Thanks Ihar,
My SELinux is enable, and have AVCs in the audit.log:
type=AVC msg=audit(1411721759.040:33286): avc: denied { dac_override } for pid=15974
comm="nova-api" capability=1 scontext=system_u:system_r:nova_api_t:s0
tcontext=system_u:system_r:nova_api_t:s0 tclass=capability
type=AVC msg=audit(1411721759.040:33286): avc: denied { dac_read_search } for pid=15974
comm="nova-api" capability=2 scontext=system_u:system_r:nova_api_t:s0
tcontext=system_u:system_r:nova_api_t:s0 tclass=capability
type=SYSCALL msg=audit(1411721759.040:33286): arch=c000003e syscall=2 success=no exit=-13
a0=e183d0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=15974 auid=4294967295 uid=0 gid=0 euid=0
suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nova-api"
exe="/usr/bin/python2.7" subj=system_u:system_r:nova_api_t:s0 key=(null)
After I disable SELinux, nova-api and glane-api can works well without error. Thanks.
Regards,
Liping Mao
-----Original Message-----
From: rdo-list-bounces(a)redhat.com [mailto:rdo-list-bounces@redhat.com] On Behalf Of Ihar
Hrachyshka
Sent: 2014年9月26日 17:34
To: rdo-list(a)redhat.com
Subject: Re: [Rdo-list] AIO juno on CentOS7 issues
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Do you have SELinux enabled? Any AVCs in audit.log?
/Ihar
On 26/09/14 11:10, Liping Mao -X (limao - YI JIN XIN XI FU WU(SU ZHOU)YOU XIAN GONG SI at
Cisco) wrote:
Hi ,
When I install Juno AIO on CentOS7 today, I get two issues.
#Issue 1, glance-api can?t start up:
Here is the error message in glance-api.log:
2014-09-26 07:50:39.994 22950 INFO glance.wsgi.server [-] (22950) wsgi
starting up on
http://0.0.0.0:9292/
2014-09-26 07:50:39.995 22943 INFO glance.wsgi.server [-] Started
child 22951
2014-09-26 07:50:39.996 22951 INFO glance.wsgi.server [-] (22951) wsgi
starting up on
http://0.0.0.0:9292/
2014-09-26 07:50:39.997 22943 INFO glance.wsgi.server [-] Started
child 22952
2014-09-26 07:50:39.998 22952 INFO glance.wsgi.server [-] (22952) wsgi
starting up on
http://0.0.0.0:9292/
2014-09-26 07:50:40.000 22943 INFO glance.wsgi.server [-] Started
child 22953
2014-09-26 07:50:40.000 22953 INFO glance.wsgi.server [-] (22953) wsgi
starting up on
http://0.0.0.0:9292/
2014-09-26 07:50:40.034 22943 CRITICAL glance [-] error: [Errno 13]
Permission denied
2014-09-26 07:50:40.034 22943 TRACE glance Traceback (most recent call
last):
2014-09-26 07:50:40.034 22943 TRACE glance File
"/usr/bin/glance-api", line 10, in <module>
2014-09-26 07:50:40.034 22943 TRACE glance sys.exit(main())
2014-09-26 07:50:40.034 22943 TRACE glance File
"/usr/lib/python2.7/site-packages/glance/cmd/api.py", line 84, in main
2014-09-26 07:50:40.034 22943 TRACE glance
systemd.notify_once()
2014-09-26 07:50:40.034 22943 TRACE glance File
"/usr/lib/python2.7/site-packages/glance/openstack/common/systemd.py",
line 66, in notify_once
2014-09-26 07:50:40.034 22943 TRACE glance _sd_notify(True,
'READY=1')
2014-09-26 07:50:40.034 22943 TRACE glance File
"/usr/lib/python2.7/site-packages/glance/openstack/common/systemd.py",
line 39, in _sd_notify
2014-09-26 07:50:40.034 22943 TRACE glance sock =
socket.socket(socket.AF_UNIX, socket.SOCK_DGRAM)
2014-09-26 07:50:40.034 22943 TRACE glance File
"/usr/lib/python2.7/site-packages/eventlet/greenio.py", line 125, in
__init__
2014-09-26 07:50:40.034 22943 TRACE glance fd =
_original_socket(family_or_realsock, *args, **kwargs)
2014-09-26 07:50:40.034 22943 TRACE glance File
"/usr/lib64/python2.7/socket.py", line 187, in __init__
