Author: Marcin Wilk
Author Date: 2024-04-15 11:59:51 UTC

Add support for the 'cpu_models' option in nova.conf

Since OpenStack Train release the 'cpu_models' config option
has superseded the 'cpu_model' config option in the nova.conf.
This patch adds support for the new 'cpu_models' allowing a user
to provide a comma separated list of supported, named CPU models.

This patch also includes a unit test for the cpu_mode='custom'.

Closes-bug: #2025914
Change-Id: I30328abc07d3304f1bfb67c81360fb5229214c97

Author: Marcin Wilk
Author Date: 2024-04-15 11:59:51 UTC

Add support for the 'cpu_models' option in nova.conf

Since OpenStack Train release the 'cpu_models' config option
has superseded the 'cpu_model' config option in the nova.conf.
This patch adds support for the new 'cpu_models' allowing a user
to provide a comma separated list of supported, named CPU models.

This patch also includes a unit test for the cpu_mode='custom'.

Closes-bug: #2025914
Change-Id: I30328abc07d3304f1bfb67c81360fb5229214c97

Author: DUFOUR Olivier
Author Date: 2023-11-28 07:16:14 UTC

Update apparmor profile for nova-compute

Nova-compute uses ssh and scp commands extensively and this
patch allows the process to read the configuration too in
/etc/ssh/ssh_config.d/ directory.

Closes-Bug: #2044983
Change-Id: I336ce64d493c549096d0b8706996e0f17a2728fb
(cherry picked from commit 4d6f4c07c9b634e22d5445a702be3d3ee9730ab3)
(cherry picked from commit 20c9776e8836abbe13a2eab2efe1d8c9a8cff851)
(cherry picked from commit 552a84925c9c1f7adc810e338a61944b6a53dbd0)
(cherry picked from commit decbbd95330864a18dfd6d68b84860a9a671cf2b)
(cherry picked from commit c7014adcc5cc25994065887122e5168c1c7c0f6b)

Author: DUFOUR Olivier
Author Date: 2023-11-28 07:16:14 UTC

Update apparmor profile for nova-compute

Nova-compute uses ssh and scp commands extensively and this
patch allows the process to read the configuration too in
/etc/ssh/ssh_config.d/ directory.

Closes-Bug: #2044983
Change-Id: I336ce64d493c549096d0b8706996e0f17a2728fb
(cherry picked from commit 4d6f4c07c9b634e22d5445a702be3d3ee9730ab3)
(cherry picked from commit 20c9776e8836abbe13a2eab2efe1d8c9a8cff851)
(cherry picked from commit 552a84925c9c1f7adc810e338a61944b6a53dbd0)
(cherry picked from commit decbbd95330864a18dfd6d68b84860a9a671cf2b)

Author: DUFOUR Olivier
Author Date: 2023-11-28 07:16:14 UTC

Update apparmor profile for nova-compute

Nova-compute uses ssh and scp commands extensively and this
patch allows the process to read the configuration too in
/etc/ssh/ssh_config.d/ directory.

Closes-Bug: #2044983
Change-Id: I336ce64d493c549096d0b8706996e0f17a2728fb
(cherry picked from commit 4d6f4c07c9b634e22d5445a702be3d3ee9730ab3)
(cherry picked from commit 20c9776e8836abbe13a2eab2efe1d8c9a8cff851)
(cherry picked from commit 552a84925c9c1f7adc810e338a61944b6a53dbd0)

Author: DUFOUR Olivier
Author Date: 2023-11-28 07:16:14 UTC

Update apparmor profile for nova-compute

Nova-compute uses ssh and scp commands extensively and this
patch allows the process to read the configuration too in
/etc/ssh/ssh_config.d/ directory.

Closes-Bug: #2044983
Change-Id: I336ce64d493c549096d0b8706996e0f17a2728fb
(cherry picked from commit 4d6f4c07c9b634e22d5445a702be3d3ee9730ab3)
(cherry picked from commit 20c9776e8836abbe13a2eab2efe1d8c9a8cff851)

Author: Zuul
Author Date: 2024-03-19 20:39:28 UTC

Merge "AppArmor policy update for NVMeoF" into stable/yoga

Author: Felipe Reyes
Author Date: 2023-10-12 14:50:30 UTC

AppArmor policy update for NVMeoF

When using NVMeoF feature with nova-compute apparmor in enforce
mode, nova-compute is denied from running /usr/sbin/nvme and
/usr/sbin/blkid, and reading /etc/nvme/hostnqn.

