Bug 954188

Summary:	install fails if selinux is disabled
Product:	[Community] RDO	Reporter:	Robert Harker <harker-redhat>
Component:	openstack-packstack	Assignee:	Derek Higgins <derekh>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Nir Magnezi <nmagnezi>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	aortega, derekh, jstanley, mmagr, ykaul
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	openstack-packstack-2013.1.1-0.8.dev601	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-06-24 15:17:37 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Robert Harker 2013-04-21 18:32:20 UTC

Description of problem:
If I try and install packstack on a system with selinux already disabled I get this error:

PackStackError: Error during puppet run :
err: /Stage[main]//Exec[setenforce 0]/
returns: change from notrun to 0 failed: setenforce 0 returned 1 instead of one of [0] at /var/tmp/packstack/defbe7b7c8f143baa728c7b6af557644/manifests/10.4.0.1 93_ring_swift.pp:56

Happens on both CentOS 6.4 and Fedora 18

Version-Release number of selected component (if applicable):
openstack-packstack.noarch         2013.1.1-0.5.dev538.el6    @openstack-grizzly


How reproducible:
Very

Steps to Reproduce:
1.Install CentOS or Fedora with selinux disabled
2. Run:
   packstack --allinone
  
Actual results:
PackStackError: Error during puppet run :
err: /Stage[main]//Exec[setenforce 0]/
returns: change from notrun to 0 failed: setenforce 0 returned 1 instead of one of [0] at /var/tmp/packstack/defbe7b7c8f143baa728c7b6af557644/manifests/10.4.0.1 93_ring_swift.pp:56

Expected results:


Additional info:
For additional information see:
http://openstack.redhat.com/forum/discussion/comment/69#Comment_69

Comment 1 Derek Higgins 2013-04-24 13:34:32 UTC

submitted fix to remove the call to setenfoce
https://review.openstack.org/27418

I don't think is required anymore and even if it was its a problem with policies not packstack

Comment 2 Jon Stanley 2013-04-29 20:05:52 UTC

In the meanwhile, I've replaced /usr/sbin/setenforce with a shell script that exits 0 to get past this. That should help Robert get installed in the meanwhile.