nova_libvirt: Error reading secret: internal error: invalid base64 with Windows line endings in Ceph keyrings
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
kolla-ansible |
Triaged
|
Low
|
Unassigned |
Bug Description
My nova_libvirt container can't read the secrets.
user@compute01:~$ docker exec nova_libvirt virsh secret-list
UUID Usage
---------------
The files themselves are inside the container:
user@compute01:~$ docker exec nova_libvirt ls -l /etc/libvirt/
total 16
-rw------- 1 root root 41 Mar 12 11:09 9d4dacc6-
-rw------- 1 root root 170 Mar 12 11:09 9d4dacc6-
-rw------- 1 root root 41 Mar 12 11:09 e2a1f3fb-
-rw------- 1 root root 168 Mar 12 11:09 e2a1f3fb-
Error messages from the logs:
user@compute01:~# tail /var/log/
2020-03-12 10:09:03.314+0000: 24841: error : virSecretLoadVa
2020-03-12 10:09:03.314+0000: 24841: error : virSecretLoadAl
2020-03-12 10:09:03.314+0000: 24841: error : virSecretLoadVa
2020-03-12 10:09:03.314+0000: 24841: error : virSecretLoadAl
As far as I can tell the .base64 files contain the same string as the `key =` value in the corresponding .keyring file.
I'm using the as of now current images:
user@compute01:~$ docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
kolla/ubuntu-
kolla/ubuntu-
kolla/ubuntu-
kolla/ubuntu-
kolla/ubuntu-
kolla/ubuntu-
kolla/ubuntu-
kolla/ubuntu-
kolla/ubuntu-
**Environment**:
* OS (e.g. from /etc/os-release): Ubuntu 18.04.4 LTS
* Kernel (e.g. `uname -a`): Linux compute01 4.15.0-88-generic #88-Ubuntu SMP Tue Feb 11 20:11:34 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
* Docker version if applicable (e.g. `docker version`): 19.03.8
* Kolla-Ansible version (e.g. `git head or tag or stable branch` or pip package version if using release): pip 9.0.1
* Docker image Install type (source/binary): binary
* Docker image distribution: ubuntu
* Are you using official images from Docker Hub or self built? official
* If self built - Kolla version and environment used to build:
Changed in kolla-ansible: | |
status: | New → Triaged |
importance: | Undecided → Low |
Hi, have you tried using the 'base64' command to verify that the files are not valid? Also check the values in the keyring files?