Public bug reported: After installing and configuring openstack services on a z/KVM compute node via the juju nova-compute-proxy charm, trying to start neutron-openvswitch-agent is successful, but any attempts to connect to the rootwrap daemon cause SELinux policy violations. In the latest version of z/KVM, there exists an RPM openstack-selinux.noarch that needs to be installed along with the neutron rpm.
---uname output--- Linux zs93k24 4.4.0-40.60.el7_2.kvmibm1_1_3.2.s390x #1 SMP Tue Oct 18 14:41:51 EDT 2016 s390x s390x s390x GNU/Linux Machine Type = IBM/S390, s390x ---Steps to Reproduce--- 1. Install clean z/KVM 1.1.3 2. Juju deploy nova-compute-proxy targeting z/KVM 3. Observe selinux failures Likely there should be an addition to the PACKAGES list in the proxy charm to install this openstack-selinux RPM. Alternatively there may be some zkvm metapackage that handles this sort of issue. ** Affects: nova-compute-lxd (Ubuntu) Importance: Undecided Assignee: Skipper Bug Screeners (skipper-screen-team) Status: New ** Tags: architecture-s39064 bugnameltc-148623 severity-high targetmilestone-inin--- ** Tags added: architecture-s39064 bugnameltc-148623 severity-high targetmilestone-inin--- -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1641893 Title: juju openstack charm - nova-compute-proxy - neutron-openvswitch-agent fails to start due to missing SELinux policy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nova-compute-lxd/+bug/1641893/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs