Comment 3 for bug 1487130

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to os-ansible-deployment (master)

Reviewed: https://review.openstack.org/216301
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=ffb701f8a3a325e0c321fb2d3e37eea25e66a8af
Submitter: Jenkins
Branch: master

commit ffb701f8a3a325e0c321fb2d3e37eea25e66a8af
Author: kevin <email address hidden>
Date: Mon Aug 24 16:24:02 2015 +0100

    Removed default lxc profile on container create

    Having the lxc container create role drop the lxc-openstack apparmor
    profile on all containers anytime its executed leads to the possibility
    of the lxc container create task overwriting the running profile on a given
    container. If this happens its likley to cause service interruption until the
    correct profile is loaded for all containers its effected by the action.

    To fix this issue the default "lxc-openstack" profile has been removed from the
    lxc contianer create task and added to all plays that are known to be executed
    within an lxc container. This will ensure that the profile is untouched on
    subsequent runs of the lxc-container-create.yml play.

    Change-Id: Ifa4640be60c18f1232cc7c8b281fb1dfc0119e56
    Closes-Bug: 1487130