On Thu, 2022-06-30 at 10:09 +0200, Massimo Sgaravatto wrote:
> Dear all
>
> What is the blessed method to avoid using an image for new virtual machines
> without causing problems for existing instances using that image ?
>
> If I deactivate the image, I then have problems resizing instances using
> that image [*]: it claims that image download is forbidden since the image
> was deactivated
i think you mean rebuilding the instance not resizeing right?
resize should not need the image since it should use the image info we embed in the nova
in the instance_system_metadata table.

im not sure if there is a blessed way but i proably would have changed the visablity to private.


>
> Thanks, Massimo
>
> [*]
>
>
>  | fault                               | {'code': 500, 'created':
> '2022-06-30T07:57:30Z', 'message': 'Not authorized for image
> dd1492d5-17a2-4dc2-a4e3-ec6c99255e4b.', 'details': 'Traceback (most recent
> call last):\n  File
> "/usr/lib/python3.6/site-packages/nova/image/glance.py", line 377, in
> download\n    context, 2, \'data\', args=(image_id,))\n  File
> "/usr/lib/python3.6/site-packages/nova/image/glance.py", line 191, in
> call\n    result = getattr(controller, method)(*args, **kwargs)\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/common/utils.py", line 670,
> in inner\n    return RequestIdProxy(wrapped(*args, **kwargs))\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/v2/images.py", line 255, in
> data\n    resp, body = self.http_client.get(url)\n  File
> "/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 395, in
> get\n    return self.request(url, \'GET\', **kwargs)\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/common/http.py", line 380,
> in request\n    return self._handle_response(resp)\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/common/http.py", line 120,
> in _handle_response\n    raise exc.from_response(resp,
> resp.content)\nglanceclient.exc.HTTPForbidden: HTTP 403 Forbidden: The
> requested image has been deactivated. Image data download is
> forbidden.\n\nDuring handling of the above exception, another exception
> occurred:\n\nTraceback (most recent call last):\n  File
> "/usr/lib/python3.6/site-packages/nova/compute/manager.py", line 201, in
> decorated_function\n    return function(self, context, *args, **kwargs)\n
>  File "/usr/lib/python3.6/site-packages/nova/compute/manager.py", line
> 5950, in finish_resize\n    context, instance, migration)\n  File
> "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 227, in
> __exit__\n    self.force_reraise()\n  File
> "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 200, in
> force_reraise\n    raise self.value\n  File
> "/usr/lib/python3.6/site-packages/nova/compute/manager.py", line 5932, in
> finish_resize\n    migration, request_spec)\n  File
> "/usr/lib/python3.6/site-packages/nova/compute/manager.py", line 5966, in
> _finish_resize_helper\n    request_spec)\n  File
> "/usr/lib/python3.6/site-packages/nova/compute/manager.py", line 5902, in
> _finish_resize\n    self._set_instance_info(instance, old_flavor)\n  File
> "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 227, in
> __exit__\n    self.force_reraise()\n  File
> "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 200, in
> force_reraise\n    raise self.value\n  File
> "/usr/lib/python3.6/site-packages/nova/compute/manager.py", line 5890, in
> _finish_resize\n    block_device_info, power_on)\n  File
> "/usr/lib/python3.6/site-packages/nova/virt/libvirt/driver.py", line 11343,
> in finish_migration\n    fallback_from_host=migration.source_compute)\n
>  File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/driver.py", line
> 4703, in _create_image\n    injection_info, fallback_from_host)\n  File
> "/usr/lib/python3.6/site-packages/nova/virt/libvirt/driver.py", line 4831,
> in _create_and_inject_local_root\n    instance, size, fallback_from_host)\n
>  File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/driver.py", line
> 10625, in _try_fetch_image_cache\n
>  trusted_certs=instance.trusted_certs)\n  File
> "/usr/lib/python3.6/site-packages/nova/virt/libvirt/imagebackend.py", line
> 275, in cache\n    *args, **kwargs)\n  File
> "/usr/lib/python3.6/site-packages/nova/virt/libvirt/imagebackend.py", line
> 638, in create_image\n    prepare_template(target=base, *args, **kwargs)\n
>  File "/usr/lib/python3.6/site-packages/oslo_concurrency/lockutils.py",
> line 391, in inner\n    return f(*args, **kwargs)\n  File
> "/usr/lib/python3.6/site-packages/nova/virt/libvirt/imagebackend.py", line
> 271, in fetch_func_sync\n    fetch_func(target=target, *args, **kwargs)\n
>  File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/utils.py", line
> 395, in fetch_image\n    images.fetch_to_raw(context, image_id, target,
> trusted_certs)\n  File
> "/usr/lib/python3.6/site-packages/nova/virt/images.py", line 115, in
> fetch_to_raw\n    fetch(context, image_href, path_tmp, trusted_certs)\n
>  File "/usr/lib/python3.6/site-packages/nova/virt/images.py", line 106, in
> fetch\n    trusted_certs=trusted_certs)\n  File
> "/usr/lib/python3.6/site-packages/nova/image/glance.py", line 1300, in
> download\n    trusted_certs=trusted_certs)\n  File
> "/usr/lib/python3.6/site-packages/nova/image/glance.py", line 379, in
> download\n    _reraise_translated_image_exception(image_id)\n  File
> "/usr/lib/python3.6/site-packages/nova/image/glance.py", line 1031, in
> _reraise_translated_image_exception\n    raise
> new_exc.with_traceback(exc_trace)\n  File
> "/usr/lib/python3.6/site-packages/nova/image/glance.py", line 377, in
> download\n    context, 2, \'data\', args=(image_id,))\n  File
> "/usr/lib/python3.6/site-packages/nova/image/glance.py", line 191, in
> call\n    result = getattr(controller, method)(*args, **kwargs)\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/common/utils.py", line 670,
> in inner\n    return RequestIdProxy(wrapped(*args, **kwargs))\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/v2/images.py", line 255, in
> data\n    resp, body = self.http_client.get(url)\n  File
> "/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 395, in
> get\n    return self.request(url, \'GET\', **kwargs)\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/common/http.py", line 380,
> in request\n    return self._handle_response(resp)\n  File
> "/usr/lib/python3.6/site-packages/glanceclient/common/http.py", line 120,
> in _handle_response\n    raise exc.from_response(resp,
> resp.content)\nnova.exception.ImageNotAuthorized: Not authorized for image
> dd1492d5-17a2-4dc2-a4e3-ec6c99255e4b.\n'} |