Bug 1371562

Summary: Missing network.filters file in overcloud-full.qcow2 image
Product: Red Hat OpenStack Reporter: AQ Khan <abdulq>
Component: openstack-novaAssignee: Artom Lifshitz <alifshit>
Status: CLOSED ERRATA QA Contact: awaugama
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 9.0 (Mitaka)CC: abdulq, alifshit, berrange, dasmith, eglynn, jjoyce, kchamart, mburns, panbalag, salmank, sbauza, sferdjao, sgordon, srevivo, vromanso
Target Milestone: asyncKeywords: Triaged, ZStream
Target Release: 9.0 (Mitaka)   
Hardware: x86_64   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-nova-13.1.1-7.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-10-05 19:13:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
missing file (copied from RH-OSP 8.0) none

Description AQ Khan 2016-08-30 13:24:22 UTC
Created attachment 1195905 [details]
missing file (copied from RH-OSP 8.0)

Description of problem:
After successful deployment of overcloud, my VMs were not getting any IP address. During initail debugging, I found out that VM ports are not being created because network.filters file is missing at /usr/share/nova/rootwrap/network.filters on compute nodes. This file is present in all previous release i.e RH-OSP 8 and RH-OSP 7.


Version-Release number of selected component (if applicable): RH-OSP 9.0


How reproducible:
SSH into any overcloud compute node and and list /usr/share/nova/rootwrap/ and there is no network.filters file present.


Actual results:
network.filters in not present in /usr/share/nova/rootwrap directory.

Expected results:
network.filters should be present in /usr/share/nova/rootwrap directory.

Additional info:
As work around I copied file from my RH-OSP 8.0 setup and VMs started pinging each other. File is also attached here.

Comment 2 Mike Burns 2016-08-31 11:35:01 UTC
This is very similar to bug 1367609 but the patch there adds 1 of the filters.

Which filter specifically is required?

Comment 3 Salman Khan 2016-08-31 13:25:20 UTC
For this ticket "ifc_ctl" filter is missing in compute.filters.
If the plan is to remove network.filters and add them in compute.filters then all the filters from network.filters should be moved to compute.filters rather pick and choose which is needed which isn't.


network.filters file was used to be provided by openstack-nova-common package in Liberty but it is removed now in Mitaka package, not sure why there isn't any bug/blueprint related to it upstream. See the output below for Liberty and Mitaka packages upstream and the list of files provided by them, clearly the file has been removed from liberty to mitaka.


[root@overcloud-compute-0 ~]# rpm -qlp http://mirror.centos.org/centos/7/cloud/x86_64/openstack-liberty/openstack-nova-common-12.0.4-1.el7.noarch.rpm
warning: http://mirror.centos.org/centos/7/cloud/x86_64/openstack-liberty/openstack-nova-common-12.0.4-1.el7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 764429e6: NOKEY
/etc/logrotate.d/openstack-nova
/etc/nova
/etc/nova/api-paste.ini
/etc/nova/nova.conf
/etc/nova/policy.json
/etc/nova/release
/etc/nova/rootwrap.conf
/etc/polkit-1/localauthority/50-local.d/50-nova.pkla
/etc/polkit-1/rules.d/50-nova.rules
/etc/sudoers.d/nova
/usr/bin/nova-manage
/usr/bin/nova-rootwrap
/usr/bin/nova-rootwrap-daemon
/usr/share/doc/openstack-nova-common-12.0.4
/usr/share/doc/openstack-nova-common-12.0.4/LICENSE
/usr/share/man/man1/nova-all.1.gz
/usr/share/man/man1/nova-api-ec2.1.gz
/usr/share/man/man1/nova-api-metadata.1.gz
/usr/share/man/man1/nova-api-os-compute.1.gz
/usr/share/man/man1/nova-api.1.gz
/usr/share/man/man1/nova-cells.1.gz
/usr/share/man/man1/nova-cert.1.gz
/usr/share/man/man1/nova-compute.1.gz
/usr/share/man/man1/nova-conductor.1.gz
/usr/share/man/man1/nova-console.1.gz
/usr/share/man/man1/nova-consoleauth.1.gz
/usr/share/man/man1/nova-dhcpbridge.1.gz
/usr/share/man/man1/nova-idmapshift.1.gz
/usr/share/man/man1/nova-manage.1.gz
/usr/share/man/man1/nova-network.1.gz
/usr/share/man/man1/nova-novncproxy.1.gz
/usr/share/man/man1/nova-objectstore.1.gz
/usr/share/man/man1/nova-rootwrap.1.gz
/usr/share/man/man1/nova-scheduler.1.gz
/usr/share/man/man1/nova-serialproxy.1.gz
/usr/share/man/man1/nova-spicehtml5proxy.1.gz
/usr/share/man/man1/nova-xvpvncproxy.1.gz
/usr/share/nova
/usr/share/nova/client.ovpn.template
/usr/share/nova/interfaces.template
/usr/share/nova/nova-dist.conf
/usr/share/nova/rootwrap
/usr/share/nova/rootwrap/api-metadata.filters
/usr/share/nova/rootwrap/compute.filters
/usr/share/nova/rootwrap/network.filters
/var/lib/nova
/var/lib/nova/buckets
/var/lib/nova/instances
/var/lib/nova/keys
/var/lib/nova/networks
/var/lib/nova/tmp
/var/log/nova
/var/run/nova




[root@overcloud-compute-0 ~]# rpm -qlp http://mirror.centos.org/centos/7/cloud/x86_64/openstack-mitaka/openstack-nova-common-13.0.0-1.el7.noarch.rpm
warning: http://mirror.centos.org/centos/7/cloud/x86_64/openstack-mitaka/openstack-nova-common-13.0.0-1.el7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 764429e6: NOKEY
/etc/logrotate.d/openstack-nova
/etc/nova
/etc/nova/api-paste.ini
/etc/nova/nova.conf
/etc/nova/policy.json
/etc/nova/release
/etc/nova/rootwrap.conf
/etc/polkit-1/localauthority/50-local.d/50-nova.pkla
/etc/polkit-1/rules.d/50-nova.rules
/etc/sudoers.d/nova
/usr/bin/nova-manage
/usr/bin/nova-rootwrap
/usr/bin/nova-rootwrap-daemon
/usr/share/doc/openstack-nova-common-13.0.0
/usr/share/doc/openstack-nova-common-13.0.0/LICENSE
/usr/share/man/man1/nova-all.1.gz
/usr/share/man/man1/nova-api-metadata.1.gz
/usr/share/man/man1/nova-api-os-compute.1.gz
/usr/share/man/man1/nova-api.1.gz
/usr/share/man/man1/nova-cells.1.gz
/usr/share/man/man1/nova-cert.1.gz
/usr/share/man/man1/nova-compute.1.gz
/usr/share/man/man1/nova-conductor.1.gz
/usr/share/man/man1/nova-console.1.gz
/usr/share/man/man1/nova-consoleauth.1.gz
/usr/share/man/man1/nova-dhcpbridge.1.gz
/usr/share/man/man1/nova-idmapshift.1.gz
/usr/share/man/man1/nova-manage.1.gz
/usr/share/man/man1/nova-network.1.gz
/usr/share/man/man1/nova-novncproxy.1.gz
/usr/share/man/man1/nova-rootwrap.1.gz
/usr/share/man/man1/nova-scheduler.1.gz
/usr/share/man/man1/nova-serialproxy.1.gz
/usr/share/man/man1/nova-spicehtml5proxy.1.gz
/usr/share/man/man1/nova-xvpvncproxy.1.gz
/usr/share/nova
/usr/share/nova/client.ovpn.template
/usr/share/nova/interfaces.template
/usr/share/nova/nova-dist.conf
/var/lib/nova
/var/lib/nova/buckets
/var/lib/nova/instances
/var/lib/nova/keys
/var/lib/nova/networks
/var/lib/nova/tmp
/var/log/nova
/var/run/nova

Comment 7 errata-xmlrpc 2016-10-05 19:13:53 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2032.html

Comment 8 Red Hat Bugzilla 2023-09-14 03:30:19 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days