oslo_privsep.daemon.FailedToDropPrivileges

asked 2020-02-14 21:32:39 -0600

jmora gravatar image

updated 2020-02-15 08:41:50 -0600

EL7 - Python3.6 - Openvswitch - Openstack Train

neutron-openvswitch-agent version 15.1.0.dev472

Currently trying to get the neutron-openvswitch-agent working with a nova compute node. Provider bridge is currently made with no issues to networking. What seems to happen is when the neutron-openvswitch-agent starts is it errors on privsep-helper.

From looking through other similar issues, it looks like the fix was to add a password less sudo for neutron user. This was the case to make the ovs-agent work on the controller node but the same did not work for the compute node.

2020-02-14 21:25:18.342 11097 INFO neutron.common.config [-] Logging enabled!
2020-02-14 21:25:18.342 11097 INFO neutron.common.config [-] /usr/local/bin/neutron-openvswitch-agent version 15.1.0.dev472
2020-02-14 21:25:18.342 11097 INFO os_ken.base.app_manager [-] loading app neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp
2020-02-14 21:25:18.950 11097 INFO os_ken.base.app_manager [-] loading app os_ken.app.ofctl.service
2020-02-14 21:25:18.952 11097 INFO os_ken.base.app_manager [-] loading app os_ken.controller.ofp_handler
2020-02-14 21:25:18.952 11097 INFO os_ken.base.app_manager [-] instantiating app neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp of OVSNeutronAgentOSKenApp
2020-02-14 21:25:18.953 11097 INFO os_ken.base.app_manager [-] instantiating app os_ken.app.ofctl.service of OfctlService
2020-02-14 21:25:18.953 11097 INFO os_ken.base.app_manager [-] instantiating app os_ken.controller.ofp_handler of OFPHandler
2020-02-14 21:25:18.954 11097 INFO neutron.agent.agent_extensions_manager [-] Loaded agent extensions: []
2020-02-14 21:25:18.961 11097 INFO oslo.privsep.daemon [-] Running privsep helper: ['sudo', 'privsep-helper', '--config-file', '/etc/neutron/plugins/ml2/openvswitch_agent.ini', '--config-dir', '/etc/neutron/conf.d/neutron-openvswitch-agent', '--privsep_context', 'neutron.privileged.default', '--privsep_sock_path', '/tmp/tmp8dmlkq3w/privsep.sock']
2020-02-14 21:25:19.030 11097 WARNING oslo.privsep.daemon [-] privsep log: sudo: privsep-helper: command not found
2020-02-14 21:25:19.039 11097 CRITICAL oslo.privsep.daemon [-] privsep helper command exited non-zero (1)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp [-] Agent main thread died of an exception: oslo_privsep.daemon.FailedToDropPrivileges: privsep helper command exited non-zero (1)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp Traceback (most recent call last):
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp   File "/usr/local/lib/python3.6/site-packages/neutron/plugins/ml2/drivers/openvswitch/agent/openflow/native/ovs_oskenapp.py", line 40, in agent_main_wrapper
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp     ovs_agent.main(bridge_classes)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp   File "/usr/local/lib/python3.6/site-packages/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py", line 2708, in main
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp     validate_tunnel_config(cfg.CONF.AGENT.tunnel_types, cfg.CONF.OVS.local_ip)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native ...
(more)
edit retag flag offensive close merge delete

Comments

I suggest you edit your question and format the log messages so that they become readable. Use the button labeled "101010".

Bernd Bausch gravatar imageBernd Bausch ( 2020-02-14 21:35:58 -0600 )edit

that was exactly it, forgot to update PATH on that node.

jmora gravatar imagejmora ( 2020-02-15 20:20:14 -0600 )edit

1 answer

Sort by ยป oldest newest most voted
1

answered 2020-02-15 19:57:51 -0600

privsep-helper can't be found. It is either not installed or not in the execution PATH.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2020-02-14 21:32:39 -0600

Seen: 617 times

Last updated: Feb 15 '20