Open Stack

Hey John,

We too ran into the same issue with iSCSI and after a lot of digging and chasing red-hearings we found that the cinder-volume service wasn’t the cause of the issues, it was "iscsiadm login” that caused the problem and it was happening from within the nova-compute container. If we weren’t running cinder there were no issues with nova-compute running vm’s from within a container however once we attempted to attach a volume to a running VM iscsiadm would simply refuse to initiate. We followed up on an existing upstream bug regarding the issues but its gotten little traction at present: "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1226855”.  In testing we’ve found that if we give the compute container the raw device instead of using a bridge on a veth type interface we didn’t see the same issues however doing that was less than ideal so we opted to simply leave compute nodes as physical hosts. From within the playbooks we can set any service to run on bare metal as the “container” type so that’s what we’ve done with nova-compute but hopefully sometime soon-ish well be able to move nova-compute back into a container, assuming the upstream bugs are fixed.

I’d love to chat some more on this or anything else, hit me up anytime; I’m @cloudnull in the channel.

—

Kevin


> On Dec 10, 2014, at 19:01, John Griffith <john.griffith8 at gmail.com> wrote:
> 
> On Wed, Dec 10, 2014 at 3:16 PM, Kevin Carter
> <kevin.carter at rackspace.com> wrote:
>> Hello all,
>> 
>> 
>> The RCBOPS team at Rackspace has developed a repository of Ansible roles, playbooks, scripts, and libraries to deploy Openstack inside containers for production use. We’ve been running this deployment for a while now,
>> and at the last OpenStack summit we discussed moving the repo into Stackforge as a community project. Today, I’m happy to announce that the "os-ansible-deployment" repo is online within Stackforge. This project is a work in progress and we welcome anyone who’s interested in contributing.
>> 
>> This project includes:
>>  * Ansible playbooks for deployment and orchestration of infrastructure resources.
>>  * Isolation of services using LXC containers.
>>  * Software deployed from source using python wheels.
>> 
>> Where to find us:
>>  * IRC: #openstack-ansible
>>  * Launchpad: https://launchpad.net/openstack-ansible
>>  * Meetings: #openstack-ansible IRC channel every Tuesday at 14:30 UTC. (The meeting schedule is not fully formalized and may be subject to change.)
>>  * Code: https://github.com/stackforge/os-ansible-deployment
>> 
>> Thanks and we hope to see you in the channel.
>> 
>> —
>> 
>> Kevin
>> 
>> 
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>> 
> 
> Hey Kevin,
> 
> Really cool!  I have some questions though, I've been trying to do
> this exact sort of thing on my own with Cinder but can't get iscsi
> daemon running in a container.  In fact I run into a few weird
> networking problems that I haven't sorted, but the storage piece seems
> to be a big stumbling point for me even when I cut some of the extra
> stuff I was trying to do with devstack out of it.
> 
> Anyway, are you saying that this enables running the reference LVM
> impl c-vol service in a container as well?  I'd love to hear/see more
> and play around with this.
> 
> Thanks,
> John
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20141211/9acd08fc/attachment.pgp>