January 2024 - openstack-discuss - lists.openstack.org

A questionnaire for unmaintained package users
by zhiqingzhong＠link.cuhk.edu.cn 25 Jan '24

25 Jan '24

1 0

[kolla][trove] Best practice to make guest-agent communicate with RPC
by Satish Patel 25 Jan '24

25 Jan '24

Folks, I am trying to find a kolla-ansible doc related to how to implement trove in production with best practices. Especially when a guest-agent (running inside VM) talks to RPC service. How are other folks doing in their environments? In most cases RPC is an internal service and not visible to any guest VMs. Looking for some guidance.

3 21

[Kolla-ansible][Ironic] Ironic PXE boot not working
by Jayesh Chaudhari 25 Jan '24

25 Jan '24

Hi, I have deployed following setup Openstack Version : Yoga Deployment Method : Kolla-ansible Node Provisioning tool : MAAS Now I am trying to integrate ironic service in it for BareMetal as a Service. My configuration for ironic in global.yml is following: enable_ironic: "yes" ironic_dnsmasq_interface: "ens2f0" #10G interface ironic_dnsmasq_dhcp_range: "10.145.50.50,10.145.50.60,255.255.255.192" ironic_cleaning_network: "ironic_provisioning_network" ironic_dnsmasq_default_gateway: 10.145.50.1 ironic_dnsmasq_boot_file: "pxelinux.0" ironic_inspector_kernel_cmdline_extras: ['ipa-lldp-timeout=90.0', 'ipa-collect-lldp=1'] ironic_http_port: "8089" ironic_enable_keystone_integration: "yes" My deployment is successful, but when I try to create openstack instance with baremetal flavor it stuck in pxe boot. If I use my 1G interface as ironic_dnsmasq_interface it pxe boot from MAAS. Is there any way I can use MAAS with ironic ? or how I can proceed with 10G interface? Thanks, Jayesh

1 0

[kolla-ansible][senlin] dashboard help
by garcetto 25 Jan '24

25 Jan '24

good afternoon, i set enable_senlin: "yes" on globals.yaml, but see no senlin dashboard, my fault? thank you.

2 1

[largescale-sig] Next meeting: January 24, 16utc
by Thierry Carrez 24 Jan '24

24 Jan '24

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 16UTC, our EU+US-friendly time. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20240124T16 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1

[keystone] meeting canceled this week (24-Jan-2024)
by Dave Wilde 24 Jan '24

24 Jan '24

Hi folks, Sorry for the late notice but I unfortunately need to cancel the Keystone weekly meeting for today. Please add any agenda items here [1] and ping me via email or at d34dh0r53 on IRC. Thanks! 1: https://etherpad.opendev.org/p/keystone-weekly-meeting /Dave

1 0

[ops] help with openstack horizon
by Shubham Yadav 24 Jan '24

24 Jan '24

I have a question, is it possible to set in Horizon just one language - English? I mean that if you are new and login to openstack it will automatically set the language according to your browser. This could be sometimes confusing when you want to navigate by phone somebody with low expertise in OpenStack. is there any conf i can add in my horizon or theres any other way that stops browser from changing language in horizon? Hope to hear from you soon Thank You!

1 0

Re:RE: Mapping local SSD to virtual machine persistently
by 龚永生 24 Jan '24

24 Jan '24

How about ephemeral storage with the ssd? 龚永生浙江九州未来信息科技有限公司 99CLOUD Co. Ltd. 邮箱（Email）：gong.yongsheng(a)99cloud.net 地址：海淀区上地六街研华大厦5层南侧手机（Mobile)：+86-18618199879 公司网址（WebSite）：http://99cloud.net 发件人：Sang Tran Quoc <SangTQ8(a)fpt.com> 发送日期：2024-01-24 11:06:28 收件人：Karl Kloppenborg <kkloppenborg(a)resetdata.com.au>,"smooney(a)redhat.com" <smooney(a)redhat.com>,"openstack-discuss(a)lists.openstack.org" <openstack-discuss(a)lists.openstack.org> 抄送人：Cuong Truong Tran Quoc <CuongTTQ(a)fpt.com> 主题：RE: Mapping local SSD to virtual machine persistently Hi @smooney@redhat.com , and @Karl Kloppenborg Thanks for your helps. I also have questions regarding to your suggestion as below: @smooney@redhat.com Did you mention about cinder-volume with LVM driver? I tested it before, but the performance does not meet the requirement cause of the transportation of data via iSCSI protocol and it hard to compare with direct attach via libvirt. Your second idea are using flavor with ephemeral disk, right? @Karl Kloppenborg Your workaround suggestion looks good to me; I will search around for the accurate RabbitMQ event as you mentioned. Best Regards Sang. From: Karl Kloppenborg <kkloppenborg(a)resetdata.com.au> Sent: Wednesday, January 24, 2024 6:45 AM To: smooney(a)redhat.com; Sang Tran Quoc <SangTQ8(a)fpt.com>; openstack-discuss(a)lists.openstack.org Subject: Re: Mapping local SSD to virtual machine persistently Hey guys, One suggestion which might help you as a work around: Libvirt regenerates the xml’s based on nova receiving events via the RabbitMQ event bus. One option (which will require a bit of programming on your part) is to listen to the events that might impact the libvirt generation and execute the commands on your behalf. This would necessitate knowing/storing that VM->Device mapping somewhere, i.e a database. Thanks, Karl. From: smooney(a)redhat.com <smooney(a)redhat.com> Date: Tuesday, 23 January 2024 at 10:04 pm To: Sang Tran Quoc <SangTQ8(a)fpt.com>, openstack-discuss(a)lists.openstack.org <openstack-discuss(a)lists.openstack.org> Subject: Re: Mapping local SSD to virtual machine persistently On Tue, 2024-01-23 at 10:30 +0000, Sang Tran Quoc wrote: > > Hello community, > > I've got a question related to the raw device mapping to the OpenStack virtual machine. The situation is I have > several SSDs along with my compute node and I would like to attach these SSDs to my virtual machine for enhancing the > disk performance. My current solution is using command "virsh attach-disk <dom> <host-device> <guest-device>" but it > not persistently and need to manual re-attach after hard-rebooting which lead to re-generate the xml vm structure. > So, I wonder if there is an official solution for my problems. Thank you and welcome for every help in our community. This is currenly not supported in openstack. we have discussed adding local storage functionality to nova in the past but its non triavial since we woudl need a new rest api to allow attaching/detaching them and schduelr intengration. unfortuntly that means that today you cannot achive your goal. if you need to attach addtional storage dynamically your only option is cinder volumes. you can provide addtional storage in the flavor but only statical > > Best regards, > Sang Tran

3 2

[Glance] Weekly Meeting Cancelled for this Week
by Pranali Deore 24 Jan '24

24 Jan '24

Hello, As discussed during the last meeting[1], the glance meeting is cancelled for this week. See you next week ! [1]: https://meetings.opendev.org/irclogs/%23openstack-meeting/%23openstack-meet… Thanks & Regards, Pranali D.

