Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-39761

It's not clear why RemoteExecution requires ACL

XMLWordPrintable

    • False
    • Satellite Endeavour Sprint 11
    • sat-endeavour
    • None
    • None
    • None
    • None

      Description of problem:

      Remote execution requires setfacl binary. This is not mentioned in documentation and there's also no dependency on acl package (which provides setfacl binary). Remote Execution job fail when the package is not installed on host.

      Steps to Reproduce:

      1. have a host registered to Satellite
      2. check that acl is not installed on host
      3. create ssh user and effective user 

      command=useradd sshuser -G wheel; echo ssh_user:<sshuser password> | chpasswd; useradd effuser -G wheel; echo effuser:<effuser password> | chpasswd

      4. run job 

       

       

      hammer job-invocation create --job-template="Run Command - Script Default" --inputs="command=touch /home/effuser/ibUwDNZPsu" --search-query="name ~ <client hostname>" --ssh-user="sshuser" --password="<sshuser password>" --effective-user="effuser" --effective-user-password="<effuser password>" 

       

      Actual results:

      The script fails with following message
       

      1:  Error initializing command: RuntimeError - Failed to run command setfacl -m u:effuser:rx /var/tmp/foreman-ssh-cmd-<id>/script on remote machine, exit code: 127
      2:  Exit status: EXCEPTION
      3:  StandardError: Job execution failed

      Expected results:

      Jobs don't fail on a missing binary that is not documented.

      Additional info:

      The acl package in not part of dnf group "Minimal Installation" of RHEL. It's part of "Standard" group, which is only Optional. Try:

      # dnf group info "Minimal Install"
      Environment Group: Minimal Install
       Description: Basic functionality.
       Mandatory Groups:
         Core
       Optional Groups:
         Standard
      # dnf group info "Standard" | grep acl
          acl
      

      Maybe introduced by fix of SAT-31303

      Related robottelo testcase: https://github.com/SatelliteQE/robottelo/blob/9af701d061cef0255a26f6a84a5539e632eeba90/tests/foreman/cli/test_remoteexecution.py#L257

       

              Unassigned Unassigned
              rhn-support-rmynar Radek Mynar
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: