Missing nf_conntrack_proto_gre module on Ubuntu Jammy breaks functional tests job

Bug #1994023 reported by Slawek Kaplonski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
devstack
Fix Released
Critical
Slawek Kaplonski

Bug Description

Error https://zuul.opendev.org/t/openstack/build/6d774cc87eef44c49f27648f406ed9cb/logs

2022-10-21 06:36:54.291487 | controller | ++ functions-common:trueorfalse:221 : set +o xtrace
2022-10-21 06:36:54.295888 | controller | + lib/neutron_plugins/ovs_source:load_module:35 : '[' False == True ']'
2022-10-21 06:36:54.298412 | controller | + lib/neutron_plugins/ovs_source:load_module:38 : sudo modprobe nf_conntrack_proto_gre
2022-10-21 06:36:54.309618 | controller | modprobe: FATAL: Module nf_conntrack_proto_gre not found in directory /lib/modules/5.15.0-52-generic
2022-10-21 06:36:54.314725 | controller | + lib/neutron_plugins/ovs_source:load_module:38 : echo 'FAILED TO LOAD nf_conntrack_proto_gre'
2022-10-21 06:36:54.314777 | controller | FAILED TO LOAD nf_conntrack_proto_gre
2022-10-21 06:36:54.318160 | controller | + lib/neutron_plugins/ovs_source:load_module:38 : dmesg
2022-10-21 06:36:54.319864 | controller | dmesg: read kernel buffer failed: Operation not permitted
2022-10-21 06:37:05.571601 | controller | ERROR
2022-10-21 06:37:05.571906 | controller | {
2022-10-21 06:37:05.572001 | controller | "delta": "0:03:11.973578",
2022-10-21 06:37:05.572089 | controller | "end": "2022-10-21 06:36:54.324091",
2022-10-21 06:37:05.572174 | controller | "msg": "non-zero return code",
2022-10-21 06:37:05.572258 | controller | "rc": 1,
2022-10-21 06:37:05.572341 | controller | "start": "2022-10-21 06:33:42.350513"
2022-10-21 06:37:05.572423 | controller | }

Revision history for this message
Slawek Kaplonski (slaweq) wrote :

Actually the issue is with running "dmesg" command in https://opendev.org/openstack/devstack/src/commit/c3a82032ab91343114b957a26f6530b32fe60e2b/lib/neutron_plugins/ovs_source#L38 without sudo. In Ubuntu Jammy it seems that setting sysctl kernel.dmesg_restrict=1 by default thus running dmesg requires root privileges.

affects: neutron → devstack
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to devstack (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/devstack/+/862479

Changed in devstack:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to devstack (master)

Reviewed: https://review.opendev.org/c/openstack/devstack/+/862479
Committed: https://opendev.org/openstack/devstack/commit/5e7afb779c469f593a1628e8f63c66989b7e2c49
Submitter: "Zuul (22348)"
Branch: master

commit 5e7afb779c469f593a1628e8f63c66989b7e2c49
Author: Slawek Kaplonski <email address hidden>
Date: Mon Oct 24 12:17:48 2022 +0200

    Run dmesg command with sudo

    It seems that setting "sysctl kernel.dmesg_restrict" was changed
    in Ubuntu 22.04 (Jammy) to "1" and because of that running "dmesg"
    command requires now root privileges.

    Closes-bug: #1994023

    Change-Id: I2adc76e3025fadf994bab2e2e1fd608e688874fc

Changed in devstack:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.