RHBA-2013:1082 - Bug Fix Advisory

Topic

Updated openstack-packstack and openstack-cinder packages that fix various bugs
are now available for Red Hat OpenStack 2.1 Preview.

Description

Red Hat OpenStack provides the facilities for building a private or public
infrastructure-as-a-service (IaaS) cloud running on commonly available physical
hardware. Services provided by these packages include:

• OpenStack Compute service ("Nova").
• OpenStack Image service ("Glance").
• OpenStack Identity ("Keystone").
• OpenStack Networking service.
• OpenStack Object Storage service ("Swift").
• OpenStack Volume service ("Cinder").
• OpenStack Dashboard ("Horizon").

Red Hat OpenStack also includes:

• PackStack, a utility for rapidly deploying proof of concept OpenStack clouds.

To learn about each of the components provided and the way they interact to form
a working cloud computing environment refer to the Release Notes document:

https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/2/html/Release_Notes/index.html

These updated packages fix these bugs:

• Previously the volume deletion logic in the Block Storage service (Cinder)

called dm_setup(remove) before initiating the removal of the logical volume
using LVM. As a result buffer I/O errors were being generated and saved to the
kernel log. Volume deletion was also found to timeout more frequently.

The Block Storage service has been updated, removing the dm_setup(remove) call
from the volume deletion logic. (BZ#960182)

• It was discovered that a race condition existed when rebooting Compute (Nova)

nodes. The libvirt-guests script would sometimes start before the Compute
service (Nova) itself. As a result both services would attempt to restart
virtual machine instances that were running on the host prior to shutdown. The
instances would ultimately terminate in error.

PackStack has been updated to ensure that the libvirt-guests script is disabled
on Compute nodes, ensuring that the Computer service has full control of
restarting virtual machine instances. (BZ#920704)

• When creating backing storage for the Block Storage service (Cinder) using a

loopback device PackStack did not modify startup scripts to mount the device on
reboot.

As a result when a node deployed with PackStack was rebooted the Block Storage
service configuration was lost and had to be manually restored. PackStack has
been updated, commands to mount the loopback device when the system starts are
now added to the rc.local script. (BZ#947624)

• The default permissions defined in the Puppet modules used by PackStack was

previously 0644. This resulted in the permissions of the directories created for
the Block Storage (Cinder), Compute (Nova), and Identity (Keystone) services to
be set incorrectly.

In particular this applied to the service specific paths created in the
/var/lib/ and /var/log/ directories. The Puppet modules PackStack uses to deploy
OpenStack have been updated to ensure the correct permissions are defined for
each directory. (BZ#958900)

All users of Red Hat OpenStack 2.1 (Folsom) Preview must install these updated
packages that fix these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat OpenStack folsom x86_64

Fixes

• BZ - 920704 - Guests fail to resume after host reboots
• BZ - 947624 - loopback setup (losetup) for cinder doesn't survive reboot
• BZ - 958900 - packstack sets wrong permission bits on log dirs for cinder, nova, keystone, quantum
• BZ - 960182 - Backport volume_delete device-mapper fix

CVEs

(none)

References

• https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/2/html/Release_Notes/index.html
• https://access.redhat.com/site/articles/11258