Bug 1184588 - ceph-radosgw sysvinit script on EL6 cannot set ulimit
Summary: ceph-radosgw sysvinit script on EL6 cannot set ulimit
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: RGW
Version: 1.2.2
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: pre-dev-freeze
: 1.2.3
Assignee: Ken Dreyer (Red Hat)
QA Contact: Warren
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-01-21 18:26 UTC by Martin Frodl
Modified: 2022-02-21 18:40 UTC (History)
12 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-03-23 12:37:30 UTC
Embargoed:
dmick: needinfo-


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Ceph Project Bug Tracker 9587 0 None None None Never
Red Hat Issue Tracker RHCEPH-3515 0 None None None 2022-02-21 18:40:58 UTC
Red Hat Product Errata RHBA-2015:0713 0 normal SHIPPED_LIVE ceph-common bug fix and enhancement update 2015-03-23 16:36:14 UTC

Description Martin Frodl 2015-01-21 18:26:54 UTC
Description of problem:

(see also upstream bug http://tracker.ceph.com/issues/9587)

On a system where an one-node Ceph storage cluster has been deployed and Ceph object gateway has been installed and configured, ceph-radosgw daemon fails to start, producing the following output:

# service ceph-radosgw start
Starting radosgw instance(s)...
libust[16813/16813]: Warning: HOME environment variable not set. Disabling LTTng-UST per-user tracing. (in setup_local_apps() at lttng-ust-comm.c:305)
libust[16822/16822]: Warning: HOME environment variable not set. Disabling LTTng-UST per-user tracing. (in setup_local_apps() at lttng-ust-comm.c:305)
/usr/bin/dirname: extra operand `-n'
Try `/usr/bin/dirname --help' for more information.
bash: line 0: ulimit: open files: cannot modify limit: Operation not permitted
Starting client.radosgw.gateway...
/usr/bin/radosgw is not running.

The problem (or one of the problems) seems to be in ceph-radosgw init script which attempts to run ulimit -n 32768 as the apache user, which is forbidden by the system.

Version-Release number of selected component (if applicable):
ceph-radosgw-0.87-0.el6.x86_64

Comment 1 John Poelstra 2015-02-12 18:52:32 UTC
Need to determine if the upstream fix for this bug landed 0.80.8

Comment 3 Ken Dreyer (Red Hat) 2015-02-12 19:37:37 UTC
This was merged to the firefly branch, but not in time for v0.80.8. Apparently it was merged to firefly the day after the v0.80.8 release was cut.

commit 534624b7e9decc880e88496355a6fbbe008ede5f
Author:     Sage Weil <sage>
AuthorDate: Tue Oct 21 17:59:30 2014 -0700
Commit:     Yehuda Sadeh <yehuda>
CommitDate: Wed Jan 14 15:51:45 2015 -0800

    init-radosgw.sysv: set ulimit -n before starting daemon
    
    If we do the ulimit inside the daemon command we will have already
    dropped privs and will fail.
    
    Fixes: #9587
    Backport: giant, firefly
    Signed-off-by: Sage Weil <sage>
    (cherry picked from commit 9803cedf54a7baff45ccd0e0f65d2bc220958a46)

Should this bug block the RHCS 1.2.3 release?

Comment 6 Ken Dreyer (Red Hat) 2015-02-12 21:19:10 UTC
Neil, is this a blocker for the RHEL builds of RHCS v1.2.3?

Comment 8 Neil Levine 2015-02-12 21:38:24 UTC
I'm not clear on the user impact here. Who does this affect and when?

Comment 9 Yehuda Sadeh 2015-02-13 00:25:31 UTC
The user impact is that users cannot start radosgw using the service ceph-radosgw start command.

Comment 18 Warren 2015-03-17 00:43:18 UTC
Works (no ulimit complaint and ulimit commands can be run manually later).

Comment 20 errata-xmlrpc 2015-03-23 12:37:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-0713.html


Note You need to log in before you can comment on or make changes to this bug.