1795537 – [FC-RHOS16] Unable to create cloned volume from encrypted volume

Bug 1795537 - [FC-RHOS16] Unable to create cloned volume from encrypted volume

Summary: [FC-RHOS16] Unable to create cloned volume from encrypted volume

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	openstack-cinder
Sub Component:
Version:	16.0 (Train)
Hardware:	x86_64
OS:	Linux
Priority:	urgent
Severity:	urgent
Target Milestone:	ga
Target Release:	16.0 (Train on RHEL 8.1)
Assignee:	Eric Harney
QA Contact:	Tzach Shefi
Docs Contact:	Chuck Copello
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2020-01-28 09:19 UTC by bkopilov
Modified:	2023-09-14 05:50 UTC (History)
CC List:	6 users (show)
Fixed In Version:	openstack-cinder-15.0.2-0.20200123220928.900f769.el8ost
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:	2020-02-06 14:44:22 UTC
Target Upstream Version:
Embargoed:

Attachments	(Terms of Use)
controller logs (514.47 KB, application/gzip) 2020-01-28 09:28 UTC, bkopilov	no flags	Details
View All

Links
System	ID	Private	Priority	Status	Summary	Last Updated
RDO	24712	0	None	rpm-master: NEW	openstack/cinder-distgit: Add cryptsetup dependencies (Ida8a00fe94cf62ef5ac4400e687d613e18f938a9)	2020-01-28 14:12:52 UTC
Red Hat Product Errata	RHEA-2020:0283	0	None	None	None	2020-02-06 14:44:53 UTC

Description bkopilov 2020-01-28 09:19:43 UTC

Description of problem:
Fiber-channel setup with 3parfc backend.

How to reproduce :
#1 create an encrypted volume KUKU from image -- Done
#2 Try to create another volume from source_volid=KUKU with volume-type
---> Action fails.

