Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable PolicyKit on C7 KVM nodes #1768

Closed
7 tasks done
vholer opened this issue Feb 20, 2018 · 2 comments
Closed
7 tasks done

Disable PolicyKit on C7 KVM nodes #1768

vholer opened this issue Feb 20, 2018 · 2 comments

Comments

@vholer
Copy link
Contributor

vholer commented Feb 20, 2018

Enhancement Request

Description

Disable PolicyKit on C7 KVM node via node package, as this is as this is source of never ending problems:
http://docs.opennebula.org/5.4/intro_release_notes/release_notes/platform_notes.html#disable-policykit-for-libvirt
https://forum.opennebula.org/t/polkitd-traps-general-protection-ip-in-libmozjs-17-0-so/399

Related issue:
#1625

Progress Status

  • Branch created
  • Code committed to development branch
  • Testing - QA
  • Documentation
  • Release notes - resolved issues, compatibility, known issues
  • Code committed to upstream release/hotfix branches
  • Documentation committed to upstream release/hotfix branches
@vholer
Copy link
Contributor Author

vholer commented Feb 20, 2018

Changed a way to manage libvirt configuration files via Augeas on KVM nodes, disabled PolicyKit on CentOS 7. The question is, when do we want to reconfigure the service, as it's not unified now:

  • EL: only on first package install, not on upgrades
  • deb: even on upgrades
    (at least I guess)

The changes is only in packaging:
https://github.com/OpenNebula/packages/pull/14/files

@vholer vholer self-assigned this Feb 20, 2018
@vholer
Copy link
Contributor Author

vholer commented Feb 20, 2018

Fixed EL to reconfigure even on upgrade, same as deb.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant