- openstack-discuss - lists.openstack.org

How to set admin password during server create but not using user-data file
by Ahmad Milad Pour 15 Oct '25

15 Oct '25

Hello there, This is how I download an ubuntu cloud image: wget -c https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.i… -O ~/noble-server-cloudimg-amd64.img virt-customize -a noble-server-cloudimg-amd64.img \ --timezone Asia/Tehran \ --root-password password:q \ --run-command 'sed -i "s/^disable_root.*/disable_root: false/" /etc/cloud/cloud.cfg' \ --run-command 'grep -q "^ssh_pwauth:" /etc/cloud/cloud.cfg && sed -i "s/^ssh_pwauth:.*/ssh_pwauth: true/" /etc/cloud/cloud.cfg || echo "ssh_pwauth: true" >> /etc/cloud/cloud.cfg' \ --run-command 'printf "PasswordAuthentication yes\nPermitRootLogin yes\n" > /etc/ssh/sshd_config.d/99-allow-root.conf' \ --run-command "sed -e 's/^[# ]*PasswordAuthentication.*/PasswordAuthentication yes/g' -i /etc/ssh/sshd_config || true" \ --run-command "sed -e 's/^[# ]*PermitRootLogin.*/PermitRootLogin yes/g' -i /etc/ssh/sshd_config || true" \ --run-command 'systemctl enable ssh || systemctl enable sshd' \ --run-command 'systemctl disable systemd-networkd-wait-online.service' openstack image create --file ~/noble-server-cloudimg-amd64.img --disk-format qcow2 --container-format bare --public --property os_distro=ubuntu --property hw_qemu_guest_agent=yes "Ubuntu 24" || true rm -f noble-server-cloudimg-amd64.img cat <<EOF > /root/userdata.txt #cloud-config chpasswd: list: | root:q expire: False ssh_pwauth: True cmd: - systemctl disable systemd-networkd-wait-online.service EOF openstack server create --image "Ubuntu 24" --flavor first --network public_network --config-drive True ahmad --password 'ahmad' This is how I create image. I'm going to find a way if possible, to set the admin password during the "server create". Currently the root login is only possible with password "q". The "ahmad" is not working. I know I can change it via user-data file (I intentionally added there but not using it), but the question is can I set the password during the server create? I tried to use "virt-customize --install qemu-guest-agent", but the virt-customize has no network, so no installation. I also know I can do this: 1. create server 2. do whatever I want (install guest agent, etc) 3. create snapshot 4. create server from that snapshot But the issue is it's not automatic (I should manually login to do the modification) and its size is much more than the cloud image. Like, from 500 megabytes which is cloud image, goes around 3 gigabytes which is the snapshot. Any ways to reach what I'm looking for? Or even any better ways to do that? Regards, Ahmad

5 12

[Skyline] Core Reviewer Nomination - Reet Srivastava (reetsrivastava)
by Reet Srivastava 15 Oct '25

15 Oct '25

Hi team, I am writing to nominate myself(Reet Srivastava) as a contributor and core reviewer for the skyline project. Over the past three months I have made significant contributions to the Skyline project. Some of my contributions are : feat: Add configurable user default domain for login (959304) · Gerrit Code Review<https://review.opendev.org/c/openstack/skyline-apiserver/+/959304> feat:adds barbican panel(named Key-Manager) (958515) · Gerrit Code Review<https://review.opendev.org/c/openstack/skyline-console/+/958515> feat: Add Unrescue feature to nova instance actions (961359) · Gerrit Code Review<https://review.opendev.org/c/openstack/skyline-console/+/961359> feat: Make default user domain configurable and improve username handling (959284) · Gerrit Code Review<https://review.opendev.org/c/openstack/skyline-console/+/959284> (In Progress) I believe I can help uphold the quality of our codebase and support contributors in their development efforts. I’d be grateful for your feedback and support regarding this nomination. Thanks for your time and consideration. Best Regards, Reet Srivastava Gerrit Username - reetsrivastava

