RHOSP does not provide the use of SNMPv3 with the Ironic iRMC driver.

Solution In Progress - Updated -

Environment

  • Red Hat OpenStack Platform 17.0
  • Red Hat OpenStack Platform 17.1

Issue

Introspection and power operations on bare metal nodes fail when using the Ironic iRMC driver with SNMPv3.
These problems occur specifically when:

  • Either or both power_interface and inspect_interface are set to irmc and
  • SNMP is set to version v3

Resolution

Not fixed in RHOSP17.

Workaround

The steps to workaround this issue depend on whether FIPS mode is OFF or ON.
Replace <node> with your specific bare metal node ID.

If FIPS mode is OFF:

Option 1: Use non-irmc for power_interface and inspect_interface

  • Set power_interface to ipmitool and inspect_interface to either inspector or no-inspector.
$ openstack baremetal node set <node> --power-interface ipmitool
$ openstack baremetal node set <node> --inspect-interface <inspector or no-inspector>

Option 2: Use irmc for either or both power_interface and inspect_interface

  • Set irmc as the value for either or both power_interface and inspect_interface, but set the SNMP version to v2c or v1.
$ openstack baremetal node set <node> --power-interface irmc
$ openstack baremetal node set <node> --inspect-interface <inspector or no-inspector>
$ openstack baremetal node set <node> --driver-info snmp_version=<v2c or v1>

or

$ openstack baremetal node set <node> --power-interface ipmitool
$ openstack baremetal node set <node> --inspect-interface irmc
$ openstack baremetal node set <node> --driver-info snmp_version=<v2c or v1>

or

$ openstack baremetal node set <node> --power-interface irmc
$ openstack baremetal node set <node> --inspect-interface irmc
$ openstack baremetal node set <node> --driver-info snmp_version=<v2c or v1>

If FIPS mode is ON:
Set power_interface to ipmitool and inspect_interface to either inspector or no-inspector.
Also, set the SNMP version to v3. These are requirements for the Ironic iRMC driver.

$ openstack baremetal node set <node> --power-interface ipmitool
$ openstack baremetal node set <node> --inspect-interface <inspector or no-inspector>
$ openstack baremetal node set <node> --driver-info snmp_version=v3

Root Cause

Ironic iRMC driver requires Cryptodome library to enable SNMPv3 but the library is not provided by Red Hat.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments