July 2021 - openstack-discuss - lists.openstack.org

[powervmstackers][multi-arch-sig][stable] periodic-stable errors
by Előd Illés 30 Jul '21

30 Jul '21

Hi PowerVMStackers and Multi-Arch SIG members, In the last couple of months the periodic-stable job errors (and thus the mails on openstack-stable-maint mailing list [1], where mails are sent from every failing jobs) increased significantly. I've talked with the infra team as the mail traffic is quite visible for them as well. I've collected the recent failures with examples that are failing constantly. Please take a look at them and try to fix them wherever it is possible. Since the old branches seem quite abandoned in some cases, they might need maintainers to step up to keep those gates healthy, or in case there are no maintainers, then it might worth to think of transitioning those broken old branches to End of Life. :/ And the list: * ocata is mostly End of Life -- (also there is a patch to EOL ocata of the *-powervm: https://review.opendev.org/c/openstack/releases/+/801123 ) ceilometer-powervm: ocata - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/151e90c3c3eb48779759f469d76f02d7 nova-powervm: ocata - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/535ffa6750c74ab7a886f6fb3838ff4f * unit tests are broken: nova-powervm: pike - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/27bd093f615341e7a5563e3b9ea86f31 * dependency version conflict: nova-powervm: train - openstack-tox-py36 -- https://zuul.opendev.org/t/openstack/build/f9afc55de6dc452cbc88d98c837ab58f nova-powervm: train - openstack-tox-py37 -- https://zuul.opendev.org/t/openstack/build/0ea69ad9be8c4a269613573fa5014fe4 [1] http://lists.openstack.org/pipermail/openstack-stable-maint/2021-July/threa… Thanks, Előd

1 0

[telemetry][stable] periodic-stable errors
by Előd Illés 30 Jul '21

30 Jul '21

Hi Telemetry Team, In the last couple of months the periodic-stable job errors (and thus the mails on openstack-stable-maint mailing list [1], where mails are sent from every failing jobs) increased significantly. I've talked with the infra team as the mail traffic is quite visible for them as well. I've collected the recent failures with examples that are failing constantly. Please take a look at them and try to fix them wherever it is possible. Since the old branches seem quite abandoned in some cases, they might need maintainers to step up to keep those gates healthy, or in case there are no maintainers, then it might worth to think of transitioning those broken old branches to End of Life. :/ And the list (with possible root causes): * tenacity should be constrained for py27: ceilometer: pike - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/4bcb7e71d507465ea799cd289e6cc920 ceilometer: queens - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/583d52b6096745ddbb18da23cf79fa75 ceilometer: rocky - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/03279061fddd4d14819c04feda3a1806 * kombu version should be constrained for py27: ceilometer: stein - openstack-tox-py27 -- https://zuul.opendev.org/t/openstack/build/219139b1814b4fd591ee7dc199f2e3da [1] http://lists.openstack.org/pipermail/openstack-stable-maint/2021-July/threa… Thanks, Előd

1 0

[oslo][stable] periodic-stable errors
by Előd Illés 30 Jul '21

30 Jul '21

1 0

[centos][kolla-ansible][wallaby][vpnaas] I need Help
by Franck VEDEL 30 Jul '21

30 Jul '21

Hello. I try one last time to get some help, answers to my questions because I have been trying for 2 weeks to get the vpnaas service to work under Wallaby, without success. Still, I have no problem under Victoria with vpnaas. However, on my last installation which must work in September (to be used by students), without my understanding why, the horizon container of my centos (rocky) / kolla-ansible / victoria installation does not want to launch and I do not have no logs. So, can't use Victoria. I am trying Wallaby, everything works except vpnaas. My questions: how to get the logs of this hoorizon container which does not start (restart every 20 seconds)? how to know if it is a bug in wallaby with vpnaas? Really thank you if anyone can help me move forward. Franck

5 22

RE: [ops][nova][victoria] Unable to Migrate: Host filter ignoring hosts
by DHilsbos＠performair.com 29 Jul '21

29 Jul '21

All; Thank you for reading my previous email, despite its poor Subject. I have attached a subset of the Nova Scheduler log, with debugging enabled. I have added line numbers to the beginning, in order to facilitate referencing. At line 18 it appears to select the requested server for the migration, but then at line 38, it rejects it. Am I missing something here? Is it unable to assign the resources through placement? Dominic L. Hilsbos, MBA Vice President – Information Technology Perform Air International Inc. DHilsbos(a)PerformAir.com www.PerformAir.com -----Original Message----- From: melanie witt [mailto:melwittt@gmail.com] Sent: Wednesday, July 28, 2021 1:24 PM To: Dominic Hilsbos; openstack-discuss(a)lists.openstack.org Subject: Re: [ops][nova] On Wed, 28 Jul 2021, 20:10 +0000, <DHilsbos(a)performair.com> wrote: > All; > > I'm having a problem, though I'm not certain of the full scope. > > The most obvious issue is that I can't live migrate instances. The server I want to send the instance to gets filtered out, though I don't see any logs that tell me why it's being filtered out. > > It might be related that all of my new instances seems to land on a single host. > > An pointers on where to look for logs for Host Filters? You'll want to set [DEFAULT]debug = True in the nova.conf for your nova-scheduler service and restart or HUP the service. And then the logging per scheduler filter (each one will show the starting and ending number of hosts) will be included at DEBUG log level in the nova-scheduler log. -melwitt

3 5

[OSSA-2021-002] Nova: Open Redirect in noVNC proxy (CVE-2021-3654)
by Jeremy Stanley 29 Jul '21

29 Jul '21

=========================================== OSSA-2021-002: Open Redirect in noVNC proxy =========================================== :Date: July 29, 2021 :CVE: CVE-2021-3654 Affects ~~~~~~~ - Nova: <21.2.3, >=22.0.0 <22.2.3, >=23.0.0 <23.0.2 Description ~~~~~~~~~~~ Swe Aung, Shahaan Ayyub, and Salman Khan with the Monash University Cyber Security team reported a vulnerability affecting Nova's noVNC proxying implementation which exposed access to a well-known redirect behavior in the Python standard library's http.server.SimpleHTTPRequestHandler and thus noVNC's WebSockifyRequestHandler which uses it. By convincing a user to follow a specially-crafted novncproxy URL, the user could be redirected to an unrelated site under control of the attacker in an attempt to convince them to divulge credentials or other sensitive data. All Nova deployments with novncproxy enabled are affected. Patches ~~~~~~~ - https://review.opendev.org/791807 (Train) - https://review.opendev.org/791806 (Ussuri) - https://review.opendev.org/791805 (Victoria) - https://review.opendev.org/791577 (Wallaby) - https://review.opendev.org/791297 (Xena) Credits ~~~~~~~ - Swe Aung from Monash University Cyber Security team (CVE-2021-3654) - Shahaan Ayyub from Monash University Cyber Security team (CVE-2021-3654) - Salman Khan from Monash University Cyber Security team (CVE-2021-3654) References ~~~~~~~~~~ - https://launchpad.net/bugs/1927677 - https://bugs.python.org/issue32084 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3654 Notes ~~~~~ - The stable/train branch is under extended maintenance and will receive no new point releases, but a patch for it is provided as a courtesy. -- Jeremy Stanley

1 0

[cinder] No Cinder Bug Meeting on 4 August
by Sofia Enriquez 29 Jul '21

29 Jul '21

I'll send the email report as usual. Please join the Cinder Xena R-9 virtual that day 1400-1600 UTC. Cheers, Sofia -- L. Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

[openstack-nova] Attached volume is not available in the VM
by Aleksander Wojtal 29 Jul '21

