yahoo-eng-team team mailing list archive

[Steve Langasek <1069966@xxxxxxxxxxxxxxxxxx>]

The Precise Pangolin has reached end of life, so this bug will not be
fixed for that release

** Changed in: quantum (Ubuntu Precise)
       Status: Confirmed => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1069966

Title:
  rootwrap error with L3 agent

Status in neutron:
  Fix Released
Status in neutron folsom series:
  Fix Released
Status in quantum package in Ubuntu:
  Fix Released
Status in quantum source package in Precise:
  Won't Fix
Status in quantum source package in Quantal:
  Fix Released

Bug description:
  I am seeing the following error in /var/log/quantum/l3_agent.log:

  2012-10-22 09:00:48    DEBUG [quantum.agent.linux.utils] Running command: sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf /sbin/iptables-save -t filter
  2012-10-22 09:00:48    DEBUG [quantum.agent.linux.utils] 
  Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf', '/sbin/iptables-save', '-t', 'filter']
  Exit code: 99
  Stdout: 'Unauthorized command: /sbin/iptables-save -t filter\n'
  Stderr: ''
  2012-10-22 09:00:48    ERROR [quantum.agent.l3_agent] Error running l3_nat daemon_loop
  Traceback (most recent call last):
    File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 170, in daemon_loop
      self.do_single_loop()
    File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 227, in do_single_loop
      self.process_router(ri)
    File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 300, in process_router
      self.external_gateway_added(ri, ex_gw_port, internal_cidrs)
    File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 398, in external_gateway_added
      ri.iptables_manager.apply()
    File "/usr/lib/python2.7/dist-packages/quantum/agent/linux/iptables_manager.py", line 282, in apply
      root_helper=self.root_helper))
    File "/usr/lib/python2.7/dist-packages/quantum/agent/linux/utils.py", line 55, in execute
      raise RuntimeError(m)
  RuntimeError: 
  Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf', '/sbin/iptables-save', '-t', 'filter']
  Exit code: 99
  Stdout: 'Unauthorized command: /sbin/iptables-save -t filter\n'
  Stderr: ''

  If I run "sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf
  /sbin/iptables-save -t filter" it does indeed give me an Unauthorized
  command error.

  If I run "sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf iptables-save -t filter" (without the /sbin/) it works OK.
  Otherwise, I don't see errors in the log.

  Is this a problem?

  Thanks,
     Graham

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1069966/+subscriptions