lltng enabled by default and qemu apparmor|selinux problems

lltng enabled by default and qemu apparmor|selinux problems

[Alexandre DERUMIER]

Hi,

it seem that since this commit

https://github.com/ceph/ceph/pull/4261/files

lltng is enabled by default.

But this give error with qemu when apparmor|selinux is enabled.

That's why ubuntu && redhat now disable it for their own packages.

https://bugzilla.redhat.com/show_bug.cgi?id=1223319
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1432644

In the ubuntu launchpad, Sage has made a reply

"
Sage Weil (sage-newdream) wrote on 2015-04-02:	#21
FWIW, we are disabling the lttng support in the final hammer release to avoid this issue (until we come up with a better solution)."


It seem that it's still enabled by default in ceph git and ceph.com packages.

Is it still planned to disable by default ?

Re: lltng enabled by default and qemu apparmor|selinux problems

[HEWLETT, Paul (Paul)]

IF I can add my $0.02 - we were unable to use the libradosstriper library in RHEL6 because it uses the same initialisation tags as librados and lttng does not like that. We had no problems with RHEL7 version of ceph because lttng is not enabled. Please do not re-enable lttng in RHEL7 and later branches….

Regards
Paul




On 11/10/2015 18:06, "ceph-devel-owner@vger.kernel.org on behalf of Alexandre DERUMIER" <ceph-devel-owner@vger.kernel.org on behalf of aderumier@odiso.com> wrote:

>Hi,
>
>it seem that since this commit
>
>https://github.com/ceph/ceph/pull/4261/files
>
>lltng is enabled by default.
>
>But this give error with qemu when apparmor|selinux is enabled.
>
>That's why ubuntu && redhat now disable it for their own packages.
>
>https://bugzilla.redhat.com/show_bug.cgi?id=1223319
>https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1432644
>
>In the ubuntu launchpad, Sage has made a reply
>
>"
>Sage Weil (sage-newdream) wrote on 2015-04-02:	#21
>FWIW, we are disabling the lttng support in the final hammer release to avoid this issue (until we come up with a better solution)."
>
>
>It seem that it's still enabled by default in ceph git and ceph.com packages.
>
>Is it still planned to disable by default ?
>
>
>
>--
>To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
>the body of a message to majordomo@vger.kernel.org
>More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: lltng enabled by default and qemu apparmor|selinux problems

[Jason Dillaman]

I have an open PR [1] to dynamically enable LTTng-UST via new config options.  This change will hopefully trickle down to older release and will avoid the SElinux / AppArmor issues in the default case (which led to downstream Ubuntu and Fedora disabling LTTng-UST support).  Anyone that wants to use LTTng-UST (i.e. for generating RBD replay traces) can enable the support and adjust their SElinux / AppArmor rules to accommodate.

[1] https://github.com/ceph/ceph/pull/6135

-- 

Jason Dillaman 


----- Original Message -----
> From: "Paul HEWLETT (Paul)" <paul.hewlett@alcatel-lucent.com>
> To: "Alexandre DERUMIER" <aderumier@odiso.com>, "ceph-devel" <ceph-devel@vger.kernel.org>
> Cc: "Sage Weil" <sweil@redhat.com>
> Sent: Monday, October 12, 2015 4:28:06 AM
> Subject: Re: lltng enabled by default and qemu apparmor|selinux problems
> 
> IF I can add my $0.02 - we were unable to use the libradosstriper library in
> RHEL6 because it uses the same initialisation tags as librados and lttng
> does not like that. We had no problems with RHEL7 version of ceph because
> lttng is not enabled. Please do not re-enable lttng in RHEL7 and later
> branches….
> 
> Regards
> Paul
> 
> 
> 
> 
> On 11/10/2015 18:06, "ceph-devel-owner@vger.kernel.org on behalf of Alexandre
> DERUMIER" <ceph-devel-owner@vger.kernel.org on behalf of
> aderumier@odiso.com> wrote:
> 
> >Hi,
> >
> >it seem that since this commit
> >
> >https://github.com/ceph/ceph/pull/4261/files
> >
> >lltng is enabled by default.
> >
> >But this give error with qemu when apparmor|selinux is enabled.
> >
> >That's why ubuntu && redhat now disable it for their own packages.
> >
> >https://bugzilla.redhat.com/show_bug.cgi?id=1223319
> >https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1432644
> >
> >In the ubuntu launchpad, Sage has made a reply
> >
> >"
> >Sage Weil (sage-newdream) wrote on 2015-04-02:	#21
> >FWIW, we are disabling the lttng support in the final hammer release to
> >avoid this issue (until we come up with a better solution)."
> >
> >
> >It seem that it's still enabled by default in ceph git and ceph.com
> >packages.
> >
> >Is it still planned to disable by default ?
> >
> >
> >
> >--
> >To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
> >the body of a message to majordomo@vger.kernel.org
> >More majordomo info at  http://vger.kernel.org/majordomo-info.html
> N�����r��y���b�X��ǧv�^�)޺{.n�+���z�]z���{ay�ʇڙ�,j��f���h���z��w������j:+v���w�j�m��������zZ+��ݢj"��
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: lltng enabled by default and qemu apparmor|selinux problems

