- Issued:
- 2019-04-30
- Updated:
- 2019-04-30
RHBA-2019:0924 - Bug Fix Advisory
Synopsis
openstack-nova bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Compute packages that resolve various issues are now
available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
- OpenStack Compute service
OpenStack Compute (nova) launches and schedules large networks of virtual
machines, creating a redundant and scalable cloud computing platform.
Compute provides the software, control panels, and APIs required to
orchestrate a cloud, including running virtual machine instances and
controlling access through users and projects.
Changes to the openstack-nova component:
- A recent change made memory allocation for instances with NUMA topologies pagesize aware. With this change, memory for instances with NUMA topologies can no longer be oversubscribed.
As a result, memory oversubscription is currently disabled for all instances with a NUMA topology, whereas previously only instances with hugepages were not allowed to use oversubscription. This affects instances with an explicit NUMA topology and those with an implicit topology. An instance can have an implicit NUMA topology due to the use of hugepages or CPU pinning.
If possible, avoid the use of explicit NUMA topologies. If CPU pinning is required, resulting in an implicit NUMA topology, there is no workaround. (BZ#1664701)
- Previously, when detaching and removing an interface from the instance XML, Nova expected all interfaces to have a `target_dev` element in the instance XML. However, not all interfaces have a `target_dev` element. As a result, detaching interfaces appeared to succeed, and Neutron unwired the port, but the interface would remain in the instance XML. Some operations, such as rebooting the instance, failed because the instance remained in a paused state, waiting for the other end of the vhost socket to connect.
With this update, Nova does not expect `vhost-user` interfaces to have `target_dev` elements and the interface is removed correctly from the instance XML. (BZ#1662215)
- Previously, `/dev/random` was used as the source of entropy for instances. `/dev/random` is blocking, which can result in performance issues when creating multiple instances on a host.
With this update, `/dev/urandom` is used as the source of entropy for instances. `/dev/urandom` is non-blocking and does not have the same limitations as `/dev/random`. As a result, the generation of entropy no longer has a significant performance impact when creating multiple instances on a host. (BZ#1689939)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.6.
The Red Hat OpenStack Platform 13 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 13, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack for IBM Power 13 ppc64le
- Red Hat OpenStack 13 x86_64
Fixes
- BZ - 1656068 - RFE[Backport OSP13]: Dedicate pCPU for emulator thread placement per host rather than per guest.
- BZ - 1661196 - [OSP13] ovaException: Unsupported VIF type unbound convert '_nova_to_osvif_vif_unbound'
- BZ - 1662215 - VM will be in paused state because libvirt will wait for the non-existent vhu interface forever
- BZ - 1664701 - [OSP13] Oversubscription broken for instances with NUMA topologies
- BZ - 1689939 - [OSP13] Default random number generation in nova.conf
- BZ - 1696678 - Rebase openstack-nova to 81009b9c0bceeabda9dce5aee4f7673d6618e86f
CVEs
(none)
References
(none)
Red Hat OpenStack for IBM Power 13
SRPM | |
---|---|
openstack-nova-17.0.9-9.el7ost.src.rpm | SHA-256: 7764f7b0c19d2aa16908aea46678084b6a84d8f35bba8ae9d492462372b29df6 |
ppc64le | |
openstack-nova-17.0.9-9.el7ost.noarch.rpm | SHA-256: c8fe0e1303b4944b60fd22ac5b75bc59aaae9090f587d2d3c3f883e7158e279e |
openstack-nova-api-17.0.9-9.el7ost.noarch.rpm | SHA-256: dcb037f2d722d596038c710cc79f858a852ddcf2f905fb6fd295ca13fa1a1d52 |
openstack-nova-cells-17.0.9-9.el7ost.noarch.rpm | SHA-256: e2121f35c8f02465e752368c8e3456a16aafb9aeafb47feedaf74101fd3d29e0 |
