From 4d5686b6ad85d52c8359885bc8fc74cb525f6f76 Mon Sep 17 00:00:00 2001 From: Eric Harney Date: Wed, 1 Nov 2017 15:47:01 -0400 Subject: Set ipc=host for services attaching encrypted volumes Without ipc=host set, cryptsetup/devicemapper will never see devices created when running "cryptsetup luksOpen", causing the command to hang. This is required for attaching encrypted Cinder volumes. Closes-Bug: #1729419 Change-Id: Ic7184b1fbbafea266f8ec1e7974d0a4a2cf4d750 (cherry picked from commit 05b61472463d5dbde3f1b1285819044409a80e2e) --- docker/services/cinder-volume.yaml | 1 + docker/services/nova-compute.yaml | 1 + 2 files changed, 2 insertions(+) (limited to 'docker/services') diff --git a/docker/services/cinder-volume.yaml b/docker/services/cinder-volume.yaml index d8a93b13..46873ea8 100644 --- a/docker/services/cinder-volume.yaml +++ b/docker/services/cinder-volume.yaml @@ -125,6 +125,7 @@ outputs: step_4: cinder_volume: image: *cinder_volume_image + ipc: host net: host privileged: true restart: always diff --git a/docker/services/nova-compute.yaml b/docker/services/nova-compute.yaml index 883f438b..5163a381 100644 --- a/docker/services/nova-compute.yaml +++ b/docker/services/nova-compute.yaml @@ -115,6 +115,7 @@ outputs: step_4: nova_compute: image: &nova_compute_image {get_param: DockerNovaComputeImage} + ipc: host net: host privileged: true user: nova -- cgit 1.2.3-korg