non-executable permissions on folders under mos-ubuntu prevents automated deployment

Bug #1476593 reported by Rajesh Mallah
44
This bug affects 7 people
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Alex Schultz
6.1.x
Fix Released
High
Alex Schultz
7.0.x
Fix Released
High
Alex Schultz

Bug Description

We are attempting to test fuel stable 6.1 for openstack deployment. the log file
/var/log/fuel-agent-env-1.log points to some http 403 forbidden message while
fetching some debs from the local repository served by nginx docker container

running the below after getting inside container fixed the error for me

[root@fuel ~]# dockerctl shell nginx
[root@fuel /]# su -

# find /var/www/nailgun/mos-ubuntu -type d -exec chmod 755 {} \;

unfortunately i do not have the pristine logs but i am posting the relevant indicators.

in /var/log/fuel-agent-env-1.log

730 TRACE fuel_agent.cmd.agent Stderr: 'E: Failed to fetch http://10.20.0.2:8080/mos-ubuntu/pool/main/a​/astute/nailgun-mcagents_6.1.0-642.1_all.deb 403 Forbidden\n\nE: Failed to fetch http://10.20.0.2:8080/mos-ubuntu/pool/main/n​/nailgun/nailgun-agent_6.1.0-7132.1_all.deb 403 Forbidden\n\nE: Failed to fetch http://10.20.0.2:8080/mos-ubuntu/pool/main/n/n​ailgun/nailgun-net-check_6.1.0-7132.1_all.deb 403 Forbidden\n\nE: Unable

on the Fuel UI it eventually manifests as:

  Failed to execute hook 'shell' Failed to run command cd / && fa_build_image --log-file /var/log/fuel-agent-env-1.log --data_driver nailgun_build_image --input_data '{"image_data": {"/boot": {"container": "gzip", "uri": "http://10.20.0.2:8080/targetimages/​env_1_ubuntu_1404_amd64-boot.img.gz",

Fixing the permissions manually and running redeployment allowed me to get
ubuntu successfully installed.

Thanks & Regards
Rajesh Kumar Mallah.

Changed in fuel:
importance: Undecided → High
milestone: none → 7.0
assignee: nobody → Fuel Library Team (fuel-library)
Changed in fuel:
status: New → Confirmed
Changed in fuel:
assignee: Fuel Library Team (fuel-library) → Alex Schultz (alex-schultz)
Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Fix proposed to packages/trusty/fuel-createmirror (7.0)

Fix proposed to branch: 7.0
Change author: Alex Schultz <email address hidden>
Review: https://review.fuel-infra.org/9862

Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Change abandoned on packages/trusty/fuel-createmirror (7.0)

Change abandoned by Alex Schultz <email address hidden> on branch: 7.0
Review: https://review.fuel-infra.org/9862
Reason: looks like the 7.0 branch is not current with 6.1 and we are still using the 6.1 package. This repo needs some attention

Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Related fix proposed to packages/trusty/fuel-createmirror (6.1)

Related fix proposed to branch: 6.1
Change author: Alex Schultz <email address hidden>
Review: https://review.fuel-infra.org/9863

Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Related fix proposed to packages/centos6/fuel-createmirror (6.1)

Related fix proposed to branch: 6.1
Change author: Alex Schultz <email address hidden>
Review: https://review.fuel-infra.org/9864

Revision history for this message
Rajesh Mallah (mallah) wrote :

I am curious if a system (automated) exists that continually checks whether new builds (nightly/stable)
are deployable on a set of test systems. Also under what circumstance this bug did not affect most of the
people / users.

Revision history for this message
Vladimir Kuklin (vkuklin) wrote :

not everyone is using fuel-createmirror script, Rajesh

Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Related fix merged to packages/trusty/fuel-createmirror (6.1)

Reviewed: https://review.fuel-infra.org/9863
Submitter: Dmitry Borodaenko <email address hidden>
Branch: 6.1

Commit: 89cc00d5d3811d6432f9e824258a387abd157ca4
Author: Alex Schultz <email address hidden>
Date: Fri Jul 24 18:46:56 2015

Fixing pool permissions after rsync

This change corrects the permissions of the pool folder so that it can
be consumed as a repository mirror via nginx.

Change-Id: I02d604eb0a9678ccea7f532625f03bdb619e1695
Related-Bug: 1476593

Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Related fix merged to packages/centos6/fuel-createmirror (6.1)

Reviewed: https://review.fuel-infra.org/9864
Submitter: Dmitry Borodaenko <email address hidden>
Branch: 6.1

Commit: 7c92b7a9aaf60c82066cb460e7f270f003a5e302
Author: Alex Schultz <email address hidden>
Date: Fri Jul 24 19:09:09 2015

Fixing pool permissions after rsync

This change corrects the permissions of the pool folder so that it can
be consumed as a repository mirror via nginx.

Change-Id: I9e009f870667ca8cd554cb495377e03ac7e99a7d
Related-Bug: 1476593

Revision history for this message
Mike Scherbakov (mihgen) wrote :

Do we consider this as fixed?

Revision history for this message
Alex Schultz (alex-schultz) wrote :

This was fixed for 7.0 as part of https://review.openstack.org/#/c/210315/

Revision history for this message
Hugh Ma (hughkma) wrote :

Is this update already merged upstream?

I ran yum update and rebuilt the containers, but the problem still persisted.

Pavlo Sumkin (ymkins)
tags: added: on-verification
Revision history for this message
Pavlo Sumkin (ymkins) wrote :

I've checked it both on Fuel-6.1 and Fuel-7.0(RC4)

Changed in fuel:
status: Fix Committed → Fix Released
tags: removed: on-verification
Roman Rufanov (rrufanov)
tags: added: customer-found support
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.