← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1461642] [NEW] libvirt-xen: Race between nova and a Xen script for updating the iptables

 

Public bug reported:

This is with nova-network.

When we create an instance, libxl (used by libvirt) is going to call a
script to setup the vif, add it to the bridge, and update the iptables.
Sometime, the iptables call in the script fail, with exit status 4, and
this result in an instance creation failure. (Nova would only report:
"libvirtError: internal error: libxenlight failed to create new domain")

The script is:
/etc/xen/scripts/vif-bridge
(or xen.git/tools/hotplug/Linux/vif-bridge)

One way if fixing this would be to have libxl call a different script
provided by OpenStack which could take a lock.

** Affects: nova
     Importance: Undecided
         Status: New


** Tags: libvirt xen

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1461642

Title:
  libvirt-xen: Race between nova and a Xen script for updating the
  iptables

Status in OpenStack Compute (Nova):
  New

Bug description:
  This is with nova-network.

  When we create an instance, libxl (used by libvirt) is going to call a
  script to setup the vif, add it to the bridge, and update the
  iptables. Sometime, the iptables call in the script fail, with exit
  status 4, and this result in an instance creation failure. (Nova would
  only report: "libvirtError: internal error: libxenlight failed to
  create new domain")

  The script is:
  /etc/xen/scripts/vif-bridge
  (or xen.git/tools/hotplug/Linux/vif-bridge)

  One way if fixing this would be to have libxl call a different script
  provided by OpenStack which could take a lock.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1461642/+subscriptions


Follow ups

References