OpenStack not installed with consistent uid/gid for glance/cinder/nova users

[Gaurang Tapase]

For a shared/clustered filesystem (GPFS) backend, one of the requirement is to have a common uid/gid for nova/cinder/glance users across all nodes when nova/cinder/glance services are deployed. This is typically required in HA environment where these services run on more than one units. This is to have required minimal permissions to the directories which are accessed by these services. Otherwise, we have to set 777 permissions on these directories to make things work.

[James Page (james-page)]

Gaurang

Please use the following allocations in any workarounds you might do in the short term:

    64060 | nova | OpenStack Compute
    64061 | cinder | OpenStack Block Storage
    64062 | glance | OpenStack Image

We'll work these into the queens packaging soon.

[Launchpad Janitor (janitor)]

This bug was fixed in the package nova - 2:17.0.0~b2-0ubuntu2

---------------
nova (2:17.0.0~b2-0ubuntu2) bionic; urgency=medium

  * d/nova-common.postinst: Use reserved uid/gid for nova user/group,
    ensuring consistency across deployments (LP: #1657202).

 -- James Page <email address hidden> Tue, 12 Dec 2017 15:20:52 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package glance - 2:16.0.0~b2-0ubuntu2

---------------
glance (2:16.0.0~b2-0ubuntu2) bionic; urgency=medium

  * d/glance-common.postinst: Use reserved uid/gid for glance user/group,
    ensuring consistency across deployments (LP: #1657202).
  * d/glance-common.install,rules: Skip install of rootwrap.conf as this
    is also shipped in glance-store.

 -- James Page <email address hidden> Tue, 12 Dec 2017 15:21:39 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package cinder - 2:12.0.0~b2-0ubuntu2

---------------
cinder (2:12.0.0~b2-0ubuntu2) bionic; urgency=medium

  * d/cinder-common.postinst: Use reserved uid/gid for cinder user/group,
    ensuring consistency across deployments (LP: #1657202).

 -- James Page <email address hidden> Tue, 12 Dec 2017 15:22:10 +0000

[Nobuto Murata (nobuto)]

Excuse me for reviving an old bug report, but Gnocchi also requires a static uid/gid to support NFS use case.

https://gnocchi.xyz/intro.html
> If you need to scale the number of server with the file driver, you can export and share the data via NFS among all Gnocchi processes.

[Nobuto Murata (nobuto)]

Here is the current maintainer code:
https://git.launchpad.net/ubuntu/+source/openstack-pkg-tools/tree/pkgos_func?h=ubuntu/focal-proposed#n786

and the previous upstream bug in Debian:
https://bugs.debian.org/884178

[Nobuto Murata (nobuto)]

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=983635
> 64065 | gnocchi | Gnocchi - Metric as a Service