- openstack-discuss - lists.openstack.org

Swift not recognizing mounted drives
by Andrew Boring 22 Sep '22

22 Sep '22

Hi all. I have a new Openstack Swift install, currently a single node with 12 disks running CentOS 8 Stream and Openstack Yoga / RDO release with Keystone Auth. Disks are formatted with xfs and mounted at /srv/node/sd[a-l] as described in the Install docs, but no Swift services reccognize it. SELinux is set to permissive mode. Log sample: Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sda is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdb is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdc is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdd is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sde is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdf is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdg is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdh is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdi is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdj is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdk is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Skipping: /srv/node/sdl is not mounted Sep 22 11:29:01 [hostname] account-replicator[182475]: Beginning replication run Sep 22 11:29:01 [hostname] account-replicator[182475]: Replication run OVER Sep 22 11:29:01 [hostname] account-replicator[182475]: Attempted to replicate 0 dbs in 0.00344 seconds (0.00000/s) Sep 22 11:29:01 [hostname] account-replicator[182475]: Removed 0 dbs Sep 22 11:29:01 [hostname] account-replicator[182475]: 0 successes, 144 failures Sep 22 11:29:01 [hostname] account-replicator[182475]: diff:0 diff_capped:0 empty:0 hashmatch:0 no_change:0 remote_merge:0 rsync:0 ts_repl:0 Container and Object processes show the same issue. And yet...devices are mounted: [root@swift]# mount | grep srv /dev/sdb on /srv/node/sdb type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdc on /srv/node/sdc type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdd on /srv/node/sdd type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sde on /srv/node/sde type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdf on /srv/node/sdf type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdg on /srv/node/sdg type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdh on /srv/node/sdh type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdi on /srv/node/sdi type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdj on /srv/node/sdj type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdk on /srv/node/sdk type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sdl on /srv/node/sdl type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) /dev/sda on /srv/node/sda type xfs (rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) And the rings are built: [root@swift]# swift-ring-builder /etc/swift/account.builder /etc/swift/account.builder, build version 13, id 415987b4753847e9924147119872d547 2048 partitions, 3.000000 replicas, 1 regions, 1 zones, 12 devices, 0.00 balance, 0.00 dispersion The minimum number of hours before a partition can be reassigned is 1 (0:16:41 remaining) The overload factor is 0.00% (0.000000) Ring file /etc/swift/account.ring.gz is up-to-date Devices: id region zone ip address:port replication ip:port name weight partitions balance flags meta 0 1 1 172.16.2.2:6202 172.16.2.2:6202 sda 100.00 512 0.00 1 1 1 172.16.2.2:6202 172.16.2.2:6202 sdb 100.00 512 0.00 2 1 1 172.16.2.2:6202 172.16.2.2:6202 sdc 100.00 512 0.00 3 1 1 172.16.2.2:6202 172.16.2.2:6202 sdd 100.00 512 0.00 4 1 1 172.16.2.2:6202 172.16.2.2:6202 sde 100.00 512 0.00 5 1 1 172.16.2.2:6202 172.16.2.2:6202 sdf 100.00 512 0.00 6 1 1 172.16.2.2:6202 172.16.2.2:6202 sdg 100.00 512 0.00 7 1 1 172.16.2.2:6202 172.16.2.2:6202 sdh 100.00 512 0.00 8 1 1 172.16.2.2:6202 172.16.2.2:6202 sdi 100.00 512 0.00 9 1 1 172.16.2.2:6202 172.16.2.2:6202 sdj 100.00 512 0.00 10 1 1 172.16.2.2:6202 172.16.2.2:6202 sdk 100.00 512 0.00 11 1 1 172.16.2.2:6202 172.16.2.2:6202 sdl 100.00 512 0.00 Bash certainly thinks they are actually mounted and writable: [root@swift ~]# ls -l /srv/node/sda total 0 [root@swift ~]# touch /srv/node/sda/file [root@swift ~]# ls /srv/node/sda file [root@swift ~]# umount /dev/sda [root@swift ~]# ls /srv/node/sda [root@swift ~]# mount /srv/node/sda/ [root@swift ~]# ls /srv/node/sda file [root@swift ~]# rm /srv/node/sda/file rm: remove regular empty file '/srv/node/sda/file'? y And Swift is configured to look at /srv/node for the devices: [root@swift ~]# grep devices /etc/swift/*.conf /etc/swift/account-server.conf:devices = /srv/node /etc/swift/container-server.conf:devices = /srv/node /etc/swift/object-server.conf:devices = /srv/node Running "swift info" shows the expected configuration output, but "swift stat" throws this error: [root@controller ~]# swift stat Account HEAD failed: https:/[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8 403 Forbidden Failed Transaction ID: tx9128250987cb4e07ad55d-00632c8d05 and the logs show account-server throwing "507 ERROR Insufficient Storage" before 503, and then returning a 403. [root@swift ~]# journalctl -b | grep tx9128250987cb4e07ad55d-00632c8d05 Sep 22 12:27:49 [hostname] account-server[182505]: 172.16.2.2 - - [22/Sep/2022:16:27:49 +0000] "HEAD /sdc/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0004 "-" 182505 - Sep 22 12:27:49 [hostname] proxy-server[182464]: ERROR Insufficient Storage 172.16.2.2:6202/sdc (txn: tx9128250987cb4e07ad55d-00632c8d05) Sep 22 12:27:49 [hostname] account-server[182515]: 172.16.2.2 - - [22/Sep/2022:16:27:49 +0000] "HEAD /sdj/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0004 "-" 182515 - Sep 22 12:27:49 [hostname] proxy-server[182464]: ERROR Insufficient Storage 172.16.2.2:6202/sdj (txn: tx9128250987cb4e07ad55d-00632c8d05) Sep 22 12:27:49 [hostname] account-server[182514]: 172.16.2.2 - - [22/Sep/2022:16:27:49 +0000] "HEAD /sdh/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0011 "-" 182514 - Sep 22 12:27:49 [hostname] proxy-server[182464]: ERROR Insufficient Storage 172.16.2.2:6202/sdh (txn: tx9128250987cb4e07ad55d-00632c8d05) Sep 22 12:27:49 [hostname] account-server[182506]: 172.16.2.2 - - [22/Sep/2022:16:27:49 +0000] "HEAD /sdl/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0011 "-" 182506 - Sep 22 12:27:49 [hostname] account-server[182504]: 172.16.2.2 - - [22/Sep/2022:16:27:49 +0000] "HEAD /sdf/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0010 "-" 182504 - Sep 22 12:27:49 [hostname] account-server[182504]: 172.16.2.2 - - [22/Sep/2022:16:27:49 +0000] "HEAD /sdi/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0002 "-" 182504 - Sep 22 12:27:49 [hostname] proxy-server[182464]: Handoff requested (4) (txn: tx9128250987cb4e07ad55d-00632c8d05) Sep 22 12:27:50 [hostname] account-server[182512]: 172.16.2.2 - - [22/Sep/2022:16:27:50 +0000] "HEAD /sda/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0011 "-" 182512 - Sep 22 12:27:50 [hostname] proxy-server[182464]: Handoff requested (5) (txn: tx9128250987cb4e07ad55d-00632c8d05) Sep 22 12:27:50 [hostname] account-server[182494]: 172.16.2.2 - - [22/Sep/2022:16:27:50 +0000] "HEAD /sde/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0010 "-" 182494 - Sep 22 12:27:50 [hostname] proxy-server[182464]: Handoff requested (6) (txn: tx9128250987cb4e07ad55d-00632c8d05) Sep 22 12:27:50 [hostname] account-server[182506]: 172.16.2.2 - - [22/Sep/2022:16:27:50 +0000] "HEAD /sdk/456/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8" 507 - "HEAD http://[api endpoint]/v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8?format=json" "tx9128250987cb4e07ad55d-00632c8d05" "proxy-server 182464" 0.0003 "-" 182506 - Sep 22 12:27:50 [hostname] proxy-server[182464]: Account HEAD returning 503 for [507, 507, 507] (txn: tx9128250987cb4e07ad55d-00632c8d05) Sep 22 12:27:50 [hostname] proxy-server[182464]: - - 22/Sep/2022/16/27/50 HEAD /v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8%3Fformat%3Djson HTTP/1.0 503 - Swift - - - - tx9128250987cb4e07ad55d-00632c8d05 - 0.0337 RL - 1663864069.976659298 1663864070.010398626 - Sep 22 12:27:51 [hostname] proxy-server[182464]: [IP] 172.16.2.2 22/Sep/2022/16/27/51 HEAD /v1/AUTH_5198a36c0f454ae49e9e8a5d6e154ee8%3Fformat%3Djson HTTP/1.0 403 - python-swiftclient-3.13.1 gAAAAABjLI0FH9MP... - - - tx9128250987cb4e07ad55d-00632c8d05 - 1.4298 - - 1663864069.970289707 1663864071.400121450 - No data is being written to the disks by Swift: [root@swift ~]# ls -lR /srv/node /srv/node: total 0 drwxr-xr-x. 2 swift swift 6 Sep 22 11:13 sda drwxr-xr-x. 2 swift swift 6 Sep 22 11:07 sdb drwxr-xr-x. 2 swift swift 6 Sep 22 11:07 sdc ... /srv/node/sda: total 0 /srv/node/sdb: total 0 /srv/node/sdc: total 0 ... What am I missing here?

