<div dir="ltr"><div>Hello:</div><div><br></div><div>This is indeed a problem with the execution privileges of the user running those commands.</div><div><br></div><div>What deployment tool are you using? What is the user that runs the LB agent?</div><div><br></div><div>The problem is, I think, that the privsep daemon is not properly starting. Try to execute manually the command you see in the logs. That will start the privsep daemon. If it doesn't work, check the privsep log and fix the permissions.</div><div><span lang="EN-US"></span></div><div><span lang="EN-US">['sudo', 'neutron-rootwrap',
'/etc/neutron/rootwrap.conf', 'privsep-helper', '--config-file',
'/usr/share/neutron/neutron-dist.conf', '--config-file',
'/etc/neutron/neutron.conf', '--config-file',
'/etc/neutron/plugins/ml2/linuxbridge_agent.ini', '--config-dir',
'/etc/neutron/conf.d/neutron-linuxbridge-agent', '--privsep_context',
'neutron.privileged.default', '--privsep_sock_path',
'/tmp/tmpm5d0ytiv/privsep.sock']</span></div><div><br></div><div>Regards.<br></div><div><br></div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Apr 7, 2021 at 5:51 AM 朝阳未烈 <<a href="mailto:379035389@qq.com">379035389@qq.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><p class="MsoNormal"><span lang="EN-US">Hi, everyone:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">I tried to build an instance on the<b>
compute node </b>but failed. I am sure that every necessary connection has been
built. <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">And I found the same error information on
the <b>controller node</b> and the <b>compute node</b> , in <b><i>/var/log/neutron/linuxbride-agent.log</i></b><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">That is information:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">INFO neutron.common.config [-] Logging
enabled!<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:52.866 2182 INFO
neutron.common.config [-] /usr/bin/neutron-linuxbridge-agent version 17.1.0<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:52.867 2182 INFO
neutron.plugins.ml2.drivers.linuxbridge.agent.linuxbridge_neutron_agent [-]
Interface mappings: {'provider': 'ens160'}<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:52.867 2182 INFO
neutron.plugins.ml2.drivers.linuxbridge.agent.linuxbridge_neutron_agent [-]
Bridge mappings: {}<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:52.868 2182 INFO
oslo.privsep.daemon [-] Running privsep helper: ['sudo', 'neutron-rootwrap',
'/etc/neutron/rootwrap.conf', 'privsep-helper', '--config-file',
'/usr/share/neutron/neutron-dist.conf', '--config-file',
'/etc/neutron/neutron.conf', '--config-file',
'/etc/neutron/plugins/ml2/linuxbridge_agent.ini', '--config-dir',
'/etc/neutron/conf.d/neutron-linuxbridge-agent', '--privsep_context',
'neutron.privileged.default', '--privsep_sock_path',
'/tmp/tmpm5d0ytiv/privsep.sock']<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 CRITICAL
oslo.privsep.daemon [-] privsep helper command exited non-zero (1)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 CRITICAL
neutron [-] Unhandled error: oslo_privsep.daemon.FailedToDropPrivileges:
privsep helper command exited non-zero (1)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR neutron
Traceback (most recent call last):<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/bin/neutron-linuxbridge-agent", line 10, in <module><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron sys.exit(main())<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/neutron/cmd/eventlet/plugins/linuxbridge_neutron_agent.py",
line 28, in main<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron agent_main.main()<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
line 1052, in main<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron manager =
LinuxBridgeManager(bridge_mappings, interface_mappings)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
line 79, in __init__<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron
self.validate_interface_mappings()<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
line 94, in validate_interface_mappings<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron if not
ip_lib.device_exists(interface):<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/neutron/agent/linux/ip_lib.py",
line 748, in device_exists<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron return IPDevice(device_name,
namespace=namespace).exists()<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/neutron/agent/linux/ip_lib.py",
line 328, in exists<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron return
privileged.interface_exists(<a href="http://self.name" target="_blank">self.name</a>, self.namespace)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/oslo_privsep/priv_context.py", line
246, in _wrap<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron self.start()<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/oslo_privsep/priv_context.py", line
258, in start<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron channel =
daemon.RootwrapClientChannel(context=self)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron File
"/usr/lib/python3.6/site-packages/oslo_privsep/daemon.py", line 367,
in __init__<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR
neutron raise FailedToDropPrivileges(msg)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR neutron
oslo_privsep.daemon.FailedToDropPrivileges: privsep helper command exited
non-zero (1)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">2021-04-07 11:30:53.346 2182 ERROR neutron<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><span lang="EN-US">And it is the configuration in<b> <i>/etc/sudoer.d/neutron
</i></b>below:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><b><span lang="EN-US">Defaults:neutron !requiretty<u></u><u></u></span></b></p><p class="MsoNormal"><b><span lang="EN-US">neutron ALL = (root) NOPASSWD:
/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *<u></u><u></u></span></b></p><p class="MsoNormal"><b><span lang="EN-US">neutron ALL = (root) NOPASSWD:
/usr/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf<u></u><u></u></span></b></p><p class="MsoNormal"><b><span lang="EN-US"> </span></b></p><p class="MsoNormal"><b><span lang="EN-US"> </span></b></p><p class="MsoNormal">
</p><p class="MsoNormal"><span lang="EN-US">I googled for the solution but they didn’t matter.
How can I solve this problem? Thanks for your advicement!<u></u><u></u></span></p></div><div><span style="font-size:10.5pt;font-family:等线" lang="EN-US"></span></div></blockquote></div>