From: Sage Weil <sage@newdream.net>
Date: Wed, 24 Mar 2021 16:06:48 +0000 (-0400)
Subject: cephadm: keepalived needs --cap-add=NET_RAW
X-Git-Tag: v16.2.0~5^2~6
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=8de7c130c001c3d8cabd644b05d5ca7340835e46;p=ceph.git

cephadm: keepalived needs --cap-add=NET_RAW

This makes

Mar 24 12:00:32 dael conmon[3969650]: Wed Mar 24 16:00:32 2021: cant open raw socket. errno=1

go away and allows it to enter the MASTER state.

Signed-off-by: Sage Weil <sage@newdream.net>
(cherry picked from commit 3368844d02f52dddc25db982e586d2c2b303abf4)
---

diff --git a/src/cephadm/cephadm b/src/cephadm/cephadm
index 0d34724b1bc..6ae22410d6e 100755
--- a/src/cephadm/cephadm
+++ b/src/cephadm/cephadm
@@ -2402,7 +2402,7 @@ def get_container(ctx: CephadmContext,
     elif daemon_type == Keepalived.daemon_type:
         name = '%s.%s' % (daemon_type, daemon_id)
         envs.extend(Keepalived.get_container_envs())
-        container_args.extend(['--cap-add=NET_ADMIN'])
+        container_args.extend(['--cap-add=NET_ADMIN', '--cap-add=NET_RAW'])
     elif daemon_type == CephIscsi.daemon_type:
         entrypoint = CephIscsi.entrypoint
         name = '%s.%s' % (daemon_type, daemon_id)