TechDebt: non-root user does not work with libvirt.sock in Ceilometer-compute

Bug #1593909 reported by Swapnil Kulkarni
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
kolla
Expired
Undecided
Unassigned

Bug Description

Need configuration in nova-libvirt container to allow
USER ceilometer to access libvirt.sock

Revision history for this message
Hui Kang (huikang27) wrote :

When deploying with devstack, all ceilometer-related process are owned by non-root user, except for ceilometer-compute (whose owner is root).

------------------------------
hkang 17492 2.4 0.9 117616 38664 pts/26 S+ Jun09 323:04 /usr/bin/python /usr/local/bin/ceilometer-collector --config-file /etc/ceilometer/ceilometer.conf
hkang 16191 1.6 1.5 2319884 62852 pts/23 Sl+ Jun09 209:23 /usr/bin/python /usr/local/bin/ceilometer-agent-notification --config-file /etc/ceilometer/ceilometer.conf
hkang 15208 0.3 1.1 280220 45536 pts/22 Sl+ Jun09 48:37 /usr/bin/python /usr/local/bin/ceilometer-polling --polling-namespaces central --config-file /etc/ceilometer/ceilometer.conf

root 18025 0.0 0.0 17248 912 pts/27 S+ Jun09 0:00 sg libvirtd /usr/local/bin/ceilometer-polling --polling-namespaces compute --config-file /etc/ceilometer/ceilometer.conf

------------------------------

summary:
Steven Dake (sdake)
Changed in kolla:
milestone: none → newton-2
Changed in kolla:
milestone: newton-2 → newton-3
Changed in kolla:
milestone: newton-3 → newton-rc1
Changed in kolla:
milestone: newton-rc1 → newton-rc2
Changed in kolla:
importance: High → Critical
Revision history for this message
Jeffrey Zhang (jeffrey4l) wrote :

ceilometer-compute now runs using root, so it can read that socket now.

Changed in kolla:
importance: Critical → Medium
milestone: newton-rc2 → ocata-1
Changed in kolla:
milestone: ocata-1 → ocata-2
Changed in kolla:
milestone: ocata-2 → ocata-3
Changed in kolla:
milestone: ocata-3 → ocata-rc1
Changed in kolla:
milestone: ocata-rc1 → pike-1
Changed in kolla:
milestone: pike-2 → pike-3
Changed in kolla:
milestone: pike-3 → pike-rc1
Changed in kolla:
milestone: pike-rc1 → queens-1
Changed in kolla:
milestone: queens-2 → queens-3
Changed in kolla:
milestone: queens-3 → queens-rc1
Changed in kolla:
milestone: queens-rc1 → queens-rc2
Changed in kolla:
milestone: queens-rc2 → rocky-1
Revision history for this message
Jeffrey Zhang (jeffrey4l) wrote : Cleanup EOL bug report

This is an automated cleanup. This bug report has been closed because it
is older than 18 months and there is no open code change to fix this.
After this time it is unlikely that the circumstances which lead to
the observed issue can be reproduced.

If you can reproduce the bug, please:
* reopen the bug report (set to status "New")
* AND add the detailed steps to reproduce the issue (if applicable)
* AND leave a comment "CONFIRMED FOR: <RELEASE_NAME>"
  Only still supported release names are valid (OCATA, PIKE, QUEENS, ROCKY, ROCKY).
  Valid example: CONFIRMED FOR: OCATA

Changed in kolla:
importance: Medium → Undecided
status: Confirmed → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.