To support Due to a current issue with RHEL 7.5, the following procedure must be run once on any compute hosts where SWe instances which require multi-queue virtio interfaces on OpenStack, the Security-Enhanced Linux (SELinux) service must either be disabled or running in permissive mode. Otherwise, instances may fail to spawn. will be deployed. These steps enable such instances to spawn. The procedure confirms that the failure to spawn is due to the underlying RHEL 7.5 issue and then provides steps to work around this issue. - Spawn an SBC SWe instance which requires multi-queue virtio interface support. The instance will fail to come up.
- Log into the compute host as the root user.
- Change to the directory:
/var/log/audit - Open the
audit.log file and confirm that the following denial is reported by SELinux:
avc: denied { attach_queue } - Use the following commands to update the local policy of SELINUX to allow spawning of instances with multi-queue enabled:
audit2allow -a -M attach_queue semodule -i attach_queue.pp - Retry spawning a multi-queue virtio interface instance. The instance should now come up
- Log into the Compute host and run the Linux
sestatus command to check the current mode of SELinux. - If
current mode is not set to permissive or disabled , change modes by modifying the SELINUX attribute in the /etc/selinux/config file. - Reboot the Compute host after modifying the file.
|