The Precise Pangolin has reached end of life, so this bug will not be
fixed for that release
** Changed in: quantum (Ubuntu Precise)
Status: Confirmed => Won't Fix
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1069966
Title:
rootwrap error with L3 agent
Status in neutron:
Fix Released
Status in neutron folsom series:
Fix Released
Status in quantum package in Ubuntu:
Fix Released
Status in quantum source package in Precise:
Won't Fix
Status in quantum source package in Quantal:
Fix Released
Bug description:
I am seeing the following error in /var/log/quantum/l3_agent.log:
2012-10-22 09:00:48 DEBUG [quantum.agent.linux.utils] Running command:
sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf /sbin/iptables-save
-t filter
2012-10-22 09:00:48 DEBUG [quantum.agent.linux.utils]
Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf',
'/sbin/iptables-save', '-t', 'filter']
Exit code: 99
Stdout: 'Unauthorized command: /sbin/iptables-save -t filter\n'
Stderr: ''
2012-10-22 09:00:48 ERROR [quantum.agent.l3_agent] Error running l3_nat
daemon_loop
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line
170, in daemon_loop
self.do_single_loop()
File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line
227, in do_single_loop
self.process_router(ri)
File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line
300, in process_router
self.external_gateway_added(ri, ex_gw_port, internal_cidrs)
File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line
398, in external_gateway_added
ri.iptables_manager.apply()
File
"/usr/lib/python2.7/dist-packages/quantum/agent/linux/iptables_manager.py",
line 282, in apply
root_helper=self.root_helper))
File "/usr/lib/python2.7/dist-packages/quantum/agent/linux/utils.py", line
55, in execute
raise RuntimeError(m)
RuntimeError:
Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf',
'/sbin/iptables-save', '-t', 'filter']
Exit code: 99
Stdout: 'Unauthorized command: /sbin/iptables-save -t filter\n'
Stderr: ''
If I run "sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf
/sbin/iptables-save -t filter" it does indeed give me an Unauthorized
command error.
If I run "sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf
iptables-save -t filter" (without the /sbin/) it works OK.
Otherwise, I don't see errors in the log.
Is this a problem?
Thanks,
Graham
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1069966/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
