neutron-mlnx-agent crashes right after service starts on centos

[Gil Meir]

The neutron-mlnx-agent crashes a few seconds after starting it on CentOS.

The reason for that is the file /etc/neutron/plugins/mlnx/mlnx_conf.ini is owned by the root user instead of neutron user,
the service is run as neutron user, so it crashes since it doesn't have permission to access it.

The access rights on Ubuntu are the same, but this doesn't happen on Ubuntu.

The openstack-neutron-mellanox package has the correct access right for this file in the spec file:
%config(noreplace) %attr(0640, root, neutron) "/etc/neutron/plugins/mlnx/mlnx_conf.ini"

The bug is probably caused during deployment.
If I remove the package: yum remove openstack-neutron-mellanox
and then reinstall it: yum install openstack-neutron-mellanox
the problem doesn't appear.

[Gil Meir (gilmeir-d)]

I have a solution for this using puppet, setting the file's owner to neutron after installing the openstack-neutron-mellanox package, and before starting the neutron-mlnx-agent service.

Is this solution acceptable? If it does I'll push it to gerrit..

[Evgeniya Shumakher (eshumakher)]

Gil, please discuss it with fuel-library team

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/133402

[Andrey Danin (gcon-monolake)]

Gil, chmod in Puppet is acceptable.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/133402
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=83d9d7b21d88e7e24ab6e5c949be11b82115661f
Submitter: Jenkins
Branch: master

commit 83d9d7b21d88e7e24ab6e5c949be11b82115661f
Author: Gil Meir <email address hidden>
Date: Sun Nov 9 13:25:16 2014 +0200

    Fixing neutron-mlnx-agent service crash bug

    Incorrect permissions for mlnx_conf.ini made the service crash.
    The fix sets the owner as 'neutron' since the service is being run as neutron user.

    Closes-bug: #1390185
    Change-Id: Ieb0927d644c5a1d7eead12a32580f88d4d790e43
    Signed-off-by: Gil Meir <email address hidden>