Issue #1731
Updated by dkliban@redhat.com almost 9 years ago
During a sync on Fedora 23 I see the following traceback:
<pre>
celery.worker.strategy:INFO: Received task: pulp.server.async.tasks._release_resource[3c04a710-b935-45fc-b65a-f9ee897faf39]
pulp.server.async.tasks:INFO: Task failed : [31af7a44-04b1-4ae5-b6d4-8be2bed0ca10]
celery.worker.job:ERROR: (1768-51936) Task pulp.server.managers.repo.sync.sync[31af7a44-04b1-4ae5-b6d4-8be2bed0ca10] raised une
ermission denied\nsecmem usage: 0/0 bytes in 0/0 blocks of pool 0/0\n",)
celery.worker.job:ERROR: (1768-51936) Traceback (most recent call last):
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 240, in trace_task
celery.worker.job:ERROR: (1768-51936) R = retval = fun(*args, **kwargs)
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 473, in __call__
celery.worker.job:ERROR: (1768-51936) return super(Task, self).__call__(*args, **kwargs)
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 103, in __call__
celery.worker.job:ERROR: (1768-51936) return super(PulpTask, self).__call__(*args, **kwargs)
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 437, in __protected_call__
celery.worker.job:ERROR: (1768-51936) return self.run(*args, **kwargs)
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/server/controllers/repository.py", line 757, in sync
celery.worker.job:ERROR: (1768-51936) sync_report = sync_repo(transfer_repo, conduit, call_config)
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 658, in wrap_f
celery.worker.job:ERROR: (1768-51936) return f(*args, **kwargs)
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/web.py", line 91, in sync_repo
celery.worker.job:ERROR: (1768-51936) report = step.process_lifecycle()
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 562, in process_lifecycle
celery.worker.job:ERROR: (1768-51936) super(PluginStep, self).process_lifecycle()
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 159, in process_lifecycle
celery.worker.job:ERROR: (1768-51936) step.process()
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 249, in process
celery.worker.job:ERROR: (1768-51936) self._process_block()
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 293, in _process_block
celery.worker.job:ERROR: (1768-51936) self.process_main()
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/steps.py", line 93, in process_main
celery.worker.job:ERROR: (1768-51936) remote.add()
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/steps.py", line 414, in add
celery.worker.job:ERROR: (1768-51936) path, key_ids = self.gpg_keys
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/steps.py", line 385, in gpg_keys
celery.worker.job:ERROR: (1768-51936) gpg = GPG(gnupghome=home)
celery.worker.job:ERROR: (1768-51936) File "/usr/lib/python2.7/site-packages/gnupg.py", line 685, in __init__
celery.worker.job:ERROR: (1768-51936) result.stderr))
celery.worker.job:ERROR: (1768-51936) ValueError: Error invoking gpg: 2: gpg: fatal: can't disable core dumps: Permission denied
celery.worker.job:ERROR: (1768-51936) secmem usage: 0/0 bytes in 0/0 blocks of pool 0/0
</pre>
At the same time I am seeing the following denials in the /var/log/audit/audit.log
<pre>
type=AVC msg=audit(1456838329.864:12493): avc: denied { setrlimit } for pid=2955 comm="gpg" scontext=system_u:system_r:celery_t:s0 tcontext=system_u:system_r:celery_t:s0 tclass=process permissive=0
type=AVC msg=audit(1456838330.599:12494): avc: denied { setrlimit } for pid=2958 comm="gpg" scontext=system_u:system_r:celery_t:s0 tcontext=system_u:system_r:celery_t:s0 tclass=process permissive=0
type=AVC msg=audit(1456838337.238:12495): avc: denied { setrlimit } for pid=2973 comm="gpg" scontext=system_u:system_r:celery_t:s0 tcontext=system_u:system_r:celery_t:s0 tclass=process permissive=0
</pre>
This system has ostree 2015.11-2.fc23 installed.
I am NOT seeing this failure on EL7 where we have ostree 2016.1-2.atomic.el7 installed.
.