Bug 2004444 - Try to enable cinderlib repos on host during host upgrade
Summary: Try to enable cinderlib repos on host during host upgrade
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine
Version: 4.4.8
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-4.4.9
: ---
Assignee: Martin Perina
QA Contact: Pavol Brilla
URL:
Whiteboard:
Depends On: 1983021
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-09-15 10:29 UTC by Michal Skrivanek
Modified: 2021-11-17 19:59 UTC (History)
5 users (show)

Fixed In Version: ovirt-engine-4.4.9.2
Doc Type: Release Note
Doc Text:
During host installation or host upgrade, the Manager checks if cinderlib and Ceph packages are available. If not, it tries to enable the required channels specified in the documentation. If there is a problem during channel enablement, an error is raised in the audit_log, and customers need to enable the channel manually and retry the installation or upgrade.
Clone Of:
Environment:
Last Closed: 2021-11-16 14:46:57 UTC
oVirt Team: Infra
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHV-43645 0 None None None 2021-09-15 10:30:09 UTC
Red Hat Knowledge Base (Solution) 6517611 0 None None None 2021-11-17 19:59:47 UTC
Red Hat Product Errata RHSA-2021:4626 0 None None None 2021-11-16 14:47:07 UTC
oVirt gerrit 117027 0 master MERGED core: Extract AV setup into a separate file 2021-10-13 16:57:37 UTC
oVirt gerrit 117028 0 master MERGED core: Enable Cinderlib/Ceph repos when unavailable for RHV 2021-10-13 16:57:39 UTC
oVirt gerrit 117139 0 ovirt-engine-4.4 MERGED core: Extract AV setup into a separate file 2021-10-13 18:53:33 UTC
oVirt gerrit 117140 0 ovirt-engine-4.4 MERGED core: Enable Cinderlib/Ceph repos when unavailable for RHV 2021-10-13 18:53:37 UTC

Description Michal Skrivanek 2021-09-15 10:29:37 UTC
For making sure we run with a tested set of (mostly) python dependencies we should include all the cinderlib/ceph dependencies we require. Since it's annoying to enable that on every host maually let's try to automate that in host upgrade, we alreayd have code manipulating with virt streams

We want to enable:
openstack-16.2-cinderlib-for-rhel-8-x86_64-rpms
rhceph-4-tools-for-rhel-8-x86_64-rpms

assuming that the subscription is already there and the system is attached to a valid SKU that has them available.
Since it's also possible to use local mirrors or remap channel names in satellite any error should not be treated as a blocker and we should continue with upgrade.

Comment 2 Sandro Bonazzola 2021-09-16 07:43:51 UTC
Can you please detail the changes needed?
Right now oVirt ovirt-host package is requiring cinderlib dependenices for all hosts and ovirt-release44 is providing these dependencies.
On the other side RHV ovirt-host package is not requiring cinderlib dependencies.

Are we going to align oVirt to RHV and have the ovirt-ansible-host-deploy taking care of repos and deps instead?

If so, are we moving the requirements on cinderlib from ovirt-host to oVirt Node / RHV-H kickstart?

Comment 4 Martin Perina 2021-09-16 08:00:11 UTC
(In reply to Sandro Bonazzola from comment #2)
> Can you please detail the changes needed?
> Right now oVirt ovirt-host package is requiring cinderlib dependenices for
> all hosts and ovirt-release44 is providing these dependencies.
> On the other side RHV ovirt-host package is not requiring cinderlib
> dependencies.
> 
> Are we going to align oVirt to RHV and have the ovirt-ansible-host-deploy
> taking care of repos and deps instead?
> 
> If so, are we moving the requirements on cinderlib from ovirt-host to oVirt
> Node / RHV-H kickstart?

This is purely RHV feature, the idea is:

1. During host upgrade we are going to check if some selected ceph/cinderlib package is available
2. If not, we will try to enable channels. And if there will be some error enabling them, we will add an error to audit log, but the upgrade flow is going to continue

So there will be value only for RHEL hypervisors, where we are going to automatically enable channels, so customers won't need to enable them manually. Of course if they have some non-standard channel setup (for example satellite with custom channel names), this feature will not help them and they will need to manually setup their channels on each host.

So this change is not visible in oVirt, because we should already have both repos in ovirt-release-44. And it will also not be visible in standard QE setup, where they have required repositories enabled

Comment 6 Marina Kalinin 2021-09-20 19:26:57 UTC
How can we make sure that any special subscriptions are needed? Or this is already handled, since we have the instructions in the appendix?

Comment 7 Sandro Bonazzola 2021-09-24 10:15:40 UTC
(In reply to Martin Perina from comment #4)

> This is purely RHV feature, the idea is:
> 
> 1. During host upgrade we are going to check if some selected ceph/cinderlib
> package is available
> 2. If not, we will try to enable channels. And if there will be some error
> enabling them, we will add an error to audit log, but the upgrade flow is
> going to continue
> 
> So there will be value only for RHEL hypervisors, where we are going to
> automatically enable channels, so customers won't need to enable them
> manually. Of course if they have some non-standard channel setup (for
> example satellite with custom channel names), this feature will not help
> them and they will need to manually setup their channels on each host.

Given above, I assume that:
- ovirt-host upstream needs to keep requiring cinderlib
- ovirt-host downstream needs to keep NOT requiring cinderlib
- RHV-H requires a change in its kickstart for including cinderlib packages by default.

Correct?

Comment 8 Michal Skrivanek 2021-09-30 07:03:48 UTC
(In reply to Sandro Bonazzola from comment #7)
> 
> Given above, I assume that:
> - ovirt-host upstream needs to keep requiring cinderlib

yes

> - ovirt-host downstream needs to keep NOT requiring cinderlib

no, it shall also require cinderlib

> - RHV-H requires a change in its kickstart for including cinderlib packages
> by default.

it doesn't need to when ovirt-host requires it

Comment 9 Martin Tessun 2021-09-30 10:00:27 UTC
Hi Marina,

(In reply to Marina Kalinin from comment #6)
> How can we make sure that any special subscriptions are needed? Or this is
> already handled, since we have the instructions in the appendix?

the repos are already part of the RHV SKUs, so no additional SKUs needed. This is "just" about enabling the repo on the Hypervisors.

Comment 11 Marina Kalinin 2021-09-30 14:31:40 UTC
Can we please provide good release note here explaining that now cinderlib repos are required to be enabled by default and this RFE will try to add them automatically, but if fails, would be on the user to do so manually. On each host.

Comment 13 RHEL Program Management 2021-10-13 19:06:02 UTC
The documentation text flag should only be set after 'doc text' field is provided. Please provide the documentation text and set the flag to '?' again.

Comment 15 RHEL Program Management 2021-10-13 19:07:56 UTC
The documentation text flag should only be set after 'doc text' field is provided. Please provide the documentation text and set the flag to '?' again.

Comment 19 Pavol Brilla 2021-10-26 12:31:28 UTC
Check against 4 RHV SKUs which I have access to ( MCT2927, RV00045, RV00046, RV00033 ) and I had access on all 4 to the 16.2 cinderlib repo
# subscription-manager repos | grep -E "openstack-16.2-cinderlib-for-rhel-8-x86_64-rpms|rhceph-4-tools-for-rhel-8-x86_64-rpms"
Repo ID:   rhceph-4-tools-for-rhel-8-x86_64-rpms
Repo ID:   openstack-16.2-cinderlib-for-rhel-8-x86_64-rpms

Comment 20 Pavol Brilla 2021-10-27 10:05:57 UTC
marking as verified with comment above, as current QE setup cannot mirror deployment from CDN

Comment 24 errata-xmlrpc 2021-11-16 14:46:57 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: RHV Manager (ovirt-engine) security update [ovirt-4.4.9]), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:4626


Note You need to log in before you can comment on or make changes to this bug.