Debian: /etc/machine-id is the same across all StarlingX installations with the same BUILD_ID

Bug #1995505 reported by Andre Kantek
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
High
Andre Kantek

Bug Description

Brief Description
-----------------

It was detected that all StarlingX's Debian installations are using the same content in /etc/machine-id, this can't be as this number needs to be a unique value per node, in order to generate valid random MACs. If reused across multiple nodes all SRIOV's VF interfaces on the same
PCI slot will have the same MAC address across the nodes, creating networking problems.

Severity
--------
<Major: System/Feature is usable but degraded>

Steps to Reproduce
------------------
Execute the installation with the same BUILD_ID across several nodes and

Expected Behavior
------------------
The content of /etc/machine-id should be unique per node.

Actual Behavior
----------------
Compare the value of /etc/machine-id, they will be the same.

Reproducibility
---------------
Reproducible

System Configuration
--------------------
Multi-node system

Andre Kantek (akantek)
Changed in starlingx:
assignee: nobody → Andre Kantek (akantek)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to metal (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/metal/+/863322

Changed in starlingx:
status: New → In Progress
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → High
tags: added: stx.8.0 stx.networking
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to metal (master)

Reviewed: https://review.opendev.org/c/starlingx/metal/+/863322
Committed: https://opendev.org/starlingx/metal/commit/1d82d29073f9f10ab418dea1a6e6b81de796fa36
Submitter: "Zuul (22348)"
Branch: master

commit 1d82d29073f9f10ab418dea1a6e6b81de796fa36
Author: Andre Kantek <email address hidden>
Date: Wed Nov 2 12:21:48 2022 -0300

    Debian: clean machine-id generated during installation

    The Debian installations are generating the same machine-id if using
    the same BUILD_ID. This ID is used to generate the value of random
    MACs for SRIOV's VF interfaces, since it is the same across the same
    BUILD_ID the network cards are generating the exact same MAC if the
    NIC is on the same pci-slot across multiple nodes

    This change removes the existing files so each installation's systemd
    can generate an exclusive value

    Test Plan (Debian)
    [PASS] install multiple nodes and verify that each one contains an
            exclusive /etc/machine-id content
    [PASS] reboot node to validate that machine-id does not change on
            subsequent boots

    Closes-Bug: 1995505

    Signed-off-by: Andre Kantek <email address hidden>
    Change-Id: I702d1cc0353d0d19149fdd1ac1ec4bd16e674119

Changed in starlingx:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.