July 2021 - openstack-discuss - lists.openstack.org

[powervmstackers][multi-arch-sig][stable] periodic-stable errors
by Előd Illés 30 Jul '21

30 Jul '21

Hi PowerVMStackers and Multi-Arch SIG members, In the last couple of months the periodic-stable job errors (and thus the mails on openstack-stable-maint mailing list [1], where mails are sent from every failing jobs) increased significantly. I've talked with the infra team as the mail traffic is quite visible for them as well. I've collected the recent failures with examples that are failing constantly. Please take a look at them and try to fix them wherever it is possible. Since the old branches seem quite abandoned in some cases, they might need maintainers to step up to keep those gates healthy, or in case there are no maintainers, then it might worth to think of transitioning those broken old branches to End of Life. :/ And the list: * ocata is mostly End of Life -- (also there is a patch to EOL ocata of the *-powervm: https://review.opendev.org/c/openstack/releases/+/801123 ) ceilometer-powervm: ocata - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/151e90c3c3eb48779759f469d76f02d7 nova-powervm: ocata - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/535ffa6750c74ab7a886f6fb3838ff4f * unit tests are broken: nova-powervm: pike - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/27bd093f615341e7a5563e3b9ea86f31 * dependency version conflict: nova-powervm: train - openstack-tox-py36 -- https://zuul.opendev.org/t/openstack/build/f9afc55de6dc452cbc88d98c837ab58f nova-powervm: train - openstack-tox-py37 -- https://zuul.opendev.org/t/openstack/build/0ea69ad9be8c4a269613573fa5014fe4 [1] http://lists.openstack.org/pipermail/openstack-stable-maint/2021-July/threa… Thanks, Előd

1 0

[telemetry][stable] periodic-stable errors
by Előd Illés 30 Jul '21

30 Jul '21

Hi Telemetry Team, In the last couple of months the periodic-stable job errors (and thus the mails on openstack-stable-maint mailing list [1], where mails are sent from every failing jobs) increased significantly. I've talked with the infra team as the mail traffic is quite visible for them as well. I've collected the recent failures with examples that are failing constantly. Please take a look at them and try to fix them wherever it is possible. Since the old branches seem quite abandoned in some cases, they might need maintainers to step up to keep those gates healthy, or in case there are no maintainers, then it might worth to think of transitioning those broken old branches to End of Life. :/ And the list (with possible root causes): * tenacity should be constrained for py27: ceilometer: pike - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/4bcb7e71d507465ea799cd289e6cc920 ceilometer: queens - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/583d52b6096745ddbb18da23cf79fa75 ceilometer: rocky - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/03279061fddd4d14819c04feda3a1806 * kombu version should be constrained for py27: ceilometer: stein - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/219139b1814b4fd591ee7dc199f2e3da [1] http://lists.openstack.org/pipermail/openstack-stable-maint/2021-July/threa… Thanks, Előd

1 0

[oslo][stable] periodic-stable errors
by Előd Illés 30 Jul '21

30 Jul '21

1 0

[centos][kolla-ansible][wallaby][vpnaas] I need Help
by Franck VEDEL 30 Jul '21

30 Jul '21

Hello. I try one last time to get some help, answers to my questions because I have been trying for 2 weeks to get the vpnaas service to work under Wallaby, without success. Still, I have no problem under Victoria with vpnaas. However, on my last installation which must work in September (to be used by students), without my understanding why, the horizon container of my centos (rocky) / kolla-ansible / victoria installation does not want to launch and I do not have no logs. So, can't use Victoria. I am trying Wallaby, everything works except vpnaas. My questions: how to get the logs of this hoorizon container which does not start (restart every 20 seconds)? how to know if it is a bug in wallaby with vpnaas? Really thank you if anyone can help me move forward. Franck

5 22

RE: [ops][nova][victoria] Unable to Migrate: Host filter ignoring hosts
by DHilsbos＠performair.com 29 Jul '21

29 Jul '21

All; Thank you for reading my previous email, despite its poor Subject. I have attached a subset of the Nova Scheduler log, with debugging enabled. I have added line numbers to the beginning, in order to facilitate referencing. At line 18 it appears to select the requested server for the migration, but then at line 38, it rejects it. Am I missing something here? Is it unable to assign the resources through placement? Dominic L. Hilsbos, MBA Vice President – Information Technology Perform Air International Inc. DHilsbos(a)PerformAir.com www.PerformAir.com -----Original Message----- From: melanie witt [mailto:melwittt@gmail.com] Sent: Wednesday, July 28, 2021 1:24 PM To: Dominic Hilsbos; openstack-discuss(a)lists.openstack.org Subject: Re: [ops][nova] On Wed, 28 Jul 2021, 20:10 +0000, <DHilsbos(a)performair.com> wrote: > All; > > I'm having a problem, though I'm not certain of the full scope. > > The most obvious issue is that I can't live migrate instances. The server I want to send the instance to gets filtered out, though I don't see any logs that tell me why it's being filtered out. > > It might be related that all of my new instances seems to land on a single host. > > An pointers on where to look for logs for Host Filters? You'll want to set [DEFAULT]debug = True in the nova.conf for your nova-scheduler service and restart or HUP the service. And then the logging per scheduler filter (each one will show the starting and ending number of hosts) will be included at DEBUG log level in the nova-scheduler log. -melwitt

