duplicate detach volume in nova

[jazeltq]

right now, there are risk that nova will process duplicate detach request. To recur this problem. You can
1) create a server
2) attach a volume
3) detach multi-times
    you can use the bash downside:
    for i in {1..20}
   do
        nova volume-detach server-id volume-id &
   done

probably you will see the volume is in detaching for ever.

[Tristan Cacqueray (tristan-cacqueray)]

Is there a reason why you switch this bug to security ?

What's the impact of this bug report ?

[Jeremy Stanley (fungi)]

Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions.

[Markus Zoeller (markus_z) (mzoeller)]

@jazeltq (jazeltq-k):

Since you are set as assignee, I switch the status of the bug to "In Progress".

[Grant Murphy (gmurphy)]

I was unable to reproduce this my test environment.. Can you please give some details of the OpenStack version, and volume driver you are using for this?

Additionally can you please confirm that you think this needs to be treated as a security vulnerability?

[Grant Murphy (gmurphy)]

Unless any updates are posted to this bug within the next week I'm opening this bug and removing the OSSA task.

[John Garbutt (johngarbutt)]

So I think cinder has fixed this now they have improved state handling. It moves into the detaching state, which causes the duplicates to fail.

We need to double check this again on master, so marking as invalid for now, while we wait for a valid repo steps and logs capturing the error that occurs.

It's possible this is backend specific (cinder and nova) so please give more details on the repo environment.

[Launchpad Janitor (janitor)]

[Expired for OpenStack Compute (nova) because there has been no activity for 60 days.]