maas-devel team mailing list archive

Thread
Date

Packaging changes for cluster worker

To: andres.rodriguez@xxxxxxxxxxxxx, maas-devel@xxxxxxxxxxxxxxxxxxx
From: Julian Edwards <julian.edwards@xxxxxxxxxxxxx>
Date: Wed, 04 Dec 2013 15:33:48 +1000
Organization: Canonical Ltd
User-agent: KMail/4.11.2 (Linux/3.11.0-13-generic; KDE/4.11.2; x86_64; ; )

Andres,

As discussed briefly on irc, the cluster worker (celeryd) now needs to bind 
sockets to UDP port 68 so it can receive replies to its probes for DHCP 
servers.

It uses SO_REUSEADDR so it won't clash with existing DHCP clients also bound 
to that port.

In the development environment, we use "authbind" to configure the celeryd for 
access to the port.  "man authbind" shows many ways of doing it depending on 
requirements but the dev environment HACKING.txt asks you to do:

    $ sudo touch /etc/authbind/byport/68
    $ sudo chmod a+x /etc/authbind/byport/68

But you can be more restrictive if you use the /etc/authbind/byuid/<uid> 
method.

Since the start-cluster-worker script forks off another script, we use 
"authbind --deep" to make sure the permission carries through to the forked 
process.

J