2 5

[dev][security-sig] Revisiting tarfile, or "What's old is new again"
by Jeremy Stanley 22 Sep '22

22 Sep '22

The tarfile module from Python's standard library is in the news this week, with people publicly exploiting the very long-standing CVE-2007-4559[0] (yes, you read that correctly, *2007*). Some old-timers in the community might remember this from such popular hits as OSSA-2011-001: Path traversal issues registering malicious images using EC2 API[1], our very first OpenStack Security Advisory! This revived interest in unsafe use of tarfile methods will undoubtedly have lots of people scanning OpenStack's Git repos looking for potentially exploitable calls. Indeed, some of our own community members are already auditing the collective codebase to make sure new vulnerabilities haven't sneaked in over the 11 years since this first came up for us, but more help is always welcome. I encourage anyone using tarfile in their projects to double-check you're doing so safely[2]. If you rely bandit to check your source code, be advised that the most recent 1.7.4 release doesn't catch this but you can install its main branch[3] instead which does include a check for it, at least until they tag a new release (which I have a feeling they'll do quite soon given the recent furor around this topic). On a related note, I want to take this opportunity to remind everyone that OpenStack has a Security Special Interest Group (SIG), which meets monthly[4] on IRC, and members will also be in attendance at the upcoming virtual PTG[5] in case anyone is interested in discussing this or similar subject matter. Our PTG slot is currently booked for 15:00 UTC Wednesday (2022-10-19), though we can adjust or book an additional hour at another time if this conflicts with any tracks people also need to join, just let me know. [0] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4559 [1] https://security.openstack.org/ossa/OSSA-2011-001.html [2] https://docs.python.org/3/library/tarfile.html#tarfile.TarFile.extractall [3] https://github.com/pycqa/bandit [4] https://meetings.opendev.org/#OpenStack_Security_SIG_meeting [5] https://ptg.opendev.org/ptg.html -- Jeremy Stanley

2 1

[ironic][ptg] Last call for topics
by Jay Faulkner 22 Sep '22

22 Sep '22

This morning, a group of Ironic cores met and mapped out a rough schedule for our PTG sessions. Please review the etherpad here: https://etherpad.opendev.org/p/ironic-antelope-ptg for more details on the outcome of that. We did want to give one last chance for anyone who has not yet had a chance to add their topic to do so before the plans are finalized. Please add any additional topics to the etherpad, and preferably, also respond to this email or let us know in #openstack-ironic on IRC. Thanks, Jay Faulkner G-Research Open Source Software lab OpenStack Ironic PTL OpenStack Technical Committee member

