[SRU] OVN 20.03.2 point release

[Frode Nordahl]

[Impact]
This release sports mostly bug-fixes and we would like to make sure all of our users have access to these improvements.

The update contains the following package updates:

   * ovn 20.03.2

[Test Case]
The following SRU process was followed:

https://wiki.ubuntu.com/OpenStack/StableReleaseUpdates

In order to avoid regression of existing consumers, the OpenStack team will run their continuous integration test against the packages that are in -proposed. A successful run of all available tests will be required before the proposed packages can be let into -updates.

The OpenStack team will be in charge of attaching the output summary of the executed tests. The OpenStack team members will not mark ‘verification-done’ until this has happened.

[Regression Potential]
In order to mitigate the regression potential, the results of the aforementioned tests are attached to this bug.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Brian Murray (brian-murray)]

Hello Frode, or anyone else affected,

Accepted ovn into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/ovn/20.03.2-0ubuntu0.20.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Frode Nordahl (fnordahl)]

With the gate job for the neutron-api-plugin-ovn charm I deployed a Focal/Ussuri cloud using the currently released packages.

The test starts two instances and I have a ping going to each of them while running these commands to upgrade to the in-proposed packages for both Open vSwitch and OVN:
$ sh upgrade.sh
+ juju run --application ovn-central echo "deb http://archive.ubuntu.com/ubuntu focal-proposed main restricted" >> /etc/apt/sources.list;apt update

...

+ juju run --application nova-compute echo "deb http://archive.ubuntu.com/ubuntu focal-proposed main restricted" >> /etc/apt/sources.list;apt update

...

+ juju run --application neutron-api echo "deb http://archive.ubuntu.com/ubuntu focal-proposed main restricted" >> /etc/apt/sources.list;apt update
- Stderr: |2

...

+ juju run --application neutron-api apt -y install python3-openvswitch; systemctl restart neutron-server
- Stderr: |2+

    WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

  Stdout: "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe
    following packages will be upgraded:\n python3-openvswitch\n1 upgraded, 0 newly
    installed, 0 to remove and 44 not upgraded.\nNeed to get 94.8 kB of archives.\nAfter
    this operation, 1024 B of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu
    focal-proposed/main amd64 python3-openvswitch all 2.13.3-0ubuntu0.20.04.1 [94.8
    kB]\nFetched 94.8 kB in 0s (522 kB/s)\n(Reading database ... \r(Reading database
    ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database
    ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database
    ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database
    ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database
    ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database
    ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database
    ... 95%\r(Reading database ... 100%\r(Reading database ... 56448 files and directories
    currently installed.)\nPreparing to unpack .../python3-openvswitch_2.13.3-0ubuntu0.20.04.1_all.deb
    ...\nUnpacking python3-openvswitch (2.13.3-0ubuntu0.20.04.1) over (2.13.1-0ubuntu0.20.04.4)
    ...\nSetting up python3-openvswitch (2.13.3-0ubuntu0.20.04.1) ...\n"
  UnitId: neutron-api/0
- Stderr: |2+

    WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

  Stdout: "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe
    following packages will be upgraded:\n python3-openvswitch\n1 upgraded, 0 newly
    installed, 0 to remove and 44 not upgraded.\nNeed to get 94.8 kB of archives.\nAfter
    this operation, 1024 B of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu
    focal-proposed/main amd64 python3-openvswitch all 2.13.3-0ubuntu0.20.04.1 [94.8
    kB]\nFetched 94.8 kB in 0s (346 kB/s)\n(Reading database ... \r(Reading database
    ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database
    ... 20%\r(Reading datab...

[Łukasz Zemczak (sil2100)]

Hey Frode! I see that this ovn SRU actually makes the ppc64el package FTBFS. Can you take a look at that? It was building fine with the package in -updates.

[Frode Nordahl (fnordahl)]

Thank you for pointing that out, Łukasz, I must have missed that.

I have investigated the artifacts from the build failure and it appears to be a intermittent issue with the test itself, we have issued a rebuild of the ppc64el package and that succeeded at first attempt.

I hope this will allow us to proceed?

