)]}'
{"id":"openstack%2Fdevstack~84482","triplet_id":"openstack%2Fdevstack~master~If718d74e559c6050cbc7786dc6da74c4847b6328","project":"openstack/devstack","branch":"master","hashtags":[],"change_id":"If718d74e559c6050cbc7786dc6da74c4847b6328","subject":"Make stack.sh failing if SELinux is enforcing","status":"ABANDONED","created":"2014-04-01 15:53:19.000000000","updated":"2014-04-10 06:03:27.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"7719f0147a805460020caabee836d2502a43c6c9","_number":84482,"virtual_id_number":84482,"owner":{"_account_id":9107,"name":"Victor Stinner","email":"vstinner@redhat.com","username":"haypo"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"all":[{"_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},{"value":1,"date":"2014-04-01 17:04:05.000000000","_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"disliked":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"all":[{"value":0,"date":"2014-04-01 16:50:30.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":-1,"date":"2014-04-02 12:49:32.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"value":-1,"date":"2014-04-02 00:41:27.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},{"value":0,"date":"2014-04-02 13:29:06.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"date":"2014-04-01 16:50:30.000000000","_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"date":"2014-04-02 12:49:32.000000000","_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"value":0,"permitted_voting_range":{"min":-1,"max":2},"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2014-04-01 16:50:30.000000000","updated_by":{"_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},"reviewer":{"_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},"state":"REVIEWER"},{"updated":"2014-04-01 17:04:05.000000000","updated_by":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"reviewer":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"state":"REVIEWER"},{"updated":"2014-04-02 00:41:27.000000000","updated_by":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"reviewer":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"state":"REVIEWER"},{"updated":"2014-04-02 12:49:32.000000000","updated_by":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"reviewer":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"state":"REVIEWER"},{"updated":"2014-04-02 13:29:06.000000000","updated_by":{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"},"reviewer":{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"},"state":"REVIEWER"}],"messages":[{"id":"aa985627d81ab5ae17da59d7de4c6c7db4ff6fc6","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-04-01 15:53:20.000000000","message":"Patch Set 1:\n\nStarting check jobs.\nhttp://status.openstack.org/zuul/","accounts_in_message":[],"_revision_number":1},{"id":"5d7a0db331cb1e48b34ee00674af06bfa359d410","author":{"_account_id":9009,"name":"Red Hat CI","email":"redhatci@redhat.com","username":"redhatci","tags":["SERVICE_USER"]},"date":"2014-04-01 16:00:23.000000000","message":"Patch Set 1:\n\nredhatci results for change 84482\n\nLogs at http://people.redhat.com/~iwienand/84482/\n\n\nend","accounts_in_message":[],"_revision_number":1},{"id":"6b50848848de4664e1edd833fb995d917f075194","author":{"_account_id":9009,"name":"Red Hat CI","email":"redhatci@redhat.com","username":"redhatci","tags":["SERVICE_USER"]},"date":"2014-04-01 16:50:29.000000000","message":"Patch Set 1:\n\nredhatci results for change 84482\n\nLogs at http://people.redhat.com/~iwienand/84482/\n\n- Patch set 1 | OSLAB RHEL 6.5 : Failed\n- Patch set 1 | OSLAB Fedora 19 : Failed\n- Patch set 1 | OSLAB Fedora 20 : Failed\n- Patch set 1 | OSLAB CentOS 6.5 : Failed\n- Patch set 1 | OSLAB CentOS 6.4 : Failed\n- Patch set 1 | OSLAB RHEL 7 : Failed\n- Patch set 1 | OSLAB RHEL 6.4 : Failed\n\nend","accounts_in_message":[],"_revision_number":1},{"id":"77e7c48ac12c65608b0d371c654f3e1f585e01d7","author":{"_account_id":866,"name":"Chmouel Boudjnah","email":"chmouel@chmouel.com","username":"chmouel"},"date":"2014-04-01 16:50:30.000000000","message":"Patch Set 1:\n\nwe may want to have the RedHat guys to first jump in this review to see what they think about it and if really devstack is not compatible with selinux\u003denforce","accounts_in_message":[],"_revision_number":1},{"id":"2e3cbcd9c3df00be2927f06160a82b32b18bb311","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-04-01 17:04:05.000000000","message":"Patch Set 1: Works for me\n\nBuild succeeded.