Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1723665

Summary: Overcloud deployment fails with container permissions error (ppc64le)
Product: Red Hat OpenStack Reporter: Tony Breeds <tonyb>
Component: openstack-tripleo-heat-templatesAssignee: Tony Breeds <tonyb>
Status: CLOSED ERRATA QA Contact: Sasha Smolyak <ssmolyak>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 14.0 (Rocky)CC: akaris, dasmith, dbenoit, eglynn, jfreudbe, jhakimra, jlabarre, jmelvin, jpichon, jschluet, kchamart, lhh, lvrabec, lyarwood, m.andre, mbooth, mburns, mschuppe, sbauza, sgordon, ssmolyak, tonyb, vromanso, zcaplovi
Target Milestone: z4Keywords: Reopened, TestOnly, Triaged, ZStream
Target Release: 14.0 (Rocky)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-9.3.1-0.20190513171739 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1709564
: 1726483 (view as bug list) Environment:
Last Closed: 2019-11-06 16:47:53 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1709564    
Bug Blocks: 1726483    

Comment 1 Tony Breeds 2019-06-25 06:20:28 UTC
A RHOS-14 install also fails:

fatal: [overcloud-novacomputeppc64lep9-0]: FAILED! => {
    "failed_when_result": true, 
    "outputs.stdout_lines | default([]) | union(outputs.stderr_lines | default([]))": [
        "Error running ['docker', 'run', '--name', 'nova_cell_v2_discover_hosts', '--label', 'config_id=tripleo_step5', '--label', 'container_name=nova_cell_v2_discover_hosts', '--label', 'managed_by=paunch', '--label', 'config_data={\"start_order\": 0, \"image\": \"brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888/rhosp14/openstack-nova-compute:14.0-117\", \"environment\": [\"TRIPLEO_DEPLOY_IDENTIFIER=1561432771\"], \"command\": \"/usr/bin/bootstrap_host_exec nova_compute su nova -s /bin/bash -c \\'/docker-config-scripts/nova_cell_v2_discover_hosts.py\\'\", \"user\": \"root\", \"volumes\": [\"/etc/hosts:/etc/hosts:ro\", \"/etc/localtime:/etc/localtime:ro\", \"/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro\", \"/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro\", \"/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro\", \"/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro\", \"/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro\", \"/dev/log:/dev/log\", \"/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro\", \"/etc/puppet:/etc/puppet:ro\", \"/var/lib/config-data/nova_libvirt/etc/my.cnf.d/:/etc/my.cnf.d/:ro\", \"/var/lib/config-data/nova_libvirt/etc/nova/:/etc/nova/:ro\", \"/var/log/containers/nova:/var/log/nova\", \"/var/lib/docker-config-scripts/:/docker-config-scripts/\"], \"net\": \"host\", \"detach\": false}', '--env=TRIPLEO_DEPLOY_IDENTIFIER=1561432771', '--net=host', '--user=root', '--volume=/etc/hosts:/etc/hosts:ro', '--volume=/etc/localtime:/etc/localtime:ro', '--volume=/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro', '--volume=/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro', '--volume=/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro', '--volume=/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro', '--volume=/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro', '--volume=/dev/log:/dev/log', '--volume=/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro', '--volume=/etc/puppet:/etc/puppet:ro', '--volume=/var/lib/config-data/nova_libvirt/etc/my.cnf.d/:/etc/my.cnf.d/:ro', '--volume=/var/lib/config-data/nova_libvirt/etc/nova/:/etc/nova/:ro', '--volume=/var/log/containers/nova:/var/log/nova', '--volume=/var/lib/docker-config-scripts/:/docker-config-scripts/', 'brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888/rhosp14/openstack-nova-compute:14.0-117', '/usr/bin/bootstrap_host_exec', 'nova_compute', 'su', 'nova', '-s', '/bin/bash', '-c', \"'/docker-config-scripts/nova_cell_v2_discover_hosts.py'\"]. [1]", 
        "", 
        "stdout: ", 
        "stderr: su: cannot open session: Permission denied"
    ]
}

Comment 2 Martin Schuppert 2019-06-25 07:07:47 UTC
(In reply to Tony Breeds from comment #1)
> A RHOS-14 install also fails:
> 

We have the same approach in OSP13, so I think we need it there, too.

Comment 3 Tony Breeds 2019-06-26 02:49:30 UTC
(In reply to Martin Schuppert from comment #2)
> (In reply to Tony Breeds from comment #1)
> > A RHOS-14 install also fails:
> > 
> 
> We have the same approach in OSP13, so I think we need it there, too.

I'm not sure exactly what we've changed in the nova container that has caused this.  I'll try a 13 install and if needed open a bug against 13.

Comment 9 Lon Hohberger 2019-09-04 10:44:27 UTC
According to our records, this should be resolved by openstack-tripleo-heat-templates-9.3.1-0.20190513171752.el7ost.  This build is available now.

Comment 13 errata-xmlrpc 2019-11-06 16:47:53 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:3745