aws / aws/aws-parallelcluster

(3.9.0-current) Cluster creation fails on Rocky 9.4

Open
#6,442 0 comments 0 reactions 0 assignees View on GitHub
Known Issue Mitigated
Dominant language
Python
Stars
888
Forks
314
Avg merge
1d 10h
Merged PRs (30d)
43

Description

## Issue description

When using a custom AMI based on Rocky 9.4, the cluster creation will fail because the Munge service fails to start with an error message like the one below:

```
munged: Error: Keyfile is insecure: group-writable permissions without sticky bit set on "/etc"
```

This is caused by a [known issue in Rocky 9.4](https://forums.rockylinux.org/t/changed-permissions-on-etc-in-rl9-4-genericcloud-image/14449) vanilla AMI where the permissions of the folder `/etc` have been changed from `0755` to `0777`.

## Affected versions (OSes, schedulers)

All versions of ParallelCluster 3.9.x and later using Rocky 9.4 are impacted.

## Mitigation

You can find a detailed explanation and the mitigation of the problem [here](https://github.com/aws/aws-parallelcluster/wiki/(3.9.0%E2%80%90current)-Cluster-creation-fails-on-Rocky-9.4)

Contributor guide

Open the contributing guide

Research direction

No repository file or test is identified in the issue. Start by locating the cluster-creation path that starts Munge, compare its handling of /etc permissions with the linked Rocky 9.4 mitigation, and define done as successful Rocky 9.4 cluster creation without the Munge keyfile error.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, linux
Domain
cloud, infrastructure
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.