Bug 2064906
| Summary: | ovn migration executes scripts from /tmp directory | |||
|---|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Jakub Libosvar <jlibosva> | |
| Component: | python-networking-ovn | Assignee: | Jakub Libosvar <jlibosva> | |
| Status: | CLOSED ERRATA | QA Contact: | Roman Safronov <rsafrono> | |
| Severity: | urgent | Docs Contact: | ||
| Priority: | urgent | |||
| Version: | 16.1 (Train) | CC: | apevec, lhh, majopela, scohen | |
| Target Milestone: | z9 | Keywords: | Triaged | |
| Target Release: | 16.1 (Train on RHEL 8.2) | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | python-networking-ovn-7.3.1-1.20220412183743.4e24f4c.el8ost | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2074621 (view as bug list) | Environment: | ||
| Last Closed: | 2022-12-07 20:26:20 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 2074621 | |||
| Bug Blocks: | ||||
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenStack Platform 16.1.9 bug fix and enhancement advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:8795 |
Description of problem: The /tmp are often mounted with noexec option for security reasons. The migration roles rely that scripts in /tmp/ can be executed. Version-Release number of selected component (if applicable): 16.1 How reproducible: Always Steps to Reproduce: 1. Have /tmp mounted with noexec option 2. Run migration from ovs to ovn 3. Actual results: fatal: [tpa-vim-b-computecl-0]: FAILED! => { "changed": true, "cmd": "/tmp/clone-br-int.sh", "delta": "0:00:00.001773", "end": "2022-03-16 18:51:30.332449", "invocation": { "module_args": { "_raw_params": "/tmp/clone-br-int.sh", "_uses_shell": true, "argv": null, "chdir": null, "creates": null, "executable": null, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "warn": true } }, "msg": "non-zero return code", "rc": 126, "start": "2022-03-16 18:51:30.330676", "stderr": "/bin/sh: /tmp/clone-br-int.sh: Permission denied", "stderr_lines": [ "/bin/sh: /tmp/clone-br-int.sh: Permission denied" ], "stdout": "", "stdout_lines": [] } Expected results: Additional info: