Public bug reported:

After installing and configuring openstack services on a z/KVM compute node via 
the juju nova-compute-proxy charm, trying to start neutron-openvswitch-agent is 
successful, but any attempts to connect to the rootwrap daemon cause SELinux 
policy violations.
 
In the latest version of z/KVM, there exists an RPM openstack-selinux.noarch 
that needs to be installed along with the neutron rpm.

---uname output---
Linux zs93k24 4.4.0-40.60.el7_2.kvmibm1_1_3.2.s390x #1 SMP Tue Oct 18 14:41:51 
EDT 2016 s390x s390x s390x GNU/Linux

Machine Type = IBM/S390, s390x
 
---Steps to Reproduce---
1. Install clean z/KVM 1.1.3
2. Juju deploy nova-compute-proxy targeting z/KVM
3. Observe selinux failures

Likely there should be an addition to the PACKAGES list in the proxy
charm to install this openstack-selinux RPM. Alternatively there may be
some zkvm metapackage that handles this sort of issue.

** Affects: nova-compute-lxd (Ubuntu)
     Importance: Undecided
     Assignee: Skipper Bug Screeners (skipper-screen-team)
         Status: New


** Tags: architecture-s39064 bugnameltc-148623 severity-high 
targetmilestone-inin---

** Tags added: architecture-s39064 bugnameltc-148623 severity-high
targetmilestone-inin---

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1641893

Title:
  juju openstack charm - nova-compute-proxy - neutron-openvswitch-agent
  fails to start due to missing SELinux policy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nova-compute-lxd/+bug/1641893/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to