3 2

Yubikey SSH public key support in keypairs
by Ivan Marton 14 Oct '25

14 Oct '25

Dear Openstack community, I'm wondering if there are any plans to support sk-ssh-ed25519(a)openssh.com SSH public key formats for the keypairs endpoint. I did not find in the public documentation any explicit information about supported SSH public keys, but according to my experiences the mentioned format is not accepted. Did I miss something? Is it supported in any recent versions? Is it on the roadmap? Thank you all for any reply! Best regards, Ivan Marton

10 22

[Ceph Tracing] Limited Jaeger traces for OSD, no MON/MGR/RGW
by Thamanna Farhath 14 Oct '25

14 Oct '25

Hello openstack Community, I am using Ceph as the backend storage for OpenStack and deployed it via ceph-ansible.I enabled Jaeger tracing on Ceph cluster using: - Global Ceph config: ceph config set global jaeger_tracing_enable true - Jaeger Docker all-in-one docker run -d --name jaeger -e COLLECTOR_ZIPKIN_HOST_PORT=:9411 -e COLLECTOR_OTLP_ENABLED=true --network host -p 6799:6799/udp -p 6832:6832/udp -p 5778:5778 -p 16686:16686 -p 4317:4317-p 4318:4318 -p 14250:14250 -p 14268:14268 -p 14269:14269 -p 9411:9411 jaegertracing/all-in-one:1.27 --processor.jaeger-compact.server-host-port=6799 Issue: - Only OSD traces appear with limitation traces(`enqueue_op`, `op-request-created`) - No traces from MON, MGR, or RGW Questions: 1. Is this the correct process for enabling tracing? 2. How can I capture traces for MON, MGR, RGW? 3. How can I see all OSD operations? Disclaimer : The content of this email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify the sender and remove the messages from your system. If you are not the named addressee, it is strictly forbidden for you to share, circulate, distribute or copy any part of this e-mail to any third party without the written consent of the sender. E-mail transmission cannot be guaranteed to be secured or error free as information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete, or may contain viruses. Therefore, we do not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. The recipient should check this e-mail and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email."

2 3

[horizon] Help review the patch https://review.opendev.org/c/openstack/horizon/+/961099
by Dong Ma 14 Oct '25

14 Oct '25

Hi, We’ve submitted a patch (https://review.opendev.org/c/openstack/horizon/+/961099) adding microversion support for Nova live migration. Appreciate any reviews from the core team so we can get it merged soon. Thanks, -- Dong Ma — vexxhost

1 0

How to set admin password during server create but not using user-data file
by Ahmad Milad Pour 14 Oct '25

14 Oct '25

Hello there, This is how I download an ubuntu cloud image: wget -c https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.i… -O ~/noble-server-cloudimg-amd64.img virt-customize -a noble-server-cloudimg-amd64.img \ --timezone Asia/Tehran \ --root-password password:q \ --run-command 'sed -i "s/^disable_root.*/disable_root: false/" /etc/cloud/cloud.cfg' \ --run-command 'grep -q "^ssh_pwauth:" /etc/cloud/cloud.cfg && sed -i "s/^ssh_pwauth:.*/ssh_pwauth: true/" /etc/cloud/cloud.cfg || echo "ssh_pwauth: true" >> /etc/cloud/cloud.cfg' \ --run-command 'printf "PasswordAuthentication yes\nPermitRootLogin yes\n" > /etc/ssh/sshd_config.d/99-allow-root.conf' \ --run-command "sed -e 's/^[# ]*PasswordAuthentication.*/PasswordAuthentication yes/g' -i /etc/ssh/sshd_config || true" \ --run-command "sed -e 's/^[# ]*PermitRootLogin.*/PermitRootLogin yes/g' -i /etc/ssh/sshd_config || true" \ --run-command 'systemctl enable ssh || systemctl enable sshd' \ --run-command 'systemctl disable systemd-networkd-wait-online.service' openstack image create --file ~/noble-server-cloudimg-amd64.img --disk-format qcow2 --container-format bare --public --property os_distro=ubuntu --property hw_qemu_guest_agent=yes "Ubuntu 24" || true rm -f noble-server-cloudimg-amd64.img cat <<EOF > /root/userdata.txt #cloud-config chpasswd: list: | root:q expire: False ssh_pwauth: True cmd: - systemctl disable systemd-networkd-wait-online.service EOF openstack server create --image "Ubuntu 24" --flavor first --network public_network --config-drive True ahmad --password 'ahmad' This is how I create image. I'm going to find a way if possible, to set the admin password during the "server create". Currently the root login is only possible with password "q". The "ahmad" is not working. I know I can change it via user-data file (I intentionally added there but not using it), but the question is can I set the password during the server create? I tried to use "virt-customize --install qemu-guest-agent", but the virt-customize has no network, so no installation. I also know I can do this: 1. create server 2. do whatever I want (install guest agent, etc) 3. create snapshot 4. create server from that snapshot But the issue is it's not automatic (I should manually login to do the modification) and its size is much more than the cloud image. Like, from 500 megabytes which is cloud image, goes around 3 gigabytes which is the snapshot. Any ways to reach what I'm looking for? Or even any better ways to do that? Regards, Ahmad

