September 2022 - openstack-discuss

Oracle Linux 6 VM disk performance
by Quang Long 30 Sep '22

30 Sep '22

Hi Openstack-users, I am having a problem with I/O performance on VM running Oracle Linux 6, I/O throughput on VM Oracle Linux 6 is much lower than VM using another OS (Ubuntu, CentOS). - VM Oracle Linux 6: throughput 40 MBps https://prnt.sc/buKscX_qEtcF - Other VM: throughput 113 MBps https://prnt.sc/IRhBUPrGgLOy - Test tool: dd bs=1M count=1024 if=/dev/zero of=test conv=fdatasync; rm -f test My Enviroment: - Openstack: Ussuri - Ceph: Octopus 15.2.8 - Compute: CentOS8_x86_64, kernel: 4.18.0-240.15.1.el8_3.x86_64 - KVM: qemu-kvm-5.2.0-16.el8.x86_64 - VM Oracle linux6: kernel-uek-4.1.12-124.42.3.el6uek.x86_64 I think because the kernel of Oracle Linux 6 is too old, maybe an older KVM version could support it, and now KVM does not optimize for this OS. Could you guy can help me with this? -- *Lê Quang Long* 0942.533.683 | 0977.116.502

1 0

Live Migration Issues
by Alexander Dibbo - STFC UKRI 30 Sep '22

30 Sep '22

Hi All, I'm having a few issues with live migration at the moment. This is an openstack train deployed with rdo packages. 1. when migrating some VMs the migration succeeds but the VM doesn't move and the following error can be found in the nova logs with nothing that seems to correspond in the neutron logs: 2022-09-30 11:04:04.069 716669 INFO nova.compute.manager [-] [instance: c10d1d9e-2baf-4ab5-ba3a-2f60f521aea6] Took 76.49 seconds for pre_live_migration on destination host hv548.nubes.rl. ac.uk. 2022-09-30 11:04:04.720 716669 ERROR nova.virt.libvirt.driver [-] [instance: c10d1d9e-2baf-4ab5-ba3a-2f60f521aea6] Live Migration failure: 'fa:ca:ad:1f:71:41' 2. When migrating some VMs the migration is marked as complete and the VM is moved from the source to the destination hypervisor but nova keeps the migrating state and doesn't update the host or the node fields. The following error is found in nova with no corresponding error that I can find in neutron. The config is the same across all hypervisors. 2022-09-13 10:37:23.709 12387 ERROR nova.network.neutronv2.api [req-ee51a8b4-911c-4f92-860b-9d6a7a24c786 27be800439c244c1bd742ff056cf700c 4de86830e89b4a46b590536571b6ccd4 - 38372510d9bb4ac7916178b062d387de 38372510d9bb4ac7916178b062d387de] Neutron client was not able to generate a valid admin token, please verify Neutron admin credential located in nova.conf: neutronclient.common.exceptions.Unauthorized: 401-{'error': {'message': 'The request you have made requires authentication.', 'code': 401, 'title': 'Unauthorized'}} 2022-09-13 10:37:23.845 12387 ERROR oslo_messaging.rpc.server [req-ee51a8b4-911c-4f92-860b-9d6a7a24c786 27be800439c244c1bd742ff056cf700c 4de86830e89b4a46b590536571b6ccd4 - 38372510d9bb4ac7916178b062d387de 38372510d9bb4ac7916178b062d387de] Exception during message handling: nova.exception.NeutronAdminCredentialConfigurationInvalid: Networking client is experiencing an unauthorized exception. Regards Alexander Dibbo - Cloud Architect / Cloud Operations Group Leader For STFC Cloud Documentation visit https://stfc-cloud-docs.readthedocs.io<https://stfc-cloud-docs.readthedocs.io/> To raise a support ticket with the cloud team please email cloud-support(a)stfc.ac.uk<mailto:cloud-support@stfc.ac.uk> To receive notifications about the service please subscribe to our mailing list at: https://www.jiscmail.ac.uk/cgi-bin/webadmin?A0=STFC-CLOUD To receive fast notifications or to discuss usage of the cloud please join our Slack: https://stfc-cloud.slack.com/ This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses.

