- openstack-discuss - lists.openstack.org

[openstack][nova] urgent compute in evacuate state
by Ignazio Cassano 30 Oct '20

30 Oct '20

Hello Guys, I have a node in evacuate state....how exit from this state ? Thanks Ignazio

2 6

[kolla] Setting up eth1 on VM for AIO
by Braden, Albert 30 Oct '20

30 Oct '20

I'm trying to setup an allinone kolla-ansible Train POC on a VM, and I'm following the instructions here: https://docs.openstack.org/kolla-ansible/train/user/quickstart.html Under "Prepare initial configuration" where it talks about globals.yml, it says I need 2 network interfaces: network_interface: "eth0" neutron_external_interface: "eth1" My VM has a private IP and a floating IP that I use to ssh to it: | ID | Name | Status | Networks | Image | Flavor | | 41f6782a-8ca8-4ab4-8fdc-776584139ba0 | adjutant-poc | ACTIVE | private=<primary IP>, <floating IP> | | s1-standard-08 | I tried various options for eth1 but I can't seem to get it to work: [root@adjutant-poc network-scripts]# cat /etc/sysconfig/network-scripts/ifcfg-eth1 BOOTPROTO=dhcp DEVICE=eth1 ONBOOT=yes TYPE=Ethernet NM_CONTROLLED=no I tried creating another port and adding it but that didn't seem to make a difference. What am I doing wrong? Do I really need 2 network interfaces on the VM? If so, what's the correct way to add one? [root@adjutant-poc network-scripts]# service network restart Restarting network (via systemctl): Job for network.service failed because the control process exited with error code. See "systemctl status network.service" and "journalctl -xe" for details. [FAILED] Log: http://paste.debian.net/1168982/ I apologize for the nonsense below. So far I have not been able to stop it from being attached to my external emails. I'm working on it. E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.

3 2

[Openstack][cinder] dell unity iscsi faulty devices
by Ignazio Cassano 30 Oct '20

30 Oct '20

Hello Stackers, I am using dell emc iscsi driver on my centos 7 queens openstack. It works and instances work as well but on compute nodes I got a lot a faulty device reported by multipath il comand. I do know why this happens, probably attacching and detaching volumes and live migrating instances do not close something well. I read this can cause serious performances problems on compute nodes. Please, any workaround and/or patch is suggested ? Regards Ignazio

