Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 892942

Summary: openstack-packstack: When SELinux disabled on machine installation failed with Error during remote puppet apply of horizon.pp.
Product: Red Hat OpenStack Reporter: Omri Hochman <ohochman>
Component: openstack-packstackAssignee: Martin Magr <mmagr>
Status: CLOSED ERRATA QA Contact: Nir Magnezi <nmagnezi>
Severity: high Docs Contact:
Priority: high    
Version: 2.0 (Folsom)CC: aortega, derekh, ohochman, ykaul
Target Milestone: snapshot3Keywords: Triaged
Target Release: 2.1   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: openstack-packstack-2012.2.2-0.9.dev406 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-03-05 21:02:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
openstack-setup.log none

Description Omri Hochman 2013-01-08 10:21:39 UTC
openstack-packstack: When SELinux disabled on machine installation failed with Error during remote puppet apply of horizon.pp. 

Description:
*************
Packstack Installation failed with error when attempted to install openstack all-in-one, on machine with: SELINUX=disabled > /etc/sysconfig/selinux   
 

Installation Error:
********************
/Stage[main]/Apache::Mod::Default/Apache::Mod[suexec]/A2mod[suexec]/ensure: created
notice: /Stage[main]/Apache::Mod::Default/Apache::Mod[authn_default]/A2mod[authn_default]/ensure: created
notice: /Stage[main]/Apache/Service[httpd]/ensure: ensure changed 'stopped' to 'running'
notice: /Stage[main]/Apache/Service[httpd]: Triggered 'refresh' from 53 events
notice: Finished catalog run in 48.36 seconds

Testing if puppet apply is finished : 127.0.0.1_horizon.pp.log                           [ ERROR ]
ERROR:root:Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 799, in main
    _main(confFile)
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 595, in _main
    runSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 571, in runSequences
    controller.runAllSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_controller.py", line 57, in runAllSequences
    sequence.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 154, in run
    step.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 60, in run
    function()
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 120, in applyPuppetManifest
    waitforpuppet(currently_running)
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 108, in waitforpuppet
    validate_puppet_logfile(log)
  File "/usr/lib/python2.6/site-packages/packstack/modules/ospluginutils.py", line 130, in validate_puppet_logfile
    raise PackStackError(message)
PackStackError: Error during puppet run : err: /Stage[main]//Selboolean[httpd_can_network_connect]: Could not evaluate: Execution of '/usr/sbin/getsebool httpd_can_network_connect' returned 1: /usr/sbin/getsebool:  SELinux is disabled

Error during puppet run : err: /Stage[main]//Selboolean[httpd_can_network_connect]: Could not evaluate: Execution of '/usr/sbin/getsebool httpd_can_network_connect' returned 1: /usr/sbin/getsebool:  SELinux is disabled
Please check log file /var/tmp/7ec0d994-52f8-451f-bcd7-135ea72717e6/openstack-setup_2013_01_08_08_37_51.log for more information



openstack-setup.log (attached)
*******************************
[0;36mnotice: /Stage[main]/Apache/Service[httpd]/ensure: ensure changed 'stopped' to 'running'ESC[0m
ESC[0;36mnotice: /Stage[main]/Apache/Service[httpd]: Triggered 'refresh' from 53 eventsESC[0m
ESC[0;36mnotice: Finished catalog run in 48.36 secondsESC[0m

2013-01-08 08:48:37::ERROR::run_setup::807::root:: Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 799, in main
    _main(confFile)
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 595, in _main
    runSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 571, in runSequences
    controller.runAllSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_controller.py", line 57, in runAllSequences
    sequence.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 154, in run
    step.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 60, in run
    function()
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 120, in applyPuppetManifest
    waitforpuppet(currently_running)
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 108, in waitforpuppet
    validate_puppet_logfile(log)
  File "/usr/lib/python2.6/site-packages/packstack/modules/ospluginutils.py", line 130, in validate_puppet_logfile
    raise PackStackError(message)
PackStackError: Error during puppet run : err: /Stage[main]//Selboolean[httpd_can_network_connect]: Could not evaluate: Execution of '/usr/sbin/getsebool httpd_can_network_connect' returned 1: /usr/sbin/getsebool:  SELinux is disabled

Comment 1 Omri Hochman 2013-01-08 10:22:51 UTC
Created attachment 674659 [details]
openstack-setup.log

Comment 3 Derek Higgins 2013-01-23 07:10:23 UTC
One of the selinux* facts may help out here

[root@ps1 ~(keystone_admin)]$ facter | grep -i selinux
selinux => true
selinux_config_mode => permissive
selinux_config_policy => targeted
selinux_current_mode => permissive
selinux_enforced => false
selinux_mode => targeted
selinux_policyversion => 24

Comment 4 Derek Higgins 2013-01-31 10:20:39 UTC
Fix proposed upstream
https://review.openstack.org/20887

Comment 6 Omri Hochman 2013-02-20 15:52:03 UTC
verified with : openstack-packstack-2012.2.2-1.0.dev408.el6ost.noarch.

Comment 8 errata-xmlrpc 2013-03-05 21:02:47 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0595.html