1 0

Re: Security Group
by Rodolfo Alonso Hernandez 24 Jan '24

24 Jan '24

Hello Benyamin: Please check the Neutron security group documentation. What you are doing is to filter by an inport, traffic type (IPv4, TCP) and a dst port. This is something that you can done using the SG API: https://docs.openstack.org/python-openstackclient/pike/cli/command-objects/… . Regards. On Wed, Jan 24, 2024 at 10:15 AM benyamin sam khanyani < bsamkhaniyani(a)gmail.com> wrote: > Hello Rodolf: > > As an example, I have added an ACL rule by following command: > > ovn-nbctl acl-add c56beb58-5eca-4c16-ad75-b28ff2b33b83 to-lport 1002 > "outport == @pg_55bcfed5_3355_4de7_a5c3_53f256f83e81 && ip4 && ip4.src == > 0.0.0.0/0 && tcp && tcp.dst == 555" allow-related > > I can see it when I run the "ovn-nbctl list acl" command and it works > properly in my environment. Now, I want to make it permanent but as you > said, it's not possible and the only source of truth is Neutron. > > As a result, none of ovn-nbctl commands work permanently and everything > must be changed by Neutron. So, I want to ask you if it is possible to have > a way to make these commands permanent. I think the db_sync function can be > enhanced and it can facilitate networking in OpenStack because there are a > variety of changes we can apply by ovn-nbctl commands and these are not > possible by using Neutron. > > Best, > Ben > > On Tue, 23 Jan 2024 at 20:08, Rodolfo Alonso Hernandez < > ralonsoh(a)redhat.com> wrote: > >> Hello Benyamin: >> >> Can you specify what rules are you manually creating the OVN database? >> >> The code you are referring to is the sync tool. The goal of this tool is >> to sync both databases, OVN and Neutron. But please remember that Neutron >> is the CMS, is the only source of truth and it controls the network >> backend, in this case OVN. Any definition should be done in Neutron and any >> manual change in the OVN database will be restored or the environment will >> fail. >> >> Regards. >> >> On Tue, Jan 23, 2024 at 11:15 AM benyamin sam khanyani < >> bsamkhaniyani(a)gmail.com> wrote: >> >>> Thanks for your comprehensive reply. >>> >>> I apply completely similar rules to what Neutron installs on OVN >>> Northbound Database and I think it is compatible with LB, OVS, and OVN. I >>> think the main issue is the sync mechanism between Neutron DB and OVN >>> Northbound DB[1](Line 244). Clearly, It's not a bug but I think this >>> function can be enhanced in order to support changes which can be defined >>> directly in OVN Northbound DB. As there are a variety of functionalities in >>> ovn-nbctl and ovn-sbctl command line tools, I believe that it could be >>> beneficial. >>> >>> [1] >>> https://github.com/openstack/neutron/blob/dad8c3fecc4e97764a92f558d9df510fa… >>> >>> >>> On Mon, 22 Jan 2024 at 18:31, Rodolfo Alonso Hernandez < >>> ralonsoh(a)redhat.com> wrote: >>> >>>> Hello Benyamin: >>>> >>>> I'm guessing from your mail that you are referring to Neutron security >>>> groups and you are using ML2/OVN. Any SG rule should be defined in Neutron, >>>> not in OVN directly. The Neutron SG rules are translated to ACLs and >>>> applied to a port group. If you are interested in how this is done, please >>>> check [1]. >>>> >>>> If you want to add any new functionality to the SG rules, you should >>>> create a LP bug [2] with a RFE. This RFE should be a high level description >>>> of what want to implement. Be aware that we have multiple mechanism drivers >>>> in-tree: LB, OVS and OVN. This feature should be compatible with all of >>>> them. The RFE can be discussed during the Neutron drivers meetings [3]. >>>> >>>> Regards. >>>> >>>> [1] >>>> https://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/driver… >>>> [2]https://bugs.launchpad.net/neutron/ >>>> [3]https://meetings.opendev.org/#Neutron_drivers_Meeting >>>> >>>> On Mon, Jan 22, 2024 at 3:41 PM benyamin sam khanyani < >>>> bsamkhaniyani(a)gmail.com> wrote: >>>> >>>>> Hi, >>>>> >>>>> I am working on the security group and aim to extend its functionality >>>>> by applying custom rules based on source and destination ports, arbitrary >>>>> match criteria, actions, and so on. I did it by using ovn-nbctl commands >>>>> and everything worked well. Unfortunately, the only issue is that I can not >>>>> see my custom rules in MariaDB and I didn't find any other solution for >>>>> defining security group rules with my desired options. So, I want to ask >>>>> you how I can tackle this issue? >>>>> >>>>> Regards, >>>>> Benjamin Sam >>>>> >>>>

1 0