Add confd user to masterd group

The server.pem file is 0440 (materd_uid, masterd_gid) and cannot be
accessed by confd.

This patch contains a workaround for 2.8.0~beta1 (adding conf to the
masterd group in the user setup tool, and remembering the users to
actually execute that tool while upgrading).

This partially fixes Issue 292.

Signed-off-by: Michele Tartara <mtartara@google.com>
Reviewed-by: Klaus Aehlig <aehlig@google.com>

diff --git a/UPGRADE b/UPGRADE
index a769b92..0e26892 100644 (file)
--- a/UPGRADE
+++ b/UPGRADE
@@ -55,6 +55,11 @@ To run commands on all nodes, the `distributed shell (dsh)
 
     $ /usr/lib/ganeti/ensure-dirs --full-run
 
+#. Create the (missing) required users and make users part of the required
+groups on all nodes::
+
+    $ /usr/lib/ganeti/tools/users-setup
+
 #. Restart daemons on all nodes::
 
     $ /etc/init.d/ganeti restart

diff --git a/tools/users-setup.in b/tools/users-setup.in
index c6ee5a4..f63765b 100644 (file)
--- a/tools/users-setup.in
+++ b/tools/users-setup.in
@@ -29,3 +29,4 @@ done
 
 adduser @GNTMASTERUSER@ @GNTCONFDGROUP@
 adduser @GNTMONDUSER@ @GNTMASTERDGROUP@
+adduser @GNTCONFDUSER@ @GNTMASTERDGROUP@