3 5

[OSSA-2021-002] Nova: Open Redirect in noVNC proxy (CVE-2021-3654)
by Jeremy Stanley 29 Jul '21

29 Jul '21

=========================================== OSSA-2021-002: Open Redirect in noVNC proxy =========================================== :Date: July 29, 2021 :CVE: CVE-2021-3654 Affects ~~~~~~~ - Nova: <21.2.3, >=22.0.0 <22.2.3, >=23.0.0 <23.0.2 Description ~~~~~~~~~~~ Swe Aung, Shahaan Ayyub, and Salman Khan with the Monash University Cyber Security team reported a vulnerability affecting Nova's noVNC proxying implementation which exposed access to a well-known redirect behavior in the Python standard library's http.server.SimpleHTTPRequestHandler and thus noVNC's WebSockifyRequestHandler which uses it. By convincing a user to follow a specially-crafted novncproxy URL, the user could be redirected to an unrelated site under control of the attacker in an attempt to convince them to divulge credentials or other sensitive data. All Nova deployments with novncproxy enabled are affected. Patches ~~~~~~~ - https://review.opendev.org/791807 (Train) - https://review.opendev.org/791806 (Ussuri) - https://review.opendev.org/791805 (Victoria) - https://review.opendev.org/791577 (Wallaby) - https://review.opendev.org/791297 (Xena) Credits ~~~~~~~ - Swe Aung from Monash University Cyber Security team (CVE-2021-3654) - Shahaan Ayyub from Monash University Cyber Security team (CVE-2021-3654) - Salman Khan from Monash University Cyber Security team (CVE-2021-3654) References ~~~~~~~~~~ - https://launchpad.net/bugs/1927677 - https://bugs.python.org/issue32084 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3654 Notes ~~~~~ - The stable/train branch is under extended maintenance and will receive no new point releases, but a patch for it is provided as a courtesy. -- Jeremy Stanley

1 0

[cinder] No Cinder Bug Meeting on 4 August
by Sofia Enriquez 29 Jul '21

29 Jul '21

I'll send the email report as usual. Please join the Cinder Xena R-9 virtual that day 1400-1600 UTC. Cheers, Sofia -- L. Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

[openstack-nova] Attached volume is not available in the VM
by Aleksander Wojtal 29 Jul '21

29 Jul '21

Hello, During our testing we perform reboot of compute during volume attached task. Result is as follows. Volume is marked as attached to VM (also in DB) ceeinfra@lcm1:~> openstack volume list +--------------------------------------+-----------------------------------------------------------------------------+-----------+------+--------------------------------------------------------------------------------------------------------------+ | ID | Name | Status | Size | Attached to | +--------------------------------------+-----------------------------------------------------------------------------+-----------+------+--------------------------------------------------------------------------------------------------------------+ | c52d406c-5587-445d-9da1-436ffbbe3541 | vol_neXt-488 | available | 10 | | | f3e45efc-35eb-4f95-8e71-f50b5cb69028 | RebootOfComputeHostWhilePerformingVolumeOperations-Volume-0618_19_45_12_669 | in-use | 20 | Attached to neXt-377_VM1--RebootOfComputeHostWhilePerformingVolumeOperations--0618_19_44_16_775 on /dev/vdb | | 1bd81392-e2c9-4725-93c8-baa484924f21 | vol_neXt-488 | available | 10 | | | 919db17c-0729-409c-bf59-74539edcea47 | vol_neXt-488 | available | 10 | | +--------------------------------------+-----------------------------------------------------------------------------+-----------+------+--------------------------------------------------------------------------------------------------------------+ >From VM perspective too. ceeinfra@lcm1:~> openstack server show neXt-377_VM1--RebootOfComputeHostWhilePerformingVolumeOperations--0618_19_44_16_775 +-------------------------------------+-------------------------------------------------------------------------------------+ | Field | Value | +-------------------------------------+-------------------------------------------------------------------------------------+ | OS-DCF:diskConfig | MANUAL | | OS-EXT-AZ:availability_zone | nova | | OS-EXT-SRV-ATTR:host | compute-0-11.k2.ericsson.se | | OS-EXT-SRV-ATTR:hypervisor_hostname | compute-0-11.k2.ericsson.se | | OS-EXT-SRV-ATTR:instance_name | instance-00001edc | | OS-EXT-STS:power_state | Running | | OS-EXT-STS:task_state | None | | OS-EXT-STS:vm_state | active | | OS-SRV-USG:launched_at | 2021-06-18T14:14:58.000000 | | OS-SRV-USG:terminated_at | None | | accessIPv4 | | | accessIPv6 | | | addresses | NovaController-Network-0618_19_44_16_852=10.0.0.5 | | config_drive | True | | created | 2021-06-18T14:14:19Z | | flavor | m1.small (2) | | hostId | 5078bfd4fabd8b2e7c9f4554b3ac08d536ceebb5f393db4d38c8ff60 | | id | 95ed49ed-b3f8-46ae-80a0-544b939c50b7 | | image | JCAT_Common_CirrOS_i386 (b71f3fbd-59f1-4c29-a296-5065fe0406f7) | | key_name | None | | name | neXt-377_VM1--RebootOfComputeHostWhilePerformingVolumeOperations--0618_19_44_16_775 | | progress | 0 | | project_id | b63725c8ebaf43ebabbed497f41eb71c | | properties | ha-policy='managed-on-host' | | scheduler_hints | {} | | security_groups | name='default' | | status | ACTIVE | | updated | 2021-06-18T14:22:07Z | | user_id | f490f07b813748698e56ca7641d46a72 | | volumes_attached | id='f3e45efc-35eb-4f95-8e71-f50b5cb69028' | +-------------------------------------+-------------------------------------------------------------------------------------+ >From Libvirt perspective, volume is not attached to VM compute-0-11:/var/log # virsh dumpxml instance-00001edc <domain type='kvm' id='1'> <name>instance-00001edc</name> <uuid>95ed49ed-b3f8-46ae-80a0-544b939c50b7</uuid> (...) <devices> <emulator>/usr/bin/qemu-system-x86_64</emulator> <disk type='file' device='disk'> <driver name='qemu' type='qcow2' cache='directsync'/> <source file='/var/lib/nova/instances/95ed49ed-b3f8-46ae-80a0-544b939c50b7/disk' index='2'/> <backingStore type='file' index='3'> <format type='raw'/> <source file='/var/lib/nova/instances/_base/af82cd8216adb002916bb9e422a3fbb637022ec6'/> <backingStore/> </backingStore> <target dev='vda' bus='virtio'/> <alias name='virtio-disk0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </disk> <disk type='file' device='cdrom'> <driver name='qemu' type='raw' cache='directsync'/> <source file='/var/lib/nova/instances/95ed49ed-b3f8-46ae-80a0-544b939c50b7/disk.config' index='1'/> <backingStore/> <target dev='hdd' bus='ide'/> <readonly/> <alias name='ide0-1-1'/> <address type='drive' controller='0' bus='1' target='0' unit='1'/> </disk> <controller type='usb' index='0' model='piix3-uhci'> (...) </domain> System does not provide any indication of the problem. There should be some kind of indication to user that volume attachment was not completed. Pozdrawiam / Best regards, Aleksander Wojtal, Junior Software Engineer TietoEVRY BU Telco Cloud Infra & Applications email aleksander.wojtal(a)tietoevry.com al. Piastów 30, 71-064 Szczecin, tietoevry.com [cid:image001.png@01D77EE0.7C2AE900] Please note: The information contained in this message may be legally privileged, confidential and protected from disclosure. If you received this in error, please notify the sender immediately and delete the message from your computer. Thank you.

3 6

[TripleO] next irc meeting Tuesday 03 August @ 1400 UTC in OFTC #tripleo
by Marios Andreou 29 Jul '21

29 Jul '21

Reminder the next TripleO irc meeting is this coming Tuesday agenda: https://wiki.openstack.org/wiki/Meetings/TripleO one-off items: https://etherpad.opendev.org/p/tripleo-meeting-items (feel free to add any tripleo status/ongoing work etc to the etherpad). Our last meeting was on Jul 20 - you can find logs @ https://meetings.opendev.org/meetings/tripleo/2021/tripleo.2021-07-20-14.00… Hope you can make it on Tuesday, regards, marios

1 0

[sdk] keystone group members list
by Valéry Tschopp 29 Jul '21

29 Jul '21

Hi all, With the openstacksdk, how can list the members of a Keystone group? The Keystone API exists https://docs.openstack.org/api-ref/identity/v3/?expanded=list-users-in-grou… but I didn't find the corresponding SDK functions... Thanks in advance Cheers, Valery -- SWITCH Valéry Tschopp, Software Engineer Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland Email: valery.tschopp(a)switch.ch Phone: +41 44 268 1544 https://www.switch.ch/

1 0