Description of problem: In OSPD12 containerized environment, live migration (block) drops error[1]. Taking a look at [2] (which was verified 2 days ago) - migration works after disabling selinux, it did not solved my issue.. As far as I understand the ssh connectivity should be established as part of director deployment. [1] 2017-11-01 08:59:28.501 1 ERROR nova.virt.libvirt.driver [req-e1664229-52cb-4727-ba9b-19c0764d727d 0e5bf6256c9c48e08ea6515cc68d2b5f 892c5bc64cab485881475bf998af8e11 - default default] [instance: d72bb6d0-47e7-4a74-b56d-0aaddb86f7c5] Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+ssh://nova_migration:2022/system?keyfile=/etc/nova/migration/identity: Cannot recv data: ssh: connect to host computeovsdpdk-1.localdomain port 2022: Connection timed out: Connection reset by peer: libvirtError: operation failed: Failed to connect to remote libvirt URI qemu+ssh://nova_migration:2022/system?keyfile=/etc/nova/migration/identity: Cannot recv data: ssh: connect to host computeovsdpdk-1.localdomain port 2022: Connection timed out: Connection reset by peer 2017-11-01 08:59:28.748 1 ERROR nova.virt.libvirt.driver [req-e1664229-52cb-4727-ba9b-19c0764d727d 0e5bf6256c9c48e08ea6515cc68d2b5f 892c5bc64cab485881475bf998af8e11 - default default] [instance: d72bb6d0-47e7-4a74-b56d-0aaddb86f7c5] Migration operation has aborted [2] https://bugzilla.redhat.com/show_bug.cgi?id=1450100 Version-Release number of selected component (if applicable): OSPD12 openstack-nova-compute-16.0.2-0.20171023105738.a2e4540.el7ost.noarch container-selinux-2.28-1.git85ce147.el7.noarch openstack-tripleo-heat-templates-7.0.3-0.20171023134948.el7ost.noarch How reproducible: Always Steps to Reproduce: 1. Boot an instance 2. Set "enforce 0" on both compute nodes 3. Run: "openstack server migrate test --live computeovsdpdk-1.localdomain --block-migration" Actual results: Migration fails Expected results: Migration should work Additional info: Selinux bz: https://bugzilla.redhat.com/show_bug.cgi?id=1495599
need to set selinux permissive mode within the nova_migration_target container, not on the compute nodes *** This bug has been marked as a duplicate of bug 1495599 ***
Including the OS::TripleO::Services::NovaMigrationTarget in the ComputeOvsDpdk role should resolve this.
*** This bug has been marked as a duplicate of bug 1508867 ***