Merge "Adjust support for upcoming rootwrap changes"
This commit is contained in:
commit
8ef47d12c2
15
stack.sh
15
stack.sh
@ -1229,19 +1229,26 @@ sudo chown `whoami` $NOVA_CONF_DIR
|
|||||||
|
|
||||||
cp -p $NOVA_DIR/etc/nova/policy.json $NOVA_CONF_DIR
|
cp -p $NOVA_DIR/etc/nova/policy.json $NOVA_CONF_DIR
|
||||||
|
|
||||||
# If Nova ships the new rootwrap.d config files, deploy them
|
# If Nova ships the new rootwrap filters files, deploy them
|
||||||
# (owned by root) and add a parameter to $NOVA_ROOTWRAP
|
# (owned by root) and add a parameter to $NOVA_ROOTWRAP
|
||||||
ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP"
|
ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP"
|
||||||
if [[ -d $NOVA_DIR/etc/nova/rootwrap.d ]]; then
|
if [[ -d $NOVA_DIR/etc/nova/rootwrap ]]; then
|
||||||
# Wipe any existing rootwrap.d files first
|
# Wipe any existing rootwrap.d files first
|
||||||
if [[ -d $NOVA_CONF_DIR/rootwrap.d ]]; then
|
if [[ -d $NOVA_CONF_DIR/rootwrap.d ]]; then
|
||||||
sudo rm -rf $NOVA_CONF_DIR/rootwrap.d
|
sudo rm -rf $NOVA_CONF_DIR/rootwrap.d
|
||||||
fi
|
fi
|
||||||
|
# Deploy filters to /etc/nova/rootwrap.d
|
||||||
sudo mkdir -m 755 $NOVA_CONF_DIR/rootwrap.d
|
sudo mkdir -m 755 $NOVA_CONF_DIR/rootwrap.d
|
||||||
sudo cp $NOVA_DIR/etc/nova/rootwrap.d/* $NOVA_CONF_DIR/rootwrap.d
|
sudo cp $NOVA_DIR/etc/nova/rootwrap/*.filters $NOVA_CONF_DIR/rootwrap.d
|
||||||
sudo chown -R root:root $NOVA_CONF_DIR/rootwrap.d
|
sudo chown -R root:root $NOVA_CONF_DIR/rootwrap.d
|
||||||
sudo chmod 644 $NOVA_CONF_DIR/rootwrap.d/*
|
sudo chmod 644 $NOVA_CONF_DIR/rootwrap.d/*
|
||||||
NOVA_ROOTWRAP="$NOVA_ROOTWRAP $NOVA_CONF_DIR/rootwrap.d"
|
# Set up rootwrap.conf, pointing to /etc/nova/rootwrap.d
|
||||||
|
sudo cp $NOVA_DIR/etc/nova/rootwrap.conf $NOVA_CONF_DIR/
|
||||||
|
sudo sed -e "s:^path=.*$:path=$NOVA_CONF_DIR/rootwrap.d:" -i $NOVA_CONF_DIR/rootwrap.conf
|
||||||
|
sudo chown root:root $NOVA_CONF_DIR/rootwrap.conf
|
||||||
|
sudo chmod 0644 $NOVA_CONF_DIR/rootwrap.conf
|
||||||
|
# Specify rootwrap.conf as first parameter to nova-rootwrap
|
||||||
|
NOVA_ROOTWRAP="$NOVA_ROOTWRAP $NOVA_CONF_DIR/rootwrap.conf"
|
||||||
ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP *"
|
ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP *"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user