Bug 892942 - openstack-packstack: When SELinux disabled on machine installation failed with Error during remote puppet apply of horizon.pp.
Summary: openstack-packstack: When SELinux disabled on machine installation failed wit...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-packstack
Version: 2.0 (Folsom)
Hardware: x86_64
OS: Linux
high
high
Target Milestone: snapshot3
: 2.1
Assignee: Martin Magr
QA Contact: Nir Magnezi
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-01-08 10:21 UTC by Omri Hochman
Modified: 2022-07-09 07:09 UTC (History)
4 users (show)

Fixed In Version: openstack-packstack-2012.2.2-0.9.dev406
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-03-05 21:02:47 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
openstack-setup.log (8.64 KB, text/x-log)
2013-01-08 10:22 UTC, Omri Hochman
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-16525 0 None None None 2022-07-09 07:09:05 UTC
Red Hat Product Errata RHSA-2013:0595 0 normal SHIPPED_LIVE Moderate: openstack-packstack security and bug fix update 2013-03-06 02:00:00 UTC

Description Omri Hochman 2013-01-08 10:21:39 UTC
openstack-packstack: When SELinux disabled on machine installation failed with Error during remote puppet apply of horizon.pp. 

Description:
*************
Packstack Installation failed with error when attempted to install openstack all-in-one, on machine with: SELINUX=disabled > /etc/sysconfig/selinux   
 

Installation Error:
********************
/Stage[main]/Apache::Mod::Default/Apache::Mod[suexec]/A2mod[suexec]/ensure: created
notice: /Stage[main]/Apache::Mod::Default/Apache::Mod[authn_default]/A2mod[authn_default]/ensure: created
notice: /Stage[main]/Apache/Service[httpd]/ensure: ensure changed 'stopped' to 'running'
notice: /Stage[main]/Apache/Service[httpd]: Triggered 'refresh' from 53 events
notice: Finished catalog run in 48.36 seconds

Testing if puppet apply is finished : 127.0.0.1_horizon.pp.log                           [ ERROR ]
ERROR:root:Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 799, in main
    _main(confFile)
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 595, in _main
    runSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 571, in runSequences
    controller.runAllSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_controller.py", line 57, in runAllSequences
    sequence.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 154, in run
    step.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 60, in run
    function()
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 120, in applyPuppetManifest
    waitforpuppet(currently_running)
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 108, in waitforpuppet
    validate_puppet_logfile(log)
  File "/usr/lib/python2.6/site-packages/packstack/modules/ospluginutils.py", line 130, in validate_puppet_logfile
    raise PackStackError(message)
PackStackError: Error during puppet run : err: /Stage[main]//Selboolean[httpd_can_network_connect]: Could not evaluate: Execution of '/usr/sbin/getsebool httpd_can_network_connect' returned 1: /usr/sbin/getsebool:  SELinux is disabled

Error during puppet run : err: /Stage[main]//Selboolean[httpd_can_network_connect]: Could not evaluate: Execution of '/usr/sbin/getsebool httpd_can_network_connect' returned 1: /usr/sbin/getsebool:  SELinux is disabled
Please check log file /var/tmp/7ec0d994-52f8-451f-bcd7-135ea72717e6/openstack-setup_2013_01_08_08_37_51.log for more information



openstack-setup.log (attached)
*******************************
[0;36mnotice: /Stage[main]/Apache/Service[httpd]/ensure: ensure changed 'stopped' to 'running'ESC[0m
ESC[0;36mnotice: /Stage[main]/Apache/Service[httpd]: Triggered 'refresh' from 53 eventsESC[0m
ESC[0;36mnotice: Finished catalog run in 48.36 secondsESC[0m

2013-01-08 08:48:37::ERROR::run_setup::807::root:: Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 799, in main
    _main(confFile)
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 595, in _main
    runSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/run_setup.py", line 571, in runSequences
    controller.runAllSequences()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_controller.py", line 57, in runAllSequences
    sequence.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 154, in run
    step.run()
  File "/usr/lib/python2.6/site-packages/packstack/installer/setup_sequences.py", line 60, in run
    function()
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 120, in applyPuppetManifest
    waitforpuppet(currently_running)
  File "/usr/lib/python2.6/site-packages/packstack/plugins/puppet_950.py", line 108, in waitforpuppet
    validate_puppet_logfile(log)
  File "/usr/lib/python2.6/site-packages/packstack/modules/ospluginutils.py", line 130, in validate_puppet_logfile
    raise PackStackError(message)
PackStackError: Error during puppet run : err: /Stage[main]//Selboolean[httpd_can_network_connect]: Could not evaluate: Execution of '/usr/sbin/getsebool httpd_can_network_connect' returned 1: /usr/sbin/getsebool:  SELinux is disabled

Comment 1 Omri Hochman 2013-01-08 10:22:51 UTC
Created attachment 674659 [details]
openstack-setup.log

Comment 3 Derek Higgins 2013-01-23 07:10:23 UTC
One of the selinux* facts may help out here

[root@ps1 ~(keystone_admin)]$ facter | grep -i selinux
selinux => true
selinux_config_mode => permissive
selinux_config_policy => targeted
selinux_current_mode => permissive
selinux_enforced => false
selinux_mode => targeted
selinux_policyversion => 24

Comment 4 Derek Higgins 2013-01-31 10:20:39 UTC
Fix proposed upstream
https://review.openstack.org/20887

Comment 6 Omri Hochman 2013-02-20 15:52:03 UTC
verified with : openstack-packstack-2012.2.2-1.0.dev408.el6ost.noarch.

Comment 8 errata-xmlrpc 2013-03-05 21:02:47 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0595.html


Note You need to log in before you can comment on or make changes to this bug.