openstack/openstack-ansible-os_neutron
Code Issues Proposed changes

Add neutron-rootwrap-daemon

Browse Source 
This patch introduces neutron-rootwrap-daemon[1]
to neutron.conf and sudoers.d files which provide us
improvements in performance such as openratins
with DHCP agents.

[1] https://specs.openstack.org/openstack/neutron-specs/specs/kilo/rootwrap-daemon-mode.html

Change-Id: I659b8fb695dce5b9997de2acc770b1e7fbeae6d4
This commit is contained in:
Guilherme Steinmüller 2019-02-27 20:13:56 +00:00
parent 9018c6cf4b
commit b1f4269ecc
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
templates/neutron.conf.j2
View File

@ -249,6 +249,7 @@ auth_version = 3
polling_interval = {{ neutron_agent_polling_interval|default(5) }} polling_interval = {{ neutron_agent_polling_interval|default(5) }}
report_interval = {{ neutron_report_interval|int }} report_interval = {{ neutron_report_interval|int }}
root_helper = sudo {{ neutron_bin }}/neutron-rootwrap {{ neutron_conf_dir }}/rootwrap.conf root_helper = sudo {{ neutron_bin }}/neutron-rootwrap {{ neutron_conf_dir }}/rootwrap.conf
root_helper_daemon = sudo {{ neutron_bin }}/neutron-rootwrap-daemon {{ neutron_conf_dir }}/rootwrap.conf
# Messaging # Messaging
[oslo_messaging_rabbit] [oslo_messaging_rabbit]

1
templates/sudoers.j2
View File

@ -4,3 +4,4 @@ Defaults:{{ neutron_system_user_name }} !requiretty
Defaults:{{ neutron_system_user_name }} secure_path="{{ neutron_bin }}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" Defaults:{{ neutron_system_user_name }} secure_path="{{ neutron_bin }}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap {{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap-daemon