Currently os-brick is using in-process locks that will only prevent concurrent
access to critical sections to threads within a single process.
But based on the comment from iSCSI it seems like the code assumed that
these were file based locks that prevented concurrent access from
multiple processes.
Mentioned iSCSI comment is being removed because it's not correct that
our current retry mechanism will work with connect and disconnect
concurrency issues.
The reason why we haven't seen errors in Nova is because it runs a
single process and locks will be effective.
This is probably also not an issue in some transport protocols, such as
FC and RBD, and it wouldn't be an issue in iSCSI connections that don't
share targets.
But for others, such as iSCSI with shared targets and NVMe-OF, not
using file locks will create race conditions in the following cases:
- More than 1 cinder backend: Because we can have one backend doing a
detach in a create volume from image and the other an attach for an
offline migration.
- Backup/Restore if backup and volume services are running on the same
host.
- HCI scenarios where cinder volume and nova compute are running on the
same host, even if the same lock path if configured.
- Glance using Cinder as backend and is running on the same node as
cinder-volume or cinder-backup.
The problematic race conditions happen because the disconnect will do a
logout of the iSCSI target once the connect call has already confirmed
that the session to the target exists.
We could just add the file locks to iSCSI and NVMe, but I think it's
safer to add it to all the connectors and then, after proper testing, we
can can change back the locks that can be changed, and remove or reduce
the critical section in others.
Closes-Bug: #1947370
Change-Id: I6f7f7d19540361204d4ae3ead2bd6dcddb8fcd68
(cherry picked from commit 6a43669edc583f8fbcfb4c0f1c7bf6cebad9abd7)
(cherry picked from commit 19a4820f5c4ccca10d50d08198873b1515ee257b)
Conflicts: os_brick/initiator/connectors/iscsi.py
(cherry picked from commit 08ddf69d648c5622a5a300a8636bda727b5b2722)
Conflicts: os_brick/initiator/connectors/nvmeof.py
(cherry picked from commit b03eca8353f1db7fed5dc630d225126b1edb1055)
Conflicts: os_brick/tests/base.py
Reviewed: https:/ /review. opendev. org/c/openstack /os-brick/ +/817712 /opendev. org/openstack/ os-brick/ commit/ 9d3ce01eabc0b95 d50302dfa9891ae 6f0bf4cc6c
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/ussuri
commit 9d3ce01eabc0b95 d50302dfa9891ae 6f0bf4cc6c
Author: Gorka Eguileor <email address hidden>
Date: Fri Oct 15 14:33:57 2021 +0200
Use file locks in connectors
Currently os-brick is using in-process locks that will only prevent concurrent
access to critical sections to threads within a single process.
But based on the comment from iSCSI it seems like the code assumed that
these were file based locks that prevented concurrent access from
multiple processes.
Mentioned iSCSI comment is being removed because it's not correct that
our current retry mechanism will work with connect and disconnect
concurrency issues.
The reason why we haven't seen errors in Nova is because it runs a
single process and locks will be effective.
This is probably also not an issue in some transport protocols, such as
FC and RBD, and it wouldn't be an issue in iSCSI connections that don't
share targets.
But for others, such as iSCSI with shared targets and NVMe-OF, not
using file locks will create race conditions in the following cases:
- More than 1 cinder backend: Because we can have one backend doing a
detach in a create volume from image and the other an attach for an
offline migration.
- Backup/Restore if backup and volume services are running on the same
host.
- HCI scenarios where cinder volume and nova compute are running on the
same host, even if the same lock path if configured.
- Glance using Cinder as backend and is running on the same node as
cinder-volume or cinder-backup.
The problematic race conditions happen because the disconnect will do a
logout of the iSCSI target once the connect call has already confirmed
that the session to the target exists.
We could just add the file locks to iSCSI and NVMe, but I think it's
safer to add it to all the connectors and then, after proper testing, we
can can change back the locks that can be changed, and remove or reduce
the critical section in others.
Closes-Bug: #1947370 204d4ae3ead2bd6 dcddb8fcd68 fbcfb4c0f1c7bf6 cebad9abd7) 10d50d08198873b 1515ee257b) initiator/ connectors/ iscsi.py 2a5a300a8636bda 727b5b2722) initiator/ connectors/ nvmeof. py fed5dc630d22512 6b1edb1055) tests/base. py
Change-Id: I6f7f7d19540361
(cherry picked from commit 6a43669edc583f8
(cherry picked from commit 19a4820f5c4ccca
Conflicts: os_brick/
(cherry picked from commit 08ddf69d648c562
Conflicts: os_brick/
(cherry picked from commit b03eca8353f1db7
Conflicts: os_brick/