[one-users] (gang) live migrate with kvm fails

[Shankhadeep Shome]

Hi I noticed that following in qemu.conf had to set to
support simultaneous mass migrations from one host to another with KVM on
ubuntu 12.04, not sure why can anybody clarify whats really going on?

security_driver = "none"

I get the following in the dmesg logs when vms are starting up and when I
chose multiple vms to live migrate all of them fail to migrate to the
destination node, however if I migrate one vm at a time with a 2-4 sec gap
the migration is successful sequentially, any ideas?

The dmesg logs are full of apparmor denies, however vms work fine if
started up and migrated one at a time. It seems to an issue with creating
the nic interface to the vm from the host. This error is easy to recreate
and I can post additional info if anybody needs as this isn't a production
configuration.

[584213.761452] virbr1: topology change detected, propagating
[584213.761467] virbr1: port 2(vnet0) entering forwarding state
[584213.761494] virbr1: port 2(vnet0) entering forwarding state
[584213.995055] type=1400 audit(1335631280.945:78): apparmor="DENIED"
operation="open" parent=1
profile="libvirt-987e7f7c-cb53-7093-4b4e-e87892109432"
name="/proc/19538/auxv" pid=19538 comm="kvm" requested_mask="r"
denied_mask="r" fsuid=1001 ouid=1001
[584223.872064] vnet0: no IPv6 routers present
[584224.038415] kvm: 19538: cpu0 unhandled rdmsr: 0xc0010001
[584485.067707] type=1400 audit(1335631552.015:79): apparmor="DENIED"
operation="open" parent=65334 profile="/usr/lib/libvirt/virt-aa-helper"
name="/var/lib/one/datastores/101/b79b6b3f36d4ba5f42f42af394b1a450"
pid=20285 comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0
ouid=1001
[584485.613221] type=1400 audit(1335631552.563:80): apparmor="STATUS"
operation="profile_replace"
name="libvirt-987e7f7c-cb53-7093-4b4e-e87892109432" pid=20286
comm="apparmor_parser"
[584489.907793] virbr1: port 2(vnet0) entering forwarding state
[584489.910679] device vnet0 left promiscuous mode
[584489.910693] virbr1: port 2(vnet0) entering disabled state
[584491.054608] type=1400 audit(1335631558.003:81): apparmor="STATUS"
operation="profile_remove"
name="libvirt-987e7f7c-cb53-7093-4b4e-e87892109432" pid=20300
comm="apparmor_parser"
[603789.617042] type=1400 audit(1335650856.569:82): apparmor="DENIED"
operation="open" parent=65334 profile="/usr/lib/libvirt/virt-aa-helper"
name="/var/lib/one/datastores/101/b79b6b3f36d4ba5f42f42af394b1a450"
pid=56380 comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0
ouid=1001
[603790.163553] type=1400 audit(1335650857.113:83): apparmor="STATUS"
operation="profile_load"
name="libvirt-5deab1dd-a5eb-8780-5468-e0456feda51e" pid=56381
comm="apparmor_parser"
[603790.488174] device vnet0 entered promiscuous mode
[603790.569330] virbr1: topology change detected, propagating
[603790.569344] virbr1: port 2(vnet0) entering forwarding state
[603790.569370] virbr1: port 2(vnet0) entering forwarding state
[603790.806858] type=1400 audit(1335650857.757:84): apparmor="DENIED"
operation="open" parent=1
profile="libvirt-5deab1dd-a5eb-8780-5468-e0456feda51e"
name="/proc/56410/auxv" pid=56410 comm="kvm" requested_mask="r"
denied_mask="r" fsuid=1001 ouid=1001
requested_mask="r" denied_mask="r" fsuid=0 ouid=1001

This issue leads me to another question.. would it be prudent to to
configure mass live migrations as a serialized operation?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20120428/ed058e9f/attachment-0001.htm>