On Tue, 3 Dec 2013, Andy McCrae wrote: > Hi ceph-users, > I've been playing around with radosgw and I notice there is an inconsistency > between the Ubuntu and CentOS startup scripts. > > On Ubuntu, if I run a start ceph-all (which will start radosgw), or I run > the init script /etc/init.d/radosgw start - the radosgw process starts up > fine, but running as root. > > On CentOS the init script starts radosgw as the "apache" user by default. > > I can see the Ubuntu init script is specifying "www-data" which would be in > keeping with the CentOS init script, but the process runs as root. > > + start-stop-daemon --start -u www-data -x /usr/bin/radosgw -- -n > client.radosgw.ubunTest > 2013-12-03 15:13:26.449087 7fee1d33b780 -1 WARNING: libcurl doesn't support > curl_multi_wait() > 2013-12-03 15:13:26.449093 7fee1d33b780 -1 WARNING: cross zone / region > transfer performance may be affected > root@ubunTest:~# ps -ef | grep radosgw > root 28528 1 0 15:13 ? 00:00:00 /usr/bin/radosgw -n > client.radosgw.ubunTest > > > The question is, do we consider this a bug in that radosgw shouldn't run as > root by default, or should the CentOS/RHEL (rpm) init scripts start radosgw > as root - I'd assume the former.
I think it's a bug. There is no real need for radosgw to run as root, except that it needs to log to /var/log/radosgw/*. We should update the packaging (rpm and deb) to create a radosgw user (and/or a ceph group?) and then make the two environments behave consistently. Anyone with strong opinions in this area interested? sage
