tripleo-image-serve : Image-Serve | reload httpd, "Unable to start service httpd: Job for httpd.service

Bug #1821025 reported by wes hayutin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Critical
Cédric Jeanneret

Bug Description

2019-03-20 10:42:22 | RUNNING HANDLER [tripleo-image-serve : Image-Serve | reload httpd] *************
2019-03-20 10:42:23 | fatal: [standalone]: FAILED! => {"changed": false, "msg": "Unable to start service httpd: Job for httpd.service failed because the control process exited with error code.\nSee \"systemctl status httpd.service\" and \"journalctl -xe\" for details.\n"}
2019-03-20 10:42:23 |

http://logs.rdoproject.org/openstack-periodic/git.openstack.org/openstack-infra/tripleo-ci/master/periodic-tripleo-ci-fedora-28-standalone-master/2919545/logs/undercloud/home/zuul/standalone_deploy.log.txt.gz

Mar 20 10:42:21 standalone.localdomain ansible-lineinfile[12939]: Invoked with path=/etc/httpd/conf/httpd.conf regexp=^\s*Listen(.*)$ line=# Listen \1 state=present backrefs=False create=False backup=False firstmatch=False follow=False insertafter=None insertbefore=None validate=None mode=None owner=None group=None seuser=None serole=None selevel=None setype=None attributes=None src=None force=None content=NOT_LOGGING_PARAMETER remote_src=None delimiter=None directory_mode=None unsafe_writes=None
Mar 20 10:42:22 standalone.localdomain ansible-stat[12949]: Invoked with path=/etc/httpd/conf.d/image-serve.conf follow=False get_checksum=True checksum_algo=sha1 checksum_algorithm=sha1 get_mime=True get_attributes=True get_md5=None
Mar 20 10:42:22 standalone.localdomain ansible-copy[12953]: Invoked with src=/root/.ansible/tmp/ansible-tmp-1553078541.8312936-25333933464593/source dest=/etc/httpd/conf.d/image-serve.conf mode=None follow=False _original_basename=image-serve.conf.j2 checksum=89f75bcb3b7bab48ea309a92fec5da0bc39d3cdc backup=False force=True content=NOT_LOGGING_PARAMETER validate=None directory_mode=None remote_src=None local_follow=None owner=None group=None seuser=None serole=None selevel=None setype=None attributes=None regexp=None delimiter=None unsafe_writes=None
Mar 20 10:42:22 standalone.localdomain ansible-command[12959]: Invoked with _raw_params=/bin/true warn=True _uses_shell=False argv=None chdir=None executable=None creates=None removes=None stdin=None
Mar 20 10:42:22 standalone.localdomain ansible-systemd[12964]: Invoked with daemon_reload=True no_block=False name=None state=None enabled=None force=None masked=None user=None scope=None
Mar 20 10:42:22 standalone.localdomain systemd[1]: Reloading.
Mar 20 10:42:23 standalone.localdomain ansible-systemd[12986]: Invoked with name=httpd state=restarted daemon_reload=False no_block=False enabled=None force=None masked=None user=None scope=None
Mar 20 10:42:23 standalone.localdomain systemd[1]: Starting The Apache HTTP Server...
Mar 20 10:42:23 standalone.localdomain audit[12991]: AVC avc: denied { name_bind } for pid=12991 comm="httpd" src=8787 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:jboss_debug_port_t:s0 tclass=tcp_socket permissive=0
Mar 20 10:42:23 standalone.localdomain audit[12991]: AVC avc: denied { name_bind } for pid=12991 comm="httpd" src=8787 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:jboss_debug_port_t:s0 tclass=tcp_socket permissive=0
Mar 20 10:42:23 standalone.localdomain httpd[12991]: (13)Permission denied: AH00072: make_sock: could not bind to address [::]:8787
Mar 20 10:42:23 standalone.localdomain httpd[12991]: (13)Permission denied: AH00072: make_sock: could not bind to address 0.0.0.0:8787
Mar 20 10:42:23 standalone.localdomain httpd[12991]: no listening sockets available, shutting down
Mar 20 10:42:23 standalone.localdomain httpd[12991]: AH00015: Unable to open logs
Mar 20 10:42:23 standalone.localdomain systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE
Mar 20 10:42:23 standalone.localdomain systemd[1]: httpd.service: Failed with result 'exit-code'.
Mar 20 10:42:23 standalone.localdomain systemd[1]: Failed to start The Apache HTTP Server.
Mar 20 10:42:23 standalone.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=42949

