Error on running privsep helper command
Bug #1749342 reported by
hongbin
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Zun |
Fix Released
|
Critical
|
hongbin | ||
Queens |
Fix Committed
|
Undecided
|
hongbin |
Bug Description
If the user (i.e. ubuntu, stack) doesn't have passwordless sudo privilege, zun will fail on cinder volume bindmount. Here is the error:
http://
This is because we need to use "sudo" for running privsep help command (in os-brick). We need to use rootwrap this this purpose.
We need to (i) setup rootwrap in devstack and (ii) document this in installation guide.
UPDATE(2018-07-28):
Zun has switched to privsep to execute privileged command
* Code: https:/
* Doc: https:/
Kolla-ansible needs to be updated to configure rootwrap for privsep when deploying zun-compute.
Changed in zun: | |
importance: | Undecided → Critical |
status: | New → Triaged |
assignee: | nobody → hongbin (hongbin034) |
description: | updated |
Changed in zun: | |
status: | Triaged → In Progress |
no longer affects: | kolla-ansible |
To post a comment you must log in.
Related fix proposed to branch: master /review. openstack. org/554021
Review: https:/