Open Stack

On Sun, 2019-07-28 at 13:37 +0900, Bernd Bausch wrote:
> After a little bit of self-education, I found that 
> /proc/sys/kernel/random/entropy_avail was below 100, which is probably a 
> good explanation for my problem. A good value would have four digits, it 
> seems.
> 
> My Devstack host runs Ubuntu 18, and I am now trying the rngd-tools5 
> package to improve the entropy situation. Since this is a test system, I 
> am not so concerned about random number quality.
> 
> In short, the problem seems to be solved, but if anybody has additional 
> comments, I would be interested to hear them.
am i have not encountered this on my own ububtu 18.04 devstack vms but
i tend to enable the RNG device whcich effectivly presnets the host /dev/urandom
to the guests so perhaps that helps. if you are virtulaising with kvm/libvit
i would suggest adding the RNG device and seeing if that has a similar effect.

we had also condidered change openstack default at one point to make it so that
RNG devices would be added by default in the futre rather im not sure if we ever
did anything in that regard but if it can have that much of an impact on things
like osc it proably would be a performace imporvment for many applicaitons that use
openssl and need entropy.
> 
> Bernd
> 
> On 7/28/2019 1:06 PM, Bernd Bausch wrote:
> > 
> > I run Stein Devstack in a virtual machine. Occasionally, openstack 
> > client commands take minutes to complete, which didn't happen at 
> > earlier releases, and which is rather annoying. The delay seems to 
> > take place at an early stage: Even when I forget to set the OS_* 
> > environment, it takes minutes until I am told that the request 
> > requires authentication.
> > 
> > Interrupting the command, the stack trace confirms this (as a side 
> > remark, it also takes a long while until my ^C is processed):
> > 
> > Traceback (most recent call last):
> >   File "/usr/local/bin/openstack", line 7, in <module>
> >     from openstackclient.shell import main
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/openstackclient/shell.py", 
> > line 22, in <module>
> >     from osc_lib.api import auth
> >   File "/usr/local/lib/python2.7/dist-packages/osc_lib/api/auth.py", 
> > line 19, in <module>
> >     from keystoneauth1.loading import base
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/keystoneauth1/loading/__init__.py", 
> > line 13, in <module>
> >     from keystoneauth1.loading import adapter
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/keystoneauth1/loading/adapter.py", 
> > line 13, in <module>
> >     from keystoneauth1 import adapter
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/keystoneauth1/adapter.py", 
> > line 17, in <module>
> >     from keystoneauth1 import session
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/keystoneauth1/session.py", 
> > line 25, in <module>
> >     import requests
> >   File "/usr/local/lib/python2.7/dist-packages/requests/__init__.py", 
> > line 95, in <module>
> >     from urllib3.contrib import pyopenssl
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/urllib3/contrib/pyopenssl.py", 
> > line 48, in <module>
> >     from cryptography.hazmat.backends.openssl import backend as 
> > openssl_backend
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/__init__.py", 
> > line 7, in <module>
> >     from cryptography.hazmat.backends.openssl.backend import backend
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.py", 
> > line 2419, in <module>
> >     backend = Backend()
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.py", 
> > line 119, in __init__
> >     self.activate_osrandom_engine()
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.py", 
> > line 163, in activate_osrandom_engine
> >     with self._get_osurandom_engine() as e:
> >   File "/usr/lib/python2.7/contextlib.py", line 17, in __enter__
> >     return self.gen.next()
> >   File 
> > "/usr/local/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.py", 
> > line 146, in _get_osurandom_engine
> >     res = self._lib.ENGINE_init(e)
> > KeyboardInterrupt
> > 
> > My wild speculation is that the delay has something to do with 
> > obtaining a random number, which can be a problem on virtual machines 
> > due to their lack of entropy. My knowledge in this area is paper-thin, 
> > though. And I wonder what happens to all the Devstacks used in CI?
> > 
> > Thus my questions: *Is the delay really caused by my running the cloud 
> > on a VM? What can I do to improve this?*
> > 
> > Thanks,
> > 
> > Bernd
> >