SSHDs in containers don't log

Bug #1404219 reported by Hugh Saunders
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack-Ansible
Fix Released
Medium
Hugh Saunders
Juno
Fix Released
Medium
Jesse Pretorius
Trunk
Fix Released
Medium
Hugh Saunders

Bug Description

As we don't run syslog inside each container, the SSHDs have nowhere to log to.
This is unhelpful for debugging, but potentially very bad for auditing.

Suggestion: use -E upstart config to specify a log file.

Changed in openstack-ansible:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to os-ansible-deployment (master)

Reviewed: https://review.openstack.org/143151
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=1dae4cca9f9cfb8230385c303f6c1b0292934bf6
Submitter: Jenkins
Branch: master

commit 1dae4cca9f9cfb8230385c303f6c1b0292934bf6
Author: Hugh Saunders <email address hidden>
Date: Fri Dec 19 16:55:30 2014 +0000

    Add configure ssh task

    This task will run on all nodes as part of the common role, it will:
     * enable logging to /var/log/sshd
     * set MaxSessions to 500 (Default 10)
     * set MaxStartups to 500 (Defualt 10)

    I believe that the low default values of of MaxS* may be causing us problems
    when we are delegating container tasks to the host, and forks > MaxS*.

    Logging Bug:
    Closes-Bug: #1404219

    Gate Ssh Failures Bug:
    Closes-Bug: #1404343

    Change-Id: Ia97e2a90d5a9fed0d9bfdd3e575c8cdc01b83dab

Changed in openstack-ansible:
status: New → Fix Committed
Changed in openstack-ansible:
milestone: none → next
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to os-ansible-deployment (juno)

Fix proposed to branch: juno
Review: https://review.openstack.org/152454

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to os-ansible-deployment (juno)

Reviewed: https://review.openstack.org/152454
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=c5d488059d9407f1b9b96552159ffc298c8dc547
Submitter: Jenkins
Branch: juno

commit c5d488059d9407f1b9b96552159ffc298c8dc547
Author: Hugh Saunders <email address hidden>
Date: Fri Dec 19 16:55:30 2014 +0000

    Add configure ssh task

    This task will run on all nodes as part of the common role, it will:
     * enable logging to /var/log/sshd
     * set MaxSessions to 500 (Default 10)
     * set MaxStartups to 500 (Defualt 10)

    I believe that the low default values of of MaxS* may be causing us problems
    when we are delegating container tasks to the host, and forks > MaxS*.

    Logging Bug:
    Closes-Bug: #1404219

    Gate Ssh Failures Bug:
    Closes-Bug: #1404343

    Change-Id: Ia97e2a90d5a9fed0d9bfdd3e575c8cdc01b83dab
    (cherry picked from commit 1dae4cca9f9cfb8230385c303f6c1b0292934bf6)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.