解决报错Unable to enable dhcp for xxxx: FailedToDropPrivileges:privsep helper command exited non-zero(1)

Unable to enable dhcp for fcbf2872-08fc-4426-ad50-2e505b1ad8ef.: FailedToDropPrivileges: privsep helper command exited non-zero (1)

查看错误日志：

tail -300f /var/log/neutron/dhcp-agent.log
tail -300f /var/log/neutron/privsep-helper.log

主要错误类似如下：

2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent Traceback (most recent call last):
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/dhcp/agent.py”, line 192, in call_driver
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent getattr(driver, action)(**action_kwargs)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/dhcp.py”, line 235, in enable
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent common_utils.wait_until_true(self._enable, timeout=300)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/common/utils.py”, line 703, in wait_until_true
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent while not predicate():
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/dhcp.py”, line 246, in _enable
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent interface_name = self.device_manager.setup(self.network)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/dhcp.py”, line 1653, in setup
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent ip_lib.IPWrapper().ensure_namespace(network.namespace)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 246, in ensure_namespace
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent if not self.netns.exists(name):
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 727, in exists
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent return network_namespace_exists(name)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 935, in network_namespace_exists
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent output = list_network_namespaces(**kwargs)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 921, in list_network_namespaces
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent return privileged.list_netns(**kwargs)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/oslo_privsep/priv_context.py”, line 244, in _wrap
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent self.start()
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/oslo_privsep/priv_context.py”, line 255, in start
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent channel = daemon.RootwrapClientChannel(context=self)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/oslo_privsep/daemon.py”, line 367, in init
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent raise FailedToDropPrivileges(msg)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent FailedToDropPrivileges: privsep helper command exited non-zero (1)
2023-01-11 10:14:18.849 14922 ERROR neutron.agent.dhcp.agent
2023-01-11 10:14:18.850 14922 INFO neutron.agent.dhcp.agent [-] Finished network 8c24a3ed-1f81-4c16-9c63-be32759298b0 dhcp configuration
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent [-] Unable to enable dhcp for 96218ea1-f011-40a1-b053-e3c72a946e6f.: FailedToDropPrivileges: privsep helper command exited non-zero (1)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent Traceback (most recent call last):
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/dhcp/agent.py”, line 192, in call_driver
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent getattr(driver, action)(**action_kwargs)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/dhcp.py”, line 235, in enable
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent common_utils.wait_until_true(self._enable, timeout=300)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/common/utils.py”, line 703, in wait_until_true
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent while not predicate():
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/dhcp.py”, line 246, in _enable
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent interface_name = self.device_manager.setup(self.network)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/dhcp.py”, line 1653, in setup
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent ip_lib.IPWrapper().ensure_namespace(network.namespace)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 246, in ensure_namespace
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent if not self.netns.exists(name):
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 727, in exists
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent return network_namespace_exists(name)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 935, in network_namespace_exists
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent output = list_network_namespaces(**kwargs)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py”, line 921, in list_network_namespaces
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent return privileged.list_netns(**kwargs)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/oslo_privsep/priv_context.py”, line 244, in _wrap
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent self.start()
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/oslo_privsep/priv_context.py”, line 255, in start
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent channel = daemon.RootwrapClientChannel(context=self)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent File “/usr/lib/python2.7/site-packages/oslo_privsep/daemon.py”, line 367, in init
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent raise FailedToDropPrivileges(msg)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent FailedToDropPrivileges: privsep helper command exited non-zero (1)
2023-01-11 10:14:18.850 14922 ERROR neutron.agent.dhcp.agent

---

主要原因：
一般是python中库的依赖发生了冲突，依赖版本被覆盖了，主要查看文件是否存在或内容是否正确：

cat  /bin/privsep-helper

#!/usr/bin/python2
# PBR Generated from u'console_scripts'

import sys

from oslo_privsep.daemon import helper_main


if __name__ == "__main__":
    sys.exit(helper_main())

解决办法：

yum install -y python2-oslo-privsep-1.33.5-1.el7

# 或者重新安装
rpm -e python2-oslo-privsep-1.33.5-1.el7.noarch --nodeps
rpm -ih python2-oslo-privsep-1.33.5-1.el7.noarch.rpm

#最后重启服务

systemctl restart $(systemctl list-unit-files |grep -i neutron | grep enabled | awk '{print $1}')