29 Jul '21

Hello, During our testing we perform reboot of compute during volume attached task. Result is as follows. Volume is marked as attached to VM (also in DB) ceeinfra@lcm1:~> openstack volume list +--------------------------------------+-----------------------------------------------------------------------------+-----------+------+--------------------------------------------------------------------------------------------------------------+ | ID | Name | Status | Size | Attached to | +--------------------------------------+-----------------------------------------------------------------------------+-----------+------+--------------------------------------------------------------------------------------------------------------+ | c52d406c-5587-445d-9da1-436ffbbe3541 | vol_neXt-488 | available | 10 | | | f3e45efc-35eb-4f95-8e71-f50b5cb69028 | RebootOfComputeHostWhilePerformingVolumeOperations-Volume-0618_19_45_12_669 | in-use | 20 | Attached to neXt-377_VM1--RebootOfComputeHostWhilePerformingVolumeOperations--0618_19_44_16_775 on /dev/vdb | | 1bd81392-e2c9-4725-93c8-baa484924f21 | vol_neXt-488 | available | 10 | | | 919db17c-0729-409c-bf59-74539edcea47 | vol_neXt-488 | available | 10 | | +--------------------------------------+-----------------------------------------------------------------------------+-----------+------+--------------------------------------------------------------------------------------------------------------+ >From VM perspective too. ceeinfra@lcm1:~> openstack server show neXt-377_VM1--RebootOfComputeHostWhilePerformingVolumeOperations--0618_19_44_16_775 +-------------------------------------+-------------------------------------------------------------------------------------+ | Field | Value | +-------------------------------------+-------------------------------------------------------------------------------------+ | OS-DCF:diskConfig | MANUAL | | OS-EXT-AZ:availability_zone | nova | | OS-EXT-SRV-ATTR:host | compute-0-11.k2.ericsson.se | | OS-EXT-SRV-ATTR:hypervisor_hostname | compute-0-11.k2.ericsson.se | | OS-EXT-SRV-ATTR:instance_name | instance-00001edc | | OS-EXT-STS:power_state | Running | | OS-EXT-STS:task_state | None | | OS-EXT-STS:vm_state | active | | OS-SRV-USG:launched_at | 2021-06-18T14:14:58.000000 | | OS-SRV-USG:terminated_at | None | | accessIPv4 | | | accessIPv6 | | | addresses | NovaController-Network-0618_19_44_16_852=10.0.0.5 | | config_drive | True | | created | 2021-06-18T14:14:19Z | | flavor | m1.small (2) | | hostId | 5078bfd4fabd8b2e7c9f4554b3ac08d536ceebb5f393db4d38c8ff60 | | id | 95ed49ed-b3f8-46ae-80a0-544b939c50b7 | | image | JCAT_Common_CirrOS_i386 (b71f3fbd-59f1-4c29-a296-5065fe0406f7) | | key_name | None | | name | neXt-377_VM1--RebootOfComputeHostWhilePerformingVolumeOperations--0618_19_44_16_775 | | progress | 0 | | project_id | b63725c8ebaf43ebabbed497f41eb71c | | properties | ha-policy='managed-on-host' | | scheduler_hints | {} | | security_groups | name='default' | | status | ACTIVE | | updated | 2021-06-18T14:22:07Z | | user_id | f490f07b813748698e56ca7641d46a72 | | volumes_attached | id='f3e45efc-35eb-4f95-8e71-f50b5cb69028' | +-------------------------------------+-------------------------------------------------------------------------------------+ >From Libvirt perspective, volume is not attached to VM compute-0-11:/var/log # virsh dumpxml instance-00001edc <domain type='kvm' id='1'> <name>instance-00001edc</name> <uuid>95ed49ed-b3f8-46ae-80a0-544b939c50b7</uuid> (...) <devices> <emulator>/usr/bin/qemu-system-x86_64</emulator> <disk type='file' device='disk'> <driver name='qemu' type='qcow2' cache='directsync'/> <source file='/var/lib/nova/instances/95ed49ed-b3f8-46ae-80a0-544b939c50b7/disk' index='2'/> <backingStore type='file' index='3'> <format type='raw'/> <source file='/var/lib/nova/instances/_base/af82cd8216adb002916bb9e422a3fbb637022ec6'/> <backingStore/> </backingStore> <target dev='vda' bus='virtio'/> <alias name='virtio-disk0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </disk> <disk type='file' device='cdrom'> <driver name='qemu' type='raw' cache='directsync'/> <source file='/var/lib/nova/instances/95ed49ed-b3f8-46ae-80a0-544b939c50b7/disk.config' index='1'/> <backingStore/> <target dev='hdd' bus='ide'/> <readonly/> <alias name='ide0-1-1'/> <address type='drive' controller='0' bus='1' target='0' unit='1'/> </disk> <controller type='usb' index='0' model='piix3-uhci'> (...) </domain> System does not provide any indication of the problem. There should be some kind of indication to user that volume attachment was not completed. Pozdrawiam / Best regards, Aleksander Wojtal, Junior Software Engineer TietoEVRY BU Telco Cloud Infra & Applications email aleksander.wojtal(a)tietoevry.com al. Piastów 30, 71-064 Szczecin, tietoevry.com [cid:image001.png@01D77EE0.7C2AE900] Please note: The information contained in this message may be legally privileged, confidential and protected from disclosure. If you received this in error, please notify the sender immediately and delete the message from your computer. Thank you.

3 6

[TripleO] next irc meeting Tuesday 03 August @ 1400 UTC in OFTC #tripleo
by Marios Andreou 29 Jul '21

29 Jul '21

Reminder the next TripleO irc meeting is this coming Tuesday agenda: https://wiki.openstack.org/wiki/Meetings/TripleO one-off items: https://etherpad.opendev.org/p/tripleo-meeting-items (feel free to add any tripleo status/ongoing work etc to the etherpad). Our last meeting was on Jul 20 - you can find logs @ https://meetings.opendev.org/meetings/tripleo/2021/tripleo.2021-07-20-14.00… Hope you can make it on Tuesday, regards, marios

1 0

[sdk] keystone group members list
by Valéry Tschopp 29 Jul '21

29 Jul '21

Hi all, With the openstacksdk, how can list the members of a Keystone group? The Keystone API exists https://docs.openstack.org/api-ref/identity/v3/?expanded=list-users-in-grou… but I didn't find the corresponding SDK functions... Thanks in advance Cheers, Valery -- SWITCH Valéry Tschopp, Software Engineer Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland Email: valery.tschopp(a)switch.ch Phone: +41 44 268 1544 https://www.switch.ch/

1 0

[kolla][keystone][openstack-ansible][deploy][sdk] enforcing scope in Kolla-Ansible deployment
by James Kirsch 29 Jul '21

29 Jul '21

I'm working on adding the option to enable enforce_scope in keystone during Kolla-Ansible deployment. I've revived this transaction to complete this work: https://review.opendev.org/c/openstack/kolla-ansible/+/692179 As part of that effort, I would like to also enable enforce_new_defaults in keystone. Deployment currently fails because the nova keystone user roles created during Kolla-Ansible deployment requires system scope. I can currently get around this using python-openstack: openstack role add --system all --user d7512be612454eff8a7f5bf5476b1531 admin Kolla-ansible relies on the OpenStack Ansible modules to create users and roles for deployment. Looking around the repositories, it does not appear that the openstack ansible module nor the openstacksdk supports granting system scope to a user role. Please let me know if this is not the case or if it is in current development. Otherwise, I could use guidance on what the next steps I could take or who I should talk to so I can move this forward. Thanks, James my awesome background music: http://www.generalfuzz.net about me: http://www.headphonejames.com

