Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1297580

Summary:	cinder GID is stolen by epmd
Product:	Red Hat OpenStack	Reporter:	Emilien Macchi <emacchi>
Component:	openstack-cinder	Assignee:	hguemar
Status:	CLOSED WONTFIX	QA Contact:	nlevinki <nlevinki>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	8.0 (Liberty)	CC:	apevec, eharney, hguemar, sgotliv, yeylon
Target Milestone:	ga
Target Release:	8.0 (Liberty)
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-01-14 08:54:22 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Emilien Macchi 2016-01-11 23:06:28 UTC

Currently, cinder packaging does:
useradd -u 165 (...)

But when installing epmd (erlang process), it does:
new user: name=epmd, UID=165, GID=155, home=/tmp, shell=/sbin/nologin

So cinder user is not created.
It's a very recent change in epmd and breaks all versions of Cinder.
If you want to see CI failures:
http://logs.openstack.org/34/266034/1/check/gate-puppet-openstack-integration-scenario001-tempest-dsvm-centos7/372fa3a/logs/syslog.txt.gz

(grep 165 to see outputs).

Note: before, epmq was using GID 106:
http://logs.openstack.org/09/265909/2/check/gate-puppet-openstack-integration-scenario001-tempest-dsvm-centos7/881b87b/logs/syslog.txt.gz

Comment 1 Eric Harney 2016-01-12 16:18:51 UTC

Haikel,

The setup package's uidgid file in RHEL indicates that Cinder owns gid 165...?

Comment 2 Eric Harney 2016-01-12 16:24:35 UTC

IMO the Cinder package in OSP is correct and we should the epmd package as needed downstream to fix this.

Comment 3 hguemar 2016-01-12 16:26:31 UTC

Yes, I discussed this w/ Sergey earlier and we decided that we should do that change.

We're currently discussing within RDO to drop static allocation altogether as we can't prevent similar issues (and Fedora is already recommending to use dynamic allocation).

Comment 5 hguemar 2016-01-14 08:54:22 UTC

Change reverted in dist-git.
For RDO, we decided to keep static UID/GID for existing services, new services will use dynamic UID/GID unless required.