February 2024 - openstack-discuss

[largescale-sig] Next meeting: February 21, 16utc
by Thierry Carrez 21 Feb '24

21 Feb '24

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 16UTC, our EU+US time. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20240221T16 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1

Cinder Bug Report 2024-02-21
by Jon Bernard 21 Feb '24

21 Feb '24

Hello Argonauts, Cinder Bug Meeting Etherpad <https://etherpad.opendev.org/p/cinder-bug-squad-meeting> Undecided - IBM SVf : Enable support for force detach of a volume <https://bugs.launchpad.net/cinder/+bug/2054317> - Status: New Thanks, -- Jon

1 0

[keystone] Weekly meeting canceled 21-Feb-24
by Dave Wilde 21 Feb '24

21 Feb '24

Hi folks, Due to a family emergency I’m not able to host the keystone weekly meeting this week and so I am canceling it. Please reach out via email if you need anything from me as my ability to access IRC is limited right now. Thanks! /Dave

1 0

Openstack ansible service variables
by Gk Gk 21 Feb '24

21 Feb '24

Hi, We have an OSA setup. I see that common-playbooks/haproxy-service-config.yml has the following: --- - hosts: "{{ service_group }}" gather_facts: false run_once: true tasks: - name: "Temporarily copy haproxy_service_configs value from {{ service_group }} to haproxy_all" add_host: name: "{{ item }}" haproxy_service_configs: "{{ hostvars[inventory_hostname][service_variable] }}" with_items: "{{ groups['haproxy_all'] }}" How does the openstack ansible collect haproxy configuration for a specific service as in this case for repo service ? Where is this defined in the code ? How does it even generate specific haproxy variables for each service ? How does it specifically know what haproxy variables to collect ?

2 1

Haproxy and rabbitmq
by Gk Gk 21 Feb '24

21 Feb '24

Hi, We have the latest version of openstack setup. The rabbitmq backend health check is getting successful even though the curl to its ssl url is failing as shown below: ---- backend rabbitmq_mgmt-back mode http balance leastconn stick-table type ipv6 size 256k expire 10s store http_err_rate(10s) http-request track-sc0 src http-request deny deny_status 429 if { sc_http_err_rate(0) gt 20 } !{ src 192.168.0.0/16 } !{ src 172.16.0.0/12 } !{ src 10.0.0.0/8 } option forwardfor option httpchk HEAD / HTTP/1.0\r\nUser-agent:\ osa-haproxy-healthcheck server rabbit_mq_container-527affef <ip>:15671 check port 15671 inter 12000 rise 3 fall 3 ssl check-ssl verify none server rabbit_mq_container-68b39094 <IP>:15671 check port 15671 inter 12000 rise 3 fall 3 ssl check-ssl verify none server rabbit_mq_container-83661288 <IP>:15671 check port 15671 inter 12000 rise 3 fall 3 ssl check-ssl verify none ------ But the ssl curl to its ip and port 15671 is failing: 1234567 curl -vvv 172.21.152.187:15671 * Trying 172.21.152.187:15671... * TCP_NODELAY set * connect to 172.21.152.187 port 15671 failed: Connection refused * Failed to connect to 172.21.152.187 port 15671: Connection refused * Closing connection 0 curl: (7) Failed to connect to 172.21.152.187 port 15671: Connection refused How then, the haproxy is still able to detect it as green and status ok in the haproxy stats page ?

3 6

How to enable VT in VM(Ubuntu22.04): Nested Virtualization.
by KK CHN 21 Feb '24

21 Feb '24

I am running an ubuntu VM (instance 22.04) on Esxi 7.0 virtualized platform. I am trying to create Linux cloud images on this ubuntu VM by installing virt-manager .. Reference: https://kifarunix.com/create-and-upload-custom-linux-image-into-openstack/?… But on my VM when I execute grep -iE 'vmx|svm' /proc/cpuinfo Returns 0 //means not CPU virtualization enabled ? modprobe: FATAL: Module l not found in directory /lib/modules/5.15.0-25-generic root@ubuntu-VM:/home/ubuntu# lscpu |grep Virtualization Virtualization type: full root@ubuntu-VM:/home/ubuntu# root@ubuntu-VM:/home/ubuntu# grep -iE 'vmx|svm' /proc/cpuinfo root@ubuntu-VM:/home/ubuntu# grep -c '(vmx|svm)' /proc/cpuinfo 0 root@ubuntu-VM:/home/ubuntu# grep -iE 'vmx|svm' /proc/cpuinfo root@ubuntu-VM:/home/ubuntu# root@ubuntu-VM:/home/ubuntu# How can I enable the virtualization support on this VM ?? What to do for Nested Virtualization support in this Virtual Machine ? Any hints welcome. Thank you Krish

4 5

neutron zed security group not applied on node
by Ionuț Bîru 21 Feb '24

21 Feb '24

Hi guys, I have an issue with neutron not applying on host the rules updates or when a new ip is added on the port. I'm using kolla-ansible to deploy Openstack with openvswitch and the only way I got it working is to switch in globals.yml neutron_legacy_iptables: 'yes' or to 'no' depending on what value I had it before for that host. [securitygroup] firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver I checked with: iptables -nL | grep ip When doesn't work nothing is returned. Switching to neutron_legacy_iptables yes or to, then checked again with the same command and I have output. I don't see any errors in logs. Ubuntu 20.04 on host with linux-hwe kernel 5.15.0-79-generic Do you guys have any ideas on how to fix that ? --- Ionuț Bîru - Hosterion

1 0

[tc][murano] Status of the murano project
by Takashi Kajinami 20 Feb '24

20 Feb '24

Hello, As I brought in another thread about yaql library maintenance[1], It seems murano project is not active now, based on the following points. * The changes merged during recent two years but all of these are gate fix * Its CI is currently broken and no one is trying to fix it * I tried reaching the current PTL by email or gerrit review but didn't get any feedback even after waiting for a few weeks I'm wondering if murano project should be added to the inactive projects, or at least its project health and plan needs to be reviewed by TC, before we include this to Caracal deliverables. # Though it might be too later to drop the deliverables now Thank you Takashi Kajinami irc: tkajinam [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack…

4 15

[tc][powervmstacker-sig] Status of the PowerVMStacker SIG
by Takashi Kajinami 20 Feb '24

20 Feb '24

Hello, # I'm adding TC tag because this is a governance topic I happened to notice that none of the repositories[1] owned by the PowerVMStacker sig have not been updated for ~5 years. May I know the current status of this SIG ? The SIG list page[2] says this SIG is active but I don't think it's true now based on the update in these repos. If no one is actually working in the SIG then I'd suggest that we retire the SIG and its repositories. Note: It seems these repositories still have old stable branches(ocata, pike) and we may need some help from the release team with retirement of these branches. Thank you, Takashi Kajinami irc: tkajinam [1] https://opendev.org/openstack/ceilometer-powervm https://opendev.org/openstack/nova-powervm https://opendev.org/openstack/networking-powervm [2] https://governance.openstack.org/sigs/

2 3

[nova][libvirtd] internal error: unable to execute QEMU command 'query-named-block-nodes'
by Satish Patel 20 Feb '24

20 Feb '24

Folks, I have a ceph cluster and recently I configured rbd-mirror to replicate all data to remove ceph cluster for disaster recovery. Yesterday for POC we did a hard cutover on ceph and point openstack to the new cluster. All other vms came back up fine but 2 vms stuck in this error state in libvirt logs 2024-01-31 22:44:37.591+0000: 474597: error : qemuMonitorJSONCheckErrorFull:399 : internal error: unable to execute QEMU command 'query-named-block-nodes': cannot read image start for probe: Permission denied If it's a wider issue than it should impact all the vms but why only two VM stuck and not starting and libvirt giving me this error in logs nova-compute logs also showing same error 2024-01-31 22:44:40.925 7 INFO nova.compute.manager [None req-b33485b5-8740-48ae-8b5b-a440de3f11a4 c48fcfb9347f413f92fcece065644b00 ca5c652478c7429e964257990800e9cb - - default default] [instance: 2de0f880-77c7-4d2c-9e01-898c57ad3693] Successfully reverted task state from powering-on on failure for instance. 2024-01-31 22:44:40.944 7 ERROR oslo_messaging.rpc.server [None req-b33485b5-8740-48ae-8b5b-a440de3f11a4 c48fcfb9347f413f92fcece065644b00 ca5c652478c7429e964257990800e9cb - - default default] Exception during message handling: libvirt.libvirtError: internal error: unable to execute QEMU command 'query-named-block-nodes': cannot read image start for probe: Permission denied

2 7