- Issued:
- 2019-01-16
- Updated:
- 2019-01-16
RHBA-2019:0087 - Bug Fix Advisory
Synopsis
openstack-nova bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Compute packages that resolve various issues are now
available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
- OpenStack Compute service
OpenStack Compute (nova) launches and schedules large networks of virtual
machines, creating a redundant and scalable cloud computing platform.
Compute provides the software, control panels, and APIs required to
orchestrate a cloud, including running virtual machine instances and
controlling access through users and projects.
Changes to the openstack-nova component:
- This feature allows you to create instances with trusted SR-IOV virtual
functions (VFs), such as changing the MAC address of the VF and enable
promiscuous mode directly from the guest instance. These functions help you
configure failover VFs for instances directly from the instance.
To configure trusted mode for VFs, you first set the `trusted` value of the
`[pci] passthrough_whitelist` JSON configuration option in nova.conf. You
then create the port with the `trusted=true` attribute in the binding
profile. Make sure that the `vnic-type` attribute has the `hw_veb` or
`direct` values. (BZ#1636395)
- Previously, the CPU thread policy applied also to isolated emulator
threads. This caused a collision of CPU core consumption if you set both
`hw:emulator_threads_policy` and `hw:cpu_thread_policy` properties in the
instance flavor.
This bug fix separates the policies so that isolated emulator threads now
consume a single host core for each instance, regardless of the CPU thread
policy of the instance. (BZ#1608105)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.5.
The Red Hat OpenStack Platform 13 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 13, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack for IBM Power 13 ppc64le
- Red Hat OpenStack 13 x86_64
Fixes
- BZ - 1636395 - [RFE][nova][13]: Trusted Virtual Functions
- BZ - 1653363 - Rebase openstack-nova to b5e8702f5737fff432cd0e4b461f80b368ac42ff
- BZ - 1656369 - Random failures at host evacuate time (> 30 vms), not live-migration.
CVEs
(none)
References
(none)
Red Hat OpenStack for IBM Power 13
| SRPM | |
|---|---|
| openstack-nova-17.0.7-5.el7ost.src.rpm | SHA-256: 03a6a6eb2ef71a677a845b20880ccdf2f90f161db9f1ea576a5eb5e9e4457ed8 |
| ppc64le | |
| openstack-nova-17.0.7-5.el7ost.noarch.rpm | SHA-256: 12cb89e21c78803b89c2dcc5d83224c7ab0947d79a41773b89fb724c67e226bd |
| openstack-nova-api-17.0.7-5.el7ost.noarch.rpm | SHA-256: e58919ced04f57091ae824691a2a29b27252fc348cd23879829715000b610902 |
| openstack-nova-cells-17.0.7-5.el7ost.noarch.rpm | SHA-256: fbcb34b5e7b953d4cc705e1b68b545ef33d24584a20b25bda0ea832643effce5 |
| openstack-nova-common-17.0.7-5.el7ost.noarch.rpm | SHA-256: 42d668dce15ce8a4cdaf14bd4f788bdfc3c4105baa08e47a9212f79674928ed7 |
| openstack-nova-compute-17.0.7-5.el7ost.noarch.rpm | SHA-256: 7c01fdf77a990da0e646c621aee0f9840496760acfd357b757a443c191a2fc5f |
| openstack-nova-conductor-17.0.7-5.el7ost.noarch.rpm | SHA-256: d0bd62f3c2c71ee59f38ad4430a9e5b5ddc135a13ec2e2339ce2826f00576130 |
| openstack-nova-console-17.0.7-5.el7ost.noarch.rpm | SHA-256: aab6becb2bbe140e81d873243da9385a9ae76780b70bdff0d671c524077134d6 |
| openstack-nova-migration-17.0.7-5.el7ost.noarch.rpm | SHA-256: c74092022289c10c075e120ca784451e8daeb2c5f123becafda5e52e32f233fb |