2 18

cannot ping my guest's floating ip
by R Kendal 29 Oct '20

29 Oct '20

I am struggling with the fact that I cannot ping my guest's floating ip. I have one Controller node and one Compute node brought up with devstack. Any help would be appreciated! Kendal Details follow... Controller node... [1 picasso@controller ~]$ openstack server list +--------------------------------------+----------+--------+-------------------------------+----------------+----------+ | ID | Name | Status | Networks | Image | Flavor | +--------------------------------------+----------+--------+-------------------------------+----------------+----------+ | c5a7fd0a-61a1-4698-9c12-45b44cb20e54 | myserver | ACTIVE | private=10.0.1.12, 10.0.0.196 | picasso-server | m1.small | +--------------------------------------+----------+--------+-------------------------------+----------------+----------+ [1 picasso@controller ~]$ openstack floating ip list +--------------------------------------+---------------------+------------------+--------------------------------------+--------------------------------------+----------------------------------+ | ID | Floating IP Address | Fixed IP Address | Port | Floating Network | Project | +--------------------------------------+---------------------+------------------+--------------------------------------+--------------------------------------+----------------------------------+ | 055d825f-9398-4a11-bf5e-ff3d1a9fc8be | 10.0.0.196 | 10.0.1.12 | 9d036770-e1ba-4d5f-8f16-780a066416fd | 32631db5-7798-47df-8af6-7ee8fca011e4 | a0e078d4bac34db89105a2eb0ba4d896 | +--------------------------------------+---------------------+------------------+--------------------------------------+--------------------------------------+----------------------------------+ [0 picasso@controller ~]$ ping -c 1 -W 1 10.0.1.1 PING 10.0.1.1 (10.0.1.1) 56(84) bytes of data. 64 bytes from 10.0.1.1: icmp_seq=1 ttl=64 time=0.066 ms --- 10.0.1.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.066/0.066/0.066/0.000 ms [0 picasso@controller ~]$ ping -c 1 -W 1 10.0.1.12 PING 10.0.1.12 (10.0.1.12) 56(84) bytes of data. --- 10.0.1.12 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms [1 picasso@controller ~]$ ping -c 1 -W 1 10.0.0.196 PING 10.0.0.196 (10.0.0.196) 56(84) bytes of data. --- 10.0.0.196 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms [0 picasso@controller ~]$ ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000 link/ether 08:00:27:72:b2:e5 brd ff:ff:ff:ff:ff:ff inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic enp0s3 valid_lft 77664sec preferred_lft 77664sec inet6 fe80::a00:27ff:fe72:b2e5/64 scope link valid_lft forever preferred_lft forever 3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000 link/ether 02:00:68:ed:7c:08 brd ff:ff:ff:ff:ff:ff inet 192.168.1.6/24 brd 192.168.1.255 scope global enp0s8 valid_lft forever preferred_lft forever inet6 fe80::68ff:feed:7c08/64 scope link valid_lft forever preferred_lft forever 4: enp0s9: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc fq_codel master ovs-system state UNKNOWN group default qlen 1000 link/ether 02:00:b6:d5:fe:c5 brd ff:ff:ff:ff:ff:ff inet6 fe80::b6ff:fed5:fec5/64 scope link valid_lft forever preferred_lft forever 5: enp0s10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 02:00:72:74:73:d0 brd ff:ff:ff:ff:ff:ff inet 10.0.1.1/24 brd 10.0.1.255 scope global enp0s10 valid_lft forever preferred_lft forever inet6 fe80::72ff:fe74:73d0/64 scope link valid_lft forever preferred_lft forever 6: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether e6:fd:7a:97:a1:32 brd ff:ff:ff:ff:ff:ff 7: br-int: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether f6:38:eb:d2:ce:41 brd ff:ff:ff:ff:ff:ff 8: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000 link/ether ba:d2:e4:c1:7f:48 brd ff:ff:ff:ff:ff:ff inet 10.0.0.8/24 brd 10.0.0.255 scope global br-ex valid_lft forever preferred_lft forever inet6 fe80::b8d2:e4ff:fec1:7f48/64 scope link valid_lft forever preferred_lft forever 9: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether ca:5b:f2:bd:65:40 brd ff:ff:ff:ff:ff:ff 13: vxlan_sys_4789: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 65000 qdisc noqueue master ovs-system state UNKNOWN group default qlen 1000 link/ether ca:7f:ae:3b:5a:14 brd ff:ff:ff:ff:ff:ff inet6 fe80::c87f:aeff:fe3b:5a14/64 scope link valid_lft forever preferred_lft forever [0 picasso@controller ~]$ ip r default via 10.0.2.2 dev enp0s3 proto dhcp src 10.0.2.15 metric 100 10.0.0.0/24 dev br-ex proto kernel scope link src 10.0.0.8 10.0.1.0/24 dev enp0s10 proto kernel scope link src 10.0.1.1 10.0.2.0/24 dev enp0s3 proto kernel scope link src 10.0.2.15 10.0.2.2 dev enp0s3 proto dhcp scope link src 10.0.2.15 metric 100 192.168.1.0/24 dev enp0s8 proto kernel scope link src 192.168.1.6 [0 picasso@controller ~]$ neutron net-show "public" +---------------------------+--------------------------------------+ | Field | Value | +---------------------------+--------------------------------------+ | admin_state_up | True | | availability_zone_hints | | | availability_zones | nova | | created_at | 2020-10-29T18:21:07Z | | description | | | id | 32631db5-7798-47df-8af6-7ee8fca011e4 | | ipv4_address_scope | | | ipv6_address_scope | | | is_default | False | | mtu | 1500 | | name | public | | port_security_enabled | True | | project_id | a0e078d4bac34db89105a2eb0ba4d896 | | provider:network_type | flat | | provider:physical_network | public | | provider:segmentation_id | | | revision_number | 2 | | router:external | True | | shared | True | | status | ACTIVE | | subnets | daab0afa-9adc-4978-9e00-65669b89fec5 | | tags | | | tenant_id | a0e078d4bac34db89105a2eb0ba4d896 | | updated_at | 2020-10-29T18:21:14Z | +---------------------------+--------------------------------------+ [0 picasso@controller ~]$ neutron subnet-show public-subnet +-------------------+----------------------------------------------+ | Field | Value | +-------------------+----------------------------------------------+ | allocation_pools | {"start": "10.0.0.128", "end": "10.0.0.254"} | | cidr | 10.0.0.0/24 | | created_at | 2020-10-29T18:21:14Z | | description | | | dns_nameservers | 10.0.0.1 | | enable_dhcp | False | | gateway_ip | 10.0.0.1 | | host_routes | | | id | daab0afa-9adc-4978-9e00-65669b89fec5 | | ip_version | 4 | | ipv6_address_mode | | | ipv6_ra_mode | | | name | public-subnet | | network_id | 32631db5-7798-47df-8af6-7ee8fca011e4 | | project_id | a0e078d4bac34db89105a2eb0ba4d896 | | revision_number | 0 | | service_types | | | subnetpool_id | | | tags | | | tenant_id | a0e078d4bac34db89105a2eb0ba4d896 | | updated_at | 2020-10-29T18:21:14Z | +-------------------+----------------------------------------------+ [1 picasso@controller ~]$ neutron net-show private +---------------------------+--------------------------------------+ | Field | Value | +---------------------------+--------------------------------------+ | admin_state_up | True | | availability_zone_hints | | | availability_zones | nova | | created_at | 2020-10-29T18:20:56Z | | description | | | id | b440a536-a69c-42c8-b05d-5f8323f22cc0 | | ipv4_address_scope | | | ipv6_address_scope | | | mtu | 1450 | | name | private | | port_security_enabled | True | | project_id | 682549fcfe3b4645a21b59290e62e453 | | provider:network_type | vxlan | | provider:physical_network | | | provider:segmentation_id | 1 | | revision_number | 2 | | router:external | False | | shared | False | | status | ACTIVE | | subnets | 35a88fb9-e1e6-4195-9c6b-95d96545d4c4 | | tags | | | tenant_id | 682549fcfe3b4645a21b59290e62e453 | | updated_at | 2020-10-29T18:21:02Z | +---------------------------+--------------------------------------+ [0 picasso@controller ~]$ neutron subnet-show private-subnet +-------------------+---------------------------------------------+ | Field | Value | +-------------------+---------------------------------------------+ | allocation_pools | {"start": "10.0.1.10", "end": "10.0.1.254"} | | cidr | 10.0.1.0/24 | | created_at | 2020-10-29T18:21:02Z | | description | | | dns_nameservers | 10.0.0.1 | | enable_dhcp | True | | gateway_ip | 10.0.1.1 | | host_routes | | | id | 35a88fb9-e1e6-4195-9c6b-95d96545d4c4 | | ip_version | 4 | | ipv6_address_mode | | | ipv6_ra_mode | | | name | private-subnet | | network_id | b440a536-a69c-42c8-b05d-5f8323f22cc0 | | project_id | 682549fcfe3b4645a21b59290e62e453 | | revision_number | 0 | | service_types | | | subnetpool_id | | | tags | | | tenant_id | 682549fcfe3b4645a21b59290e62e453 | | updated_at | 2020-10-29T18:21:02Z | +-------------------+---------------------------------------------+ [0 picasso@controller ~]$ neutron router-show public +-------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Field | Value | +-------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | admin_state_up | True | | availability_zone_hints | | | availability_zones | nova | | created_at | 2020-10-29T18:21:20Z | | description | | | distributed | False | | external_gateway_info | {"network_id": "32631db5-7798-47df-8af6-7ee8fca011e4", "external_fixed_ips": [{"subnet_id": "daab0afa-9adc-4978-9e00-65669b89fec5", "ip_address": "10.0.0.169"}], "enable_snat": true} | | flavor_id | | | ha | False | | id | d424d63e-cc93-4d02-afad-5851bc7f96cd | | name | public | | project_id | a0e078d4bac34db89105a2eb0ba4d896 | | revision_number | 4 | | routes | | | status | ACTIVE | | tags | | | tenant_id | a0e078d4bac34db89105a2eb0ba4d896 | | updated_at | 2020-10-29T18:21:28Z | +-------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ [1 picasso@controller ~]$ sudo ovs-vsctl show f2c58de6-9a33-4222-94f5-da1e4a2cfdbb Manager "ptcp:6640:127.0.0.1" is_connected: true Bridge br-tun Controller "tcp:127.0.0.1:6633" is_connected: true fail_mode: secure datapath_type: system Port patch-int Interface patch-int type: patch options: {peer=patch-tun} Port br-tun Interface br-tun type: internal Port "vxlan-c0a801c8" Interface "vxlan-c0a801c8" type: vxlan options: {df_default="true", egress_pkt_mark="0", in_key=flow, local_ip="192.168.1.6", out_key=flow, remote_ip="192.168.1.200"} Bridge br-ex Controller "tcp:127.0.0.1:6633" is_connected: true fail_mode: secure datapath_type: system Port br-ex Interface br-ex type: internal Port phy-br-ex Interface phy-br-ex type: patch options: {peer=int-br-ex} Port "enp0s9" Interface "enp0s9" Bridge br-int Controller "tcp:127.0.0.1:6633" is_connected: true fail_mode: secure datapath_type: system Port "tap456085c0-61" tag: 1 Interface "tap456085c0-61" type: internal Port "qr-0434594d-ee" tag: 1 Interface "qr-0434594d-ee" type: internal Port patch-tun Interface patch-tun type: patch options: {peer=patch-int} Port int-br-ex Interface int-br-ex type: patch options: {peer=phy-br-ex} Port br-int Interface br-int type: internal Port "qg-77ed5bcd-25" tag: 2 Interface "qg-77ed5bcd-25" type: internal ovs_version: "2.12.1" router_name=public ROUTER_ID=$(openstack router show $router_name -f value -c id) QROUTER="qrouter-$ROUTER_ID" [0 picasso@controller ~]$ sudo ip netns exec $QROUTER ifconfig lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1000 (Local Loopback) RX packets 45 bytes 4424 (4.4 KB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 45 bytes 4424 (4.4 KB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 qg-77ed5bcd-25: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.0.0.169 netmask 255.255.255.0 broadcast 10.0.0.255 inet6 fe80::f816:3eff:febc:990c prefixlen 64 scopeid 0x20<link> ether fa:16:3e:bc:99:0c txqueuelen 1000 (Ethernet) RX packets 944 bytes 146787 (146.7 KB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 164 bytes 16468 (16.4 KB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 qr-0434594d-ee: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1450 inet 10.0.1.1 netmask 255.255.255.0 broadcast 10.0.1.255 inet6 fe80::f816:3eff:fe5c:9a7d prefixlen 64 scopeid 0x20<link> ether fa:16:3e:5c:9a:7d txqueuelen 1000 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 169 bytes 7550 (7.5 KB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [0 picasso@controller ~]$ sudo ip netns exec $QROUTER ping -c 1 -W 1 10.0.1.1 PING 10.0.1.1 (10.0.1.1) 56(84) bytes of data. 64 bytes from 10.0.1.1: icmp_seq=1 ttl=64 time=0.034 ms --- 10.0.1.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.034/0.034/0.034/0.000 ms [0 picasso@controller ~]$ sudo ip netns exec $QROUTER ping -c 1 -W 1 10.0.1.196 PING 10.0.1.196 (10.0.1.196) 56(84) bytes of data. --- 10.0.1.196 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms [1 picasso@controller ~]$ sudo ip netns exec $QROUTER ping -c 1 -W 1 10.0.1.169 PING 10.0.1.169 (10.0.1.169) 56(84) bytes of data. --- 10.0.1.169 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms ---------- Compute node... [1 picasso@compute ~]$ ping -c 1 -W 1 10.0.1.1 PING 10.0.1.1 (10.0.1.1) 56(84) bytes of data. 64 bytes from 10.0.1.1: icmp_seq=1 ttl=64 time=0.425 ms --- 10.0.1.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.425/0.425/0.425/0.000 ms [0 picasso@compute ~]$ ping -c 1 -W 1 10.0.1.12 PING 10.0.1.12 (10.0.1.12) 56(84) bytes of data. --- 10.0.1.12 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms [1 picasso@compute ~]$ ping -c 1 -W 1 10.0.0.196 PING 10.0.0.196 (10.0.0.196) 56(84) bytes of data. --- 10.0.0.196 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms [0 picasso@compute ~]$ ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000 link/ether 08:00:27:72:b2:e5 brd ff:ff:ff:ff:ff:ff inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic enp0s3 valid_lft 79425sec preferred_lft 79425sec inet6 fe80::a00:27ff:fe72:b2e5/64 scope link valid_lft forever preferred_lft forever 3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000 link/ether 02:00:73:9d:41:7d brd ff:ff:ff:ff:ff:ff inet 192.168.1.200/24 brd 192.168.1.255 scope global enp0s8 valid_lft forever preferred_lft forever inet6 fe80::73ff:fe9d:417d/64 scope link valid_lft forever preferred_lft forever 4: enp0s9: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 02:00:08:c1:84:db brd ff:ff:ff:ff:ff:ff inet 10.0.1.31/24 brd 10.0.1.255 scope global enp0s9 valid_lft forever preferred_lft forever inet6 fe80::8ff:fec1:84db/64 scope link valid_lft forever preferred_lft forever 5: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000 link/ether 52:54:00:ee:20:86 brd ff:ff:ff:ff:ff:ff inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0 valid_lft forever preferred_lft forever 6: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000 link/ether 52:54:00:ee:20:86 brd ff:ff:ff:ff:ff:ff 7: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether 9e:52:8b:6f:f1:47 brd ff:ff:ff:ff:ff:ff 8: br-int: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default qlen 1000 link/ether 76:e6:90:cc:01:48 brd ff:ff:ff:ff:ff:ff 9: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000 link/ether aa:09:9f:d9:1d:4f brd ff:ff:ff:ff:ff:ff inet6 fe80::a809:9fff:fed9:1d4f/64 scope link valid_lft forever preferred_lft forever 10: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether 26:76:22:af:06:40 brd ff:ff:ff:ff:ff:ff 11: vxlan_sys_4789: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 65000 qdisc noqueue master ovs-system state UNKNOWN group default qlen 1000 link/ether 8a:87:fb:68:ec:8c brd ff:ff:ff:ff:ff:ff inet6 fe80::8887:fbff:fe68:ec8c/64 scope link valid_lft forever preferred_lft forever 12: tap9d036770-e1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc fq_codel master ovs-system state UNKNOWN group default qlen 1000 link/ether fe:16:3e:f5:f5:c0 brd ff:ff:ff:ff:ff:ff inet6 fe80::fc16:3eff:fef5:f5c0/64 scope link valid_lft forever preferred_lft forever [0 picasso@compute ~]$ ip r default via 10.0.2.2 dev enp0s3 proto dhcp src 10.0.2.15 metric 100 10.0.1.0/24 dev enp0s9 proto kernel scope link src 10.0.1.31 10.0.2.0/24 dev enp0s3 proto kernel scope link src 10.0.2.15 10.0.2.2 dev enp0s3 proto dhcp scope link src 10.0.2.15 metric 100 192.168.1.0/24 dev enp0s8 proto kernel scope link src 192.168.1.200 192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown [130 picasso@compute ~]$ sudo ovs-vsctl show a75bdb8e-9266-48f4-bab5-e119cf07c6af Manager "ptcp:6640:127.0.0.1" is_connected: true Bridge br-tun Controller "tcp:127.0.0.1:6633" is_connected: true fail_mode: secure datapath_type: system Port br-tun Interface br-tun type: internal Port "vxlan-c0a80106" Interface "vxlan-c0a80106" type: vxlan options: {df_default="true", egress_pkt_mark="0", in_key=flow, local_ip="192.168.1.200", out_key=flow, remote_ip="192.168.1.6"} Port patch-int Interface patch-int type: patch options: {peer=patch-tun} Bridge br-int Controller "tcp:127.0.0.1:6633" is_connected: true fail_mode: secure datapath_type: system Port br-int Interface br-int type: internal Port "tap9d036770-e1" tag: 1 Interface "tap9d036770-e1" Port int-br-ex Interface int-br-ex type: patch options: {peer=phy-br-ex} Port patch-tun Interface patch-tun type: patch options: {peer=patch-int} Bridge br-ex Controller "tcp:127.0.0.1:6633" is_connected: true fail_mode: secure datapath_type: system Port phy-br-ex Interface phy-br-ex type: patch options: {peer=int-br-ex} Port br-ex Interface br-ex type: internal ovs_version: "2.12.1"

2 1

Nova missing instance
by Grant Morley 29 Oct '20

29 Oct '20

Hi all, A customer had contacted us stating their instance was not working and was unresponsive. They attempted to reboot it and it failed to reboot and went into an error status. I have had a look at the nova logs and nova seems to think the instance has "disappeared" and comes up with an error stating: "Instance cannot be found" I have attached the full logs in the pastebin link. Has anyone come across this before? https://pastebin.com/LWzvsc8u Regards, -- Grant Morley Cloud Engineer, Civo Ltd Unit H-K, Gateway 1000, Whittle Way Stevenage, Herts, SG1 2FP, UK Visit us at www.civo.com <https://www.civo.com/> Signup for an account now > <https://www.civo.com/signup>

2 1

[tripleo][ci] Docker.io Service Announcement: Pull Rate Limit Enforcement, Changes to Image Retention Policies Begin
by Wesley Hayutin 29 Oct '20

29 Oct '20

Greetings, FYI... docker.io will be unavailable to tripleo jobs on Monday Nov 2 2020. Documentation is available here: https://hackmd.io/YH9xtBmOQbSVqPu7fjgoog Reviews are welcome and appreciated https://review.opendev.org/#/q/topic:new-ci-job+(status:open+OR+status:merg… Thanks! ------ from docker.io ------ Hello: You are receiving this email because of a policy change to Docker products and services you use. On Monday, November 2, 2020 at 9am Pacific Standard Time, Docker will begin enforcing rate limits on container pulls for Anonymous and Free users. Anonymous (unauthenticated) users will be limited to 100 container image pulls every six hours, and Free (authenticated) users will be limited to 200 container image pulls every six hours, when enforcement is fully implemented. Docker Pro and Team subscribers can pull container images from Docker Hub without restriction, as long as the quantities are not excessive or abusive. In addition, we are pausing enforcement of the changes to our image-retention policies until mid-2021, when we anticipate incorporating them into usage-based pricing. Two months ago, we announced an update to Docker image-retention policies. As originally stated, this change, which was set to take effect on November 1, 2020, would result in the deletion of images for free Docker account users after six months of inactivity. Today’s announcement means Docker will not enforce image expiration on November 1, 2020. For more details, please read the blog post <http://email.notify.docker.com/c/eJxNjsFuhSAURL9Gdxi46EMWLNq89j-ucFVSBCMY49…> summarizing the changes or review the documentation for rate limits <http://email.notify.docker.com/c/eJxNjkEOgyAURE8jOwl8kOqCRRvbe3z8WEhRG8WY3r…> . Details about Docker subscription levels and differentiators are available on the Docker Pricing Page <http://email.notify.docker.com/c/eJxNjcsOgyAURL9GlgTu5VEWLNrY_gfBq5KqGKUh_n…> . Thank you for using Docker. Jean-Laurent de Morlhon VP, Engineering Docker

1 0

Windows client can't connect to internet
by liu 29 Oct '20

29 Oct '20

Dear OpenStack community, I just launch a windows client in my OpenStack platform, but it can't connect to the internet with the float IP. Before that use a ubuntu client I can access the internet. Any ideas about why this happened. Thank you for your help. Liu

2 2

[tripleo][ci] Fwd: Service Announcement: Pull Rate Limit Enforcement, Changes to Image Retention Policies Begin November 2, 2020
by Wes Hayutin 29 Oct '20

29 Oct '20

FYI... Reviews are welcome and appreciated https://review.opendev.org/#/q/topic:new-ci-job+(status:open+OR+status:merg… Thanks! ---------- Forwarded message --------- From: Docker <noreply(a)notify.docker.com> Date: Wed, Oct 28, 2020 at 10:08 PM Subject: Service Announcement: Pull Rate Limit Enforcement, Changes to Image Retention Policies Begin November 2, 2020 To: <weshayutin(a)gmail.com> [image: Docker] <http://email.notify.docker.com/c/eJxNjUEOgyAQAF-DR7LsosCBQ43tPxChkKo0imn8fe…> Hello: You are receiving this email because of a policy change to Docker products and services you use. On Monday, November 2, 2020 at 9am Pacific Standard Time, Docker will begin enforcing rate limits on container pulls for Anonymous and Free users. Anonymous (unauthenticated) users will be limited to 100 container image pulls every six hours, and Free (authenticated) users will be limited to 200 container image pulls every six hours, when enforcement is fully implemented. Docker Pro and Team subscribers can pull container images from Docker Hub without restriction, as long as the quantities are not excessive or abusive. In addition, we are pausing enforcement of the changes to our image-retention policies until mid-2021, when we anticipate incorporating them into usage-based pricing. Two months ago, we announced an update to Docker image-retention policies. As originally stated, this change, which was set to take effect on November 1, 2020, would result in the deletion of images for free Docker account users after six months of inactivity. Today’s announcement means Docker will not enforce image expiration on November 1, 2020. For more details, please read the blog post <http://email.notify.docker.com/c/eJxNjsFuhSAURL9Gdxi46EMWLNq89j-ucFVSBCMY49…> summarizing the changes or review the documentation for rate limits <http://email.notify.docker.com/c/eJxNjkEOgyAURE8jOwl8kOqCRRvbe3z8WEhRG8WY3r…>. Details about Docker subscription levels and differentiators are available on the Docker Pricing Page <http://email.notify.docker.com/c/eJxNjcsOgyAURL9GlgTu5VEWLNrY_gfBq5KqGKUh_n…>. Thank you for using Docker. Jean-Laurent de Morlhon VP, Engineering Docker © Docker, Inc., 2020 318 Cambridge Ave Palo Alto, CA 94306 Docker Privacy Policy <http://email.notify.docker.com/c/eJxNjssKgzAURL_G7AzxxiS6yKLF9j_y1ND4QG1D_r…>

1 0

Nova iSCSI oddness
by Grant Morley 29 Oct '20

29 Oct '20

Hi all, We are seeing some oddness on a couple of our compute hosts that seems to be related to iSCSI. On a couple of our hosts I am seeing this error in the nova compute logs: 2020-10-27 18:56:14.814 31490 WARNING os_brick.initiator.connectors.iscsi [req-8613ae69-1661-49cf-8bdc-6fec875d01ba - - - - -] Couldn't find iscsi sessions because iscsiadm err: iscsiadm: could not read session targetname: 5 iscsiadm: could not find session info for session1707 That seems to also stop any instance on the compute host from being able to reboot. Reboots seem to get accepted but the instance never completes and gets stuck in the reboot state: 2020-10-27 19:11:58.891 48612 INFO nova.compute.manager [-] [instance: c8079e85-4777-4615-9d5a-3d1151e11984] During sync_power_state the instance has a pending task (reboot_started_hard). Skip. 2020-10-27 19:11:58.891 48612 INFO nova.compute.manager [-] [instance: 31128f26-910d-411f-98e0-c95dd36f4f0f] During sync_power_state the instance has a pending task (reboot_started_hard). Skip. Does anyone know of a way to resolve this without rebooting the entire compute host? I can't see any other issues other than the fact there is this iSCSI error which in turn seems to stop nova from processing anything for any instance. Any advice would be much appreciated. Regards, -- Grant Morley Cloud Engineer, Civo Ltd Unit H-K, Gateway 1000, Whittle Way Stevenage, Herts, SG1 2FP, UK Visit us at www.civo.com <https://www.civo.com/> Signup for an account now > <https://www.civo.com/signup>

