Bug 1746712 - [RHOS15-CEPH] Unable to create encrypted volume from image - cinder not on latest qemu img
Summary: [RHOS15-CEPH] Unable to create encrypted volume from image - cinder not on la...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-containers
Version: 15.0 (Stein)
Hardware: x86_64
OS: Linux
urgent
urgent
Target Milestone: ga
: 15.0 (Stein)
Assignee: Lon Hohberger
QA Contact: Tzach Shefi
URL:
Whiteboard:
Depends On: 1727821
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-08-29 07:15 UTC by bkopilov
Modified: 2019-09-21 16:39 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-09-21 16:39:03 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
cinder log (1.66 MB, application/gzip)
2019-08-29 07:16 UTC, bkopilov 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2019:2853 0 None None None 2019-09-21 16:39:12 UTC

Description bkopilov 2019-08-29 07:15:10 UTC 
Description of problem:
RHOS15 , all in once setup with ceph.

Testcase :
Try to upload image to encrypted volume fails .

Here is the traceback:

2019-08-29 02:22:20.413 36 DEBUG cinder.volume.drivers.rbd [req-236efa2d-8076-4f22-8326-6df4eebc0671 - - 
- - -] connecting to openstack@ceph (conf=/etc/ceph/ceph.conf, timeout=-1). _do_conn /usr/lib/python3.6/s
ite-packages/cinder/volume/drivers/rbd.py:402
2019-08-29 02:22:20.540 36 DEBUG cinder.volume.drivers.rbd [req-236efa2d-8076-4f22-8326-6df4eebc0671 - - 
- - -] connecting to openstack@ceph (conf=/etc/ceph/ceph.conf, timeout=-1). _do_conn /usr/lib/python3.6/s
ite-packages/cinder/volume/drivers/rbd.py:402
2019-08-29 02:22:20.658 36 DEBUG cinder.volume.drivers.rbd [req-236efa2d-8076-4f22-8326-6df4eebc0671 - - 
/Traceback
...skipping
Stdout: ''
Stderr: "qemu-img: Could not open '/var/lib/cinder/conversion/tmps33yfypx.luks': Parameter 'key-secret' i
s required for cipher\n"
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils Traceback (most recent call last):
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/cinder/volu
me/utils.py", line 1148, in copy_image_to_volume
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     context, volume, image_service, image_id)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/cinder/volu
me/drivers/rbd.py", line 1511, in copy_image_to_encrypted_volume
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     encrypted=True)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/cinder/volu
me/drivers/rbd.py", line 1557, in _copy_image_to_volume
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     self._encrypt_image(context, volume, tmp_dir, tm
p.name)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/cinder/volu
me/drivers/rbd.py", line 1540, in _encrypt_image
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     passphrase_file=pass_file.name)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/cinder/imag
e/image_utils.py", line 300, in convert_image
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     passphrase_file=passphrase_file)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/cinder/imag
e/image_utils.py", line 244, in _convert_image
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     utils.execute(*cmd, run_as_root=run_as_root)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/cinder/util
s.py", line 128, in execute
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     return processutils.execute(*cmd, **kwargs)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils   File "/usr/lib/python3.6/site-packages/oslo_concur
rency/processutils.py", line 424, in execute
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils     cmd=sanitized_cmd)
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils oslo_concurrency.processutils.ProcessExecutionError:
 Unexpected error while running command.
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils Command: qemu-img convert -O luks -f raw -o cipher-a
lg=aes-256,cipher-mode=xts,ivgen-alg=plain64 --object secret,id=luks_sec,format=raw,file=/var/lib/cinder/
conversion/luks_tvrmcome -o key-secret=*** /var/lib/cinder/conversion/tmps33yfypx /var/lib/cinder/convers
ion/tmps33yfypx.luks
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils Exit code: 1
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils Stdout: ''
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils Stderr: "qemu-img: Could not open '/var/lib/cinder/c
onversion/tmps33yfypx.luks': Parameter 'key-secret' is required for cipher\n"
2019-08-29 05:45:46.248 36 ERROR cinder.volume.utils 


Attaching log files 

Benny
Comment 1 bkopilov 2019-08-29 07:16:34 UTC 
Created attachment 1609281 [details]
cinder log
Comment 16 Tzach Shefi 2019-09-11 08:29:00 UTC 
Overcloud failed to deploy, however suspect it wouldn't have include the fix anyway
as "latest" flag resulted in UC using a 6 days old build:
15  -p RHOS_TRUNK-15.0-RHEL-8-20190905.n.0

A build which predates ON_QA state of this bz,
Waiting for a newer build to retest.
Comment 18 Tzach Shefi 2019-09-15 17:44:38 UTC 
Verified ON:
15-trunk  -p RHOS_TRUNK-15.0-RHEL-8-20190913.n.3 
--> qemu-img-3.1.0-30.module+el8.0.1+3755+6782b0ed.x86_64 

Passed automation test which failed before the fix.
Comment 22 errata-xmlrpc 2019-09-21 16:39:03 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:2853
Note You need to log in before you can comment on or make changes to this bug.