Project

Profile

Help

Issue #1423

closed

pulp-2.7.1 on el6 fails to start pulp-workers with selinux enforcing

Added by pthomas@redhat.com over 8 years ago. Updated about 5 years ago.

Status:
CLOSED - NOTABUG
Priority:
Normal
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
2.7.0
Platform Release:
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

Looks like pulp-workers error out when starting on el6 with pup 2.7.1 and selinux enforcing.


[root@sparks ~]# rpm -qa |grep pulp
python-pulp-puppet-common-2.7.1-1.el6.noarch
python-pulp-client-lib-2.7.1-1.el6.noarch
python-isodate-0.5.0-4.pulp.el6.noarch
mod_wsgi-3.4-2.pulp.el6.x86_64
python-pulp-rpm-common-2.7.1-1.el6.noarch
python-pulp-oid_validation-2.7.1-1.el6.noarch
pulp-server-2.7.1-1.el6.noarch
pulp-rpm-plugins-2.7.1-1.el6.noarch
pulp-selinux-2.7.1-1.el6.noarch
pulp-admin-client-2.7.1-1.el6.noarch
pulp-puppet-admin-extensions-2.7.1-1.el6.noarch
python-pulp-common-2.7.1-1.el6.noarch
python-kombu-3.0.24-10.pulp.el6.noarch
python-pulp-repoauth-2.7.1-1.el6.noarch
pulp-puppet-plugins-2.7.1-1.el6.noarch
python-pulp-bindings-2.7.1-1.el6.noarch
pulp-rpm-admin-extensions-2.7.1-1.el6.noarch
[root@sparks ~]# 
[root@sparks ~]# 
[root@sparks ~]# semodule -l | grep pulp
pulp-celery    2.7.1    
pulp-server    2.7.1    
[root@sparks ~]# 
Dec 16 11:12:03 sparks pulp: kombu.transport.qpid:INFO: Connected to qpid with SASL mechanism ANONYMOUS
Dec 16 11:12:03 sparks pulp: celery.worker.consumer:INFO: Connected to qpid://localhost:5672//
Dec 16 11:12:03 sparks pulp: kombu.transport.qpid:INFO: Connected to qpid with SASL mechanism ANONYMOUS
Dec 16 11:12:06 sparks pulp: kombu.transport.qpid:INFO: Connected to qpid with SASL mechanism ANONYMOUS
Dec 16 11:12:06 sparks pulp: celery.worker.consumer:INFO: Connected to qpid://localhost:5672//
Dec 16 11:12:06 sparks pulp: kombu.transport.qpid:INFO: Connected to qpid with SASL mechanism ANONYMOUS
Dec 16 11:12:06 sparks pulp: celery.worker:ERROR: (24996-54176) Unrecoverable error: Exception('Exception from Agent: {u\'error_code\': 7, u\'error_text\': \'Queue celery: create() failed: jexception 0x010c EmptyFilePool::createSymLink() threw JERR__SYMLINK: Symbolic link operation failed (file="/var/lib/qpidd/qls/p001/efp/2048k/in_use/75380921-6181-4d4a-86f1-8d06facb3b29.jrnl" symlink="/var/lib/qpidd/qls/jrnl2/celery/75380921-6181-4d4a-86f1-8d06facb3b29.jrnl" errno=13 (Permission denied)) (/builddir/build/BUILD/qpid-cpp-0.34/src/qpid/linearstore/MessageStoreImpl.cpp:425)\'}',)
Actions #1

Updated by pthomas@redhat.com over 8 years ago

  • Description updated (diff)
Actions #2

Updated by bmbouter over 8 years ago

@pthomas This SELinux denial affects Pulp but it is not anything Pulp can resolve. The denial says its a qpidd process being denied access to a qpidd file.

Can you report the issue to upstream Qpid in their issue tracker?

Actions #3

Updated by bmbouter over 8 years ago

Also rtf files are hard to read since they aren't plaintext. The attachment shows that the exception occurs on startup. For simplicity I'm removing the attachment.

Actions #4

Updated by bmbouter over 8 years ago

  • File deleted (pulp.rtf)
Actions #5

Updated by bmbouter over 8 years ago

  • Status changed from NEW to CLOSED - NOTABUG
  • Triaged changed from No to Yes

After some conversation in IRC, the Qpid team wants to ensure the machine is fully up to date. It likely is running a version of SELinux that is too old. If it does reproduce on an up to date system, an upstream Qpid bug should be opened.

Actions #6

Updated by bmbouter about 5 years ago

  • Tags Pulp 2 added

Also available in: Atom PDF