June 2024 - openstack-discuss - lists.openstack.org

[barbican][openstack-helm][tacker] Request to Include Barbican Installation Guide in OpenStack-Helm Documentation
by JUSO WATARU(十楚　航) 21 Jun '24

21 Jun '24

Hello, We are presently in the process of enhancing the official OpenStack-Helm documentation by including a procedural guide for deploying Tacker using helmchart. Through discussions with members of the openstack-helm community, it has been emphasized that Barbican is an indispensable component for Tacker. Hence, it would be highly beneficial for users to have comprehensive instructions for installing Barbican with helmchart included in the official OpenStack-Helm documentation [1]. Consequently, we suggest that the Barbican community integrate the installation guide for the Barbican component into the official OpenStack-Helm documentation. This addition is poised to significantly enhance the clarity and accessibility of deployment procedures for users. We eagerly welcome your opinions and feedback on this proposal, as we aim to ensure that the documentation for openstack deployment with helmchart meets the needs of our community. [1] https://docs.openstack.org/openstack-helm/latest/install/openstack.html Regards, Wataru

2 2

[nova] Cannot (live)migrate due to host mismatch?
by sinan86polat＠gmail.com 20 Jun '24

20 Jun '24

Hello, When I try to live migrate a VM and specify a target host, I am getting the following: $ openstack server migrate <id> --live --os-compute-api-version 2.30 --host hypervisor-05 No valid host was found. There are not enough hosts available. (HTTP 400) (Request-ID: req-bee8f8b1-7218-4ae7-aa71-c4e5a3a84ba5) And the following is logged in nova-scheduler: No hosts matched due to not matching requested destination (hypervisor-05, hypervisor-05.sub.domain.com) When I do "openstack hypervisor list" I see my hypervisors with its fqdn (hypervisor-05.sub.domain.com) So, it might be a mismatch in the nova database? How do I verify and correct it?

2 2

[qa] Cancel office hour on odd weeks
by Martin Kopec 20 Jun '24

20 Jun '24

Hi everyone, I'm going to cancel office hours every odd week, at least during the summer, due to a small attendance. Office hours will be held biweekly every Tuesday (even weeks) at 15:00 UTC. The other time slot we had, Wednesday biweekly at 17:00 UTC (odd weeks), is cancelled for now. Thank you, -- Martin Kopec Principal Software Quality Engineer Red Hat EMEA IM: kopecmartin

1 0

[swift][ceph][radosgw] Swift container create error
by Jaime Ibar 20 Jun '24

20 Jun '24

Hi all, I'm setting up swift support but using radosgw dropin replacement. I have configured the following in ceph.conf rgw keystone api version = 3 rgw keystone url = https://keystone/v3 rgw keystone admin project = service rgw keystone admin domain = default rgw keystone service token enabled = true rgw keystone accepted roles = member, _member_, admin, swiftoperator rgw keystone implicit tenants = true rgw enable apis = swift, s3 rgw s3 auth use keystone = true but I'm getting the following error when creating a container > openstack container create test Unauthorized (HTTP 401) Does anyone what I'm missing? TIA Jaime -- salu2 Jaime

2 2

[openstack-ansible] [masakari]
by Budai Laszlo 19 Jun '24

19 Jun '24

Dear All, I'm evaluating Masakari for instance HA and I need to install it using openstack-ansible. I'm doing it initially in a small test cluster (3 controller, and 3 compute). The install went trough and now when I'm checking the status of the corosync cluster I see the following: root@worker1:~# crm_mon -1 Cluster Summary: * Stack: corosync * Current DC: worker2 (version 2.1.2-ada5c3b36e2) - partition with quorum * Last updated: Wed Jun 19 16:02:01 2024 * Last change: Wed Jun 19 15:29:37 2024 by hacluster via crmd on worker2 * 3 nodes configured * 0 resource instances configured Node List: * Online: [ worker1 worker2 worker3 ] Active Resources: * No active resources root@worker1:~# is it normal that there are no resources configured? What about the fencing, how should I configure it? Are you aware of any documentation where I could find mori info about configuring fencing (especially in the context of openstack-ansible)? Thank you for any advice. Kind regards, Laszlo

3 5

[largescale-sig] Next meeting: June 19, 9utc
by Thierry Carrez 19 Jun '24

19 Jun '24

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 9UTC. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20240619T09 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

2 1

[devstack][packstack] Quick install of OpenStack Ussuri
by Francesco Di Nucci 19 Jun '24

19 Jun '24

Hi, I was planning on taking the COA exam, and as it's still tested on the Ussuri release I wanted to create a local install to get used to the differences with current releases. I have tried with PackStack but there seem to be some never fixed bug with Galera setup, and with PackStack I wasn't able to make it work on any "supported" OS [bionic|stretch|jessie|f30|f31|opensuse-15.2|opensuse-tumbleweed|rhel8] (either the Python version is too old, or packages install is not supported on EL8, or repositories have been taken down etc etc...) Are there any pre-configured VMs that can be used for training? Or does anyone know on which OS (outside of the ones before) could a Ussuri setup with Devstack run? Thank you in advance Francesco Di Nucci

5 10

[Rootwrap] Package sudoers file for rootwrap?
by Francesco Di Nucci 19 Jun '24

19 Jun '24

Hello, I was reviewing the sudoers entries I'm using for rootwrap (https://wiki.openstack.org/wiki/Rootwrap) and I was wondering - would it be possible to sudoers config in the packages? Maybe as files to be placed in /etc/sudoers.d, especially as apart from Nova the usage is not well documented, and I had to use kolla's files as examples Best regards Francesco Di Nucci

3 6

Using RDMA in OpenStack managed virtual machines
by Jiatong Shen 18 Jun '24

18 Jun '24

Hello, community, I would like to ask about best practices for using infiniband and RoCEv2 for openstack managed virtual machines. I am a newbie to this area so any information is appreciated. The use case right now is basically for training/inferencing deep learning applications, for example connecting to parallel filesystem through RDMA (IB/RoCEv2). I've done a very basic search through the internet and found mainline code provides sriov-agent which could do basic VF passthrough. There is also a project named mellanox-networking which looks like it could handle IB but seems not to be updated since Train release. All of the above mentioned codes, seems to not handle switches/routers which in my opinion is not complete (at least for RoCEv2, seems PFC/ECN etc should configure switch). Is there any available implementation for using IB/RoCEv2 in production? Thank you very much for sharing insights. -- Best Regards, Jiatong Shen

1 0

How to get an empty file /etc/resolv.conf ?
by iamotvertov＠gmail.com 18 Jun '24

18 Jun '24

When creating a virtual machine, entries like "search openstacklocal" or "domain openstacklocal" always appear in the /etc/resolv.conf file. I want that after creating any virtual machine in the file /file the lines “search openstacklocal” or “domain openstacklocal” were missing. I found a way to change these lines, but my goal is completely missing them. How can this be implemented? Which function needs to be fixed and where? I use Openstack train

2 1