Change-Id: Ia23fbf341d5b7ad469337d8a0c65c18ec519a891
Closes-Bug: #2039161
(cherry picked from commit 0f9c730817b4f175e617ab5ce362bf9ff5157092)
(cherry picked from commit 557c47f37baa83e96f5618ae0a46a554897977b4)
(cherry picked from commit c41b443548ecd91c16539924fb432dca8a6519b2)

Author: Felipe Reyes
Author Date: 2023-10-12 14:50:30 UTC

AppArmor policy update for NVMeoF

When using NVMeoF feature with nova-compute apparmor in enforce
mode, nova-compute is denied from running /usr/sbin/nvme and
/usr/sbin/blkid, and reading /etc/nvme/hostnqn.

Change-Id: Ia23fbf341d5b7ad469337d8a0c65c18ec519a891
Closes-Bug: #2039161
(cherry picked from commit 0f9c730817b4f175e617ab5ce362bf9ff5157092)
(cherry picked from commit 557c47f37baa83e96f5618ae0a46a554897977b4)

Author: Felipe Reyes
Author Date: 2023-10-12 14:50:30 UTC

AppArmor policy update for NVMeoF

When using NVMeoF feature with nova-compute apparmor in enforce
mode, nova-compute is denied from running /usr/sbin/nvme and
/usr/sbin/blkid, and reading /etc/nvme/hostnqn.

Change-Id: Ia23fbf341d5b7ad469337d8a0c65c18ec519a891
Closes-Bug: #2039161
(cherry picked from commit 0f9c730817b4f175e617ab5ce362bf9ff5157092)

Author: Aurelien Lourot
Author Date: 2022-03-15 17:09:57 UTC

Restart failed subordinate services

Resolved Conflicts:
 hooks/nova_compute_hooks.py
 unit_tests/test_nova_compute_hooks.py

Change-Id: Id34e9c6f85886dbf880df0b7002110a40ef41ad6
Closes-Bug: #1947585
(cherry picked from commit 140be9d0a99f65769899a710ea9d378a29a29e80)
(cherry picked from commit 5465fe74b4e49e2a94e6db98cf00d6f7be2eaff6)

Author: Alex Kavanagh
Author Date: 2021-10-21 13:49:41 UTC

21.10 - Release

Remove the "channel: candidate" from the func-test
bundles.

Change-Id: I2ddf9d6ac813928f0176ca5f4ea2280762d7ef7e

Author: Alex Kavanagh
Author Date: 2021-10-21 13:49:41 UTC

21.10 - Release

Remove the "channel: candidate" from the func-test
bundles.

Change-Id: I2ddf9d6ac813928f0176ca5f4ea2280762d7ef7e

Author: Alex Kavanagh
Author Date: 2021-10-21 13:49:41 UTC

21.10 - Release

Remove the "channel: candidate" from the func-test
bundles.

Change-Id: I2ddf9d6ac813928f0176ca5f4ea2280762d7ef7e

Author: Alex Kavanagh
Author Date: 2021-10-21 13:49:41 UTC

21.10 - Release

Remove the "channel: candidate" from the func-test
bundles.

Change-Id: I2ddf9d6ac813928f0176ca5f4ea2280762d7ef7e

Author: James Page
Author Date: 2021-06-08 12:29:22 UTC

apparmor: ensure multipath.conf is accessible

Allow access to main multipath configuration file from the
nova-compute daemon.

Change-Id: Ibaa5f45b7fd72fcc936986286939e1285bcdb945
Closes-Bug: 1906727
(cherry picked from commit 9d9a74ddda83df01ae8cbd34c6d13697b5fe17bc)

Author: Aurelien Lourot
Author Date: 2021-02-10 19:16:06 UTC

Updates for stable branch creation 21.01

Set default branch for git review/gerrit.
Switch tests to stable.
Switch to using stable charm-helpers branch.
Switch to using stable charm.openstack branch.
Switch to using stable zaza branch.
Switch to using stable zaza-openstack-tests branch.

