privsep helper command exited non-zero (1) [openstack-dev][kuryr]
Michał Dulko
mdulko at redhat.com
Wed Jul 29 11:02:35 UTC 2020
> Hi Dulko
> Thanks for your reply.
>
> My OS is Centos 7.6 + python 3.7
> Kuryr-daemon --version = 2.1.0
>
> I run the kuryr-daemon as root.
> I run the kuryr not as pods.
> I will show you the conf of kuryr-daemon:
>
> Waiting for your reply.
>
> Thanks.
> ==========================================
<snip!>
Please don't remove mailing list from the thread.
Hm, I googled some older answer that maybe privsep-helper is not
installed where kuryr-daemon is executed?
In terms of Kuryr stuff that file has almost nothing set, so it isn't
really giving much information, so - what's the Neutron plugin being
used? Is the [kubernetes]pod_vif_driver just neutron-vif? I think for
that to work you need to set [neutron_defaults]ovs_bridge for the
daemon and [neutron_defaults]pod_subnet for controller. Can you enable
debug for more logs from the error?
On Wed, 2020-07-29 at 02:39 +0000, Niu,Lixin wrote:
>
> 在 2020/7/29 上午1:15,“Michał Dulko”<mdulko at redhat.com> 写入:
>
> On Tue, 2020-07-28 at 12:28 +0000, Niu,Lixin wrote:
> > HI List
> > When I run the kuryr, and launch the pods from k8s, I get some
> > error like the title.
> > Could you please help me to solve this problem? Please give
> > some tips. Thanks a lot.
> >
> > 2020-07-28 16:35:22.084 27610 ERROR os_vif [-] Failed to plug vif VIFBridge(active=False,address=fa:16:3e:f2:ff:e6,bridge_name='qbradfc2b63-47',has_traffic_filtering=True,id=adfc2b63-471e-4fc6-b7be-72af56ee1f27,network=Network(652fdbae-281d-4475-b883-dcfecb821cbd),plugin='ovs',port_profile=VIFPortProfileOpenVSwitch,preserve_on_delete=False,vif_name='tapadfc2b63-47'): oslo_privsep.daemon.FailedToDropPrivileges: privsep helper command exited non-zero (1)
> >
>
> Hi,
>
> This seems pretty vague, but my first bet would be that kuryr-daemon is
> not running as root? What's the exact configuration you use - i.e.
> Neutron plugin, Kuryr binding plugin (nested vs neutron), are you
> running Kuryr services as pods?
>
> Thanks,
> Michał
>
>
>
More information about the openstack-discuss
mailing list