1 0

How do I disable replication in swift
by Paladox 22 Sep '22

22 Sep '22

Hello, I would like Swift to only have 1 file not any copies of it, how do I disable replication as you must set the value to 1 when you create the rings? (We don’t have the disk space to have replication / copies of the files)

2 2

[neutron] Drivers meeting - Friday 22.09.2022 - cancelled
by Lajos Katona 22 Sep '22

22 Sep '22

Hi Neutron Drivers! Due to the lack of agenda, let's cancel tomorrow's drivers meeting. See You on the meeting next week. Lajos Katona (lajoskatona)

1 0

Cinder-volume active active setup
by Eugen Block 22 Sep '22

22 Sep '22

Hi, I didn't mean to hijack the other thread so I'll start a new one. There are some pages I found incl. Gorkas article [1], but I don't really understand yet how to configure it. We don't use any of the automated deployments (we created our own) like TripleO etc., is there any guide showing how to setup cinder-volume active/active? I see in my lab environment that python3-tooz is already installed on the control node, but how do I use it? Besides the "cluster" config option in the cinder.conf (is that defined when setting up the DLM?) what else is required? I also found this thread [2] pointing to the source code, but that doesn't really help me at this point. Any pointers to a how-to or deployment guide would be highly appreciated! Thanks, Eugen [1] https://gorka.eguileor.com/a-cinder-road-to-activeactive-ha/ [2] https://www.mail-archive.com/openstack@lists.openstack.org/msg18385.html

2 5

Floating IP attached to octavia not working | tripleo wallaby | centos | OVN DVR
by Swogat Pradhan 22 Sep '22

22 Sep '22

Hi, I've deployed Octavia + OVN + DVR and floating IPs assigned to Octavia VIPs are not reachable. Other floating IPs tied to nova instances are working fine. The octavia vip is reachable and working fine from inside on the private network, however the Floating IP is not reachable at all. I found a similar issue in bugzilla but the bug is closed now and i do not have any solution. https://bugzilla.redhat.com/show_bug.cgi?id=1608951 Please help me get a solution for this issue. With regards, Swogat pradhan

3 3

[ansible-os-modules] Antelope PTG in October | Ansible OpenStack Collection
by Jakob Meng 22 Sep '22

22 Sep '22

Hi everyone, we have scheduled our Antelope's vPTG session for the Ansible OpenStack Collection [1] at the same time and place as in April: at 13:00 - 15:00 UTC on Thursday October 20, 2022 in Essex room. Topics will be our migration progress to openstacksdk's first major release, new features, notable changes and open todos. Do not hesitate to add any questions and topics you want to address in our PTG session to etherpad [2]. Looking forward to meet you ☺️ [1] https://opendev.org/openstack/ansible-collections-openstack [2] https://etherpad.opendev.org/p/oct2022-ptg-os-ansible-modules Thanks, Ananya, Arx, Rafael, Sagi and Jakob

1 0

[openstack][quuens][cinder] consistency groups bug ?
by Ignazio Cassano 22 Sep '22

22 Sep '22

Hi everyone, in my openstack installation, for performance reasons, I use a cinder type to address different storage virtual machines on the same device. Balancing takes place via the scheduler. Below is an example of my configuration in cinder.conf: https://paste.openstack.org/show/b0hCTsdniLhinoQiVT7A/ As you can see nfsgold1 to nfsgold8 are all part of the volume type nfsgold. Unfortunately if I create a consistency group with volume type nfsgold, it can only contain volumes on the same backend, even though they are of the same type. For example, if in my consistency group there is a volume on nfsgold1 and I add a volume present on nfsgold8 I get the following: https://paste.openstack.org/show/b4XnUeGDF5wYlCBLTcuc/ Any help, please ? Ignazio

2 3

cloud Stack Testing
by KK CHN 22 Sep '22

22 Sep '22

List, We have deployed Openstack wallaby using kolla-ansible openstack installation . The setup is up and running with default configurations all-in-one node ... Reference: https://docs.openstack.org/project-deploy-guide/kolla-ansible/wallaby/quick… 1. We need to test this cloud stack for Compute, Network, and storage able to scale across multiple local and remote zones. What other components/configurations needed to be configured /built for this purpose? What are the testing parameters to check the above setup scale across multiple local and remote zones? or what methods/procedures need to be performed for this testing ? 2. for Successful deployment of enterprise applications having enough scaling and availability requirements in each IaaS, SaaS & PaaS category may further help in evaluating this setup across these categories. Is there any such kind of benchmarking tools or sample application/s to test the capacity to kindly share the name/details of such application/s to deploy as PoC? Any help/hints much appreciated. Thanks in advance, Krish

2 1

[all][tc] Technical Committee next weekly meeting on 2022 Sept 22 at 1500 UTC
by Ghanshyam Mann 22 Sep '22

22 Sep '22

Hello Everyone, Below is the agenda for tomorrow's TC meeting schedule at 1500 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting * Roll call * Follow up on past action items * Gate health check ** Bare 'recheck' state *** https://etherpad.opendev.org/p/recheck-weekly-summary * Zed cycle tracker checks ** https://etherpad.opendev.org/p/tc-zed-tracker * 2023.1 cycle PTG Planning ** TC + Leaders interaction sessions *** https://etherpad.opendev.org/p/tc-leaders-interaction-2023-1 ** TC PTG etherpad *** https://etherpad.opendev.org/p/tc-2023-1-ptg ** Schedule 'operator hours' *** https://lists.openstack.org/pipermail/openstack-discuss/2022-September/0303… * 2023.1 cycle Technical Election & Leaderless projects ** https://governance.openstack.org/election/ ** https://etherpad.opendev.org/p/2023.1-leaderless ** https://lists.openstack.org/pipermail/openstack-discuss/2022-September/0304… * Meeting time check ** We have new TC members. Let's check if the current meeting time is ok for everyone. * Open Reviews ** https://review.opendev.org/q/projects:openstack/governance+is:open -gmann

1 0

[all][elections][tc][ptl] Antelope: Technical Committee & PTL Election Conclusion & Results
by Ian Y. Choi 21 Sep '22

21 Sep '22

Thank you to the electorate, to all those who voted and to all candidates who put their name forward for Technical Committee (TC) & Project Team Lead (PTL) in this election. A healthy, open process breeds trust in our decision making capability thank you to all those who make this process possible. 1. Please join me in congratulating the 4 newly elected members of the TC: Dan Smith (dansmith)Ghanshyam Mann (gmann)Jay Faulkner (JayF)Dmitriy Rabotyagov (noonedeadpunk) Full results:https://civs1.civs.us/cgi-bin/results.pl?id=E_41d42603087bcf58 2. For the results of the PTL election process, please join me in extending congratulations to the following PTLs: * Barbican : Grzegorz Grasza (xek)* Blazar : Pierre Riteau (priteau)* Cinder : Rajat Dhasmana ()* Cloudkitty : Rafael Weingartner ()* Cyborg : alex song ()* Designate : Michael Johnson (johnsom)* Ec2 Api : Andrey Pavlov (andrey-mp)* Freezer : ge cong ()* Glance : Pranali Deore (pdeore)* Heat : Brendan Shephard ()* Horizon : Vishal Manchanda (vishalmanchanda)* Ironic : Jay Faulkner (JayF)* Kolla : Michal Nasiadka (mnasiadka)* Kuryr : Roman Dobosz (gryf)* Magnum : Jake Yip (jakeyip)* Manila : Carlos Silva (carloss)* Monasca : Martin Chacon Piza (chaconpiza)* Murano : Rong Zhu (zhurong)* Neutron : Rodolfo Alonso Hernandez ()* Nova : Sylvain Bauza (bauzas)* Octavia : Gregory Thiemonge (gthiemonge)* Openstack Chef : Lance Albertson (Ramereth)* OpenStack Helm : Gage Hugo (gagehugo)* OpenStackAnsible : Dmitriy Rabotyagov (noonedeadpunk)* OpenStackSDK : Artem Goncharov (gtema)* Puppet OpenStack : Takashi Kajinami (tkajinam)* Quality Assurance : Martin Kopec (kopecmartin)* Rally : Andrey Kurilin (andreykurilin)* Skyline : Wenxiang Wu (wu_wenxiang)* Solum : Rong Zhu (zhurong)* Storlets : Takashi Kajinami (tkajinam)* Tacker : Yasufumi Ogawa (yasufum)* Telemetry : Matthias Runge (mrunge)* Tripleo : Rabi Mishra (ramishra)* Trove : wu chunyang (wuchunyang)* Vitrage : Eyal Bar-Ilan ()* Watcher : chen ke ()* Winstackers : Lucian Petrut ()* Zaqar : Hao Wang () PTL Election:* Ironic: https://civs1.civs.us/cgi-bin/results.pl?id=E_c7d81a19f30c67f0 Election process details and results are also available here: https://governance.openstack.org/election/ Thank you to all of the candidates, having a good group of candidates helps engage the community in our democratic process. Thank you to all who voted and who encouraged others to vote. We need to ensure your voice is heard. Thank you for another great round. Ian Y. Choi, on behalf of the OpenStack Technical Election Officials

4 4

OpenStack PTG, Neutron schedule
by Rodolfo Alonso Hernandez 21 Sep '22

21 Sep '22

Hello Neutrinos: This is the poll to vote for the Neutron schedule during the next OpenStack PTG. The goal is to have at least 3 hours per day, from Monday to Thursday. The second poll is to decide the operator hour for Neutron [2], according to [3]. I'll keep the polls open until next Monday 26 Sep. Then I'll reserve the room in [3]. Thank you for participating. [1]https://doodle.com/meeting/participate/id/dwmlAVra [2]https://doodle.com/meeting/participate/id/eZVRoxge [3]https://ptg.opendev.org/ptg.html

1 0

[cinder] Bug Report 09-21-2022
by Sofia Enriquez 21 Sep '22

21 Sep '22

This is a bug report from 09-14-2022 to 09-21-2022. Agenda: https://etherpad.opendev.org/p/cinder-bug-squad-meeting ----------------------------------------------------------------------------------------- Medium - https://bugs.launchpad.net/cinder/+bug/1989514 "NFS volume snapshot does not update volume attachment format to qcow2." Fix proposed to master. Low - https://bugs.launchpad.net/cinder/+bug/1989730 "Dell PowerMax - Optimized SL should be assigned when retyping a volume to a default volume type." Fixed proposed to master. - https://bugs.launchpad.net/cinder/+bug/1990136 " Dell PowerFlex: Failed to attach a volume when using self-signed Certificates." Fixed proposed to master. - https://bugs.launchpad.net/cinder/+bug/1990134 "Tatlin driver does not set project id for temp volumes." Fixed proposed to master. -- Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

[ironic] Looking for downstream users of bugfix/* branches
by Jay Faulkner 21 Sep '22

21 Sep '22

Hey all, Ironic releases intermediate bugfix releases during the cycle. These are consumed by some packagers and standalone users of Ironic. Today, using Ironic as an example, we have 4 active bugfix branches: - bugfix/21.0 and bugfix/20.2 are between yoga and zed - bugfix/19.0 is between xena and yoga - bugfix/18.1 is between wallaby and xena We are considering cleaning up some of the older bugfix branches, to reduce stable maintenance load -- but we would like to poll you all first: Is anyone consuming these releases downstream? If so, which ones and why? This will be useful input to whatever action we decide to take! Thanks, Jay Faulkner

