Comment 2 for bug 2048064

Revision history for this message
Alexey 'Fenuks' Rusetsky (fenuks-uh) wrote :

I too think it is not the best idea to run such things as root. Neutron uses rootwrap to do such things, but kuryr doesn't.

So far that was the only place where kuryr lacks privileges to do required things and it's only limited to OVS setup, I think. OVS does not provide any options to create sockets with other permissions, as far as I can see.

Not sure this should be fixed somehow, but maybe leave this report be for those who might want to keep running kuryr as regular user?