Magnum

Latest Fedora Atomic fails with Newton

Bug #1678130 reported by Mohammed Naser
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Magnum
Fix Committed
Undecided
Mohammed Naser
Newton
Fix Committed
Undecided
Unassigned

Bug Description

With Newton release, it seems the latest image is failing to boot properly in relation to some SELinux errors:

swarm-manager never goes up:
# docker logs swarm-manager
time="2017-03-31T12:50:51Z" level=fatal msg="Couldn't load X509 key pair (/etc/docker/server.crt, /etc/docker/server.key): open /etc/docker/server.crt: permission denied. Key encrypted?"

selinux issues:
# grep denied /var/log/audit/audit.log
type=AVC msg=audit(1490964651.426:180): avc: denied { read } for pid=3087 comm="swarm" name="server.crt" dev="dm-0" ino=5291134 scontext=system_u:system_r:container_t:s0:c215,c816 tcontext=system_u:object_r:container_config_t:s0 tclass=file permissive=0

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to magnum (master)

Fix proposed to branch: master
Review: https://review.openstack.org/452239

Changed in magnum:
assignee: nobody → Mohammed Naser (mnaser)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to magnum (stable/ocata)

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/452240

Revision history for this message
Spyros Trigazis (strigazi) wrote :

Since all branches are affected modify the title and description. Don't mention only newton.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on magnum (master)

Change abandoned by Mohammed Naser (<email address hidden>) on branch: master
Review: https://review.openstack.org/452239
Reason: Will be handled by https://review.openstack.org/#/c/451710/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on magnum (stable/ocata)

Change abandoned by Mohammed Naser (<email address hidden>) on branch: stable/ocata
Review: https://review.openstack.org/452240
Reason: Will be handled by https://review.openstack.org/#/c/451710/

Revision history for this message
Spyros Trigazis (strigazi) wrote :

Commit merged for newton https://review.openstack.org/#/c/464078/

Planned to release

Changed in magnum:
status: In Progress → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.