[openstack-logging] Ubuntu /var/log/auth.log growing too large with useless messages

[jameswthorne]

trafficstars

This seems to only happen on Ubuntu, but /var/log/auth.log on the controller and compute nodes is being written to every two seconds with the following useless message:

sudo:  quantum : TTY=unknown ; PWD=/ ; USER=root ; \
COMMAND=/usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf \
ovs-vsctl --timeout=2 --format=json -- --columns=name,external_ids list Interface

At one customer this one log file was 20+ GB in size.

This looks to be because of the following:

https://ask.openstack.org/en/question/2596/why-is-this-ovs-vsctl-running-so-often/

This is moderately related to #756.

[claco]

Surfing for launchpads:

• https://bugs.launchpad.net/openstack-cisco/+bug/1197428

[brc]

Also it's possible to disable sudo logging for just this command (if really needed) by doing something similar to the following in /etc/sudoers:

Cmnd_Alias QUANTUM_ROOTWRAP = /usr/bin/quantum-rootwrap
Defaults!QUANTUM_ROOTWRAP !syslog

( I haven't done it - just pointing out the possibility. )

[claco]

@jameswthorne Did you implement any specific version of this fix for the impacted customers, or will the simple fix above ignoring that command work?

[jameswthorne]

@claco I did not implement any fixes. I encountered it at one customer and told them I would open a GitHub Issue for it. The simple fix above should work. I don't see why this command needs to be logged every 2 seconds.