3 2

[kolla] Operator pain points
by Mark Goddard 29 Jul '21

29 Jul '21

Hi, The TC is looking at community goals for the Yoga release cycle, and has proposed resolving some operator pain points [1]. These pain points are naturally project-specific, and the first step is collecting some. They are looking for 1-2 points per project, but this is an interesting feedback exercise for us, so don't hold back. Please add any significant operator pain points you have for Kolla (or other projects) to the Etherpad [2]. Thanks, Mark [1] http://lists.openstack.org/pipermail/openstack-discuss/2021-July/023659.html [2] https://etherpad.opendev.org/p/pain-point-elimination

2 1

[Openstack][kolla][wallaby] swift installation
by Ignazio Cassano 29 Jul '21

29 Jul '21

Hello all, I want install swift but I do not have disks on controllers and on compute nodes. Is it possible to inventory a group of servers other than controllers or computes to install swift? In other words, I would like to insert in multinode inventory a new group of servers with disks for reinstalling swift. Thanks. Ignazio

2 2

[all][tc] Technical Committee next weekly meeting on July 29th at 1500 UTC
by Ghanshyam Mann 28 Jul '21

28 Jul '21

Hello Everyone, Technical Committee's next weekly meeting is scheduled for July 29th at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, June 28th, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1

[tc][cinder] early removal of 'enable_v3_api' option
by Brian Rosmaita 28 Jul '21

28 Jul '21

Hello TC members, Cinder has asserted the 'assert:follows-standard-deprecation' tag. This cycle, the long-deprecated Block Storage API v2 has been removed [0], at which time the 'enable_v2_api' option was also removed (which was appropriate since the option had been deprecated since Mitaka [1]). It turns out, however, that the corresponding 'enable_v3_api' option had never been deprecated. It has been deprecated in the current development branch by [0], but the team would like to know whether it is permissible to simply remove it in Xena without deprecating it for the following reasons: - The option was introduced by [1] in Mitaka. It has always had the default value: True. - In the Xena release, if the option is False, you can deploy the Block Storage API, but the only reachable resource from the endpoint is '/versions', which returns an empty list of available versions. This doesn't seem to be something that anyone would do on purpose. - If someone wants to deploy only the Block Storage API v2, this cannot be done in Xena by setting 'enable_v3_api' to False. So for that purpose, this option is already effectively a no-op in Xena. In short, we could leave the 'enable_v3_api' option as deprecated in the Xena release, but we can't imagine any circumstances under which someone would intentionally use it in its non-default value, so it seems pointless to keep it around ... except to satisfy the 'assert:follows-standard-deprecation' tag. To be clear, the Cinder team has no intention of violating or removing the 'assert:follows-standard-deprecation' tag. The point of this email is to ask the TC whether it would be permissible to simply remove the 'enable_v3_api' option in Xena (as opposed to deprecating the option in Xena and then waiting until Yoga development to remove it). Thanks for thinking about this! [0] https://review.opendev.org/c/openstack/cinder/+/792299 [1] https://review.opendev.org/c/openstack/cinder/+/224910

2 1

[ops][nova]
by DHilsbos＠performair.com 28 Jul '21

28 Jul '21

All; I'm having a problem, though I'm not certain of the full scope. The most obvious issue is that I can't live migrate instances. The server I want to send the instance to gets filtered out, though I don't see any logs that tell me why it's being filtered out. It might be related that all of my new instances seems to land on a single host. An pointers on where to look for logs for Host Filters? Thank you, Dominic L. Hilsbos, MBA Vice President - Information Technology Perform Air International Inc. DHilsbos(a)PerformAir.com www.PerformAir.com

3 2

[nova] Early migrate error - pain point?
by DHilsbos＠performair.com 28 Jul '21

28 Jul '21

All; Yesterday I ran into an issue where a live migration errored before starting the migration itself (libvirt version incompatibility). This left the instance in an error state, even though it continued to run normally on the original host. Has anyone else run into this? Could this be a candidate for the current pain point hunt? Thank you, Dominic L. Hilsbos, MBA Vice President - Information Technology Perform Air International Inc. DHilsbos(a)PerformAir.com www.PerformAir.com

2 4

[cinder] xena R-9 virtual mid-cycle on 4 August
by Brian Rosmaita 28 Jul '21

28 Jul '21

As mentioned at today's weekly meeting, the Cinder Xena R-9 virtual mid-cycle will be held: DATE: Wednesday 4 August 2021 TIME: 1400-1600 UTC LOCATION: https://bluejeans.com/3228528973 The meeting will be recorded. Please add topics to the mid-cycle etherpad: https://etherpad.opendev.org/p/cinder-xena-mid-cycles cheers, brian

1 0

[cinder] Bug deputy report for week of 2021-28-07
by Sofia Enriquez 28 Jul '21

28 Jul '21

Hello, This is a bug report from 2021-22-07 to 2021-28-07. You're welcome to join the Cinder Bug Meeting today. Weekly on Wednesday at 1500 UTC on #openstack-cinder Agenda: https://etherpad.opendev.org/p/cinder-bug-squad-meeting ----------------------------------------------------------------------------------------- High - https://bugs.launchpad.net/cinder/+bug/1937086 "extra_capabilities not added to pool stats". Assigned to Walt Boring. Medium - https://bugs.launchpad.net/cinder/+bug/1938196 "retype available volume fails with non root file access". Unassigned. - https://bugs.launchpad.net/cinder/+bug/1938240 "when the backend does not support consistency groups, creating generic groups is successful". Unassigned. - https://bugs.launchpad.net/python-cinderclient/+bug/1938203 "misleading message about api version negotiation". Unassigned. Low - https://bugs.launchpad.net/cinder/+bug/1938254 "The cinder-volume service appears to run but does not respond to requests". Unassigned. Incomplete - https://bugs.launchpad.net/cinder/+bug/1937890 "when lack of resources backup status not update". Unassigned. - https://bugs.launchpad.net/cinder/+bug/1938146 "Disabled NFS driver snapshots still appear in Error state". Unassigned. - https://bugs.launchpad.net/cinder/+bug/1938256 "Can't delete the consistency group, which this group backend does not support .'' Unassigned. Cheers -- L. Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

