Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/

Bug 1234665

Summary: tempest.scenario.test_server_basic_ops.TestServerBasicOps fails to launch instance w/ selinux enforcing
Product: [Community] RDO Reporter: wes hayutin <whayutin>
Component: openstack-selinuxAssignee: Alan Pevec (Fedora) <apevec>
Status: CLOSED CURRENTRELEASE QA Contact: Ofer Blaut <oblaut>
Severity: high Docs Contact:
Priority: high    
Version: KiloCC: apevec, berrange, dasmith, ihrachys, ndipanov, rbryant, sbauza, sferdjao, sgordon, vromanso, yeylon
Target Milestone: ---   
Target Release: Kilo   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-03-30 23:01:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
controller logs
none
tempest node logs none

Description wes hayutin 2015-06-23 01:06:22 UTC 
Created attachment 1042047 [details]
controller logs

Description of problem:

Packstack fails to pass TestServerBasicOps w/ selinux in enforcing mode.

Failing enforcing job:
https://prod-rdojenkins.rhcloud.com/view/RDO-Kilo-Delorean-Trunk/job/khaleesi-rdo-kilo-delorean-centos-7.0-aio-packstack-neutron-ml2-vxlan-rabbitmq-enforcing-tempest-rpm-minimal/20/

Passing permissive job:
https://prod-rdojenkins.rhcloud.com/view/RDO-Kilo-Delorean-Trunk/job/khaleesi-rdo-kilo-delorean-centos-7.0-aio-packstack-neutron-ml2-vxlan-rabbitmq-permissive-tempest-rpm-minimal/17/

All the logs required to debug are available in the associated jobs.
Attaching the tempest log and controller logs from the failing job just in case.
Comment 1 wes hayutin 2015-06-23 01:07:49 UTC 
Created attachment 1042048 [details]
tempest node logs
Comment 2 wes hayutin 2015-06-23 01:08:43 UTC 
kilo + delorean rdo 

[delorean-kilo]
name=delorean-kilo-openstack-heat-38b47eb30c024e2edb58e9ed5acfede457376e26
baseurl=http://209.132.178.14/centos7-kilo/38/b4/38b47eb30c024e2edb58e9ed5acfede457376e26_fac70dfc
enabled=1
gpgcheck=0
priority=10


Nova compute log

2015-06-22 09:33:10.494 5058 TRACE nova.compute.manager [instance: 59d08321-47c8-42f4-bb23-6892aa733f9f]   File "/usr/lib/python2.7/site-packages/nova/virt/libvirt/vif.py", line 374, in get_config
2015-06-22 09:33:10.494 5058 TRACE nova.compute.manager [instance: 59d08321-47c8-42f4-bb23-6892aa733f9f]     _("Unexpected vif_type=%s") % vif_type)
2015-06-22 09:33:10.494 5058 TRACE nova.compute.manager [instance: 59d08321-47c8-42f4-bb23-6892aa733f9f] NovaException: Unexpected vif_type=binding_failed
Comment 3 Ihar Hrachyshka 2015-06-23 09:26:27 UTC 
In neutron ovs agent logs: "Exception: Failed to spawn rootwrap process"

That's the same bug as: https://bugzilla.redhat.com/show_bug.cgi?id=1230900 in OSP7.

Do we have openstack-selinux package in RDO?
Comment 4 Alan Pevec (Fedora) 2015-06-23 14:55:53 UTC 
Yes, we do, but it's reverse upstream: we ship internal builds in RDO.
I'll push latest available.
Comment 5 Alan Pevec (Fedora) 2015-06-23 15:15:30 UTC 
https://review.gerrithub.io/237367