deployment-imagescaler01 has no mwdeploy user
Closed, ResolvedPublic
Actions

Description

Running puppet on deployment-imagescaler01

Error: Could not set home on user[mwdeploy]: Execution of '/usr/sbin/usermod -d /var/lib/scap mwdeploy' returned 6: usermod: user 'mwdeploy' does not exist in /etc/passwd
Error: /Stage[main]/3d2png::Deploy/Scap::Target[3d2png/deploy]/User[mwdeploy]/home: change from /home/mwdeploy to /var/lib/scap failed: Could not set home on user[mwdeploy]: Execution of '/usr/sbin/usermod -d /var/lib/scap mwdeploy' returned 6: usermod: user 'mwdeploy' does not exist in /etc/passwd
Notice: /Package[3d2png/deploy]: Dependency User[mwdeploy] has failures: true
Warning: /Package[3d2png/deploy]: Skipping because of failed dependencies
Notice: /Stage[main]/3d2png::Deploy/Scap::Target[3d2png/deploy]/Exec[chown /srv/deployment/3d2png for mwdeploy]: Dependency User[mwdeploy] has failures: true
Warning: /Stage[main]/3d2png::Deploy/Scap::Target[3d2png/deploy]/Exec[chown /srv/deployment/3d2png for mwdeploy]: Skipping because of failed dependencies
Notice: Finished catalog run in 32.38 seconds

Details

	Project	Branch	Lines +/-	Subject
	operations/puppet	production	+3 -1	Change $deploy_user home directory to /var/lib/${deploy_user}

Customize query in gerrit

Related Objects

Mentioned In: T170444: On beta commons, thumbnailing of 3D files is broken still
T169114: Beta thumbnails are broken

Event Timeline

Reedy created this task.May 21 2017, 3:16 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 21 2017, 3:16 PM

Reedy added a project: Release-Engineering-Team.May 21 2017, 3:16 PM

Reedy updated the task description. (Show Details)

Missing mediawiki::user in some way?

Paladox added a subscriber: Paladox.May 21 2017, 3:31 PM

The mwdeploy user requires (or required at some point) to have the same UID on all the deployment target. To achieve that, we went to add the user in LDAP:

dn: uid=mwdeploy,ou=people,dc=wikimedia,dc=org
	uid: mwdeploy
	objectClass: person
	objectClass: inetorgperson
	objectClass: organizationalPerson
	objectClass: ldappublickey
	objectClass: shadowaccount
	objectClass: posixaccount
	objectClass: top
	loginShell: /bin/bash
	uidNumber: 603
	gidNumber: 603
	sn: mwdeploy
	homeDirectory: /home/mwdeploy
	cn: mwdeploy

The puppet resource User[mwdeploy] defines the home directory as /var/lib/scap, since that mismatch what is in LDAP puppet tries to user mod it to fix it and fail.

The root cause would be whatever change changed the homedir in puppet, and a fix would probably be to update mwdeploy home dir in LDAP ?

hashar added a project: Deployments.May 22 2017, 2:38 PM

greg moved this task from INBOX to Next on the Release-Engineering-Team board.May 30 2017, 10:44 PM

greg edited projects, added Release-Engineering-Team (Next); removed Release-Engineering-Team.

Apparently that comes from the cherry picked patch: Add 3d2png deploy repo to image scalers https://gerrit.wikimedia.org/r/#/c/345377/

Maybe due to scap::target and $manage_user.

MarkTraceur mentioned this in T169114: Beta thumbnails are broken.Jun 28 2017, 4:24 PM

Gilles mentioned this in T170444: On beta commons, thumbnailing of 3D files is broken still.Jul 12 2017, 6:32 PM

@hashar: Nothing wrong with the patch in gerrit, as far as I can see. I don't know where puppet is trying to change the homedir but I will try to track that down. I also don't know how to edit the user in ldap but that might be the right thing to do.

So the user's home directory is set in scap::target. So we either fix it in ldap or remove that line from scap::target (I think the former as scap::target is correct for production)

Change 365891 had a related patch set uploaded (by 20after4; owner: 20after4):
[operations/puppet@production] Change $deploy_user home directory to /var/lib/${deploy_user}

https://gerrit.wikimedia.org/r/365891

gerritbot added a project: Patch-For-Review.Jul 18 2017, 3:19 AM

cherry picked https://gerrit.wikimedia.org/r/#/c/365891/ on beta puppetmaster. This works around the problem and may actually be the more correct solution.

mmodell triaged this task as Medium priority.Jul 18 2017, 3:27 AM

hashar assigned this task to mmodell.Jul 18 2017, 7:28 AM

hashar edited projects, added Release-Engineering-Team (Kanban); removed Release-Engineering-Team (Next).

hashar moved this task from Backlog to In-progress on the Release-Engineering-Team (Kanban) board.