← Back to team overview

yahoo-eng-team team mailing list archive

  1. yahoo-eng-team team
  2. Mailing list archive
  3. Message #75486

[Bug 1800157] [NEW] privsep: lack of capabilities on kernel 4.15

  Thread Previous • Date Previous • • Thread Next 
Public bug reported:

l3 and dhcp agents are not functioning on kernel 4.15 due to privsep
errors:

2018-10-25 09:10:38,747.747 24060 INFO oslo.privsep.daemon [-] Running privsep helper: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'privsep-helper', '--config-file', '/etc/neutron/l3_agent.ini', '--config-file', '/etc/neutron/fwaas_driver.ini', '--config-file', '/etc/neutron/neutron.conf', '--privsep_context', 'neutron.privileged.default', '--privsep_sock_path', '/tmp/tmpS5k5y2/privsep.sock']
2018-10-25 09:10:39,361.361 24060 WARNING oslo.privsep.daemon [-] privsep log: Error in sys.excepthook:
2018-10-25 09:10:39,363.363 24060 WARNING oslo.privsep.daemon [-] privsep log: Traceback (most recent call last):
2018-10-25 09:10:39,363.363 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/dist-packages/oslo_log/log.py", line 193, in logging_excepthook
2018-10-25 09:10:39,364.364 24060 WARNING oslo.privsep.daemon [-] privsep log:     getLogger(product_name).critical('Unhandled error', **extra)
2018-10-25 09:10:39,365.365 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1481, in critical
2018-10-25 09:10:39,365.365 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.logger.critical(msg, *args, **kwargs)
2018-10-25 09:10:39,366.366 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1212, in critical
2018-10-25 09:10:39,366.366 24060 WARNING oslo.privsep.daemon [-] privsep log:     self._log(CRITICAL, msg, args, **kwargs)
2018-10-25 09:10:39,367.367 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1286, in _log
2018-10-25 09:10:39,367.367 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.handle(record)
2018-10-25 09:10:39,368.368 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1296, in handle
2018-10-25 09:10:39,368.368 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.callHandlers(record)
2018-10-25 09:10:39,369.369 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1336, in callHandlers
2018-10-25 09:10:39,370.370 24060 WARNING oslo.privsep.daemon [-] privsep log:     hdlr.handle(record)
2018-10-25 09:10:39,370.370 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 759, in handle
2018-10-25 09:10:39,371.371 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.emit(record)
2018-10-25 09:10:39,371.371 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/handlers.py", line 414, in emit
2018-10-25 09:10:39,372.372 24060 WARNING oslo.privsep.daemon [-] privsep log:     sres = os.stat(self.baseFilename)
2018-10-25 09:10:39,372.372 24060 WARNING oslo.privsep.daemon [-] privsep log: OSError: [Errno 13] Permission denied: '/var/log/neutron/neutron.log'
...
24060 ERROR neutron.agent.l3.agent FailedToDropPrivileges: Privsep daemon failed to start

** Affects: neutron
     Importance: High
     Assignee: Oleg Bondarev (obondarev)
         Status: In Progress


** Tags: l3-dvr-backlog l3-ipam-dhcp

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1800157

Title:
  privsep: lack of capabilities on kernel 4.15

Status in neutron:
  In Progress

Bug description:
  l3 and dhcp agents are not functioning on kernel 4.15 due to privsep
  errors:

  2018-10-25 09:10:38,747.747 24060 INFO oslo.privsep.daemon [-] Running privsep helper: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'privsep-helper', '--config-file', '/etc/neutron/l3_agent.ini', '--config-file', '/etc/neutron/fwaas_driver.ini', '--config-file', '/etc/neutron/neutron.conf', '--privsep_context', 'neutron.privileged.default', '--privsep_sock_path', '/tmp/tmpS5k5y2/privsep.sock']
  2018-10-25 09:10:39,361.361 24060 WARNING oslo.privsep.daemon [-] privsep log: Error in sys.excepthook:
  2018-10-25 09:10:39,363.363 24060 WARNING oslo.privsep.daemon [-] privsep log: Traceback (most recent call last):
  2018-10-25 09:10:39,363.363 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/dist-packages/oslo_log/log.py", line 193, in logging_excepthook
  2018-10-25 09:10:39,364.364 24060 WARNING oslo.privsep.daemon [-] privsep log:     getLogger(product_name).critical('Unhandled error', **extra)
  2018-10-25 09:10:39,365.365 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1481, in critical
  2018-10-25 09:10:39,365.365 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.logger.critical(msg, *args, **kwargs)
  2018-10-25 09:10:39,366.366 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1212, in critical
  2018-10-25 09:10:39,366.366 24060 WARNING oslo.privsep.daemon [-] privsep log:     self._log(CRITICAL, msg, args, **kwargs)
  2018-10-25 09:10:39,367.367 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1286, in _log
  2018-10-25 09:10:39,367.367 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.handle(record)
  2018-10-25 09:10:39,368.368 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1296, in handle
  2018-10-25 09:10:39,368.368 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.callHandlers(record)
  2018-10-25 09:10:39,369.369 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 1336, in callHandlers
  2018-10-25 09:10:39,370.370 24060 WARNING oslo.privsep.daemon [-] privsep log:     hdlr.handle(record)
  2018-10-25 09:10:39,370.370 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/__init__.py", line 759, in handle
  2018-10-25 09:10:39,371.371 24060 WARNING oslo.privsep.daemon [-] privsep log:     self.emit(record)
  2018-10-25 09:10:39,371.371 24060 WARNING oslo.privsep.daemon [-] privsep log:   File "/usr/lib/python2.7/logging/handlers.py", line 414, in emit
  2018-10-25 09:10:39,372.372 24060 WARNING oslo.privsep.daemon [-] privsep log:     sres = os.stat(self.baseFilename)
  2018-10-25 09:10:39,372.372 24060 WARNING oslo.privsep.daemon [-] privsep log: OSError: [Errno 13] Permission denied: '/var/log/neutron/neutron.log'
  ...
  24060 ERROR neutron.agent.l3.agent FailedToDropPrivileges: Privsep daemon failed to start

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1800157/+subscriptions

Follow ups

  Thread Previous • Date Previous • • Thread Next