January 2024 - openstack-discuss - lists.openstack.org

[keystone] meeting canceled this week (24-Jan-2024)
by Dave Wilde 24 Jan '24

24 Jan '24

Hi folks, Sorry for the late notice but I unfortunately need to cancel the Keystone weekly meeting for today. Please add any agenda items here [1] and ping me via email or at d34dh0r53 on IRC. Thanks! 1: https://etherpad.opendev.org/p/keystone-weekly-meeting /Dave

1 0

[ops] help with openstack horizon
by Shubham Yadav 24 Jan '24

24 Jan '24

I have a question, is it possible to set in Horizon just one language - English? I mean that if you are new and login to openstack it will automatically set the language according to your browser. This could be sometimes confusing when you want to navigate by phone somebody with low expertise in OpenStack. is there any conf i can add in my horizon or theres any other way that stops browser from changing language in horizon? Hope to hear from you soon Thank You!

1 0

Re:RE: Mapping local SSD to virtual machine persistently
by 龚永生 24 Jan '24

24 Jan '24

How about ephemeral storage with the ssd? 龚永生浙江九州未来信息科技有限公司 99CLOUD Co. Ltd. 邮箱（Email）：gong.yongsheng(a)99cloud.net 地址：海淀区上地六街研华大厦5层南侧手机（Mobile)：+86-18618199879 公司网址（WebSite）：http://99cloud.net 发件人：Sang Tran Quoc <SangTQ8(a)fpt.com> 发送日期：2024-01-24 11:06:28 收件人：Karl Kloppenborg <kkloppenborg(a)resetdata.com.au>,"smooney(a)redhat.com" <smooney(a)redhat.com>,"openstack-discuss(a)lists.openstack.org" <openstack-discuss(a)lists.openstack.org> 抄送人：Cuong Truong Tran Quoc <CuongTTQ(a)fpt.com> 主题：RE: Mapping local SSD to virtual machine persistently Hi @smooney@redhat.com , and @Karl Kloppenborg Thanks for your helps. I also have questions regarding to your suggestion as below: @smooney@redhat.com Did you mention about cinder-volume with LVM driver? I tested it before, but the performance does not meet the requirement cause of the transportation of data via iSCSI protocol and it hard to compare with direct attach via libvirt. Your second idea are using flavor with ephemeral disk, right? @Karl Kloppenborg Your workaround suggestion looks good to me; I will search around for the accurate RabbitMQ event as you mentioned. Best Regards Sang. From: Karl Kloppenborg <kkloppenborg(a)resetdata.com.au> Sent: Wednesday, January 24, 2024 6:45 AM To: smooney(a)redhat.com; Sang Tran Quoc <SangTQ8(a)fpt.com>; openstack-discuss(a)lists.openstack.org Subject: Re: Mapping local SSD to virtual machine persistently Hey guys, One suggestion which might help you as a work around: Libvirt regenerates the xml’s based on nova receiving events via the RabbitMQ event bus. One option (which will require a bit of programming on your part) is to listen to the events that might impact the libvirt generation and execute the commands on your behalf. This would necessitate knowing/storing that VM->Device mapping somewhere, i.e a database. Thanks, Karl. From: smooney(a)redhat.com <smooney(a)redhat.com> Date: Tuesday, 23 January 2024 at 10:04 pm To: Sang Tran Quoc <SangTQ8(a)fpt.com>, openstack-discuss(a)lists.openstack.org <openstack-discuss(a)lists.openstack.org> Subject: Re: Mapping local SSD to virtual machine persistently On Tue, 2024-01-23 at 10:30 +0000, Sang Tran Quoc wrote: > > Hello community, > > I've got a question related to the raw device mapping to the OpenStack virtual machine. The situation is I have > several SSDs along with my compute node and I would like to attach these SSDs to my virtual machine for enhancing the > disk performance. My current solution is using command "virsh attach-disk <dom> <host-device> <guest-device>" but it > not persistently and need to manual re-attach after hard-rebooting which lead to re-generate the xml vm structure. > So, I wonder if there is an official solution for my problems. Thank you and welcome for every help in our community. This is currenly not supported in openstack. we have discussed adding local storage functionality to nova in the past but its non triavial since we woudl need a new rest api to allow attaching/detaching them and schduelr intengration. unfortuntly that means that today you cannot achive your goal. if you need to attach addtional storage dynamically your only option is cinder volumes. you can provide addtional storage in the flavor but only statical > > Best regards, > Sang Tran

3 2

[Glance] Weekly Meeting Cancelled for this Week
by Pranali Deore 24 Jan '24

24 Jan '24

Hello, As discussed during the last meeting[1], the glance meeting is cancelled for this week. See you next week ! [1]: https://meetings.opendev.org/irclogs/%23openstack-meeting/%23openstack-meet… Thanks & Regards, Pranali D.

