| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2024-02-07 | |||
| 17:42:41 | bauzas | then, I'll try to test with my hardware environment what would arrive if the operator tries to restart a compute while a live-migration is currently running | |
| 17:43:37 | bauzas | for the allocations, it would be like any other feature | |
| 17:54:23 | dansmith | bauzas: what if we had the compute service look for and clean up any allocations against its RP for instances that don't exist on it? basically "things that were reserved here, but are gone now"? | |
| 17:54:27 | dansmith | maybe we already do that and I'm missing it? | |
| 17:54:48 | dansmith | but if so, then a restart would *actually* clean up everything because the in-memory bit would be dumped and we'd clean up the stale reservations | |
| 17:54:52 | bauzas | dansmith: there are two things | |
| 17:55:17 | bauzas | there are VGPU allocations and there are mdev "reservations" | |
| 17:56:02 | bauzas | the internal dict is just here for making sure we don't pass a mdev to a new instance if that mdev is currently used by a live-migrating instance | |
| 17:56:14 | bauzas | so we just 'reserve' it | |
| 17:57:00 | bauzas | that said, and that's something I can verify, if the tarrget domain is created just when we start the live-migration, then we don't need to 'reserve' the mdev | |
| 17:58:16 | bauzas | maybe the context you miss is that a compute only knows which mdevs are used by instances by looking at the guest XMLs | |
| 17:59:18 | bauzas | my concern I had is that if we don't have a domain for a target guest yet while live-migrating, then the compute would not know that the related mdevs are currently used for that one | |
| 17:59:29 | bauzas | hence the internal dict | |
| 18:09:22 | dansmith | bauzas: thanks, I understand the difference between the dict reservation and the allocations | |
| 18:09:36 | dansmith | however, the allocations are not cleaned up by a restart (right?) even though the dict reservations are | |
| 18:09:52 | dansmith | I don't really like the latter requiring a restart, but the former seems very unfortunate to me | |
| 18:10:12 | bauzas | that's the same problem with any live-migration allocation, right? | |
| 18:11:55 | bauzas | dansmith: one question I have and that you could maybe know, are we providing an error for running live-migrations if we restart a target ? | |
| 18:13:00 | dansmith | bauzas: It seems to me like this is the first place where we're doing that allocation in the pre check no? | |
| 18:13:16 | dansmith | we grab pci stuff, but I don't think we persist it until later, if I'm reading correctly | |
| 18:13:56 | bauzas | I don't know *when* we create a target allocation | |
| 18:14:00 | bauzas | I need to look at the code | |
| 18:16:28 | bauzas | https://github.com/openstack/nova/blob/master/nova/conductor/tasks/live_migrate.py#L558 | |
| 18:16:39 | dansmith | okay I just found that | |
| 18:16:58 | dansmith | so the conductor nukes any allocations that we have against the proposed node if we abort, yeah? | |
| 18:17:11 | bauzas | after pre-livemigrate sure | |
| 18:17:26 | bauzas | but then I wonder if we delete the allocations when we monitor the running live-migration | |
| 18:17:33 | bauzas | looking at the compute now | |
| 18:17:57 | dansmith | yeah, that's only if we decide the destination isn't a good fit, but doesn't address the failure later | |
| 18:20:18 | bauzas | https://github.com/openstack/nova/blob/master/nova/conductor/tasks/live_migrate.py#L558 | |
| 18:20:30 | bauzas | here we error a migration if we have any exception | |
| 18:22:19 | dansmith | right, but after we start the migration, nothing will clean up the destination node's allocations right? | |
| 18:22:33 | bauzas | https://github.com/openstack/nova/blob/master/nova/compute/manager.py#L9692 | |
| 18:22:37 | bauzas | nah, found it | |
| 18:22:53 | bauzas | we delete the allocation when calling _rollback_live_migration() | |
| 18:23:26 | bauzas | and then we call the drivers's methods for cleaning up the residues... which then unreserve the mdev from the dict :) | |
| 18:23:39 | bauzas | so we're good | |
| 18:24:12 | bauzas | but I agree on adding more logs | |
| 18:24:15 | dansmith | the dict is on the destination, right/ | |
| 18:24:21 | dansmith | so we don't clean that up | |
| 18:24:29 | bauzas | I didn't done that in the past with allocating mdevs and that was needed | |
| 18:24:46 | bauzas | dansmith: no, we both call source and dest virt drivers | |
| 18:24:58 | bauzas | source is here https://github.com/openstack/nova/blob/master/nova/compute/manager.py#L9708-L9709 | |
| 18:25:03 | dansmith | bauzas: not if rabbit is down | |
| 18:25:10 | bauzas | and dest is there https://github.com/openstack/nova/blob/master/nova/compute/manager.py#L9736-L9738 | |
| 18:25:25 | bauzas | dansmith: hah, I get your point now | |
| 18:26:04 | dansmith | just saying it seems like we need more post-disaster recovery bits, be it on compute restart or some periodic | |
| 18:26:18 | bauzas | there could be a situation with rabbit down that would hit the live-migration but we wouldn't unreserve the mdev | |
