Bug 1870155

Summary:	FFU - system_upgrade fails when Ceph OSDs have dmcrypt: true (Inhibitor: LUKS encrypted partition detected)
Product:	Red Hat OpenStack	Reporter:	Francesco Pantano <fpantano>
Component:	documentation	Assignee:	Dan Macpherson <dmacpher>
Status:	CLOSED CURRENTRELEASE	QA Contact:	RHOS Documentation Team <rhos-docs>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	16.1 (Train)	CC:	dmacpher, gfidente, johfulto, lbezdick, mburns
Target Milestone:	zstream	Keywords:	Triaged
Target Release:	16.1 (Train on RHEL 8.2)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-08-25 15:52:59 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Francesco Pantano 2020-08-19 13:00:58 UTC

Description of problem:

When Ceph OSDs have dmcrypt: true (this means we have /dev/sdX => lvm => luks),
the FFU process fails due to:

```
Inhibitor: LUKS encrypted partition detected
```

There's no suggestions in leapp-report.txt on how this problem can be solved, and so far, the only workaround is to delete the luks actor that prevents the upgrade.



Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Francesco Pantano 2020-08-19 13:29:29 UTC

As per conversation with leapp team, [1] states there are known limitations:

```
Encryption of the whole disk or a partition, or file-system encryption currently cannot be used on a system targeted for an in-place upgrade.
```


[1] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/upgrading_from_rhel_7_to_rhel_8/index#planning-an-upgrade_upgrading-from-rhel-7-to-rhel-8

Comment 4 Dan Macpherson 2020-08-25 14:32:23 UTC

Hi Francesco and Lukas,

Currently, the doc has a Leapp Limitations section that links to the same section identified in comment #1:

https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html-single/framework_for_upgrades_13_to_16.1/index#leapp-upgrade-usage-in-red-hat-openstack-platform

What additional documentation is required? From the looks of it, there are no workarounds for this issue. Do we need to specifically call out this limitation in the context of Ceph Storage? Or is the link enough?

Comment 5 Dan Macpherson 2020-08-25 15:52:59 UTC

Discussed this with Lukas and Francesco over IRC. Have added the following text to call out disk encyprtion limitation:

"In particular, you cannot perform a Leapp upgrade on nodes that use encryption of the whole disk or a partition, such as LUKS encryption, or file-system encryption. This limitation affects Ceph OSD nodes that you have configured with the dmcrypt: true parameter."

https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html-single/framework_for_upgrades_13_to_16.1/index#leapp-upgrade-usage-in-red-hat-openstack-platform

Comment 7 John Fulton 2020-10-05 19:00:45 UTC

BZ 1885335 tracks LEAPP having a disk ignore list