[one-users] root user creates checkpoint directory on cluster node instead of oneadmin

Fri Apr 8 02:39:02 PDT 2011

Dear all

sorry for spamming the list, but I want to report the solution for my 
issues as well, just to close this thread....

Apparently, I had misconfigured the 
/etc/apparmor.d/abstractions/libvirt-qemu...
First, there was a typo in the line I had added.

Second, I had configured a specific VM_DIR, and you have to add an 
additional exception to the apparmor.d file!
In my case, this was VM_DIR=/work/onimages, and I had to add an 
additional line:
---> owner /srv/cloud/one/var/** rw,
--> owner /work/onimages/** rw,

Of course, restart the apparmor daemon again.

I do not know whether this is a generic "issue", maybe it should be 
added to the documentation on the OpenNebula website? Now, there is only 
a warning for the /srv/cloud/one/var directory...

Best regards,
Pieter

Op 8/04/2011 10:52, Pieter Simoens schreef:
> Dear all,
>
> following up on my e-mail below: according to 
> http://dev.opennebula.org/issues/131, this should be solved in my 
> version (I am running 2.0).
>
> It seems it has to do with the way you connect to the virsh socket 
> (qemu:///system ?)
>
> So, I think the question is: where is the variable $LIBVIRT_URI 
> specified? At least, that is the variable that is used in the 
> /var/remotes/vmm/kvm/save script?
>
> Best regards,
> Pieter
>
> Op 8/04/2011 10:18, Pieter Simoens schreef:
>> Dear all,
>>
>> when I issue a command "onevm stop VM_ID'', the Virtual Machine stays 
>> in the save state. On my front-end node, the log-files (both oned.log 
>> and vm.log) show no specific error.
>>
>> However, when I have a look at the virsh log-file on my cluster node 
>> (/var/log/libvirt/qemu/one-22.log), I see the error: "sh: cannot 
>> create /work/onimages/VM_ID/images/checkpoint: Permission denied".
>>
>> Strangely enough, the permissions of /work/onimages/VM_ID/images 
>> directory are set correctly (or so I think...): oneadmin is the 
>> owner, and cloud is the group. Also the uid and gid are identical to 
>> the oneadmin user on my frontend. But the images/checkpoint directory 
>> seems to be owned by the root user, belonging to the root group.
>>
>> Does anybody have an idea how this can be possible? Did I configure 
>> my cluster node in the wrong way?
>>
>> Thank you,
>> Pieter
>>
>> Op 5/04/2011 14:49, Carlos Martín Sánchez schreef:
>>> Hi Pieter, please find my comments inline:
>>>
>>>
>>> On 5 April 2011 13:42, Pieter Simoens <pieter.simoens at intec.ugent.be 
>>> <mailto:pieter.simoens at intec.ugent.be>> wrote:
>>>
>>>     Dear all,
>>>
>>>     I am running OpenNebula 2.0. I am able to successfully deploy a
>>>     VM on a cluster node. The image is (currently) transferred over
>>>     SSH. The VM boots successfully, and I am able to log-in.
>>>
>>>     When I do "onevm shutdown VM_ID", the VM is correctly shut down.
>>>     But it does no longer appear in the output of "onevm list all".
>>>
>>>
>>> That's the normal behaviour, VMs in DONE state are not listed. 
>>> However, you can still see the extended information using 'onevm 
>>> show <id>', because they are stored in the DB for accounting purposes.
>>>
>>>     However, as far as I can recall from my previous experiments, I
>>>     thought that the VM image would we transferred back, somewhere
>>>     to VM_DIR/VM_ID directory.
>>>
>>>     Unfortunately, this is not happening. Does anybody has any idea
>>>     what can be the cause? Do I need to specify any additional
>>>     parameters? The log-files show me no specific problem (I checked
>>>     the oned.log and the /var/VM_ID/vm.log).
>>>
>>>
>>> Are you using the Image Repository [1]? If so, is the Image persistent?
>>> If you are defining the DISKs in the VM templates as in previous 
>>> versions, make sure the attribute SAVE=YES is present.
>>>
>>>
>>>     Thank you,
>>>
>>>
>>> Regards,
>>> Carlos.
>>>
>>> [1] http://opennebula.org/documentation:rel2.2:img_guide
>>>
>>> --
>>> Carlos Martín, MSc
>>> Project Major Contributor
>>> OpenNebula - The Open Source Toolkit for Cloud Computing
>>> www.OpenNebula.org <http://www.opennebula.org/> | 
>>> cmartin at opennebula.org <mailto:cmartin at opennebula.org>
>>>
>>>     -- 
>>>     Pieter Simoens, Ph.D.
>>>     Department of Information Technology
>>>     Internet Based Communication Networks and Services (IBCN)
>>>     Ghent University - IBBT
>>>     Gaston Crommenlaan 8 (Bus 201), B-9050 Gent, Belgium
>>>     T: +32 9 33 14878 ; T Secr: +32 9 33 14900
>>>     F: +32 9 33 14899
>>>     W :www.ibcn.intec.UGent.be  <http://www.ibcn.intec.UGent.be>
>>>
>>>
>>>     _______________________________________________
>>>     Users mailing list
>>>     Users at lists.opennebula.org <mailto:Users at lists.opennebula.org>
>>>     http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>>
>>>
>>
>> -- 
>> Pieter Simoens, Ph.D.
>> Department of Information Technology
>> Internet Based Communication Networks and Services (IBCN)
>> Ghent University - IBBT
>> Gaston Crommenlaan 8 (Bus 201), B-9050 Gent, Belgium
>> T: +32 9 33 14878 ; T Secr: +32 9 33 14900
>> F: +32 9 33 14899
>> W :www.ibcn.intec.UGent.be
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opennebula.org
>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
> -- 
> Pieter Simoens, Ph.D.
> Department of Information Technology
> Internet Based Communication Networks and Services (IBCN)
> Ghent University - IBBT
> Gaston Crommenlaan 8 (Bus 201), B-9050 Gent, Belgium
> T: +32 9 33 14878 ; T Secr: +32 9 33 14900
> F: +32 9 33 14899
> W :www.ibcn.intec.UGent.be
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org

-- 
Pieter Simoens, Ph.D.
Department of Information Technology
Internet Based Communication Networks and Services (IBCN)
Ghent University - IBBT
Gaston Crommenlaan 8 (Bus 201), B-9050 Gent, Belgium
T: +32 9 33 14878 ; T Secr: +32 9 33 14900
F: +32 9 33 14899
W : www.ibcn.intec.UGent.be

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20110408/71b2cc7b/attachment-0003.htm>