4 9

[tripleo] TripleO at Wallaby PTG wrapup
by Marios Andreou 29 Oct '20

29 Oct '20

Hello all, thanks to everyone that participated and especially thanks to all who prepared and lead our PTG sessions. The number of participants was variable however the maximum attendees (that I noticed at least) per day were Monday:43, Tuesday:48, Wednesday:39. We had three full days with 18 sessions in total. I've included a condensed listing below [3] for convenience and you can find the full schedule at [1] with session descriptions. All sessions were recorded - hopefully we will get access to those soon (I don't have any info about that yet). If you have problems accessing any of the etherpads reach out to me I made backups. Our "team photo" from Monday is available at [2] :) Thanks again TripleO for a great PTG! regards, marios [1] https://etherpad.opendev.org/p/tripleo-ptg-wallaby [2] https://i.imgur.com/apqiYhk.png [3] DAY 1: retrospective & community topics Etherpad: https://etherpad.opendev.org/p/tripleo-ptg-retrospective Etherpad link: https://etherpad.opendev.org/p/tripleo-ptg-wallaby-community-process (Deployment) Composable Network v2 (sans Heat) Proposer: Emilien, Harald & Rabi Etherpad link: https://etherpad.opendev.org/p/composable-networks-v2 (Edge) Topic: State of DCN Proposer: James Slagle Etherpad link: https://etherpad.opendev.org/p/tripleo-ptg-wallaby-edge (PIDONE) Updates from PIDONE Proposer: dciabrin/bandini Etherpad link: https://etherpad.opendev.org/p/tripleo-ptg-wallaby-pidone (Ceph) Topic: review the cephadm integration specs https://review.opendev.org/#/c/757644/ and https://review.opendev.org/#/c/723108/ and https://review.opendev.org/759395 Etherpad link: https://etherpad.opendev.org/p/tripleo-ceph Presenter: [fmount, gfidente, fultonj] DAY 2: (Upgrades) Lessons learned upgrading from Queens to Train, then looking forward at Train to Wallaby Etherpad link: https://etherpad.opendev.org/p/tripleo-PTG-wallaby-upgrades Presenter: Jesse (odyssey4me), Lukas (lbezdick), Jose (jfrancoa), Sergii (holser) (CI) Topic: Dependency pipeline, CentOS Stream and CentOS 9 / Fedora 33 Slides: https://filedn.com/lHMSkrniM7gFSkf96rR711z/TripleODependencyPipeline.pdf Presenter: (rlandy) (Deployment) Topic: Drop heat-monolith local package requirement for undercloud Proposer: Alex Schultz (mwhahaha) Slides: https://docs.google.com/presentation/d/13ds5h9foCHEy3duElGs6mZ3mQwKcaggX6Vj… Blueprint: https://blueprints.launchpad.net/tripleo/+spec/switch-to-heat-all-container (Security) Topic: Updates for Security Etherpad Link: https://etherpad.opendev.org/p/tripleo-PTG-wallaby-security Presenter: Ade (alee) (Upgrades) Topic: Update should only be role inclusion, module and action plugins but we can't do the refactor without any upstream development framework or.... some broader coverage CI. Etherpad link: https://etherpad.opendev.org/p/tripleo-ptg-wallaby-refactor-update (CI) Topic: 0/ so long docker.io Etherpad link: https://hackmd.io/YH9xtBmOQbSVqPu7fjgoog?both Presenter: sshnaidm, chkumar, weshay, marios, DAY 3: (Deployment) Topic: Move to Ansible 2.10.x Proposer: Kevin Carter Etherpad link: https://etherpad.opendev.org/p/tripleo-ansible-210 (Upgrades) Topics: Run all roles in parallel during update by default for massive speed improvment. Etherpad link: https://etherpad.opendev.org/p/tripleo-ptg-wallaby-all-roles-in-parallel (Deployment) Topic: config-download Ansible Collection Etherpad link: https://etherpad.opendev.org/p/ptg-tripleo-config-download-collection Proposer: Luke Short (ekultails) (Deployment) Topic: Removal of Swift from the Undercloud Proposer: Kevin Carter (cloudnull) Etherpad link: https://etherpad.opendev.org/p/tripleo-swift-removal-undercloud (Ceph) Integration Discussion - Continued Etherpad link: https://etherpad.opendev.org/p/tripleo-ceph Presenter: [fmount, gfidente, fultonj] (Networking) Topic: BGP Integration https://review.opendev.org/#/c/758249/ "Spec for installing and configuring FRRouter" Proposer: Dan Sneddon (Cloudops) Topic: Moving deployment logic into ansible roles Proposer: efoley, all (discussion)

1 0

[operators][telemetry] Quick Telemetry survey
by Matthias Runge 29 Oct '20

29 Oct '20

Hi there, you may have seen, not much has been happening lately in OpenStack Telemetry. However, there have been interesting talks at the recent OpenInfra Summit. I would like to gather some data on current Telemetry usage in order to be able to focus a bit better[1]. There is not much value in keeping projects alive, if nobody uses them. At the same time, we may want to increase focus/contribution on often used projects. In order to help with the data, please fill in the form[1] and also feel free to forward this form to interested parties. Thank you, Matthias [1] https://forms.gle/EmncAxggRcG8r31b9

3 3

[devstack][cinder failure]:internal server error(HTTP 500)
by James 29 Oct '20

29 Oct '20

Hi:    I am new to openstack installing on one VM. The environment includes Win10,virtualbox,Ubuntu 18.04; The version of  devstack and openstack  is  Train;  the VM  includes 2vCPU,4G ram, 60G disk .    The process was interrupted by cinder error.[internal server error]        The stack.log shows as stack.log; the c-api log shows as c-api log. stack.log +[38;5;242mlib/cinder:create_volume_types:531 (B[m openstack --os-region-name=RegionOne volume type create --property volume_backend_name=lvmdriver-1 lvmdriver-1 2020-10-29 07:57:11.863 | Internal Server Error (HTTP 500) 2020-10-29 07:57:12.182 | +[38;5;242mlib/cinder:create_volume_types:1 (B[m exit_trap 2020-10-29 07:57:12.232 | +[38;5;242m./stack.sh:exit_trap:536 (B[m local r=1 2020-10-29 07:57:12.259 | ++[38;5;242m./stack.sh:exit_trap:537 (B[m jobs -p 2020-10-29 07:57:12.316 | +[38;5;242m./stack.sh:exit_trap:537 (B[m jobs= 2020-10-29 07:57:12.353 | +[38;5;242m./stack.sh:exit_trap:540 (B[m [[ -n '' ]] 2020-10-29 07:57:12.385 | +[38;5;242m./stack.sh:exit_trap:546 (B[m '[' -f /tmp/tmp.8Y7a6hpwLX ']' 2020-10-29 07:57:12.408 | +[38;5;242m./stack.sh:exit_trap:547 (B[m rm /tmp/tmp.8Y7a6hpwLX 2020-10-29 07:57:12.468 | +[38;5;242m./stack.sh:exit_trap:551 (B[m kill_spinner 2020-10-29 07:57:12.499 | +[38;5;242m./stack.sh:kill_spinner:446 (B[m '[' '!' -z '' ']' 2020-10-29 07:57:12.536 | +[38;5;242m./stack.sh:exit_trap:553 (B[m [[ 1 -ne 0 ]] 2020-10-29 07:57:12.581 | +[38;5;242m./stack.sh:exit_trap:554 (B[m echo 'Error on exit' 2020-10-29 07:57:12.581 | Error on exit 2020-10-29 07:57:12.615 | +[38;5;242m./stack.sh:exit_trap:556 (B[m type -p generate-subunit 2020-10-29 07:57:12.635 | +[38;5;242m./stack.sh:exit_trap:557 (B[m generate-subunit 1603957090 1142 fail 2020-10-29 07:57:14.084 | +[38;5;242m./stack.sh:exit_trap:559 (B[m [[ -z /opt/stack/logs ]] 2020-10-29 07:57:14.110 | +[38;5;242m./stack.sh:exit_trap:562 (B[m /opt/stack/devstack/tools/worlddump.py -d /opt/stack/logs 2020-10-29 07:57:17.223 | nova-compute: no process found 2020-10-29 07:57:17.264 | neutron-dhcp-agent: no process found 2020-10-29 07:57:17.338 | neutron-l3-agent: no process found 2020-10-29 07:57:17.409 | neutron-linuxbridge-agent: no process found 2020-10-29 07:57:17.471 | neutron-metadata-agent: no process found 2020-10-29 07:57:17.603 | +[38;5;242m./stack.sh:exit_trap:571 C-api logSTRICT_TRANS_TABLES,STRICT_ALL_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,TRADITIONAL,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION {{(pid=12249) _check_effective_sql_mode /usr/local/lib/python2.7/dist-packages/oslo_db/sqlalchemy/engines.py:307}} 10月 29 10:56:07 controller devstack(a)c-api.service[12246]: ERROR cinder.api.middleware.fault [req-7d67a008-3478-4da0-8b29-259571c1fb94 req-d823c701-e76a-489b-8ec9-fad9f9504c7b admin admin] Caught error: <class 'oslo_db.exception.DBConnectionError'> (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query') 10月 29 10:56:07 controller devstack(a)c-api.service[12246]: (Background on this error at: http://sqlalche.me/e/e3q8) DBConnectionError: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query') 10月 29 10:56:07 controller devstack(a)c-api.service[12246]: (Background on this error at: http://sqlalche.me/e/e3q8) 10月 29 10:56:07 controller devstack(a)c-api.service[12246]: ERROR cinder.api.middleware.fault Traceback (most recent call last): 10月 29 10:56:07 controller devstack(a)c-api.service[12246]: ERROR cinder.api.middleware.fault File "/opt/stack/cinder/cinder/api/middleware/fault.py", line 85, in __call__ 10月 29 10:56:07 controller devstack(a)c-api.service[12246]: ERROR cinder.api.middleware.fault return req.get_response(self.application)Thanks for your help,firtly.   发自我的iPhone

1 0

[infra][ci][all] Devstack error
by Slawek Kaplonski 29 Oct '20

29 Oct '20

Hi, Recently I see pretty often devstack based jobs failing with error "ERROR] / opt/stack/devstack/functions-common:230 Failure retrieving default route device". I reported it at [1] as Devstack bug but maybe it's something related to some changes in Ubuntu used on the gate. Did You saw something similar also? Maybe You already know why it's like that and have any ideas about how to fix it? Thx in advance for any info. [1] https://bugs.launchpad.net/devstack/+bug/1902002 -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

[heat] propose to move meeting time to Wednesday at 1400 UTC in #heat
by Rico Lin 29 Oct '20

29 Oct '20

Hi all as our current members are changed, I would like to propose we move our meeting time [1] one hour later. >From Weekly on Wednesday at *1300* UTC in #heat to Weekly on Wednesday at *1400* UTC in #heat Which I believe will be easier for US forks to join. [1] http://eavesdrop.openstack.org/#Heat_(Orchestration)_Team_Meeting -- May The Force of OpenStack Be With You, *Rico Lin*irc: ricolin

2 1

[nova] Weekly meeting canceled
by Balázs Gibizer 29 Oct '20

29 Oct '20

Hi, Today's meeting is canceled in favor of the PTG session. See you there. Cheers, gibi