1 0

[all] Skip level upgrades (SLURP) grenade job
by Slawek Kaplonski 30 Sep '22

30 Sep '22

Hi, As You may know there some time ago TC merged resolution about release cadence adjustment [1]. According to that resolution starting from 2023.1 (Antelope) will be first "SLURP" release. That means that upgrade directly from 2023.1 to 2024.1 ("C") needs to be supported so projects will need to run "skip-level" grenade job [2]. To start that effort and see how it works currently and what needs to be done/fixed by teams we (TC) would like to ask teams to add such job to CI in the current (2023.1) cycle already. That job will test upgrade from Yoga to master (2023.1). You can refer to the Manila job [3] and do something similar in Your project. If that job will cause some problems, You can make it non-voting temporary and work on fix it but we highly recommend to have this job voting already. If You would have any questions, please reach out to us here or on the #openstack-tc IRC channel. [1] https://governance.openstack.org/tc/resolutions/20220210-release-cadence-ad… [2] https://github.com/openstack/grenade/blob/b1cd7a1866ee7d17392bd9896db6060d4… [3] https://review.opendev.org/c/openstack/manila/+/859875 -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

[Image Encryption] No meeting on Monday
by Josephine Seifert 30 Sep '22

30 Sep '22

Hi, Monday the 3. of October is a national holiday. So there will not be a meeting for the Image Encryption pop up team. cheers, Luzi

1 0

[ironic] Stable & Bugfix branch maintenance and retirement
by Jay Faulkner 29 Sep '22

29 Sep '22

Hi folks, I'm letting you all know it's my intention to, very soon, perform the following actions on all Ironic projects: 1) Perform a release for any maintained stable and bugfix branches (EM stable branches excluded by policy) 2) Retire all stable branches for releases prior to stable/train (For Ironic; this is queens, rocky, and stein -- I have not enumerated them yet for other projects). If you either have code you'd like to ensure gets in the stable release or want to step up and volunteer to maintain the older branches -- including backporting existing bugfixes that did not make it back that far and maintaining CI -- please let me know within the next couple of days. Thanks, Jay Faulkner OpenStack Ironic PTL OpenStack TC member

1 0

[neutron] Drivers meeting agenda -30.09.2022.
by Lajos Katona 29 Sep '22

29 Sep '22

Hi Neutron Drivers, The agenda for tomorrow's drivers meeting is at [1]. We have the following RFE to discuss: * [RFE] Expose Open vSwitch other_config column in the API (#link https://bugs.launchpad.net/neutron/+bug/1990842 ) [1] https://wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda See you at the meeting tomorrow. Lajos Katona (lajoskatona)

1 0

[kolla][centos][rdo] NOTICE: OVS version mismatch between Wallaby and later
by Radosław Piliszek 29 Sep '22

29 Sep '22

Dears, This is a notice to users of OVS with Kolla with CentOS-Stream-8-based images or RDO directly. It seems that RDO Wallaby currently installs OVS 2.17 while later ones install OVS 2.15. The problem is that currently: *** Upgrades from Wallaby to Xena will cause OVS to misbehave and lose all network connectivity until host reboot. *** This is because downgrades of running OVS are not supported. We are investigating this issue, please stay tuned to this topic. The solution we believe to be the correct one now is to bump OVS to 2.17 also in later branches of RDO. Kind regards, Radek -yoctozepto

1 1

[Glance] Weekly Meeting Cancelled
by Pranali Deore 29 Sep '22

29 Sep '22

Hello, This week's upstream meeting is cancelled, since there is nothing on agenda for today. Thanks & Regards, Pranali Deore

1 0

[kolla][ssl] Deploy third-party SSL for HAProxy
by Satish Patel 29 Sep '22

29 Sep '22

Folks, I have GoDaddy SSL cert and trying to deploy with kolla but little big confused with this doc https://docs.openstack.org/kolla-ansible/latest/admin/tls.html I have a single interface for internal/external vip and try following config to deploy SSL/TLS for haproxy and other services. --- openstack_release: "wallaby" kolla_internal_vip_address: "10.73.0.180" kolla_external_vip_address: "{{ kolla_internal_vip_address }}" network_interface: "eth0" neutron_external_interface: "eth1" # TLS kolla_enable_tls_internal: "yes" kolla_certificates_dir: "/etc/kolla/certificates" kolla_internal_fqdn_cert: "{{ kolla_certificates_dir }}/my_company_cert.pem" When i run "kolla-ansible -i multinode certificates" command it deploy something but then i found it generated certificate itself (self-sign) in /etc/kolla/cacertificates directory and override my third-party cert When I tried in the browser https://foobar.com it didn't connect to 443 port that means it did not enable SSL. Am I missing something here?

2 8

(no subject)
by fereshteh loghmani 29 Sep '22

29 Sep '22

in kolla ansible (release: victoria) when i run command: " kolla-ansible -i ./multinode bootstrap-servers --limit compute1 " i receive this error: TASK [baremetal : Enable docker apt repository] * fatal: [R5DG1.cpaas.ir]: FAILED! => {"changed": false, "msg": "apt cache update failed"} could you please help me how could i fix this? ( my compute1 has the ubuntu20 )

2 1