Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1795537

Summary:

[FC-RHOS16] Unable to create cloned volume from encrypted volume

Product:

Red Hat OpenStack

Reporter:

bkopilov <bkopilov>

Component:

openstack-cinder

Assignee:

Eric Harney <eharney>

Status:

CLOSED ERRATA

QA Contact:

Tzach Shefi <tshefi>

Severity:

urgent

Docs Contact:

Chuck Copello <ccopello>

Priority:

urgent

Version:

16.0 (Train)

CC:

eharney, gcharot, jvisser, ltoscano, pgrist, tshefi

Target Milestone:

Keywords:

Regression, Triaged

Target Release:

16.0 (Train on RHEL 8.1)

Hardware:

x86_64

OS:

Linux

Whiteboard:

Fixed In Version:

openstack-cinder-15.0.2-0.20200123220928.900f769.el8ost

Doc Type:

If docs needed, set a value

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2020-02-06 14:44:22 UTC

Type:

Bug

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Attachments:

Description	Flags
controller logs	none

Description bkopilov 2020-01-28 09:19:43 UTC

Description of problem:
Fiber-channel setup with 3parfc backend.

How to reproduce :
#1 create an encrypted volume KUKU from image -- Done
#2 Try to create another volume from source_volid=KUKU with volume-type
---> Action fails.

Traceback:
/var/log/containers/cinder/cinder-volume.log:15327:2020-01-28 09:09:58.696 50 ERROR cinder.volume.manager 
/var/log/containers/cinder/cinder-volume.log:15337:2020-01-28 09:09:58.748 50 DEBUG cinder.volume.flows.manager.create_volume [req-2572e813-72af-4861-a4a1-b1d8fba44109 d081b16da79340808907fa092fa23bb1 ac4c0a9f78b44816a870d250de3fb245 - default default] Volume 44358a48-1dba-4943-bc33-ad568d730e2d: re-scheduling SchedulerAPI.create_volume attempt 2 due to Unexpected error while running command.
/var/log/containers/cinder/cinder-volume.log:15341:Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n' _reschedule /usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py:162
/var/log/containers/cinder/cinder-volume.log:15439:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server [req-2572e813-72af-4861-a4a1-b1d8fba44109 d081b16da79340808907fa092fa23bb1 ac4c0a9f78b44816a870d250de3fb245 - default default] Exception during message handling: oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
/var/log/containers/cinder/cinder-volume.log:15443:Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
/var/log/containers/cinder/cinder-volume.log:15444:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Traceback (most recent call last):
/var/log/containers/cinder/cinder-volume.log:15445:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_messaging/rpc/server.py", line 165, in _process_incoming
/var/log/containers/cinder/cinder-volume.log:15446:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     res = self.dispatcher.dispatch(message)
/var/log/containers/cinder/cinder-volume.log:15447:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_messaging/rpc/dispatcher.py", line 274, in dispatch
/var/log/containers/cinder/cinder-volume.log:15448:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     return self._do_dispatch(endpoint, method, ctxt, args)
/var/log/containers/cinder/cinder-volume.log:15449:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_messaging/rpc/dispatcher.py", line 194, in _do_dispatch
/var/log/containers/cinder/cinder-volume.log:15450:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     result = func(ctxt, **new_args)
/var/log/containers/cinder/cinder-volume.log:15451:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "<decorator-gen-233>", line 2, in create_volume
/var/log/containers/cinder/cinder-volume.log:15452:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/objects/cleanable.py", line 212, in wrapper
/var/log/containers/cinder/cinder-volume.log:15453:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     result = f(*args, **kwargs)
/var/log/containers/cinder/cinder-volume.log:15454:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/manager.py", line 752, in create_volume
/var/log/containers/cinder/cinder-volume.log:15455:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     _run_flow()
/var/log/containers/cinder/cinder-volume.log:15456:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/manager.py", line 741, in _run_flow
/var/log/containers/cinder/cinder-volume.log:15457:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     flow_engine.run()
/var/log/containers/cinder/cinder-volume.log:15458:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/engine.py", line 247, in run
/var/log/containers/cinder/cinder-volume.log:15459:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     for _state in self.run_iter(timeout=timeout):
/var/log/containers/cinder/cinder-volume.log:15460:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/engine.py", line 340, in run_iter
/var/log/containers/cinder/cinder-volume.log:15461:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     failure.Failure.reraise_if_any(er_failures)
/var/log/containers/cinder/cinder-volume.log:15462:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/types/failure.py", line 339, in reraise_if_any
/var/log/containers/cinder/cinder-volume.log:15463:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     failures[0].reraise()
/var/log/containers/cinder/cinder-volume.log:15464:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/types/failure.py", line 346, in reraise
/var/log/containers/cinder/cinder-volume.log:15465:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     six.reraise(*self._exc_info)
/var/log/containers/cinder/cinder-volume.log:15466:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
/var/log/containers/cinder/cinder-volume.log:15467:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     raise value
/var/log/containers/cinder/cinder-volume.log:15468:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
/var/log/containers/cinder/cinder-volume.log:15469:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     result = task.execute(**arguments)
/var/log/containers/cinder/cinder-volume.log:15470:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 1119, in execute
/var/log/containers/cinder/cinder-volume.log:15471:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     context, volume, **volume_spec)
/var/log/containers/cinder/cinder-volume.log:15472:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 635, in _create_from_source_volume
/var/log/containers/cinder/cinder-volume.log:15473:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     rekey_model_update = self._rekey_volume(context, volume)
/var/log/containers/cinder/cinder-volume.log:15474:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 610, in _rekey_volume
/var/log/containers/cinder/cinder-volume.log:15475:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     new_key_id)
/var/log/containers/cinder/cinder-volume.log:15476:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 220, in __exit__
/var/log/containers/cinder/cinder-volume.log:15477:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     self.force_reraise()
/var/log/containers/cinder/cinder-volume.log:15478:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 196, in force_reraise
/var/log/containers/cinder/cinder-volume.log:15479:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     six.reraise(self.type_, self.value, self.tb)
/var/log/containers/cinder/cinder-volume.log:15480:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
/var/log/containers/cinder/cinder-volume.log:15481:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     raise value
/var/log/containers/cinder/cinder-volume.log:15482:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 564, in _rekey_volume
/var/log/containers/cinder/cinder-volume.log:15483:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     log_errors=processutils.LOG_ALL_ERRORS)
/var/log/containers/cinder/cinder-volume.log:15484:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/utils.py", line 126, in execute
/var/log/containers/cinder/cinder-volume.log:15485:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     return processutils.execute(*cmd, **kwargs)
/var/log/containers/cinder/cinder-volume.log:15486:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_concurrency/processutils.py", line 424, in execute
/var/log/containers/cinder/cinder-volume.log:15487:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     cmd=sanitized_cmd)
/var/log/containers/cinder/cinder-volume.log:15488:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
/var/log/containers/cinder/cinder-volume.log:15489:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Command: cryptsetup luksChangeKey /dev/sdb
/var/log/containers/cinder/cinder-volume.log:15490:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Exit code: 2
/var/log/containers/cinder/cinder-volume.log:15491:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Stdout: ''
/var/log/containers/cinder/cinder-volume.log:15492:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
/var/log/containers/cinder/cinder-volume.log:15493:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server

Comment 1 bkopilov 2020-01-28 09:28:32 UTC

Created attachment 1655929 [details]
controller logs

Comment 2 bkopilov 2020-01-28 09:30:57 UTC

Added tar.gz logs and steps from command line.

(overcloud) [stack@puma51 ~]$ cinder show 7ea23b23-8fd8-40e7-8563-9b75c88a9bd8
+--------------------------------+-------------------------------------------------+
| Property                       | Value                                           |
+--------------------------------+-------------------------------------------------+
| attached_servers               | []                                              |
| attachment_ids                 | []                                              |
| availability_zone              | nova                                            |
| bootable                       | true                                            |
| consistencygroup_id            | None                                            |
| created_at                     | 2020-01-28T09:00:59.000000                      |
| description                    | None                                            |
| encrypted                      | True                                            |
| id                             | 7ea23b23-8fd8-40e7-8563-9b75c88a9bd8            |
| metadata                       |                                                 |
| migration_status               | None                                            |
| multiattach                    | False                                           |
| name                           | bootEncvol                                      |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5                      |
| os-vol-mig-status-attr:migstat | None                                            |
| os-vol-mig-status-attr:name_id | None                                            |
| os-vol-tenant-attr:tenant_id   | ac4c0a9f78b44816a870d250de3fb245                |
| replication_status             | None                                            |
| size                           | 1                                               |
| snapshot_id                    | None                                            |
| source_volid                   | None                                            |
| status                         | available                                       |
| updated_at                     | 2020-01-28T09:06:03.000000                      |
| user_id                        | d081b16da79340808907fa092fa23bb1                |
| volume_image_metadata          | checksum : ba3cd24377dde5dfdd58728894004abb     |
|                                | container_format : bare                         |
|                                | disk_format : raw                               |
|                                | image_id : 98f483f9-12cf-4fad-8d7d-d398c111ee01 |
|                                | image_name : cirros                             |
|                                | min_disk : 0                                    |
|                                | min_ram : 0                                     |
|                                | signature_verified : False                      |
|                                | size : 46137344                                 |
| volume_type                    | LUKS                                            |
+--------------------------------+-------------------------------------------------+


