Bug 1793206 - On Dell 14th Gen PowerEdge, iDRAC firmware starting with 3.34.34.34 disables RAW commands.
Summary: On Dell 14th Gen PowerEdge, iDRAC firmware starting with 3.34.34.34 disables ...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-ironic
Version: 13.0 (Queens)
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Dmitry Tantsur
QA Contact: Alistair Tonner
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-01-20 22:35 UTC by Vincent S. Cojot
Modified: 2020-01-24 18:12 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-01-24 18:12:50 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Vincent S. Cojot 2020-01-20 22:35:41 UTC
Description of problem:

On Dell 14th Gen PowerEdge hardware, Firmware 3.34.34.34 and above bring a change that disables 'RAW' commands. This will break the 'ipmi' ironic driver if used with recent Dell H/W (14th Gen).

Code excerpt:
https://github.com/openstack/ironic/blob/master/ironic/drivers/modules/ipmitool.py#L737
https://github.com/openstack/ironic/blob/master/ironic/drivers/modules/ipmitool.py#L1043

Previously working raw commands will be refused by the iDRAC and a message similar to the following will be displayed:

"Unable to send RAW command (channel=0x0 netfn=0x30 lun=0x0 cmd=0x30 rsp=0xd4): Insufficient privilege level"

Comment 3 Dmitry Tantsur 2020-01-21 14:53:54 UTC
I don't remember the exactly background, but we're using RAW commands to work around some hardware not understanding boot devices with UEFI or something like that.

Comment 4 Dmitry Tantsur 2020-01-21 14:56:40 UTC
Ah, so it was old ipmitool. From the source code:

        # FIXME(lucasagomes): Older versions of the ipmitool utility
        # are not able to set the options "efiboot" and "persistent"
        # at the same time, combining other options seems to work fine,
        # except efiboot. Newer versions of ipmitool (1.8.17) does fix
        # this problem but (some) distros still packaging an older version.
        # To workaround this problem for now we can make use of sending
        # raw bytes to set the boot device for a node in persistent +
        # uefi mode, this will work with newer and older versions of the
        # ipmitool utility. Also see:
        # https://bugs.launchpad.net/ironic/+bug/1611306

Comment 5 Dmitry Tantsur 2020-01-21 15:16:10 UTC
We can get rid of raw commands in the current master, but unless we get a confirmation that the very commands we use are broken, I'd be cautious about changing any stable releases.


Note You need to log in before you can comment on or make changes to this bug.