RHOSP does not provide the use of SNMPv3 with the Ironic iRMC driver.
Environment
- Red Hat OpenStack Platform 17.0
- Red Hat OpenStack Platform 17.1
Issue
Introspection and power operations on bare metal nodes fail when using the Ironic iRMC driver with SNMPv3.
These problems occur specifically when:
- Either or both power_interface and inspect_interface are set to
irmc
and - SNMP is set to version
v3
Resolution
Not fixed in RHOSP17.
Workaround
The steps to workaround this issue depend on whether FIPS mode is OFF or ON.
Replace <node> with your specific bare metal node ID.
If FIPS mode is OFF:
Option 1: Use non-irmc for power_interface and inspect_interface
- Set power_interface to
ipmitool
and inspect_interface to eitherinspector
orno-inspector
.
$ openstack baremetal node set <node> --power-interface ipmitool
$ openstack baremetal node set <node> --inspect-interface <inspector or no-inspector>
Option 2: Use irmc for either or both power_interface and inspect_interface
- Set
irmc
as the value for either or both power_interface and inspect_interface, but set the SNMP version tov2c
orv1
.
$ openstack baremetal node set <node> --power-interface irmc
$ openstack baremetal node set <node> --inspect-interface <inspector or no-inspector>
$ openstack baremetal node set <node> --driver-info snmp_version=<v2c or v1>
or
$ openstack baremetal node set <node> --power-interface ipmitool
$ openstack baremetal node set <node> --inspect-interface irmc
$ openstack baremetal node set <node> --driver-info snmp_version=<v2c or v1>
or
$ openstack baremetal node set <node> --power-interface irmc
$ openstack baremetal node set <node> --inspect-interface irmc
$ openstack baremetal node set <node> --driver-info snmp_version=<v2c or v1>
If FIPS mode is ON:
Set power_interface to ipmitool
and inspect_interface to either inspector
or no-inspector
.
Also, set the SNMP version to v3
. These are requirements for the Ironic iRMC driver.
$ openstack baremetal node set <node> --power-interface ipmitool
$ openstack baremetal node set <node> --inspect-interface <inspector or no-inspector>
$ openstack baremetal node set <node> --driver-info snmp_version=v3
Root Cause
Ironic iRMC driver requires Cryptodome library to enable SNMPv3 but the library is not provided by Red Hat.
This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.
Comments