RHBA-2013:0593 - Bug Fix Advisory

Topic

New and updated packages that fix various bugs and add enhancements are now
available for Red Hat OpenStack 2.0 (Folsom) Preview.

Description

The Red Hat OpenStack 2.0 (Folsom) Preview packages provide the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on standard physical hardware. The packages provided include:

• OpenStack Compute (code name Nova), which provides services for

provisioning, managing, and using virtual machine instances.

• OpenStack Image Service (code name Glance), which provides services for

the storage, discovery, and retrieval of virtual machine disk images.

• OpenStack Identity Service (code name Keystone), which provides identity,

token, catalog, and policy services.

• OpenStack Network Service, which provides dynamic virtual network

services.

• OpenStack Object Storage (code name Swift), which provides a highly

available and distributed object store service.

• OpenStack Volume (code name Cinder), which provides services to manage

and access block storage volumes for use by virtual machine instances

• OpenStack Dashboard (code-named Horizon), a web user interface for

OpenStack.

Red Hat OpenStack 2.0 (Folsom) Preview packages also include:

• Oz, a set of libraries and utilities for performing automated guest operating

system installations, with minimal input from the user. Oz provides a tool for
image creation for import of images into Glance.

In this update to Red Hat OpenStack 2.0 (Folsom) Preview the
openstack-nova, openstack-glance, openstack-keystone, openstack-quantum,
openstack-cinder, openstack-utils, python-django-horizon, python-novaclient,
python-keystoneclient, python-quantumclient, dnsmasq-utils and qemu-kvm-rhev
packages have been updated. New openstack-selinux and oz packages are now
available for Red Hat OpenStack 2.0 (Folsom) Preview.

The following known issue has been identified with these packages, impacting
deployments performed without the use of the packstack utility:

• Currently Glance and the associated utilities only retrieve configuration

values from /etc/glance/glance-registry.conf and /etc/glance/glance-api.conf. As
a result they ignore distribution specific configuration values defined in other
files.

To work around this issue you must ensure that the sql_connection configuration
key in both /etc/glance/glance-registry.conf and /etc/glance/glance-api.conf is
uncommented and contains the correct details for the MySQL server in your
environment. This change must be made on all systems you wish to host Glance on
and run the associated utilities from.

All users of Red Hat OpenStack 2.0 (Folsom) Preview are advised to install
these new and updated packages.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat OpenStack folsom x86_64

Fixes

• BZ - 882979 - When installing python-swiftclient, python-keystoneclient should be installed by dependency.
• BZ - 885529 - swift replication produces SELinux AVC denials
• BZ - 887811 - a comprehensive glance-*.conf files should be included
• BZ - 888091 - glance-manage does not list possible commands
• BZ - 888545 - glance image-create premature terminate with checksum leaks data on the glance image store
• BZ - 888939 - Should install nova.bash_completion
• BZ - 888945 - [RFE] Should install cinder.bash_completion
• BZ - 889786 - OVS maintains tap devices after reboot
• BZ - 889876 - quantum CIDR is not checked
• BZ - 892320 - Endpoint not found error showing up in httpd error.log for Horizon
• BZ - 896115 - Allow nova to directly copy a file out of glance
• BZ - 896152 - Update client library/commandline from upstream stable branches and selected backports from Grizzly
• BZ - 896153 - Update client library/commandline from upstream stable branches and selected backports from Grizzly
• BZ - 907854 - DHCP agent does not listen on a unique queue
• BZ - 909137 - Nova - Update to the latest Folsom stable release 2012.2.3
• BZ - 909286 - rpc_backend no longer in /etc/nova/nova.conf breaks nova-manage at least
• BZ - 909418 - rpc_backend no longer in /etc/cinder/cinder.conf breaks cinder-manage at least
• BZ - 909434 - Glance - Update to the latest Folsom stable release 2012.2.3
• BZ - 909460 - Cinder - Update to the latest Folsom stable release 2012.2.3
• BZ - 913197 - Injection of SSH keys in to instances results in AVC denials

CVEs

(none)

References

• https://access.redhat.com/knowledge/articles/11258