Traceback:
/var/log/containers/cinder/cinder-volume.log:15327:2020-01-28 09:09:58.696 50 ERROR cinder.volume.manager 
/var/log/containers/cinder/cinder-volume.log:15337:2020-01-28 09:09:58.748 50 DEBUG cinder.volume.flows.manager.create_volume [req-2572e813-72af-4861-a4a1-b1d8fba44109 d081b16da79340808907fa092fa23bb1 ac4c0a9f78b44816a870d250de3fb245 - default default] Volume 44358a48-1dba-4943-bc33-ad568d730e2d: re-scheduling SchedulerAPI.create_volume attempt 2 due to Unexpected error while running command.
/var/log/containers/cinder/cinder-volume.log:15341:Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n' _reschedule /usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py:162
/var/log/containers/cinder/cinder-volume.log:15439:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server [req-2572e813-72af-4861-a4a1-b1d8fba44109 d081b16da79340808907fa092fa23bb1 ac4c0a9f78b44816a870d250de3fb245 - default default] Exception during message handling: oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
/var/log/containers/cinder/cinder-volume.log:15443:Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
/var/log/containers/cinder/cinder-volume.log:15444:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Traceback (most recent call last):
/var/log/containers/cinder/cinder-volume.log:15445:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_messaging/rpc/server.py", line 165, in _process_incoming
/var/log/containers/cinder/cinder-volume.log:15446:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     res = self.dispatcher.dispatch(message)
/var/log/containers/cinder/cinder-volume.log:15447:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_messaging/rpc/dispatcher.py", line 274, in dispatch
/var/log/containers/cinder/cinder-volume.log:15448:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     return self._do_dispatch(endpoint, method, ctxt, args)
/var/log/containers/cinder/cinder-volume.log:15449:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_messaging/rpc/dispatcher.py", line 194, in _do_dispatch
/var/log/containers/cinder/cinder-volume.log:15450:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     result = func(ctxt, **new_args)
/var/log/containers/cinder/cinder-volume.log:15451:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "<decorator-gen-233>", line 2, in create_volume
/var/log/containers/cinder/cinder-volume.log:15452:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/objects/cleanable.py", line 212, in wrapper
/var/log/containers/cinder/cinder-volume.log:15453:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     result = f(*args, **kwargs)
/var/log/containers/cinder/cinder-volume.log:15454:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/manager.py", line 752, in create_volume
/var/log/containers/cinder/cinder-volume.log:15455:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     _run_flow()
/var/log/containers/cinder/cinder-volume.log:15456:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/manager.py", line 741, in _run_flow
/var/log/containers/cinder/cinder-volume.log:15457:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     flow_engine.run()
/var/log/containers/cinder/cinder-volume.log:15458:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/engine.py", line 247, in run
/var/log/containers/cinder/cinder-volume.log:15459:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     for _state in self.run_iter(timeout=timeout):
/var/log/containers/cinder/cinder-volume.log:15460:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/engine.py", line 340, in run_iter
/var/log/containers/cinder/cinder-volume.log:15461:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     failure.Failure.reraise_if_any(er_failures)
/var/log/containers/cinder/cinder-volume.log:15462:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/types/failure.py", line 339, in reraise_if_any
/var/log/containers/cinder/cinder-volume.log:15463:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     failures[0].reraise()
/var/log/containers/cinder/cinder-volume.log:15464:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/types/failure.py", line 346, in reraise
/var/log/containers/cinder/cinder-volume.log:15465:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     six.reraise(*self._exc_info)
/var/log/containers/cinder/cinder-volume.log:15466:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
/var/log/containers/cinder/cinder-volume.log:15467:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     raise value
/var/log/containers/cinder/cinder-volume.log:15468:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
/var/log/containers/cinder/cinder-volume.log:15469:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     result = task.execute(**arguments)
/var/log/containers/cinder/cinder-volume.log:15470:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 1119, in execute
/var/log/containers/cinder/cinder-volume.log:15471:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     context, volume, **volume_spec)
/var/log/containers/cinder/cinder-volume.log:15472:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 635, in _create_from_source_volume
/var/log/containers/cinder/cinder-volume.log:15473:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     rekey_model_update = self._rekey_volume(context, volume)
/var/log/containers/cinder/cinder-volume.log:15474:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 610, in _rekey_volume
/var/log/containers/cinder/cinder-volume.log:15475:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     new_key_id)
/var/log/containers/cinder/cinder-volume.log:15476:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 220, in __exit__
/var/log/containers/cinder/cinder-volume.log:15477:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     self.force_reraise()
/var/log/containers/cinder/cinder-volume.log:15478:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 196, in force_reraise
/var/log/containers/cinder/cinder-volume.log:15479:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     six.reraise(self.type_, self.value, self.tb)
/var/log/containers/cinder/cinder-volume.log:15480:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
/var/log/containers/cinder/cinder-volume.log:15481:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     raise value
/var/log/containers/cinder/cinder-volume.log:15482:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 564, in _rekey_volume
/var/log/containers/cinder/cinder-volume.log:15483:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     log_errors=processutils.LOG_ALL_ERRORS)
/var/log/containers/cinder/cinder-volume.log:15484:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/cinder/utils.py", line 126, in execute
/var/log/containers/cinder/cinder-volume.log:15485:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     return processutils.execute(*cmd, **kwargs)
/var/log/containers/cinder/cinder-volume.log:15486:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server   File "/usr/lib/python3.6/site-packages/oslo_concurrency/processutils.py", line 424, in execute
/var/log/containers/cinder/cinder-volume.log:15487:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server     cmd=sanitized_cmd)
/var/log/containers/cinder/cinder-volume.log:15488:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
/var/log/containers/cinder/cinder-volume.log:15489:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Command: cryptsetup luksChangeKey /dev/sdb
/var/log/containers/cinder/cinder-volume.log:15490:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Exit code: 2
/var/log/containers/cinder/cinder-volume.log:15491:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Stdout: ''
/var/log/containers/cinder/cinder-volume.log:15492:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
/var/log/containers/cinder/cinder-volume.log:15493:2020-01-28 09:09:59.146 50 ERROR oslo_messaging.rpc.server

Comment 1 bkopilov 2020-01-28 09:28:32 UTC

Created attachment 1655929 [details]
controller logs

Comment 2 bkopilov 2020-01-28 09:30:57 UTC

Added tar.gz logs and steps from command line.

