)]}'
{"id":"openstack%2Fpuppet-openstack-integration~748334","triplet_id":"openstack%2Fpuppet-openstack-integration~master~I76e5dd68866ff34145e34ac9b6d1d7752e303aa3","project":"openstack/puppet-openstack-integration","branch":"master","topic":"centos8-beaker","hashtags":[],"change_id":"I76e5dd68866ff34145e34ac9b6d1d7752e303aa3","subject":"Make selinux permissive during tests","status":"ABANDONED","created":"2020-08-27 00:58:37.000000000","updated":"2020-08-28 09:44:47.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"c440431c2d7e010d5df27c761470730979cf9a91","_number":748334,"virtual_id_number":748334,"owner":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},{"tag":"autogenerated:zuul:check","value":1,"date":"2020-08-27 02:28:13.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"all":[{"value":2,"date":"2020-08-27 16:22:22.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":2,"date":"2020-08-27 08:14:41.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"rejected":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"all":[{"value":1,"date":"2020-08-27 16:22:22.000000000","_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":-1,"date":"2020-08-27 15:22:23.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-08-27 02:28:13.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-08-27 08:14:41.000000000","updated_by":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"reviewer":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"state":"REVIEWER"},{"updated":"2020-08-27 16:22:22.000000000","updated_by":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"reviewer":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"state":"REVIEWER"}],"messages":[{"id":"5579f835e908d79d51daf4c85b7fa801fc9a8204","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 00:58:37.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"e5dbf846e27caecec9019397268e299d474da66e","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 01:00:18.000000000","message":"Uploaded patch set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"7a990f5b625b9219090a7781c6671f212c32ef02","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 01:05:08.000000000","message":"Uploaded patch set 3: Commit message was updated.","accounts_in_message":[],"_revision_number":3},{"id":"8525b82b411649eda425a8d845194f913c444d08","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-27 02:28:13.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- puppet-openstack-lint-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/47d8b249f3dc4b6caeb2b1aed76c3c29 : SUCCESS in 3m 18s\n- puppet-openstack-syntax-5-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/131237daaaf044c4b7d4b9e15ea2695a : SUCCESS in 3m 02s\n- puppet-openstack-syntax-6-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/f074c7de212b4c768e05bd533aa852e7 : SUCCESS in 4m 24s\n- puppet-openstack-integration-6-scenario001-tempest-ubuntu-bionic-mimic https://zuul.opendev.org/t/openstack/build/87a3b9a737ef47ea85df126cb5245dbc : SUCCESS in 35m 14s (non-voting)\n- puppet-openstack-integration-6-scenario002-tempest-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/a2b267abeda4490c99a69e97f1028e3c : FAILURE in 51m 06s (non-voting)\n- puppet-openstack-integration-6-scenario003-tempest-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/1eefcf9d0dae461f8999651d0e42487f : SUCCESS in 43m 51s (non-voting)\n- puppet-openstack-integration-6-scenario004-tempest-ubuntu-bionic-mimic https://zuul.opendev.org/t/openstack/build/34da729f80f44593b76330d0fbdca020 : SUCCESS in 32m 12s (non-voting)\n- puppet-openstack-integration-6-scenario001-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/47c8308429cb4e719f14ec0b1db428ca : SUCCESS in 1h 15m 38s\n- puppet-openstack-integration-6-scenario002-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/b1559270b40944b6bfa38717d2ac42fd : SUCCESS in 1h 10m 06s\n- puppet-openstack-integration-6-scenario003-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/4e255b48302146c283342eec72f5921b : SUCCESS in 1h 20m 14s\n- puppet-openstack-integration-6-scenario004-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/f090a2263ebc4461ae0146e2ba5777a1 : SUCCESS in 59m 23s","accounts_in_message":[],"_revision_number":3},{"id":"7a5c784e6de315cf32f1f18a607a288c65e5f58a","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 05:05:30.000000000","message":"Topic changed from selinux to centos8-beaker","accounts_in_message":[],"_revision_number":3},{"id":"278b4344b6a2ce75c074493f6e614df08d3e25b4","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2020-08-27 08:14:41.000000000","message":"Patch Set 3: Code-Review+2\n\n@Takashi could you link me any related logs to the issue with the OVS agent? we enforce SELinux in our environment on CentOS 8 and when we moved our environment over I proposed multiple fixes to openstack-selinux to solve SELinux issues.","accounts_in_message":[],"_revision_number":3},{"id":"cf051bc1d734a4eaab0ed49c99ddb581aa108603","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 10:19:39.000000000","message":"Patch Set 3:\n\n@Tobias\n\nYou can refer this build result to see ovs restarting.\nhttps://zuul.opendev.org/t/openstack/build/e339f90583f0417b97478de87f3bc96c\n\nActually I reproduced the same issue during implementing centos8 beaker job, and you can check some more debug logs in the following build result.\nhttps://zuul.opendev.org/t/openstack/build/97606c1ac69f4886b6d75eeec32703bd\n\nAccording to ovs-agent log it seems that privsep-helper command failed because of permission error with its log file This permission error is resolved when we make selinux permissive, so I think something is wrong or missing in selinux policy, but I\u0027ve not yet identify actual issue yet.