← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1640506] Re: Switch to os-brick encryptor provider implementations

 

Documenting the additional fixes that have landed in os-brick since the
original copy. Note that the original copy itself refactored a few
things so re-syncing is going to be FUN!

# cd os-brick
# git rev-parse HEAD
fb0b7e3e3ef32d46a5c4dbc2604d008b80864d8a
# git log os_brick/encryptors/
commit 9daa20e78e0a3bb0c285911a8e098f7e47c718c8
Author: lisali <xiaoyan.li@xxxxxxxxx>
Date:   Tue Aug 16 15:37:35 2016 +0800

    Add missing %s in print message
    
    This is to add some missing %s in print message.
    
    Change-Id: I7ac9b9ee8874d946f2e70cc9d5ad4cdc214e2e18

commit 14df0c7721d0a8a8433a3a7aa6a53372a60efdfe
Author: yuyafei <yu.yafei@xxxxxxxxxx>
Date:   Sat Jul 9 10:17:48 2016 +0800

    Remove unused LOG to keep code clean
    
    TrivialFix
    
    Change-Id: I2dde2430011a777bffc1f0d25886784c9ed04b68

commit 9d2bb5e15de92c72cc50bac2ee5d0b3b2704ed1e
Author: lisali <xiaoyan.li@xxxxxxxxx>
Date:   Wed Jul 6 13:48:20 2016 +0800

    Fix multipath iSCSI encrypted volume attach failure
    
    This is to copy fix of bug 1439869 from Nova to os-brick.
    
    Currently iSCSI volume attachment fails if iscsi_use_multipath is
    set to True. This is because the encryptor requests cryptsetup
    to create the symlink to the LUKS device with the same name of
    the device-mapper multipath device. To avoid the name collision,
    this patch adds the 'crypt-' prefix to the symlink.
    
    Change-Id: Ia001204df9b14f635ab998590e8add119c1aec23
    Closes-Bug: #1439869

commit 05827810ca931dafafd19fa4e95143fbede1a3dc
Author: LisaLi <xiaoyan.li@xxxxxxxxx>
Date:   Thu Nov 19 08:55:36 2015 +0000

    Copy encryptors from Nova to os-brick
    
    Currently, when creating an encrypted volume from an image, Cinder
    writes raw data to the encrypted volume. When Cinder uploads an
    encrypted volume to an image, it writes encrypted data to the image.
    As a result, Nova cannot use these images or volumes.
    To fix above problem, cinder needs to add encryptor attach/detach
    layers.
    As both Nova and Cinder needs to use the module, the fix is to
    move it to os-brick.
    It copies encryptors from Nova to os-brick, and keep all interfaces
    unchanged except initialization.
    
    Change-Id: I8044183ad02110c8b2468e20327d822c0437c772
    Implements: blueprint improve-encrypted-volume
    Related-bug: #1482464
    Related-bug: #1465656

** Also affects: os-brick
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1640506

Title:
  Switch to os-brick encryptor provider implementations

Status in OpenStack Compute (nova):
  New
Status in os-brick:
  New

Bug description:
  Description
  ===========
  Nova and os-brick both currently provide encryptor implementations after these were copied into os-brick by the following change : 

  Copy encryptors from Nova to os-brick
  https://review.openstack.org/#/c/247372/

  As these are now at risk of becoming out of sync with Nova due to
  bug#1639221, bug#1633518 & bug#1639293 we should really re-sync
  everything with os-brick and remove the implementations from Nova.

  Steps to reproduce
  ==================
  Attach an encrypted volume to an instance.

  Expected result
  ===============
  encryptor implementations supplied by os-brick.

  Actual result
  =============
  encryptor implementations supplied by Nova.

  Environment
  ===========
  1. Exact version of OpenStack you are running. See the following
     Ocata master

  2. Which hypervisor did you use?
     libvirt appears to be the only virt-driver using these implementations at present.

  2. Which storage type did you use?
     N/A   

  3. Which networking type did you use?
     N/A   

  Logs & Configs
  ==============
  N/A

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1640506/+subscriptions


References