diff --git a/lower-constraints.txt b/lower-constraints.txt
index 550828e82..b2b0feb93 100644
--- a/lower-constraints.txt
+++ b/lower-constraints.txt
@@ -56,6 +56,7 @@ oslo.config==5.2.0
 oslo.context==2.19.2
 oslo.i18n==3.15.3
 oslo.log==3.36.0
+oslo.rootwrap==5.8.0
 oslo.serialization==2.18.0
 oslo.utils==3.33.0
 oslotest==3.2.0
diff --git a/requirements.txt b/requirements.txt
index c304a4be1..51b6b6046 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,6 +9,7 @@ eventlet!=0.20.1,>=0.20.0 # MIT
 python-heatclient>=1.10.0 # Apache-2.0
 oslo.config>=5.2.0 # Apache-2.0
 oslo.log>=3.36.0 # Apache-2.0
+oslo.rootwrap>=5.8.0 # Apache-2.0
 oslo.utils>=3.33.0 # Apache-2.0
 python-glanceclient>=2.8.0 # Apache-2.0
 python-ironicclient>=2.3.0 # Apache-2.0
diff --git a/tripleo_common/actions/ansible.py b/tripleo_common/actions/ansible.py
index d865f62e7..714827b84 100644
--- a/tripleo_common/actions/ansible.py
+++ b/tripleo_common/actions/ansible.py
@@ -20,7 +20,6 @@ import shutil
 import six
 from six.moves import configparser
 from six.moves import cStringIO as StringIO
-import subprocess
 import sys
 import tempfile
 import time
@@ -28,6 +27,7 @@ import yaml
 
 from mistral_lib import actions
 from oslo_concurrency import processutils
+from oslo_rootwrap import subprocess
 
 from tripleo_common.actions import base
 from tripleo_common import constants