<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>Thanks for your help and sketch of solution, Andrea! -Eric</div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Andrea Frittoli <<a href="mailto:andrea.frittoli@gmail.com">andrea.frittoli@gmail.com</a>><br><span style="font-weight:bold">Reply-To: </span> "OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br><span style="font-weight:bold">Date: </span> Friday, July 28, 2017 at 9:03 AM<br><span style="font-weight:bold">To: </span> "OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br><span style="font-weight:bold">Subject: </span> Re: [openstack-dev] [tempest][infra][congress] subprocess launched in tempest test lacks file permission<br></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div dir="ltr"><br><br><div class="gmail_quote"><div dir="ltr">On Fri, Jul 28, 2017 at 4:38 AM Eric K <<a href="mailto:ekcs.openstack@gmail.com">ekcs.openstack@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">A tempest test [1] launches additional instances of Congress using<br>
subprocess.popen and tests the coordination between them and the original<br>
instance launched by devstack. The problem is, the new instances are<br>
launched from the tempest test user rather than the user of the original<br>
congress instance devstack created. As a result, the new instances fail<br>
for being unable to access the encryption keys created by the original<br>
congress instance (600 permission).[2]<br><br>
Any suggestions for how to workaround this problem? Is it possible to<br>
somehow configure the gate job to run tempest tests as SU or as the<br>
stackuser that launches the original congress instance? Thanks so much!<br></blockquote><div><br></div><div>Unfortunately we don't have any facility in Tempest to control the user for</div><div>subprocesses since Tempest is meant for API testing only. Starting a</div><div>subprocess within the test sounds a bit outside of the scope of what you</div><div>may want to do in a Tempest test.</div><div> </div><div>If you want to use Tempest to verify HA type of scenarios you may want</div><div>to move the orchestration bit outside of Tempest - you could have an ansible</div><div>script that manages your services and run Tempest before and after certain</div><div>actions to verify that things are still working.</div><div><br></div><div>If you want tests to run in parallel to things happening to your system you</div><div>can do that but again you will need an external component to orchestrate</div><div>this, and you don't know what kind of tempest test will be running unless</div><div>you use a single long running scenario test designed for this purpose.</div><div><br></div><div>Andrea Frittoli (andreaf)</div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
[1]<br><a href="https://github.com/openstack/congress/blob/master/congress_tempest_tests/tests/scenario/congress_ha/test_ha.py.disabled#L117" rel="noreferrer" target="_blank">https://github.com/openstack/congress/blob/master/congress_tempest_tests/te<br>
sts/scenario/congress_ha/test_ha.py.disabled#L117</a> (currently disabled,<br>
trying to re-enable)<br><br>
[2]<br><a href="http://logs.openstack.org/35/487235/5/check/gate-congress-dsvm-api-mysql-ubuntu-xenial/607623d/logs/testr_results.html.gz" rel="noreferrer" target="_blank">http://logs.openstack.org/35/487235/5/check/gate-congress-dsvm-api-mysql-ub<br>
untu-xenial/607623d/logs/testr_results.html.gz</a> (find: OSError: [Errno 13]<br>
Permission denied: '/etc/congress/keys/aes_key©ö)<br><br><br><br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br></blockquote></div></div>
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a href="mailto:OpenStack-dev-request@lists.openstack.org">OpenStack-dev-request@lists.openstack.org</a>?subject:unsubscribe
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</blockquote></span></body></html>