1 0

Re: Security Group
by Rodolfo Alonso Hernandez 24 Jan '24

24 Jan '24

Hello Benyamin: Please check the Neutron security group documentation. What you are doing is to filter by an inport, traffic type (IPv4, TCP) and a dst port. This is something that you can done using the SG API: https://docs.openstack.org/python-openstackclient/pike/cli/command-objects/… . Regards. On Wed, Jan 24, 2024 at 10:15 AM benyamin sam khanyani < bsamkhaniyani(a)gmail.com> wrote: > Hello Rodolf: > > As an example, I have added an ACL rule by following command: > > ovn-nbctl acl-add c56beb58-5eca-4c16-ad75-b28ff2b33b83 to-lport 1002 > "outport == @pg_55bcfed5_3355_4de7_a5c3_53f256f83e81 && ip4 && ip4.src == > 0.0.0.0/0 && tcp && tcp.dst == 555" allow-related > > I can see it when I run the "ovn-nbctl list acl" command and it works > properly in my environment. Now, I want to make it permanent but as you > said, it's not possible and the only source of truth is Neutron. > > As a result, none of ovn-nbctl commands work permanently and everything > must be changed by Neutron. So, I want to ask you if it is possible to have > a way to make these commands permanent. I think the db_sync function can be > enhanced and it can facilitate networking in OpenStack because there are a > variety of changes we can apply by ovn-nbctl commands and these are not > possible by using Neutron. > > Best, > Ben > > On Tue, 23 Jan 2024 at 20:08, Rodolfo Alonso Hernandez < > ralonsoh(a)redhat.com> wrote: > >> Hello Benyamin: >> >> Can you specify what rules are you manually creating the OVN database? >> >> The code you are referring to is the sync tool. The goal of this tool is >> to sync both databases, OVN and Neutron. But please remember that Neutron >> is the CMS, is the only source of truth and it controls the network >> backend, in this case OVN. Any definition should be done in Neutron and any >> manual change in the OVN database will be restored or the environment will >> fail. >> >> Regards. >> >> On Tue, Jan 23, 2024 at 11:15 AM benyamin sam khanyani < >> bsamkhaniyani(a)gmail.com> wrote: >> >>> Thanks for your comprehensive reply. >>> >>> I apply completely similar rules to what Neutron installs on OVN >>> Northbound Database and I think it is compatible with LB, OVS, and OVN. I >>> think the main issue is the sync mechanism between Neutron DB and OVN >>> Northbound DB[1](Line 244). Clearly, It's not a bug but I think this >>> function can be enhanced in order to support changes which can be defined >>> directly in OVN Northbound DB. As there are a variety of functionalities in >>> ovn-nbctl and ovn-sbctl command line tools, I believe that it could be >>> beneficial. >>> >>> [1] >>> https://github.com/openstack/neutron/blob/dad8c3fecc4e97764a92f558d9df510fa… >>> >>> >>> On Mon, 22 Jan 2024 at 18:31, Rodolfo Alonso Hernandez < >>> ralonsoh(a)redhat.com> wrote: >>> >>>> Hello Benyamin: >>>> >>>> I'm guessing from your mail that you are referring to Neutron security >>>> groups and you are using ML2/OVN. Any SG rule should be defined in Neutron, >>>> not in OVN directly. The Neutron SG rules are translated to ACLs and >>>> applied to a port group. If you are interested in how this is done, please >>>> check [1]. >>>> >>>> If you want to add any new functionality to the SG rules, you should >>>> create a LP bug [2] with a RFE. This RFE should be a high level description >>>> of what want to implement. Be aware that we have multiple mechanism drivers >>>> in-tree: LB, OVS and OVN. This feature should be compatible with all of >>>> them. The RFE can be discussed during the Neutron drivers meetings [3]. >>>> >>>> Regards. >>>> >>>> [1] >>>> https://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/driver… >>>> [2]https://bugs.launchpad.net/neutron/ >>>> [3]https://meetings.opendev.org/#Neutron_drivers_Meeting >>>> >>>> On Mon, Jan 22, 2024 at 3:41 PM benyamin sam khanyani < >>>> bsamkhaniyani(a)gmail.com> wrote: >>>> >>>>> Hi, >>>>> >>>>> I am working on the security group and aim to extend its functionality >>>>> by applying custom rules based on source and destination ports, arbitrary >>>>> match criteria, actions, and so on. I did it by using ovn-nbctl commands >>>>> and everything worked well. Unfortunately, the only issue is that I can not >>>>> see my custom rules in MariaDB and I didn't find any other solution for >>>>> defining security group rules with my desired options. So, I want to ask >>>>> you how I can tackle this issue? >>>>> >>>>> Regards, >>>>> Benjamin Sam >>>>> >>>>

1 0

Instances shutting themselves down
by Karera Tony 24 Jan '24

24 Jan '24

Hello Team, I have an openstack environment with 4 compute Nodes however yesterday out of the blue, the Instances on one of the compute nodes started shutting themselves down. Then I realized the the compute service was disabled when I checked in Horizon. I enabled it and restarted the instances and all was well but I cant figure out what caused it. I have attached the nova_compute logs here incase someone would like to support https://paste.openstack.org/show/bxqpgjvqT3DlOYWoeejc/ Regards Tony Karera

2 1

Mapping local SSD to virtual machine persistently
by Sang Tran Quoc 24 Jan '24

24 Jan '24

Hello community, I've got a question related to the raw device mapping to the OpenStack virtual machine. The situation is I have several SSDs along with my compute node and I would like to attach these SSDs to my virtual machine for enhancing the disk performance. My current solution is using command "virsh attach-disk <dom> <host-device> <guest-device>" but it not persistently and need to manual re-attach after hard-rebooting which lead to re-generate the xml vm structure. So, I wonder if there is an official solution for my problems. Thank you and welcome for every help in our community. Best regards, Sang Tran

3 3

Openstack-Ansible External Networking OVN (Br-ex)
by jjjamesg 23 Jan '24

23 Jan '24

I can't for the life of me get external connectivity working, openstack itself works i just cant get external connectivity working, I can see ovs has created br-ex with bond1 attached. ovs-vsctl get open . external_ids:ovn-bridge-mapping shows: "physnst1:br-ex" I have tried creating the network with both: openstack network create --share --external --provider-physical-network physnet1 --provider-network-type vlan --provider-segment 233 public openstack network create --share --external --provider-physical-network physnet1 --provider-network-type flat publicnet-flat Only errors i can see is in the neutron container when i try and either create an instance on said network or attach a fip is is: (similar errors from a vlan type network this is just the error i pulled at the time) ERROR neutron.plugins.ml2.managers [req-de7f1cb8-ac8e-4dd6-ad2a-e14afdb152b5 req-c6a2aaff-ccf9-4ef3-9ef 7-1a8e4c7a1e41 9c27de6bdc4449abbbbcd5e5c4951bb9 2fced1ff77f5428eb2b63879bdd608cc - - default default] Failed to bind port 03cc1708-d4a2-4b11-bca2-40ebe0acff60 on host 02 for vnic_type normal using segments [{'id': '2ef64682-b5ff-472b-935d-a3c2b615d70f', 'network_type': 'flat', 'physical_network': 'physnet1', 'segmentation_id': None, 'network_id': '52b4f4e9-47f3-431b-8c45-ec8cc17f561d'}] WARNING neutron.scheduler.dhcp_agent_scheduler [None req-aafa81d9-479c-4f56-be6f-54d4ab3b42aa 1b29a 2297a224cdcaaba84e0eac30205 bafabcf2414d4adf98cab165c3f3de12 - - default default] No more DHCP agents WARNING neutron.api.rpc.agentnotifiers.dhcp_rpc_agent_api [None req-aafa81d9-479c-4f56-be6f-54d4ab3b42aa 1b29a2297a224cdcaaba84e0eac30205 bafabcf2414d4adf98cab165c3f3de12 - - default default] Unable to schedule network 5fa049f5-0ed4-4287-9c63-dd753c853c35: no agents available; will retry on subsequent port and subnet creation events. I just cant figure out WHY this isn't working.. Below is my config: ############# ### /etc/network/interfaces: ############# auto bond1 iface bond1 inet manual bond-slaves eno2 eno4 bond-mode 802.3ad bond-miimon 100 bond-downdelay 200 bond-updelay 200 bond-lacp-rate 1 mtu 9000 auto bond1.30 iface bond1.30 inet manual vlan-raw-device bond1 ## (br-pubv is for my public vip) auto bond1.232 iface bond1.232 inet manual vlan-raw-device bond1 auto br-overlay iface br-overlay inet static bridge_stp off bridge_waitport 0 bridge_fd 0 bridge_ports bond1.30 address auto br-pubv iface br-pubv inet static address gateway bridge_stp off bridge_waitport 0 bridge_fd 0 bridge_ports bond1.232 ############# ### openstack_user_config.yml: ############# - network: container_bridge: "br-ex" network_interface: "bond1" type: "vlan" range: "232:332" net_name: "physnet1" group_binds: - neutron_ovn_controller ############# ### user_variables.yml ############# neutron_plugin_type: ml2.ovn neutron_plugin_base: - ovn-router - qos - neutron.services.ovn_l3.plugin.OVNL3RouterPlugin - neutron_dynamic_routing.services.bgp.bgp_plugin.BgpPlugin - vpnaas - metering - firewall_v2 neutron_ml2_drivers_type: "vlan,local,geneve,flat" neutron_provider_networks: network_types: "geneve" network_geneve_ranges: "1:1000" network_vlan_ranges: "physnet1" network_mappings: "physnet1:br-ex" network_interface_mappings: "br-ex:bond1" Bond1 is a trunk port (no native vlan), that has access to both overlay vlan and the 232:332 vlan range which both work when setting either network as a bridge on bond1 so connectivity is there. I have network-northd/gateway_hosts defined as well as: neutron_neutron_conf_overrides: ovn: enable_distributed_floating_ip: True openstack_host_specific_kernel_modules: - name: "openvswitch" pattern: "CONFIG_OPENVSWITCH" This should by all accounts just work, but for some reason for me it's not, what steps have i missed?

