March 2022 - openstack-discuss - lists.openstack.org

Xena and CEPH RBD backend (show_image_direct_url status )
by west, andrew 10 Apr '22

10 Apr '22

Hello experts Currently using openstack Xena and Ceph backend (Pacific 16.2.7) It seems there is a bug (since Wallaby?) where the efficient use of a CEPH Pacific RBD backend (i.e with copy-on-write-cloning) is not working . Show_image_direct_url needs to be False to create volumes (or ephemeral volumes for nova) This can of course be tremendously slow (Nova , ephemeral root disk) without copy-on-write cloning feature of Ceph. As Ceph RBD is THE most favourite backend for block storage in openstack I am wondering how others are coping (or workarounds found ?) Which combinations of Openstack and Ceph are known to work well with copy-on-write-cloning? How is the noted GRAVE Security RISK of enabling Show_image_direct_url mitigated ? (i.e I think , for CEPH RBD, it needs to be True to get cloning to work efficiently) See another report of this issue here: Re: Ceph Pacifif and Openstack Wallaby - ERROR cinder.scheduler.flows.create_volume - CEPH Filesystem Users (spinics.net)<https://www.spinics.net/lists/ceph-users/msg66016.html> Thanks for any help or pointers, Andrew West Openstack consulting CGG France ________________________________ "This e-mail and any accompanying attachments are confidential. The information is intended solely for the use of the individual to whom it is addressed. Any review, disclosure, copying, distribution, or use of the email by others is strictly prohibited. If you are not the intended recipient, you must not review, disclose, copy, distribute or use this e-mail; please delete it from your system and notify the sender immediately."

7 9

[glance] Zed PTG schedule
by Abhishek Kekane 07 Apr '22

07 Apr '22

Hello All, Greetings!!! Zed PTG is going to start next week and if you haven't already registered, please do so as soon as possible [1]. I have created an etherpad [2] and also added day wise topics along with timings we are going to discuss. Kindly let me know if you have any concerns with allotted time slots. We also have one slot open on Wednesday and Friday is kept reserved for any unplanned discussions. So please feel free to add your topics if you still haven't added yet. As a reminder, these are the time slots for our discussion. Tuesday 5 April 2022 1400 UTC to 1700 UTC Wednesday 6 April 2022 1400 UTC to 1700 UTC Thursday 7 April 2022 1400 UTC to 1700 UTC Friday 8 April 2022 1400 UTC to 1700 UTC NOTE: At the moment we don't have any sessions scheduled on Friday, if there are any last moment request(s)/topic(s) we will discuss them on Friday else we will conclude our PTG on Thursday 7th April. We will be using bluejeans for our discussion, kindly try to use it once before the actual discussion. The meeting URL is mentioned in etherpad [2] and will be the same throughout the PTG. [1] https://openinfra-ptg.eventbrite.com/ [2] https://etherpad.opendev.org/p/zed-glance-ptg Thank you, Abhishek

2 2

plain text config parameters encryption feature
by Alexander Yeremko 06 Apr '22

06 Apr '22

Dear OpenStack community, we are developing plain text config secrets encryption feature according to the next specification: https://specs.openstack.org/openstack/openstack-ansible-specs/specs/xena/pr… We started from Glance OS service and submitted two patchsets already: https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/814865 Now we have two questions that we need to clarify to proceed our work on that feature and finish our development: 1. Is it correct that we need to develop more patchsets to rework some logic of encryption mechanism according to comment to 'files/encypt_secrets.py' script that arised at the second patchset (PatchSet 2) dated Nov/30/2021 ? Comment is by Dmitry Rabotyagov: "We _really_ should make it as an ansible plugin and re-work logic" 2. We wish to have such feature in previous releases also, not just in upcoming Yoga or Zed. Stein, Train and Victoria - it would be excellent to have plain text secrets encryption with these releases also. So question is how is it possible to use our feature in those releases also? Can we push some backports to those releases openstack-ansible repo? Could someone be so kind and give us answers? Best regards and wishes, Alex Yeremko This E-Mail (including any attachments) may contain privileged or confidential information. It is intended only for the addressee(s) indicated above. The sender does not waive any of its rights, privileges or other protections respecting this information. Any distribution, copying or other use of this E-Mail or the information it contains, by other than an intended recipient, is not sanctioned and is prohibited. If you received this E-Mail in error, please delete it and advise the sender (by return E-Mail or otherwise) immediately. Any calls held by you with Connectria may be recorded by an automated note taking system to ensure prompt follow up and for information collection purposes, and your attendance on any calls with Connectria confirms your consent to this. Any E-mail received by or sent from Connectria is subject to review by Connectria supervisory personnel.