| 18:26:21 | bauzas | gotcha | |
| 18:26:24 | dansmith | but, given that we do clean these allocations if rabbit is not down and we fail, then fair enough, | |
| 18:26:58 | dansmith | but I think the logging of the internal private data that won't be reset until restart is important, at least so it's discoverable why something is reserved but there's no record of it | |
| 18:27:17 | bauzas | yeah good point | |
| 18:28:06 | bauzas | my kids are starving, so I need to leave or they will run errand in the street like zombies | |
| 18:28:23 | bauzas | but I'll try to be a bit more resilient | |
| 18:28:34 | bauzas | at least the first thing is to log | |
| 18:28:46 | bauzas | then I wonder whether we need some periodic for the cleaning case | |
| 18:29:18 | bauzas | (but I just wonder which conditional to write in that periodic :) ) | |
| 18:29:51 | bauzas | that should be "give me all the migrations that were errored and make sure we don't have a reserved mdev for those" | |
| 18:40:13 | dansmith | something like that | |
| 18:40:43 | sean-k-mooney | melwitt: i think i need to restack but i got https://paste.opendev.org/show/bRUFWOFqOa8kSeXyH12I/ when i tried to delete a vm | |
| 18:42:26 | melwitt | sean-k-mooney: oh, ok that's bc I added a db migration (that I forgot to mention) to add a column (for backing file secret uuid). so you'd have to nova-manage db sync. it's complaining about the lack of the column | |
| 18:43:02 | sean-k-mooney | oh ok | |
| 18:43:06 | sean-k-mooney | i just did a git checkout | |
| 18:43:19 | sean-k-mooney | and restarted things so ya di cna do a db sync | |
| 18:43:35 | melwitt | yeah, I did the same thing. just forgot about the db sync, sorry 😑 | |
| 18:43:58 | sean-k-mooney | i was really confused becasue the way this fails in the openstack client is really terrible | |
| 18:44:29 | sean-k-mooney | venv) ubuntu@disk-encrypt-1:~/repos/devstack$ openstack server delete "test-vm" | |
| 18:44:31 | sean-k-mooney | Resource.get() takes 1 positional argument but 2 were given | |
| 18:44:34 | sean-k-mooney | that is the error you get | |
| 18:44:37 | melwitt | yeah, I remember thinking that too | |
| 18:44:40 | sean-k-mooney | and if you use debug mode it does not help | |
| 18:45:02 | sean-k-mooney | ya so i went back to nova client and it toold me there was a 500 and then it was clear that i was missing something | |
| 18:45:54 | melwitt | guess that's another thing for the osc backlog, figure out what's with that error message and how to improve it | |
| 18:46:47 | sean-k-mooney | this ist its internal traceback https://paste.opendev.org/show/bJQt6QO5X1pdKbL7dnm7/ | |
| 18:46:54 | melwitt | oh, and another thing that tripped me up is the db sync doesn't fan out to cells (!) and you have to use --local_cell to make it sync the nova_cell1 db | |
| 18:47:09 | sean-k-mooney | but the issue is it tyin gto use the resouce before its verified the return code i think | |
| 18:47:48 | sean-k-mooney | good to know cause i totally did not add --local_cell | |
| 18:47:48 | melwitt | hm | |
| 18:48:29 | sean-k-mooney | its still not working for me but it did to the upgrade | |
| 18:48:36 | sean-k-mooney | do i need to als restart | |
| 18:48:55 | sean-k-mooney | Running upgrade 13863f4e1612 -> 2a7173b820a6, Add backing_encryption_secret_uuid to block_device_mapping | |
| 18:48:57 | melwitt | it took me a bit to figure out wtf was wrong too. been that long since I db sync'ed on the fly I guess 😶 | |
| 18:49:41 | melwitt | I don't think you should need to restart | |
| 18:50:10 | melwitt | and make sure you had 'db sync' without --local_cell too bc that's what syncs the nova_cell0 db 😛 | |
| 18:51:18 | melwitt | another thing for the backlog ... do a fanout. I'm not sure if it was deliberate not to or if it's just no one has gotten around to it yet | |
| 18:51:19 | sean-k-mooney | nova-manage --config-dir /etc/nova --config-file /etc/nova/nova_cell1.conf db sync | |
| 18:51:24 | sean-k-mooney | that worked | |
| 18:52:00 | sean-k-mooney | oh you know what this instance was in error so it was burried in cell0 | |
| 18:52:06 | melwitt | hm ok. I thought I tried that but it didn't work without --local_cell | |
| 18:52:47 | melwitt | *didn't work to sync nova_cell1 | |
| 18:53:04 | sean-k-mooney | oh actullly no it got past the schduler so it was in cell 1 | |
| 18:53:20 | sean-k-mooney | i saw was becasue its deleted now so i guess it does not matter | |
| 18:53:44 | sean-k-mooney | also i just booted a vm with your latest code so that cool too | |
| 18:54:09 | sean-k-mooney | ok its on disk-encrypt-2 so in theroy i coudl live migrate it to disk-encrypt-1 | |
| 18:54:48 | melwitt | that should work, but since I said that it probably won't | |
| 18:56:57 | sean-k-mooney | it did not but i havent tried live migration without encypted voluems so i dont know if i missed a step or not | |
| 18:57:13 | sean-k-mooney | ah ok | |
| 18:57:15 | sean-k-mooney | libvirt.libvirtError: Cannot recv data: ssh: Could not resolve hostname disk-encrypt-1: Name or service not known: Connection reset by peer | |
| 18:57:21 | sean-k-mooney | i just need to update /etc/hosts | |
| 18:58:54 | melwitt | 😅 | |