Change-Id: I573f651db37134b26ae7bd661dba2ead2fe54d96

Author: Rodrigo Barbieri
Author Date: 2020-11-05 21:32:10 UTC

Add/update region config in nova.conf

On multi-region deployments, Nova may talk to the wrong
neutron endpoint (from the wrong region) if the region
is unspecified.

On Rocky+ it will also require updating the
os_region_name config to region_name, as os_region_name
has been deprecated, otherwise Nova will talk to the wrong
placement endpoint as well.

This fix addresses the issue where nova-compute will not
register the node to the correct nova_api/placement
database, and will also not be able to complete live-migrations.

Given that the template for the [placement] section is
applied to every release, it is included both old and
new config options.

Change-Id: I9500ba400d55e6f1bc11f2ba05b25b4714cda578
Closes-bug: #1903210
(cherry picked from commit 835d4b167ab7db41962239eaabb56f492fa34cde)

Author: Dmitrii Shcherbakov
Author Date: 2020-08-24 12:47:38 UTC

Add missing apparmor profile rules

Change-Id: I2e01bd104ee42d81209c79b1733003690735054e
Closes-Bug: #1892721

Author: Tiago Pasqualini da Silva
Author Date: 2020-05-27 21:09:35 UTC

Fix multipath mount issue with apparmor profile

When nova-compute is deployed with aa-profile-mode=enforce,
apparmor is currently blocking the file lock operation on
/etc/multipath/wwids and /etc/multipath/bindings.

This patch fixes that by adding the file locking flag to those
files on the nova-compute apparmor profile.

Change-Id: I96e4e5ce9eb670974506371b2f6d6ca797ba0909
Closes-bug: 1881017
(cherry picked from commit a7999d8145a0320935a3f531c526000780dd4fc1)

Author: Liam Young
Author Date: 2020-02-17 15:54:39 UTC

Updates for stable branch creation

Set default branch for git review/gerrit.

Switch amulet tests to stable.

Switch zaza bundles to stable charms.

Switch to using stable charm-helpers branch.

Change-Id: Ia527fb9020fa576e5b77dd9452278efb08681789

Author: Frode Nordahl
Author Date: 2020-01-10 08:13:34 UTC

Use hosts official name for FQDN

The current implementations use of a specific interface to build
FQDN from has the undesired side effect of the ``nova-compute`` and
``neutron-openvswitch`` charms ending up with using different
hostnames in some situations. It may also lead to use of a
identifier that is mutable throughout the lifetime of a deployment.

Use of a specific interface was chosen due to ``socket.getfqdn()``
not giving reliable results (https://bugs.python.org/issue5004).

This patch gets the FQDN by mimicking the behaviour of a call to
``hostname -f`` with fallback to shortname on failure.

Add relevant update from c-h.

Change-Id: I82db81937e5a46dc6bd222b7160ca1fa5b190c10
Closes-Bug: #1839300
(cherry-picked from 1869bfbc9711eac157821f8a4702409822c0842e)

Author: Chris MacNaughton
Author Date: 2019-09-06 08:44:48 UTC

Ensure that VNC only binds on the internal network

When the VNC server is set to bind to 0.0.0.0,
unauthenticated console access is possible to any
VM via any of the compute host's interfaces. This
access should be restricted to an internal network.

Change-Id: Ibbc12ae282320f966eec90e9116388233e65eb9a
Closes-Bug: #1843004
(cherry picked from commit 82c5027814577535ba3db479e8e45a39548f4105)

Author: Tiago Pasqualini da Silva
Author Date: 2019-04-25 21:45:42 UTC

Add multipath to nova-compute AppArmor profile

Deploying nova-compute with apparmor in enforce mode causes it to fail
to attach volumes with multipath. This patch fixes it by updating the
nova-compute apparmor profile to include paths and binaries needed for
multipath.

Change-Id: Icc2d187fa3dd63e0930d57a87e7a60ff386f0032
Closes-bug: #1826467
(cherry picked from commit 40914493c7be88a1c3cd80c937d65e044301c24b)

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:03 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:03 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:03 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:03 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:02 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:02 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:02 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:02 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:02 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:02 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Author: OpenDev Sysadmins
Author Date: 2019-04-19 19:34:01 UTC

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.