2014-09-26 07:50:40.034 22943 TRACE glance _sock =
_realsocket(family, type, proto)
2014-09-26 07:50:40.034 22943 TRACE glance error: [Errno 13]
Permission denied
2014-09-26 07:50:40.034 22943 TRACE glance
#Issue 2, nova-api can?t start up:
The error message in nova-api.log:
2014-09-26 07:59:42.206 28353 TRACE nova Traceback (most recent call
last):
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/bin/nova-api", line 10, in <module>
2014-09-26 07:59:42.206 28353 TRACE nova sys.exit(main())
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/cmd/api.py", line 55, in main
2014-09-26 07:59:42.206 28353 TRACE nova server =
service.WSGIService(api, use_ssl=should_use_ssl)
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/service.py", line 331, in
__init__
2014-09-26 07:59:42.206 28353 TRACE nova self.manager =
self._get_manager()
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/service.py", line 383, in
_get_manager
2014-09-26 07:59:42.206 28353 TRACE nova return
manager_class()
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/api/manager.py", line 30, in
__init__
2014-09-26 07:59:42.206 28353 TRACE nova
self.network_driver.metadata_accept()
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/network/linux_net.py", line
666, in metadata_accept
2014-09-26 07:59:42.206 28353 TRACE nova
iptables_manager.apply()
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/network/linux_net.py", line
434, in apply
2014-09-26 07:59:42.206 28353 TRACE nova self._apply()
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/openstack/common/lockutils.py",
line 322, in inner
2014-09-26 07:59:42.206 28353 TRACE nova with lock(name,
lock_file_prefix, external, lock_path):
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib64/python2.7/contextlib.py", line 17, in __enter__
2014-09-26 07:59:42.206 28353 TRACE nova return
self.gen.next()
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/openstack/common/lockutils.py",
line 287, in lock
2014-09-26 07:59:42.206 28353 TRACE nova with ext_lock:
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/openstack/common/lockutils.py",
line 171, in __enter__
2014-09-26 07:59:42.206 28353 TRACE nova self.acquire()
2014-09-26 07:59:42.206 28353 TRACE nova File
"/usr/lib/python2.7/site-packages/nova/openstack/common/lockutils.py",
line 166, in acquire
2014-09-26 07:59:42.206 28353 TRACE nova initial_value=1)
2014-09-26 07:59:42.206 28353 TRACE nova OSError: [Errno 38] Function
not implemented
2014-09-26 07:59:42.206 28353 TRACE nova
I temporarily skip the two issues by run glance-api and nova-api with
root user? After this , everything else works well for me.
Anyone get this kind of error before?
Regards,
Liping Mao
_______________________________________________ Rdo-list mailing list
Rdo-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/rdo-list
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
iQEcBAEBCgAGBQJUJTMSAAoJEC5aWaUY1u57h0YIAIR3C4YwRfCX7iBMWZXzRXYZ
owFxyGHhnP8B+8xtKc5+ewfhXe8plU6I+RvGFVgGWCk/ZdN1eSyUcmSKUynrz5Sk
Qp6WNT9JCOQ3nkWqK3lHYHEpa6koixQRm2f27Kw1/dYhjej+MX0bPa3e0Z+w0rZ4
eDILUlURj9NyMegSGEwCf0IBTB/ElMPmq5DMSpXQxgcRQ6qcCvqvcTn6FI/3XeL2
VjuTxSOXmrtUYjbHziAUbEh/KpWokIYvVCZTS2pDNHm8z6rZjj4wfvTBrYyfJyaA
8j02i+f7sMYYYiWlDBWpwok+TxMFWvUpykjEi2O/kamyeDo4/L10sFpV56FzxQU=
=0WqW
-----END PGP SIGNATURE-----
_______________________________________________
Rdo-list mailing list
Rdo-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/rdo-list