cinder create 1 --source-volid 7ea23b23-8fd8-40e7-8563-9b75c88a9bd8 --volume-type LUKS --name KUKU

hed_at=None,metadata={},migration_status=None,multiattach=False,previous_status=None,project_id='ac4c0a9f78b44816a870d250de3fb245',provider_auth=None,provider_geometry=None,provider_id=None,provider_location=None,replication_driver_data=None,replication_extended_status=None,replication_status=None,scheduled_at=2020-01-28T09:23:15Z,service_uuid=None,shared_targets=True,size=1,snapshot_id=None,snapshots=<?>,source_volid=7ea23b23-8fd8-40e7-8563-9b75c88a9bd8,status='creating',terminated_at=None,updated_at=2020-01-28T09:23:15Z,user_id='d081b16da79340808907fa092fa23bb1',volume_attachment=<?>,volume_type=VolumeType(a20f5337-041e-45b2-a5ef-b4d43adb3526),volume_type_id=a20f5337-041e-45b2-a5ef-b4d43adb3526)}
           |__Flow 'volume_create_manager': oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
Command: cryptsetup luksChangeKey /dev/sdb
Exit code: 2
Stdout: ''
Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Traceback (most recent call last):
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     result = task.execute(**arguments)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 1119, in execute
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     context, volume, **volume_spec)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 635, in _create_from_source_volume
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     rekey_model_update = self._rekey_volume(context, volume)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 610, in _rekey_volume
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     new_key_id)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 220, in __exit__
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     self.force_reraise()
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 196, in force_reraise
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     six.reraise(self.type_, self.value, self.tb)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     raise value
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 564, in _rekey_volume
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     log_errors=processutils.LOG_ALL_ERRORS)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/utils.py", line 126, in execute
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     return processutils.execute(*cmd, **kwargs)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/oslo_concurrency/processutils.py", line 424, in execute
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     cmd=sanitized_cmd)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Command: cryptsetup luksChangeKey /dev/sdb
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Exit code: 2
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Stdout: ''
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager
2020-01-28 09:23:55.851 50 DEBUG cinder.volume.manager [req-c5811146-760a-4801-b44

Comment 3 Luigi Toscano 2020-01-28 13:11:16 UTC

For the record: does the same test work with other backends?

Comment 5 Eric Harney 2020-01-28 13:16:39 UTC

This looks like a potential dependency problem where the c-vol container doesn't have cracklib installed but cryptsetup expects it.

Comment 6 Luigi Toscano 2020-01-28 13:20:44 UTC

Answered separately, it seems it work on the Ceph backend.

Then the question is: does anyone know why would cryptsetup require cracklib only for that backend?

Comment 7 Eric Harney 2020-01-28 13:22:26 UTC

We don't call cryptsetup for the RBD driver.  It's used for all iSCSI/FC drivers though.

Comment 8 Lon Hohberger 2020-01-28 17:09:46 UTC

FWIW, cracklib-dicts is in the RHEL8 BaseOS repository

Comment 16 Tzach Shefi 2020-01-31 03:24:50 UTC

Verified on:
openstack-cinder-15.0.2-0.20200123220928.900f769.el8ost.noarch

On a system with Cinder using 3par FC backend:

(overcloud) [stack@puma52 ~]$ cinder service-list
+------------------+-------------------------+------+---------+-------+----------------------------+-----------------+
| Binary           | Host                    | Zone | Status  | State | Updated_at                 | Disabled Reason |
+------------------+-------------------------+------+---------+-------+----------------------------+-----------------+
| cinder-backup    | controller-1            | nova | enabled | up    | 2020-01-31T02:55:27.000000 | -               |
| cinder-scheduler | controller-0            | nova | enabled | up    | 2020-01-31T02:55:27.000000 | -               |
| cinder-scheduler | controller-1            | nova | enabled | up    | 2020-01-31T02:55:27.000000 | -               |
| cinder-scheduler | controller-2            | nova | enabled | up    | 2020-01-31T02:55:28.000000 | -               |
| cinder-volume    | controller-2@3parfc     | nova | enabled | up    | 2020-01-31T02:55:31.000000 | -               |


Create LUKS type:
(overcloud) [stack@puma52 ~]$ cinder type-create LUKS
+--------------------------------------+------+-------------+-----------+
| ID                                   | Name | Description | Is_Public |
+--------------------------------------+------+-------------+-----------+
| 2ff7eab2-5ba5-4c21-b30f-1011acb808dd | LUKS | -           | True      |
+--------------------------------------+------+-------------+-----------+
(overcloud) [stack@puma52 ~]$ cinder encryption-type-create --cipher aes-xts-plain64 --key_size 256   --control_location front-end LUKS nova.volume.encryptors.luks.LuksEncryptor
+--------------------------------------+-------------------------------------------+-----------------+----------+------------------+
| Volume Type ID                       | Provider                                  | Cipher          | Key Size | Control Location |
+--------------------------------------+-------------------------------------------+-----------------+----------+------------------+
| 2ff7eab2-5ba5-4c21-b30f-1011acb808dd | nova.volume.encryptors.luks.LuksEncryptor | aes-xts-plain64 | 256      | front-end        |
+--------------------------------------+-------------------------------------------+-----------------+----------+------------------+
(overcloud) [stack@puma52 ~]$ cinder type-key LUKS set volume_backend_name=3parfc

Upload Cirros image to Glance
(overcloud) [stack@puma52 ~]$ glance image-create --name cirros2 --disk-format qcow2 --container-format bare --file cirros-0.4.0-x86_64-disk.img 

Create an encrypted volume from image as source volume:
(overcloud) [stack@puma52 ~]$ cinder create 3 --volume-type LUKS --name SourceEncVolOn3ParFC --image cirros2

(overcloud) [stack@puma52 ~]$ cinder show SourceEncVolOn3ParFC
+--------------------------------+-------------------------------------------------+
| Property                       | Value                                           |
+--------------------------------+-------------------------------------------------+
| attached_servers               | []                                              |
| attachment_ids                 | []                                              |
| availability_zone              | nova                                            |
| bootable                       | true                                            |
| consistencygroup_id            | None                                            |
| created_at                     | 2020-01-31T03:04:58.000000                      |
| description                    | None                                            |
| encrypted                      | True                                            |
| id                             | 9b09afde-c401-4194-8352-52a230f3b1ca            |
| metadata                       |                                                 |
| migration_status               | None                                            |
| multiattach                    | False                                           |
| name                           | SourceEncVolOn3ParFC                            |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5                      |
| os-vol-mig-status-attr:migstat | None                                            |
| os-vol-mig-status-attr:name_id | None                                            |
| os-vol-tenant-attr:tenant_id   | 273cdbd1bd94460fa919d321b70ff251                |
| replication_status             | None                                            |
| size                           | 3                                               |
| snapshot_id                    | None                                            |
| source_volid                   | None                                            |
| status                         | available                                       |
| updated_at                     | 2020-01-31T03:05:36.000000                      |
| user_id                        | 23fc4ef1ce904a6a86a6883ff0276733                |
| volume_image_metadata          | checksum : 443b7623e27ecf03dc9e01ee93f67afe     |
|                                | container_format : bare                         |
|                                | disk_format : qcow2                             |
|                                | image_id : bebc3eba-f7a7-4a47-ba8f-88703cf98962 |
|                                | image_name : cirros2                            |
|                                | min_disk : 0                                    |
|                                | min_ram : 0                                     |
|                                | signature_verified : False                      |
|                                | size : 12716032                                 |
| volume_type                    | LUKS                                            |
+--------------------------------+-------------------------------------------------+

Clone said encrypted volume:
(overcloud) [stack@puma52 ~]$ cinder create 3 --source-volid 9b09afde-c401-4194-8352-52a230f3b1ca --name ClonedEncVol --volume-type LUKS
+--------------------------------+--------------------------------------+
| Property                       | Value                                |
+--------------------------------+--------------------------------------+
| attachments                    | []                                   |
| availability_zone              | nova                                 |
| bootable                       | true                                 |
| consistencygroup_id            | None                                 |
| created_at                     | 2020-01-31T03:07:02.000000           |
| description                    | None                                 |
| encrypted                      | True                                 |
| id                             | 62dc7dda-4f70-4d6d-a5be-699553ba8858 |
| metadata                       | {}                                   |
| migration_status               | None                                 |
| multiattach                    | False                                |
| name                           | ClonedEncVol                         |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5           |
| os-vol-mig-status-attr:migstat | None                                 |
| os-vol-mig-status-attr:name_id | None                                 |
| os-vol-tenant-attr:tenant_id   | 273cdbd1bd94460fa919d321b70ff251     |
| replication_status             | None                                 |
| size                           | 3                                    |
| snapshot_id                    | None                                 |
| source_volid                   | 9b09afde-c401-4194-8352-52a230f3b1ca |
| status                         | creating                             |
| updated_at                     | 2020-01-31T03:07:03.000000           |
| user_id                        | 23fc4ef1ce904a6a86a6883ff0276733     |
| volume_type                    | LUKS                                 |
+--------------------------------+--------------------------------------+

