|
...
|
...
|
@@ -1229,19 +1229,26 @@ sudo chown `whoami` $NOVA_CONF_DIR
|
|
1229
|
1229
|
|
|
1230
|
1230
|
cp -p $NOVA_DIR/etc/nova/policy.json $NOVA_CONF_DIR
|
|
1231
|
1231
|
|
|
1232
|
|
-# If Nova ships the new rootwrap.d config files, deploy them
|
|
|
1232
|
+# If Nova ships the new rootwrap filters files, deploy them
|
|
1233
|
1233
|
# (owned by root) and add a parameter to $NOVA_ROOTWRAP
|
|
1234
|
1234
|
ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP"
|
|
1235
|
|
-if [[ -d $NOVA_DIR/etc/nova/rootwrap.d ]]; then
|
|
|
1235
|
+if [[ -d $NOVA_DIR/etc/nova/rootwrap ]]; then
|
|
1236
|
1236
|
# Wipe any existing rootwrap.d files first
|
|
1237
|
1237
|
if [[ -d $NOVA_CONF_DIR/rootwrap.d ]]; then
|
|
1238
|
1238
|
sudo rm -rf $NOVA_CONF_DIR/rootwrap.d
|
|
1239
|
1239
|
fi
|
|
|
1240
|
+ # Deploy filters to /etc/nova/rootwrap.d
|
|
1240
|
1241
|
sudo mkdir -m 755 $NOVA_CONF_DIR/rootwrap.d
|
|
1241
|
|
- sudo cp $NOVA_DIR/etc/nova/rootwrap.d/* $NOVA_CONF_DIR/rootwrap.d
|
|
|
1242
|
+ sudo cp $NOVA_DIR/etc/nova/rootwrap/*.filters $NOVA_CONF_DIR/rootwrap.d
|
|
1242
|
1243
|
sudo chown -R root:root $NOVA_CONF_DIR/rootwrap.d
|
|
1243
|
1244
|
sudo chmod 644 $NOVA_CONF_DIR/rootwrap.d/*
|
|
1244
|
|
- NOVA_ROOTWRAP="$NOVA_ROOTWRAP $NOVA_CONF_DIR/rootwrap.d"
|
|
|
1245
|
+ # Set up rootwrap.conf, pointing to /etc/nova/rootwrap.d
|
|
|
1246
|
+ sudo cp $NOVA_DIR/etc/nova/rootwrap.conf $NOVA_CONF_DIR/
|
|
|
1247
|
+ sudo sed -e "s:^path=.*$:path=$NOVA_CONF_DIR/rootwrap.d:" -i $NOVA_CONF_DIR/rootwrap.conf
|
|
|
1248
|
+ sudo chown root:root $NOVA_CONF_DIR/rootwrap.conf
|
|
|
1249
|
+ sudo chmod 0644 $NOVA_CONF_DIR/rootwrap.conf
|
|
|
1250
|
+ # Specify rootwrap.conf as first parameter to nova-rootwrap
|
|
|
1251
|
+ NOVA_ROOTWRAP="$NOVA_ROOTWRAP $NOVA_CONF_DIR/rootwrap.conf"
|
|
1245
|
1252
|
ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP *"
|
|
1246
|
1253
|
fi
|
|
1247
|
1254
|
|