1 0

[Openstack][Queens] iscsi unity driver
by Ignazio Cassano 28 Oct '20

28 Oct '20

Hello, I installed queens on centos7 with cinder unity iscsi driver. When volume are detached for example for a live migration, faulty devices are left on compute nodes. Must I configure iscsi initiator on both compute and controllers nodes? At this time I configured it only on compute nodes. Faulty could be an os brick module issue ? Thanks Ignazio

1 0

[ironic] Reviewing changes post-gerrit admin account compromise
by Julia Kreger 28 Oct '20

28 Oct '20

Greetings folks, Per the opendev notice that was published on the gerrit outage and compromise[0], I believe it is only prudent to sift through the changes published and verify if their content looks okay and that they were published as we expect. As we have a number of repositories, branches, and ultimately change sets to check, I've created a spreadsheet to help us track and coordinate the work[1]. In the interest of transparency, it is publicly viewable, but I've only shared editing ability with the members of ironic-core. Arne, unfortunately I don't see a google account for yourself, if you have an account you want me to add, let me know! Ironic-cores: If someone wishes to help, I personally think that is okay, but if you feel the need to update editing privileges on the document, please just reply to the mailing list so we have it on the record that this is the case. If I missed a branch that needs to be checked, just add it to the list. Same for any project repositories. And same goes for tabs. Copy/paste is likely easiest. Thanks everyone! -Julia [0]: http://lists.opendev.org/pipermail/service-announce/2020-October/000011.html [1]: https://docs.google.com/spreadsheets/d/1-_on0DOpS4gRriAnpdoLf2B7K98RZN7hNAP…

1 1

[policy] Wallaby Virtual Forum & PTG Summary
by Ghanshyam Mann 28 Oct '20

28 Oct '20

Hello Everyone, 'policy' popup team hosted 2 sessions in Wallaby Virtual PTG to discuss the progress and next steps. Forum: ===== https://etherpad.opendev.org/p/consistent-and-secure-default-policies-walla… Progress: * Three projects completed till now - Keystone, Nova and, Cyborg * One in progress - Barbican * Planning in Wallaby - Neutron, Manila We discussed the current and possible future challenges while migrating to the new policy. policy file in JSON format is one know and we talked about a current workaround and long term plan. Deprecation warnings are still an issue and a lot of warnings are logged. This is logged as a bug in nova[1]. Also, the HTML version of the policy doc does not have the deprecation rule and reason. Example: https://docs.openstack.org/nova/latest/configuration/policy.html We need to add it in these docs too. A clear step by step document about how to use system scope in cloud.yaml as well as in general with all migration steps are much needed. We also asked if any deployment is migrated to new policy but there is none yet. PTG: ==== https://etherpad.opendev.org/p/policy-popup-wallaby-ptg We carried the Forum sessions discussion in PTG with few extra topics. Migrate Default Policy Format from JSON to YAML (All projects) -------------------------------------------------------------------------------- We talked about it and decided that it will be great to do this in advance before projects start moving towards the new policy. and having this as a community goal in wallaby will help this effort to move faster. I have proposed this as a goal in TC PTG and it was agreed to select it for wallaby. - Goal proposal: https://review.opendev.org/#/c/759881/2 We also need to update devstack for the neutron policy file which is policy.json. Deprecation warning on-demand based on config option? ----------------------------------------------------------------------- There is no best solution for deprecation warnings when it is a lot in case of new policy work. We cannot stop logging warnings completely. We discussed an option to provide a config option to disable the warnings (enable by default) and only for default value change, not the policy name change. The policy name change is a little critical even in policy overridden case also that is why we should not make it switchable. This way operators can disable warnings after seeing it for the first time and if it is too noisy. New policy in Horizon ---------------------------- It is challenging to adopt new policy in Horizon when some projects have new policies and some not. We left this for now and will continue brainstorming once we do some investigation on the usage of system token for new policy and old one. For now, amotoki proposed a workaround to keep the policy file with the deprecated rule as the overridden rules. - https://review.opendev.org/#/c/750134/ What are the expectations from project teams? ----------------------------------------------------------- In the end, we discussed what all things to be targeted as part of new policy work and what all as a separate effort. Below is the list and I will be documenting it on wiki. Things to do as part of new policy effort: - Migrating JSON to YAML (in advance though) - Policy Tests coverage - System scoped administrator policy support and "reader" role support - upgrade-check support when changing the default policy As separate effort: - Remove hard-coded admin checks in the API/DB/"Views" - Standardizing policy names (depends on projects) [1] https://bugs.launchpad.net/nova/+bug/1900451 -gmann

1 0

[qa] Wallaby Virtual PTG Summary
by Ghanshyam Mann 28 Oct '20

28 Oct '20

Hello Everyone, I am summarizing the discussion QA team had in PTG and action items for quick ref. Victoria Retrospective: ----------------------------- We talked about the retrospective of the last cycle, one main challenge we discussed is the slow review in QA due to fewer contributors. Below are the action items that came up from improving things: * Action: - microversion need more work also when you try more combination or latest (gmann). - Triage bugs in the office hour as 30 min -> update agenda - Speed up the review. Office hour schedule: --------------------------- With daylight ending in Nov, we decided to shift the QA office hour by an hour late which is at 14 UTC. Move back the single horizon test in tempest tree from tempest-horizon: ------------------------------------------------------------------------------------------- Tempest and Horizon team decided to bring back the single horizon test to Tempest tree and retire the tempest-horizon plugins which was too much maintenance for single tests. It is unlikely to happen but if Tempest team in future plan to remove this test then it needs to be consulted with Horizon team first. * Action: - Move test back to Tempest - gmann - Deprecate and retire tempest-horizon - amotoki - Check with the release team if any other release needed. (amotoki + gmann) - modify the 'horizon-dsvm-tempest-plugin' job to direct to tests' new location Add run_validation as a centralized point for Tempest scenario tests: ------------------------------------------------------------------------------------- For now, validation resources automation and skip ssh part via run_validation is done in API test only and this proposal is to extend it to scenario tests also. There is no reason not to do that which will help to run tempest scenario tests on images where ssh is not allowed. There is a most possible situation where complete tests need to be skipped but we will see case by case and at least skipping automatically will help tester to avoid explicitly excluding the scenario tests to the skip list. *Action: - Implement it in scenario tests - paras333 - Refactor scenario manager's create_server method to consume common/compute.py - paras333 Patrole stable release: ---------------------------- We are lacking the maintainer in Patrole project which is a big challenge to release a stable version of it. Sonia and doug (already helping) will try to spend more bandwidth in Patrole. Another thing to reduce the Patrole tests execution time. We discussed a few options like policy engine to return the API based on the flag or use fake driver etc but we did not conclude any option yet as they need more investigation. * Action: - Keep eyes on gate and how tests are running and based on that we can make a stable release for Wallaby. - gmann - Keep exploring the options for making patrole lightweight. - gmann, doug Grenade: extending the testing for zero downtime upgrade testing: ------------------------------------------------------------------------------------ This is just a thought. There is TC tag 'assert:supports-zero-downtime-upgrade' which is not used by any of the projects and also we do not have any testing framework which can verify this tag. We talked about it if we can do such testing in grenade or not. Before moving forward on discussion and investigation we checked if anyone can volunteer for this work. As of now, no volunteer. Use different guest image for gate jobs to run tempest tests: --------------------------------------------------------------------------- We only test cirros guest image to create the test VM and all proposal from Paras is to try more images to enhance the different configuration scenarios in upstream testing. This will help to able to catch more failure/scenario at the upstream gate itself compare to the current situation where most of them are reported from downstream testing. * Action: - Add a job as experimental - paras333 Tempest Cred Manager proposed changes: ----------------------------------------------------- 'primary' and 'alt_promary' credentials in Tempest are hardcoded to non-admin and they are assigned configured 'tempest_role'. There is no way we can assign a different role to both of these creds. The idea here is to make 'primary' and 'alt_promary' credentials configurable so that different deployment can configure these with different roles in various combinations. We will be adding two config option similar to 'tempest_role' and default to an empty list so that we continue the default behavior with what we have currently. So that there is no backward-incompatible change instead it is an additional new thing provided. * Action: - Doug needs to propose the patch. Tempest Scenario manager stable version brainstorming: ----------------------------------------------------------------------- We talked about a few method changes to make the scenario manager stable. If any method is used among plugins only and not in Tempest then we do not actually need to move it to Tempest and they can stay on the side of the plugin itself. We ran out of time here and will continue the brainstorming in office hours or so. (this etherpad - https://etherpad.opendev.org/p/tempest-scenario-manager) * Action: - Sonia and Martin will continue working on this. Wallaby Priority & Planning: ------------------------------------ We did not prioritize the things as such but listed all working items in below etherpad along with Victoria cycle backlogs. - https://etherpad.opendev.org/p/qa-wallaby-ptg Detailed discussions are in this Etherpad: https://etherpad.opendev.org/p/qa-wallaby-ptg -gmann

1 0

[openstack-ansible] Gerrit breach and auditing all commits since Oct 01
by Dmitriy Rabotyagov 28 Oct '20

28 Oct '20

Hi! Most of you already know that Gerrit has been compromised a while ago [1]. Infra team has dealed with it very efficiently and I can assure you that this issue hasn't touched openstack-ansible project. I have looked through all commits that were merged in period from Oct 1 - Oct 21 (and we've got more than 200 of them during this timeframe, wow!), and all of them look valid and were properly approved. I have also double checked our releases and didn't found any extra or malicious ones. So we are pretty safe and can sleep calm [1] http://lists.opendev.org/pipermail/service-announce/2020-October/000011.html -- Kind Regards, Dmitriy Rabotyagov

1 0

[gate] many jobs failing for nova-compute libvirt driver error
by melanie witt 28 Oct '20

