python2 is not in neutron rootwrapper filters

[Vladislav Belogrudov]

When finishing processes in neutron containers rootwrapper filters are looked thru to match executable to be killed. Upstream filters only use python2.7 and python3.5 while kolla venv uses python2. This gives situations when neutron cannot clean up resources, e.g.

2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent [-] Error while deleting router 97bbc015-fba1-47f6-90c0-e336777ddc06: ProcessExecutionError: Exit code: 99; Stdin: ; Stdout: ; Stderr: /var/lib/kolla/venv/bin/neutron-rootwrap: Unauthorized command: kill -15 170 (no filter matched)
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent Traceback (most recent call last):
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 381, in _safe_router_removed
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent self._router_removed(router_id)
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 400, in _router_removed
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent ri.delete()
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 445, in delete
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent self.destroy_state_change_monitor(self.process_monitor)
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 382, in destroy_state_change_monitor
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent pm.disable(sig=str(int(signal.SIGTERM)))
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/linux/external_process.py", line 109, in disable
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent utils.execute(cmd, run_as_root=self.run_as_root)
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 151, in execute
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent raise ProcessExecutionError(msg, returncode=returncode)
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent ProcessExecutionError: Exit code: 99; Stdin: ; Stdout: ; Stderr: /var/lib/kolla/venv/bin/neutron-rootwrap: Unauthorized command: kill -15 170 (no filter matched)
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent
2018-05-05 14:24:39.465 42 ERROR neutron.agent.l3.agent

The process to be killed still runs:

[root@network9 ~]# docker exec -ti -u root neutron_l3_agent bash
(neutron-l3-agent)[root@network9 /]# ls -l /proc/170/exe
lrwxrwxrwx 1 root root 0 May 5 14:24 /proc/170/exe -> /var/lib/kolla/venv/bin/python2

A solution would be to add python2 kolla specific filter.

[Vladislav Belogrudov (vlad-belogrudov)]

suggested change - https://review.openstack.org/#/c/566438/

[Michal Nasiadka (mnasiadka)]

Is this still a bug? Can you please reproduce? If not - bug will expire in 60 days.

[Launchpad Janitor (janitor)]

[Expired for kolla because there has been no activity for 60 days.]