Using LVM on a cinder volume on the instance causes the compute node to pick up the LVM at the host level

[Giulio Fidente]

Using LVM on a cinder volume on the instance causes the compute node to pick up the LVM at the host level

To reproduce:

1. Create a new cinder volume and present it to an instance
2. Use LVM against the raw device (pvcreate/vgcreate/lvcreate)
3. Run 'lvs -o +devices' on the compute

This can cause problems such as conflicting VG names on the compute. It can also cause the LVM on the compute to adjust metadata that the instance is not aware of, leading to things like missing volumes.

Current workaround is to set a filter on the compute node.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/697990

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/697997

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/697990
Committed: https://git.openstack.org/cgit/openstack/tripleo-ansible/commit/?id=696814e296cd80cbde134659b61b7e30424d1bc3
Submitter: Zuul
Branch: master

commit 696814e296cd80cbde134659b61b7e30424d1bc3
Author: Giulio Fidente <email address hidden>
Date: Mon Dec 9 12:15:08 2019 +0100

    Add tripleo-lvmfilter role to restrict visible block devices for LVM2

    The lvmfilter role creates an LVM filter looking at which physical
    devices are in use by active logical volumes.

    Change-Id: I9781007559e074f2b102f6f90c1aed6def1b02be
    Related-Bug: 1855704

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/697997
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=0bd041a6dce3aa572a2a681f222bd8753c1a6b4a
Submitter: Zuul
Branch: master

commit 0bd041a6dce3aa572a2a681f222bd8753c1a6b4a
Author: Giulio Fidente <email address hidden>
Date: Thu Jan 16 13:19:41 2020 +0100

    Run tripleo_lvmfilter role to restrict block devices visible to LVM2

    Calls an ansible role to create an LVM2 filter.

    Change-Id: Ia01d23e252bc48b7cc6c66cd39138e6844b90a69
    Depends-On: I9781007559e074f2b102f6f90c1aed6def1b02be
    Closes-Bug: 1855704

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/759130

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/759132

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: stable/train
Review: https://review.opendev.org/759133

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/train
Review: https://review.opendev.org/759135

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/759130
Committed: https://git.openstack.org/cgit/openstack/tripleo-ansible/commit/?id=8ec292137cd21516a9527bab16437b6ed149bd6e
Submitter: Zuul
Branch: stable/ussuri

commit 8ec292137cd21516a9527bab16437b6ed149bd6e
Author: Giulio Fidente <email address hidden>
Date: Mon Dec 9 12:15:08 2019 +0100

    Add tripleo-lvmfilter role to restrict visible block devices for LVM2

    The lvmfilter role creates an LVM filter looking at which physical
    devices are in use by active logical volumes.

    Change-Id: I9781007559e074f2b102f6f90c1aed6def1b02be
    Related-Bug: 1855704
    (cherry picked from commit 696814e296cd80cbde134659b61b7e30424d1bc3)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/759133
Committed: https://git.openstack.org/cgit/openstack/tripleo-ansible/commit/?id=7332f8acedda3922cdaa089384561392efd67abb
Submitter: Zuul
Branch: stable/train

commit 7332f8acedda3922cdaa089384561392efd67abb
Author: Giulio Fidente <email address hidden>
Date: Mon Dec 9 12:15:08 2019 +0100

    Add tripleo-lvmfilter role to restrict visible block devices for LVM2

    The lvmfilter role creates an LVM filter looking at which physical
    devices are in use by active logical volumes.

    Change-Id: I9781007559e074f2b102f6f90c1aed6def1b02be
    Related-Bug: 1855704
    (cherry picked from commit 696814e296cd80cbde134659b61b7e30424d1bc3)
    (cherry picked from commit 8ec292137cd21516a9527bab16437b6ed149bd6e)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/759132
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=4747cc41c4729cd3357b702ac69dcc773a473cef
Submitter: Zuul
Branch: stable/ussuri

commit 4747cc41c4729cd3357b702ac69dcc773a473cef
Author: Giulio Fidente <email address hidden>
Date: Thu Jan 16 13:19:41 2020 +0100

    Run tripleo_lvmfilter role to restrict block devices visible to LVM2

    Calls an ansible role to create an LVM2 filter.

    Change-Id: Ia01d23e252bc48b7cc6c66cd39138e6844b90a69
    Depends-On: I9781007559e074f2b102f6f90c1aed6def1b02be
    Closes-Bug: 1855704
    (cherry picked from commit 0bd041a6dce3aa572a2a681f222bd8753c1a6b4a)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/759135
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=e3477d92faeaf718cb6cb3b325e58d31b5de139d
Submitter: Zuul
Branch: stable/train

commit e3477d92faeaf718cb6cb3b325e58d31b5de139d
Author: Giulio Fidente <email address hidden>
Date: Thu Jan 16 13:19:41 2020 +0100

    Run tripleo_lvmfilter role to restrict block devices visible to LVM2

    Calls an ansible role to create an LVM2 filter.

    Change-Id: Ia01d23e252bc48b7cc6c66cd39138e6844b90a69
    Depends-On: I9781007559e074f2b102f6f90c1aed6def1b02be
    Closes-Bug: 1855704
    (cherry picked from commit 0bd041a6dce3aa572a2a681f222bd8753c1a6b4a)
    (cherry picked from commit 4747cc41c4729cd3357b702ac69dcc773a473cef)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 12.4.2 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 11.4.0 release.