yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: neutron
       Status: Fix Committed => Fix Released

** Changed in: neutron
    Milestone: None => kilo-1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1393184

Title:
  root_helper is not always needed but sometimes enforced artifically

Status in OpenStack Neutron (virtual network service):
  Fix Released

Bug description:
  Trying to invoke a namespace command via ip_lib requires a
  root_helper. If the process running the command has root access, it
  doesn't need to use root_helper, but ip_lib explicitly checks for the
  existence of a root_helper parameter and fails if it isn't populated.

  For context, the L3 agent starts the metadata_proxy under the root
  user. I ran into a similar issue, as the L3 agent starts keepalived
  (For HA routers) under the root user. Keepalived then executes scripts
  when a router state transition occurs, these scripts are run under
  root as well. The transition scripts can't use 'sudo neutron-rootwrap
  ...' because they're not run with a shell and I get a 'Terminal
  required' type error.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1393184/+subscriptions