1 0

[ovn][wallaby][migration] Live migration more than 10s switchover
by Kamil Madac 14 Oct '25

14 Oct '25

Hello community, We are running a Wallaby TripleO installation with OVN networking. During live migration, we’re experiencing a connectivity outage lasting between *10 and 40 seconds* on the provider network to which the migrating VM is connected. I don’t see any errors in the ovn-controller, nova, or neutron logs. Is this behavior normal for the Wallaby release? We don’t see this issue in our Kolla-Ansible deployment running OpenStack 2024.2. I found that OVN multi-chassis port bindings were not yet implemented in Wallaby, but still — more than 10 seconds of downtime during live migration seems excessive. Has anyone observed similar behavior with older OpenStack releases, or is there any way to tune or optimize the switchover to reduce the outage duration? Thanks for any advice. Best regards, Kamil

1 0

[horizon] Help review the patch https://review.opendev.org/c/openstack/horizon/+/961099
by Dong Ma 14 Oct '25

14 Oct '25

Hi, We’ve submitted a patch (https://review.opendev.org/c/openstack/horizon/+/961099) adding microversion support for Nova live migration. Appreciate any reviews from the core team so we can get it merged soon. Thanks, -- Dong Ma — vexxhost

1 0

[tc][all] OpenStack Technical Committee Weekly Summary and Meeting Agenda (2026.1/R-24)
by Goutham Pacha Ravi 14 Oct '25

