privsep helper command exited non-zero (1) [openstack-dev][kuryr]

Michał Dulko mdulko at redhat.com
Wed Jul 29 11:02:35 UTC 2020


> Hi Dulko
>    Thanks for your reply.
>    
>    My OS is Centos 7.6 + python 3.7
>    Kuryr-daemon --version = 2.1.0
> 
>    I run the kuryr-daemon as root.
>    I run the kuryr not as pods.
>    I will show you the conf of kuryr-daemon:
> 
>    Waiting for your reply.
>    
>    Thanks.
>    ==========================================

<snip!>

Please don't remove mailing list from the thread.

Hm, I googled some older answer that maybe privsep-helper is not
installed where kuryr-daemon is executed?

In terms of Kuryr stuff that file has almost nothing set, so it isn't
really giving much information, so - what's the Neutron plugin being
used? Is the [kubernetes]pod_vif_driver just neutron-vif? I think for
that to work you need to set [neutron_defaults]ovs_bridge for the
daemon and [neutron_defaults]pod_subnet for controller. Can you enable
debug for more logs from the error?

On Wed, 2020-07-29 at 02:39 +0000, Niu,Lixin wrote:

> 
> 在 2020/7/29 上午1:15,“Michał Dulko”<mdulko at redhat.com> 写入:
> 
>     On Tue, 2020-07-28 at 12:28 +0000, Niu,Lixin wrote:
>     > HI List
>     >        When I run the kuryr, and launch the pods from k8s, I get some
>     > error like the title.
>     >         Could you please help me to solve this problem? Please give
>     > some tips. Thanks a lot.
>     >  
>     > 2020-07-28 16:35:22.084 27610 ERROR os_vif [-] Failed to plug vif VIFBridge(active=False,address=fa:16:3e:f2:ff:e6,bridge_name='qbradfc2b63-47',has_traffic_filtering=True,id=adfc2b63-471e-4fc6-b7be-72af56ee1f27,network=Network(652fdbae-281d-4475-b883-dcfecb821cbd),plugin='ovs',port_profile=VIFPortProfileOpenVSwitch,preserve_on_delete=False,vif_name='tapadfc2b63-47'): oslo_privsep.daemon.FailedToDropPrivileges: privsep helper command exited non-zero (1)
>     >  
>     
>     Hi,
>     
>     This seems pretty vague, but my first bet would be that kuryr-daemon is
>     not running as root? What's the exact configuration you use - i.e.
>     Neutron plugin, Kuryr binding plugin (nested vs neutron), are you
>     running Kuryr services as pods?
>     
>     Thanks,
>     Michał
>     
>     
> 





More information about the openstack-discuss mailing list