From: Sebastian Wagner <sewagner@redhat.com>
Date: Tue, 20 Jul 2021 14:09:57 +0000 (+0200)
Subject: cephadm: haproxy 2.4 defaults to a different container user.
X-Git-Tag: v17.1.0~1330^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=250064bdcbe778b3cc245df843d14dd19cbb8772;p=ceph-ci.git

cephadm: haproxy 2.4 defaults to a different container user.

Another alternative would be to investigage a different setup
leverageing `--sysctl net.ipv4.ip_unprivileged_port_start=0`,
but that would be a larger PR.

Fixes: https://tracker.ceph.com/issues/51355

Signed-off-by: Sebastian Wagner <sewagner@redhat.com>
---

diff --git a/src/cephadm/cephadm b/src/cephadm/cephadm
index 385d7500e33..a1ba2487324 100755
--- a/src/cephadm/cephadm
+++ b/src/cephadm/cephadm
@@ -2488,6 +2488,7 @@ def get_container(ctx: CephadmContext,
         envs.extend(NFSGanesha.get_container_envs())
     elif daemon_type == HAproxy.daemon_type:
         name = '%s.%s' % (daemon_type, daemon_id)
+        container_args.extend(['--user=root'])  # haproxy 2.4 defaults to a different user
     elif daemon_type == Keepalived.daemon_type:
         name = '%s.%s' % (daemon_type, daemon_id)
         envs.extend(Keepalived.get_container_envs())