| openstack-nova-network-17.0.7-5.el7ost.noarch.rpm | SHA-256: 8a25ce3d451a9b2b08eb119a16b0d53f37a333e7b01d53f325223cf98758ac63 |
| openstack-nova-novncproxy-17.0.7-5.el7ost.noarch.rpm | SHA-256: 421b9b1b4317dbc438a628b6837a250857723b0eaab2215eb7f23f5b5fffa0f1 |
| openstack-nova-placement-api-17.0.7-5.el7ost.noarch.rpm | SHA-256: 03e739bdf4452d60a860e443916c5cb9da313690bed523875f5512b2366485ad |
| openstack-nova-scheduler-17.0.7-5.el7ost.noarch.rpm | SHA-256: 96fd66e0c46b54868a55d3d1fe97f3a454c0b2ca5fe4855729bd661c39dbd427 |
| openstack-nova-serialproxy-17.0.7-5.el7ost.noarch.rpm | SHA-256: e6adee556b46f1a37d539ea408731fa1c61f7789a3468cb15f29bc52f0849d25 |
| openstack-nova-spicehtml5proxy-17.0.7-5.el7ost.noarch.rpm | SHA-256: 913e5d17dec4a6a10380b5bf466f2a17f5172c28c491b8472efefaadb0c2e341 |
| python-nova-17.0.7-5.el7ost.noarch.rpm | SHA-256: ac55041a783e5a2cec795f51c7d5723646e5ec56105c762190b4c284d2e679bc |
| python-nova-tests-17.0.7-5.el7ost.noarch.rpm | SHA-256: f94afde60cb996e5d8f62d61364775c133e481f718406db4fa42ce84296b9e11 |
Red Hat OpenStack 13
| SRPM | |
|---|---|
| openstack-nova-17.0.7-5.el7ost.src.rpm | SHA-256: 03a6a6eb2ef71a677a845b20880ccdf2f90f161db9f1ea576a5eb5e9e4457ed8 |
| x86_64 | |
| openstack-nova-17.0.7-5.el7ost.noarch.rpm | SHA-256: 12cb89e21c78803b89c2dcc5d83224c7ab0947d79a41773b89fb724c67e226bd |
| openstack-nova-api-17.0.7-5.el7ost.noarch.rpm | SHA-256: e58919ced04f57091ae824691a2a29b27252fc348cd23879829715000b610902 |
| openstack-nova-cells-17.0.7-5.el7ost.noarch.rpm | SHA-256: fbcb34b5e7b953d4cc705e1b68b545ef33d24584a20b25bda0ea832643effce5 |
| openstack-nova-common-17.0.7-5.el7ost.noarch.rpm | SHA-256: 42d668dce15ce8a4cdaf14bd4f788bdfc3c4105baa08e47a9212f79674928ed7 |
| openstack-nova-compute-17.0.7-5.el7ost.noarch.rpm | SHA-256: 7c01fdf77a990da0e646c621aee0f9840496760acfd357b757a443c191a2fc5f |
| openstack-nova-conductor-17.0.7-5.el7ost.noarch.rpm | SHA-256: d0bd62f3c2c71ee59f38ad4430a9e5b5ddc135a13ec2e2339ce2826f00576130 |
| openstack-nova-console-17.0.7-5.el7ost.noarch.rpm | SHA-256: aab6becb2bbe140e81d873243da9385a9ae76780b70bdff0d671c524077134d6 |
| openstack-nova-migration-17.0.7-5.el7ost.noarch.rpm | SHA-256: c74092022289c10c075e120ca784451e8daeb2c5f123becafda5e52e32f233fb |
| openstack-nova-network-17.0.7-5.el7ost.noarch.rpm | SHA-256: 8a25ce3d451a9b2b08eb119a16b0d53f37a333e7b01d53f325223cf98758ac63 |
| openstack-nova-novncproxy-17.0.7-5.el7ost.noarch.rpm | SHA-256: 421b9b1b4317dbc438a628b6837a250857723b0eaab2215eb7f23f5b5fffa0f1 |
| openstack-nova-placement-api-17.0.7-5.el7ost.noarch.rpm | SHA-256: 03e739bdf4452d60a860e443916c5cb9da313690bed523875f5512b2366485ad |
| openstack-nova-scheduler-17.0.7-5.el7ost.noarch.rpm | SHA-256: 96fd66e0c46b54868a55d3d1fe97f3a454c0b2ca5fe4855729bd661c39dbd427 |
| openstack-nova-serialproxy-17.0.7-5.el7ost.noarch.rpm | SHA-256: e6adee556b46f1a37d539ea408731fa1c61f7789a3468cb15f29bc52f0849d25 |
| openstack-nova-spicehtml5proxy-17.0.7-5.el7ost.noarch.rpm | SHA-256: 913e5d17dec4a6a10380b5bf466f2a17f5172c28c491b8472efefaadb0c2e341 |
| python-nova-17.0.7-5.el7ost.noarch.rpm | SHA-256: ac55041a783e5a2cec795f51c7d5723646e5ec56105c762190b4c284d2e679bc |
| python-nova-tests-17.0.7-5.el7ost.noarch.rpm | SHA-256: f94afde60cb996e5d8f62d61364775c133e481f718406db4fa42ce84296b9e11 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.