2 1

[ironic] Proposing Harald Jensas to metalsmith-core
by Iury Gregory 21 Sep '22

21 Sep '22

Hello ironic-cores and metalsmith-cores, I would like to propose Harald Jensas for metalsmith-core. During the Zed Cycle he had a lot of reviews for the project [1], in yoga he contributed a lot to the project [2]. Looking at all the releases in stackalytics he is #6 in commits [3] and reviews [4]. Please vote with +1/-1 (till Sep 25) [1] https://www.stackalytics.io/?release=zed&module=opendev.org/openstack/metal… [2] https://www.stackalytics.io/?release=yoga&module=opendev.org/openstack/meta… [3] https://www.stackalytics.io/?release=all&module=opendev.org/openstack/metal… [4] https://www.stackalytics.io/?release=all&module=opendev.org/openstack/metal… -- *Att[]'s* *Iury Gregory Melo Ferreira * *MSc in Computer Science at UFCG* *Ironic PTL Yoga and Zed Cycle* *Senior Software Engineer at Red Hat Brazil* *Social*: https://www.linkedin.com/in/iurygregory *E-mail: iurygregory(a)gmail.com <iurygregory(a)gmail.com>*

5 4

[tacker][ptg] Virtual PTG Planning
by Yasufumi Ogawa 21 Sep '22

21 Sep '22

Hi Tacker team, I've updated the etherpad for our antelope PTG [1] as I mentioned in the previous IRC meeting. Please add your topics if you have any suggestions for the next release. [1] https://etherpad.opendev.org/p/tacker-antelope-ptg Cheers, Yasufumi

1 0

[keystone] Changing user password_hash directly in database
by 박경원 21 Sep '22

21 Sep '22

1 0

CFP Open - Ubuntu Summit 2022
by T. Nichole Williams 21 Sep '22

21 Sep '22

Greetings everyone, Your friendly neighborhood Kata Community Manager checking in to let you all know that the call for presentations[2] is now open for Ubuntu Summit 2022[1]. The event will be held from November 7-9, 2022 in Prague, Czech Republic. The Ubuntu Summit (FKA the Ubuntu Developer Summit) will include a series of talks, workshops, panels and Q&A covering a broad range of topics to appeal not only to developers, but anyone involved in open source. The event is organized into the following tracks: • Ubuntu Desktop • Community • Data Science & Data Platforms • Application Ecosystem • Infrastructure Though in-person attendance is preferred, there is a virtual option for those unable to travel. CFP will close September 30, 2002, so if you have a presentation (or workshop) on OpenStack ready to go, please send it in! Regards, T. Nichole Williams Technical Community Manager | Kata Containers Twitter: OGtrilliams GitHub: OGtrilliams IRC: PagliaccisCloud [1] https://events.canonical.com/event/2/ [2] https://events.canonical.com/event/2/abstracts/

1 0

[tripleo] Gate blocker NODE_FAILURES when running tripleo-ci-centos-9-scenario010-standalone
by Amol Kahat 20 Sep '22

20 Sep '22

Hello All, Description of problem: NODE_FAILURE when running tripleo-ci-centos-9-scenario010-standalone job. We have been seeing this failure[1] since 09/17. Logs are not present so it's hard to say what is the root cause of this issue. This job uses nodeset: single-centos-9-node-nested-virt - so assumption is that it's the nest-virt nodeset [1] https://zuul.openstack.org/builds?job_name=tripleo-ci-centos-9-scenario010-… Thanks, -- *Amol Kahat* Software Engineer *Red Hat India Pvt. Ltd. Pune, India.* akahat(a)redhat.com B764 E6F8 F4C1 A1AF 816C 6840 FDD3 BA6C 832D 7715

3 2

Query about networking-onos for newer OpenStack releases
by Aditya Sathish 20 Sep '22

20 Sep '22

Hello! I am trying to integrate an SDN controller with our lab's OpenStack network. Currently, we have already deployed a version of ONOS to serve our needs and I have been following the SONA project which uses the networking-onos ML2 plugin with OpenStack. However, it seems that the networking-onos project has been retired since the Train release. Is there any way I can get ONOS to work with OpenStack Yoga? If not, what is the go-to way to integrate an SDN controller with OpenFlow support with Neutron?? Any help will be much appreciated. Regards, Aditya.

