Created attachment 1195905 [details] missing file (copied from RH-OSP 8.0) Description of problem: After successful deployment of overcloud, my VMs were not getting any IP address. During initail debugging, I found out that VM ports are not being created because network.filters file is missing at /usr/share/nova/rootwrap/network.filters on compute nodes. This file is present in all previous release i.e RH-OSP 8 and RH-OSP 7. Version-Release number of selected component (if applicable): RH-OSP 9.0 How reproducible: SSH into any overcloud compute node and and list /usr/share/nova/rootwrap/ and there is no network.filters file present. Actual results: network.filters in not present in /usr/share/nova/rootwrap directory. Expected results: network.filters should be present in /usr/share/nova/rootwrap directory. Additional info: As work around I copied file from my RH-OSP 8.0 setup and VMs started pinging each other. File is also attached here.
This is very similar to bug 1367609 but the patch there adds 1 of the filters. Which filter specifically is required?
For this ticket "ifc_ctl" filter is missing in compute.filters. If the plan is to remove network.filters and add them in compute.filters then all the filters from network.filters should be moved to compute.filters rather pick and choose which is needed which isn't. network.filters file was used to be provided by openstack-nova-common package in Liberty but it is removed now in Mitaka package, not sure why there isn't any bug/blueprint related to it upstream. See the output below for Liberty and Mitaka packages upstream and the list of files provided by them, clearly the file has been removed from liberty to mitaka. [root@overcloud-compute-0 ~]# rpm -qlp http://mirror.centos.org/centos/7/cloud/x86_64/openstack-liberty/openstack-nova-common-12.0.4-1.el7.noarch.rpm warning: http://mirror.centos.org/centos/7/cloud/x86_64/openstack-liberty/openstack-nova-common-12.0.4-1.el7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 764429e6: NOKEY /etc/logrotate.d/openstack-nova /etc/nova /etc/nova/api-paste.ini /etc/nova/nova.conf /etc/nova/policy.json /etc/nova/release /etc/nova/rootwrap.conf /etc/polkit-1/localauthority/50-local.d/50-nova.pkla /etc/polkit-1/rules.d/50-nova.rules /etc/sudoers.d/nova /usr/bin/nova-manage /usr/bin/nova-rootwrap /usr/bin/nova-rootwrap-daemon /usr/share/doc/openstack-nova-common-12.0.4 /usr/share/doc/openstack-nova-common-12.0.4/LICENSE /usr/share/man/man1/nova-all.1.gz /usr/share/man/man1/nova-api-ec2.1.gz /usr/share/man/man1/nova-api-metadata.1.gz /usr/share/man/man1/nova-api-os-compute.1.gz /usr/share/man/man1/nova-api.1.gz /usr/share/man/man1/nova-cells.1.gz /usr/share/man/man1/nova-cert.1.gz /usr/share/man/man1/nova-compute.1.gz /usr/share/man/man1/nova-conductor.1.gz /usr/share/man/man1/nova-console.1.gz /usr/share/man/man1/nova-consoleauth.1.gz /usr/share/man/man1/nova-dhcpbridge.1.gz /usr/share/man/man1/nova-idmapshift.1.gz /usr/share/man/man1/nova-manage.1.gz /usr/share/man/man1/nova-network.1.gz /usr/share/man/man1/nova-novncproxy.1.gz /usr/share/man/man1/nova-objectstore.1.gz /usr/share/man/man1/nova-rootwrap.1.gz /usr/share/man/man1/nova-scheduler.1.gz /usr/share/man/man1/nova-serialproxy.1.gz /usr/share/man/man1/nova-spicehtml5proxy.1.gz /usr/share/man/man1/nova-xvpvncproxy.1.gz /usr/share/nova /usr/share/nova/client.ovpn.template /usr/share/nova/interfaces.template /usr/share/nova/nova-dist.conf /usr/share/nova/rootwrap /usr/share/nova/rootwrap/api-metadata.filters /usr/share/nova/rootwrap/compute.filters /usr/share/nova/rootwrap/network.filters /var/lib/nova /var/lib/nova/buckets /var/lib/nova/instances /var/lib/nova/keys /var/lib/nova/networks /var/lib/nova/tmp /var/log/nova /var/run/nova [root@overcloud-compute-0 ~]# rpm -qlp http://mirror.centos.org/centos/7/cloud/x86_64/openstack-mitaka/openstack-nova-common-13.0.0-1.el7.noarch.rpm warning: http://mirror.centos.org/centos/7/cloud/x86_64/openstack-mitaka/openstack-nova-common-13.0.0-1.el7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 764429e6: NOKEY /etc/logrotate.d/openstack-nova /etc/nova /etc/nova/api-paste.ini /etc/nova/nova.conf /etc/nova/policy.json /etc/nova/release /etc/nova/rootwrap.conf /etc/polkit-1/localauthority/50-local.d/50-nova.pkla /etc/polkit-1/rules.d/50-nova.rules /etc/sudoers.d/nova /usr/bin/nova-manage /usr/bin/nova-rootwrap /usr/bin/nova-rootwrap-daemon /usr/share/doc/openstack-nova-common-13.0.0 /usr/share/doc/openstack-nova-common-13.0.0/LICENSE /usr/share/man/man1/nova-all.1.gz /usr/share/man/man1/nova-api-metadata.1.gz /usr/share/man/man1/nova-api-os-compute.1.gz /usr/share/man/man1/nova-api.1.gz /usr/share/man/man1/nova-cells.1.gz /usr/share/man/man1/nova-cert.1.gz /usr/share/man/man1/nova-compute.1.gz /usr/share/man/man1/nova-conductor.1.gz /usr/share/man/man1/nova-console.1.gz /usr/share/man/man1/nova-consoleauth.1.gz /usr/share/man/man1/nova-dhcpbridge.1.gz /usr/share/man/man1/nova-idmapshift.1.gz /usr/share/man/man1/nova-manage.1.gz /usr/share/man/man1/nova-network.1.gz /usr/share/man/man1/nova-novncproxy.1.gz /usr/share/man/man1/nova-rootwrap.1.gz /usr/share/man/man1/nova-scheduler.1.gz /usr/share/man/man1/nova-serialproxy.1.gz /usr/share/man/man1/nova-spicehtml5proxy.1.gz /usr/share/man/man1/nova-xvpvncproxy.1.gz /usr/share/nova /usr/share/nova/client.ovpn.template /usr/share/nova/interfaces.template /usr/share/nova/nova-dist.conf /var/lib/nova /var/lib/nova/buckets /var/lib/nova/instances /var/lib/nova/keys /var/lib/nova/networks /var/lib/nova/tmp /var/log/nova /var/run/nova
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2032.html
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days