tuned requires elevated privileges
Bug #1659474 reported by
Lars Kellogg-Stedman
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tripleo |
Fix Released
|
High
|
Unassigned |
Bug Description
Running tuned requires elevated privileges, but the tuned tasks do not have become: true. This results in the quickstart failing. Instead of:
- name: Retrieve current tuned profile
command: tuned-adm active
register: tuned
changed_when: False
We need:
- name: Retrieve current tuned profile
command: tuned-adm active
register: tuned
changed_when: False
become: true
(And on the preceding task as well)
tags: | added: quickstart |
Changed in tripleo: | |
milestone: | ocata-rc1 → ocata-rc2 |
Changed in tripleo: | |
milestone: | ocata-rc2 → pike-1 |
Changed in tripleo: | |
milestone: | pike-1 → pike-2 |
Changed in tripleo: | |
milestone: | pike-2 → pike-3 |
Changed in tripleo: | |
milestone: | pike-3 → pike-rc1 |
Changed in tripleo: | |
status: | Triaged → Fix Released |
To post a comment you must log in.
The main playbook is a bit like a maze at this point, but things happens like:
- playbooks/ quickstart. yml includes provision.yml /github. com/openstack/ tripleo- quickstart/ blob/master/ roles/provision /local/ tasks/main. yml#L47
- provision yaml uses the provision/local role which adds the virthost with the root user: https:/
- provision remote does a bunch of stuff, including the tasks you mentioned
- it creates non_root_user on the virthost and readds its to the inventory with the new user
Thus the role runs with root privileges at this point and doesn't require become.