Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: OpenStack: Dev

[Continuous-Integration] using strace from a test suite running on Ubuntu

 

 

OpenStack dev RSS feed   Index | Next | Previous | View Threaded


eglynn at redhat

Jun 20, 2012, 3:41 AM

Post #1 of 2 (88 views)
Permalink
[Continuous-Integration] using strace from a test suite running on Ubuntu

Hi Folks,

I wanted to use strace(1) to get to the bottom of the glance service
launch failures that have been plaguing Smokestack and Jenkins in the
past few weeks:

https://review.openstack.org/8722

However I just realized that Ubuntu from Maverick onward no longer allows
ptrace to attach to a user's own processes that are not direct children :(

So I'm wondering whether the CI side-of-the-house would be prepared to
enable this temporarily on the Jenkins slaves, by running:

echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope

prior to the glance tests being kicked off, then reverting straight after.

Or, for a more permanent setting:

sed -e 's/kernel\.yama.\ptrace_scope *= *1/kernel.yama.ptrace_scope = 0/' /etc/sysctl.d/10-ptrace.conf

and then re-cast the image used for the Jenkins slaves.

Thanks,
Eoghan

_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to : openstack [at] lists
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp


corvus at inaugust

Jun 20, 2012, 9:43 AM

Post #2 of 2 (89 views)
Permalink
Re: [Continuous-Integration] using strace from a test suite running on Ubuntu [In reply to]

Eoghan Glynn <eglynn [at] redhat> writes:

> So I'm wondering whether the CI side-of-the-house would be prepared to
> enable this temporarily on the Jenkins slaves, by running:
>
> echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope
>
> prior to the glance tests being kicked off, then reverting straight after.

Jenkins is not granted sudo on the slaves, so...

> Or, for a more permanent setting:
>
> sed -e 's/kernel\.yama.\ptrace_scope *= *1/kernel.yama.ptrace_scope = 0/' /etc/sysctl.d/10-ptrace.conf
>
> and then re-cast the image used for the Jenkins slaves.

Yes, I think it's reasonable to temporarily enable this. The management
of the Jenkins slaves is collaborative, and anyone can pitch in and do
almost any work without needing privileged access. Just clone a copy of
our puppet repo, hack at it, and propose a change. Our goal is that the
infrastructure itself is run just like the rest of the project, and
we're about 98% of the way there. Here's a change to implement your
suggestion:

https://review.openstack.org/#/c/8751/

-Jim

_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to : openstack [at] lists
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp

OpenStack dev RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.