Ask Your Question
1

Why should packstack be run as regular user and not as root?

asked 2014-08-05 04:38:01 -0600

beni gravatar image

updated 2014-09-14 10:54:30 -0600

I am currently following http://openstack.redhat.com/PackStack_All-in-One_DIY_Configuration (PackStack All-in-One DIY Configuration) on Scientific Linux 6 to install OpenStack Icehouse. The tutorial states that packstack should not be run as root:

It is recommended that you run Packstack from a regular user account and not as 'root'. You will be prompted for the root account password when Packstack needs it.

So I followed this advice, created a new user and ran packstack from there. For convenience, I allow the user via sudo to run commands as root without a password.

packstack --allinone --os-neutron-install=y --provision-demo=n --provision-all-in-one-ovs-bridge=n

But packstack wants to SSH to root@localhost to perform its operations. I know that because packstack failed the first time, because the new user was not allowed to SSH to root@localhost. When I added the user's SSH key to the root user's authorized_keys, packstack successfully starts to perform its operations.

Is it the desired behaviour, that packstack wants to SSH to to the root user? Certainly it's more convenient because otherwise you had to create regular users on each node. So what is the point of running packstack as regular user on the same machine I want to install OpenStack on?

edit retag flag offensive close merge delete

Comments

Just to let you know, I gave up on running Packstack as regular user, was too much hassle with SSH keys.

beni gravatar imagebeni ( 2014-08-25 09:49:18 -0600 )edit

1 answer

Sort by ยป oldest newest most voted
0

answered 2014-12-03 14:28:01 -0600

rbowen gravatar image

It is indeed the desired behavior that packstack ssh'es to the root user, so that it can install packages.

The reason that you run packstack as a regular user is the same reason that you run anything as a regular user - if there's no need to run something as root, you should avoid it. However, there's also no harm in running it as root.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

2 followers

Stats

Asked: 2014-08-05 04:38:01 -0600

Seen: 2,917 times

Last updated: Dec 03 '14