January 2023 - openstack-discuss - lists.openstack.org

Difficulties Developing a Horizon Customization Module
by Adam Cooper 17 Jan '23

17 Jan '23

Hello! I sent a message to the #openstack IRC last week, but did not receive any replies. I am attempting to create a customization module for Horizon and having difficulties getting things to function. I'm on a fork of the Xena release, and following these docs: https://docs.openstack.org/horizon/9.1.1/topics/customizing.html. At the present, I'm trying to figure out some weird behavior where having the file `openstack_dashboard/local/local_settings.py` causes Horizon to respond to every request with a 400 error. There is no information regarding this in the logs or the HTTP response as far as I can see. It does this with an empty module, or if it just contains HORIZON_CONFIG = {...}. Is there something I'm missing? I would just like to be able to debug this issue so I can actually develop the module. If this is not the right way to ask for help, I would appreciate a pointer to the correct channels. Thanks! -- Adam Cooper Cloud Computing Engineer, Security Point of Contact Chameleon Cloud University of Chicago, Argonne National Laboratory

1 0

[OSSA-2023-001] Swift: Arbitrary file access through custom S3 XML entities (CVE-2022-47950)
by Jeremy Stanley 17 Jan '23

17 Jan '23

=================================================================== OSSA-2023-001: Arbitrary file access through custom S3 XML entities =================================================================== :Date: January 17, 2023 :CVE: CVE-2022-47950 Affects ~~~~~~~ - Swift: <2.28.1, >=2.29.0 <2.29.2, ==2.30.0 Description ~~~~~~~~~~~ Sébastien Meriot (OVH) reported a vulnerability in Swift's S3 XML parser. By supplying specially crafted XML files an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server resulting in unauthorized read access to potentially sensitive data; this impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed). Only deployments with S3 compatibility enabled are affected. Patches ~~~~~~~ - https://review.opendev.org/870823 (2023.1/antelope) - https://review.opendev.org/870828 (Wallaby) - https://review.opendev.org/870827 (Xena) - https://review.opendev.org/870826 (Yoga) - https://review.opendev.org/870825 (Zed) Credits ~~~~~~~ - Sébastien Meriot from OVH (CVE-2022-47950) References ~~~~~~~~~~ - https://launchpad.net/bugs/1998625 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47950 Notes ~~~~~ - The stable/wallaby branch is under extended maintenance and will receive no new point releases, but a patch for it is provided as a courtesy. -- Jeremy Stanley OpenStack Vulnerability Management Team

