Yes - this is precisely where it should be added.
Reason is -- we write to this directory because we set it as the home directory for the novajoin user -- which we create in the spec file.
So, its incumbent on us to create that directory in the spec file as well.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHSA-2019:1728
Description of problem: Installing undercloud and enabling novajoin, puppet forgets to create main lib novajoin folder at /var/lib/novajoin/ The results is that both novajoin-notify and novajoin-server have errors during startup. # systemctl restart novajoin-server.service novajoin-notify.service # systemctl status novajoin-server.service novajoin-notify.service ● novajoin-server.service - OpenStack Nova IPA Join Service Loaded: loaded (/usr/lib/systemd/system/novajoin-server.service; enabled; vendor preset: disabled) Active: active (running) since Wed 2018-07-25 04:45:59 EDT; 8s ago Main PID: 854 (novajoin-server) Tasks: 9 CGroup: /system.slice/novajoin-server.service ├─854 /usr/bin/python2 /usr/bin/novajoin-server ├─880 /usr/bin/python2 /usr/bin/novajoin-server ├─881 /usr/bin/python2 /usr/bin/novajoin-server ├─882 /usr/bin/python2 /usr/bin/novajoin-server ├─883 /usr/bin/python2 /usr/bin/novajoin-server ├─884 /usr/bin/python2 /usr/bin/novajoin-server ├─885 /usr/bin/python2 /usr/bin/novajoin-server ├─886 /usr/bin/python2 /usr/bin/novajoin-server └─887 /usr/bin/python2 /usr/bin/novajoin-server Jul 25 04:45:59 undercloud.redhat.local systemd[1]: Started OpenStack Nova IPA Join Service. Jul 25 04:45:59 undercloud.redhat.local systemd[1]: Starting OpenStack Nova IPA Join Service... Jul 25 04:46:00 undercloud.redhat.local novajoin-server[854]: ipa: ERROR: Could not create log_dir u'/var/lib/novajoin/.ipa/log' Jul 25 04:46:00 undercloud.redhat.local novajoin-server[854]: ipa: INFO: trying https://freeipa.redhat.local/ipa/json Jul 25 04:46:00 undercloud.redhat.local novajoin-server[854]: ipa: INFO: [try 1]: Forwarding 'schema' to json server 'https://freeipa.redhat.local/ipa/json' Jul 25 04:46:00 undercloud.redhat.local novajoin-server[854]: ipa: WARNING: Failed to write schema: [Errno 13] Permission denied: '/var/lib/novajoin' Jul 25 04:46:00 undercloud.redhat.local novajoin-server[854]: ipa: WARNING: Failed to write server info: [Errno 13] Permission denied: '/var/lib/novajoin' ● novajoin-notify.service - OpenStack Nova IPA Notification Service Loaded: loaded (/usr/lib/systemd/system/novajoin-notify.service; enabled; vendor preset: disabled) Active: active (running) since Wed 2018-07-25 04:45:59 EDT; 9s ago Main PID: 852 (novajoin-notify) Tasks: 2 CGroup: /system.slice/novajoin-notify.service └─852 /usr/bin/python2 /usr/bin/novajoin-notify Jul 25 04:45:59 undercloud.redhat.local systemd[1]: Started OpenStack Nova IPA Notification Service. Jul 25 04:45:59 undercloud.redhat.local systemd[1]: Starting OpenStack Nova IPA Notification Service... Jul 25 04:45:59 undercloud.redhat.local novajoin-notify[852]: ipa: ERROR: Could not create log_dir u'/var/lib/novajoin/.ipa/log' Jul 25 04:45:59 undercloud.redhat.local novajoin-notify[852]: ipa: INFO: trying https://freeipa.redhat.local/ipa/json Jul 25 04:45:59 undercloud.redhat.local novajoin-notify[852]: ipa: INFO: [try 1]: Forwarding 'schema' to json server 'https://freeipa.redhat.local/ipa/json' Jul 25 04:46:00 undercloud.redhat.local novajoin-notify[852]: ipa: WARNING: Failed to write schema: [Errno 13] Permission denied: '/var/lib/novajoin' Jul 25 04:46:00 undercloud.redhat.local novajoin-notify[852]: ipa: WARNING: Failed to write server info: [Errno 13] Permission denied: '/var/lib/novajoin' Simple workaround # mkdir /var/lib/novajoin # chown -R novajoin:novajoin /var/lib/novajoin/ # systemctl status novajoin-server.service novajoin-notify.service ● novajoin-server.service - OpenStack Nova IPA Join Service Loaded: loaded (/usr/lib/systemd/system/novajoin-server.service; enabled; vendor preset: disabled) Active: active (running) since Wed 2018-07-25 04:48:52 EDT; 10s ago [SNIP] Jul 25 04:48:52 undercloud.redhat.local systemd[1]: Started OpenStack Nova IPA Join Service. Jul 25 04:48:53 undercloud.redhat.local systemd[1]: Starting OpenStack Nova IPA Join Service... Jul 25 04:48:53 undercloud.redhat.local novajoin-server[1252]: ipa: INFO: trying https://freeipa.redhat.local/ipa/json Jul 25 04:48:53 undercloud.redhat.local novajoin-server[1252]: ipa: INFO: [try 1]: Forwarding 'schema' to json server 'https://freeipa.redhat.local/ipa/json' ● novajoin-notify.service - OpenStack Nova IPA Notification Service Loaded: loaded (/usr/lib/systemd/system/novajoin-notify.service; enabled; vendor preset: disabled) Active: active (running) since Wed 2018-07-25 04:48:52 EDT; 10s ago [SNIP] Jul 25 04:48:52 undercloud.redhat.local systemd[1]: Started OpenStack Nova IPA Notification Service. Jul 25 04:48:52 undercloud.redhat.local systemd[1]: Starting OpenStack Nova IPA Notification Service... Jul 25 04:48:53 undercloud.redhat.local novajoin-notify[1250]: ipa: INFO: trying https://freeipa.redhat.local/ipa/json Jul 25 04:48:53 undercloud.redhat.local novajoin-notify[1250]: ipa: INFO: [try 1]: Forwarding 'schema' to json server 'https://freeipa.redhat.local/ipa/json'