nova_libvirtd_listen_tcp won't actually work

Bug #1669436 reported by Andy McCrae
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack-Ansible
Fix Released
Medium
Major Hayden

Bug Description

Setting "nova_libvirtd_listen_tcp" will cause libvirt to not start.

Mar 2 11:29:01 ubuntu systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED

======

I've only tested this on Ubuntu 16.04 and not CentOS, but TL;DR we need to look at that option or remove it if it's not supported - right now it doesn't work.

Changed in openstack-ansible:
status: New → Confirmed
importance: Undecided → Low
importance: Low → Medium
Revision history for this message
Major Hayden (rackerhacker) wrote :

So this fails because the certificates are not configured. If you don't want TLS, then 'listen_tls =0' must be set in libvirtd.conf. Also, listening on TCP won't fully work unless 'listen_tcp = 1' is also enabled in libvirtd.conf.

Changed in openstack-ansible:
assignee: nobody → Major Hayden (rackerhacker)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_nova (master)

Fix proposed to branch: master
Review: https://review.openstack.org/494637

Changed in openstack-ansible:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-ansible-os_nova (master)

Reviewed: https://review.openstack.org/494637
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_nova/commit/?id=37a8b27287c75e7b370af8946f613b6457bbc060
Submitter: Jenkins
Branch: master

commit 37a8b27287c75e7b370af8946f613b6457bbc060
Author: Major Hayden <email address hidden>
Date: Thu Aug 17 11:32:07 2017 -0500

    Fail if TLS + TCP are enabled for libvirtd

    This patch fails the playbook if TLS and TCP connectivity are both
    enabled. The role does not set certificates for libvirtd at this time
    and these configurations will cause libvirtd to fail.

    Closes-Bug: 1669436
    Change-Id: Ib0448b63b6ce7c7e5d48975b2bd9d78ef5c1218c

Changed in openstack-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_nova (stable/pike)

Fix proposed to branch: stable/pike
Review: https://review.openstack.org/495332

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_nova (stable/ocata)

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/495333

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_nova (stable/newton)

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/495334

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-ansible-os_nova (stable/newton)

Reviewed: https://review.openstack.org/495334
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_nova/commit/?id=688aa8be9755653a60781839ecbee23cc0f9d69a
Submitter: Jenkins
Branch: stable/newton

commit 688aa8be9755653a60781839ecbee23cc0f9d69a
Author: Major Hayden <email address hidden>
Date: Thu Aug 17 11:32:07 2017 -0500

    Fail if TLS + TCP are enabled for libvirtd

    This patch fails the playbook if TLS and TCP connectivity are both
    enabled. The role does not set certificates for libvirtd at this time
    and these configurations will cause libvirtd to fail.

    Closes-Bug: 1669436
    Change-Id: Ib0448b63b6ce7c7e5d48975b2bd9d78ef5c1218c
    (cherry picked from commit 37a8b27287c75e7b370af8946f613b6457bbc060)

tags: added: in-stable-newton
tags: added: in-stable-ocata
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-ansible-os_nova (stable/ocata)

Reviewed: https://review.openstack.org/495333
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_nova/commit/?id=1d98cf18e919d36fc15e2e3d6cbebcea661b2f69
Submitter: Jenkins
Branch: stable/ocata

commit 1d98cf18e919d36fc15e2e3d6cbebcea661b2f69
Author: Major Hayden <email address hidden>
Date: Thu Aug 17 11:32:07 2017 -0500

    Fail if TLS + TCP are enabled for libvirtd

    This patch fails the playbook if TLS and TCP connectivity are both
    enabled. The role does not set certificates for libvirtd at this time
    and these configurations will cause libvirtd to fail.

    Closes-Bug: 1669436
    Change-Id: Ib0448b63b6ce7c7e5d48975b2bd9d78ef5c1218c
    (cherry picked from commit 37a8b27287c75e7b370af8946f613b6457bbc060)

tags: added: in-stable-pike
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-ansible-os_nova (stable/pike)

Reviewed: https://review.openstack.org/495332
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_nova/commit/?id=72a059b7900d5974b3053bc6c7c03c782c450012
Submitter: Jenkins
Branch: stable/pike

commit 72a059b7900d5974b3053bc6c7c03c782c450012
Author: Major Hayden <email address hidden>
Date: Thu Aug 17 11:32:07 2017 -0500

    Fail if TLS + TCP are enabled for libvirtd

    This patch fails the playbook if TLS and TCP connectivity are both
    enabled. The role does not set certificates for libvirtd at this time
    and these configurations will cause libvirtd to fail.

    Closes-Bug: 1669436
    Change-Id: Ib0448b63b6ce7c7e5d48975b2bd9d78ef5c1218c
    (cherry picked from commit 37a8b27287c75e7b370af8946f613b6457bbc060)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_nova 16.0.0.0rc2

This issue was fixed in the openstack/openstack-ansible-os_nova 16.0.0.0rc2 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_nova 14.2.9

This issue was fixed in the openstack/openstack-ansible-os_nova 14.2.9 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_nova 15.1.9

This issue was fixed in the openstack/openstack-ansible-os_nova 15.1.9 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_nova 17.0.0.0b1

This issue was fixed in the openstack/openstack-ansible-os_nova 17.0.0.0b1 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.