)]}'
{"id":"openstack%2Fdevstack-gate~42101","triplet_id":"openstack%2Fdevstack-gate~master~I263adbbbccaccf848cb7116f239d2aab366e0093","project":"openstack/devstack-gate","branch":"master","topic":"preserve-sudo","hashtags":[],"change_id":"I263adbbbccaccf848cb7116f239d2aab366e0093","subject":"Using the root user for tempest run","status":"ABANDONED","created":"2013-08-15 10:31:51.000000000","updated":"2013-10-04 05:09:37.000000000","total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"2e77ed27d78aaca9e89be8bc8409bcbaca360768","_number":42101,"virtual_id_number":42101,"owner":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"all":[{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},{"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"value":1,"date":"2013-09-30 14:09:02.000000000","_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"disliked":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"all":[{"value":-1,"date":"2013-09-30 17:57:56.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"value":0,"date":"2013-10-01 04:56:17.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"date":"2013-09-30 17:57:56.000000000","_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},{"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"date":"2013-09-30 16:05:13.000000000","_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"value":0,"permitted_voting_range":{"min":-1,"max":0},"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},{"date":"2013-09-30 16:05:11.000000000","_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},{"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"},{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2013-08-15 17:48:45.000000000","updated_by":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"reviewer":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"state":"REVIEWER"},{"updated":"2013-08-16 21:04:05.000000000","updated_by":{"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},"reviewer":{"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},"state":"REVIEWER"},{"updated":"2013-08-19 22:19:22.000000000","updated_by":{"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"},"reviewer":{"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"},"state":"REVIEWER"},{"updated":"2013-09-30 14:09:02.000000000","updated_by":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"reviewer":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"state":"REVIEWER"},{"updated":"2013-09-30 16:05:11.000000000","updated_by":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"reviewer":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"state":"REVIEWER"},{"updated":"2013-09-30 16:05:13.000000000","updated_by":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"reviewer":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"state":"REVIEWER"},{"updated":"2013-09-30 17:57:56.000000000","updated_by":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"reviewer":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"state":"REVIEWER"}],"messages":[{"id":"6baec523c4b842543658dd515ac35d8f31b379aa","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2013-08-15 11:16:02.000000000","message":"Patch Set 1: Works for me\n\nBuild succeeded.\n\n- http://logs.openstack.org/01/42101/1/check/gate-tempest-devstack-vm-full/69b5630 : SUCCESS in 43m 56s\n- http://logs.openstack.org/01/42101/1/check/gate-tempest-devstack-vm-cells-full/6d839d4 : FAILURE in 17m 10s (non-voting)\n- http://logs.openstack.org/01/42101/1/check/gate-tempest-devstack-vm-testr-full/2174ae0 : FAILURE in 29m 18s (non-voting)\n- http://logs.openstack.org/01/42101/1/check/gate-tempest-devstack-vm-postgres-full/602e2ef : SUCCESS in 42m 04s\n- http://logs.openstack.org/01/42101/1/check/gate-tempest-devstack-vm-neutron/93d92cd : SUCCESS in 22m 02s\n- http://logs.openstack.org/01/42101/1/check/gate-grenade-devstack-vm/ef98a8a : SUCCESS in 24m 42s\n","accounts_in_message":[],"_revision_number":1},{"id":"dd6bd99e82668c1465172828b63046cb8587af17","author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"date":"2013-08-15 14:20:08.000000000","message":"Patch Set 1: I would prefer that you didn\u0027t merge this\n\nRemoving sudo from stack.sh is important in order to test rootwrap.  If we remove it, services will be able to sudo on their own without rootwrap, and we won\u0027t catch it.","accounts_in_message":[],"_revision_number":1},{"id":"09d16c55ab9b518e12f7ec1d1b1c9e14bdc1a2ab","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-15 14:39:41.