14 Oct '25

Hello Stackers, We're twenty-four weeks away from the coordinated release of OpenStack 2026.1 "Gazpacho" [1]. In a couple of weeks, the community will be gathering to design and discuss features and bug fixes for this release [2]. PTLs and project liaisons are requested to finalize their project schedules for the PTG and strive to use the first two days solely for wider cross-project discussions. At the end of this week, a portion of our community will be participating in the OpenInfra Summit happening at the École Polytechnique Campus in Paris-Saclay, France [3]. There's a meet-and-greet session planned with the OpenStack Technical Committee on Sunday, October 19th starting at 17:05 UTC in the Becquerel room. If you're attending the summit, do try to add this to your calendar. During the past week, the TC didn't make any major governance updates. A few are currently undergoing community review. === Weekly Meeting === The last weekly meeting of the OpenStack TC occurred on October 7th, 2025 simultaneously over IRC [4] and video [5]. We had a small list of attendees and a short agenda. We noted that the governance changes to officially mark Venus and Vitrage as inactive are in progress. The retirement of Monasca is still held up, and the team is waiting for a response from a potential new maintainer. Discussions were held on the new APAC-friendly TC meeting slot, with the plan to review the poll results and schedule the first meeting shortly after the OpenStack Summit, likely on a monthly or bi-weekly cadence. I'll follow up with more details about this. We also discussed the need to refresh the TC Liaisons for several project teams (Freezer, Oslo, Release Management, and Requirements) and are seeking volunteers on the TC. We called for topics for the PTG. The TC will join project teams in analyzing the User Survey results [6]. The next meeting of the OpenStack Technical Committee will be hosted on OFTC's #openstack-tc channel on October 14th, 2025 at 1700 UTC. Please find the agenda for this meeting on the wiki [7]. I hope you're able to join us there. === Governance Proposals === ==== Merged ==== - Allow .gitignore in legacy repositories | https://review.opendev.org/c/openstack/governance/+/963867 - Retire metalsmith project from bare metal program | https://review.opendev.org/c/openstack/governance/+/958297 ==== Open For Review ==== - Mark Vitrage project-team inactive | https://review.opendev.org/c/openstack/governance/+/963227 - Mark Venus project-team inactive | https://review.opendev.org/c/openstack/governance/+/963228 - Retire ironic-inspector from bare metal program | https://review.opendev.org/c/openstack/governance/+/963470 - Retire Monasca project | https://review.opendev.org/c/openstack/governance/+/953671 - Require declaration of affiliation from TC Candidates | https://review.opendev.org/c/openstack/governance/+/949432 === Upcoming Events === - 2025-10-17: OpenInfra Summit, Paris-Saclay: https://summit2025.openinfra.org/ - 2025-10-22: OpenInfra Meetup, Jakarta Selatan: https://www.meetup.com/openinfraid/events/31140538 - 2025-10-27: OpenInfra PTG: https://openinfra.org/ptg/ - 2025-11-04: OpenInfra Board meeting: https://board.openinfra.org/ - 2025-11-15: Celebrating 15 years of OpenStack, Montréal - 2025-11-15: KCD+OpenInfra Days, Hangzhou: https://sessionize.com/kcd-hangzhou-and-oicd-2025/ Thank you very much for reading! On behalf of the OpenStack TC, Goutham Pacha Ravi (gouthamr) [1] 2026.1 "Gazpacho" Release Schedule: https://releases.openstack.org/gazpacho/schedule.html [2] OpenInfra Project Teams Gathering: https://ptg.openinfra.org/ [3] OpenInfra Summit: https://summit2025.openinfra.org/ [4] TC Meeting IRC Log, Oct 7th 2025: https://meetings.opendev.org/meetings/tc/2025/tc.2025-10-07-17.01.html [5] TC Meeting Video Recording, Oct 7th 2025: https://youtu.be/s_j3LPg-f1M [6] OpenStack User Survey: https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack… [7] TC Meeting Agenda, Oct 14th 2025: https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting

1 0

[glance] image upload fails "Unsupported Media Type", "Multiple formats detected: iso,gpt"
by Eugen Block 13 Oct '25

13 Oct '25

Good morning, after our recent upgrade to Epoxy we had troubles uploading images to Glance: openstack image create --disk-format raw --file .../opensuse/Leap-16.0-offline-installer-x86_64.install.iso --progress --public test-ebl [=============================>] 100% HttpException: 415: Client Error for url: http://controller.domain:9292/v2/images/e23d802e-d927-4f34-ae2d-1d6f54d6206…, Unsupported Media Type And in the logs this is reported: 2025-10-11 01:16:56.585 65675 ERROR glance.api.v2.image_data [None req-086ad005-a455-471a-bb0d-9dfe5e27eacf 89c5dcc8793d4867bae22d50e51e16b3 90c403f317ee47feb0dad58461e76fb1 - - default default] Multiple formats detected: iso,gpt: glance.common.exception.InvalidImageData: Multiple formats detected: iso,gpt This is the official openSUSE Leap 16 ISO file. For now I disabled the check by setting: [image_format] require_image_format_match = false The docs state that this is likely a bug: > Disabling this may be required in the case of false match (or > mismatch) issues, but those are bugs that should be filed and fixed. I tried a couple of different ISO files (Ubuntu, openSUSE, incl. older files), all fail with the same error. Uploading raw images seemed to work fine. ISOs are supported file formats according to the docs, could anyone shed some light on this? Thanks! Eugen

2 6