Magnum Docker Stack error with new Fedora-Atomic version

[David Girón]

Using Magnum 4.1.3, when I create a new cluster template for Docker, with the latest version of Fedora-Atomic (currently 26), etcd service gives an error:

Oct 02 09:34:38 do-swarm-master.novalocal etcd[2009]: open /etc/docker/server.key: permission denied

The file is generated and exists, but has chmod 600.

When using fedora-atomic-ocata image, this problem does not appear.

The problem is that OpenSSL v1.0.2 uses chmod 644 in server.key, but v1.1.0 uses chmod 600.

[yatin (yatinkarel)]

I have seen this is in swarm experimental jobs as well: http://logs.openstack.org/76/508676/13/experimental/magnum-functional-swarm/39469ee/logs/cluster-nodes/master-test-172.24.5.12/etcd.txt.gz#_Oct_02_06_46_07

[David Girón (duhow)]

Fixed by editing fragments/make-cert.py , function write_server_key() , adding the next line:

os.chmod(SERVER_KEY_PATH, 0644) # patch for OpenSSL v1.1

[ByungYeol Woo (wby1089)]

I was facing same issue in Magnum 5.0.1 with Fedora-Atomic 26 1030.

After changing make-cert.py according to David's advice, etcd works well.