\n\nPermissionError: [Errno 13] Permission denied: \u0027/var/log/neutron/privsep-helper.log\u0027\n\nhttps://52ddd485b35c3e0b7549-b269fbdd4d1c2e0716393820d107d130.ssl.cf5.rackcdn.com/745352/1/check/puppet-openstack-libraries-puppet-beaker-rspec-centos-8/97606c1/logs/var-log/neutron/openvswitch-agent.txt","accounts_in_message":[],"_revision_number":3},{"id":"b3cc80ea66842af2f436a2221b53e20a6ebb9654","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 10:24:29.000000000","message":"Patch Set 3:\n\none nit correction\n\n s/ovs restarting./ovs-agent restarting/\n\nI\u0027m curious why this is not captured during functional tests.[1] Maybe we need some fix with the logic to detect selinux alerts ?\n [1] https://github.com/openstack/puppet-openstack-integration/blob/master/run_tests.sh#L234","accounts_in_message":[],"_revision_number":3},{"id":"45c954b910f5edae21dd844203432ea43d0ddf0a","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2020-08-27 14:26:06.000000000","message":"Patch Set 3:\n\nWe introduced a boolean [1] that can be set to true to make sure dac_override is allowed for neutron, while it\u0027s bad, it\u0027s still better than SELinux being disabled.\n\n[1] https://github.com/redhat-openstack/openstack-selinux/blob/master/os-neutron.te#L78","accounts_in_message":[],"_revision_number":3},{"id":"853b7bbc49cb856101cc4de8945ab892c2747f82","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 15:22:23.000000000","message":"Patch Set 3: Workflow-1","accounts_in_message":[],"_revision_number":3},{"id":"2a7298dc70adaa749ec785355b1e30f8cb618670","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-27 15:23:04.000000000","message":"Patch Set 3:\n\nSubmitted another patch to set that boolean.\n\nhttps://review.opendev.org/#/c/748463/\n\nLet\u0027s see whether it does a trick.","accounts_in_message":[],"_revision_number":3},{"id":"62156b6c9cc68e29b90fc568fee44685fe8ea05b","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2020-08-27 16:22:22.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":3},{"id":"c440431c2d7e010d5df27c761470730979cf9a91","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-08-28 09:44:47.000000000","message":"Abandoned\n\nreplaced by https://review.opendev.org/#/c/748463/","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"2fd58354927140bc97d2e09c3698ec9cfb584ccb","revisions":{"7c3a9a1c8ca4a1b71998f65c7d96c73fef7778d4":{"kind":"REWORK","_number":1,"created":"2020-08-27 00:58:37.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/34/748334/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-openstack-integration","ref":"refs/changes/34/748334/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/1"}}},"commit":{"parents":[{"commit":"9ebb56bdac3719c573fedaeb01ac7598e1e1eef8","subject":"Make CentOS8 beaker job voting","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/9ebb56bdac3719c573fedaeb01ac7598e1e1eef8"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2020-08-27 00:55:54.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2020-08-27 00:55:54.000000000","tz":540},"subject":"Disable selinux during tests","message":"Disable selinux during tests\n\n... because currently there is an issue with selinux policies which\nprevents ovs-agent from starting correctly.\nNote that we already disabled selinux in functional tests, and this\npatch is mostly for beaker tests.\n\nChange-Id: I76e5dd68866ff34145e34ac9b6d1d7752e303aa3\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/7c3a9a1c8ca4a1b71998f65c7d96c73fef7778d4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/7c3a9a1c8ca4a1b71998f65c7d96c73fef7778d4"}]},"branch":"refs/heads/master"},"26952e077ec9ddb0c3e38977c6a7d0e8b3ff11d0":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2020-08-27 01:00:18.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/34/748334/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-openstack-integration","ref":"refs/changes/34/748334/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/2"}}},"commit":{"parents":[{"commit":"9ebb56bdac3719c573fedaeb01ac7598e1e1eef8","subject":"Make CentOS8 beaker job voting","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/9ebb56bdac3719c573fedaeb01ac7598e1e1eef8"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2020-08-27 00:55:54.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2020-08-27 00:59:48.000000000","tz":540},"subject":"Disable selinux during tests","message":"Disable selinux during tests\n\n... because currently there is an selinux issue in CentOS8 which\nprevents ovs-agent from starting correctly.\nNote that we already disabled selinux in functional tests, and this\npatch is mostly for beaker tests.\n\nChange-Id: I76e5dd68866ff34145e34ac9b6d1d7752e303aa3\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/26952e077ec9ddb0c3e38977c6a7d0e8b3ff11d0"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/26952e077ec9ddb0c3e38977c6a7d0e8b3ff11d0"}]},"branch":"refs/heads/master"},"2fd58354927140bc97d2e09c3698ec9cfb584ccb":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2020-08-27 01:05:08.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/34/748334/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-openstack-integration","ref":"refs/changes/34/748334/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-openstack-integration refs/changes/34/748334/3"}}},"commit":{"parents":[{"commit":"9ebb56bdac3719c573fedaeb01ac7598e1e1eef8","subject":"Make CentOS8 beaker job voting","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/9ebb56bdac3719c573fedaeb01ac7598e1e1eef8"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2020-08-27 00:55:54.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2020-08-27 01:04:47.000000000","tz":540},"subject":"Make selinux permissive during tests","message":"Make selinux permissive during tests\n\n... because currently there is an selinux issue in CentOS8 which\nprevents ovs-agent from starting correctly.\nNote that we already disabled selinux in functional tests, and this\npatch is mostly for beaker tests.\n\nChange-Id: I76e5dd68866ff34145e34ac9b6d1d7752e303aa3\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/2fd58354927140bc97d2e09c3698ec9cfb584ccb"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-openstack-integration/commit/2fd58354927140bc97d2e09c3698ec9cfb584ccb"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}