[Launchpad Janitor (janitor)]

This bug was fixed in the package ovn - 20.03.2-0ubuntu0.20.04.1

---------------
ovn (20.03.2-0ubuntu0.20.04.1) focal; urgency=medium

  * New upstream point release (LP: #1924981):
    - d/p/*: Drop, all included in point release.

 -- James Page <email address hidden> Mon, 19 Apr 2021 11:58:28 +0100

[Łukasz Zemczak (sil2100)]

The verification of the Stable Release Update for ovn has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Corey Bryant (corey.bryant)]

Hello Frode, or anyone else affected,

Accepted ovn into ussuri-proposed. The package will build now and be available in the Ubuntu Cloud Archive in a few hours, and then in the -proposed repository.

Please help us by testing this new package. To enable the -proposed repository:

  sudo add-apt-repository cloud-archive:ussuri-proposed
  sudo apt-get update

Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-ussuri-needed to verification-ussuri-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-ussuri-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Frode Nordahl (fnordahl)]

With the gate job for the Octavia charm I deployed a bionic-ussuri cloud with the currently released packages (Note that the amphora image was built with focal pending resolution of bug 1895835).

I can confirm that the test fails with not being able to reach the FIP:
--2021-06-11 07:33:28-- http://10.78.95.98/
Connecting to 10.78.95.98:80... failed: Connection timed out.
Retrying.

And I can confirm that the ovn-controller for the hypervisor hosting the load balancer logs:
2021-06-11T05:36:21.649Z|00130|pinctrl|INFO|Claiming virtual lport 96582bd0-1823-49bd-9c40-fad147c47ca3 for this chassis with the virtual parent 38910d74-fe51-454e-907c-448c32c96661
2021-06-11T05:36:21.651Z|00131|ovsdb_idl|WARN|Dropped 17 log messages in last 55 seconds (most recently, 5 seconds ago) due to excessive rate
2021-06-11T05:36:21.651Z|00132|ovsdb_idl|WARN|transaction error: {"details":"RBAC rules for client \"awake-mammal.maas\" role \"ovn-controller\" prohibit modification of table \"Port_Binding\".","error":"permission error"}
2021-06-11T05:36:21.651Z|00133|main|INFO|OVNSB commit failed, force recompute next time.

I can confirm that after adding the -proposed pocket on ovn-central and ovn-chassis units and then upgrading the ovn-common, ovn-host and ovn-central packages the test succeeds and the RBAC violation is no longer logged by ovn-controller:
--2021-06-11 07:42:19-- (try: 5) http://10.78.95.98/
Connecting to 10.78.95.98:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10918 (11K) [text/html]
Saving to: ‘STDOUT’

- 100%[===================>] 10.66K --.-KB/s in 0s

2021-06-11 07:42:19 (485 MB/s) - written to stdout [10918/10918]

2021-06-11 07:42:19 [INFO] Found "This is the default welcome page" in page retrieved through load balancer (provider="amphora") at "http://10.78.95.98/"

$ juju run --application ovn-central 'dpkg -l |grep ovn'
- Stdout: |
    ii ovn-central 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN central components
    ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
  UnitId: ovn-central/0
- Stdout: |
    ii ovn-central 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN central components
    ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
  UnitId: ovn-central/1
- Stdout: |
    ii ovn-central 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN central components
    ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
  UnitId: ovn-central/2

$ juju run --application ovn-chassis 'dpkg -l |grep ovn'
- Stdout: |
    ii neutron-ovn-metadata-agent 2:16.3.1-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - OVN metadata agent
    ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
    ii ovn-host 20.03.2-0ubuntu0.20.04.1~cloud0 amd6...

[Chris MacNaughton (chris.macnaughton)]

The verification of the Stable Release Update for ovn has completed successfully and the package has now been released to -updates. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Chris MacNaughton (chris.macnaughton)]

This bug was fixed in the package ovn - 20.03.2-0ubuntu0.20.04.1~cloud0
---------------

 ovn (20.03.2-0ubuntu0.20.04.1~cloud0) bionic-ussuri; urgency=medium
 .
   * New upstream release for the Ubuntu Cloud Archive.
 .
 ovn (20.03.2-0ubuntu0.20.04.1) focal; urgency=medium
 .
   * New upstream point release (LP: #1924981):
     - d/p/*: Drop, all included in point release.