openstack/kolla-ansible
Code Issues Proposed changes

Merge "change libvirt sock group to nova"

Browse Source
This commit is contained in:
Jenkins 2015-12-30 09:02:21 +00:00 committed by Gerrit Code Review
commit ff2d0cd7aa
2 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/roles/nova/templates/libvirtd.conf.j2
View File

@ -4,7 +4,7 @@ ca_file = ""
log_level = 2 log_level = 2
log_outputs = "2:file:/var/log/libvirt/libvirtd.log" log_outputs = "2:file:/var/log/libvirt/libvirtd.log"
listen_addr = "{{ hostvars[inventory_hostname]['ansible_' + api_interface]['ipv4']['address'] }}" listen_addr = "{{ hostvars[inventory_hostname]['ansible_' + api_interface]['ipv4']['address'] }}"
unix_sock_group = "root" unix_sock_group = "nova"
unix_sock_ro_perms = "0777" unix_sock_ro_perms = "0777"
unix_sock_rw_perms = "0770" unix_sock_rw_perms = "0770"
auth_unix_ro = "none" auth_unix_ro = "none"

5
docker/nova/nova-libvirt/Dockerfile.j2
View File

@ -30,8 +30,7 @@ RUN apt-get install -y --no-install-recommends \
{% endif %} {% endif %}
COPY extend_start.sh /usr/local/bin/kolla_extend_start COPY extend_start.sh /usr/local/bin/kolla_extend_start
RUN chmod 755 /usr/local/bin/kolla_extend_start RUN chmod 755 /usr/local/bin/kolla_extend_start \
&& useradd --user-group nova
{{ include_footer }} {{ include_footer }}
# TODO(coolsvap/nihilifer): Run libvirt daemon as non-root user.