- Issued:
- 2018-08-29
- Updated:
- 2018-08-29
RHBA-2018:2593 - Bug Fix Advisory
Synopsis
openstack-ironic bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Bare Metal Provisioning packages that resolve various
issues are now available for Red Hat OpenStack Platform 13.0 (Queens) for
RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying, and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware. This advisory includes packages for:
- OpenStack Bare Metal Provisioning service
OpenStack Bare Metal Provisioning service (ironic) provides an API for
management and provisioning of physical machines.
Changes to the openstack-ironic component:
- The ironic integrated Dell Remote Access Controller (iDRAC) management hardware interface implementation, 'idrac', set_boot_device() function, located in ironic.drivers.modules.drac.management, could successfully set a boot device that would persist during future boots only when the Dell EMC server's boot mode was set to BIOS. The root cause was that the function understood only a single persistent boot mode, BIOS, and it was hard coded.
PERSISTENT_BOOT_MODE = 'IPL'
Initial Program Load (IPL) is a synonym for legacy BIOS boot mode. The iDRAC does not report nor make visible the boot source lists for persistent boot modes that are not configured as the server's current boot mode. Only the list associated with the configured boot mode is reported and can be modified. So, when the boot mode is configured to be UEFI, the iDRAC permits only its boot source list to be modified. However, set_boot_device() had been capable of only modifying the boot source list for BIOS (IPL), which was not reported. Its attempt to access the wrong, unreported boot source list failed. As a consequence, Dell EMC servers managed by the ironic iDRAC hardware type, 'idrac', failed to boot into the deployed operating system when the boot mode is UEFI, and errors appeared in the ironic conductor log.
The ironic iDRAC management hardware interface implementation determines the configured persistent boot mode at run-time and its boot source list is modified. The hard coding of a persistent boot mode has been eliminated.
As a result, Dell EMC PowerEdge 13th and 14th generation servers managed by the ironic iDRAC hardware type successfully boot into the deployed operating system for either persistent boot mode, BIOS, or UEFI. The bug is not resolved for PowerEdge 12th generation and earlier servers; however, BIOS boot mode continues to be supported. (BZ#1614964)
- Previously, Ironic considered just one IPMI error as retryable. That might have caused unjustified Ironic failure. With this enhancement, Ironic treats more types of IPMI error messages as retryable by the IPMI-backed hardware interfaces, such as power and management hardware interfaces. Specifically, "Node busy", "Timeout", "Out of space", and "BMC initialization in progress" IPMI errors cause Ironic to retry the IPMI command. The result is improved reliability of IPMI based communication with BMC. (BZ#1564918)
Solution
Before applying this update, ensure all previously released errata relevant to your system have been applied.
Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.5.
The Red Hat OpenStack Platform 13 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 13, including which channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/
This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux Workstation 7 x86_64
- Red Hat Enterprise Linux Desktop 7 x86_64
- Red Hat OpenStack for IBM Power 13 ppc64le
- Red Hat OpenStack 13 x86_64
Fixes
- BZ - 1564774 - [ironic] Fetching necessary kernel and ramdisk missing validation
- BZ - 1564918 - On ipmitool failure, it doesn't look like ironic is retrying eventhough it says after "4 retry"
- BZ - 1592432 - Ironic API should return 503 for action requiring a conductor when no conductors are online
- BZ - 1608057 - Rebase python-ironicclient to 2.2.1
- BZ - 1608135 - Rebase openstack-ironic-python-agent to 3.2.1