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"68de217d73ebfd5c92712e1299d71123862c070d","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2013-08-15 15:27:42.000000000","message":"Patch Set 2: Doesn\u0027t seem to work\n\nBuild failed.  For information on how to proceed, see https://wiki.openstack.org/wiki/GerritJenkinsGithub#Test_Failures\n\n- http://logs.openstack.org/01/42101/2/check/gate-tempest-devstack-vm-full/7eb12b2 : FAILURE in 25m 01s\n- http://logs.openstack.org/01/42101/2/check/gate-tempest-devstack-vm-cells-full/6f2cd13 : FAILURE in 16m 28s (non-voting)\n- http://logs.openstack.org/01/42101/2/check/gate-tempest-devstack-vm-testr-full/c99370e : FAILURE in 24m 51s (non-voting)\n- http://logs.openstack.org/01/42101/2/check/gate-tempest-devstack-vm-postgres-full/dc0c6bb : FAILURE in 24m 42s\n- http://logs.openstack.org/01/42101/2/check/gate-tempest-devstack-vm-neutron/47a2e37 : FAILURE in 16m 37s\n- http://logs.openstack.org/01/42101/2/check/gate-grenade-devstack-vm/37a2454 : FAILURE in 21m 13s\n","accounts_in_message":[],"_revision_number":2},{"id":"f58583c9e06316c1efae4ca6d9867c871ee8ca34","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-15 16:12:57.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"fb557b99f7efe80e518da217c44d657430b510e1","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2013-08-15 17:01:49.000000000","message":"Patch Set 3: Doesn\u0027t seem to work\n\nBuild failed.  For information on how to proceed, see https://wiki.openstack.org/wiki/GerritJenkinsGithub#Test_Failures\n\n- http://logs.openstack.org/01/42101/3/check/gate-tempest-devstack-vm-full/3f35470 : FAILURE in 48m 49s\n- http://logs.openstack.org/01/42101/3/check/gate-tempest-devstack-vm-cells-full/b0714e3 : FAILURE in 13m 41s (non-voting)\n- http://logs.openstack.org/01/42101/3/check/gate-tempest-devstack-vm-testr-full/521ac73 : FAILURE in 26m 31s (non-voting)\n- http://logs.openstack.org/01/42101/3/check/gate-tempest-devstack-vm-postgres-full/c8d3f53 : FAILURE in 39m 30s\n- http://logs.openstack.org/01/42101/3/check/gate-tempest-devstack-vm-neutron/8a3ab84 : SUCCESS in 18m 29s\n- http://logs.openstack.org/01/42101/3/check/gate-grenade-devstack-vm/fbe63ab : SUCCESS in 23m 30s\n","accounts_in_message":[],"_revision_number":3},{"id":"70355e0c7557fae4ecde9532e7a3e003cf58c2c4","author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"date":"2013-08-15 17:48:45.000000000","message":"Patch Set 3: I would prefer that you didn\u0027t merge this\n\n(1 inline comment)\n\nTypically for things that log in weird places we let them log as they normally would then copy the log files into the log dir that is copied. See https://github.com/openstack-infra/devstack-gate/blob/master/devstack-vm-gate-wrap.sh#L252-L264\n\nDoes that approach make this change easier? tempest is already logging things and we are copying those logs.","accounts_in_message":[],"_revision_number":3},{"id":"07baaf6ce84b39d3b9c1a9e4e78cde0f86d17102","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-15 18:50:45.000000000","message":"Patch Set 3:\n\nIt usue the regular logger, but tempest needs to be able to issue sudo commands, in order to gather the info.","accounts_in_message":[],"_revision_number":3},{"id":"cc303a7234dc2c1cc1bc5d7e2cc8e8f820738d27","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-16 11:30:05.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"ae376b692c0ef501b28f9af9b3a3a8846694f36f","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2013-08-16 11:49:55.000000000","message":"Patch Set 4: Doesn\u0027t seem to work\n\nBuild failed.  For information on how to proceed, see https://wiki.openstack.org/wiki/GerritJenkinsGithub#Test_Failures\n\n- http://logs.openstack.org/01/42101/4/check/gate-tempest-devstack-vm-full/4b4c56a : FAILURE in 10m 34s\n- http://logs.openstack.org/01/42101/4/check/gate-tempest-devstack-vm-cells-full/2db9e69 : FAILURE in 13m 34s (non-voting)\n- http://logs.openstack.org/01/42101/4/check/gate-tempest-devstack-vm-testr-full/152cdc9 : FAILURE in 10m 57s (non-voting)\n- http://logs.openstack.org/01/42101/4/check/gate-tempest-devstack-vm-postgres-full/81f664b : FAILURE in 11m 02s\n- http://logs.openstack.org/01/42101/4/check/gate-tempest-devstack-vm-neutron/4f906de : FAILURE in 12m 33s\n- http://logs.openstack.org/01/42101/4/check/gate-grenade-devstack-vm/d52cb49 : FAILURE in 16m 57s\n","accounts_in_message":[],"_revision_number":4},{"id":"448004e656da950906be122ef2a7f1f4640347c2","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-16 12:50:14.000000000","message":"Uploaded patch set 5.","accounts_in_message":[],"_revision_number":5},{"id":"80de417aab8daf36acd357ad7d472b3138141309","author":{"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},"date":"2013-08-16 13:07:41.000000000","message":"Patch Set 5: Looks good to me (core reviewer)\n\nI think running just tempest with sudo permission (as opposed to all of devstack) is fine if it helps us get better diagnosis.","accounts_in_message":[],"_revision_number":5},{"id":"318afee9d6211b7232e5bccadfaa25438407115a","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2013-08-16 14:41:06.000000000","message":"Patch Set 5: Doesn\u0027t seem to work\n\nBuild failed.  For information on how to proceed, see https://wiki.openstack.org/wiki/GerritJenkinsGithub#Test_Failures\n\n- http://logs.openstack.org/01/42101/5/check/gate-tempest-devstack-vm-full/db5b72f : FAILURE in 10m 52s\n- http://logs.openstack.org/01/42101/5/check/gate-tempest-devstack-vm-cells-full/6b75402 : FAILURE in 13m 33s (non-voting)\n- http://logs.openstack.org/01/42101/5/check/gate-tempest-devstack-vm-testr-full/2c1e047 : FAILURE in 12m 53s (non-voting)\n- http://logs.openstack.org/01/42101/5/check/gate-tempest-devstack-vm-postgres-full/1b8e4f5 : FAILURE in 10m 49s\n- http://logs.openstack.org/01/42101/5/check/gate-tempest-devstack-vm-neutron/b32e61e : FAILURE in 14m 58s\n- http://logs.openstack.org/01/42101/5/check/gate-grenade-devstack-vm/264a58c : FAILURE in 17m 15s\n","accounts_in_message":[],"_revision_number":5},{"id":"4973acea7831cd027a9210dddbee5a4ff113eaee","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-16 14:56:18.000000000","message":"Uploaded patch set 6.","accounts_in_message":[],"_revision_number":6},{"id":"d2626d8de4b72a2a8c62b5404898df662b4d851c","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2013-08-16 17:23:36.000000000","message":"Patch Set 6: Works for me\n\nBuild succeeded.\n\n- http://logs.openstack.org/01/42101/6/check/gate-tempest-devstack-vm-full/7cce970 : SUCCESS in 51m 29s\n- http://logs.openstack.org/01/42101/6/check/gate-tempest-devstack-vm-cells-full/a1c2169 : FAILURE in 15m 34s (non-voting)\n- http://logs.openstack.org/01/42101/6/check/gate-tempest-devstack-vm-testr-full/cc99c8c : SUCCESS in 28m 02s (non-voting)\n- http://logs.openstack.org/01/42101/6/check/gate-tempest-devstack-vm-postgres-full/c043647 : SUCCESS in 43m 08s\n- http://logs.openstack.org/01/42101/6/check/gate-tempest-devstack-vm-neutron/cc34806 : SUCCESS in 22m 18s\n- http://logs.openstack.org/01/42101/6/check/gate-grenade-devstack-vm/1f3a821 : SUCCESS in 23m 37s\n","accounts_in_message":[],"_revision_number":6},{"id":"98c60d35d173da3ec8a8d591a060222cb414c9f5","author":{"_account_id":2,"name":"Monty Taylor","email":"mordred@inaugust.com","username":"mordred"},"date":"2013-08-16 21:04:05.000000000","message":"Patch Set 6: Looks good to me (core reviewer)\n\n","accounts_in_message":[],"_revision_number":6},{"id":"6d5129c8811b3bacb9193d51ed808e7f519a7ea7","author":{"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"},"date":"2013-08-19 22:19:22.000000000","message":"Patch Set 6: I would prefer that you didn\u0027t merge this\n\nDoesn\u0027t the stack user also have sudo access? So can\u0027t tempest just do sudo itself as needed?","accounts_in_message":[],"_revision_number":6},{"id":"22000ab7d4cdabc5bc1badf249e585b1325933d0","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-22 05:36:34.000000000","message":"Patch Set 6: (1 inline comment)\n\n@lifeless:\n(See the patchset 1.)\n\nThose lines L232 in theory removes the sudo permission from the stack user.\n\nBut cinder-rootwrap, neutron-rootwrap, nova-rootwrap may provide enough permission, if they are installed, and they are using the same stack user.","accounts_in_message":[],"_revision_number":6},{"id":"fa9b256853bb214b85224a487ff7eed6dfc24d24","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-08-25 08:48:38.000000000","message":"Patch Set 6: Abandoned\n\nProbably the other services preservers the sudo permission for tempest.","accounts_in_message":[],"_revision_number":6},{"id":"e8aa3757bfb2a1c78538a34b44a53feccf39707b","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-09-30 11:10:34.000000000","message":"Patch Set 6: Restored\n\nIs it related ?