28 Oct '20

Hey all, This is just a FYI that we've got another gate failure where nova-compute is failing with the following error raised from the libvirt driver [1]: "TypeError: Parameterized generics cannot be used with class" which was raised from the eventlet.tpool code. (I don't yet understand what this error means exactly.) Because of this, we suspect this is related to the eventlet package version bump from 0.26.1 to 0.28.0 that happened in the upper-constraints change to openstack/requirements that merged earlier today: https://review.opendev.org/#/c/750084/47/upper-constraints.txt@150 But we're not certain yet exactly what is happening and whether this ^ is indeed the cause. I am currently investigating to find the root cause of failure and how to fix it/confirm which package we should pin for now. I am trying out a DNM nova patch to pin eventlet to 0.26.1 to see what happens, while I look into more depth at what the error means and whether it's something we should fix in the nova code. If anyone can help, it would be appreciated. Best, -melanie [1] https://zuul.opendev.org/t/openstack/build/20f1d309663347c28112b711b82b9c03…

4 7

[qa] Wallaby PTG Wrap-up and office hour was changed to Tue 1400 UTC
by Masayuki Igawa 28 Oct '20

28 Oct '20

Hi, Thank you for attending our sessions! We had discussed many things during the virtual PTG. Topics are the following. And as we discussed our office hour office time 1 hour earlier than the current time. So, the office hour starts at 1400 UTC on every Tuesday. ========= Topics: Mon: @ Juno Greetings and ordering the topics Victoria Retrospective Move back the single horizon test in tempest tree from tempest-horizon Add run_validation as a centralised point for Tempest scenario tests Tue: @Juno Patrole stable release Grenade: extending the testing for zero downtime upgrade testing Use different guest image for gate jobs to run tempest tests Tempest Cred Manager proposed changes Tempest Scenario manager stable version brainstorming Bug triaging -> moved to the office hour Wallaby priority items https://etherpad.opendev.org/p/qa-wallaby-priority Etherpad: https://etherpad.opendev.org/p/qa-wallaby-ptg You can find the recording video files on the etherpad. ========= -- Masayuki Igawa

2 1

[Neutron] no L3 meeting this week (2020-June-01)
by LIU Yulong 28 Oct '20

28 Oct '20

Hi there, Due to the PTG meetings this week, we will cancel the L3 meeting this week. See you guys online next week. Regards, LIU Yulong

1 2

[masakari][ptg] I cannot attend the 2nd Masakari PTG session
by Radosław Piliszek 28 Oct '20

28 Oct '20

Dears, I regret to inform that, due to personal matters (augmented by the pandemic and the current situation in my country), I will not be able to attend the 2nd Masakari PTG session: Thursday October 29, 2020 13:00 - 15:00 (UTC) The good news is we don't have that many topics to go through and I am generally able to get more time from later slots if we need to have it. -yoctozepto

1 0

[nova-scheduler] always the same compute was selected?
by Tony Liu 27 Oct '20

27 Oct '20

Hi, I have a Ussuri setup with 5 compute nodes (same resource spec). When launch 5 Cirros VMs in a batch, they are all launched on the same compute node. All 5 nodes have sufficient resource. AWIK, Nova scheduler picks a compute randomly after going through filtering. But 5 VMs all on the same compute is quite coincidental. Could it be something missing? Is there any control to such random pick? Any way to make a better balancing? >From the below log, could anyone let me know how compute-4 was selected? I tried a few more launches, it's always compute-4 was selected. ========================================= 2020-10-27 13:56:45.484 24 DEBUG nova.scheduler.filter_scheduler [req-e2c6bf4b-7512-4ff0-9899-2a24bffa9131 113ee63a9ed0466794e24d069efc302c 32be191b3ec9497eaec108a22220890b - default default] Filtered [(compute-4, compute-4) ram: 131698MB disk: 14251008MB io_ops: 0 instances: 17, (compute-5, compute-5) ram: 232050MB disk: 14251008MB io_ops: 0 instances: 2, (compute-2, compute-2) ram: 367785MB disk: 14252032MB io_ops: 0 instances: 5, (compute-1, compute-1) ram: 298665MB disk: 14251008MB io_ops: 0 instances: 9, (compute-3, compute-3) ram: 259753MB disk: 14251008MB io_ops: 0 instances: 19] _get_sorted_hosts /usr/lib/python3.6/site-packages/nova/scheduler/filter_scheduler.py:443 2020-10-27 13:56:45.485 24 DEBUG nova.scheduler.filter_scheduler [req-e2c6bf4b-7512-4ff0-9899-2a24bffa9131 113ee63a9ed0466794e24d069efc302c 32be191b3ec9497eaec108a22220890b - default default] Weighed [WeighedHost [host: (compute-4, compute-4) ram: 131698MB disk: 14251008MB io_ops: 0 instances: 17, weight: 2.315526126088031], WeighedHost [host: (compute-2, compute-2) ram: 367785MB disk: 14252032MB io_ops: 0 instances: 5, weight: -999997.0], WeighedHost [host: (compute-1, compute-1) ram: 298665MB disk: 14251008MB io_ops: 0 instances: 9, weight: -999997.2171186721], WeighedHost [host: (compute-3, compute-3) ram: 259753MB disk: 14251008MB io_ops: 0 instances: 19, weight: -999997.3362949106], WeighedHost [host: (compute-5, compute-5) ram: 232050MB disk: 14251008MB io_ops: 0 instances: 2, weight: -999997.371492924]] _get_sorted_hosts /usr/lib/python3.6/site-packages/nova/scheduler/filter_scheduler.py:462 2020-10-27 13:56:45.486 24 DEBUG nova.scheduler.utils [req-e2c6bf4b-7512-4ff0-9899-2a24bffa9131 113ee63a9ed0466794e24d069efc302c 32be191b3ec9497eaec108a22220890b - default default] Attempting to claim resources in the placement API for instance ac10e5df-7e55-4c88-a682-df25cb6dd535 claim_resources /usr/lib/python3.6/site-packages/nova/scheduler/utils.py:1175 2020-10-27 13:56:45.657 24 DEBUG nova.scheduler.filter_scheduler [req-e2c6bf4b-7512-4ff0-9899-2a24bffa9131 113ee63a9ed0466794e24d069efc302c 32be191b3ec9497eaec108a22220890b - default default] [instance: ac10e5df-7e55-4c88-a682-df25cb6dd535] Selected host: (compute-4, compute-4) ram: 131698MB disk: 14251008MB io_ops: 0 instances: 17 _consume_selected_host /usr/lib/python3.6/site-packages/nova/scheduler/filter_scheduler.py:354 ========================================= Thanks! Tony

2 2

[tc][all] Wallaby Cycle Community Goals
by Graham Hayes 27 Oct '20

27 Oct '20

Hi All It is that time of year / release again - and we need to choose the community goals for Wallaby. Myself and Nate looked over the list of goals [1][2][3], and we are suggesting one of the following: - Finish moving legacy python-*client CLIs to python-openstackclient - Move from oslo.rootwrap to oslo.privsep - Implement the API reference guide changes - All API to provide a /healthcheck URL like Keystone (and others) provide Some of these goals have champions signed up already, but we need to make sure they are still available to do them. If you are interested in helping drive any of the goals, please speak up! We need to select goals in time for the new release cycle - so please reply if there is goals you think should be included in this list, or not included. Next steps after this will be helping people write a proposed goal and then the TC selecting the ones we will pursue during Wallaby. Additionally, we have traditionally selected 2 goals per cycle - however with the people available to do the work across projects Nate and I briefly discussed reducing that to one for this cycle. What does the community think about this? Thanks, Graham 1 - https://etherpad.opendev.org/p/community-goals 2 - https://governance.openstack.org/tc/goals/proposed/index.html 3 - https://etherpad.opendev.org/p/community-w-series-goals 4 - https://governance.openstack.org/tc/goals/index.html#goal-selection-schedule

7 16

[ops][cinder] ceph version survey for operators
by Brian Rosmaita 27 Oct '20

27 Oct '20

Hello Cinder operators, tl;dr - if you use Ceph with your Cinder installation, please fill out this short (4 question) survey before 18:00 UTC on Wednesday 28 October 2020: https://rosmaita.wufoo.com/forms/ceph-version-survey/ Cinder currently contains an RBD driver that supports a Ceph backend, but it does not restrict Ceph to a particular range of versions. We'd like to take advantage of recent developments in Ceph to make some improvements to the RBD driver, but first want to gather data on what versions of Ceph are actually being used with Cinder so we can figure out backward compatibility issues we may face. (Basically, keeping backward compatibility for Ceph versions that don't have the new features will add complexity to the driver code, and more complex code is more likely to have bugs, and nobody likes bugs. Hence, we don't want to carry compatibility code for Ceph versions that no one is using.) If you manage multiple clouds, please fill out a separate survey for each cloud. We plan to discuss this issue at the PTG next week, so please respond before 18:00 UTC on Wednesday 28 October 2020. Here's the survey: https://rosmaita.wufoo.com/forms/ceph-version-survey/ Thank you!

