[oslo] Rootwrap configuration issues (sudoers entries?)
Hello, I am configuring oslo rootwrap on my OpenStack instance, but I could only find documentation about nova-rootwrap like here <https://docs.openstack.org/oslo.rootwrap/latest/user/usage.html>. On the compute nodes it is now working, while I'm having troubles with eg. network nodes. I have added a sudoers entry on the like of the nova one: neutron ALL = (root) NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf * But I don't know if it is correct, is there any documentation about it? Regards Francesco Di Nucci
Hello, At first glance, your neutron snippet looks correct. I think you inspire from https://github.com/openstack/kolla/blob/c4225f35eef2f9ff590dfb1726579bfce2b1... Cheers Le lun. 29 avr. 2024 à 13:47, Francesco Di Nucci < francesco.dinucci@na.infn.it> a écrit :
Hello,
I am configuring oslo rootwrap on my OpenStack instance, but I could only find documentation about nova-rootwrap like here <https://docs.openstack.org/oslo.rootwrap/latest/user/usage.html>. On the compute nodes it is now working, while I'm having troubles with eg. network nodes. I have added a sudoers entry on the like of the nova one:
neutron ALL = (root) NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *
But I don't know if it is correct, is there any documentation about it?
Regards
Francesco Di Nucci
-- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/
*can Le lun. 29 avr. 2024 à 13:58, Herve Beraud <hberaud@redhat.com> a écrit :
Hello,
At first glance, your neutron snippet looks correct. I think you inspire from https://github.com/openstack/kolla/blob/c4225f35eef2f9ff590dfb1726579bfce2b1...
Cheers
Le lun. 29 avr. 2024 à 13:47, Francesco Di Nucci < francesco.dinucci@na.infn.it> a écrit :
Hello,
I am configuring oslo rootwrap on my OpenStack instance, but I could only find documentation about nova-rootwrap like here <https://docs.openstack.org/oslo.rootwrap/latest/user/usage.html>. On the compute nodes it is now working, while I'm having troubles with eg. network nodes. I have added a sudoers entry on the like of the nova one:
neutron ALL = (root) NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *
But I don't know if it is correct, is there any documentation about it?
Regards
Francesco Di Nucci
-- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/
-- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/
Thank you, it looks like this should be a valid reference, I'll try to use it as example also for the other components Regards Francesco Di Nucci On 29/04/24 13:58, Herve Beraud wrote:
*can
Le lun. 29 avr. 2024 à 13:58, Herve Beraud <hberaud@redhat.com> a écrit :
Hello,
At first glance, your neutron snippet looks correct. I think you inspire from https://github.com/openstack/kolla/blob/c4225f35eef2f9ff590dfb1726579bfce2b1...
Cheers
Le lun. 29 avr. 2024 à 13:47, Francesco Di Nucci <francesco.dinucci@na.infn.it> a écrit :
Hello,
I am configuring oslo rootwrap on my OpenStack instance, but I could only find documentation about nova-rootwrap like here <https://docs.openstack.org/oslo.rootwrap/latest/user/usage.html>. On the compute nodes it is now working, while I'm having troubles with eg. network nodes. I have added a sudoers entry on the like of the nova one:
neutron ALL = (root) NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *
But I don't know if it is correct, is there any documentation about it?
Regards
Francesco Di Nucci
-- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/
-- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/
participants (2)
-
Francesco Di Nucci
-
Herve Beraud