http://logs.rdoproject.org/openstack-periodic/git.openstack.org/openstack-infra/tripleo-ci/master/periodic-tripleo-ci-fedora-28-standalone-master/2919545/logs/undercloud/var/log/journal.txt.gz

wes hayutin (weshayutin)
tags: added: promotion-blocker
removed: promo
Revision history for this message
wes hayutin (weshayutin) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.openstack.org/645059

Changed in tripleo:
assignee: nobody → Cédric Jeanneret (cjeanner)
status: Triaged → In Progress
Revision history for this message
wes hayutin (weshayutin) wrote :
Revision history for this message
wes hayutin (weshayutin) wrote :
Revision history for this message
Cédric Jeanneret (cjeanner) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.openstack.org/645059
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=b152659d8df79dcd209af09ab865cedb50977d63
Submitter: Zuul
Branch: master

commit b152659d8df79dcd209af09ab865cedb50977d63
Author: Cédric Jeanneret <email address hidden>
Date: Thu Mar 21 07:33:37 2019 +0100

    We have to allow httpd to listen on those ports in some cases.

    Apparently, at least 8787 has a selinux type already, preventing
    httpd to listen on it.

    Change-Id: I03eacda0d8eaaa76915d8382bc21e8aa15c88265
    Closes-Bug: #1821025

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
Marios Andreou (marios-b) wrote :

    17:06 < weshay> sshnaidm|rover marios_|ruck this should fix f28 in promotion https://softwarefactory-project.io/r/#/c/15251/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to tripleo-heat-templates (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/645238

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to puppet-tripleo (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/645477

wes hayutin (weshayutin)
Changed in tripleo:
status: Fix Released → Triaged
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to tripleo-heat-templates (master)

Reviewed: https://review.openstack.org/645238
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=d9df3c0ab09bab44f389c8c868470a3df4a0d8ff
Submitter: Zuul
Branch: master

commit d9df3c0ab09bab44f389c8c868470a3df4a0d8ff
Author: Cédric Jeanneret <email address hidden>
Date: Thu Mar 21 15:11:13 2019 +0100

    Ensure we configure SELinux at the earliest stage.

    Prior this commit, SELinux was configured by puppet, and this
    happens way too late. Here we should get a proper SELinux configuration
    at the right time.

    SELinux management is also removed from puppet with this commit:
    https://review.openstack.org/#/c/645477/
    We just keep the "semodule" and "sebool" part within puppet. For now.

    Related-Bug: #1821025
    Closes-Bug: #1821178
    Change-Id: Ibd7b80b2cc0b09b63b17f1ba3a9b9cc2de728c57

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to puppet-tripleo (master)

Reviewed: https://review.openstack.org/645477
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=f4e5f1c89fe6f3ba92e5801ea7a10be924ab7fc3
Submitter: Zuul
Branch: master

commit f4e5f1c89fe6f3ba92e5801ea7a10be924ab7fc3
Author: Cédric Jeanneret <email address hidden>
Date: Fri Mar 22 07:24:09 2019 +0100

    Unmanage SELinux within puppet

    Since [1] we manage SELinux state with ansible, at an earlier stage.

    [1] https://review.openstack.org/645238

    Depends-On: https://review.openstack.org/645238
    Change-Id: I1b4cc5c510793d5fc908c8369a2f6a06c4ccd886
    Related-Bug: #1821178
    Related-Bug: #1821025

Revision history for this message
Marios Andreou (marios-b) wrote :

i see a green run here today https://review.rdoproject.org/zuul/builds?job_name=periodic-tripleo-ci-fedora-28-standalone-master

setting fix released undo if you disagree thanks

Changed in tripleo:
status: Triaged → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 10.5.0

This issue was fixed in the openstack/tripleo-heat-templates 10.5.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.