From: Sage Weil <sage@redhat.com>
Date: Thu, 7 Nov 2019 23:14:52 +0000 (-0600)
Subject: ceph-daemon: make mon container privileged
X-Git-Tag: v15.1.0~986^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=ba6ab8ced7e19a4fad32729820cde3de93c5650c;p=ceph.git

ceph-daemon: make mon container privileged

libudev needs to be privileged in order to query the underlying hardware
devices, as reported by the 'ceph device ...' command set, and to scrape
smart metrics, etc.

Signed-off-by: Sage Weil <sage@redhat.com>
---

diff --git a/src/ceph-daemon b/src/ceph-daemon
index 407a5dc216f0..822c0caba278 100755
--- a/src/ceph-daemon
+++ b/src/ceph-daemon
@@ -425,7 +425,8 @@ def get_container(fsid, daemon_type, daemon_id, privileged=False,
                   podman_args=None):
     if not podman_args:
         podman_args = []
-    if daemon_type == 'osd' or privileged:
+    if daemon_type in ['mon', 'osd'] or privileged:
+        # mon and osd need privileged in order for libudev to query devices
         podman_args += ['--privileged']
     if daemon_type == 'rgw':
         entrypoint = '/usr/bin/radosgw'