Moving cinder from host to containers changes ownership of files on NFS backend

Bug #1887435 reported by Alan Bishop
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Committed
Medium
Alan Bishop

Bug Description

When a cinder driver uses NFS to access volumes on a storage backend, upgrading from Pike to Queens causes files on the NFS share to change ownership to 42407:42000 (the UID:GID for cinder:kolla). This happens because kolla's startup script for the cinder-volume service recursively changes the ownership of anything in cinder's /var/lib/cinder service directory [1].

[1] https://opendev.org/openstack/kolla/src/branch/stable/queens/docker/cinder/cinder-volume/extend_start.sh#L4

This is a problem when upgrading from a non-containerized deployment (Pike). Although the cinder-volume service has been stopped on the host, the NFS share is still mounted. Later, when kolla executes [1], files on the backend are affected because the NFS mount point is under /var/lib/cinder/mnt.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.opendev.org/741940

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (stable/queens)

Reviewed: https://review.opendev.org/741940
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=6df5268155f20dcd283200d050d5d44a2136d42b
Submitter: Zuul
Branch: stable/queens

commit 6df5268155f20dcd283200d050d5d44a2136d42b
Author: Alan Bishop <email address hidden>
Date: Mon Jul 20 06:09:56 2020 -0700

    [queens-only] Unmount cinder NFS shares during upgrade

    Unmount any cinder NFS shares on the host when upgrading cinder from
    running on the host to running in a kolla container. This ensures
    there are no active NFS mounts in cinder's service directory prior to
    launching the container. Kolla recusively changes the ownership of
    /var/lib/cinder, so removing the mounts prevents kolla from inadvertently
    changing the ownership of files on the NFS storage backends.

    Closes-Bug: #1887435
    Change-Id: I5f0cedb808c6371caee6918da5b8bef743971221

tags: added: in-stable-queens
Changed in tripleo:
milestone: victoria-1 → victoria-3
Changed in tripleo:
milestone: victoria-3 → wallaby-1
Changed in tripleo:
status: Triaged → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates queens-eol

This issue was fixed in the openstack/tripleo-heat-templates queens-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.