1 0

Re: Experience with VGPUs (Tobias Urdin)
by Karl Kloppenborg 17 Jan '23

17 Jan '23

Hi Tobias, I saw your message, interesting method to get around the transient mdev issue. Have you looked into implementing cyborg as a method to alleviate this? We are currently assessing it for a different project using nvidia A40’s. Would be keen to swap war stories and see if we can make a better solution than the current vGPU mdev support going on. Kind Regards, Karl. You can book a 30-minute meeting with me by clicking this link.<https://calendly.com/karl_rwts/30min> -- Karl Kloppenborg, Systems Engineering (BCompSc, CNCF-[KCNA, CKA, CKAD], LFCE, CompTIA Linux+ XK0-004) Real World Technology Solutions - IT People you can trust Voice | Data | IT Procurement | Managed IT rwts.com.au<http://rwts.com.au> | 1300 798 718 [uc%3fexport=download&id=1M0bR7j1-rXl-e7k5f1Rhwot6K_vfuAvn&revid=0B4fBbZ0cwq-1WFdQSExlR28rOEtUanJjOGcvQnJjMFhEMlEwPQ] Real World is a DellEMC Gold Partner This document should be read only by those persons to whom it is addressed and its content is not intended for use by any other persons. If you have received this message in error, please notify us immediately. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. We are not liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Please consider the environment before printing this e-mail. From: openstack-discuss-request(a)lists.openstack.org <openstack-discuss-request(a)lists.openstack.org> Date: Tuesday, 17 January 2023 at 9:06 pm To: openstack-discuss(a)lists.openstack.org <openstack-discuss(a)lists.openstack.org> Subject: openstack-discuss Digest, Vol 51, Issue 51 Send openstack-discuss mailing list submissions to openstack-discuss(a)lists.openstack.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss or, via email, send a message with subject or body 'help' to openstack-discuss-request(a)lists.openstack.org You can reach the person managing the list at openstack-discuss-owner(a)lists.openstack.org When replying, please edit your Subject line so it is more specific than "Re: Contents of openstack-discuss digest..." Today's Topics: 1. Re: Enable fstrim automatically on cinder thin lvm provisioning (Rajat Dhasmana) 2. Re: Experience with VGPUs (Tobias Urdin) 3. Re: [designate] Proposal to deprecate the agent framework and agent based backends (Thomas Goirand) 4. Re: Experience with VGPUs (Sylvain Bauza) ---------------------------------------------------------------------- Message: 1 Date: Tue, 17 Jan 2023 10:11:27 +0530 From: Rajat Dhasmana <rdhasman(a)redhat.com> To: A Monster <amonster369(a)gmail.com> Cc: openstack-discuss <openstack-discuss(a)lists.openstack.org> Subject: Re: Enable fstrim automatically on cinder thin lvm provisioning Message-ID: <CAARK8KQ3rM9KSQ9vFP+CAVPL_xAksxfXvFuvZj8gd7FeFT6LTw(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hi, We've a config option 'report_discard_supported'[1] which can be added to cinder.conf that will enable trim/unmap support. Also I would like to suggest not creating new openstack-discuss threads for the same issue and reuse the first one created. As I can see these are the 3 threads for the same issue[2][3][4]. [1] https://docs.openstack.org/cinder/latest/configuration/block-storage/config… [2] https://lists.openstack.org/pipermail/openstack-discuss/2023-January/031789… [3] https://lists.openstack.org/pipermail/openstack-discuss/2023-January/031797… [4] https://lists.openstack.org/pipermail/openstack-discuss/2023-January/031805… Thanks Rajat Dhasmana On Tue, Jan 17, 2023 at 8:57 AM A Monster <amonster369(a)gmail.com> wrote: > I deployed openstack using kolla ansible, and used LVM as storage backend > for my cinder service, however I noticed that the lvm thin pool size keeps > increasing even though the space used by instances volumes is the same, and > after a bit of investigating I found out that I had to enable fstrim > because the data deleted inside the logical volumes was still allocated > from the thin pool perspective and I had to do fstrim on those volumes, > > how can I enable this automatically in openstack? >

1 0

Enable fstrim automatically on cinder thin lvm provisioning
by A Monster 17 Jan '23

17 Jan '23

I deployed openstack using kolla ansible, and used LVM as storage backend for my cinder service, however I noticed that the lvm thin pool size keeps increasing even though the space used by instances volumes is the same, and after a bit of investigating I found out that I had to enable fstrim because the data deleted inside the logical volumes was still allocated from the thin pool perspective and I had to do fstrim on those volumes, how can I enable this automatically in openstack?

2 1

When is client-side modified being added?
by Adisa Nicholson aka Tynamite 16 Jan '23

16 Jan '23

Hello Openstack When is client-side modified being added as a new feature? Right now I'm paying for file hosting and when I upload a file, the "date modified" isn't respected for that file. It always takes the "date modified" for the file as the current date, not the one on the file I was uploading from my computer. I've contacted the company I brought it from, and they said that client-side modified isn't supported in the Openstack API <https://docs.openstack.org/swift/latest/s3_compat.html>. What API method would this be exactly? Would it be the "object tagging" method? Do you lot have any idea when this feature would be added in, so my file uploads will respect the "date modified" metadata?

1 0

[kolla] where to find docker compose files
by garcetto 16 Jan '23

16 Jan '23

good afternoon, where can i find docker compose files for quay,io docker images used in kolla-ansible? need to undestand how are build, thank you.

2 1

Cinder LVM backend shows 100% space usage
by A Monster 16 Jan '23

16 Jan '23

I deployed openstack using kolla ansible using LVM as a backend, but after using it for a while, I ended up creating multiple volume with different sizes, but now I can no longer create new volumes, after checking lvs I found out that the thin pool created by cinder displays a 100% space usage of 20TB , but the size used by the volumes created is less than 1TB. how can I fix this isse?

1 0

Re: [Heat][OpenStack-I18n] Need help in making sense of a message in Heat
by Ian Y. Choi 16 Jan '23

16 Jan '23

(Adding openstack-discuss mailing list and adding "[Heat]" on the subject) Hi, It would be so great if OpenStack Heat users or developers can help Juliette's question on i18n thread! Thank you all, /Ian On Fri, Jan 13, 2023 at 11:39 PM Juliette Tux <juliette.tux(a)gmail.com> wrote: > > Hello, > Could anybody kindly elaborate on the meaning of a condition in a message: > > "The flag which represents condition of reserved resources of the > lease. If it is true, the amount of reserved resources is less than > the request or reserved resources were changed." > > The obscure part for me is "less than the request or reserved > resources were changed." > > Context: heat/engine/resources/openstack/blazar/lease.py:233 > > TY! > > -- > С уважением, Дронова Юлия > > _______________________________________________ > OpenStack-I18n mailing list > OpenStack-I18n(a)lists.openstack.org

3 2

[neutron] Bug Deputy Report January 9 - 15
by Lucas Alvares Gomes 16 Jan '23

16 Jan '23

Hi, This is the Neutron bug report from January 9th to 15th. *Critical:* * https://bugs.launchpad.net/neutron/+bug/2002800 - "Allow multiple IPv6 ports on router from same network on ml2/ovs+vxlan+dvr" - Assigned to: Fernando Royo *High:* * https://bugs.launchpad.net/neutron/+bug/2002417 - "DVR+HA routers all answering to ping on private interface" - Assigned to: Arnaud Morin *Needs further triage:* * https://bugs.launchpad.net/neutron/+bug/2002577 - "The neutron-keepalived-state-change.log log is not rotated and grows without bound until disk is full" - Unassigned *Low:* * https://bugs.launchpad.net/neutron/+bug/2002839 - "Remove compatibility with OVN<20.09" - Unassigned *RFE / Wishlist:* * https://bugs.launchpad.net/neutron/+bug/2002687 - "[RFE] Active-active L3 Gateway with Multihoming" - Assigned to: Dmitrii Shcherbakov Cheers, Lucas

1 0

[skyline][i18n] Questions on more language translation support
by Ian Y. Choi 16 Jan '23

16 Jan '23

Hi Skyline team and I18n contributors, First, Skyline team, thank you for considering skyline with i18n! As Seongsoo started to talk via skyline IRC channel [1], I see that there are some needs for more language support for the Skyline project. Let me elaborate through the following questions as current I18n SIG lead: 1. Skyline team: While I believe you are welcome to contribute to other languages by adding per-language json files like [2], is it okay to contribute Korean language through Korea User Group members? Me and/or Seongsoo would like to happily step up as reviewers to guarantee sufficient language quality. 2. Any translation interests from other I18n language teams? Feel free to tell me or reply to this thread. 3. While number 1 would be a short-term approach to add Korean language support, to support more international languages, I want to suggest integrating with react-intl if skyline is using react (from my brief investigation, it is yes through [3]), since react-intl support to convert json <-> pot which functionality was previously used by tripleo-ui for i18n support [4]. Although I18n SIG is trying to migrate from Zanata to Weblate, a new translation platform [5], pot support would be essential for standardizing i18n and the translation process. With many thanks, /Ian [1] https://meetings.opendev.org/irclogs/%23openstack-skyline/%23openstack-skyl… [2] https://github.com/openstack/skyline-console/tree/master/src/locales [3] https://opendev.org/openstack/skyline-console/src/branch/master/package.jso… [4] https://opendev.org/openstack/tripleo-ui/src/commit/d1baef537f0746efceacfdd… [5] https://lists.openstack.org/pipermail/openstack-i18n/2022-October/003559.ht…

2 1