Open Stack

On Fri, Jul 10, 2015 at 1:57 AM, Mark Kirkwood <
mark.kirkwood at catalyst.net.nz> wrote:

> Hi,
>
> I'm deploying a swift 1.13 cluster on Ubuntu 14.04 and enabling ceilometer
> in the proxy pipeline results in it not working.
>
> The cause appears to be the log directory perms (note I am running the
> proxy under Apache):
>
> [Fri Jul 10 05:12:15.126214 2015] [:error] [pid 6844:tid 140048779998976]
> [remote 192.168.5.1:21419] IOError: [Errno 13] Permission denied:
> '/var/log/ceilometer/proxy-server.wsgi.log'
>
> Sure enough:
>
> $ ls -la /var/log/ceilometer/
> total 16
> drwxr-x---  2 ceilometer adm        4096 Jul 10 02:55 .
>
> Looking at the swift user:
>
> $ id swift
> uid=50144(swift) gid=50145(swift)
> groups=50145(swift),4(adm),106(puppet),115(ceilometer)
>
> This looks like https://bugs.launchpad.net/swift/+bug/1269473 but the
> code I have includes the fix for that. In fact it looks like the directory
> permissions are just being set wrong (indeed chmod'ing them to be 770 fixes
> this).
>
> Am I missing something? I don't see how this can possibly work unless the
> directory allows group write.
>

I think this is something that could be fixed in packaging scripts.
I can see you're using Puppet to deploy OpenStack, and fwiw, we are
stopping to manage permissions in Puppet because of packaging overlap. From
now, we totally rely on packaging permissions. We are in the process to
drop all the code that hardcode POSIX User/groups/permissions in our
manifests.


> Regards
>
> Mark
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 
Emilien Macchi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150712/cb7284c5/attachment.html>