Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1779160

Summary:	[RFE] ovirt-guest-agent should test if any container engine is working, and disable it in case there is not any container
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Marian Jankular <mjankula>
Component:	ovirt-guest-agent	Assignee:	Tomáš Golembiovský <tgolembi>
Status:	CLOSED ERRATA	QA Contact:	Petr Matyáš <pmatyas>
Severity:	low	Docs Contact:
Priority:	low
Version:	4.3.5	CC:	emarcus, lleistne, lsurette, mavital, mkenneth, mtessun, pelauter, rbarry, srevivo, tburke, tgolembi
Target Milestone:	ovirt-4.3.8	Keywords:	FutureFeature
Target Release:	---	Flags:	lsvaty: testing_plan_complete-
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ovirt-guest-agent-1.0.16-2.el7ev	Doc Type:	Enhancement
Doc Text:	To avoid overloading the journal log, in this release, oVirt Guest Agent no longer attempts to query the list of containers on machines without Docker.	Story Points:	---
Clone Of:	1774399	Environment:
Last Closed:	2020-02-13 15:25:35 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Virt	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1774399
Bug Blocks:

Description Marian Jankular 2019-12-03 12:40:18 UTC

+++ This bug was initially created as a clone of Bug #1774399 +++

Description of problem:
ovirt-guest-agent should test if any container engine is working, and disable it in case there is not any container

Version-Release number of selected component (if applicable):
ovirt-guest-agent-common-1.0.14-3.el7ev.noarch

How reproducible:
everytime

Steps to Reproduce:
1. install rhel7.x
2. install ovirt guest agent


Actual results:
/varlog/secure is flooded with messages:

pam_succeed_if(ovirt-container-list:auth): requirement "user = ovirtagent" was met by user "ovirtagent"
userhelper[29896]: running '/usr/share/ovirt-guest-agent/container-list' with root privileges on behalf of 'ovirtagent'


Expected results:
ovirt-guest-agent should test if any container engine is working, and disable it in case there is not any container



Additional info:
both messages can be silenced
1,
pam_succeed_if(ovirt-container-list:auth): requirement "user = ovirtagent" was met by user "ovirtagent" can be silenced with: 
------------------
# cat /etc/pam.d/ovirt-container-list 
#%PAM-1.0
auth     sufficient  pam_succeed_if.so quiet user = ovirtagent 
auth     required    pam_deny.so
account  required    pam_permit.so
------------------

2,
userhelper[29896]: running '/usr/share/ovirt-guest-agent/container-list' with root privileges on behalf of 'ovirtagent' can be silenced with removing symbolic link /usr/share/ovirt-guest-agent/ovirt-container-list -> /usr/bin/consolehelper

Comment 5 Petr Matyáš 2020-01-13 09:39:53 UTC

Verified on ovirt-guest-agent-common-1.0.16-2.el7ev.noarch

Comment 9 errata-xmlrpc 2020-02-13 15:25:35 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:0501