Deploying Ceilometer with DevStack fails with a permissions error

[Victoria Martinez de la Cruz]

Steps to reproduce: Add the line 'enable_plugin ceilometer https://git.openstack.org/openstack/ceilometer.git' to local.conf and run ./stack.sh
Expected output: OpenStack single-node deployment with Ceilometer activated
Actual output:

2015-10-06 15:25:40.284 | ++ iniset /etc/ceilometer/ceilometer.conf DEFAULT rpc_backend rabbit
2015-10-06 15:25:40.290 | ++ iniset /etc/ceilometer/ceilometer.conf oslo_messaging_rabbit rabbit_hosts 192.168.122.167
2015-10-06 15:25:40.296 | ++ iniset /etc/ceilometer/ceilometer.conf oslo_messaging_rabbit rabbit_password devstack
2015-10-06 15:25:40.302 | ++ iniset /etc/ceilometer/ceilometer.conf oslo_messaging_rabbit rabbit_userid stackrabbit
2015-10-06 15:25:40.308 | ++ '[' -n '' ']'
2015-10-06 15:25:40.309 | ++ '[' -n '' ']'
2015-10-06 15:25:40.309 | ++ iniset /etc/ceilometer/ceilometer.conf DEFAULT notification_topics notifications
2015-10-06 15:25:40.315 | ++ iniset /etc/ceilometer/ceilometer.conf DEFAULT verbose True
2015-10-06 15:25:40.321 | ++ iniset /etc/ceilometer/ceilometer.conf DEFAULT debug True
2015-10-06 15:25:40.327 | ++ [[ -n '' ]]
2015-10-06 15:25:40.327 | ++ cp -a /opt/stack/ceilometer/etc/ceilometer/README-ceilometer.conf.txt /opt/stack/ceilometer/etc/ceilometer/api_paste.ini /opt/stack/ceilometer/etc/ceilometer/event_definitions.yaml /opt/stack/ceilometer/etc/ceilometer/event_pipeline.yaml /opt/stack/ceilometer/etc/ceilometer/gabbi_pipeline.yaml /opt/stack/ceilometer/etc/ceilometer/gnocchi_resources.yaml /opt/stack/ceilometer/etc/ceilometer/pipeline.yaml /opt/stack/ceilometer/etc/ceilometer/policy.json /opt/stack/ceilometer/etc/ceilometer/policy.json.sample /opt/stack/ceilometer/etc/ceilometer/rootwrap.conf /opt/stack/ceilometer/etc/ceilometer/rootwrap.d /etc/ceilometer
2015-10-06 15:25:40.330 | cp: cannot create regular file '/etc/ceilometer/rootwrap.conf': Permission denied
2015-10-06 15:25:40.330 | cp: cannot create regular file '/etc/ceilometer/rootwrap.d/ipmi.filters': Permission denied
2015-10-06 15:25:40.330 | cp: preserving times for '/etc/ceilometer/rootwrap.d': Operation not permitted
2015-10-06 15:25:40.331 | + exit_trap
2015-10-06 15:25:40.331 | + local r=1
2015-10-06 15:25:40.331 | ++ jobs -p
2015-10-06 15:25:40.331 | + jobs=
2015-10-06 15:25:40.331 | + [[ -n '' ]]
2015-10-06 15:25:40.331 | + kill_spinner
2015-10-06 15:25:40.331 | + '[' '!' -z '' ']'
2015-10-06 15:25:40.331 | + [[ 1 -ne 0 ]]
2015-10-06 15:25:40.331 | + echo 'Error on exit'
2015-10-06 15:25:40.332 | Error on exit
2015-10-06 15:25:40.332 | + [[ -z /opt/stack/logs ]]
2015-10-06 15:25:40.332 | + /home/vkmc/devstack/tools/worlddump.py -d /opt/stack/logs
2015-10-06 15:25:40.492 | + exit 1

Workaround: remove Ceilometer, add "disable_service ceilometer-aipmi" and rerun ./stack.sh

[gordon chung (chungg)]

this actually happens all the time. bumping up

[Chris Dent (cdent)]

The change at commit e6087c9570250145e70d6ca335f9, which adds a cp -a of everything in etc/ceilometer caused this. We need to skip the rootwrap stuff.

Arguably the right solution is to go back to being explicit.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/233064

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/233064
Committed: https://git.openstack.org/cgit/openstack/ceilometer/commit/?id=614d7422d56d8793aa9fcbf420f90ddfc9504c13
Submitter: Jenkins
Branch: master

commit 614d7422d56d8793aa9fcbf420f90ddfc9504c13
Author: Chris Dent <email address hidden>
Date: Fri Oct 9 13:12:29 2015 +0000

    Be explicit when copying files to /etc/ceilometer

    If we use a glob too many files are attempted to be copied and we can
    cause two issues:

    * there can be a permission problem because an earlier call to
      configure_rootwrap already wrote some files as root
    * iniset calls on ceilometer.conf that already happened will be
      clobbered

    Change-Id: I960256cdd2c32bbbe4591282e8a56ee156541667
    Closes-Bug: #1503338

[Thierry Carrez (ttx)]

This issue was fixed in the openstack/ceilometer 6.0.0.0b1 development milestone.