1 0

Re: Security Group
by Rodolfo Alonso Hernandez 23 Jan '24

23 Jan '24

Hello Benyamin: Can you specify what rules are you manually creating the OVN database? The code you are referring to is the sync tool. The goal of this tool is to sync both databases, OVN and Neutron. But please remember that Neutron is the CMS, is the only source of truth and it controls the network backend, in this case OVN. Any definition should be done in Neutron and any manual change in the OVN database will be restored or the environment will fail. Regards. On Tue, Jan 23, 2024 at 11:15 AM benyamin sam khanyani < bsamkhaniyani(a)gmail.com> wrote: > Thanks for your comprehensive reply. > > I apply completely similar rules to what Neutron installs on OVN > Northbound Database and I think it is compatible with LB, OVS, and OVN. I > think the main issue is the sync mechanism between Neutron DB and OVN > Northbound DB[1](Line 244). Clearly, It's not a bug but I think this > function can be enhanced in order to support changes which can be defined > directly in OVN Northbound DB. As there are a variety of functionalities in > ovn-nbctl and ovn-sbctl command line tools, I believe that it could be > beneficial. > > [1] > https://github.com/openstack/neutron/blob/dad8c3fecc4e97764a92f558d9df510fa… > > > On Mon, 22 Jan 2024 at 18:31, Rodolfo Alonso Hernandez < > ralonsoh(a)redhat.com> wrote: > >> Hello Benyamin: >> >> I'm guessing from your mail that you are referring to Neutron security >> groups and you are using ML2/OVN. Any SG rule should be defined in Neutron, >> not in OVN directly. The Neutron SG rules are translated to ACLs and >> applied to a port group. If you are interested in how this is done, please >> check [1]. >> >> If you want to add any new functionality to the SG rules, you should >> create a LP bug [2] with a RFE. This RFE should be a high level description >> of what want to implement. Be aware that we have multiple mechanism drivers >> in-tree: LB, OVS and OVN. This feature should be compatible with all of >> them. The RFE can be discussed during the Neutron drivers meetings [3]. >> >> Regards. >> >> [1] >> https://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/driver… >> [2]https://bugs.launchpad.net/neutron/ >> [3]https://meetings.opendev.org/#Neutron_drivers_Meeting >> >> On Mon, Jan 22, 2024 at 3:41 PM benyamin sam khanyani < >> bsamkhaniyani(a)gmail.com> wrote: >> >>> Hi, >>> >>> I am working on the security group and aim to extend its functionality >>> by applying custom rules based on source and destination ports, arbitrary >>> match criteria, actions, and so on. I did it by using ovn-nbctl commands >>> and everything worked well. Unfortunately, the only issue is that I can not >>> see my custom rules in MariaDB and I didn't find any other solution for >>> defining security group rules with my desired options. So, I want to ask >>> you how I can tackle this issue? >>> >>> Regards, >>> Benjamin Sam >>> >>

1 0

[ops] help with multiattach volume type in cinder
by Shubham Yadav 23 Jan '24

23 Jan '24

Hi, i have a question/issue related to multiattach feature in cinder i have an openstack cluster and i have configured multiattach in the openstack cinder now when i create 1 volume (with volume type multiattach) and attach it to 2 instances test1 and test2 *on test1 sudo mkfs -t ext4 /dev/sdb sudo mkdir /mnt/mydisk sudo mount /dev/sdb /mnt/mydisk touch /mnt/mydisk/shared_file echo "This is some shared content" | sudo tee /mnt/mydisk/shared_fileon test2 sudo mkdir /mnt/mydisksudo mount /dev/sdb /mnt/mydiskls /mnt/mydisk/cat /mnt/mydisk/shared_file* i can see the shared_file now when i add new files on test1 im not able to see it on test2 untill i unmount the volume with directory and mount the directory again to the volume on test2. what could be the solution for it? how can i make the volume share datas instantly between all the instances connected to the volume i have tried with ext4 and xfs file system Hope to hear from you soon Thank you!

2 1