From: Sage Weil <sage@newdream.net>
Date: Wed, 24 Mar 2021 16:06:48 +0000 (-0400)
Subject: cephadm: keepalived needs --cap-add=NET_RAW
X-Git-Tag: v17.1.0~2466^2~1
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=3368844d02f52dddc25db982e586d2c2b303abf4;p=ceph-ci.git

cephadm: keepalived needs --cap-add=NET_RAW

This makes

Mar 24 12:00:32 dael conmon[3969650]: Wed Mar 24 16:00:32 2021: cant open raw socket. errno=1

go away and allows it to enter the MASTER state.

Signed-off-by: Sage Weil <sage@newdream.net>
---

diff --git a/src/cephadm/cephadm b/src/cephadm/cephadm
index dc5c7e0507c..d09dbff1114 100755
--- a/src/cephadm/cephadm
+++ b/src/cephadm/cephadm
@@ -2395,7 +2395,7 @@ def get_container(ctx: CephadmContext,
     elif daemon_type == Keepalived.daemon_type:
         name = '%s.%s' % (daemon_type, daemon_id)
         envs.extend(Keepalived.get_container_envs())
-        container_args.extend(['--cap-add=NET_ADMIN'])
+        container_args.extend(['--cap-add=NET_ADMIN', '--cap-add=NET_RAW'])
     elif daemon_type == CephIscsi.daemon_type:
         entrypoint = CephIscsi.entrypoint
         name = '%s.%s' % (daemon_type, daemon_id)