(overcloud) [stack@puma51 ~]$ cinder show 7ea23b23-8fd8-40e7-8563-9b75c88a9bd8
+--------------------------------+-------------------------------------------------+
| Property                       | Value                                           |
+--------------------------------+-------------------------------------------------+
| attached_servers               | []                                              |
| attachment_ids                 | []                                              |
| availability_zone              | nova                                            |
| bootable                       | true                                            |
| consistencygroup_id            | None                                            |
| created_at                     | 2020-01-28T09:00:59.000000                      |
| description                    | None                                            |
| encrypted                      | True                                            |
| id                             | 7ea23b23-8fd8-40e7-8563-9b75c88a9bd8            |
| metadata                       |                                                 |
| migration_status               | None                                            |
| multiattach                    | False                                           |
| name                           | bootEncvol                                      |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5                      |
| os-vol-mig-status-attr:migstat | None                                            |
| os-vol-mig-status-attr:name_id | None                                            |
| os-vol-tenant-attr:tenant_id   | ac4c0a9f78b44816a870d250de3fb245                |
| replication_status             | None                                            |
| size                           | 1                                               |
| snapshot_id                    | None                                            |
| source_volid                   | None                                            |
| status                         | available                                       |
| updated_at                     | 2020-01-28T09:06:03.000000                      |
| user_id                        | d081b16da79340808907fa092fa23bb1                |
| volume_image_metadata          | checksum : ba3cd24377dde5dfdd58728894004abb     |
|                                | container_format : bare                         |
|                                | disk_format : raw                               |
|                                | image_id : 98f483f9-12cf-4fad-8d7d-d398c111ee01 |
|                                | image_name : cirros                             |
|                                | min_disk : 0                                    |
|                                | min_ram : 0                                     |
|                                | signature_verified : False                      |
|                                | size : 46137344                                 |
| volume_type                    | LUKS                                            |
+--------------------------------+-------------------------------------------------+


cinder create 1 --source-volid 7ea23b23-8fd8-40e7-8563-9b75c88a9bd8 --volume-type LUKS --name KUKU

hed_at=None,metadata={},migration_status=None,multiattach=False,previous_status=None,project_id='ac4c0a9f78b44816a870d250de3fb245',provider_auth=None,provider_geometry=None,provider_id=None,provider_location=None,replication_driver_data=None,replication_extended_status=None,replication_status=None,scheduled_at=2020-01-28T09:23:15Z,service_uuid=None,shared_targets=True,size=1,snapshot_id=None,snapshots=<?>,source_volid=7ea23b23-8fd8-40e7-8563-9b75c88a9bd8,status='creating',terminated_at=None,updated_at=2020-01-28T09:23:15Z,user_id='d081b16da79340808907fa092fa23bb1',volume_attachment=<?>,volume_type=VolumeType(a20f5337-041e-45b2-a5ef-b4d43adb3526),volume_type_id=a20f5337-041e-45b2-a5ef-b4d43adb3526)}
           |__Flow 'volume_create_manager': oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
Command: cryptsetup luksChangeKey /dev/sdb
Exit code: 2
Stdout: ''
Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Traceback (most recent call last):
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     result = task.execute(**arguments)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 1119, in execute
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     context, volume, **volume_spec)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 635, in _create_from_source_volume
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     rekey_model_update = self._rekey_volume(context, volume)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 610, in _rekey_volume
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     new_key_id)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 220, in __exit__
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     self.force_reraise()
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/oslo_utils/excutils.py", line 196, in force_reraise
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     six.reraise(self.type_, self.value, self.tb)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     raise value
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/volume/flows/manager/create_volume.py", line 564, in _rekey_volume
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     log_errors=processutils.LOG_ALL_ERRORS)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/cinder/utils.py", line 126, in execute
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     return processutils.execute(*cmd, **kwargs)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager   File "/usr/lib/python3.6/site-packages/oslo_concurrency/processutils.py", line 424, in execute
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager     cmd=sanitized_cmd)
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Command: cryptsetup luksChangeKey /dev/sdb
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Exit code: 2
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Stdout: ''
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager Stderr: '/usr/share/cracklib/pw_dict.pwd.gz: No such file or directory\nPassword quality check failed:\n The password fails the dictionary check - error loading dictionary\n'
2020-01-28 09:23:55.846 50 ERROR cinder.volume.manager
2020-01-28 09:23:55.851 50 DEBUG cinder.volume.manager [req-c5811146-760a-4801-b44

Comment 3 Luigi Toscano 2020-01-28 13:11:16 UTC

For the record: does the same test work with other backends?

Comment 5 Eric Harney 2020-01-28 13:16:39 UTC

This looks like a potential dependency problem where the c-vol container doesn't have cracklib installed but cryptsetup expects it.

Comment 6 Luigi Toscano 2020-01-28 13:20:44 UTC

Answered separately, it seems it work on the Ceph backend.

Then the question is: does anyone know why would cryptsetup require cracklib only for that backend?

Comment 7 Eric Harney 2020-01-28 13:22:26 UTC

We don't call cryptsetup for the RBD driver.  It's used for all iSCSI/FC drivers though.

Comment 8 Lon Hohberger 2020-01-28 17:09:46 UTC

FWIW, cracklib-dicts is in the RHEL8 BaseOS repository

Comment 16 Tzach Shefi 2020-01-31 03:24:50 UTC

Verified on:
openstack-cinder-15.0.2-0.20200123220928.900f769.el8ost.noarch

On a system with Cinder using 3par FC backend:

(overcloud) [stack@puma52 ~]$ cinder service-list
+------------------+-------------------------+------+---------+-------+----------------------------+-----------------+
| Binary           | Host                    | Zone | Status  | State | Updated_at                 | Disabled Reason |
+------------------+-------------------------+------+---------+-------+----------------------------+-----------------+
| cinder-backup    | controller-1            | nova | enabled | up    | 2020-01-31T02:55:27.000000 | -               |
| cinder-scheduler | controller-0            | nova | enabled | up    | 2020-01-31T02:55:27.000000 | -               |
| cinder-scheduler | controller-1            | nova | enabled | up    | 2020-01-31T02:55:27.000000 | -               |
| cinder-scheduler | controller-2            | nova | enabled | up    | 2020-01-31T02:55:28.000000 | -               |
| cinder-volume    | controller-2@3parfc     | nova | enabled | up    | 2020-01-31T02:55:31.000000 | -               |


Create LUKS type:
(overcloud) [stack@puma52 ~]$ cinder type-create LUKS
+--------------------------------------+------+-------------+-----------+
| ID                                   | Name | Description | Is_Public |
+--------------------------------------+------+-------------+-----------+
| 2ff7eab2-5ba5-4c21-b30f-1011acb808dd | LUKS | -           | True      |
+--------------------------------------+------+-------------+-----------+
(overcloud) [stack@puma52 ~]$ cinder encryption-type-create --cipher aes-xts-plain64 --key_size 256   --control_location front-end LUKS nova.volume.encryptors.luks.LuksEncryptor
+--------------------------------------+-------------------------------------------+-----------------+----------+------------------+
| Volume Type ID                       | Provider                                  | Cipher          | Key Size | Control Location |
+--------------------------------------+-------------------------------------------+-----------------+----------+------------------+
| 2ff7eab2-5ba5-4c21-b30f-1011acb808dd | nova.volume.encryptors.luks.LuksEncryptor | aes-xts-plain64 | 256      | front-end        |
+--------------------------------------+-------------------------------------------+-----------------+----------+------------------+
(overcloud) [stack@puma52 ~]$ cinder type-key LUKS set volume_backend_name=3parfc