[Alexandre DERUMIER]

>>I have an open PR [1] to dynamically enable LTTng-UST via new config options

Great ,Thanks Jason !



----- Mail original -----
De: "Jason Dillaman" <dillaman@redhat.com>
À: "Paul HEWLETT (Paul)" <paul.hewlett@alcatel-lucent.com>
Cc: "aderumier" <aderumier@odiso.com>, "ceph-devel" <ceph-devel@vger.kernel.org>, "Sage Weil" <sweil@redhat.com>
Envoyé: Lundi 12 Octobre 2015 20:32:43
Objet: Re: lltng enabled by default and qemu apparmor|selinux problems

I have an open PR [1] to dynamically enable LTTng-UST via new config options. This change will hopefully trickle down to older release and will avoid the SElinux / AppArmor issues in the default case (which led to downstream Ubuntu and Fedora disabling LTTng-UST support). Anyone that wants to use LTTng-UST (i.e. for generating RBD replay traces) can enable the support and adjust their SElinux / AppArmor rules to accommodate. 

[1] https://github.com/ceph/ceph/pull/6135 

-- 

Jason Dillaman 


----- Original Message ----- 
> From: "Paul HEWLETT (Paul)" <paul.hewlett@alcatel-lucent.com> 
> To: "Alexandre DERUMIER" <aderumier@odiso.com>, "ceph-devel" <ceph-devel@vger.kernel.org> 
> Cc: "Sage Weil" <sweil@redhat.com> 
> Sent: Monday, October 12, 2015 4:28:06 AM 
> Subject: Re: lltng enabled by default and qemu apparmor|selinux problems 
> 
> IF I can add my $0.02 - we were unable to use the libradosstriper library in 
> RHEL6 because it uses the same initialisation tags as librados and lttng 
> does not like that. We had no problems with RHEL7 version of ceph because 
> lttng is not enabled. Please do not re-enable lttng in RHEL7 and later 
> branches…. 
> 
> Regards 
> Paul 
> 
> 
> 
> 
> On 11/10/2015 18:06, "ceph-devel-owner@vger.kernel.org on behalf of Alexandre 
> DERUMIER" <ceph-devel-owner@vger.kernel.org on behalf of 
> aderumier@odiso.com> wrote: 
> 
> >Hi, 
> > 
> >it seem that since this commit 
> > 
> >https://github.com/ceph/ceph/pull/4261/files 
> > 
> >lltng is enabled by default. 
> > 
> >But this give error with qemu when apparmor|selinux is enabled. 
> > 
> >That's why ubuntu && redhat now disable it for their own packages. 
> > 
> >https://bugzilla.redhat.com/show_bug.cgi?id=1223319 
> >https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1432644 
> > 
> >In the ubuntu launchpad, Sage has made a reply 
> > 
> >" 
> >Sage Weil (sage-newdream) wrote on 2015-04-02: #21 
> >FWIW, we are disabling the lttng support in the final hammer release to 
> >avoid this issue (until we come up with a better solution)." 
> > 
> > 
> >It seem that it's still enabled by default in ceph git and ceph.com 
> >packages. 
> > 
> >Is it still planned to disable by default ? 
> > 
> > 
> > 
> >-- 
> >To unsubscribe from this list: send the line "unsubscribe ceph-devel" in 
> >the body of a message to majordomo@vger.kernel.org 
> >More majordomo info at http://vger.kernel.org/majordomo-info.html 
> N�����r��y���b�X��ǧv�^�)޺{.n�+���z�]z���{ay�ʇڙ�,j��f���h���z��w������j:+v���w�j�m��������zZ+��ݢj"�� 
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html