Hi Dieter:

I think you didn't update your rootwrap filters file. Since [1], the filters include the EnvFilter to accept the "PROCESS_TAG" tag. Please check that.

Regards.

[1]https://review.opendev.org/c/openstack/neutron/+/865018/8/etc/neutron/rootwrap.d/rootwrap.filters

On Tue, Jan 23, 2024 at 11:17 PM <dieter.dorra@hsnr.de> wrote:
Initially I've installed Antelope with openvswitch as described in the docs, but after switching back to linuxbridge neutron fails with errors on control:

 neutron-l3-agent.log:
2024-01-23 21:54:07.364 192544 ERROR neutron_lib.callbacks.manager neutron_lib.exceptions.ProcessExecutionError: Exit code: 99; Cmd: ['ip', 'netns', 'exec', 'qrouter-ce46ba37-9b08-4c08-a31c-0d38ff3d1438', 'env', 'PROCESS_TAG=haproxy-ce46ba37-9b08-4c08-a31c-0d38ff3d1438', 'haproxy', '-f', '/var/lib/neutron/ns-metadata-proxy/ce46ba37-9b08-4c08-a31c-0d38ff3d1438.conf']; Stdin: ; Stdout: ; Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qrouter-ce46ba37-9b08-4c08-a31c-0d38ff3d1438 env PROCESS_TAG=haproxy-ce46ba37-9b08-4c08-a31c-0d38ff3d1438 haproxy -f /var/lib/neutron/ns-metadata-proxy/ce46ba37-9b08-4c08-a31c-0d38ff3d1438.conf (no filter matched)
2024-01-23 21:54:07.364 192544 ERROR neutron_lib.callbacks.manager

neutron-dhcp-agent.log
2024-01-23 21:58:38.754 192061 ERROR neutron.agent.linux.utils [None req-64a0a2f6-ec71-4288-900f-f86f0bd903e0 - - - - - -] Exit code: 99; Cmd: ['ip', 'netns', 'exec', 'qdhcp-ce84c378-6260-455f-8816-bb1d640aa42c', 'env', 'PROCESS_TAG=haproxy-ce84c378-6260-455f-8816-bb1d640aa42c', 'haproxy', '-f', '/var/lib/neutron/ns-metadata-proxy/ce84c378-6260-455f-8816-bb1d640aa42c.conf']; Stdin: ; Stdout: ; Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qdhcp-ce84c378-6260-455f-8816-bb1d640aa42c env PROCESS_TAG=haproxy-ce84c378-6260-455f-8816-bb1d640aa42c haproxy -f /var/lib/neutron/ns-metadata-proxy/ce84c378-6260-455f-8816-bb1d640aa42c.conf (no filter matched)

Any help appreciated.