kolla/docker/ironic
Mark Goddard 9ec3d11007 Fix binary ironic-inspector rootwrap configuration
When built with the binary install type (at least on CentOS), Ironic
inspector fails to start and the container remains in a restarting
state. The log file shows that it is failing to execute iptables, and
analysis found that this was due to an incorrect rootwrap
configuration. The RDO ironic inspector RPM expects Ironic inspector
to be run as the ironic-inspector user, however Kolla uses the ironic
user. This means that neither of the packaged ironic nor
ironic-inspector sudoers configuration files works for us.

Kolla currently installs a sudoers file pointing to the rootwrap
script in the virtualenv of the source install, but of course this
only makes sense for source installs, and should not be installed for
binary installs.

This change adds a second sudoers file that will work for the binary
install type, and installs the correct sudoers file for the install
type.

Change-Id: I8ecd0b658b8df8f38ddf717fa9443d4dc2896984
Closes-Bug: #1624457
(cherry picked from commit 5752c7eb0b)
2017-03-02 16:33:25 +00:00
..
ironic-api Remove include_header and include_footer in all Dockerfiles 2017-02-05 10:44:48 +08:00
ironic-base use static uid/gid in images 2017-01-17 09:02:21 -03:00
ironic-conductor Install shellinabox and socat packages in ironic 2017-02-21 14:56:38 +08:00
ironic-inspector Fix binary ironic-inspector rootwrap configuration 2017-03-02 16:33:25 +00:00
ironic-pxe Remove include_header and include_footer in all Dockerfiles 2017-02-05 10:44:48 +08:00