▤ Stackers Network

August 16, 2025

Stackers Network Digest — August 16, 2025

20 threads · 49 messages · openstack-discuss

The Big Picture

With 2025.2 "Flamingo" feature freeze two weeks away (August 28) and TC/PTL nominations open through August 20, this week the list balanced governance prep with substantive technical work. The standout development thread is a maturing LUKS image-encryption series asking for final Nova review. Alongside that: continued eventlet-removal momentum, an ongoing Vitrage project health discussion, and a steady drumbeat of operator threads — Nova API latency after Caracal upgrade, Keystone TokenNotFound floods, and a Dalmatian VPNaaS regression.

Releases & Announcements

Elod Illes posted the R-6 release countdown. Goutham Pacha Ravi's TC R-7 summary emphasized that 2026.1 PTL and TC nominations are open through August 20 and that the OpenInfra Foundation membership renewal is a prerequisite (the OIF's move under the Linux Foundation has reset memberships).

René Ribaud self-nominated for the Nova/Placement PTL role for 2026.1, citing continued focus on bug triage and active participation in the eventlet-removal effort.

For Gazpacho (2026.1), the TC discussed Python version selection: Debian 13 (Trixie) ships with Python 3.13, and initial smoke tests on a Trixie devstack-integration job are promising — early signal that 3.13 is the likely floor.

Development & Technical Decisions

LUKS image encryption is ready for review. Josephine Seifert posted that the LUKS-image-encryption series is "in a good state" — Cinder and Glance patches landed, Tempest tests in place. The one remaining piece is a Nova patch resolving a key-handling issue (direct use vs. hexlification of encryption keys). This work has been in progress for years (see the original spec discussion and image-encryption meeting logs), and a small final review push could close it out.

Nova API latency post-Caracal. Chang Xue reported an interesting cumulative latency regression after upgrading from Bobcat to Caracal: nova-api response times drift from ~80–90 ms at startup to over 500 ms over ~10 days. Investigations cited the move to UnifiedLimitsDriver and queries to placement/keystone, but the actual root cause is still unclear. Bug 2095364 tracks related concerns, and patches 939658 and 955305 were referenced. If you've upgraded to Caracal, watch your nova-api memory and latency over time.

Metalsmith retirement. Jay Faulkner proposed retiring Metalsmith and excluding it from Flamingo: it's been in maintenance-mode for nearly two years, CI doesn't pass, and there are no engaged users or maintainers. Functionality has been folding into Ironic's API and standard clients.

Vitrage health check. Takashi Kajinami shared three categories of breakage found in the Vitrage tempest gate: usage of removed oslo_context interfaces (easy fix in vitrage/957004), asyncore usage from pysnmp-lextudio (Python 3.12 removed asyncore — asyncio migration needed), and tempest test failures. He's added the tc tag to draw governance attention given the project's leaderless state heading into 2026.1.

Nova "unmanaged VMs" question. Balazs Gibizer opened a Nova-compute reaction question about what should happen when nova-compute finds VMs it didn't create — a design touchpoint for distros co-locating other libvirt workloads.

DPL refresh prep. Jay Faulkner confirmed Ironic liaisons have re-opted-in for 2026.1 — part of the ongoing TC effort to verify DPL-model projects (Freezer, Watcher, Release, Requirements, Oslo, Ironic) for the next cycle.

Cinder IBM driver "Call Home". Vivek Pandey updated the SVf driver plugin discussion: after Sean Mooney's GDPR concern about collecting OS-release data alongside host UUID, the team will drop the OS-release capture and keep only UUID for duplicate-registration detection. Call Home enablement remains a backend-side admin decision, not exposed via Cinder.

Heads Up / Action Needed

  • Nominate for PTL/TC by August 20 — and renew your OpenInfra Foundation individual membership first if it lapsed; the OIF transition under Linux Foundation reset memberships.
  • Feature freeze August 28 for cycle-with-rc projects.
  • OpenStack User Survey closes August 29 (survey) — Allison Price reminded all operators it's important to refresh existing entries.
  • LUKS image-encryption Nova patch (926326) is the one piece needing review to close the multi-cycle effort.
  • The OpenStack-for-AI whitepaper is open for project contributions and reference architectures from OpenInfra Platinum/Gold/Silver members; deadline September 19 (working doc, Aug 14 recording).

Community & Events

Operator threads spotlighted recurring upgrade pain. Marc Vorwerk reported Keystone logs flooded with TokenNotFound: Failed to validate token (~18k/day) on Kolla-Ansible 2024.1 / Keystone 25.0.1 — memcached looks fine, request IDs don't match between Keystone and Nova/Cinder logs. Open question with no clear answer yet. Shubham Yadav documented a Dalmatian VPNaaS regression where a second IPSec connection on the same VPN service/router stays PENDING_CREATE — control test confirms switching the L3 agent container back to a Zed image makes it render immediately, so this is a regression in Dalmatian VPNaaS handling of multiple connections.

Karl Kloppenborg surfaced a volume retype failure with libvirt — "disk does not have active block job" — during a storage backend migration (stack trace gist). Eugen Block flagged a confusing horizon/cinder "block-storage service type not activated" error after Epoxy upgrade despite endpoints clearly being present. Winicius Allan asked about deploying OpenShift via Magnum (no current support; no listed roadmap). Nguyễn Hữu Khôi revisited backup-as-a-service options noting Cinder backup's lack of scheduling and progress reporting, with Freezer and Raksha effectively abandoned in his view (see Freezer Launchpad). Many shops are falling back to Ceph snapshots + rbd export.

Ildiko Vancsa announced the August 22 Ops Radio Hour with topics on Swift compliance, GPUs, VMware migration, vTPM, and the Keystone security param bug 2117217. The Ops community is consolidating chat onto a Matrix room. The Public Cloud SIG met August 13.