Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1774399

Summary: [RFE] ovirt-guest-agent should test if any container engine is working, and disable it in case there is not any container
Product: Red Hat Enterprise Virtualization Manager Reporter: Marian Jankular <mjankula>
Component: ovirt-guest-agentAssignee: Tomáš Golembiovský <tgolembi>
Status: CLOSED NOTABUG QA Contact: meital avital <mavital>
Severity: low Docs Contact:
Priority: unspecified    
Version: 4.3.5CC: lsurette, mkenneth, rbarry, srevivo, tburke
Target Milestone: ---Keywords: FutureFeature
Target Release: ---Flags: lsvaty: testing_plan_complete-
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1779160 (view as bug list) Environment:
Last Closed: 2019-12-06 12:01:24 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1779160    

Description Marian Jankular 2019-11-20 09:20:35 UTC
Description of problem:
ovirt-guest-agent should test if any container engine is working, and disable it in case there is not any container

Version-Release number of selected component (if applicable):
ovirt-guest-agent-common-1.0.14-3.el7ev.noarch

How reproducible:
everytime

Steps to Reproduce:
1. install rhel8
2. install guest agent


Actual results:
/varlog/secure is flooded with messages:

pam_succeed_if(ovirt-container-list:auth): requirement "user = ovirtagent" was met by user "ovirtagent"
userhelper[29896]: running '/usr/share/ovirt-guest-agent/container-list' with root privileges on behalf of 'ovirtagent'


Expected results:
ovirt-guest-agent should test if any container engine is working, and disable it in case there is not any container



Additional info:
both messages can be silenced
1,
pam_succeed_if(ovirt-container-list:auth): requirement "user = ovirtagent" was met by user "ovirtagent" can be silenced with: 
------------------
# cat /etc/pam.d/ovirt-container-list 
#%PAM-1.0
auth     sufficient  pam_succeed_if.so quiet user = ovirtagent 
auth     required    pam_deny.so
account  required    pam_permit.so
------------------

2,
userhelper[29896]: running '/usr/share/ovirt-guest-agent/container-list' with root privileges on behalf of 'ovirtagent' can be silenced with removing symbolic link /usr/share/ovirt-guest-agent/ovirt-container-list -> /usr/bin/consolehelper

Comment 1 Ryan Barry 2019-11-21 00:32:45 UTC
ovirt-guest-agent is not supported on EL8 guests. This is NOTABUG and not supported.