nova_libvirtd container start issue missing tss user - rhel8

[Martin Schuppert]

+ exec /usr/sbin/libvirtd --listen
2019-03-21 16:27:29.671+0000: 299078: info : libvirt version: 4.5.0, package: 23.module+el8+2800+2d311f65 (Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>, 2019-02-15-17:10:21, )
2019-03-21 16:27:29.671+0000: 299078: info : hostname: compute-0.redhat.local
2019-03-21 16:27:29.671+0000: 299078: error : virGetUserID:1043 : invalid argument: Failed to parse user 'tss'
2019-03-21 16:27:29.671+0000: 299078: error : virGetGroupID:1123 : invalid argument: Failed to parse group 'tss'

From /etc/libvirt/qemu.conf :
# User for the swtpm TPM Emulator
#
# Default is 'tss'; this is the same user that tcsd (TrouSerS) installs
# and uses; alternative is 'root'
#
#swtpm_user = "tss"
#swtpm_group = "tss"

[Bogdan Dobrelya (bogdando)]

We prolly need a bz for that

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/645525

[Martin Schuppert (mschuppert)]

* RHEL7

[root@undercloud ~]# getent passwd tss
tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/sbin/nologin

[root@undercloud ~]# uname -a
Linux undercloud.ooo.test 3.10.0-957.10.1.el7.x86_64 #1 SMP Mon Mar 18 15:06:45 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@undercloud ~]# rpm -q --whatrequires trousers
gnutls-3.3.29-9.el7_6.x86_64

[root@undercloud ~]# rpm -q --scripts trousers |grep tss
getent group tss >/dev/null || groupadd -g 59 -r tss
getent passwd tss >/dev/null || \
useradd -r -u 59 -g tss -d /dev/null -s /sbin/nologin \
 -c "Account used by the trousers package to sandbox the tcsd daemon" tss

* RHEL8
Linux undercloud-0.redhat.local 4.18.0-80.el8.x86_64 #1 SMP Wed Mar 13 12:02:46 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@undercloud-0 ~]# rpm -q --whatrequires trousers
no package requires trousers

[root@undercloud-0 ~]# rpm -q gnutls
gnutls-3.6.5-2.el8.x86_64

So gnutls does not have that dep any more.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/647308
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=04c5cfb59f2295bd730712bbe12b515498ac2cda
Submitter: Zuul
Branch: master

commit 04c5cfb59f2295bd730712bbe12b515498ac2cda
Author: Martin Schuppert <email address hidden>
Date: Mon Mar 25 08:58:59 2019 +0100

    Install trousers to get user tss for nova_libvirt

    The user tss is wanted by libvirt and comes with the trousers package.
    Prior RHEL8 it comes via the gnutls -> trousers dependencies, but there is
    no such a dependency in RHEL8, so make sure we have trousers installed.

    Change-Id: I9f11ba53d5c6f0a435a62bb462164566c4519d9f
    Closes-Bug: #1821309

[OpenStack Infra (hudson-openstack)]

Change abandoned by Bogdan Dobrelya (<email address hidden>) on branch: master
Review: https://review.openstack.org/645525

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kolla 8.0.0.0rc1 release candidate.