Why should packstack be run as regular user and not as root?
I am currently following http://openstack.redhat.com/PackStack_All-in-One_DIY_Configuration (PackStack All-in-One DIY Configuration) on Scientific Linux 6 to install OpenStack Icehouse. The tutorial states that packstack should not be run as root
:
It is recommended that you run Packstack from a regular user account and not as 'root'. You will be prompted for the root account password when Packstack needs it.
So I followed this advice, created a new user and ran packstack from there. For convenience, I allow the user via sudo
to run commands as root
without a password.
packstack --allinone --os-neutron-install=y --provision-demo=n --provision-all-in-one-ovs-bridge=n
But packstack wants to SSH to root@localhost
to perform its operations. I know that because packstack failed the first time, because the new user was not allowed to SSH to root@localhost
. When I added the user's SSH key to the root
user's authorized_keys
, packstack successfully starts to perform its operations.
Is it the desired behaviour, that packstack wants to SSH to to the root
user? Certainly it's more convenient because otherwise you had to create regular users on each node. So what is the point of running packstack as regular user on the same machine I want to install OpenStack on?
Just to let you know, I gave up on running Packstack as regular user, was too much hassle with SSH keys.