Bug 1707799

Summary: the script 99-origin-dns.sh has the debug flag '-x' set to on
Product: OpenShift Container Platform Reporter: Roberto <rdiazgav>
Component: InstallerAssignee: Russell Teague <rteague>
Installer sub component: openshift-ansible QA Contact: Gaoyun Pei <gpei>
Status: CLOSED ERRATA Docs Contact:
Severity: medium    
Priority: medium CC: aos-bugs, bbennett, gpei, jokerman, klaas, mmccomas, rdiazgav
Version: 3.11.0   
Target Milestone: ---   
Target Release: 3.11.z   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Cause: Bash debug flag is set in the script Consequence: Debugging info is output to logs Fix: Removed bash debug flag Result: Debugging info is not output to logs
 Story Points: ---
Clone Of:
: 1708393 1708394 (view as bug list) Environment:
Last Closed: 2019-06-26 09:08:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1708393, 1708394    

Description Roberto 2019-05-08 11:55:54 UTC 
Description of problem:

99-origin-dns.sh is executed every time the network status changes,  leaving the following traces in the messages file:

May  8 11:12:17 master1 dbus[3030]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service'
May  8 11:12:17 master1 nm-dispatcher: req:1 'connectivity-change': new request (4 scripts)
May  8 11:12:17 master1 nm-dispatcher: req:1 'connectivity-change': start running ordered scripts...
May  8 11:12:17 master1 nm-dispatcher: req:2 'down' [eth0]: new request (4 scripts)
May  8 11:12:17 master1 nm-dispatcher: + cd /etc/sysconfig/network-scripts
May  8 11:12:17 master1 nm-dispatcher: + . ./network-functions
May  8 11:12:17 master1 nm-dispatcher: ++ PATH=/sbin:/usr/sbin:/bin:/usr/bin
May  8 11:12:17 master1 nm-dispatcher: ++ export PATH
May  8 11:12:17 master1 nm-dispatcher: +++ hostname
May  8 11:12:17 master1 nm-dispatcher: ++ HOSTNAME=master1.ocplab.com
May  8 11:12:17 master1 nm-dispatcher: ++ '[' -z '' ']'
May  8 11:12:17 master1 nm-dispatcher: ++ . /etc/init.d/functions
May  8 11:12:17 master1 nm-dispatcher: +++ TEXTDOMAIN=initscripts
May  8 11:12:17 master1 nm-dispatcher: +++ umask 022
May  8 11:12:17 master1 nm-dispatcher: +++ PATH=/sbin:/usr/sbin:/bin:/usr/bin
May  8 11:12:17 master1 nm-dispatcher: +++ export PATH
May  8 11:12:17 master1 nm-dispatcher: +++ '[' 62390 -ne 1 -a -z '' ']'
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -d /run/systemd/system ']'
May  8 11:12:17 master1 nm-dispatcher: +++ case "$0" in
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -z '' ']'
May  8 11:12:17 master1 nm-dispatcher: +++ COLUMNS=80
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -z '' ']'
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -c /dev/stderr -a -r /dev/stderr ']'
May  8 11:12:17 master1 nm-dispatcher: +++ CONSOLETYPE=serial
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -z '' ']'
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -z '' ']'
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -f /etc/sysconfig/i18n -o -f /etc/locale.conf ']'
May  8 11:12:17 master1 nm-dispatcher: +++ . /etc/profile.d/lang.sh
May  8 11:12:17 master1 nm-dispatcher: +++ unset LANGSH_SOURCED
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -z '' ']'
May  8 11:12:17 master1 nm-dispatcher: +++ '[' -f /etc/sysconfig/init ']'
May  8 11:12:17 master1 nm-dispatcher: +++ . /etc/sysconfig/init
[...]

This is not harmful at all, but in terms of monitoring, it causes noise which the customer would prefer to avoid. The remediation is simple, but they would like to know why does the debug flag is set to ON? and does it needs to be set to ON?   

Could you add further clarification on this?

thanks!
Comment 1 Ben Bennett 2019-05-08 12:21:30 UTC 
Passing to the installer team because they may know the history.
Comment 2 Scott Dodson 2019-05-08 17:50:11 UTC 
It was useful in debugging when we first started using this. I think it can be safely removed now.
Comment 3 Roberto 2019-05-08 18:20:45 UTC 
ack, is there any plan to remove the debug flag at short term?
Comment 4 Russell Teague 2019-05-08 18:29:27 UTC 
https://github.com/openshift/openshift-ansible/pull/11592
Comment 6 Gaoyun Pei 2019-06-12 09:26:00 UTC 
Verify this bug with openshift-ansible-3.11.117-1.git.0.add13ff.el7.noarch.rpm

After fresh install, check the 99-origin-dns.sh file, "-x" has been removed.

[root@ip-172-18-14-236 dispatcher.d]# head -n1 99-origin-dns.sh
#!/bin/bash

Restart NetworkManager service, no debug info shown in messages log
Comment 8 errata-xmlrpc 2019-06-26 09:08:09 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:1605