yahoo-eng-team team mailing list archive

[shiliang <shiliang@xxxxxxxxxx>]

Public bug reported:

juno openstack environment:

nstack/common/lockutils.py:210
2017-06-12 10:27:48.834 1618 DEBUG neutron.openstack.common.lockutils [-] Semaphore / lock released "destroy_ipset_chain_by_name" inner /usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py:252
2017-06-12 10:27:48.977 1618 ERROR neutron.agent.firewall_agent [-] Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/neutron/agent/firewall_agent.py", line 183, in daemon_loop
    self.sg_agent.remove_devices_filter(devices_deleted)
  File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 392, in remove_devices_filter
    sg_router.remove_port_filter(device)
  File "/usr/lib64/python2.7/contextlib.py", line 24, in __exit__
    self.gen.next()
  File "/usr/lib/python2.7/site-packages/neutron/agent/firewall.py", line 106, in defer_apply
    self.filter_defer_apply_off()
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 592, in filter_defer_apply_off
    self._remove_unused_security_group_info()
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 578, in _remove_unused_security_group_info
    self.ipset.destroy_ipset_chain_by_name(removed_chain)
  File "/usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py", line 249, in inner
    return f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 57, in destroy_ipset_chain_by_name
    self._destroy_ipset_chain(chain_name)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 82, in _destroy_ipset_chain
    self._apply(cmd)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 67, in _apply
    process_input=input)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 84, in execute
    raise RuntimeError(m)
RuntimeError:
Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ipset', 'destroy', 'IPv44daae9b4-57c2-4b6e-a']
Exit code: 1
Stdout: ''
Stderr: 'ipset v6.19: Set cannot be destroyed: it is in use by a kernel component\n'

when I query ipset IPv44daae9b4-57c2-4b6e-a,find that:

[root@controller ~]# ipset list
Name: IPv44daae9b4-57c2-4b6e-a
Type: hash:ip
Revision: 1
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 16576
References: 2
Members:
172.16.28.221
172.16.28.222

** Affects: neutron
     Importance: Undecided
     Assignee: shiliang (shiliang)
         Status: New


** Tags: neutron

** Changed in: neutron
     Assignee: (unassigned) => shiliang (shiliang)

** Description changed:

+ juno openstack environment:
+ 
  nstack/common/lockutils.py:210
  2017-06-12 10:27:48.834 1618 DEBUG neutron.openstack.common.lockutils [-] Semaphore / lock released "destroy_ipset_chain_by_name" inner /usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py:252
  2017-06-12 10:27:48.977 1618 ERROR neutron.agent.firewall_agent [-] Traceback (most recent call last):
-   File "/usr/lib/python2.7/site-packages/neutron/agent/firewall_agent.py", line 183, in daemon_loop
-     self.sg_agent.remove_devices_filter(devices_deleted)
-   File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 392, in remove_devices_filter
-     sg_router.remove_port_filter(device)
-   File "/usr/lib64/python2.7/contextlib.py", line 24, in __exit__
-     self.gen.next()
-   File "/usr/lib/python2.7/site-packages/neutron/agent/firewall.py", line 106, in defer_apply
-     self.filter_defer_apply_off()
-   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 592, in filter_defer_apply_off
-     self._remove_unused_security_group_info()
-   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 578, in _remove_unused_security_group_info
-     self.ipset.destroy_ipset_chain_by_name(removed_chain)
-   File "/usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py", line 249, in inner
-     return f(*args, **kwargs)
-   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 57, in destroy_ipset_chain_by_name
-     self._destroy_ipset_chain(chain_name)
-   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 82, in _destroy_ipset_chain
-     self._apply(cmd)
-   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 67, in _apply
-     process_input=input)
-   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 84, in execute
-     raise RuntimeError(m)
- RuntimeError: 
+   File "/usr/lib/python2.7/site-packages/neutron/agent/firewall_agent.py", line 183, in daemon_loop
+     self.sg_agent.remove_devices_filter(devices_deleted)
+   File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 392, in remove_devices_filter
+     sg_router.remove_port_filter(device)
+   File "/usr/lib64/python2.7/contextlib.py", line 24, in __exit__
+     self.gen.next()
+   File "/usr/lib/python2.7/site-packages/neutron/agent/firewall.py", line 106, in defer_apply
+     self.filter_defer_apply_off()
+   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 592, in filter_defer_apply_off
+     self._remove_unused_security_group_info()
+   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 578, in _remove_unused_security_group_info
+     self.ipset.destroy_ipset_chain_by_name(removed_chain)
+   File "/usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py", line 249, in inner
+     return f(*args, **kwargs)
+   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 57, in destroy_ipset_chain_by_name
+     self._destroy_ipset_chain(chain_name)
+   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 82, in _destroy_ipset_chain
+     self._apply(cmd)
+   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 67, in _apply
+     process_input=input)
+   File "/usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 84, in execute
+     raise RuntimeError(m)
+ RuntimeError:
  Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ipset', 'destroy', 'IPv44daae9b4-57c2-4b6e-a']
  Exit code: 1
  Stdout: ''
  Stderr: 'ipset v6.19: Set cannot be destroyed: it is in use by a kernel component\n'
- 
  
