Permission error on puppet plugin download

Bug #1272457 reported by Britt Houser
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Cisco Openstack
New
Medium
Chip
Havana
New
Medium
Chip

Bug Description

When I run install.sh I get a large HTML error when the script tries to run puppet plugin download:

--
+ puppet plugin download --server cvf3-server-a15.cisco.com
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate: Error 500 on SERVER: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
....
</html>

No plugins downloaded.
+ service apache2 restart
 * Restarting web server apache2
--

In the syslog I see:

--
Jan 24 06:25:34 cvf3-server-a15 puppet-master[14455]: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports
Jan 24 06:25:34 cvf3-server-a15 puppet-master[14455]: (/File[/var/lib/puppet/reports]/mode) change from 0755 to 0750 failed: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports
Jan 24 06:25:34 cvf3-server-a15 puppet-master[14455]: Could not prepare for execution: Got 2 failure(s) while initializing: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports; change from 0755 to 0750 failed: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports
Jan 24 06:25:35 cvf3-server-a15 puppet-master[14465]: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports
Jan 24 06:25:35 cvf3-server-a15 puppet-master[14465]: (/File[/var/lib/puppet/reports]/mode) change from 0755 to 0750 failed: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports
Jan 24 06:25:35 cvf3-server-a15 puppet-master[14465]: Could not prepare for execution: Got 2 failure(s) while initializing: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports; change from 0755 to 0750 failed: failed to set mode 755 on /var/lib/puppet/reports: Operation not permitted - /var/lib/puppet/reports
--

If I change the ownership of /var/lib/puppet/reports then it works fine:

--
chown -R puppet:puppet /var/lib/puppet/reports
--

Revision history for this message
Britt Houser (britthouser) wrote :
Chip (cbaesema)
Changed in openstack-cisco:
status: New → Confirmed
Revision history for this message
Chip (cbaesema) wrote :
Changed in openstack-cisco:
status: Confirmed → In Progress
importance: Undecided → Medium
assignee: nobody → Chip (cbaesema)
Changed in openstack-cisco:
status: In Progress → Fix Committed
Revision history for this message
Chris Ricker (chris-ricker) wrote :

I still see this with https://github.com/CiscoSystems/puppet_openstack_builder/pull/47 (aka upstream 69062) in place:

ebug: /File[/var/lib/puppet/rrd]/ensure: created
Debug: Finishing transaction 69978439776940
Debug: Received report to process from ci-build.ctocllab.cisco.com
Debug: Processing report from ci-build.ctocllab.cisco.com with processor Puppet::Reports::Store
+ chown -R puppet:puppet /var/lib/puppet
++ hostname -f
+ puppet plugin download --server ci-build.ctocllab.cisco.com
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate: Error 500 on SERVER: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
 <meta name="generator" content="Phusion Passenger">
 <title>Ruby (Rack) application could not be started</title>
 <style type="text/css">
  body {
 font-family: Verdana, 'Bitstream Vera Sans', Arial, Sans-Serif;
 font-size: 10pt;
 background: white;
 color: #222222;
 margin: 0;
 padding-top: 3em;
 padding-bottom: 3em;
 padding-left: 4.5em;
 padding-right: 4.5em;
}
<rest snipped>

Revision history for this message
Chris Ricker (chris-ricker) wrote :

2nd try on bare metal doesn't show this error. So something to keep an eye on

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.