yahoo-eng-team team mailing list archive

[Launchpad Bug Tracker <1923453@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package neutron - 2:18.0.0-0ubuntu2

---------------
neutron (2:18.0.0-0ubuntu2) hirsute; urgency=medium

  * Cherry-pick patches from upstream master to initialize privsep library:
    - d/p/initialize-privsep-library-for-neutron-ovs-cleanup.patch (LP: #1923453).
    - d/p/initialize-privsep-library-in-neutron-commands.patch (LP: #1923870).

 -- Corey Bryant <corey.bryant@xxxxxxxxxxxxx>  Wed, 14 Apr 2021 13:13:40
-0400

** Changed in: neutron (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1923453

Title:
  [focal-wallaby] Services not running that should be: neutron-
  openvswitch-agent

Status in OpenStack neutron-gateway charm:
  Invalid
Status in OpenStack neutron-openvswitch charm:
  Invalid
Status in neutron:
  Triaged
Status in neutron package in Ubuntu:
  Fix Released

Bug description:
  When deploying focal-wallaby, the neutron-openvswitch-agent service
  doesn't start because one of its dependency services refuses to start:

  systemd[1]: Starting OpenStack Neutron OVS cleanup...
  sudo[190474]: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory
  sudo[190474]: pam_unix(sudo:auth): conversation failed
  sudo[190474]: pam_unix(sudo:auth): auth could not identify password for [neutron]
  sudo[190474]:  neutron : command not allowed ; TTY=unknown ; PWD=/var/lib/neutron ; USER=root ; COMMAND=/usr/bin/privsep-helper --config-file /etc/neutron/neutron.conf --privsep_context neutron.privileged.>
  systemd[1]: neutron-ovs-cleanup.service: Main process exited, code=exited, status=1/FAILURE
  systemd[1]: neutron-ovs-cleanup.service: Failed with result 'exit-code'.
  systemd[1]: Failed to start OpenStack Neutron OVS cleanup.

  Indeed /etc/securetty got removed in focal [0][1]. Maybe Neutron just
  started doing something in Wallaby that requires this file?

  This is visible in our OSCI test gate. [2][3]

  [0] https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1860826
  [1] https://askubuntu.com/questions/1239503/ubuntu-20-04-and-20-10-etc-securetty-no-such-file-or-directory
  [2] https://review.opendev.org/c/openstack/charm-neutron-openvswitch/+/778932
  [3] https://openstack-ci-reports.ubuntu.com/artifacts/1a8/778932/5/check/migrate-ovn-focal-wallaby-dvr-snat/1a84d92/log/juju-status.zaza-3b6febd0f883.txt

To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-neutron-gateway/+bug/1923453/+subscriptions