myhostname on managed hosts is set to master node hostname

Bug #1602239 reported by Bartłomiej Piotrowski
260
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Committed
High
Maksim Malchuk
Mitaka
Fix Released
High
Maksim Malchuk

Bug Description

After the deployment, myhostname in /etc/postfix/main.cf is set to wrong hostname:

[root@nailgun ~]# ssh node-5 grep ^myhostname /etc/postfix/main.cf
Warning: Permanently added 'node-5' (ECDSA) to the list of known hosts.
myhostname = nailgun.test.domain.local
[root@nailgun ~]# hostname
nailgun.test.domain.local

It should be either set to actual FQDN of the host or not set all (postfix will default to current hostname).

This happens because postfix is installed during the build of bootstrap image on the master node, causing apt to pull Fuel hostname instead of not setting it at all.

The outcome of this bug is DDoS of DNS servers set in Fuel master node.

Dmitry Klenov (dklenov)
tags: added: area-library
no longer affects: fuel/newton
Changed in fuel:
assignee: Fuel Sustaining (fuel-sustaining-team) → Maksim Malchuk (mmalchuk)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/341851

Changed in fuel:
status: Confirmed → In Progress
tags: added: team-bugfix
information type: Public → Public Security
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/341851
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=90d04251e70f675cc020cf253232ed8a05273210
Submitter: Jenkins
Branch: master

commit 90d04251e70f675cc020cf253232ed8a05273210
Author: Maksim Malchuk <email address hidden>
Date: Thu Jul 14 02:27:27 2016 +0300

    Configure postfix to use correct hostname

    Change-Id: Idaeb95f2232db7611f6f2c13b9e22152076acd30
    Closes-Bug: #1602239
    Signed-off-by: Maksim Malchuk <email address hidden>

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/mitaka)

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/342252

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/mitaka)

Reviewed: https://review.openstack.org/342252
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=9288dc828f3b55ec6a0745b7d603a561f86a0537
Submitter: Jenkins
Branch: stable/mitaka

commit 9288dc828f3b55ec6a0745b7d603a561f86a0537
Author: Maksim Malchuk <email address hidden>
Date: Thu Jul 14 02:27:27 2016 +0300

    Configure postfix to use correct hostname

    Change-Id: Idaeb95f2232db7611f6f2c13b9e22152076acd30
    Closes-Bug: #1602239
    Signed-off-by: Maksim Malchuk <email address hidden>
    (cherry picked from commit 90d04251e70f675cc020cf253232ed8a05273210)

tags: added: on-verification
Revision history for this message
Alexey. Kalashnikov (akalashnikov) wrote :

Verified on 9.1 snapshot #76

[root@nailgun ~]# shotgun2 short-report
cat /etc/fuel_build_id:
 495
cat /etc/fuel_build_number:
 495
cat /etc/fuel_release:
 9.0
cat /etc/fuel_openstack_version:
 mitaka-9.0
rpm -qa | egrep 'fuel|astute|network-checker|nailgun|packetary|shotgun':
 fuel-library9.0-9.0.0-1.mos8495.noarch
 rubygem-astute-9.0.0-1.mos753.noarch
 fuel-release-9.0.0-1.mos6349.noarch
 fuel-bootstrap-cli-9.0.0-1.mos285.noarch
 fuel-provisioning-scripts-9.0.0-1.mos8748.noarch
 shotgun-9.0.0-1.mos90.noarch
 python-fuelclient-9.0.0-1.mos325.noarch
 fuel-9.0.0-1.mos6349.noarch
 fuel-openstack-metadata-9.0.0-1.mos8748.noarch
 python-packetary-9.0.0-1.mos142.noarch
 nailgun-mcagents-9.0.0-1.mos753.noarch
 fuel-utils-9.0.0-1.mos8495.noarch
 fuel-setup-9.0.0-1.mos6349.noarch
 network-checker-9.0.0-1.mos74.x86_64
 fuel-agent-9.0.0-1.mos285.noarch
 fuel-ui-9.0.0-1.mos2717.noarch
 fuel-misc-9.0.0-1.mos8495.noarch
 fuel-ostf-9.0.0-1.mos938.noarch
 fuel-notify-9.0.0-1.mos8495.noarch
 fuel-nailgun-9.0.0-1.mos8748.noarch
 fuelmenu-9.0.0-1.mos274.noarch
 fuel-mirror-9.0.0-1.mos142.noarch
 fuel-migrate-9.0.0-1.mos8495.noarch

FUEL_QA_COMMIT=bfb750898b0f5ef196eb0c8a295cc29279487ade
UBUNTU_MIRROR_ID=ubuntu-2016-07-30-170657
CENTOS_MIRROR_ID=centos-7.2.1511-2016-05-31-083834
MOS_UBUNTU_MIRROR_ID=9.0-2016-07-29-200321
MOS_CENTOS_OS_MIRROR_ID=os-2016-06-23-135731
MOS_CENTOS_PROPOSED_MIRROR_ID=proposed-2016-07-29-200321
MOS_CENTOS_UPDATES_MIRROR_ID=updates-2016-06-23-135916
MOS_CENTOS_HOLDBACK_MIRROR_ID=holdback-2016-06-23-140047
MOS_CENTOS_HOTFIX_MIRROR_ID=hotfix-2016-07-18-162958
MOS_CENTOS_SECURITY_MIRROR_ID=security-2016-06-23-140002

tags: removed: on-verification
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/fuel-library 10.0.0rc1

This issue was fixed in the openstack/fuel-library 10.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/fuel-library 10.0.0

This issue was fixed in the openstack/fuel-library 10.0.0 release.

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.