Bug 1624709

Summary: [OSP 13] Need to change the permission of /etc/nova/migration/identity after installation
Product: Red Hat OpenStack Reporter: chhu
Component: openstack-packstackAssignee: Rajesh Tailor <ratailor>
Status: CLOSED ERRATA QA Contact: nlevinki <nlevinki>
Severity: high Docs Contact:
Priority: medium    
Version: 13.0 (Queens)CC: jschluet, lmen, lyarwood, mariel, ratailor, srevivo, xuzhang, yalzhang
Target Milestone: z4Keywords: Triaged, ZStream
Target Release: 13.0 (Queens)   
Hardware: x86_64   
OS: Linux   
Whiteboard: libvirt_OSP_INT
Fixed In Version: openstack-packstack-12.0.0-5.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-01-16 17:53:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
nova-compute.log none

Description chhu 2018-09-03 06:37:24 UTC 
Description of problem:
Need to change the permission of /etc/nova/migration/identity after installation

Version-Release number of selected component (if applicable):
openstack-packstack-12.0.0-0.20180327155808.90cd9d5.el7ost.noarch
openstack-nova-compute-17.0.3-0.20180420001141.el7ost.noarch

How reproducible:
100%

Steps to Reproduce:
1. Install rhos13 z1 by packstack with two compute nodes
2. Try to live migrate/Resize the vm, hit error in nova-compute.log:
 "Resize error: not able to execute ssh command: Unexpected error while running command.
Command: ssh -o BatchMode=yes **** mkdir -p /var/lib/nova/instances/f882cb15-1096-47a0-9498-292a598d11fa
Exit code: 255
Stdout: u''
Stderr: u'Load key "/etc/nova/migration/identity": Permission denied\r\nPermission denied (publickey,gssapi-keyex,gssapi-with-mic).\r\n'"

3. Check the owner of /etc/nova/migration/identity, it's root:root
# ls -lh /etc/nova/migration/identity
-rw-------. 1 root root 1.7K ** 07:26 /etc/nova/migration/identity

4. Change the file own to nova:nova, then do live migration successfully
# ls -lh /etc/nova/migration/identity
-rw-------. 1 nova nova 1.7K ** 03:48 /etc/nova/migration/identity

Actual results:
In step2, live migrate/resize vm failed and got the "nPermission denied" error.

Expected results:
In step2, live migrate/resize vm successfully.

Additional info:
Comment 1 chhu 2018-09-03 06:39:18 UTC 
Created attachment 1480445 [details]
nova-compute.log
Comment 13 errata-xmlrpc 2019-01-16 17:53:13 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0084