Hello Thiago, I think it's better to use rootwrap in sudoers :
nova ALL = (root) NOPASSWD: /usr/bin/nova-rootwrap /etc/nova/rootwrap.conf * cinder ALL = (root) NOPASSWD: /usr/bin/cinder-rootwrap /etc/cinder/rootwrap.conf * quantum ALL = (root) NOPASSWD: /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf * NOTE : with quantum (l3, dhcp, etc ..) you can encounter issue with rootwrap, especially with namespaces (i don't know if this is still the case) To fix that, just add 'root_helper = sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf' in the .ini file of each quantum service. I don't know why root_helper isn't in each quantum service sample files if it must be configured ... is it normal or not ? If this addition (to add root_helper in each ini file) should not be necessary, I think i identified the root problem. In the dhcp_agent for example, just need to replace each occurrences of 'self.conf.root_helper' by 'self.root_helper' If someone has the answer, let me know if I should open a bug or not. Regards, jbr_ On 03/21/2013 01:19 AM, Martinx - ジェームズ wrote: > 1 problem fixed with: > > visudo > > --- > quantum ALL=NOPASSWD: ALL > cinder ALL=NOPASSWD: ALL > nova ALL=NOPASSWD: ALL > --- > > Guide updated... > > > On 20 March 2013 19:51, Martinx - ジェームズ > <thiagocmarti...@gmail.com <mailto:thiagocmarti...@gmail.com>> wrote: > > Hi! > > I'm working with Grizzly G3+RC1 on top of Ubuntu 12.04.2 and here > is the guide I wrote: > > Ultimate OpenStack Grizzly Guide > <https://gist.github.com/tmartinx/d36536b7b62a48f859c2> > > It covers: > > * Ubuntu 12.04.2 > * Basic Ubuntu setup > * KVM > * OpenvSwitch > * Name Resolution for OpenStack components; > * LVM for Instances > * Keystone > * Glance > * Quantum - Single Flat, Super Green!! > * Nova > * Cinder / tgt > * Dashboard > > It is still a draft but, every time I deploy Ubuntu and Grizzly, > I follow this little guide... > > I would like some help to improve this guide... If I'm doing > something wrong, tell me! Please! > > Probably I'm doing something wrong, I don't know yet, but I'm > seeing some errors on the logs, already reported here on this > list. Like for example: nova-novncproxy conflicts with novnc (no > VNC console for now), dhcp-agent.log / auth.log points to some > problems with `sudo' or the `rootwarp' subsystem when dealing with > metadata (so it isn't working)... > > But in general, it works great!! > > Best! > Thiago > > > > > _______________________________________________ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp
_______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp