RHBA-2014:1116 - Bug Fix Advisory

Topic

Updated packages for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse)
for RHEL 7 are now available.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

This advisory includes the following new packages:

• openstack-heat-templates - Templates for the OpenStack Orchestration Service

(Heat)

• oz - Library and utilities for automated guest OS installs

This advisory includes a rebase of the following packages:

• OpenVSWitch 2.1.2.
• openstack-sahara 2014.1.2 (Technology Preview)
• python-django-sahara 2014.1.2 (Technology Preview)

The openvswitch rpm package rebase fixes several important bugs, including:

• Open vSwitch has been changed to not bring 'UP' internal ports by default
• Non-root users can now check openvswitch service status.
• Added support for more port types in the ifcfg-*.
• The 'ovsdbmonitor' package is now obsolete.
• The 'openvswitch-controller' package is now obsolete.

Some of the issues openstack-sahara package rebase resolves are as follows:

• Fix to closing of HTTP session in Ambari plugin.
• Fix to put_file_to_hdfs method in hdfs_helper.
• Setting python hash seed to 0 in tox.ini.
• Updated global requirements.
• Fix to deleting transient cluster before job is started.

These packages also fix various bugs, including:

• The Tempest installation depended on Mysql/MariaDB library packages, and a

PackStack installation with Tempest would fail. With this update, all SQL
dependencies have been removed; PackStack can now successfully install
Tempest. (BZ#1098054)

• SELinux prevented wsrep_sst_script from performing an lsof command.

SELinux also prevented MariaDB from using port 4444. As a result, Galera
could not join a cluster. With this update, the wsrep_sst_script is now
allowed to execute lsof and relabel port 4444 to mariadb_port_t, so that
MariaDB can successfully join a cluster and the lsof command succeeds.
(BZ#1122688)

• With this update, openstack-status now supports new services like

openstack-ceilometer-notification and neutron-metering-agent. (BZ#1096054)

Solution

Before applying this update, ensure all previously released errata
relevant to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 5 for RHEL 7 runs on Red Hat
Enterprise Linux 7.0.

The Red Hat Enterprise Linux OpenStack Platform 5 for RHEL 7 Release Notes
contain the following:

• An explanation of the way in which the provided components interact to form a

working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 5 for

RHEL 7, including which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/index.html

This update is available through the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat OpenStack 5.0 for RHEL 7 x86_64

Fixes

• BZ - 1096054 - openstack-status should show the status of 'openstack-ceilometer-notification'
• BZ - 1104867 - Paramiko SSH error on multiple cinder volume instances
• BZ - 1108369 - stackforge/puppet-horizon/blob/master/templates/local_se ttings.py.erb changes in stackforge is not in openstack-puppet/modules/horizon/templates/local_settings.py.erb
• BZ - 1120584 - Add support for OCF resources into pacemaker manifests
• BZ - 1122688 - Galera wsrep_sst_rsync selinux denials
• BZ - 1127432 - Rebase openstack-sahara to 2014.1.2
• BZ - 1127443 - Rebase python-django-sahara to 2014.1.2

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#none