\n\n- check-grenade-dsvm http://logs.openstack.org/82/84482/1/check/check-grenade-dsvm/5c0fa18 : SUCCESS in 35m 14s\n- check-tempest-dsvm-full http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-full/c12decb : SUCCESS in 1h 06m 26s\n- check-tempest-dsvm-neutron http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-neutron/8eccc40 : SUCCESS in 57m 46s\n- check-tempest-dsvm-neutron-heat-slow http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-neutron-heat-slow/e2896b3 : SUCCESS in 23m 50s\n- gate-devstack-bash8 http://logs.openstack.org/82/84482/1/check/gate-devstack-bash8/438ca88 : SUCCESS in 31s\n- check-devstack-dsvm-cells http://logs.openstack.org/82/84482/1/check/check-devstack-dsvm-cells/082a9c1 : SUCCESS in 10m 57s\n- check-tempest-dsvm-postgres-full http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-postgres-full/e88d79c : SUCCESS in 51m 54s\n- check-tempest-dsvm-neutron-full http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-neutron-full/f91090d : SUCCESS in 1h 08m 47s (non-voting)\n- gate-tempest-dsvm-large-ops http://logs.openstack.org/82/84482/1/check/gate-tempest-dsvm-large-ops/4941e31 : SUCCESS in 14m 46s\n- gate-tempest-dsvm-neutron-large-ops http://logs.openstack.org/82/84482/1/check/gate-tempest-dsvm-neutron-large-ops/53ad4ff : SUCCESS in 15m 02s\n- check-tempest-dsvm-cells-full http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-cells-full/7d35ee8 : FAILURE in 28m 33s (non-voting)\n- check-grenade-dsvm-partial-ncpu http://logs.openstack.org/82/84482/1/check/check-grenade-dsvm-partial-ncpu/9606107 : SUCCESS in 45m 51s\n- check-swift-dsvm-functional http://logs.openstack.org/82/84482/1/check/check-swift-dsvm-functional/34143bd : SUCCESS in 13m 35s\n- check-tempest-dsvm-ironic-nv http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-ironic-nv/253d476 : SUCCESS in 38m 24s (non-voting)\n- check-tempest-dsvm-ironic-postgres-nv http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-ironic-postgres-nv/3d61bd9 : SUCCESS in 40m 15s (non-voting)\n- check-tempest-dsvm-sahara-full-nv http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-sahara-full-nv/7320f04 : SUCCESS in 52m 28s (non-voting)\n- check-tempest-dsvm-sahara-postgres-nv http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-sahara-postgres-nv/3e96e7a : SUCCESS in 31m 47s (non-voting)\n- check-tempest-dsvm-sahara-neutron-nv http://logs.openstack.org/82/84482/1/check/check-tempest-dsvm-sahara-neutron-nv/8c875e9 : SUCCESS in 55m 34s (non-voting)\n\n","accounts_in_message":[],"_revision_number":1},{"id":"99a15f67516623942bb21ed96c545509d20a9088","author":{"_account_id":9009,"name":"Red Hat CI","email":"redhatci@redhat.com","username":"redhatci","tags":["SERVICE_USER"]},"date":"2014-04-02 00:36:18.000000000","message":"Patch Set 1:\n\nredhatci results for change 84482\n\nLogs at http://people.redhat.com/~iwienand/84482/\n\n- Patch set 1 | OSLAB RHEL 6.5 : Failed\n  - http://people.redhat.com/~iwienand/84482/20140401160111.OSLAB_RHEL65.log.gz\n- Patch set 1 | OSLAB Fedora 19 : Failed\n  - http://people.redhat.com/~iwienand/84482/20140401160111.OSLAB_FEDORA19.log.gz\n- Patch set 1 | OSLAB Fedora 20 : Failed\n  - http://people.redhat.com/~iwienand/84482/20140401160111.OSLAB_FEDORA20.log.gz\n- Patch set 1 | OSLAB CentOS 6.5 : Failed\n  - http://people.redhat.com/~iwienand/84482/20140401160111.OSLAB_CENTOS65.log.gz\n- Patch set 1 | OSLAB CentOS 6.4 : Failed\n  - http://people.redhat.com/~iwienand/84482/20140401161119.OSLAB_CENTOS64.log.gz\n- Patch set 1 | OSLAB RHEL 7 : Failed\n  - http://people.redhat.com/~iwienand/84482/20140401163829.OSLAB_RHEL7.log.gz\n- Patch set 1 | OSLAB RHEL 6.4 : Failed\n  - http://people.redhat.com/~iwienand/84482/20140401164233.OSLAB_RHEL64.log.gz\n\nend","accounts_in_message":[],"_revision_number":1},{"id":"5c6068f9f908ce007232395319a14c7e50d9caed","author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"date":"2014-04-02 00:41:27.000000000","message":"Patch Set 1: I would prefer that you didn\u0027t merge this\n\n(sorry about the multiple comments from redhatci, fixed that)\n\nAt a minimum, this needs to be gated so it only affects people using rabbitmq and should probably have distro checks; see fixup_stuff.sh where we disable selinux for rhel6","accounts_in_message":[],"_revision_number":1},{"id":"fbef1a71b723733541186a14b5a83fa1fa72c7ef","author":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"date":"2014-04-02 12:49:32.000000000","message":"Patch Set 1: I would prefer that you didn\u0027t merge this\n\nhonestly, I think this is enough of an edge condition that it\u0027s somewhat out of scope. If anything, it should be off in the fixup scripts like @ian said.","accounts_in_message":[],"_revision_number":1},{"id":"8777b468805203e48d448bb368fec896c5e80e2b","author":{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"},"date":"2014-04-02 13:29:06.000000000","message":"Patch Set 1:\n\nI\u0027ve also had problems with SELinux and ports and actually tried to fix them for my case: https://review.openstack.org/#/c/81770/","accounts_in_message":[],"_revision_number":1},{"id":"454a84612bb8c18c561caddf3b7a80c53c348c0e","author":{"_account_id":9,"name":"LaunchpadSync","username":"launchpadsync"},"date":"2014-04-10 06:03:27.000000000","message":"Patch Set 1:\n\ncode review expired after 1 week of no activity after a negative review, it can be restored using the `Restore Change` button under the Patch Set on the web interface","accounts_in_message":[],"_revision_number":1},{"id":"15bc6f0002b0ae573ed937b85404fbfa16df35fd","author":{"_account_id":9,"name":"LaunchpadSync","username":"launchpadsync"},"date":"2014-04-10 06:03:27.000000000","message":"Patch Set 1: Abandoned\n\ncode review expired after 1 week of no activity after a negative review, it can be restored using the `Restore Change` button under the Patch Set on the web interface","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"61d2225ac41c80e5387218a879b2be7bcc3b403a","revisions":{"61d2225ac41c80e5387218a879b2be7bcc3b403a":{"kind":"REWORK","_number":1,"created":"2014-04-01 15:53:19.000000000","uploader":{"_account_id":9107,"name":"Victor Stinner","email":"vstinner@redhat.com","username":"haypo"},"ref":"refs/changes/82/84482/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack","ref":"refs/changes/82/84482/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack refs/changes/82/84482/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack refs/changes/82/84482/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack refs/changes/82/84482/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack refs/changes/82/84482/1"}}},"commit":{"parents":[{"commit":"1bb9ef63c535b274a4b8c905f54335bbb1d779c3","subject":"Update compute driver name for Ironic","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/1bb9ef63c535b274a4b8c905f54335bbb1d779c3"}]}],"author":{"name":"Victor Stinner","email":"victor.stinner@enovance.com","date":"2014-04-01 15:46:06.000000000","tz":120},"committer":{"name":"Victor Stinner","email":"victor.stinner@enovance.com","date":"2014-04-01 15:53:15.000000000","tz":120},"subject":"Make stack.sh failing if SELinux is enforcing","message":"Make stack.sh failing if SELinux is enforcing\n\nOn Fedora 20, starting rabbitmq-server.service fills\n/var/log/audit/audit.log and then fails because the SELinux policy of\nRabbitMQ doesn\u0027t allow to listen on an ephemeral port.\n\nUntil the bug is fixed in Fedora, I propose to make the stack.sh failing\nto warn the user of the bug with a message explaining the bug and how to\nworkaround it. In my opinion, it\u0027s more convinient than adding a note\nsomewhere in DevStack website or DevStack documentation.\n\nExample of audit logs:\n\ntype\u003dSYSCALL msg\u003daudit(1396364497.544:136306): arch\u003dc000003e syscall\u003d49\nsuccess\u003dno exit\u003d-13 a0\u003d10 a1\u003d7f2badca1980 a2\u003d1c a3\u003d1 items\u003d0 ppid\u003d1\npid\u003d32383 auid\u003d4294967295 uid\u003d998 gid\u003d997 euid\u003d998 suid\u003d998 fsuid\u003d998\negid\u003d997 sgid\u003d997 fsgid\u003d997 ses\u003d4294967295 tty\u003d(none) comm\u003d\"beam.smp\"\nexe\u003d\"/usr/lib64/erlang/erts-5.10.4/bin/beam.smp\"\nsubj\u003dsystem_u:system_r:rabbitmq_beam_t:s0 key\u003d(null)\n\ntype\u003dAVC msg\u003daudit(1396364497.544:136307): avc:  denied  { name_bind }\nfor  pid\u003d32383 comm\u003d\"beam.smp\" src\u003d30839\nscontext\u003dsystem_u:system_r:rabbitmq_beam_t:s0\ntcontext\u003dsystem_u:object_r:unreserved_port_t:s0 tclass\u003dtcp_socket\n\nChange-Id: If718d74e559c6050cbc7786dc6da74c4847b6328\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/61d2225ac41c80e5387218a879b2be7bcc3b403a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/61d2225ac41c80e5387218a879b2be7bcc3b403a"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}