Juniper Openstack

fab: Live migration may fail if the uid and gid of nova are different in the compute nodes

Bug #1335344 reported by Vinod Nair
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Fix Committed
Medium
Jeya ganesh babu J
R1.1
Won't Fix
Medium
Jeya ganesh babu J
Juniper Openstack r1.20
R2.0
Won't Fix
Medium
Jeya ganesh babu J
Juniper Openstack r2.0-fcs
R2.1
Won't Fix
Medium
Jeya ganesh babu J
Juniper Openstack r2.1-fcs
R2.20
Fix Committed
High
Jeya ganesh babu J
Juniper Openstack r2.20-fcs

Bug Description

Live migration will fail if the UID and GID of nova is different in the compute nodes.

All though most of the times it will be same , but users can easily run in this if the user adds any other packages on the computes manually which in turn add a users as in post fix etc on the computes.. Usually the case with yum install or apt-get

Although the provisioning will go through fine with a mismatched UID on the computes, the actual live migration will fail.

Workaround: Ensure that no other packages other than the ones done by fab is added to the system till the live migration provisioning is complete

Michael Nishimoto (mnishimoto)
summary: - Live migration may fail if the uid and gid of nova is diffeent in the
+ Live migration may fail if the uid and gid of nova is different in the
compute nodes
Michael Nishimoto (mnishimoto)
summary: - Live migration may fail if the uid and gid of nova is different in the
- compute nodes
+ fab: Live migration may fail if the uid and gid of nova is different in
+ the compute nodes
Revision history for this message
Michael Nishimoto (mnishimoto) wrote :

Need to understand how to 'doc' this PR for 1.1.

summary: - fab: Live migration may fail if the uid and gid of nova is different in
- the compute nodes
+ fab: Live migration may fail if the uid and gid of nova are different
+ in the compute nodes
tags: added: releasenote
Nagabhushana R (bhushana)
Changed in juniperopenstack:
milestone: r1.10-beta → none
Revision history for this message
Michael Nishimoto (mnishimoto) wrote :

For normal installs, this situation should never come up because the same packages are installed on all compute nodes.

Revision history for this message
Jeya ganesh babu J (jjeya) wrote :

The following entries should be added in the /etc/passwd before install_contrail is done

nova:x:500:500::/var/lib/nova:/bin/false
libvirt-qemu:x:501:501:Libvirt Qemu,,,:/var/lib/libvirt:/bin/false
libvirt-dnsmasq:x:502:502:Libvirt Dnsmasq,,,:/var/lib/libvirt/dnsmasq:/bin/false

The following entries should be added in the /etc/group before install_contrail is done

nova:x:500:
kvm:x:501:
libvirtd:x:502:

Revision history for this message
Michael Nishimoto (mnishimoto) wrote :

"""libvirt-dnsmasq:x:502:502:Libvirt Dnsmasq,,,:/var/lib/libvirt/dnsmasq:/bin/false"""

information type: Proprietary → Public
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : master

Review in progress for https://review.opencontrail.org/9128
Submitter: Jeya ganesh babu (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Review in progress for https://review.opencontrail.org/9129
Submitter: Jeya ganesh babu (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Review in progress for https://review.opencontrail.org/9128
Submitter: Jeya ganesh babu (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : R2.20

Review in progress for https://review.opencontrail.org/9130
Submitter: Jeya ganesh babu (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Review in progress for https://review.opencontrail.org/9131
Submitter: Jeya ganesh babu (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : master

Review in progress for https://review.opencontrail.org/9128
Submitter: Jeya ganesh babu (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/9130
Committed: http://github.org/Juniper/contrail-fabric-utils/commit/dfdd48ff6a6d577f42bdca4b5dca4b5dfd3486fb
Submitter: Zuul
Branch: R2.20

commit dfdd48ff6a6d577f42bdca4b5dca4b5dfd3486fb
Author: Jeya ganesh babu J <email address hidden>
Date: Tue Apr 14 15:18:16 2015 -0700

Fix nova/libvirt uid for live migration

Closes-bug: #1335344
Issue: With different nova/libvirt uid/gid, the livemigration from
one node to another will not work with permission issues.
Fix: Change the nova/libvirt uid/gid to same across all the compute
and openstack nodes. This requires 'nova_uid_fix = True' to be
added to the testbed.py

Change-Id: I1a4263e1e396c711ac0d84fc73161603739535d6

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/9131
Committed: http://github.org/Juniper/contrail-provisioning/commit/548e625252475402466ea7af4a6815e6dbfbe7d1
Submitter: Zuul
Branch: R2.20

commit 548e625252475402466ea7af4a6815e6dbfbe7d1
Author: Jeya ganesh babu J <email address hidden>
Date: Tue Apr 14 15:21:12 2015 -0700

Fix nova/libvirt uid for live migration

Closes-bug: #1335344
Issue: With different nova/libvirt uid/gid, the livemigration from
one node to another will not work with permission issues.
Fix: Change the nova/libvirt uid/gid to same across all the compute
and openstack nodes. This requires 'nova_uid_fix = True' to be
added to the testbed.py

Change-Id: Ic83d8fac8a639904238ffbbd1dde9d2b42aef23d

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/9128
Committed: http://github.org/Juniper/contrail-provisioning/commit/37215547bab7e17aca989febda3de748d2584f54
Submitter: Zuul
Branch: master

commit 37215547bab7e17aca989febda3de748d2584f54
Author: Jeya ganesh babu <email address hidden>
Date: Tue Apr 14 15:01:44 2015 -0700

Fix nova/libvirt uid for live migration

Closes-bug: #1335344
Issue: With different nova/libvirt uid/gid, the livemigration from
one node to another will not work with permission issues.
Fix: Change the nova/libvirt uid/gid to same across all the compute
and openstack nodes. This requires 'nova_uid_fix = True' to be
added to the testbed.py

Change-Id: Iac9ac973dd287695e71c81fa889dbadf36ef615a

Changed in juniperopenstack:
status: New → Fix Committed
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/9129
Committed: http://github.org/Juniper/contrail-fabric-utils/commit/48cc0155ad6fa54a0604c2d38f0a6fd4709175e7
Submitter: Zuul
Branch: master

commit 48cc0155ad6fa54a0604c2d38f0a6fd4709175e7
Author: Jeya ganesh babu <email address hidden>
Date: Tue Apr 14 15:10:26 2015 -0700

Fix nova/libvirt uid for live migration

Closes-bug: #1335344
Issue: With different nova/libvirt uid/gid, the livemigration from
one node to another will not work with permission issues.
Fix: Change the nova/libvirt uid/gid to same across all the compute
and openstack nodes. This requires 'nova_uid_fix = True' to be
added in the testbed.py

Change-Id: If4d3a9fca807e90f434cd39241d40810b01ffed6

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.