Clay, Well, I'm an idiot. I absolutely remembered to cchange the SELinux config file to permissive, and absolutely forgot to 'setenforce 0' immediately afteward. I even watched the audit log, thinking it was just logging the actions that will be blocked when I set it back to enforcing. [root@swift ~]# grep SELINUX= /etc/selinux/config # SELINUX= can take one of these three values: SELINUX=permissive And yet: [root@swift ~]# getenforce Enforcing A quick "setenforce 0" made all the nasty errors go away. Thanks for your patience.
On Sep 22, 2022, at 3:06 PM, Clay Gerrard <clay.gerrard@gmail.com> wrote:
On Thu, Sep 22, 2022 at 12:36 PM Andrew Boring <andrew@andrewboring.com> wrote:
Sep 22 13:12:46 [hostname] account-replicator[183238]: Skipping: /srv/node/sda is not a directory
Ok well that's right here:
https://opendev.org/openstack/swift/src/branch/master/swift/common/db_replic...
Which you can look at in constraints is pretty straightforward:
https://opendev.org/openstack/swift/src/branch/master/swift/common/constrain...
[root@swift]# file /srv/node/sda /srv/node/sda: directory
ok, that seems like something that works - let's see if we can get closer to the problem? What if we use python (as root):
sudo python -c "import os.path; print(os.path.isdir('/srv/node/sda'))"
... or again with the "swift" user
sudo -u swift python -c "import os.path; print(os.path.isdir('/srv/node/sda'))"
N.B. the user swift is just the default - use whatever you have set as "user =" in your config
Also check syslog/journald and security or whatever for any warning logs about permissions or SELinux
-- Clay Gerrard