\nhttps://bugs.launchpad.net/tempest/+bug/1232416","accounts_in_message":[],"_revision_number":6},{"id":"79e81beef571e0e75deb234c6437cfc843b919d9","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-09-30 13:30:05.000000000","message":"Uploaded patch set 7.","accounts_in_message":[],"_revision_number":7},{"id":"f203eba9b5c06b7a512a2b9f9b798c6ccb8c5bb7","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2013-09-30 14:09:02.000000000","message":"Patch Set 7: Works for me\n\nBuild succeeded.\n\n- check-tempest-devstack-vm-full http://logs.openstack.org/01/42101/7/check/check-tempest-devstack-vm-full/3a2e863 : SUCCESS in 36m 34s\n- check-tempest-devstack-vm-postgres-full http://logs.openstack.org/01/42101/7/check/check-tempest-devstack-vm-postgres-full/44b61a9 : SUCCESS in 38m 51s\n- check-tempest-devstack-vm-neutron http://logs.openstack.org/01/42101/7/check/check-tempest-devstack-vm-neutron/8a67f3b : SUCCESS in 20m 14s\n- gate-tempest-devstack-vm-large-ops http://logs.openstack.org/01/42101/7/check/gate-tempest-devstack-vm-large-ops/3ad20f4 : SUCCESS in 13m 09s\n- check-grenade-devstack-vm http://logs.openstack.org/01/42101/7/check/check-grenade-devstack-vm/1a04122 : SUCCESS in 37m 47s\n- check-swift-devstack-vm-functional http://logs.openstack.org/01/42101/7/check/check-swift-devstack-vm-functional/7cdbff6 : SUCCESS in 14m 29s\n","accounts_in_message":[],"_revision_number":7},{"id":"b695461ba355284e7fa81710841597485f91208f","author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"date":"2013-09-30 17:57:56.000000000","message":"Patch Set 7: I would prefer that you didn\u0027t merge this\n\nchatted with sdague a bit in irc, and we\u0027re leaning toward a different approach\n\nsdague is going to work on a patch to make a \u0027tempest\u0027 user, and then just give that user the sudo commands needed","accounts_in_message":[],"_revision_number":7},{"id":"b6126efa8ec5c34a5a47c5d323b12b08b8a9b324","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-10-01 04:56:17.000000000","message":"Patch Set 7:\n\nPlease see the previews attempts, it will not be easy.\nA lot of file and directory owned by the \u0027stack\u0027 user, and and we have permissions issues even if you run tempest as \u0027jenkins\u0027.\n\nWe could us the \u0027jenkins\u0027 user without a new user after several chown/chmod/gpasswd.\n\nA tempest_roowrap shell script with no-op filter seems possible as well.\n\nstep 1. make the sudo command configurable in tempest.\nstep 2. tempest_rootwrap script\nstep 3. add sudo permissions to the stack user to the \u0027tempest_rootwrap\u0027\nstep 4. configure..\n\nWhat is your opinion ?","accounts_in_message":[],"_revision_number":7},{"id":"f8b08d3a57bf62995817f74e8eec62dc140c9102","author":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"date":"2013-10-04 05:09:37.000000000","message":"Patch Set 7: Abandoned","accounts_in_message":[],"_revision_number":7}],"current_revision_number":7,"current_revision":"13feb1d43ee6a2cd5af7d37c8b45541b725b9d2a","revisions":{"31d55f056ed2645d4e8588a0e0d8dc5335ee054a":{"kind":"REWORK","_number":1,"created":"2013-08-15 10:31:51.000000000","uploader":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"ref":"refs/changes/01/42101/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack-gate","ref":"refs/changes/01/42101/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/1"}}},"commit":{"parents":[{"commit":"46f69b77d91072ef7fe1732ba9a95d5ab9478e96","subject":"Use Jenkins credentials store if specified","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/46f69b77d91072ef7fe1732ba9a95d5ab9478e96"}]}],"author":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"committer":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"subject":"Preserve sudo permissions of the stack user","message":"Preserve sudo permissions of the stack user\n\nPreserve the sudo permissions of the stack user in order to provide,\nadvanced debug info on test case failure.