Help : mount LVM issue
by KK CHN 28 Jul '21

28 Jul '21

List, I am in the process of uploading OS and data LVM disk image from ovirt(KVM) files fo our OpenStack Ussuri setup with KVM and glance. I am able to upload the disk ( qcow2 images and profile the VM image). But I could not able to get the logical volume visible to the populated VM. Here the data volume is LVM partition as another disk image handed over to us by our service provider. here the steps I followed to get the LVM partition (/dev/vdc2) in question to get visible to our VM without success. Kindly help to solve this issue. ################################################## [root@ma-app ~]# fdisk -l Disk /dev/vda: 64.4 GB, 64424509440 bytes, 125829120 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x0009e4d7 Device Boot Start End Blocks Id System /dev/vda1 * 2048 125829086 62913519+ 83 Linux Disk /dev/vdb: 10.7 GB, 10737418240 bytes, 20971520 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk /dev/vdc: 53.7 GB, 53687091200 bytes, 104857600 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x000ac064 Device Boot Start End Blocks Id System /dev/vdc1 * 2048 2099199 1048576 83 Linux /dev/vdc2 2099200 104857599 51379200 8e Linux LVM [root@ma-app ~]# vgs VG #PV #LV #SN Attr VSize VFree rhel 1 2 0 wz--n- <49.00g 0 [root@ma-app ~]# vgs VG #PV #LV #SN Attr VSize VFree rhel 1 2 0 wz--n- <49.00g 0 [root@ma-app ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 59G 1.5G 56G 3% / devtmpfs 3.9G 0 3.9G 0% /dev tmpfs 3.9G 0 3.9G 0% /dev/shm tmpfs 3.9G 8.5M 3.9G 1% /run tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup tmpfs 783M 0 783M 0% /run/user/0 [root@ma-app ~]# vgs VG #PV #LV #SN Attr VSize VFree rhel 1 2 0 wz--n- <49.00g 0 [root@ma-app ~]# lvs LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert root rhel -wi------- <44.00g swap rhel -wi------- 5.00g [root@ma-app ~]# vgs VG #PV #LV #SN Attr VSize VFree rhel 1 2 0 wz--n- <49.00g 0 [root@ma-app ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 59G 1.5G 56G 3% / devtmpfs 3.9G 0 3.9G 0% /dev tmpfs 3.9G 0 3.9G 0% /dev/shm tmpfs 3.9G 8.5M 3.9G 1% /run tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup tmpfs 783M 0 783M 0% /run/user/0 [root@ma-app ~]# lvdisplay --- Logical volume --- LV Path /dev/rhel/swap LV Name swap VG Name rhel LV UUID Q2X9BK-7VXr-g9BB-JA5v-K7yR-yRBf-G61vZV LV Write Access read/write LV Creation host, time localhost, 2018-04-19 12:01:04 -0400 LV Status NOT available LV Size 5.00 GiB Current LE 1280 Segments 1 Allocation inherit Read ahead sectors auto --- Logical volume --- LV Path /dev/rhel/root LV Name root VG Name rhel LV UUID laUf04-Ecwg-OHDc-vr1s-SB85-yN8O-Us116d LV Write Access read/write LV Creation host, time localhost, 2018-04-19 12:01:05 -0400 LV Status NOT available LV Size <44.00 GiB Current LE 11263 Segments 1 Allocation inherit Read ahead sectors auto [root@ma-app ~]# lvscan inactive '/dev/rhel/swap' [5.00 GiB] inherit inactive '/dev/rhel/root' [<44.00 GiB] inherit [root@ma-app ~]# pvscan PV /dev/vdc2 VG rhel lvm2 [<49.00 GiB / 0 free] Total: 1 [<49.00 GiB] / in use: 1 [<49.00 GiB] / in no VG: 0 [0 ] [root@ma-app ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 59G 1.5G 56G 3% / devtmpfs 3.9G 0 3.9G 0% /dev tmpfs 3.9G 0 3.9G 0% /dev/shm tmpfs 3.9G 8.5M 3.9G 1% /run tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup tmpfs 783M 0 783M 0% /run/user/0 [root@ma-app ~]# lvscan inactive '/dev/rhel/swap' [5.00 GiB] inherit inactive '/dev/rhel/root' [<44.00 GiB] inherit [root@ma-app ~]# vgchange -ay rhel 2 logical volume(s) in volume group "rhel" now active [root@ma-app ~]# lvscan ACTIVE '/dev/rhel/swap' [5.00 GiB] inherit ACTIVE '/dev/rhel/root' [<44.00 GiB] inherit [root@ma-app ~]# fdisk -l Disk /dev/vda: 64.4 GB, 64424509440 bytes, 125829120 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x0009e4d7 Device Boot Start End Blocks Id System /dev/vda1 * 2048 125829086 62913519+ 83 Linux Disk /dev/vdb: 10.7 GB, 10737418240 bytes, 20971520 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk /dev/vdc: 53.7 GB, 53687091200 bytes, 104857600 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x000ac064 Device Boot Start End Blocks Id System /dev/vdc1 * 2048 2099199 1048576 83 Linux /dev/vdc2 2099200 104857599 51379200 8e Linux LVM Disk /dev/mapper/rhel-swap: 5368 MB, 5368709120 bytes, 10485760 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk /dev/mapper/rhel-root: 47.2 GB, 47240445952 bytes, 92266496 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes [root@ma-app ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 59G 1.5G 56G 3% / devtmpfs 3.9G 0 3.9G 0% /dev tmpfs 3.9G 0 3.9G 0% /dev/shm tmpfs 3.9G 8.5M 3.9G 1% /run tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup tmpfs 783M 0 783M 0% /run/user/0 [root@ma-app ~]# mount /dev/vdc1 /mnt [root@ma-app ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 59G 1.5G 56G 3% / devtmpfs 3.9G 0 3.9G 0% /dev tmpfs 3.9G 0 3.9G 0% /dev/shm tmpfs 3.9G 8.5M 3.9G 1% /run tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup tmpfs 783M 0 783M 0% /run/user/0 /dev/vdc1 1014M 178M 836M 18% /mnt [root@ma-app ~]# umount /mnt [root@ma-app ~]# mount /dev/vdc2 /mnt mount: unknown filesystem type 'LVM2_member' [root@ma-app ~]# How to make this /dev/vdc2(LVM partiton) attached to the VM. ? Thank you, Kris

3 2

[packstack] Error while trying to read parameter CONFIG_SSH_KEY from user.
by Mauricio Tavares 28 Jul '21

28 Jul '21

Installing openstack in workernodes using packstack. It errors out saying it cannot read the CONFIG_SSH_KEY parameter: [root@the-headnode ~]# packstack -d worker-answerfile Welcome to the Packstack setup utility The installation log file is available at: /var/tmp/packstack/20210727-183254-mfc0n4iv/openstack-setup.log ERROR : Error while trying to read parameter CONFIG_SSH_KEY from user. Please check log file /var/tmp/packstack/20210727-183254-mfc0n4iv/openstack-setup.log for more information [root@the-headnode ~]# [root@the-headnode ~]# fgrep CONFIG_SSH_KEY worker-answerfile CONFIG_SSH_KEY=/root/.ssh/id_rsa.pub [root@the-headnode ~]# I looked at the answerfile, exposing the codes to see if there was some funny business, but did not see anything suspicious (excerpt below is from vi and shows the linefeed char as "$"): [general]$ $ # Path to a public key to install on servers. If a usable key has not$ # been installed on the remote servers, the user is prompted for a$ # password and this key is installed so the password will not be$ # required again.$ CONFIG_SSH_KEY=/root/.ssh/id_rsa.pub$ $ # Default password to be used everywhere (overridden by passwords set$ # for individual services or users).$ CONFIG_DEFAULT_PASSWORD=$ $ [...] Path to public key looks fine and there should not be an issue in seeing it: [root@ the-headnode ~]# ls -l /root/.ssh/ total 16 -r--------. 1 root root 3402 Jul 22 12:47 authorized_keys -r--------. 1 root root 2610 Jul 6 19:42 id_rsa -rw-r--r--. 1 root root 573 Jul 6 19:42 id_rsa.pub -rw-r--r-- 1 root root 855 Jul 27 18:30 known_hosts [root@ the-headnode ~]# So I do not know what I should be looking for. Here is the beginning of the log file: [root@the-headnode ~]$ cat /var/tmp/packstack/20210727-183254-mfc0n4iv/openstack-setup.log 2021-07-27 18:32:55::DEBUG::run_setup::483::root:: Groups: GLOBAL, VMWARE, UNSUPPORTED, SERVERPREPARE, RHEL, RHSM, RHSM_PROXY, SATELLITE, SATELLITE_PROXY, SSL, AMQP, AMQPSSL, AMQPAUTH, MARIADB, KEYSTONE, KEYSTONE_LDAP, GLANCE, CINDER, CINDERVOLUMECREATE, CINDERVOLUMENAME, CINDERVOLUMESIZE, CINDERGLUSTERMOUNTS, CINDERNFSMOUNTS, CINDERNETAPPMAIN, CINDERNETAPPONTAPISCSI, CINDERNETAPPNFS, CINDERNETAPPISCSI7MODE, CINDERNETAPP7MODEFC, CINDERNETAPPVSERVER, CINDERNETAPPESERIES, CINDERSOLIDFIRE, IRONIC, NOVA, NEUTRON, NEUTRON_ML2_PLUGIN, NEUTRON_LB_AGENT, NEUTRON_OVS_AGENT, NEUTRON_OVS_AGENT_TUNNEL, NEUTRON_OVS_AGENT_VXLAN, NEUTRON_OVN_AGENT, NEUTRON_OVN_AGENT_TUNNEL, MANILA, MANILANETAPP, MANILANETAPPMULTISVM, MANILANETAPPSINGLESVM, MANILAGENERIC, MANILANETWORK, MANILANETWORKSTANDALONE, MANILAGLUSTERNATIVE, MANILAGLUSTERNFS, NOVACLIENT, OSHORIZON, OSSSL, OSSWIFT, Heat, PROVISION_INIT, PROVISION_DEMO, PROVISION_TEMPEST, PROVISION_OVS_BRIDGE, GNOCCHI, CEILOMETER, REDIS, AODH, PANKO, Trove, SAHARA, MAGNUM, PUPPET, POSTSCRIPT 2021-07-27 18:32:55::DEBUG::run_setup::487::root:: going over group GLOBAL 2021-07-27 18:32:55::ERROR::run_setup::154::root:: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/packstack/installer/run_setup.py", line 117, in _getInputFromUser userInput = raw_input(message.read()) NameError: name 'raw_input' is not defined 2021-07-27 18:32:55::ERROR::run_setup::532::root:: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/packstack/installer/run_setup.py", line 117, in _getInputFromUser userInput = raw_input(message.read()) NameError: name 'raw_input' is not defined During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/packstack/installer/run_setup.py", line 500, in _handleInteractiveParams input_param(param) File "/usr/lib/python3.6/site-packages/packstack/installer/run_setup.py", line 181, in input_param _getInputFromUser(param) File "/usr/lib/python3.6/site-packages/packstack/installer/run_setup.py", line 155, in _getInputFromUser raise Exception(output_messages.ERR_EXP_READ_INPUT_PARAM % (param.CONF_NAME)) Exception: Error while trying to read parameter CONFIG_SSH_KEY from user.