  when I query ipset IPv44daae9b4-57c2-4b6e-a,find that:
  
  [root@controller ~]# ipset list
  Name: IPv44daae9b4-57c2-4b6e-a
  Type: hash:ip
  Revision: 1
  Header: family inet hashsize 1024 maxelem 65536
  Size in memory: 16576
  References: 2
  Members:
  172.16.28.221
  172.16.28.222

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1697573

Title:
  ipset v6.19: Set cannot be destroyed: it is in use by a kernel
  component\n

Status in neutron:
  New

Bug description:
  juno openstack environment:

  nstack/common/lockutils.py:210
  2017-06-12 10:27:48.834 1618 DEBUG neutron.openstack.common.lockutils [-] Semaphore / lock released "destroy_ipset_chain_by_name" inner /usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py:252
  2017-06-12 10:27:48.977 1618 ERROR neutron.agent.firewall_agent [-] Traceback (most recent call last):
    File "/usr/lib/python2.7/site-packages/neutron/agent/firewall_agent.py", line 183, in daemon_loop
      self.sg_agent.remove_devices_filter(devices_deleted)
    File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 392, in remove_devices_filter
      sg_router.remove_port_filter(device)
    File "/usr/lib64/python2.7/contextlib.py", line 24, in __exit__
      self.gen.next()
    File "/usr/lib/python2.7/site-packages/neutron/agent/firewall.py", line 106, in defer_apply
      self.filter_defer_apply_off()
    File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 592, in filter_defer_apply_off
      self._remove_unused_security_group_info()
    File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 578, in _remove_unused_security_group_info
      self.ipset.destroy_ipset_chain_by_name(removed_chain)
    File "/usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py", line 249, in inner
      return f(*args, **kwargs)
    File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 57, in destroy_ipset_chain_by_name
      self._destroy_ipset_chain(chain_name)
    File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 82, in _destroy_ipset_chain
      self._apply(cmd)
    File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 67, in _apply
      process_input=input)
    File "/usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 84, in execute
      raise RuntimeError(m)
  RuntimeError:
  Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ipset', 'destroy', 'IPv44daae9b4-57c2-4b6e-a']
  Exit code: 1
  Stdout: ''
  Stderr: 'ipset v6.19: Set cannot be destroyed: it is in use by a kernel component\n'

  when I query ipset IPv44daae9b4-57c2-4b6e-a,find that:

  [root@controller ~]# ipset list
  Name: IPv44daae9b4-57c2-4b6e-a
  Type: hash:ip
  Revision: 1
  Header: family inet hashsize 1024 maxelem 65536
  Size in memory: 16576
  References: 2
  Members:
  172.16.28.221
  172.16.28.222

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1697573/+subscriptions