Bug 1306655

Summary: Inspector packaging should create /var/log/ironic-inspector/ with appropriate ACL
Product: Red Hat OpenStack Reporter: Dmitry Tantsur <dtantsur>
Component: openstack-ironic-inspectorAssignee: Mike Burns <mburns>
Status: CLOSED ERRATA QA Contact: Alexander Chuzhoy <sasha>
Severity: unspecified Docs Contact:
Priority: urgent    
Version: 8.0 (Liberty)CC: jtrowbri, mburns, slinaber
Target Milestone: ga   
Target Release: 8.0 (Liberty)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-ironic-inspector-2.2.4-3.el7ost Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-04-07 21:47:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Dmitry Tantsur 2016-02-11 14:21:17 UTC
Inspector stores ramdisk logs in /var/log/ironic-inspector/ramdisk by default, so this directory (and its parent) should be present and have appropriate ACL.

Comment 2 John Trowbridge 2016-02-11 14:34:07 UTC
I think we just need to cherry-pick this downstream:

https://github.com/openstack-packages/ironic-inspector/commit/c941186021c666147a6849b7c62650f0bd2f9f74

Comment 4 Alexander Chuzhoy 2016-02-23 17:47:35 UTC
Verified:
Environment:
openstack-ironic-inspector-2.2.4-1.el7ost.noarch

As listed below, the directory exists and has the proper acls:

[stack@instack ~]$ ls -laZ /var/log/ironic-inspector/ramdisk
drwxr-xr-x. ironic-inspector ironic-inspector system_u:object_r:var_log_t:s0   .
drwxr-xr-x. root             root             system_u:object_r:var_log_t:s0   ..

Comment 5 Dmitry Tantsur 2016-02-26 14:31:41 UTC
I'm working on the logging improvements for ironic-inspector, and it occurred to me that we need to put logs to /var/log/ironic-inspector, meaning that it should also be owned by ironic-inspector. Mike, could you check this please?

Comment 7 Dmitry Tantsur 2016-04-06 15:32:55 UTC
[stack@instack ~]$ stat /var/log/ironic-inspector/
  File: ‘/var/log/ironic-inspector/’
  Size: 4096            Blocks: 8          IO Block: 4096   directory
Device: 801h/2049d      Inode: 525767      Links: 3
Access: (0755/drwxr-xr-x)  Uid: (  995/ironic-inspector)   Gid: (  992/ironic-inspector)
[stack@instack ~]$ stat /var/log/ironic-inspector/ramdisk/
  File: ‘/var/log/ironic-inspector/ramdisk/’
  Size: 4096            Blocks: 8          IO Block: 4096   directory
Device: 801h/2049d      Inode: 525768      Links: 2
Access: (0755/drwxr-xr-x)  Uid: (  995/ironic-inspector)   Gid: (  992/ironic-inspector)

Comment 9 errata-xmlrpc 2016-04-07 21:47:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0604.html