Privsep uses system libraries instead of the ones in virtual env
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
cinderlib |
Fix Released
|
Undecided
|
Gorka Eguileor |
Bug Description
When a virtual environment is created with the "--system-
This results in errors such as the ones we see:
- In the Ussuri gate: ModuleNotFoundE
- In the Wallaby gate: ModuleNotFoundE
This happens because os-brick and cinder are starting privsep using the "privsep-helper" mechanism, and privsep was not installed in the virtual env because it was already present system wide, so the "privsep-helper" that is executed is the one from "/usr/local/
This python script "privsep-helper" ignores the virtual environment and forces usage of the system's python, for example in a Wallaby installation this could be "#!/usr/
Since it ignores the virtual environment it won't use its packages and anything that's not present on system wide will not be found, and if found it may be executing different code.
Related bug: https:/ /bugs.launchpad .net/cinderlib/ +bug/1958159