tripleo

403, on https://images.rdoproject.org/CentOS-8-x86_64-GenericCloud.qcow2

Bug #1910417 reported by wes hayutin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Critical
Unassigned
tripleo wallaby-2

Bug Description

2021-01-06 10:34:36.690118 | TASK [oooci-build-images : Download TripleO source image]
2021-01-06 10:45:25.430273 | primary | ERROR
2021-01-06 10:45:25.431269 | primary | {
2021-01-06 10:45:25.431559 | primary | "attempts": 60,
2021-01-06 10:45:25.431697 | primary | "dest": "/home/zuul/workspace/CentOS-8-x86_64-GenericCloud.qcow2",
2021-01-06 10:45:25.431841 | primary | "elapsed": 0,
2021-01-06 10:45:25.432003 | primary | "msg": "Request failed",
2021-01-06 10:45:25.432134 | primary | "response": "HTTP Error 403: Forbidden",
2021-01-06 10:45:25.432284 | primary | "status_code": 403,
2021-01-06 10:45:25.432379 | primary | "url": "https://images.rdoproject.org/CentOS-8-x86_64-GenericCloud.qcow2"
2021-01-06 10:45:25.432468 | primary | }
2021-01-06 10:45:25.473121 |
2021-01-06 10:45:25.473368 | PLAY RECAP

https://zuul.openstack.org/builds?job_name=tripleo-buildimage-overcloud-full-centos-8

Revision history for this message
yatin (yatinkarel) wrote :

As part of updating the image in https://bugs.launchpad.net/tripleo/+bug/1910107/comments/9, selinux context got changed to user_home_t leading to Forbidden, mhu has fixed restored it to correct one httpd_sys_content_t, now image is accessible.

Revision history for this message
wes hayutin (weshayutin) wrote :

<weshay|ruck> mhu, getting forbidden.. this is failing upstream jobs https://zuul.openstack.org/builds?job_name=tripleo-buildimage-overcloud-full-centos-8
[08:55:50] <bhjf> Title: Zuul (at zuul.openstack.org)
[08:56:08] <mhu> weshay|ruck, I'll have a look
[08:57:42] <weshay|ruck> thanks
[08:59:45] * ikanias has quit (Ping timeout: 180 seconds)
[09:00:53] <mhu> a new image got uploaded today
[09:01:28] <ykarel|away> mhu, https://bugs.launchpad.net/tripleo/+bug/1910107/comments/9
[09:01:29] <bhjf> Title: Comment #9 : Bug #1910107 : Bugs : tripleo (at bugs.launchpad.net)
[09:01:33] * ikanias_ has quit (Ping timeout: 260 seconds)
[09:02:23] <ykarel|away> i updated the image today, similar to what did when added fresh 8.3 image
[09:02:38] <mhu> ykarel|away, ok just trying to see what might have changed
[09:02:53] <mhu> oddly the md5 file is accessible
[09:03:56] <ykarel|away> may be it happened as i did mv <image file> to /var/www/html/images/<image file>
[09:04:06] <ykarel|away> image file existed already there with same name
[09:04:51] <ykarel|away> don't know why it could happen though, for md5 used >
[09:06:19] <mhu> the file rights are similar
[09:06:41] <ykarel|away> yeap that's why i didn't get what's wrong
[09:08:10] <ykarel|away> mhu, see selinux context, that differs
[09:08:17] <ykarel|away> user_home_t vs httpd_sys_content_t
[09:09:45] <mhu> could be it
[09:09:53] <mhu> good catch
[09:11:35] * flaviof is now known as flaviof_afk
[09:16:07] <ykarel|away> ok it's not returning Forbidden now
[09:16:13] <mhu> ykarel|away, weshay|ruck fixed, thanks to tristanC's knowled of selinux
[09:16:27] <mhu> restorecon FTW
[09:17:44] <ykarel|away> hmm that restores to parent's directories context
[09:17:52] <ykarel|away> Thanks mhu tristanC

Changed in tripleo:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.