Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

This project is now read‑only. Starting Monday, February 2, please use https://ibm-ceph.atlassian.net/ for all bug tracking management.

Bug 1214823

Summary:	rgw attempts to start using "apache" UID
Product:	[Red Hat Storage] Red Hat Ceph Storage	Reporter:	Ken Dreyer (Red Hat) <kdreyer>
Component:	Build	Assignee:	Ken Dreyer (Red Hat) <kdreyer>
Status:	CLOSED WONTFIX	QA Contact:	ceph-qe-bugs <ceph-qe-bugs>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	1.2.3	CC:	ceph-qe-bugs, kdreyer, nlevine, tmuthami
Target Milestone:	rc
Target Release:	1.2.4
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	1214518	Environment:
Last Closed:	2015-12-08 16:26:15 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1271774
Bug Blocks:	1203926

Description Ken Dreyer (Red Hat) 2015-04-23 15:28:06 UTC

RGW's init script on RHEL runs the daemon as the "apache" UID, but it's clear that this configuration was not as well-tested as it should have been.

During the 1.2.3 release cycle we had multiple bugs crop up due to this configuration:
- bug 1184588
- bug 1202784
- others I am probably forgetting about

Still outstanding issues unfixed in 1.2.3:

- bug 1203926 , problem with log file permissions
- bug where the socket directory gets removed on every reboot in RHEL 7

Other aspects to consider:

- Debian's init systems have always run RGW as root. There was a brief change upstream, but it was quickly reverted (see http://tracker.ceph.com/issues/9001)

- We will have to switch to running RGW as root anyway to support Civetweb in 1.3. (bug 1214518)

Comment 1 Ken Dreyer (Red Hat) 2015-10-19 17:27:20 UTC

https://github.com/ceph/ceph/pull/4638 shipped in Ceph v0.80.10 upstream, so we'll take in in as part of the RHCS 1.2 rebase to Ceph v0.80.11 (bz 1271774)

Comment 2 Tamil 2015-10-20 23:57:15 UTC

Ken, what is the list of things that has to be covered as part of this bug verification?

Comment 3 Ken Dreyer (Red Hat) 2015-10-21 00:08:20 UTC

Basically sanity-test that "service ceph-radosgw start" works on RHEL 6 and RHEL 7, both before and after rebooting, etc.

`ps -elf | grep radosgw` should show that the radosgw service is running as root, not apache.

Comment 4 Ken Dreyer (Red Hat) 2015-12-08 16:26:15 UTC

Closing all RHCS 1.2 bugs, since we are not planning to do a formal RHCS 1.2.4 release.

This particular issue was already fixed in RHCS 1.3, in https://bugzilla.redhat.com/show_bug.cgi?id=1214518