rabbitmq epmd process running from user 'root'

Bug #1483249 reported by Bartosz Kupidura
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
Medium
Matthew Mosesohn

Bug Description

After deployment of 7.0 on controller epmd process is running from 'root' user.
When epmd+rabbitmq is killed, epmd is properly spawned from 'rabbitmq' user.

root@node-2:~# ps aux|grep -i epmd
root 16596 0.0 0.0 9540 2632 ? S 11:47 0:00 /usr/lib/erlang/erts-5.10.4/bin/epmd -daemon
root@node-2:~# kill -9 16596 && killall -9 -u rabbitmq
root@node-2:~# ps aux|grep -i epmd
rabbitmq 12755 0.0 0.0 7492 316 ? S 13:00 0:00 /usr/lib/erlang/erts-5.10.4/bin/epmd -daemon

VERSION:
  feature_groups:
    - mirantis
    - advanced
  production: "docker"
  release: "7.0"
  openstack_version: "2015.1.0-7.0"
  api: "1.0"
  build_number: "154"
  build_id: "2015-08-10_03-11-20"
  nailgun_sha: "58c080206cc17137b124744a40218c89beb6bb28"
  python-fuelclient_sha: "e069d9fde92451ec7f555342951807c5528e96e5"
  fuel-agent_sha: "57145b1d8804389304cd04322ba0fb3dc9d30327"
  fuel-nailgun-agent_sha: "e01693992d7a0304d926b922b43f3b747c35964c"
  astute_sha: "e1d3a435e5df5b40cbfb1a3acf80b4176d15a2dc"
  fuel-library_sha: "1851b4dff75170dbd63f6e15cde734e348e86d27"
  fuel-ostf_sha: "c7f745431aa3c147f2491c865e029e0ffea91c47"
  fuelmain_sha: "bdca75d0256338519c7eddd8a840ee6ecba7f992"

Tags: area-library
Changed in fuel:
assignee: nobody → Fuel Library Team (fuel-library)
status: New → Confirmed
milestone: none → 7.0
Igor (ipukha)
Changed in fuel:
assignee: Fuel Library Team (fuel-library) → Igor (ipukha)
Changed in fuel:
status: Confirmed → Won't Fix
sergiiF (framin)
Changed in fuel:
assignee: Igor (ipukha) → sergiiF (framin)
assignee: sergiiF (framin) → nobody
Revision history for this message
Bogdan Dobrelya (bogdando) wrote :

this bug is not related to fuel library and has nothing to the puppet manifests.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/230479

Changed in fuel:
assignee: nobody → Matthew Mosesohn (raytrac3r)
status: Won't Fix → In Progress
Revision history for this message
Matthew Mosesohn (raytrac3r) wrote :

We just need to enable the tweaks to prevent rabbitmq-server from starting automatically on package install.

Changed in fuel:
assignee: Matthew Mosesohn (raytrac3r) → Alex Schultz (alex-schultz)
Dmitry Pyzhov (dpyzhov)
Changed in fuel:
milestone: 7.0 → 8.0
no longer affects: fuel/8.0.x
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/230479
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=79f6c91d4aa57f91f1337d144d32c8b110c973bd
Submitter: Jenkins
Branch: master

commit 79f6c91d4aa57f91f1337d144d32c8b110c973bd
Author: Matthew Mosesohn <email address hidden>
Date: Fri Oct 2 17:43:49 2015 +0300

    Avoid starting rabbitmq server as root

    Starting rabbitmq-server causes rabbitmq (and dependent
    processes) to start as root user, causing undesirable
    results. epmd process stays running as root until killed
    by OCF scripts. It is more desirable to start rabbitmq
    manually when Puppet tells it to.

    Additionally, rabbitmq-plugins must be run as root
    (in order to set /etc/rabbitmq/enabled_plugins), but as
    a consequence, it starts epmd and leaves it running.
    This can be worked around by starting epmd as rabbitmq
    user before evaluating any plugins.

    Added test for ensuring all RabbitMQ related processes
    are running as rabbitmq user.

    Upstream proposed change:
    https://github.com/puppetlabs/puppetlabs-rabbitmq/pull/403

    Change-Id: Ia6e5392c9d16d1be0ea166a61402d2103c5d4453
    Closes-Bug: #1483249

Changed in fuel:
status: In Progress → Fix Committed
tags: added: on-verification
Revision history for this message
Vladimir Khlyunev (vkhlyunev) wrote :

ISO 152 - verified.
right after deployment:
root@node-1:~# ps aux|grep -i epmd
root 4721 0.0 0.0 10460 944 pts/18 S+ 11:27 0:00 grep --color=auto -i epmd
rabbitmq 19004 0.0 0.0 9412 2216 ? S 09:57 0:00 epmd -daemon

Changed in fuel:
status: Fix Committed → Fix Released
tags: removed: on-verification
Dmitry Pyzhov (dpyzhov)
tags: added: area-library
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.