Upload Cirros image to Glance
(overcloud) [stack@puma52 ~]$ glance image-create --name cirros2 --disk-format qcow2 --container-format bare --file cirros-0.4.0-x86_64-disk.img 

Create an encrypted volume from image as source volume:
(overcloud) [stack@puma52 ~]$ cinder create 3 --volume-type LUKS --name SourceEncVolOn3ParFC --image cirros2

(overcloud) [stack@puma52 ~]$ cinder show SourceEncVolOn3ParFC
+--------------------------------+-------------------------------------------------+
| Property                       | Value                                           |
+--------------------------------+-------------------------------------------------+
| attached_servers               | []                                              |
| attachment_ids                 | []                                              |
| availability_zone              | nova                                            |
| bootable                       | true                                            |
| consistencygroup_id            | None                                            |
| created_at                     | 2020-01-31T03:04:58.000000                      |
| description                    | None                                            |
| encrypted                      | True                                            |
| id                             | 9b09afde-c401-4194-8352-52a230f3b1ca            |
| metadata                       |                                                 |
| migration_status               | None                                            |
| multiattach                    | False                                           |
| name                           | SourceEncVolOn3ParFC                            |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5                      |
| os-vol-mig-status-attr:migstat | None                                            |
| os-vol-mig-status-attr:name_id | None                                            |
| os-vol-tenant-attr:tenant_id   | 273cdbd1bd94460fa919d321b70ff251                |
| replication_status             | None                                            |
| size                           | 3                                               |
| snapshot_id                    | None                                            |
| source_volid                   | None                                            |
| status                         | available                                       |
| updated_at                     | 2020-01-31T03:05:36.000000                      |
| user_id                        | 23fc4ef1ce904a6a86a6883ff0276733                |
| volume_image_metadata          | checksum : 443b7623e27ecf03dc9e01ee93f67afe     |
|                                | container_format : bare                         |
|                                | disk_format : qcow2                             |
|                                | image_id : bebc3eba-f7a7-4a47-ba8f-88703cf98962 |
|                                | image_name : cirros2                            |
|                                | min_disk : 0                                    |
|                                | min_ram : 0                                     |
|                                | signature_verified : False                      |
|                                | size : 12716032                                 |
| volume_type                    | LUKS                                            |
+--------------------------------+-------------------------------------------------+

Clone said encrypted volume:
(overcloud) [stack@puma52 ~]$ cinder create 3 --source-volid 9b09afde-c401-4194-8352-52a230f3b1ca --name ClonedEncVol --volume-type LUKS
+--------------------------------+--------------------------------------+
| Property                       | Value                                |
+--------------------------------+--------------------------------------+
| attachments                    | []                                   |
| availability_zone              | nova                                 |
| bootable                       | true                                 |
| consistencygroup_id            | None                                 |
| created_at                     | 2020-01-31T03:07:02.000000           |
| description                    | None                                 |
| encrypted                      | True                                 |
| id                             | 62dc7dda-4f70-4d6d-a5be-699553ba8858 |
| metadata                       | {}                                   |
| migration_status               | None                                 |
| multiattach                    | False                                |
| name                           | ClonedEncVol                         |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5           |
| os-vol-mig-status-attr:migstat | None                                 |
| os-vol-mig-status-attr:name_id | None                                 |
| os-vol-tenant-attr:tenant_id   | 273cdbd1bd94460fa919d321b70ff251     |
| replication_status             | None                                 |
| size                           | 3                                    |
| snapshot_id                    | None                                 |
| source_volid                   | 9b09afde-c401-4194-8352-52a230f3b1ca |
| status                         | creating                             |
| updated_at                     | 2020-01-31T03:07:03.000000           |
| user_id                        | 23fc4ef1ce904a6a86a6883ff0276733     |
| volume_type                    | LUKS                                 |
+--------------------------------+--------------------------------------+

Successfully cloned an encrypted volume backed by Cinder 3par FC:

(overcloud) [stack@puma52 ~]$ cinder show ClonedEncVol
+--------------------------------+-------------------------------------------------+
| Property                       | Value                                           |
+--------------------------------+-------------------------------------------------+
| attached_servers               | []                                              |
| attachment_ids                 | []                                              |
| availability_zone              | nova                                            |
| bootable                       | true                                            |
| consistencygroup_id            | None                                            |
| created_at                     | 2020-01-31T03:07:02.000000                      |
| description                    | None                                            |
| encrypted                      | True                                            |
| id                             | 62dc7dda-4f70-4d6d-a5be-699553ba8858            |
| metadata                       |                                                 |
| migration_status               | None                                            |
| multiattach                    | False                                           |
| name                           | ClonedEncVol                                    |
| os-vol-host-attr:host          | controller-2@3parfc#SSD_r5                      |
| os-vol-mig-status-attr:migstat | None                                            |
| os-vol-mig-status-attr:name_id | None                                            |
| os-vol-tenant-attr:tenant_id   | 273cdbd1bd94460fa919d321b70ff251                |
| replication_status             | None                                            |
| size                           | 3                                               |
| snapshot_id                    | None                                            |
| source_volid                   | 9b09afde-c401-4194-8352-52a230f3b1ca            |
| status                         | available                                       |
| updated_at                     | 2020-01-31T03:07:55.000000                      |
| user_id                        | 23fc4ef1ce904a6a86a6883ff0276733                |
| volume_image_metadata          | checksum : 443b7623e27ecf03dc9e01ee93f67afe     |
|                                | container_format : bare                         |
|                                | disk_format : qcow2                             |
|                                | image_id : bebc3eba-f7a7-4a47-ba8f-88703cf98962 |
|                                | image_name : cirros2                            |
|                                | min_disk : 0                                    |
|                                | min_ram : 0                                     |
|                                | signature_verified : False                      |
|                                | size : 12716032                                 |
| volume_type                    | LUKS                                            |
+--------------------------------+-------------------------------------------------+

(overcloud) [stack@puma52 ~]$ cinder list
+--------------------------------------+-----------+-----------------------+------+-------------+----------+-------------+
| ID                                   | Status    | Name                  | Size | Volume Type | Bootable | Attached to |
+--------------------------------------+-----------+-----------------------+------+-------------+----------+-------------+
| 62dc7dda-4f70-4d6d-a5be-699553ba8858 | available | ClonedEncVol          | 3    | LUKS        | true     |             |
| 9b09afde-c401-4194-8352-52a230f3b1ca | available | SourceEncVolOn3ParFC  | 3    | LUKS        | true     |             |
+--------------------------------------+-----------+-----------------------+------+-------------+----------+-------------+




Good to verify, successfully cloned an encrypted volume backed 3par FC backend.

Comment 17 Tzach Shefi 2020-01-31 03:38:15 UTC

Ops forgot to add above also retested on a second deployment this time volumes were backed by LVM (iscsi) it too passed fine. 

(overcloud) [stack@undercloud-0 ~]$ cinder list
+--------------------------------------+-----------+----------------------+------+-------------+----------+-------------+
| ID                                   | Status    | Name                 | Size | Volume Type | Bootable | Attached to |
+--------------------------------------+-----------+----------------------+------+-------------+----------+-------------+
| 0c705680-2ce8-4e27-9383-eb4cb43f1bfb | available | ClonedEncLVMIscsi    | 2    | LUKS2       | true     |             |
| aa234d20-9198-4ae9-8504-1af43d2fe5de | available | SourceEcnVol         | 2    | LUKS2       | true     |

Comment 21 errata-xmlrpc 2020-02-06 14:44:22 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:0283

Comment 22 Red Hat Bugzilla 2023-09-14 05:50:50 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days

Note You need to log in before you can comment on or make changes to this bug.