Questions[glance](server)

I have an openstack instance up and running for 4 months and would like to migrate it to another nova node. When I click migrate instance option of that 4 month running instance on openstack dashboard. ERROR shown as the image is without associate data. Given that the new nova node has enough cpu, ram and storage.

The error message is like below:

Image c4ef6b0a-a218-46d3-aea9-4ebc9c13f453 is unacceptable: Image has no associated data

The image is the official ubuntu 20.04 qcow image. I try to create new instance with this image but failed.

It seems that the glance image is corrupted making it failed to build instance. The instance right now is in ERROR state. Is there any way I can repair the glance image like without changing image ID and bring back my instance?

Let me know if I need to provide further information.

Thanks in advance.

I want to launch an instance from an image which size is 1TB in my openstack pike environment which uses cinder with ceph as storage backend. The volume creation process for that instance fails with the following message: logs schedule allocate volume:Could not find any available weighted backend.

When I looked in cinder logs, I found this message:

...raise exc.from_response(resp, resp.content)\n', 'glanceclient.exc.HTTPUnauthorized: HTTP 401 Unauthorized: This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required... 

And a few lines later, I see this:
...cinder.exception.ImageNotAuthorized: Not authorized for image...

However, I can successfully create any instance with a smaller image size.

First, I suspected of token expiration in keystone, since the volume creation takes up to 4-5 hours. I raised its expiration time up to 48 hours, but the failure keeps the same.

Is it possible that glance has some token expiration time on itself, or it should be global from keystone?

apt install -y glance

Reading package lists... Done Building dependency tree Reading state information... Done glance is already the newest version (2:19.0.2-0ubuntu1~cloud0). You might want to run 'apt --fix-broken install' to correct these. The following packages have unmet dependencies: python3-glance-store : Depends: python3-cinderclient (>= 1:3.3.0) but it is not going to be installed E: Unmet dependencies. Try 'apt --fix-broken install' with no packages (or specify a solution).

when I try to install python3-cinderclient.

Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
  dkms efibootmgr gir1.2-geocodeglib-1.0 libfwup1 libllvm8 libwayland-egl1-mesa ubuntu-web-launchers
Use 'apt autoremove' to remove them.
The following NEW packages will be installed:
  python3-cinderclient
0 upgraded, 1 newly installed, 0 to remove and 4 not upgraded.
40 not fully installed or removed.
Need to get 0 B/136 kB of archives.
After this operation, 1,129 kB of additional disk space will be used.
(Reading database ... 196495 files and directories currently installed.)
Preparing to unpack .../python3-cinderclient_1%3a5.0.0-0ubuntu2~cloud0_all.deb ...
Unpacking python3-cinderclient (1:5.0.0-0ubuntu2~cloud0) ...
dpkg: error processing archive /var/cache/apt/archives/python3-cinderclient_1%3a5.0.0-0ubuntu2~cloud0_all.deb

(--unpack): trying to overwrite '/usr/share/bash-completion/completions/cinder.bash_completion', which is also in package python-cinderclient 1:3.5.0-0ubuntu1 Errors were encountered while processing: /var/cache/apt/archives/python3-cinderclient_1%3a5.0.0-0ubuntu2~cloud0_all.deb E: Sub-process /usr/bin/dpkg returned an error code (1)

If I ignore this and ran any glance image upload, I am getting this error.

openstack:

openstack image create cirros3.5 --file cirros-0.3.5-x86_64-disk.img --disk-format qcow2 --container-format bare --public

Error finding address for http://controller:9292/v2/schemas/image: HTTPConnectionPool(host='controller', port=9292): Max retries exceeded with url: /v2/schemas/image (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused',)) root@controller:/home/osboxes# openstack image create cirros3.5 --file cirros-0.3.5-x86_64-disk.img --disk-format qcow2 --container-format bare --public

(I use IPv6_Address instead of real IP address)

.openrc setting:

export OS_CLOUD=mycloud
export OS_USERNAME=myusername
export OS_PASSWORD=mypassword
export OS_PROJECT_NAME=myproject
export OS_AUTH_URL=https://[IPv6_Address]:5000/v3

If set this config in the clouds.yml file:

  mycloud:
    identity_api_version: "3"
    region_name: RegionOne
    verify: False
    auth:
      auth_url: https://[IPv6_Address]:5000/v3
      user_domain_name: "Default"
      project_name: "myproject"
      project_domain_name: "default"

Run openstack server list can work. But this time run nova list got

No handlers could be found for logger "keystoneauth.identity.generic.base"
ERROR (SSLError): SSL exception connecting to https://[IPv6_Address]:5000/v3/auth/tokens: HTTPSConnectionPool(host='IPv6_Address', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))

Try nova list --insecure got

/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:847: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  InsecureRequestWarning)
/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:847: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  InsecureRequestWarning)
/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:847: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  InsecureRequestWarning)
/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:847: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  InsecureRequestWarning)
usage: nova [--version] [--debug] [--os-cache] [--timings]
            [--os-region-name <region-name>] [--service-type <service-type>]
            [--service-name <service-name>]
            [--os-endpoint-type <endpoint-type>]
            [--os-compute-api-version <compute-api-ver>]
            [--os-endpoint-override <bypass-url>] [--insecure]
            [--os-cacert <ca-certificate>] [--os-cert <certificate>]
            [--os-key <key>] [--timeout <seconds>] [--collect-timing]
            [--os-auth-type <name>] [--os-auth-url OS_AUTH_URL]
            [--os-system-scope OS_SYSTEM_SCOPE] [--os-domain-id OS_DOMAIN_ID]
            [--os-domain-name OS_DOMAIN_NAME] [--os-project-id OS_PROJECT_ID]
            [--os-project-name OS_PROJECT_NAME]
            [--os-project-domain-id OS_PROJECT_DOMAIN_ID]
            [--os-project-domain-name OS_PROJECT_DOMAIN_NAME]
            [--os-trust-id OS_TRUST_ID]
            [--os-default-domain-id OS_DEFAULT_DOMAIN_ID]
            [--os-default-domain-name OS_DEFAULT_DOMAIN_NAME]
            [--os-user-id OS_USER_ID] [--os-username OS_USERNAME]
            [--os-user-domain-id OS_USER_DOMAIN_ID]
            [--os-user-domain-name OS_USER_DOMAIN_NAME]
            [--os-password OS_PASSWORD]
            <subcommand> ...
error: unrecognized arguments: --insecure
Try 'nova help ' for more information.

If don't have SSL certificate file local to connect to openstack https api, how to run nova, glance commands? Is there a .novarc, .glancerc config file to use them?

I also tried to create a nova.rc file with the same configuration as openrc then source it. But the same.