1 0

[scientific-sig] IRC meeting today - Yoga release cycle operator pain points
by Stig Telfer 28 Jul '21

28 Jul '21

Hi All - In today’s IRC meeting (1100 UTC in channel #openstack-meeting, agenda: https://wiki.openstack.org/wiki/Scientific_SIG#IRC_Meeting_July_28th_2021 <https://wiki.openstack.org/wiki/Scientific_SIG#IRC_Meeting_July_28th_2021>) I’d like to go through the operator pain points proposed by SIG members so far (gathered here: https://etherpad.opendev.org/p/scientific-sig-yoga-pain-points <https://etherpad.opendev.org/p/scientific-sig-yoga-pain-points>) and pick some contenders for the TC’s effort. Everyone is welcome. Cheers, Stig

1 0

oVirt(KVM) Multiple Disk images ( lvm and vhdx disks) question
by KK CHN 28 Jul '21

28 Jul '21

Members, We have a set of VMs running in KVM environment. Both Windows and Linux OS VMs with separate data storage disks attached to it. We are planning to migrate/populate all these VMs to Our New OpenStack setup using Ussuri version with KVM virtualizer and glance storage. The current service provider provides three image files for each VMs in question. Both for Linux ( CentOS and Redhat) and WIndows machines they are providing us three disk images for each VM 1. one for OS image 2. second for boot 3. third for attached disk for data volumes The third comes as LVMs (Linux) and Vhdx (Windows)image files. *Is there a way to combine all three files from our vendor* as a single qcow2 image/or any other supported format in openstack so that we can directly populate a VM in our Open Stack setup ( ussuri, glance with KVM) using horizon dashboard. Is thi is possible? If not whats the best way to do this if you were me. kindly share your expertise and thoughts for a solution. Thanks Kris

2 1

OpenInfra Live - July 29 at 9am CT
by Ashlee Ferguson 27 Jul '21

27 Jul '21

Hi everyone, This week’s OpenInfra Live episode is brought to you by the Open Infrastructure Foundation. The Kubernetes steering committee and OpenStack technical committee meet regularly to talk about cross-community learnings and collaboration opportunities. Join members of both governance bodies to ask questions about integration, cross-project support and how you can stay updated on the latest developments. Have a question you’d like them to answer live? Drop your question on this Twitter thread <https://twitter.com/openstack/status/1419734323608051718?s=21>, or email ashlee(a)openinfra.dev. Episode: Kubernetes and OpenStack Working Together Date and time: July 29 at 9am CT (1400 UTC) You can watch us live on: YouTube: https://www.youtube.com/watch?v=G1vplawafw4 <https://www.youtube.com/watch?v=G1vplawafw4> LinkedIn: https://www.linkedin.com/feed/update/urn:li:ugcPost:6823993987699937280/ <https://www.linkedin.com/feed/update/urn:li:ugcPost:6823993987699937280/> Facebook: https://www.facebook.com/104139126308032/posts/4173780696010501/ <https://www.facebook.com/104139126308032/posts/4173780696010501/> WeChat: recording will be posted on OpenStack WeChat after the live stream Speakers: Jay Bryant, OpenStack Technical Committee Bob Killen, Kubernetes Steering Committee Ghanshyam Mann, OpenStack Technical Committee Kendall Nelson, OpenStack Technical Committee Davanum Srinivas, Kubernetes Steering Committee Have an idea for a future episode? Share it now at ideas.openinfra.live <https://openinfrafoundation.formstack.com/forms/openinfralive>. Thanks, Ashlee

1 0

[nova] Improvements in migration tracking via API
by Radosław Piliszek 27 Jul '21

27 Jul '21

Dears, In Masakari we have a spec [0] to track the issued evacuations. It could greatly use having more insight into the migrations details that Nova saves in its database. It seems there are two issues here. One is quite cosmetic one, in that Nova API does not allow getting migrations by UUID but just ID [1] (while UUIDs seem to be called the future and the internal objects support them as well). I think this one can be easily tackled by making that endpoint [1] more flexible. The other issue is a more complex one, but still not introducing a great deal of change to Nova, and it is that the Nova API returns neither migration ID nor UUID when asked to evacuate an instance [2] (to be more general, it does not do it for migrations and live migrations either). It seems, otherwise, we would have to call the listing API [3] and find the latest entry there but this is possibly error-prone and wasting resources. [0] https://review.opendev.org/c/openstack/masakari-specs/+/789432 [1] https://docs.openstack.org/api-ref/compute/?expanded=show-migration-details… [2] https://docs.openstack.org/api-ref/compute/?expanded=evacuate-server-evacua… [3] https://docs.openstack.org/api-ref/compute/?expanded=id312-detail#id312-det… -yoctozepto

3 9

[doc][requirements] Sphinx 4.1.1 broken with wsmeext.sphinxext
by Pierre Riteau 27 Jul '21

27 Jul '21

Hello, Sphinx was bumped to version 4.1.1 in upper constraints just earlier today [1]. It has broken our CloudKitty documentation build [2]: Running Sphinx v4.1.1 loading stevedore.sphinxext Extension error: Could not import extension wsmeext.sphinxext (exception: cannot import name 'PyClassmember' from 'sphinx.domains.python' Both aodh and mistral are also impacted [3]. [1] https://review.opendev.org/c/openstack/requirements/+/802179/4/upper-constr… [2] https://zuul.opendev.org/t/openstack/build/86ec39a3fc84485b8f6b1e05f94c7190 [3] https://codesearch.opendev.org/?q=wsmeext.sphinxext&i=nope&files=&excludeFi…

3 2

[wallaby][nova] Host Evacuate Instances
by Ammad Syed 27 Jul '21

27 Jul '21

Hi, I am using openstack wallaby. I am testing to evacuate instances from failed host. The feature works fine. The instances on cinder backed shared storage rebuild on other host and their data is preserved. However the instances that are on local compute storage rebuild with fresh image on other host and data on root disk was lost. The question is, is it possible to evacuate all instances from failed host that are on shared storage only ? Ammad

3 4

[all] Broken gate caused by Block Storage API v2 removal
by Takashi Kajinami 27 Jul '21

27 Jul '21

# the similar topic was sent for some specific projects already but # let me send this with [all] to get attention from all projects. Hello, As you might know, Block Storage API v2 was deprecated during Pike cycle and now cinder is removing that deprecated API completely in current Xena. However unfortunately there are some projects still using volume v2 API and especially the recent bump of python-cinderclient[1], which completely removes cinderclient.v2, broke such usage. [1] https://review.opendev.org/c/openstack/requirements/+/801759 I went through the following search results[2] and submitted fix for some projects[3], but I'd recommend you check your own projects to find any remaining usage of v2 API. [2] https://codesearch.opendev.org/?q=volumev2&i=nope&files=&excludeFiles=&repo… https://codesearch.opendev.org/?q=cinderclient.v2&i=nope&files=&excludeFile… [3] https://review.opendev.org/q/topic:"volumev2-removal" It seems charm repos are still referring to removed cincetclient.v2 in addition to cinderclient.v1, which looks very strange to me. However I'm not familiar with charm so I'd leave that to anyone actually involved in the project. Thank you, Takashi

2 1

[neutron] Bug Deputy Report July 19 - Jul 26
by Lucas Alvares Gomes 26 Jul '21

26 Jul '21

High: * https://bugs.launchpad.net/neutron/+bug/1936911 - " Scenario test test_established_tcp_session_after_re_attachinging_sg is failing on the linuxbridge backend" Unassigned * https://bugs.launchpad.net/neutron/+bug/1936959 - "[OVN Octavia Provider] Unable to delete Load Balancer with PENDING_DELETE" Assigned to: Brian Haley Medium: * https://bugs.launchpad.net/neutron/+bug/1936839 - "Ingress bw-limit with DPDK does not work" Assigned to: Bence Romsics * https://bugs.launchpad.net/neutron/+bug/1936980 - " [DVR] ARP entries for allowed address pairs with IPv4 addresses are added using qr- interface from IPv6 subnets" Assigned to: Slawek Kaplonski * https://bugs.launchpad.net/neutron/+bug/1937039 - "dsvm-functional can not run due to some ovs/ovn commands not found" Unassigned Needs further triage: * https://bugs.launchpad.net/neutron/+bug/1937093 - "ERROR neutron.pecan_wsgi.hooks.translation designateclient.exceptions.Forbidden: Forbidden" Unassigned * https://bugs.launchpad.net/neutron/+bug/1937261 - " python3-msgpack package broken due to outdated cython" Unassigned Cheers, Lucas

1 0

[kolla][kolla-ansible] Query regarding Kolla Image Tag vs Release name
by Anirudh Gupta 26 Jul '21

26 Jul '21

Hi Team, I am installing Openstack using Kolla-Ansible. I have following queries: 1. Tag 11.0.0 corresponds to the Openstack Victoria release. On docker hub,There are 2 types of tag for a particular kolla image - One with the Tag name and other Release name. docker pull kolla/centos-binary-ironic-pxe:victoria docker pull kolla/centos-binary-ironic-pxe:11.0.0 Image for Tag 11.0.0 was updated 6 months ago whereas for Victoria release the image is updated 4 days ago. To deploy kolla ansible in the production environment, what should we set in openstack_release field in globals.yml - tag number or release name ? 2. For wallaby Release, there is no tag 12.0.0 defined in docker hub kolla images. Is there any plan to specify kolla images with tag for wallaby or not? Regards Anirudh Gupta

2 1

Fwd: gerrit no longer lading from iphone
by Radosław Piliszek 25 Jul '21

25 Jul '21

Forwarding misrouted Sorin's message here. :-) Also CC'ing Clark due to the attachment. ---------- Forwarded message --------- From: Sorin Sbarnea <ssbarnea(a)redhat.com> Date: Sun, Jul 25, 2021 at 8:48 PM Subject: Re: gerrit no longer lading from iphone To: Radosław Piliszek <radoslaw.piliszek(a)gmail.com> It is crashing trying to load the oage. I attached screenshot, I am not yet sure how to extract more info. Is bit weird in a decade of using ios, i found only few cases with errors like this. The crash happens even in private mode but it does not happen with Google app internal browser (suppose Chrome). Url I used https://review.opendev.org/c/openstack/python-tripleoclient/+/802032 I should mention that loading root url works. Considering that it takes a long time to crash I suppose is loading some js code that exceeds memory limits and safari is killing the process. Maybe is related to the build status code? I may look more tomorrow as I do not want to finish my Sunday evening on desktop ;) On Sun, 25 Jul 2021 at 19:01, Radosław Piliszek <radoslaw.piliszek(a)gmail.com> wrote: > > On Sun, Jul 25, 2021 at 7:25 PM Clark Boylan <cboylan(a)sapwetik.org> wrote: > > > > On Sun, Jul 25, 2021, at 9:58 AM, Radosław Piliszek wrote: > > > On Sun, Jul 25, 2021 at 6:51 PM Sorin Sbarnea <ssbarnea(a)redhat.com> wrote: > > > > > > > > I am wondering if something was changed on our gerrit deployment recently as it seems to no longer load on ios safari. > > > > > > Yeah, it was updated recently. > > > Most likely it broke compat. > > > > The server moved but the software wasn't changed (using the same docker image). When you say it doesn't load do you get the "This Server has Moved" page we put on the old server? Or maybe you get no connection at all? Unfortunately "it no longer loads" could be one of many things, and I don't have an ios device to try and reproduce. It does load in firefox and chrome on my desktop and chrome on my android device. > > Ah, thanks for clarifying. > For me, it started working snappier so I thought it had some software > improvement as well. ;-) > > -yoctozepto > > > Clark > > > -- -- /zbr

1 0

[cloudkitty] No indexes in the rated_data_frames table
by Thomas Goirand 24 Jul '21

24 Jul '21

Hi, Very fast, with only a few resources, the rated_data_frames tables becomes huge. I was very surprised to see there's absolutely zero index in this table. Isn't a "openstack rating dataframes get" querying this table, with tenant_id and begin / end as filters? Wouldn't the API calls be a lot more efficient with such indexes? Cheers, Thomas Goirand (zigo)

3 2

[sdk] PTL on PTO
by Artem Goncharov 24 Jul '21

24 Jul '21

Hi, I will be trying to enjoy my vacation and will be back on Monday 16.08.2021. For anything urgent hopefully someone from the SDK/CLI team is still reachable, but anyway do not hesitate to write here (I will be still “reachable”). Regards, Artem

1 0

[all][tc] What's happening in Technical Committee: summary 23th July, 21: Reading: 5 min
by Ghanshyam Mann 23 Jul '21

