OpenStack Cinder Charm

  1. Bug #2004173
  2. Comment #1

Comment 1 for bug 2004173

Revision history for this message
Liam Young (gnuoy) wrote : Re: CIS hardening breaks luks volumes created from images

The issue is the umask of the root user. With the CIS hardening that has been applied the file shown in the error message (/var/lib/cinder/conversion/tmpy88g_2co) is created with permissions:

-rw-r----- 1 root root 119508992 Jan 30 19:36 tmpk16n731p

On the cinder unit the following will allow volumes to be created:

cp /etc/login.defs /etc/login.defs.cis
sed -i 's/^UMASK.*/UMASK 022/' /etc/login.defs