Ask Your Question
0

oslo_privsep.daemon.FailedToDropPrivileges

asked 2020-02-14 21:32:39 -0600

jmora gravatar image

updated 2020-02-15 08:41:50 -0600

EL7 - Python3.6 - Openvswitch - Openstack Train

neutron-openvswitch-agent version 15.1.0.dev472

Currently trying to get the neutron-openvswitch-agent working with a nova compute node. Provider bridge is currently made with no issues to networking. What seems to happen is when the neutron-openvswitch-agent starts is it errors on privsep-helper.

From looking through other similar issues, it looks like the fix was to add a password less sudo for neutron user. This was the case to make the ovs-agent work on the controller node but the same did not work for the compute node.

2020-02-14 21:25:18.342 11097 INFO neutron.common.config [-] Logging enabled!
2020-02-14 21:25:18.342 11097 INFO neutron.common.config [-] /usr/local/bin/neutron-openvswitch-agent version 15.1.0.dev472
2020-02-14 21:25:18.342 11097 INFO os_ken.base.app_manager [-] loading app neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp
2020-02-14 21:25:18.950 11097 INFO os_ken.base.app_manager [-] loading app os_ken.app.ofctl.service
2020-02-14 21:25:18.952 11097 INFO os_ken.base.app_manager [-] loading app os_ken.controller.ofp_handler
2020-02-14 21:25:18.952 11097 INFO os_ken.base.app_manager [-] instantiating app neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp of OVSNeutronAgentOSKenApp
2020-02-14 21:25:18.953 11097 INFO os_ken.base.app_manager [-] instantiating app os_ken.app.ofctl.service of OfctlService
2020-02-14 21:25:18.953 11097 INFO os_ken.base.app_manager [-] instantiating app os_ken.controller.ofp_handler of OFPHandler
2020-02-14 21:25:18.954 11097 INFO neutron.agent.agent_extensions_manager [-] Loaded agent extensions: []
2020-02-14 21:25:18.961 11097 INFO oslo.privsep.daemon [-] Running privsep helper: ['sudo', 'privsep-helper', '--config-file', '/etc/neutron/plugins/ml2/openvswitch_agent.ini', '--config-dir', '/etc/neutron/conf.d/neutron-openvswitch-agent', '--privsep_context', 'neutron.privileged.default', '--privsep_sock_path', '/tmp/tmp8dmlkq3w/privsep.sock']
2020-02-14 21:25:19.030 11097 WARNING oslo.privsep.daemon [-] privsep log: sudo: privsep-helper: command not found
2020-02-14 21:25:19.039 11097 CRITICAL oslo.privsep.daemon [-] privsep helper command exited non-zero (1)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp [-] Agent main thread died of an exception: oslo_privsep.daemon.FailedToDropPrivileges: privsep helper command exited non-zero (1)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp Traceback (most recent call last):
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp   File "/usr/local/lib/python3.6/site-packages/neutron/plugins/ml2/drivers/openvswitch/agent/openflow/native/ovs_oskenapp.py", line 40, in agent_main_wrapper
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp     ovs_agent.main(bridge_classes)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp   File "/usr/local/lib/python3.6/site-packages/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py", line 2708, in main
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_oskenapp     validate_tunnel_config(cfg.CONF.AGENT.tunnel_types, cfg.CONF.OVS.local_ip)
2020-02-14 21:25:19.039 11097 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native ...
(more)
edit retag flag offensive close merge delete

Comments

I suggest you edit your question and format the log messages so that they become readable. Use the button labeled "101010".

Bernd Bausch gravatar imageBernd Bausch ( 2020-02-14 21:35:58 -0600 )edit

that was exactly it, forgot to update PATH on that node.

jmora gravatar imagejmora ( 2020-02-15 20:20:14 -0600 )edit

1 answer

Sort by ยป oldest newest most voted
1

answered 2020-02-15 19:57:51 -0600

privsep-helper can't be found. It is either not installed or not in the execution PATH.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2020-02-14 21:32:39 -0600

Seen: 19 times

Last updated: Feb 15