Bug 1870155 - FFU - system_upgrade fails when Ceph OSDs have dmcrypt: true (Inhibitor: LUKS encrypted partition detected)
Summary: FFU - system_upgrade fails when Ceph OSDs have dmcrypt: true (Inhibitor: LUKS...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: documentation
Version: 16.1 (Train)
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: zstream
: 16.1 (Train on RHEL 8.2)
Assignee: Dan Macpherson
QA Contact: RHOS Documentation Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-08-19 13:00 UTC by Francesco Pantano
Modified: 2020-10-22 06:41 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-08-25 15:52:59 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Francesco Pantano 2020-08-19 13:00:58 UTC
Description of problem:

When Ceph OSDs have dmcrypt: true (this means we have /dev/sdX => lvm => luks),
the FFU process fails due to:

```
Inhibitor: LUKS encrypted partition detected
```

There's no suggestions in leapp-report.txt on how this problem can be solved, and so far, the only workaround is to delete the luks actor that prevents the upgrade.



Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Francesco Pantano 2020-08-19 13:29:29 UTC
As per conversation with leapp team, [1] states there are known limitations:

```
Encryption of the whole disk or a partition, or file-system encryption currently cannot be used on a system targeted for an in-place upgrade.
```


[1] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/upgrading_from_rhel_7_to_rhel_8/index#planning-an-upgrade_upgrading-from-rhel-7-to-rhel-8

Comment 4 Dan Macpherson 2020-08-25 14:32:23 UTC
Hi Francesco and Lukas,

Currently, the doc has a Leapp Limitations section that links to the same section identified in comment #1:

https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html-single/framework_for_upgrades_13_to_16.1/index#leapp-upgrade-usage-in-red-hat-openstack-platform

What additional documentation is required? From the looks of it, there are no workarounds for this issue. Do we need to specifically call out this limitation in the context of Ceph Storage? Or is the link enough?

Comment 5 Dan Macpherson 2020-08-25 15:52:59 UTC
Discussed this with Lukas and Francesco over IRC. Have added the following text to call out disk encyprtion limitation:

"In particular, you cannot perform a Leapp upgrade on nodes that use encryption of the whole disk or a partition, such as LUKS encryption, or file-system encryption. This limitation affects Ceph OSD nodes that you have configured with the dmcrypt: true parameter."

https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html-single/framework_for_upgrades_13_to_16.1/index#leapp-upgrade-usage-in-red-hat-openstack-platform

Comment 7 John Fulton 2020-10-05 19:00:45 UTC
BZ 1885335 tracks LEAPP having a disk ignore list


Note You need to log in before you can comment on or make changes to this bug.