Description of problem: When trying to introspect or provision KVM VMs with UEFI enabled, Ironic times out. The VM console looks like it's looping over the NICs, trying to pxeboot each of them. I can see DHCP being picked up, then ipxe.efi, and then it just hops to the next NIC, until the introspection times out for the node. Version-Release number of selected component (if applicable): puppet-ironic-11.2.0-0.20170611220351.0fa87ae.el7ost.noarch openstack-ironic-conductor-8.0.1-0.20170610002959.adf3461.el7ost.noarch python-ironic-lib-2.7.0-0.20170331023537.8d899bd.el7ost.noarch openstack-ironic-inspector-5.1.1-0.20170608115120.a46e708.el7ost.noarch python-ironicclient-1.13.0-0.20170512184144.7cceefe.el7ost.noarch openstack-ironic-api-8.0.1-0.20170610002959.adf3461.el7ost.noarch python-ironic-inspector-client-1.12.0-0.20170331023022.045fd9e.el7ost.noarch openstack-ironic-common-8.0.1-0.20170610002959.adf3461.el7ost.noarch dnsmasq-2.76-2.el7.x86_64 dnsmasq-utils-2.66-21.el7.x86_64 ipxe-roms-qemu-20170123-1.git4e85b27.el7.noarch ipxe-bootimgs-20170123-1.git4e85b27.el7.noarch How reproducible: always Steps to Reproduce: 1. deploy undercloud 2. create some UEFI enabled VMs[1] and register them 3. try to run introspection Actual results: as described above Expected results: introspection successful Additional info: please see https://bugzilla.redhat.com/show_bug.cgi?id=1462351 for the details about how KVM/libvirt were set up to ensure UEFI works and does PXEboot.
Could you please provide details on how exactly you've set your KVM VMs with UEFI?
Also please try tcpdump-ing br-ctlplane to catch the DHCP traffic.
The domxml for the VM in use is at https://bugzilla.redhat.com/show_bug.cgi?id=1462351#c4 You can simply generate a VM with proper configs by installing RHEL7.4, OVMF and running virt-install --boot uefi I don't have a reproducer handy to get the dumps atm, but I'll have something set up when some more urgent stuff is finished
Dan - any luck in reproducing this?
(In reply to Bob Fournier from comment #4) > Dan - any luck in reproducing this? every single time I tried.
Dan - can you try the workaround here to dnsmasq.conf?https://bugzilla.redhat.com/show_bug.cgi?id=1479386
Dan - I'm marking this is as a dup of 1479386 which fixes an introspection UEFI issue. From the description this sounds very similar - DHCP works and the ipxe.efi is downloaded but it never proceeds past that as the dnsmasq.conf will keep providing ipxe.efi if EFI is set. If the problem still occurs even with the fix for 1479386 or a workaround to change the settings in /etc/ironic/dnsmasq.conf. then please reopen this. *** This bug has been marked as a duplicate of bug 1479386 ***
*** This bug has been marked as a duplicate of bug 1489192 ***