- BZ - 1614964 - [Ironic] iDRAC hardware type does not work with UEFI boot mode (OSP-13)
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 7
SRPM | |
---|---|
python-ironicclient-2.2.1-1.el7ost.src.rpm | SHA-256: 2e7ec75ec82dc1957c615472b855e8e758c3ab66d85c59b258668e8de969fd01 |
x86_64 | |
python2-ironicclient-2.2.1-1.el7ost.noarch.rpm | SHA-256: 709e97674909c206cac15e657398ce6511f28d99757d314bf45bc9b8411b4027 |
Red Hat Enterprise Linux Workstation 7
SRPM | |
---|---|
python-ironicclient-2.2.1-1.el7ost.src.rpm | SHA-256: 2e7ec75ec82dc1957c615472b855e8e758c3ab66d85c59b258668e8de969fd01 |
x86_64 | |
python2-ironicclient-2.2.1-1.el7ost.noarch.rpm | SHA-256: 709e97674909c206cac15e657398ce6511f28d99757d314bf45bc9b8411b4027 |
Red Hat Enterprise Linux Desktop 7
SRPM | |
---|---|
python-ironicclient-2.2.1-1.el7ost.src.rpm | SHA-256: 2e7ec75ec82dc1957c615472b855e8e758c3ab66d85c59b258668e8de969fd01 |
x86_64 | |
python2-ironicclient-2.2.1-1.el7ost.noarch.rpm | SHA-256: 709e97674909c206cac15e657398ce6511f28d99757d314bf45bc9b8411b4027 |
Red Hat OpenStack for IBM Power 13
SRPM | |
---|---|
openstack-ironic-10.1.3-5.el7ost.src.rpm | SHA-256: e8f0412f85c800ed75ef8dd4f384a30e2cd038c6b8a73ca1026953326d93bec9 |
openstack-ironic-inspector-7.2.1-2.el7ost.src.rpm | SHA-256: 136fdd8a0286040bc140c46fdf3917c49c9ac4fb193e05236641d33329ec9931 |
openstack-ironic-python-agent-3.2.1-2.el7ost.src.rpm | SHA-256: b84544f98711ffcce97a273af97c31ec65a386ee8162feabd4b1fd10769a645d |
python-ironicclient-2.2.1-1.el7ost.src.rpm | SHA-256: 2e7ec75ec82dc1957c615472b855e8e758c3ab66d85c59b258668e8de969fd01 |
ppc64le | |
openstack-ironic-api-10.1.3-5.el7ost.noarch.rpm | SHA-256: 31af1ec060fa646fbc84870d4fce3d62c2966f442bb3170449d5341d9c52f4cc |
openstack-ironic-common-10.1.3-5.el7ost.noarch.rpm | SHA-256: 139da5f913e34f44447e10ade28537db7a587c3f87f0349f0fe50766a03aaf49 |
openstack-ironic-conductor-10.1.3-5.el7ost.noarch.rpm | SHA-256: c7676e8ef921da5391d03b187c10541979790fd3551ded7d6863c786fd117725 |
openstack-ironic-inspector-7.2.1-2.el7ost.noarch.rpm | SHA-256: f2d2e1614d813399cb61d3e67ccad71780e9bfe990a43c4d8395274b4029263d |
openstack-ironic-python-agent-3.2.1-2.el7ost.noarch.rpm | SHA-256: 03a52bd78e8c57d82d2448aa188f2ead1ee7deb933c5516d0fd08057ef95e3be |
python2-ironic-python-agent-3.2.1-2.el7ost.noarch.rpm | SHA-256: ef3b3cc13e3bfcc5c3da9abe608bec037b1128eb2f636cc2d945c9db682f3dde |
python2-ironicclient-2.2.1-1.el7ost.noarch.rpm | SHA-256: 709e97674909c206cac15e657398ce6511f28d99757d314bf45bc9b8411b4027 |
Red Hat OpenStack 13
SRPM | |
---|---|
openstack-ironic-10.1.3-5.el7ost.src.rpm | SHA-256: e8f0412f85c800ed75ef8dd4f384a30e2cd038c6b8a73ca1026953326d93bec9 |
openstack-ironic-inspector-7.2.1-2.el7ost.src.rpm | SHA-256: 136fdd8a0286040bc140c46fdf3917c49c9ac4fb193e05236641d33329ec9931 |
openstack-ironic-python-agent-3.2.1-2.el7ost.src.rpm | SHA-256: b84544f98711ffcce97a273af97c31ec65a386ee8162feabd4b1fd10769a645d |
python-ironicclient-2.2.1-1.el7ost.src.rpm | SHA-256: 2e7ec75ec82dc1957c615472b855e8e758c3ab66d85c59b258668e8de969fd01 |
x86_64 | |
openstack-ironic-api-10.1.3-5.el7ost.noarch.rpm | SHA-256: 31af1ec060fa646fbc84870d4fce3d62c2966f442bb3170449d5341d9c52f4cc |
openstack-ironic-common-10.1.3-5.el7ost.noarch.rpm | SHA-256: 139da5f913e34f44447e10ade28537db7a587c3f87f0349f0fe50766a03aaf49 |
openstack-ironic-conductor-10.1.3-5.el7ost.noarch.rpm | SHA-256: c7676e8ef921da5391d03b187c10541979790fd3551ded7d6863c786fd117725 |
openstack-ironic-inspector-7.2.1-2.el7ost.noarch.rpm | SHA-256: f2d2e1614d813399cb61d3e67ccad71780e9bfe990a43c4d8395274b4029263d |
openstack-ironic-python-agent-3.2.1-2.el7ost.noarch.rpm | SHA-256: 03a52bd78e8c57d82d2448aa188f2ead1ee7deb933c5516d0fd08057ef95e3be |
python2-ironic-python-agent-3.2.1-2.el7ost.noarch.rpm | SHA-256: ef3b3cc13e3bfcc5c3da9abe608bec037b1128eb2f636cc2d945c9db682f3dde |
python2-ironicclient-2.2.1-1.el7ost.noarch.rpm | SHA-256: 709e97674909c206cac15e657398ce6511f28d99757d314bf45bc9b8411b4027 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.