\n\nChange-Id: I263adbbbccaccf848cb7116f239d2aab366e0093\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/31d55f056ed2645d4e8588a0e0d8dc5335ee054a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/31d55f056ed2645d4e8588a0e0d8dc5335ee054a"}]},"branch":"refs/heads/master"},"6082a1d871c1ac0407b50127b9dff8329b87fb22":{"kind":"REWORK","_number":2,"created":"2013-08-15 14:39:41.000000000","uploader":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"ref":"refs/changes/01/42101/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack-gate","ref":"refs/changes/01/42101/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/2"}}},"commit":{"parents":[{"commit":"46f69b77d91072ef7fe1732ba9a95d5ab9478e96","subject":"Use Jenkins credentials store if specified","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/46f69b77d91072ef7fe1732ba9a95d5ab9478e96"}]}],"author":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"committer":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 14:35:50.000000000","tz":120},"subject":"Using the jenkis user for tempest run","message":"Using the jenkis user for tempest run\n\nThe tempest debug info on test case failure feature will require,\nsudo permissions. So tempest will run in the \u0027jenkins\u0027 user name,\ninstead of \u0027stack\u0027.\n\nChange-Id: I263adbbbccaccf848cb7116f239d2aab366e0093\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/6082a1d871c1ac0407b50127b9dff8329b87fb22"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/6082a1d871c1ac0407b50127b9dff8329b87fb22"}]},"branch":"refs/heads/master"},"778bfbe2214e67fe83b818677c6f7ea816ddd5a9":{"kind":"REWORK","_number":3,"created":"2013-08-15 16:12:57.000000000","uploader":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"ref":"refs/changes/01/42101/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack-gate","ref":"refs/changes/01/42101/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/3"}}},"commit":{"parents":[{"commit":"46f69b77d91072ef7fe1732ba9a95d5ab9478e96","subject":"Use Jenkins credentials store if specified","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/46f69b77d91072ef7fe1732ba9a95d5ab9478e96"}]}],"author":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"committer":{"name":"afazekas","email":"afazekas@redhat.com","date":"2013-08-15 16:12:42.000000000","tz":120},"subject":"Using the jenkis user for tempest run","message":"Using the jenkis user for tempest run\n\nThe tempest debug info on test case failure feature will require,\nsudo permissions. So tempest will run in the \u0027jenkins\u0027 user name,\ninstead of \u0027stack\u0027.\n\nChange-Id: I263adbbbccaccf848cb7116f239d2aab366e0093\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/778bfbe2214e67fe83b818677c6f7ea816ddd5a9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/778bfbe2214e67fe83b818677c6f7ea816ddd5a9"}]},"branch":"refs/heads/master"},"18ce5ffcfe23ca7ce2bcfd9312d7670a56b57c98":{"kind":"REWORK","_number":4,"created":"2013-08-16 11:30:05.000000000","uploader":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"ref":"refs/changes/01/42101/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack-gate","ref":"refs/changes/01/42101/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/4"}}},"commit":{"parents":[{"commit":"46f69b77d91072ef7fe1732ba9a95d5ab9478e96","subject":"Use Jenkins credentials store if specified","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/46f69b77d91072ef7fe1732ba9a95d5ab9478e96"}]}],"author":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"committer":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-16 11:27:47.000000000","tz":120},"subject":"Using the jenkins user for tempest run","message":"Using the jenkins user for tempest run\n\nThe tempest debug info on test case failure feature will require,\nsudo permissions. So tempest will run in the \u0027jenkins\u0027 user name,\ninstead of \u0027stack\u0027.\n\nTempest is going to run commands as root in order to gather more,\ninformation about tricky failures. The results will be logged to the\nregular logging targets.\n\nChange-Id: I263adbbbccaccf848cb7116f239d2aab366e0093\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/18ce5ffcfe23ca7ce2bcfd9312d7670a56b57c98"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/18ce5ffcfe23ca7ce2bcfd9312d7670a56b57c98"}]},"branch":"refs/heads/master"},"5414cf3ac02e7529f8daae20dd7b4ed825321b9b":{"kind":"REWORK","_number":5,"created":"2013-08-16 12:50:14.000000000","uploader":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"ref":"refs/changes/01/42101/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack-gate","ref":"refs/changes/01/42101/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/5"}}},"commit":{"parents":[{"commit":"46f69b77d91072ef7fe1732ba9a95d5ab9478e96","subject":"Use Jenkins credentials store if specified","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/46f69b77d91072ef7fe1732ba9a95d5ab9478e96"}]}],"author":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"committer":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-16 12:49:57.000000000","tz":120},"subject":"Using the jenkins user for tempest run","message":"Using the jenkins user for tempest run\n\nThe tempest debug info on test case failure feature will require,\nsudo permissions. So tempest will run in the \u0027jenkins\u0027 user name,\ninstead of \u0027stack\u0027.