glance image import failed for cinder backend with ceph missing cinder keyring
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
kolla-ansible |
In Progress
|
Undecided
|
Unassigned | ||
Antelope |
In Progress
|
Undecided
|
Unassigned | ||
Bobcat |
In Progress
|
Undecided
|
Unassigned | ||
Yoga |
In Progress
|
Undecided
|
Unassigned | ||
Zed |
In Progress
|
Undecided
|
Unassigned |
Bug Description
Environment:
/etc/kolla/
enable_cinder: "yes"
glance_
cinder_
confirmed this issue with version: master and wallaby, other branches may have the same issue.
How to reproduce:
glance-api with cinder and ceph backend, import image with glance Interoperable Image Import[1] with the parameters[2]:
all_stores: true
all_stores_
the main issue is cinder backend for glance, we can test only the cinder store for glance like this:
1. Get all stores info:
# glance stores-info
stores | [{"id": "http", "read-only": "true"}, {"id": "cinder"}, {"id": "rbd", "default": "true"}]
2. Get all available import info:
# glance import-info
import-methods | {"description": "Import methods available.", "type": "array", "value": ["glance-direct", "web-download", "copy-image"]}
3. Create an empty image:
# openstack image create cirros
id | e29a7838-
4. Import image with cinder store:
# glance image-import --import-method web-download --uri http://
with the config in globals.yml, here is the glance-api.conf
[DEFAULT]
enabled_backends = http:http, rbd:rbd, cinder:cinder
[glance_store]
default_backend = rbd
[rbd]
rbd_store_user = glance
rbd_store_pool = images
rbd_store_
Error logs:
1. Privsep daemon failed to start
failed with Privsep daemon failed to start, full log is at [3]
glance-api.log
2023-06-24 12:39:21.087 104 ERROR oslo.privsep.daemon [-] [Errno 1] Operation not permitted
Traceback (most recent call last):
File "/var/lib/
Daemon(channel, context).run()
File "/var/lib/
self.
File "/var/lib/
capabilitie
File "/var/lib/
raise OSError(errno, os.strerror(errno))
PermissionError: [Errno 1] Operation not permitted
2. cinder keyring file is missing
after changing glance-api container privileged to true, reconfigure with kolla-ansible, import the image again, got failed with FileNotFoundError, full log is at [4]
glance-api.log
2023-06-19 21:55:38.535 49 ERROR glance_
ion: An unknown exception occurred.
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
ntents
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.535 49 ERROR glance_
2023-06-19 21:55:38.820 49 ERROR glance_
2023-06-19 21:55:38.944 49 WARNING glance.
2023-06-19 21:55:38.946 49 INFO glance.
2023-06-19 21:55:38.961 49 WARNING glance.
[1] https:/
[2] https:/
[3] https:/
[4] https:/
description: | updated |
Changed in kolla-ansible: | |
status: | Incomplete → New |
Changed in kolla-ansible: | |
status: | Fix Committed → In Progress |
please provide the versions used and how to reproduce the error.