1 1

[PTG] [Diversity] Extra session for Divisive Language discussions
by Amy Marrich 27 Oct '20

27 Oct '20

During the Monday session there were some questions in regards to technical writing and how things should be worded. I have invited Joanne O'Flynn, a Technical Writer from Red Hat to join us on Thursday at 17:00 UTC to help address these questions. This is not a normal PTG time slot but it was the only option due to time zones and already booked sessions for some of the participants from Monday. Thanks, Amy Marrich (spotz)

1 1

[TripleO] [ptg] deployment flow
by Kanevsky, Arkady 27 Oct '20

27 Oct '20

After today's PTG meeting want to make sure I have the right understanding of deployment flow. After deploying undercloud, are these the steps need to be done that are partially outside TripleO (https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/provisi… ): 1. Ironic discovery to discover all nodes. (networking for ironic must be in place for all nodes) 2. Metalsmith will provision baremetal machines - https://docs.openstack.org/metalsmith/latest/ 3. Metalsmith provisions OS on provisioned nodes 4. Something(???) optionally provisions Ceph (based on appropriate roles) 5. Something(???) optionally provisions other 3rd party services, like switch provisioning (based on appropriate roles) 6. Metalsmith optionally provisions Glance (may require Ceph or other 3rd party storage) 7. Metalsmith optionally provisions Neutron (may require switch provisioning) 8. TripleO deploys overcloud Is this the correct flow? Do we still need "openstack overcloud node provision" call or metalsmith already handles it? Or this call uses metalsmith under the cover? Thanks, Arkady

2 3

[requirements] Gerrit breach and commit audit
by Thierry Carrez 27 Oct '20

27 Oct '20

Following the recent gerrit breach, I manually audited all recent changes to the openstack/requirements repository, and could not find suspicious activity. Cheers, -- Thierry Carrez (ttx)

1 0

[cinder] qemu-img info is called as root even if nas_secure_file_operations is set to true
by Jonas Schäfer 27 Oct '20

27 Oct '20

Hi list, We’ve got a curious issue here. We’re trying to configure Cinder for use with NetApp NFS. The NetApp has been configured to disallow superuser access and cinder has been set up with nas_secure_file_operations set to true. While operations like creating volumes work, attaching a volume to an instance fails with the following traceback: Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/cinder/volume/manager.py", line 4369, in _connection_create conn_info = self.driver.initialize_connection(volume, connector) File "/usr/lib/python2.7/dist-packages/cinder/volume/drivers/nfs.py", line 134, in initialize_connection volume['name']) File "/usr/lib/python2.7/dist-packages/cinder/volume/drivers/nfs.py", line 543, in _qemu_img_info run_as_root=True) File "/usr/lib/python2.7/dist-packages/cinder/volume/drivers/remotefs.py", line 765, in _qemu_img_info_base run_as_root=run_as_root) File "/usr/lib/python2.7/dist-packages/cinder/image/image_utils.py", line 111, in qemu_img_info prlimit=QEMU_IMG_LIMITS) File "/usr/lib/python2.7/dist-packages/cinder/utils.py", line 126, in execute return processutils.execute(*cmd, **kwargs) File "/usr/lib/python2.7/dist-packages/oslo_concurrency/processutils.py", line 425, in execute cmd=sanitized_cmd) ProcessExecutionError: Unexpected error while running command. Command: /usr/bin/python -m oslo_concurrency.prlimit --as=1073741824 --cpu=30 -- sudo cinder-rootwrap /etc/cinder/rootwrap.conf env LC_ALL=C qemu-img info --force-share /var/lib/cinder/mnt/1be0f17801f5c315c80d99a59518e26e/volume- ae4bba9b-2ab3-4234-8f86-352f1a20e086 Exit code: 1 Stdout: u'' Stderr: u"qemu-img: Could not open '/var/lib/cinder/mnt/ 1be0f17801f5c315c80d99a59518e26e/volume-ae4bba9b-2ab3-4234-8f86-352f1a20e086': Could not open '/var/lib/cinder/mnt/1be0f17801f5c315c80d99a59518e26e/volume- ae4bba9b-2ab3-4234-8f86-352f1a20e086': Permission denied\n" It seems as if cinder executes qemu-img as root. This is confirmed by looking at the code [3]. Looking at the superclass [4], we see that the superclass would’ve decided based on the setting of nas_secure_file_operations if [3] would not pass execute_as_root as True. To us, it makes no sense whatsoever. While [1] mentions something about incorrect permissions on volumes, it does not seem to consider the case of running with NFS Security enabled at all. However, it also seems as if this change went through completely uncontested. Hence, we assume that we are in the wrong here and wanted to ask on the mailing list instead of filing a bug. Does anyone have insight on what we’re doing wrong / missing here? kind regards, Jonas [1]: https://review.opendev.org/#/c/461134/ [2]: https://github.com/openstack/cinder/commit/dbc9c7ca [3]: https://github.com/openstack/cinder/blob/stable/queens/cinder/volume/ drivers/nfs.py#L537-L543 [4]: https://github.com/openstack/cinder/blob/stable/queens/cinder/volume/ drivers/remotefs.py#L753-L761 [5]: https://github.com/openstack/cinder/blob/stable/queens/cinder/volume/ drivers/nfs.py#L431-L432 -- Jonas Schäfer DevOps Engineer Cloud&Heat Technologies GmbH Königsbrücker Straße 96 | 01099 Dresden +49 351 479 367 37 jonas.schaefer(a)cloudandheat.com | www.cloudandheat.com New Service: Managed Kubernetes designed for AI & ML https://managed-kubernetes.cloudandheat.com/ Commercial Register: District Court Dresden Register Number: HRB 30549 VAT ID No.: DE281093504 Managing Director: Nicolas Röhrs Authorized signatory: Dr. Marius Feldmann Authorized signatory: Kristina Rübenkamp

1 0

[masakari] PTG starting Thursday
by Radosław Piliszek 27 Oct '20

27 Oct '20

Hello Everyone! A kind reminder that Masakari has PTG scheduled for the upcoming Thursday and Friday. First session: Thursday October 29, 2020 06:00 - 08:00 (UTC) Feel free to get acquainted with the etherpad [1] in the meantime. [1] https://etherpad.opendev.org/p/masakari-wallaby-vptg Cheers! -yoctozepto

1 0

Overcloud fatal error TASK [Ensure system is NTP time synced]
by dangerzone ar 27 Oct '20

27 Oct '20

Hi, I'm facing overcloud failure at the same line related with 'Ensure system is NTP time synced' *The error below refer:-* *TASK [Ensure system is NTP time synced] ****************************************fatal: [overcloud-controller-0]: FAILED! => {"changed": true, "cmd": ["chronyc", "waitsync", "20"], "delta":......* *controller timedatectl:-* *[heat-admin@overcloud-controller-0 ~]$ timedatectl Local time: Tue 2020-10-27 08:53:19 UTC Universal time: Tue 2020-10-27 08:53:19 UTC RTC time: Tue 2020-10-27 08:53:19 Time zone: UTC (UTC, +0000) NTP enabled: yesNTP synchronized: no RTC in local TZ: no DST active: n/a* *undercloud timedatectl:-* * Local time: Tue 2020-10-27 17:36:11 +08 Universal time: Tue 2020-10-27 09:36:11 UTC RTC time: Tue 2020-10-27 09:36:11 Time zone: Asia/Singapore (+08, +0800) NTP enabled: yesNTP synchronized: yes RTC in local TZ: no DST active: n/a* Tripleo deployment for 1compute and 1controller. I have run few times and end-up with the same error. Seems it's all related to chrony. No more ntp in rocky release and all change to chrony to handle time synchronization. Based on my reading the issue should be resolved in rocky but clearly my overcloud deployment failed at this stage. Please advise how to resolve this problem. Thank you all.

1 0

[cyborg] [ptg] cyborg Wallaby PTG schedule and topics
by yumeng bao 26 Oct '20

26 Oct '20

Hi all, Please check the cyborg PTG schedule below, and here are all the topics[0] that we've proposed, can't wait to see you tomorrow! And we plan to have a team photo on the first day at our internal meeting, come and join! ^^ Tuesday (27th ) 6:00 UTC - 8:00 UTC, Cyborg internal discussion Tuesday (27th) 13:00 - ?, Edge group discussion Wednesday (28th ) 6:00 UTC - 8:00 UTC, Cyborg internal Wednesday (28th): 13:00 - 14:00: Nova-Cyborg cross project session Tuesday (29th ) 6:00 UTC - 8:00 UTC, Cyborg internal [0]https://etherpad.opendev.org/p/cyborg-wallaby-goals Regards， Yumeng

2 1

[tacker] PTG planning
by Yasufumi Ogawa 26 Oct '20

26 Oct '20

Hi Tacker team, I've updated our vPTG etherpad for topics you've proposed [1]. We will start it from 27 Oct 6am UTC. So, I would like to skip the next IRC meeting this week. You can find Tacker's room on Zoom from schedule tracks here [2]. I'd also like to ask you to join in taking team photo on our 2nd day, although it's not mandatory. Thanks, Yasufumi [1] https://etherpad.opendev.org/p/Tacker-PTG-Wallaby [2] http://ptg.openstack.org/ptg.html

2 2

[ptg][swift][ops] Operator feedback session 28 Oct 21:00-22:00 UTC
by Tim Burke 26 Oct '20

26 Oct '20

Later this week, the Swift community will have an operator feedback session during our PTG slot [0]. If you're running a swift cluster, large or small, we'd love to see you there! As we've done in the past [1], we'll have an etherpad going [2] -- feel free to start filling it in and adding discussion items today! Even if you won't make the meeting, we'd appreciate your feedback. Looking forward to hearing from you! Tim [0] 28 Oct at 2100 UTC in https://www.openstack.org/ptg/rooms/kilo [1] https://wiki.openstack.org/wiki/Swift/Etherpads#List_of_Ops_Feedback_Etherp… [2] https://etherpad.opendev.org/p/swift-wallaby-ops-feedback

1 0

[keystone][ptg] Keystone vPTG Planning
by Kristi Nikolla 26 Oct '20

26 Oct '20

Hi all, I have started a doodle poll for scheduling our sessions during the vPTG. Please fill it out by September 10. [0] The etherpad that we are using for brainstorming the topics is [1]. Please fill it out with anything you would like us to schedule time for. More information on the vPTG and links to register can be found at [2]. [0]. https://doodle.com/poll/czgyuwepxk348vqq [1]. https://etherpad.opendev.org/p/keystone-wallaby-ptg [2]. https://www.openstack.org/ptg/

2 1

Help with meetpad needed
by Slawek Kaplonski 26 Oct '20

26 Oct '20

Hi, In Neutron sessions we are successfully using meetpad. But I have one question about it, maybe You will be able to help me somehow. When I click "open shared document" in the meetpad, etherpad is displayed but only until someone will start talking or someone new will join the call. Is it possible somehow to force display of the etherpad always? Thx in advance for any help with that. -- Slawek Kaplonski Principal Software Engineer Red Hat

2 1

How to use condition for resource creation via heat template
by Md. Hejbul Tawhid MUNNA 26 Oct '20

