Skip to content

Commit 8924d7b

Browse files
qa/cephadm/smb: run setsebool with sudo
Change 06fc55b added a setsebool command to nodes setup on ctdb enabled test. This should have prevented additional errors like: ``` failure_reason: 'SELinux denials found on [email protected]: [''type=AVC msg=audit(1743168241.024:10142): avc: denied { nlmsg_read } for pid=60223 comm="ss" scontext=system_u:system_r:container_t:s0:c491,c612 tcontext=system_u:system_r:container_t:s0:c491,c612 tclass=netlink_tcpdiag_socket permissive=1'', ''type=AVC msg=audit(1743168185.768:10101): avc: denied { nlmsg_read } for pid=58817 comm="ss" scontext=system_u:system_r:container_t:s0:c491,c612 tcontext=system_u:system_r:container_t:s0:c491,c612 tclass=netlink_tcpdiag_socket permissive=1'', ''type=AVC msg=audit(1743168210.896:10137): avc: denied { nlmsg_read } for pid=59798 comm="ss" scontext=system_u:system_r:container_t:s0:c491,c612 tcontext=system_u:system_r:container_t:s0:c491,c612 tclass=netlink_tcpdiag_socket permissive=1'']' ``` But these were seen again: https://qa-proxy.ceph.com/teuthology/adking-2025-03-28_12:13:17-orch:cephadm-wip-adk-testing-2025-03-27-1430-distro-default-smithi/8214681/teuthology.log I think that the commands may not be getting run correctly because they need to be run with privs. Other pexec commands in the cephadm suite run with sudo, so try it here. Signed-off-by: John Mulligan <[email protected]>
1 parent 7861012 commit 8924d7b

File tree

5 files changed

+5
-5
lines changed

5 files changed

+5
-5
lines changed

qa/suites/orch/cephadm/smb/tasks/deploy_smb_ctdb_node_gone_state.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ tasks:
2626
role: host.d
2727
- pexec:
2828
all:
29-
- setsebool -P virt_sandbox_use_netlink 1 || true
29+
- sudo setsebool -P virt_sandbox_use_netlink 1 || true
3030
- cephadm:
3131

3232
- cephadm.shell:

qa/suites/orch/cephadm/smb/tasks/deploy_smb_mgr_clustering_ips.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ tasks:
2828
count: 1
2929
- pexec:
3030
all:
31-
- setsebool -P virt_sandbox_use_netlink 1 || true
31+
- sudo setsebool -P virt_sandbox_use_netlink 1 || true
3232
- cephadm:
3333

3434
- cephadm.shell:

qa/suites/orch/cephadm/smb/tasks/deploy_smb_mgr_ctdb_res_basic.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ tasks:
2626
role: host.d
2727
- pexec:
2828
all:
29-
- setsebool -P virt_sandbox_use_netlink 1 || true
29+
- sudo setsebool -P virt_sandbox_use_netlink 1 || true
3030
- cephadm:
3131

3232
- cephadm.shell:

qa/suites/orch/cephadm/smb/tasks/deploy_smb_mgr_ctdb_res_dom.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ tasks:
2626
role: host.d
2727
- pexec:
2828
all:
29-
- setsebool -P virt_sandbox_use_netlink 1 || true
29+
- sudo setsebool -P virt_sandbox_use_netlink 1 || true
3030
- cephadm:
3131

3232
- cephadm.shell:

qa/suites/orch/cephadm/smb/tasks/deploy_smb_mgr_ctdb_res_ips.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ tasks:
2828
count: 2
2929
- pexec:
3030
all:
31-
- setsebool -P virt_sandbox_use_netlink 1 || true
31+
- sudo setsebool -P virt_sandbox_use_netlink 1 || true
3232
- cephadm:
3333

3434
- cephadm.shell:

0 commit comments

Comments
 (0)