\n\nTempest is going to run commands as root in order to gather more,\ninformation about tricky failures. The results will be logged to the\nregular logging targets.\n\nChange-Id: I263adbbbccaccf848cb7116f239d2aab366e0093\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/5414cf3ac02e7529f8daae20dd7b4ed825321b9b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/5414cf3ac02e7529f8daae20dd7b4ed825321b9b"}]},"branch":"refs/heads/master"},"0df1a34e6407a8a39672cabeb78516aa185d28cb":{"kind":"REWORK","_number":6,"created":"2013-08-16 14:56:18.000000000","uploader":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"ref":"refs/changes/01/42101/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack-gate","ref":"refs/changes/01/42101/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/6"}}},"commit":{"parents":[{"commit":"46f69b77d91072ef7fe1732ba9a95d5ab9478e96","subject":"Use Jenkins credentials store if specified","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/46f69b77d91072ef7fe1732ba9a95d5ab9478e96"}]}],"author":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"committer":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-16 14:55:19.000000000","tz":120},"subject":"Using the root user for tempest run","message":"Using the root user for tempest run\n\nThe tempest debug info on test case failure feature will require,\nsudo permissions. So tempest will run in the \u0027root\u0027 user name,\ninstead of \u0027stack\u0027.\n\nTempest is going to run commands as root in order to gather more,\ninformation about tricky failures. The results will be logged to the\nregular logging targets.\n\nChange-Id: I263adbbbccaccf848cb7116f239d2aab366e0093\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/0df1a34e6407a8a39672cabeb78516aa185d28cb"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/0df1a34e6407a8a39672cabeb78516aa185d28cb"}]},"branch":"refs/heads/master"},"13feb1d43ee6a2cd5af7d37c8b45541b725b9d2a":{"kind":"REWORK","_number":7,"created":"2013-09-30 13:30:05.000000000","uploader":{"_account_id":5803,"name":"Attila Fazekas","email":"afazekas@redhat.com","username":"afazekas"},"ref":"refs/changes/01/42101/7","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack-gate","ref":"refs/changes/01/42101/7","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack-gate refs/changes/01/42101/7"}}},"commit":{"parents":[{"commit":"8770c65bada7b9e7e29e874716e86b4eb0b11a89","subject":"Merge \"Add pypi-mirror to the list of pre-cloned repos\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/8770c65bada7b9e7e29e874716e86b4eb0b11a89"}]}],"author":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-08-15 10:26:32.000000000","tz":120},"committer":{"name":"Attila Fazekas","email":"afazekas@redhat.com","date":"2013-09-30 13:23:19.000000000","tz":120},"subject":"Using the root user for tempest run","message":"Using the root user for tempest run\n\nThe tempest debug info on test case failure feature will require,\nsudo permissions. So tempest will run in the \u0027root\u0027 user name,\ninstead of \u0027stack\u0027.\n\nTempest is going to run commands as root in order to gather more,\ninformation about tricky failures. The results will be logged to the\nregular logging targets.\n\ndevstack-vm-gate.sh removes the ALL command sudo permission from the\nstack user in order to avoid introducing root-wrap related bugs.\nOnly the ``foo``-rootwrap commands remains allowed to the ``stack`` user.\n\nRunning tempest as root looks strange, but it does not expected to cause\nissues, otherwise a much more complex logic required.\n\nChange-Id: I263adbbbccaccf848cb7116f239d2aab366e0093\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/13feb1d43ee6a2cd5af7d37c8b45541b725b9d2a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack-gate/commit/13feb1d43ee6a2cd5af7d37c8b45541b725b9d2a"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}