26 Oct '20

~~~ heat_template_version: 2017-02-24 ...... ...... ...... conditions: port_security_enabled: equals: - { get_param: port_security_enabled } - "true" resources: port: type: OS::Neutron::Port properties: admin_state_up: true network_id: { get_param: internal_net } port_security_enabled: { get_param: port_security_enabled } security_groups: { get_param: security_group } I want to create a condition , so if I set "port_security_enabled = false" security group will not apply in port.properties . If I set "port_security_enabled = true" then security group will applied. Please help me

2 1

[tripleo][overcloud] Deployment templates and command
by dangerzone ar 26 Oct '20

26 Oct '20

Hi, after exploring openstack via tripleo deployment, I encountered several issues especially during overcloud deployment. Most of the time I'm referring to openstack official web guideline and some other blogs resources. From my experiences I face problems identifying the right templates and the right command for my deployment. I have seen templates created in guideline web and some other examples. Even the command line to deploy overcloud is also a bit different from one example to another. I understand it is because of different requirements and setup. So many templates and several ways of deployment always made me puzzle and endup with deployment failure. I would like some advice to know what are the common or important templates/yaml files and overcloud command to use if I just want to deploy 3 controllers (ha) and several computes only. I also have plan to get dpdk in my deployment but...this will be later as I would like to successfully establish simple deployment with controllers and computes for now. Appreciate your good advice and support. Thank you all. This is some web link I use to refer:- ** https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/feature… ** https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13… ** https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/ Regards, daz

2 1

Help about openstack Storlets
by ghasemir 26 Oct '20

26 Oct '20

hi I am working on Openstack Storlets. I ran Swift in a Docker(container) and I want to put it in the Storlet midleware. How can that be? Can you help? My main question: Is there a place or activity group about Storlet to share comments and get helps? Thanks a lot Best regards Reza Ghasemi Department of Computer Engineering,Sharif University of Technology

2 1

[ptg][kolla] Please stop translating Etherpads
by Mark Goddard 26 Oct '20

26 Oct '20

Hi, Over the weekend, the Kolla Etherpad [1] has had various sections replaced with (what I think is) a Chinese translation, twice. This replaces the original English text for everyone. I guess that this is some browser based translator that does not realise it is modifying the page content for everyone. The export/import procedure I used to restore the etherpad loses some formatting, attributions, and may have lost content if changes were made in between. Please, we need to find another solution for translation. If you need to make translations, please copy text to another window, or at least provide translations for specific text *next to the English*. If this happens again we will need to move to another tool, such as Google docs. I would much prefer not to do this, and rather use an open source tool that is widely accessible, but we do need to be able to collaborate this week without disruption. I look forward to working with you this week. I hope this does not discourage non-native English speakers, of which there is generally a majority. If I can provide any assistance to make the sessions more accessible, please get in touch. Cheers, Mark [1] https://etherpad.opendev.org/p/kolla-wallaby-ptg

4 6

[First Contact] [SIG] [PTG] Meeting Reminder
by Kendall Nelson 26 Oct '20

26 Oct '20

Hello Everyone! Just wanted to remind you all that we have time scheduled at the PTG for Thursday October 29th at 23:00 UTC. Also, feel free to add agenda items here[1] in the meantime. Hope to see you there! -Kendall Nelson (diablo_rojo) [1] https://etherpad.opendev.org/p/wallaby-ptg-first-contact

1 0

[octavia] Weekly IRC meeting is cancelled this week due to the PTG
by Michael Johnson 26 Oct '20

26 Oct '20

Hello Octavia community, As we will be meeting for the PTG this week, I am cancelling the weekly IRC meeting on October 28th. Looking forward to seeing you all at the PTG! Michael

1 0

[neutron] bug deputy report October 19th - 25th
by Miguel Lavalle 26 Oct '20

26 Oct '20

Hi Neutrinos, Here's the bug report for the week of October 19th - 25th. It was a very quiet week High ==== https://bugs.launchpad.net/neutron/+bug/1900763 [OVN Octavia Provider] OVN provider status update failures can leave orphaned resources. It has an owner already (haleyb) RFE === https://bugs.launchpad.net/neutron/+bug/1900934 [RFE][DHCP][OVS] flow based DHCP. Will be discussed during PTG

1 0

[Glance] create image by downloading/importing from UI vs. CLI
by Tony Liu 26 Oct '20

26 Oct '20

Hi, The initial issue I saw was "The Store URI was malformed." from Horizon when creating image by URL [1]. It works fine with Glance CLI as the following. ======== glance image-create --container-format bare --disk-format qcow2 --name cirros-test glance image-import --import-method web-download --uri https://download.cirros-cloud.net/0.5.1/cirros-0.5.1-x86_64-disk.img cirros-test ======== When I look into it, I see that UI and CLI work differently, they are handled by different workflow in Glance. Why is that? Why not UI follows the same workflow as CLI? The root cause is that, [1] redirect to [2] and redirect to [3]. One issue here is that, query is not supported in [4]. pieces.query is dropped. When I attached query parameters, I got 403. And that's because, the workflow for UI is checking quota policy when adding location. It needs to get the size of image by HEAD request. But the signature in [3] is for GET request. So that HEAD request is forbidden by S3. I don't think we can get an URL with signature for HEAD request in such case. So I go for an ugly workaround to skip the size check. Any ideas to make it work better? Is quota policy involved in CLI workflow? Again, can we make UI work the same way as CLI? [1] https://download.cirros-cloud.net/0.5.1/cirros-0.5.1-x86_64-disk.img [2] https://github.com/cirros-dev/cirros/releases/download/0.5.1/cirros-0.5.1-x… [3] https://github-production-release-asset-2e65be.s3.amazonaws.com/219785102/6… [4] https://github.com/openstack/glance_store/blob/488d3e2fe31e4fc7a461e9de8b20… Thanks! Tony

3 2

[heat] PTG on this wednesday 13-15 UTC
by Rico Lin 26 Oct '20

26 Oct '20

Hi all Heat PTG room reserved on Wednesday 13-15 UTC at Juno room Feel free to update our PTG etherpad [1] [1] https://etherpad.opendev.org/p/wallaby-ptg-heat -- May The Force of OpenStack Be With You, *Rico Lin*irc: ricolin

1 0

[multi-arch SIG] PTG plan this week
by Rico Lin 26 Oct '20

26 Oct '20

Hi all, Multi-arch SIG will have our PTG on 10/27 Tuesday 07-08 UTC, and 15-16 UTG This week at room Juno Feel free to update our etherpad [1] [1] https://etherpad.opendev.org/p/wallaby-ptg-multiarch-sig -- May The Force of OpenStack Be With You, *Rico Lin*irc: ricolin

1 0

linux.conf.au 2021 - Call for Sessions and Miniconfs Open
by Joshua Hesketh 26 Oct '20

26 Oct '20

The best F/OSS conference in the southern hemisphere is back again - this time virtualised and without a 20+ hour flight! -, January 23-25. The CFP is open until November 6. Submit early, submit often! -------- Forwarded Message -------- Subject: [lca-announce] linux.conf.au 2021 - Call for Sessions and Miniconfs Open Date: Thu, 15 Oct 2020 20:43:24 +1000 From: linux.conf.au Announcements <lca-announce(a)lists.linux.org.au> <lca-announce(a)lists.linux.org.au> Reply-To: lca-announce(a)lists.linux.org.au To: lca-announce(a)lists.linux.org.au We're excited! The linux.conf.au 2021 Call for Sessions and Call for Miniconfs are now open. They will stay open until 6th November 2020 Anywhere on Earth (AoE) (https://en.wikipedia.org/wiki/Anywhere_on_Earth) This is only 3 weeks away - so don't delay, get your talks in early! Our theme is "So what's next?". We all know we're living through unprecedented change and uncertain times. How can open source play a role in creating, helping and adapting to this ongoing change? What new developments in software and coding can we look forward to in 2021 and beyond? If you have ideas or developments you'd like to share with the open source community at linux.conf.au, we'd love to hear from you. Call for Sessions The main conference runs on Sunday 24 and Monday 25 January, with multiple streams catering for a wide range of interest areas. We invite you to submit a session (https://linux.conf.au/programme/sessions/) proposal for a talk. Talks are generally 35-45 minute presentations on a single topic presented in lecture format. Call for Miniconfs Miniconfs are dedicated day-long streams focusing on single topics, creating a more immersive experience for delegates than a session. We encourage you to get creative with how you could deliver your Miniconf virtually! Running a Miniconf (https://linux.conf.au/programme/miniconfs/) is a great way to gain experience, provide exposure for your project or topic, and raise your professional profile. They're a crowd favourite and an awesome way to kick off the conference. Miniconfs will run on Saturday 23 January, before the main conference commences on Sunday. No need to book flights or hotels Don't forget: the conference will be a fully online, virtual experience. This means our speakers will be beaming in from their own homes or workplaces. The organising team will be able to help speakers with their tech set-up. Each accepted presenter will have a tech check prior to the event to smooth out any difficulties and there will be an option to pre-record presentations. Have we piqued your interest? You can find out how to submit your session or miniconf proposals at https://linux.conf.au/programme/proposals/. If you have any other questions you can contact us via email at contact(a)lca2021.linux.org.au. Timeline 16th October: Call for sessions opens 6th November: Call for sessions closes January 23 2021: Miniconfs! January 24-25 2021: Main conference presentations Tickets will go on sale in the coming weeks. We'll keep you posted. We're looking forward to reading your submissions. linux.conf.au 2021 Organising Team About linux.conf.au 2021 Running since 1999, linux.conf.au is the largest linux and open source conference in the Asia-Pacific region. The conference provides deeply technical presentations from industry leaders and experts on a wide array of subjects relating to open source projects, data and open government and community engagement.

1 0

[oslo] PTG Update
by Ben Nemec 26 Oct '20

26 Oct '20

Hi, Based on the lack of topic proposals in the etherpad[0], we are currently planning to skip the Oslo PTG session for this cycle. If you have something to discuss please contact the team ASAP so we have time to set something up. Thanks. -Ben 0: https://etherpad.opendev.org/p/oslo-wallaby-topics

3 3