Open Stack

On Thu, Feb 24, 2022 at 2:37 PM west, andrew <andrew.west-contractor at cgg.com>
wrote:

> Hello experts
>
>
>
> Currently using openstack Xena and Ceph backend (Pacific 16.2.7)
>
>
>
> It seems there is a bug (since Wallaby?) where the efficient use of a CEPH
> Pacific RBD backend (i.e with copy-on-write-cloning) is not working .
>
> Show_image_direct_url needs to be False to create volumes (or ephemeral
> volumes for nova)
>
>
>
> This can of course be tremendously slow (Nova  , ephemeral root disk)
> without copy-on-write cloning feature of Ceph.
>
>
>
> As Ceph RBD is THE most favourite  backend for block storage in openstack
> I am wondering how others are coping (or workarounds found ?)
>
> Which combinations of Openstack and Ceph  are known to work well with
> copy-on-write-cloning?
>
>
>
> How is the noted *GRAVE Security RISK  of enabling *Show_image_direct_url
> mitigated  ?  (i.e I think , for CEPH RBD, it needs to  be True to get
> cloning to work efficiently)
>
>
>
>
>
> See another report of this issue here:
>
> Re: Ceph Pacifif and Openstack Wallaby - ERROR
> cinder.scheduler.flows.create_volume — CEPH Filesystem Users (spinics.net)
> <https://www.spinics.net/lists/ceph-users/msg66016.html>
>
>
>
> Thanks for any help or pointers,
>
>
>
> Andrew West
>
> Openstack consulting
>
> CGG France
>
>
>
>
> ------------------------------
> “This e-mail and any accompanying attachments are confidential. The
> information is intended solely for the use of the individual to whom it is
> addressed. Any review, disclosure, copying, distribution, or use of the
> email by others is strictly prohibited. If you are not the intended
> recipient, you must not review, disclose, copy, distribute or use this
> e-mail; please delete it from your system and notify the sender
> immediately.”
>

Hi Andrew,

Sorry for the delayed reply. I got distracted and forgot after the first
time I noticed this.

So far I see you only mentioning 'show_image_direct_url' setting but AFAIK
also the 'show_multiple_locations' is required for these features to work,
is that set true and the issue still persists?

- jokke
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220316/3900b0ac/attachment-0001.htm>