4 6

Metadata service {devices list}
by Ahmed Abdelhamid 06 Apr '22

06 Apr '22

Hi All, I am running into a strange issue with the metadata service. Per metadata-service manual <https://docs.openstack.org/nova/latest/user/metadata.html>, the devices attached to a VM should be visible in $ curl http://169.254.169.254/openstack/2018-08-27/meta_data.json However, whenever i execute it from a VM , the devices array is empty and looks like this, any idea why ? Thanks { "random_seed": "yu5ZnkqF2CqnDZVAfZgarG...", "availability_zone": "nova", "keys": [ { "data": "ssh-rsa AAAAB3NzaC1y...== Generated by Nova\n", "type": "ssh", "name": "mykey" } ], "hostname": "test.novalocal", "launch_index": 0, "meta": { "priority": "low", "role": "webserver" }, "devices": [ ], "project_id": "f7ac731cc11f40efbc03a9f9e1d1d21f", "public_keys": { "mykey": "ssh-rsa AAAAB3NzaC1y...== Generated by Nova\n" }, "name": "test"}

3 10

[tripleo][RDO] Tags for Yoga GA version in tripleo projects
by Alfredo Moralejo Alonso 05 Apr '22

05 Apr '22

Hi, As we are doing builds for RDO Yoga release, I'd like to know what we should include in yoga release. In Xena, tags were created with the commits for the most recent promotion at around GA and shipped rpm packages for them. Additionally, we pinned RDO Trunk Xena to those versions. Will we get similar tags for Yoga? Best regards, Alfredo

2 3

[TripleO] Move tripleo repos stable/ussuri to End Of Life OK?
by Marios Andreou 05 Apr '22

05 Apr '22

Hello TripleO o/ The tripleo-ci team proposes that we move the stable/ussuri branch for all tripleo repos [1] to End of Life [2]. The branch was moved to extended maintenance with [3] so we can already no longer make any new releases for ussuri/tripleo repos. Are there any objections or concerns about this? If so please speak up here or directly on the patch. I think that any patches posted to ussuri nowadays are mainly about cherrypicking back to train, rather than merging something to ussuri specifically. I have posted the proposal to move to EOL at [4] and have WF-1 to wait for this discussion. If there are no objections then once we move to EOL the tripleo-ci team will remove all Ussuri related CI, check/gate/promotions. regards, marios [1] https://releases.openstack.org/teams/tripleo.html#ussuri [2] https://docs.openstack.org/project-team-guide/stable-branches.html#maintena… [3] https://review.opendev.org/c/openstack/releases/+/817623 [4] https://review.opendev.org/c/openstack/releases/+/834049

2 5

[cinder] Zed PTG schedule
by Rajat Dhasmana 05 Apr '22

05 Apr '22

Hello Argonauts, Zed PTG is going to start from next week i.e. 4th April, 2022 to 8th April, 2022. Kindly register if you haven't already[1]. The registration is free and acts as a count of the people participating. The Cinder team will be meeting from 5th April (Tuesday) till 8th April (Friday) in the 1300-1700 UTC time slot. I've arranged the topics as per participants availability and in the following manner[2]. The connection details are on the etherpad along with the day wise schedule of topics. I've also arranged them in a tabular structure[3] (the time allotted to each topic here might vary). Hope to see everyone next week! [1] https://openinfra-ptg.eventbrite.com/ [2] https://etherpad.opendev.org/p/zed-ptg-cinder [3] https://ethercalc.openstack.org/crz6qdm7fq0v Thanks and regards Rajat Dhasmana

1 1

[Ironic][Bare Metal SIG] Community Feedback Survey (1 minute)
by Arne Wiebalck 04 Apr '22

04 Apr '22

Dear all, As input for the PTG and to align priorities for the next cycle, the Ironic team is looking for feedback from the community (users, operators, admins, deployers ... everyone interested in bare metal really!). So, if you have 1 minute, we would greatly appreciate your input by filling: https://de.surveymonkey.com/r/XCR2TN5 If you have any additional input for the Ironic team, do not hesitate to reach out (via mail, on IRC, or come along to the PTG!). Thanks! Arne

1 1

[glance] import RBD image
by Tony Liu 04 Apr '22

04 Apr '22

Hi, There used to be a way to import RBD image with API v1, but not any more with v2. Is there any other way to do that? In case given QCOW2 image, It would be much faster and easier to convert it directly to RBD image with RAW format, than convert it to RAW format on local file system and upload the RAW image to Glance. Thanks! Tony

2 3

[TripleO] gate blocker - impacting all quickstart-based jobs - openstack-ansible-os_tempest
by Ronelle Landy 04 Apr '22

04 Apr '22

Hello All, We have a check/gate blocker on all TripleO quickstart-based jobs, as described in: https://bugs.launchpad.net/tripleo/+bug/1967430 [1] commit to openstack-ansible-os_tempest removed setup.py and is causing failings in all quickstart jobs. A revert was proposed but will not be workable - we are waiting on another fix. Please hold rechecks until this is resolved. [1] https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/835969 Thank you!

5 12