: "Smart-Nic Management Overall Design" (Nova spec). Neutron needs to add a new extension to provide to Nova the device profile information. This is a new string parameter added to the port blob and should be included when the port is created. Reference: https://review.opendev.org/c/openstack/nova-specs/+/742785/12/specs/wallaby… Rodolfo - is Your topic related to the RFE https://bugs.launchpad.net/neutron/+bug/1906602 ? See You tomorrow on the meeting :) [1] https://wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda -- Slawek Kaplonski Principal Software Engineer Red Hat

2 1

Re: [all] Dynamic Zuul results table in Gerrit 3
by Radosław Piliszek 03 Dec '20

03 Dec '20

On Thu, Dec 3, 2020 at 10:33 AM Marcin Juszkiewicz <marcin.juszkiewicz(a)linaro.org> wrote: > > W dniu 03.12.2020 o 10:22, Radosław Piliszek pisze: > > Hello Fellow OpenStack and OpenDev Folks! > > > > TL;DR click on [3] and enjoy. > > Rename to *.user.js so Tampermonkey will recognize it as userscript and > add window around with Install button. > I, personally, hate this "feature" of Tampermonkey but sure - if it makes it easier for you. ;-) Done. Anyone - just click on "Raw" and you will be pestered by Tampermonkey to install the script. > > However, inspired by gibi's work, I decided to finally sit down and > > fix it to work with Gerrit 3 and here it comes: [3]. > > Works well on Chrome with Tampermonkey. Not tested others. > > Firefox with Tampermonkey - script works. > Yay, thanks for confirming! > > I hope you will enjoy this little helper (I do). > > Nice job! > Well, thank you! :-) > It does not catch all Zuul jobs. For Kolla patches AArch64 jobs are not > listed. I have already replied on IRC but will repeat here for others. The dynamic part includes all the running queues. However, the static part parses only a single comment and AArch64 is in a different one. I am obviously biased (being x86-only folk) but I find it more problematic than worth it to hack it any further. I hope a proper solution arrives sooner. :-) > > I know the script looks super fugly but it generally boils down to a > > mix of styles of 3 people and Gerrit having funky UI rendering. > > > Finally, I'd also like to thank hrw (Marcin Juszkiewicz) for linking > > me to the original Michel's script in 2019. > > YW. > -yoctozepto

1 0

[CLOUDKITTY] - Prometheus metrics.yml sample?
by Gaël THEROND 02 Dec '20

02 Dec '20

Hi everyone, I'm currently finishing our cloudkitty implementation, but I'm facing an issue. For now, our cloudkitty-processor process raise a traceback like this: http://paste.openstack.org/show/Y2ZiYPtZSKzvZk93yNWC/ I can't find any reliable documentation describing how to use prometheus with cloudkitty, so I'm kind of using the guess/read the code way to integrate it, but I'm a bit confused so far. My current metric.yml look like this: http://paste.openstack.org/show/6X23ZfVm1iDMruGy3Gpp/ I've created the appropriate group/service/threshold etc but it still continues to raise the same error. I'm using this openstack_exporter: https://github.com/openstack-exporter/openstack-exporter/releases/tag/v1.1.0 I'm running a Train release Openstack platform if it can help. So, if anyone is having a successful cloudkitty/prometheus integration willing to give a hand, I'll be more than happy ;-) Thanks!

1 0