ceph-daemon: make mon container privileged

libudev needs to be privileged in order to query the underlying hardware
devices, as reported by the 'ceph device ...' command set, and to scrape
smart metrics, etc.

Signed-off-by: Sage Weil <sage@redhat.com>

diff --git a/src/ceph-daemon b/src/ceph-daemon
index 407a5dc216f0704497ef8b31bf44a5b4aa47d86f..822c0caba2782470e9f780c209177c169e9975dc 100755 (executable)
--- a/src/ceph-daemon
+++ b/src/ceph-daemon
@@ -425,7 +425,8 @@ def get_container(fsid, daemon_type, daemon_id, privileged=False,
                   podman_args=None):
     if not podman_args:
         podman_args = []
-    if daemon_type == 'osd' or privileged:
+    if daemon_type in ['mon', 'osd'] or privileged:
+        # mon and osd need privileged in order for libudev to query devices
         podman_args += ['--privileged']
     if daemon_type == 'rgw':
         entrypoint = '/usr/bin/radosgw'