23 Jul '21

Hello Everyone, Here is last week's summary of the Technical Committee activities. 1. What we completed this week: ========================= * Retired django-openstack-auth[1] * Properly retired neutron-lbaas[2] * Deprecated os-panko role[3] 2. TC Meetings: ============ * TC held this week meeting on Thursday; you can find the full meeting logs in the below link: - https://meetings.opendev.org/meetings/tc/2021/tc.2021-07-22-15.00.log.html * We will have next week's meeting on July 29th, Thursday 15:00 UTC[4]. 3. Activities In progress: ================== TC Tracker for Xena cycle ------------------------------ TC is using the etherpad[5] for Xena cycle working item. We will be checking and updating the status biweekly in the same etherpad. Open Reviews ----------------- * Six open reviews for ongoing activities[6]. Migration from Freenode to OFTC ----------------------------------------- * Still many projects left to merge these small changes. requesting core team of those repos to merge them. ** https://review.opendev.org/q/topic:%2522oftc%2522+status:open * All the required work for this migration is tracked in this etherpad[7] Test support for TLS default: ---------------------------------- * Rico has started a separate email thread over testing with tls-proxy enabled[8], we encourage projects to participate in that testing and help to enable the tls-proxy in gate testing. Project updates: ------------------- * Retiring js-openstack-lib [9] * Retiring tripleo-common-tempest-plugin[10] Yoga release community-wide goal ----------------------------------------- * Please add the possible candidates in this etherpad [11]. * Current status: One goal "Secure RBAC" is proposed. Other Changes ------------------ * Defining Yoga release testing runtime12] PTG planning ---------------- * TC booked three slots: ** 1. Monday 15-17 UTC for TC + Community Leaders ** 2. Thursday 13-17 UTC ** 3. Friday 13-17UTC * We are collecting the PTG topics in etherpad[13], feel free to add any topic you want to discuss. 4. How to contact the TC: ==================== If you would like to discuss or give feedback to TC, you can reach out to us in multiple ways: 1. Email: you can send the email with tag [tc] on openstack-discuss ML[14]. 2. Weekly meeting: The Technical Committee conduct a weekly meeting every Thursday 15 UTC [15] 3. Office hours: The Technical Committee offers a weekly office hour every Tuesday at 0100 UTC [16] 4. Ping us using 'tc-members' nickname on #openstack-tc IRC channel. [1] https://review.opendev.org/c/openstack/governance/+/800471 [2] https://review.opendev.org/c/openstack/governance/+/800148 [3] https://review.opendev.org/c/openstack/governance/+/799817 [4] https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting [5] https://etherpad.opendev.org/p/tc-xena-tracker [6] https://review.opendev.org/q/project:openstack/governance+status:open [7] https://etherpad.opendev.org/p/openstack-irc-migration-to-oftc [8] http://lists.openstack.org/pipermail/openstack-discuss/2021-June/023000.html [9] https://review.opendev.org/c/openstack/governance/+/798540 [10] https://review.opendev.org/c/openstack/governance/+/800432 [11] https://etherpad.opendev.org/p/y-series-goals [12] https://review.opendev.org/c/openstack/governance/+/799927 [13] https://etherpad.opendev.org/p/tc-yoga-ptg [14] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss [15] http://eavesdrop.openstack.org/#Technical_Committee_Meeting [16] http://eavesdrop.openstack.org/#Technical_Committee_Office_hours -gmann

1 0

[neutron] PTL on holidays
by Slawek Kaplonski 23 Jul '21

23 Jul '21

Hi, I will be on PTO from 24.07 and I will be back on Monday 1.08.2021. For anything related to Neutron, please reach out to our drivers team [1] or core team [2]. For any release related things, please reach out to Akihiro who is our release liaison. Due to my holidays I'm also canceling our next week's meetings. There will be no team meeting and ci meeting on Tuesday 27.07. Drivers team meeting on Friday will be chair by Miguel. Have a great week. [1] https://review.opendev.org/admin/groups/ 5b063c96511f090638652067cf0939da1cb6efa7,members [2] https://review.opendev.org/admin/groups/ 9b227d5d1b27471dacbe9a9161904ec115a74138,members -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

[masakari] Blueprints cleanup
by Radosław Piliszek 23 Jul '21

23 Jul '21

Dears, I have cleaned up the blueprints for Masakari [1], closing the completed ones and assigning targets and priorities to the discussed (initially-approved) ones. In other words, the implemented blueprints are hidden and those in some kind of current motion have their priority-assignee-series properly set. I have also updated the progress statuses on active and linked to relevant commits (where missing). [1] https://blueprints.launchpad.net/masakari -yoctozepto

1 0

[TripleO] Gate blocker - please hold rechecks
by Marios Andreou 23 Jul '21

23 Jul '21

folks we have a gate blocker for tripleo at https://bugs.launchpad.net/tripleo/+bug/1937333 but resolution is in progress please hold rechecks or at least check if you are hitting that issue before doing so thank you! happy friday o/ ;)

1 1

Unable to Mount LVM data volume when uploading qcow2 files
by KK CHN 23 Jul '21

23 Jul '21

Members, We are in need of migrating of VMs from another vendor who has hosted all the VMs on their host machine using KVM. hypervisor. No OpenStack they are using. We want to migrate these VMs to our fresh OpenStack Ussuri environment setup with two host machine which using KVM and Debian as Host Operating System. ( The VMs are in RedHat,CentOS and Windows machines ) The vendor has provided each VM as Three files(qcow2 files). Because they are using additional disks for each partition. They are telling us they can provide this way only. They are unable to provide as single file( I'm also not sure whether there is a way to get it as single file ? ) The existing Vendor provides the files for each VM as follows. 1. First file is Operating Sytem ( CentOS) qcow2 image 2. Second file is Boot file system as qcow2 image. 3. Third file is data volume(LVM data also qcow2 image) : The data volume which contains the application data. When we are uploding these files to OpenStack glance using Horizon dashboard the first two files Operating Sytem and boot files are detected for the VM. But the Third file unable to attach. Its not detecting. So I tried manually mount the data volume in command line but it throws error "unknown filesystem type 'LVM2_member' #mount /dev/vdc2 /mnt/ mount:unknown filesystem type 'LVM2_member' // here vdc2 is the data volume in question. // /dev/vda1 is the OS partion which when uploaded to glance through horizon no error in mounting. similarly /dev/vdc1 the boot partion also able to attach through horizon dash board. Only the data volume is not getting attached and when manually tried to mount that volume /dev/vdc2 throws the error "mount:unknown filesystem type 'LVM2_member' " How to resolve this issue ? whats the root cause ? Kindly share your inputs . Thanks in advance Kris

2 1

[nova][placement] PTL is on vacation
by Balazs Gibizer 23 Jul '21

23 Jul '21

Hi, FYI, next week I will be on PTO. Sylvain volunteered to chair the weekly nova meeting next week. cheers, gibi

1 0

[nova][sdk] Gate is broken due to block storage v2 removal
by Balazs Gibizer 23 Jul '21

23 Jul '21

Hi, Cinder merged the removal of the block storage v2 API[1]. This broke the openstacksdk-functional-devstack job blocking at least the nova and openstack-sdk gate[2] due to test cases in the job still trying to test the v2 API. I've proposed a patch to remove those functional tests[3]. Please hold your recheck until [3] merges. Cheers, gibi [1] https://review.opendev.org/c/openstack/cinder/+/792299 [2] https://zuul.opendev.org/t/openstack/builds?job_name=openstacksdk-functiona… [3] https://review.opendev.org/c/openstack/openstacksdk/+/801864

2 2

[tc][ptl] TC + PTL interaction in Yoga Virtual PTG
by Ghanshyam Mann 22 Jul '21

22 Jul '21

Hello Everyone, In one of the previous TC meeting, we discussed about having the TC and PTLs (project leaders) interaction sessions in PTG. The goal of this session is: * To improve the interaction between TC and PTLs. * Discuss about the things we as TC or as community need to improve. * Any required change in the process or so which project leaders think can be helpful in the development cycle or overall project health. I have created the below etherpad with the draft agenda , If you as PTL or project representatives would like to attend this session, please add your name under L38 section: - https://etherpad.opendev.org/p/tc-ptl-interaction I am thinking we can plan this session for two hours either on Monday or Tuesday. Please add your preference in the below doodle poll (including TC members): - https://doodle.com/poll/ua72h8aip4srsy8s -gmann

2 4

Need information
by Gk Gk 22 Jul '21

22 Jul '21

Hi, I want to know if tenant isolation and overlapping ips, possible in the case of provider vlan networks ? If not, how is it different when compared to tenant networks of type vlan where tenant isolation is possible ? Please explain. I am confused between the two regarding their tenant isolation and overlapping ips features. Thanks Kumar

2 3

[neutron] Drivers meeting - agenda for 23.07.2021
by Slawek Kaplonski 22 Jul '21

22 Jul '21

Hi, Agenda for tomorrow's drivers meeting is available at https:// wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda We have 3 RFEs to discuss: * https://bugs.launchpad.net/neutron/+bug/1933222 - [RFE] Add distributed datapath for metadata - This is continuation from the last meeting 2 weeks ago. * https://bugs.launchpad.net/neutron/+bug/1933517 - [RFE][OVN] Create an intermediate OVS bridge between VM and intergration bridge to improve the live-migration process * https://bugs.launchpad.net/neutron/+bug/1935847 - [RFE] Basic Authentication Support for Standalone Neutron Please check those RFEs, ask questions if You have any and see You tomorrow on the meeting. -- Slawek Kaplonski Principal Software Engineer Red Hat

2 2

[octavia] PTL on vacation - Meetings cancelled
by Gregory Thiemonge 22 Jul '21

22 Jul '21

Hi, I'll be on PTO for 2 weeks, I'll be back on August 9th. As discussed during the previous weekly meeting, the next two Octavia meetings are cancelled. The next meeting is on August 11th. Greg

1 0

]ops] Something wrong with rabbit settings
by Massimo Sgaravatto 22 Jul '21

22 Jul '21

Dear all I am afraid I have something wrong in the setup of rabbit, and I would appreciate your help. We have a single rabbit cluster for all the OpenStack services. It is a cluster composed by 3 instances (now running rabbitmq-server-3.8.16 and erlang-24.0.2). We are using this setting: cluster_partition_handling = pause_minority to handle partitions, and we are using this policy: [root@cld-rbt-01 ~]# rabbitmqctl list_policies Listing policies for vhost "/" ... vhost name pattern apply-to definition priority / ha-all ^(?!amq\.).* all {"ha-mode":"all"} 0 In the conf files of the OpenStack services we have these settings related to Rabbit: transport_url = rabbit://openstack_prod:xxx@192.168.60.220:5672, openstack_prod:xxx@192.168.60.221:5672, openstack_prod:xxx@192.168.60.222:5672 rabbit_ha_queues = true >From time to time rabbit complains about some network partitions (still not clear why): 2021-07-02 08:12:55.715 [error] <0.463.0> Partial partition detected: * We saw DOWN from rabbit@cld-rbt-02 * We can still see rabbit@cld-rbt-03 which can see rabbit@cld-rbt-02 * pause_minority mode enabled We will therefore pause until the *entire* cluster recovers and when this happens Openstack services are of course impacted. As soon as I can check the cluster status, rabbitmqctl cluster_status doesn't complain about any problems (i.e. it doesn't report any network partitions and it reports all nodes running) but the problems on the OpenStack services are still there (e.g. "neutron agent-list" report many agents down). I need to restart the rabbit cluster in order to have OpenStack services working again Any hints ? Thanks, Massimo

4 5

[nova][placement] Yoga PTG
by Balazs Gibizer 22 Jul '21

22 Jul '21

Hi, It is time again to discuss and agree on what time we will meet during the PTG week (18 - 22 Oct). I created a doodle [1]. Please make your votes there about the timing. The final date to register our time slots is 21th of July so I ask you to make your vote not later than 20 of July, so I can make the registration in time. Also I think we should discuss how many slots we need. In the last two PTGs we tried finish our etherpad in 3 days x 4 hour slots. But in both cases some overtime was needed. How do you feel, should we book for 4 days x 4 hours slots this time instead? I created the PTG etherpad so we can start collecting the topics[2]. If you have cross project topics, then please either agree with the other team about the timing of the discussion or let me know and I will arrange for the slot. Cheers, gibi [1] https://doodle.com/poll/yetctyhufnn6g8hn [2] https://etherpad.opendev.org/p/nova-yoga-ptg

2 4

[Kolla] [ Kolla-Ansible] Kolla Ansible Downgrade Issue
by Richa Gupta 22 Jul '21

22 Jul '21

Hi Team, I installed Kolla-Ansible release 12.0.0, i.e. wallaby on multinode setup, and then downgraded Kolla-Ansible to release 11.0.0, i.e. Victoria, following the below-mentioned link: https://docs.openstack.org/kolla-ansible/latest/user/operating-kolla.html I downgraded Kolla-Ansible by running the command "*pip install --upgrade kolla-ansible==6.0.0*" and, changing "openstack_release: victoria" in globals.yml. But, "*kolla-ansible upgrade*" failed with the below error (Error also attached in the mail) : "alembic.util.exc.CommandError: Can't locate revision identified by 'wallaby_contract01'" Could you please suggest if the downgrade is supported in Kolla-Ansible? Best Regards, Richa Gupta

3 3

[all][neutron][qa] Gate status: tempest-full-py3, tempest-slow-py3 or few more jobs are broken: "Donot recheck"
by Ghanshyam Mann 22 Jul '21

22 Jul '21

Hello Everyone, Since 2-3 hrs before, tempest-full-py3, tempest-slow-py3 and few more jobs started failing consistently in create_neutron_initial_network() method: "++ lib/neutron_plugins/services/l3:create_neutron_initial_network:214 : oscwrap --os-cloud devstack-admin --os-region RegionOne network create --project a6b71b541987471595bf5e38f5fbe264 private" - https://zuul.openstack.org/builds?job_name=tempest-full-py3 - https://zuul.openstack.org/builds?job_name=tempest-slow-py3 Strange is that 'tempest-integrated-storage'|'compute' jobs are passing even the configuration is almost the same. Slaweq reported the below bug and trying some neutron revert to know the root cause. He will check it tomorrow morning. - https://bugs.launchpad.net/neutron/+bug/1936983 Until we find the root cause/fix, do not recheck on these failures. -gmann

5 8

[kolla][glance][cinder] issues with show_image_direct_url and show_multiple_locations in wallaby
by J-P Methot 21 Jul '21

21 Jul '21

Hi, As you might already know if you read this mailing list, I've been trying to push Kolla into production for a while. This issue however might be more Glance and Cinder related than Kolla. We're trying to provision an Openstack Wallaby cluster on Ubuntu using Kolla and Ceph pacific. The issue I now have is that, if I try to provision a Ceph volume from an image stored in Ceph, I get the following error : https://pastebin.com/59EZbxKu By looking around a bit, I figured out that this is linked to the following mailing list email : https://www.spinics.net/lists/ceph-users/msg66016.html Ceph copy on write cloning breaking because Cinder can't work ifshow_image_direct_url is set to true is a pretty big issue, I believe. It's possible that this has been talked about before, but there's no other trace I could find outside of that Ceph mailing list email. Additionally, in Kolla, setting show_image_direct_url to false doesn't solve this issue because by default, Kolla appears to also set show_multiple_locations to true. By setting show_multiple_locations to false through a custom configuration, I am able to create volumes from glance Ceph images again (images have to be re-uploaded for this to work though). Of course, these volumes are not created through copy-on-write, because that's broken. I couldn't find any bug report pertaining to these issues. If they are not known, then I would be happy to make a bug report. I would just like to verify if this is all already known or not. -- Jean-Philippe Méthot Senior Openstack system administrator Administrateur système Openstack sénior PlanetHoster inc.

2 1

[all][tc] Technical Committee next weekly meeting on July 22th at 1500 UTC
by Ghanshyam Mann 21 Jul '21

21 Jul '21

Hello Everyone, Technical Committee's next weekly meeting is scheduled for July 22th at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, June 21th, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1