ISSUE TYPE

• Improvement Request

COMPONENT NAME

Upgrade, systemVM template

CLOUDSTACK VERSION

4.19.1.3

CONFIGURATION

Upgrade from 4.18.2.3 to 4.19.1.3

OS / ENVIRONMENT

EL

SUMMARY

On management servers with security hardening implemented for example umask set to 0027 the systemVM template upgrade fails. Script 'setup-sysvm-tmplt' creates directory with 'sudo' but attempts to find the template without sudo. This fails in the secured operating systems.

[cloud@mgmt1 ~]$ umask 0027
[cloud@mgmt1 ~]$ sudo mkdir -p /tmp/tmp10896605671384965986/template/tmpl/1/8
[cloud@mgmt1 ~]$ find /tmp/tmp10896605671384965986/template/tmpl/1/8 -name '*.ova'
find: ‘/tmp/tmp10896605671384965986/template/tmpl/1/8’: Permission denied

STEPS TO REPRODUCE

1. Set umask to 0027 
2. Upgrade cloudstack from 4.18.2.3 to 4.19.1.3

EXPECTED RESULTS

SystemVM templates are upgraded.

ACTUAL RESULTS

SystemVM templates are not upgraded.