From 00ff904b09e07880a274cc9b0cf35b6433dc5877 Mon Sep 17 00:00:00 2001 From: Lee Yarwood Date: Fri, 19 May 2017 13:40:56 +0100 Subject: [PATCH] stack: Workaround libvirt issue with multiple of 16 byte fixed_key values Unable to use LUKS passphrase that is exactly 16 bytes long https://bugzilla.redhat.com/show_bug.cgi?id=1447297 Change-Id: I565339762549b076119ffedb6b83abfa12977f5e --- stack.sh | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/stack.sh b/stack.sh index 9fdb47ecbd..5b73291bcf 100755 --- a/stack.sh +++ b/stack.sh @@ -1253,8 +1253,13 @@ if is_service_enabled g-reg; then fi # Create a randomized default value for the key manager's fixed_key +# NOTE(lyarwood): This is currently set to 36 as a workaround to the following +# libvirt bug that incorrectly pads passphrases that are a multiple of 16 bytes +# in length. +# Unable to use LUKS passphrase that is exactly 16 bytes long +# https://bugzilla.redhat.com/show_bug.cgi?id=1447297 if is_service_enabled nova; then - iniset $NOVA_CONF key_manager fixed_key $(generate_hex_string 32) + iniset $NOVA_CONF key_manager fixed_key $(generate_hex_string 36) fi # Launch the nova-api and wait for it to answer before continuing