Successfully cloned an encrypted volume backed by Cinder 3par FC:

(overcloud) [stack@puma52 ~]$ cinder show ClonedEncVol
+--------------------------------+-------------------------------------------------+
| Property                       | Value                                           |
+--------------------------------+-------------------------------------------------+
| attached_servers               | []                                              |
| attachment_ids                 | []                                              |
| availability_zone              | nova                                            |
| bootable                       | true                                            |
| consistencygroup_id            | None                                            |
| created_at                     | 2020-01-31T03:07:02.000000                      |
| description                    | None                                            |
| encrypted                      | True                                            |
| id                             | 62dc7dda-4f70-4d6d-a5be-699553ba8858            |
| metadata                       |                                                 |
| migration_status               | None                                            |
| multiattach                    | False                                           |
| name                           | ClonedEncVol                                    |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5                      |
| os-vol-mig-status-attr:migstat | None                                            |
| os-vol-mig-status-attr:name_id | None                                            |
| os-vol-tenant-attr:tenant_id   | 273cdbd1bd94460fa919d321b70ff251                |
| replication_status             | None                                            |
| size                           | 3                                               |
| snapshot_id                    | None                                            |
| source_volid                   | 9b09afde-c401-4194-8352-52a230f3b1ca            |
| status                         | available                                       |
| updated_at                     | 2020-01-31T03:07:55.000000                      |
| user_id                        | 23fc4ef1ce904a6a86a6883ff0276733                |
| volume_image_metadata          | checksum : 443b7623e27ecf03dc9e01ee93f67afe     |
|                                | container_format : bare                         |
|                                | disk_format : qcow2                             |
|                                | image_id : bebc3eba-f7a7-4a47-ba8f-88703cf98962 |
|                                | image_name : cirros2                            |
|                                | min_disk : 0                                    |
|                                | min_ram : 0                                     |
|                                | signature_verified : False                      |
|                                | size : 12716032                                 |
| volume_type                    | LUKS                                            |
+--------------------------------+-------------------------------------------------+

(overcloud) [stack@puma52 ~]$ cinder list
+--------------------------------------+-----------+-----------------------+------+-------------+----------+-------------+
| ID                                   | Status    | Name                  | Size | Volume Type | Bootable | Attached to |
+--------------------------------------+-----------+-----------------------+------+-------------+----------+-------------+
| 62dc7dda-4f70-4d6d-a5be-699553ba8858 | available | ClonedEncVol          | 3    | LUKS        | true     |             |
| 9b09afde-c401-4194-8352-52a230f3b1ca | available | SourceEncVolOn3ParFC  | 3    | LUKS        | true     |             |
+--------------------------------------+-----------+-----------------------+------+-------------+----------+-------------+




Good to verify, successfully cloned an encrypted volume backed 3par FC backend.

Comment 17 Tzach Shefi 2020-01-31 03:38:15 UTC

Ops forgot to add above also retested on a second deployment this time volumes were backed by LVM (iscsi) it too passed fine. 

(overcloud) [stack@undercloud-0 ~]$ cinder list
+--------------------------------------+-----------+----------------------+------+-------------+----------+-------------+
| ID                                   | Status    | Name                 | Size | Volume Type | Bootable | Attached to |
+--------------------------------------+-----------+----------------------+------+-------------+----------+-------------+
| 0c705680-2ce8-4e27-9383-eb4cb43f1bfb | available | ClonedEncLVMIscsi    | 2    | LUKS2       | true     |             |
| aa234d20-9198-4ae9-8504-1af43d2fe5de | available | SourceEcnVol         | 2    | LUKS2       | true     |

Comment 21 errata-xmlrpc 2020-02-06 14:44:22 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:0283

Comment 22 Red Hat Bugzilla 2023-09-14 05:50:50 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days