openstack/ironic
Code Issues Proposed changes

Using devstack configure_rootwrap to configure ironic rootwrap

Browse Source 
Change-Id: Ib3e258f2e0f9a0415562c9b16dbb2bcea31510f1
This commit is contained in:
zhurong 2017-09-07 15:09:45 +08:00
parent e9318c7574
commit 84b6fdd81b
1 changed files with 1 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
devstack/lib/ironic
View File

@ -1107,19 +1107,7 @@ function configure_ironic_conductor {
configure_adapter_for $conf_section configure_adapter_for $conf_section
done done
cp $IRONIC_DIR/etc/ironic/rootwrap.conf $IRONIC_ROOTWRAP_CONF configure_rootwrap ironic
cp -r $IRONIC_DIR/etc/ironic/rootwrap.d $IRONIC_CONF_DIR
local ironic_rootwrap
ironic_rootwrap=$(get_rootwrap_location ironic)
local rootwrap_isudoer_cmd="$ironic_rootwrap $IRONIC_CONF_DIR/rootwrap.conf *"
# Set up the rootwrap sudoers for ironic
local tempfile
tempfile=`mktemp`
echo "$STACK_USER ALL=(root) NOPASSWD: $rootwrap_isudoer_cmd" >$tempfile
chmod 0440 $tempfile
sudo chown root:root $tempfile
sudo mv $tempfile /etc/sudoers.d/ironic-rootwrap
# set up drivers / hardware types # set up drivers / hardware types
iniset $IRONIC_CONF_FILE DEFAULT enabled_drivers $IRONIC_ENABLED_DRIVERS iniset $IRONIC_CONF_FILE DEFAULT enabled_drivers $IRONIC_ENABLED_DRIVERS