openstack-nova-common-17.0.9-9.el7ost.noarch.rpm | SHA-256: 9ac5498e8300c780540acb69a2d34321f992faf8bbc715812b33153caaba8ec7 |
openstack-nova-compute-17.0.9-9.el7ost.noarch.rpm | SHA-256: a9cebd904012434d2962724d4a9b3b3b7f5451728c46b596259bc38dd2b83fab |
openstack-nova-conductor-17.0.9-9.el7ost.noarch.rpm | SHA-256: 0a0740faf8a88bb70825ff7caf7188bf354cf4a5f85def9fa39aa0d25d71d9ea |
openstack-nova-console-17.0.9-9.el7ost.noarch.rpm | SHA-256: 8c27717813decd6759cb00881f85dda2fb141c11b58c94f39007ee0716fdd982 |
openstack-nova-migration-17.0.9-9.el7ost.noarch.rpm | SHA-256: 03eb8876d58711d00eafe6dcf1264f785757cc86f80d423b9b371fad891c0044 |
openstack-nova-network-17.0.9-9.el7ost.noarch.rpm | SHA-256: 515f9cc9ac8bd7e8e950ba008a5a61960dff44e98748e45cb1002a25477e3272 |
openstack-nova-novncproxy-17.0.9-9.el7ost.noarch.rpm | SHA-256: 9093043318b67ca9833854cdd2b1677644b3ca4ad91b07f442b0528f3c38aead |
openstack-nova-placement-api-17.0.9-9.el7ost.noarch.rpm | SHA-256: 6b9c1b1855981fb1e279d65483ba58fb3126f409c39627cafef2a01d56471426 |
openstack-nova-scheduler-17.0.9-9.el7ost.noarch.rpm | SHA-256: bbea61c8e6d3adb5b400b244e74441618e2bf85bd6f4e93ea9f802d1b1a4d18b |
openstack-nova-serialproxy-17.0.9-9.el7ost.noarch.rpm | SHA-256: 952559f9510667a3e617539a114446c61b40da5c63462ece6afb7f67c4776090 |
openstack-nova-spicehtml5proxy-17.0.9-9.el7ost.noarch.rpm | SHA-256: 1cc9d3128705700bc75c1323d42b3d1852036aa3f3f8e87f7461b9c65b701860 |
python-nova-17.0.9-9.el7ost.noarch.rpm | SHA-256: bc55c38c23d623d5da2d8e1075329c48357147555cbf0abb3d76d171752ba3ea |
python-nova-tests-17.0.9-9.el7ost.noarch.rpm | SHA-256: a639da4e4770b92034f540a12e4fb64d819a57892b65a36d2a31407bbbfc1220 |
Red Hat OpenStack 13
SRPM | |
---|---|
openstack-nova-17.0.9-9.el7ost.src.rpm | SHA-256: 7764f7b0c19d2aa16908aea46678084b6a84d8f35bba8ae9d492462372b29df6 |
x86_64 | |
openstack-nova-17.0.9-9.el7ost.noarch.rpm | SHA-256: c8fe0e1303b4944b60fd22ac5b75bc59aaae9090f587d2d3c3f883e7158e279e |
openstack-nova-api-17.0.9-9.el7ost.noarch.rpm | SHA-256: dcb037f2d722d596038c710cc79f858a852ddcf2f905fb6fd295ca13fa1a1d52 |
openstack-nova-cells-17.0.9-9.el7ost.noarch.rpm | SHA-256: e2121f35c8f02465e752368c8e3456a16aafb9aeafb47feedaf74101fd3d29e0 |
openstack-nova-common-17.0.9-9.el7ost.noarch.rpm | SHA-256: 9ac5498e8300c780540acb69a2d34321f992faf8bbc715812b33153caaba8ec7 |
openstack-nova-compute-17.0.9-9.el7ost.noarch.rpm | SHA-256: a9cebd904012434d2962724d4a9b3b3b7f5451728c46b596259bc38dd2b83fab |
openstack-nova-conductor-17.0.9-9.el7ost.noarch.rpm | SHA-256: 0a0740faf8a88bb70825ff7caf7188bf354cf4a5f85def9fa39aa0d25d71d9ea |
openstack-nova-console-17.0.9-9.el7ost.noarch.rpm | SHA-256: 8c27717813decd6759cb00881f85dda2fb141c11b58c94f39007ee0716fdd982 |
openstack-nova-migration-17.0.9-9.el7ost.noarch.rpm | SHA-256: 03eb8876d58711d00eafe6dcf1264f785757cc86f80d423b9b371fad891c0044 |
openstack-nova-network-17.0.9-9.el7ost.noarch.rpm | SHA-256: 515f9cc9ac8bd7e8e950ba008a5a61960dff44e98748e45cb1002a25477e3272 |
openstack-nova-novncproxy-17.0.9-9.el7ost.noarch.rpm | SHA-256: 9093043318b67ca9833854cdd2b1677644b3ca4ad91b07f442b0528f3c38aead |
openstack-nova-placement-api-17.0.9-9.el7ost.noarch.rpm | SHA-256: 6b9c1b1855981fb1e279d65483ba58fb3126f409c39627cafef2a01d56471426 |
openstack-nova-scheduler-17.0.9-9.el7ost.noarch.rpm | SHA-256: bbea61c8e6d3adb5b400b244e74441618e2bf85bd6f4e93ea9f802d1b1a4d18b |
openstack-nova-serialproxy-17.0.9-9.el7ost.noarch.rpm | SHA-256: 952559f9510667a3e617539a114446c61b40da5c63462ece6afb7f67c4776090 |
openstack-nova-spicehtml5proxy-17.0.9-9.el7ost.noarch.rpm | SHA-256: 1cc9d3128705700bc75c1323d42b3d1852036aa3f3f8e87f7461b9c65b701860 |
python-nova-17.0.9-9.el7ost.noarch.rpm | SHA-256: bc55c38c23d623d5da2d8e1075329c48357147555cbf0abb3d76d171752ba3ea |
python-nova-tests-17.0.9-9.el7ost.noarch.rpm | SHA-256: a639da4e4770b92034f540a12e4fb64d819a57892b65a36d2a31407bbbfc1220 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.