search

CSCfi / ansible-role-pxe_bootstrap

Ansible role that install and configures TFTP. It also places iPXE/PXE boot conf files
MIT License
24 stars 4 forks source link

Reinstallation doesn't work #3

Closed jabl closed 8 years ago

jabl commented 8 years ago

Reinstalling a node (with fgci-ansible:/tools/reinstall_node.yml) doesn't work. Adding some debugging output to boot.py shows:


# curl http://10.10.254.20/cgi-bin/boot.py
[Errno 13] Permission denied: '/var/www/provision/reinstall/pe67'
apache
#!ipxe
exit

(so what I added was to print the exception message, and the user the cgi script was running as). Unix permissions are alright, however I thing I noticed:


[root@install2 ~]# sestatus 
SELinux status:                 enabled

which I guess is what prevents the cgi script from deleting the reinstall file. Is this intentional, or should we disable selinux, or should it be fixed in some other way?

martbhell commented 8 years ago

The things we assume before ansible is in the kickstart: https://github.com/CSC-IT-Center-for-Science/fgci-ansible/blob/master/roles/provision_vm/templates/kickstart.cfg

Yes, selinux should be disabled. We could however quite easily add a role to configure selinux with ansible too. Just to be on the safe side. Another would be to set the appropriate selinux booleans or policies.

jabl commented 8 years ago

Ah, alright then. Must be due to some leftover of our unusual way of provisioning the install node. Closing.