Сетевая подсистема NM (native) Очистил все профили Создал новые: Код: [Выделить] # nmcli con add type team con-name team0 ifname team0 team.runner activebackup # nmcli con add type team-slave con-name team0-eno1 ifname eno1 master team0 # nmcli con add type team-slave con-name team0-eno2 ifname eno2 master team0 # nmcli con mod team0 ipv4.method manual ipv4.address 10.10.10.205/24 ipv4.gateway 10.10.10.1 ipv4.dns 10.10.10.1 ipv6.method ignore При попытке поднять team0: Код: [Выделить] июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.5998] device (eno2): state change: prepare -> config (reason 'none', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <warn> [1658234517.6141] device (team0): teamd process 73398 quit unexpectedly; failing activation июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6142] device (team0): state change: prepare -> failed (reason 'teamd-control-failed', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <warn> [1658234517.6146] device (team0): Activation: failed for connection 'team0' июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6149] device (eno1): state change: config -> deactivating (reason 'dependency-failed', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6153] device (eno2): state change: config -> deactivating (reason 'dependency-failed', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6155] manager: NetworkManager state is now DISCONNECTING июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6158] device (team0): state change: failed -> disconnected (reason 'none', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73430]: Unable to change ownership of /var/run/teamd/ to _teamd/_teamd (Operation not permitted) июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73430]: Failed to drop privileges июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6468] device (team0): state change: disconnected -> unmanaged (reason 'user-requested', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6474] device (eno1): state change: deactivating -> disconnected (reason 'dependency-failed', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.6805] device (eno2): state change: deactivating -> disconnected (reason 'dependency-failed', sys-iface-state: 'managed') июл 19 15:41:57 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234517.7045] manager: NetworkManager state is now DISCONNECTED июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4115] policy: auto-activating connection 'team0' (a39af238-8dc6-4b69-91df-86d2dea23a81) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4155] device (team0): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external') июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73500]: Unable to change ownership of /var/run/teamd/ to _teamd/_teamd (Operation not permitted) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73500]: Failed to drop privileges июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4231] device (team0): state change: unavailable -> disconnected (reason 'user-requested', sys-iface-state: 'managed') июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4238] device (team0): Activation: starting connection 'team0' (a39af238-8dc6-4b69-91df-86d2dea23a81) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4240] device (team0): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4243] manager: NetworkManager state is now CONNECTING июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4259] device (team0): Activation: (team) started teamd [pid 73502]... июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4263] etcnet-alt: No connections for device team0 found июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4264] policy: auto-activating connection 'team0-eno1' (21eb9c62-5ff8-4112-baeb-9ae8b8983ef2) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4265] policy: auto-activating connection 'team0-eno2' (acc806ab-a005-4239-a00e-4e66661227f0) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4269] device (eno1): Activation: starting connection 'team0-eno1' (21eb9c62-5ff8-4112-baeb-9ae8b8983ef2) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4271] device (eno2): Activation: starting connection 'team0-eno2' (acc806ab-a005-4239-a00e-4e66661227f0) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4272] device (eno1): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4277] device (eno2): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73209]: <info> [1658234810.4281] device (eno1): state change: prepare -> config (reason 'none', sys-iface-state: 'managed') июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73502]: Unable to change ownership of /var/run/teamd/ to _teamd/_teamd (Operation not permitted) июл 19 15:46:50 mlxvm05-plan.localdomain NetworkManager[73502]: Failed to drop privileges Подобная проблема разбирается здесь https://forums.opensuse.org/showthread.php/540345-network-teaming-problem?p=2937024
При добавлении CAP_CHOWN в CapabilityBoundingSet работает?
Да
Т.к. teamd у нас запускается не от root, надо делать так же как в SUSE. Перевешиваю ошибку на мантейнера.
Да, вариант из openSUSE мне тоже нравится больше, чем добавлять CAP_CHOWN для NM.
libteam-1.31-alt2.g69a7494 -> sisyphus: Tue Aug 09 2022 Mikhail Efremov <sem@altlinux> 1.31-alt2.g69a7494 - Add tmpfiles config for /var/run/teamd/ directory. - teamd: better handle failures to chown(TEAMD_RUN_DIR) during teamd_drop_privileges() (patch from openSUSE) (closes: #43269). - Don't package teamd@.service (closes: #41998). - Upstream git snapshot (closes: #43298).