Bug 1308271 - openstack-selinux package should be a dependency for all openstack components
Summary: openstack-selinux package should be a dependency for all openstack components
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-selinux
Version: 8.0 (Liberty)
Hardware: All
OS: Linux
unspecified
low
Target Milestone: ---
: 8.0 (Liberty)
Assignee: Ryan Hallisey
QA Contact: Udi Shkalim
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-02-13 23:06 UTC by Thomas Crowe
Modified: 2017-01-13 17:03 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-01-13 17:03:12 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Thomas Crowe 2016-02-13 23:06:03 UTC
Description of problem:
Installing a multi-node setup of OpenStack manually; Keystone installation went fine and the openstack-selinux pacakge was installed as expected.  However when I installed the Glance component on another node (using `yum install openstack-glance`) all dependancies were installed with the exception of openstack-selinux.

This resulted in several non-specific connectivity error in the glance-api.log and assocaited logs.  AVC errors were logged in the messages file however (had I checked there sooner would have saved quite a bit of troubleshooting). 

Version-Release number of selected component (if applicable):
openstack-glance-11.0.0-1.el7ost.noarch

How reproducible:
consistently

Steps to Reproduce:
1.install openstack-glance on a node with no other openstack components
2.
3.

Actual results:
openstack-selinux is not installed

Expected results:
openstack-selinux should (IMHO) be installed

Additional info:

Comment 2 Mike Burns 2017-01-13 17:03:12 UTC
The policy is that openstack must work with selinux enabled, but having selinux enabled is not a requirement to run openstack.  If you want openstack and selinux, you need to install openstack-selinux yourself.  

For director deployed openstack, we've included openstack-selinux ootb.


Note You need to log in before you can comment on or make changes to this bug.