Openstack 安装中子dhcp代理后，面对中子dhcp代理错误，如何解决？

我在RHEL 8.3中尝试了openstack安装，在成功安装状态显示为“活动”后安装了neutron dhcp代理，但我经常遇到以下错误。我甚至用不同的虚拟机尝试了这个设置，但结果是一样的

状态，显示如下：

[root@kbshostname ~]# systemctl status neutron-dhcp-agent
● neutron-dhcp-agent.service - OpenStack Neutron DHCP Agent
   Loaded: loaded (/usr/lib/systemd/system/neutron-dhcp-agent.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2021-04-05 04:47:14 PDT; 1h 10min ago
 Main PID: 117328 (/usr/bin/python)
    Tasks: 1 (limit: 49506)
   Memory: 109.2M
   CGroup: /system.slice/neutron-dhcp-agent.service
           └─117328 /usr/bin/python3 /usr/bin/neutron-dhcp-agent --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/>

Apr 05 05:57:48 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:48.315 158168 ERROR privsep
Apr 05 05:57:48 kbshostname sudo[158173]:  neutron : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.>
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 CRITICAL privsep [-] Unhandled error: PermissionError: [>
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 ERROR privsep Traceback (most recent call last):
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 ERROR privsep   File "/bin/privsep-helper", line 10, in >
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 ERROR privsep     sys.exit(helper_main())
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 ERROR privsep   File "/usr/lib/python3.6/site-packages/o>
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 ERROR privsep     sock.connect(cfg.CONF.privsep_sock_pat>
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 ERROR privsep PermissionError: [Errno 13] Permission den>
Apr 05 05:57:49 kbshostname neutron-dhcp-agent[117328]: 2021-04-05 05:57:49.935 158176 ERROR privsep
lines 1-19/19 (END)

在日志文件/var/log/中子/dhcp-agent.log中观察到以下内容

'--config-file', '/usr/share/neutron/neutron-dist.conf', '--config-file', '/etc/neutron/neutron.conf', '--config-file', '/etc/neutron/dhcp_agent.ini', '--config-dir', '/etc/neutron/conf.d/neutron-dhcp-agent', '--privsep_context', 'neutron.privileged.default', '--privsep_sock_path', '/tmp/tmp72s6q5nm/privsep.sock']
2021-03-30 19:48:12.214 8976 CRITICAL oslo.privsep.daemon [-] privsep helper command exited non-zero (1)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent [-] Unable to enable dhcp for 25b5a10b-3d49-44d5-8c81-c7ac01201cc3.: oslo_privsep.daemon.FailedToDropPrivileges: privsep helper command exited non-zero (1)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent Traceback (most recent call last):
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/dhcp/agent.py", line 178, in call_driver
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     getattr(driver, action)(**action_kwargs)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/linux/dhcp.py", line 257, in enable
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     common_utils.wait_until_true(self._enable, timeout=300)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/common/utils.py", line 703, in wait_until_true
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     while not predicate():
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/linux/dhcp.py", line 269, in _enable
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     interface_name = self.device_manager.setup(self.network)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/linux/dhcp.py", line 1672, in setup
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     ip_lib.IPWrapper().ensure_namespace(network.namespace)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/linux/ip_lib.py", line 246, in ensure_namespace
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     if not self.netns.exists(name):
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/linux/ip_lib.py", line 727, in exists
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     return network_namespace_exists(name)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/linux/ip_lib.py", line 935, in network_namespace_exists
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     output = list_network_namespaces(**kwargs)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/neutron/agent/linux/ip_lib.py", line 921, in list_network_namespaces
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     return privileged.list_netns(**kwargs)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/oslo_privsep/priv_context.py", line 246, in _wrap
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     self.start()
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/oslo_privsep/priv_context.py", line 258, in start
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     channel = daemon.RootwrapClientChannel(context=self)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent   File "/usr/lib/python3.6/site-packages/oslo_privsep/daemon.py", line 367, in __init__
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent     raise FailedToDropPrivileges(msg)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent oslo_privsep.daemon.FailedToDropPrivileges: privsep helper command exited non-zero (1)
2021-03-30 19:48:12.217 8976 ERROR neutron.agent.dhcp.agent 
2021-03-30 19:48:12.221 8976 INFO neutron.agent.dhcp.agent [-] Finished network 25b5a10b-3d49-44d5-8c81-c7ac01201cc3 dhcp configuration

我试着将“/etc/neutron/rootwrap.conf”文件权限更改为neutron:neutron，正如在openstack论坛中提到的那样，但这没有帮助

---

注意：此设置是使用ansible部署的。

代理日志顶部缺少一点内容。你能在你的问题中添加完整的privsep命令吗？了解完整命令后，可以尝试运行该命令，以查看它出现错误的原因。原因可能非常令人惊讶，正如在问题I中一样。@Berndbusch日志已更新…目前，日志的第一行内容为

'--config file'、'/usr/share/中子/中子-dist.conf'、'--config file'、'/etc/中子/中子.conf'、'--config file'、'/etc/中子/dhcp_agent.ini'、'--config dir'、'/etc/中子/中子dhcp代理'，“--privsep_context”、“中子.特权.默认值”、“privsep_sock_path”、“tmp/tmp72s6q5nm/privsep.sock”]

。至少有一行，也许前几行都不见了。它们将显示完整的

privsep

命令，并帮助您找出失败的原因。2021-04-04 23:41:39.241 2009363信息oslo.privsep.daemon[-]运行privsep helper:['sudo'、'/usr/bin/中子rootwrap'、'/etc/neutron/rootwrap.conf'、'privsep helper'、'-config file'、'/usr/share/neutron/neuton-dist.conf'、'-config file'、'/etc/neutron/dhcp_agent.ini'、'-config dir'、'/etc/neutronon/conf/conf.d/neutronotor-dhcp-agent'、'-privated.default'-sep'-context'、'--privsep_sock_path'，'/tmp/tmpzdsmuim7/privsep.sock']2021-04-04 23:41:45.543 2009363 CRITICAL oslo.privsep.daemon[-]privsep helper命令退出非零（1）@berndbusch I更新了有问题的日志，但似乎必须有人接受它。上一个命令由privsep执行。