|
...
|
...
|
@@ -1237,19 +1237,19 @@ cp -p $NOVA_DIR/etc/nova/policy.json $NOVA_CONF_DIR
|
|
1237
|
1237
|
# If Nova ships the new rootwrap filters files, deploy them
|
|
1238
|
1238
|
# (owned by root) and add a parameter to $NOVA_ROOTWRAP
|
|
1239
|
1239
|
ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP"
|
|
1240
|
|
-if [[ -d $NOVA_DIR/etc/nova/rootwrap ]]; then
|
|
|
1240
|
+if [[ -d $NOVA_DIR/etc/nova/rootwrap.d ]]; then
|
|
1241
|
1241
|
# Wipe any existing rootwrap.d files first
|
|
1242
|
1242
|
if [[ -d $NOVA_CONF_DIR/rootwrap.d ]]; then
|
|
1243
|
1243
|
sudo rm -rf $NOVA_CONF_DIR/rootwrap.d
|
|
1244
|
1244
|
fi
|
|
1245
|
1245
|
# Deploy filters to /etc/nova/rootwrap.d
|
|
1246
|
1246
|
sudo mkdir -m 755 $NOVA_CONF_DIR/rootwrap.d
|
|
1247
|
|
- sudo cp $NOVA_DIR/etc/nova/rootwrap/*.filters $NOVA_CONF_DIR/rootwrap.d
|
|
|
1247
|
+ sudo cp $NOVA_DIR/etc/nova/rootwrap.d/*.filters $NOVA_CONF_DIR/rootwrap.d
|
|
1248
|
1248
|
sudo chown -R root:root $NOVA_CONF_DIR/rootwrap.d
|
|
1249
|
1249
|
sudo chmod 644 $NOVA_CONF_DIR/rootwrap.d/*
|
|
1250
|
1250
|
# Set up rootwrap.conf, pointing to /etc/nova/rootwrap.d
|
|
1251
|
1251
|
sudo cp $NOVA_DIR/etc/nova/rootwrap.conf $NOVA_CONF_DIR/
|
|
1252
|
|
- sudo sed -e "s:^path=.*$:path=$NOVA_CONF_DIR/rootwrap.d:" -i $NOVA_CONF_DIR/rootwrap.conf
|
|
|
1252
|
+ sudo sed -e "s:^filters_path=.*$:filters_path=$NOVA_CONF_DIR/rootwrap.d:" -i $NOVA_CONF_DIR/rootwrap.conf
|
|
1253
|
1253
|
sudo chown root:root $NOVA_CONF_DIR/rootwrap.conf
|
|
1254
|
1254
|
sudo chmod 0644 $NOVA_CONF_DIR/rootwrap.conf
|
|
1255
|
1255
|
# Specify rootwrap.conf as first parameter to nova-rootwrap
|