2 1

[ironic] Check PTG topics
by Iury Gregory 20 Sep '22

20 Sep '22

Hello ironicers, The Antelope PTG is in a a few weeks, we had the idea to check the PTG topics (so we can group some before setting the final schedule) Please vote in the doodle [1] for a time where we can discuss a bit o/ Feel free to add topics to our etherpad! [2] Thanks! [1] https://doodle.com/meeting/participate/id/dBL8ZZXa [2] https://etherpad.opendev.org/p/ironic-antelope-ptg -- *Att[]'s* *Iury Gregory Melo Ferreira * *MSc in Computer Science at UFCG* *Ironic PTL * *Senior Software Engineer at Red Hat Brazil* *Social*: https://www.linkedin.com/in/iurygregory *E-mail: iurygregory(a)gmail.com <iurygregory(a)gmail.com>*

1 2

Re: RE : [neutron][nova][ipv6]instance on compute node not getting dhcpv6
by Neil Jerram 20 Sep '22

20 Sep '22

They may be outdated now, but I wonder if any of the steps described at https://projectcalico.docs.tigera.io/networking/openstack/ipv6 would help you? In particular, given that you have no route, perhaps you need the accept_ra config. Best wishes, Neil On Tue, Sep 20, 2022 at 9:12 AM Michael Hazan <mhazan(a)mandint.org> wrote: > Hello, > > The 3 nodes are running Ubuntu 20.04 and using libvirt. The instance are > Ubuntu or debian based. The openstack virtual network is configured with > both a v4 and a v6 dhcp pool. The instance should be getting both v4 and v6 > (on the same interface) but the instance that are hosted on the compute > node only get v4. If i run the dhclient -6 -r the instance actually get > it’s ipv6 but it’s wrongly configured with a /128 (instead of 64) and no > route. > > > > Michael > > > > *De : *Lajos Katona <katonalala(a)gmail.com> > *Envoyé le :*mardi, 20 septembre 2022 09:39 > *À : *mhazan(a)mandint.org > *Cc : *openstack-discuss(a)lists.openstack.org > *Objet :*Re: [neutron][nova][ipv6]instance on compute node not getting > dhcpv6 > > > > Hi, > > Do you have some more details of your environment, which backend you use? > OVS? > > Your VMs have both IPv4 and v6 addresses and you mean that they got IPv4 > as expected? > > > > Lajos > > > > <mhazan(a)mandint.org> ezt írta (időpont: 2022. szept. 19., H, 16:19): > > Hello all, > > i manage a small openstack cluster installed via Ubuntu package, it has > been upgraded since the day of Newton and currently running Victoria. it > started as a single node with the basic services installed, later a > dedicated storage node and compute node were added. after upgrading to > victoria, any instance that boot on the dedicated compute node start up > but fails to get it's global ipv6 via stateful dhcp6, only > linklocal(fe80) ip is shown by the instance. The ipv6 is created in > openstack, the dhcpv4 works and there are no issue if the instance boot > on the "old" all in one node. i can manually allocate (by editing the > instance network config file) the ipv6 config and it works. any pointer > as to what could cause this issue ? > > BR, Michael > > >

2 1

[kuryr] Antelope PTG topics
by Maysa De Macedo Souza 20 Sep '22

20 Sep '22

Hello, The Antelope PTG is a few weeks away and if you have any topics to discuss in the Kuryr session, feel free to include it in the etherpad[1]. Cheers, Maysa Macedo. [1] https://etherpad.opendev.org/p/kuryr-antelope-ptg

1 0

[neutron][nova][ipv6]instance on compute node not getting dhcpv6
by mhazan＠mandint.org 20 Sep '22

20 Sep '22

Hello all, i manage a small openstack cluster installed via Ubuntu package, it has been upgraded since the day of Newton and currently running Victoria. it started as a single node with the basic services installed, later a dedicated storage node and compute node were added. after upgrading to victoria, any instance that boot on the dedicated compute node start up but fails to get it's global ipv6 via stateful dhcp6, only linklocal(fe80) ip is shown by the instance. The ipv6 is created in openstack, the dhcpv4 works and there are no issue if the instance boot on the "old" all in one node. i can manually allocate (by editing the instance network config file) the ipv6 config and it works. any pointer as to what could cause this issue ? BR, Michael

3 2