[one-users] (gang) live migrate with kvm fails

[Tino Vazquez]

Hi,

Is this issue still showing after disabling apparmor?

Regards,

-Tino

--
Constantino Vázquez Blanco, MSc
Project Engineer
OpenNebula - The Open-Source Solution for Data Center Virtualization
www.OpenNebula.org | @tinova79 | @OpenNebula


On Sun, Apr 29, 2012 at 1:05 AM, Shankhadeep Shome <shank15217 at gmail.com> wrote:
> Hi I noticed that following in qemu.conf had to set to
> support simultaneous mass migrations from one host to another with KVM on
> ubuntu 12.04, not sure why can anybody clarify whats really going on?
>
> security_driver = "none"
>
> I get the following in the dmesg logs when vms are starting up and when I
> chose multiple vms to live migrate all of them fail to migrate to the
> destination node, however if I migrate one vm at a time with a 2-4 sec gap
> the migration is successful sequentially, any ideas?
>
> The dmesg logs are full of apparmor denies, however vms work fine if started
> up and migrated one at a time. It seems to an issue with creating the nic
> interface to the vm from the host. This error is easy to recreate and I can
> post additional info if anybody needs as this isn't a production
> configuration.
>
> [584213.761452] virbr1: topology change detected, propagating
> [584213.761467] virbr1: port 2(vnet0) entering forwarding state
> [584213.761494] virbr1: port 2(vnet0) entering forwarding state
> [584213.995055] type=1400 audit(1335631280.945:78): apparmor="DENIED"
> operation="open" parent=1
> profile="libvirt-987e7f7c-cb53-7093-4b4e-e87892109432"
> name="/proc/19538/auxv" pid=19538 comm="kvm" requested_mask="r"
> denied_mask="r" fsuid=1001 ouid=1001
> [584223.872064] vnet0: no IPv6 routers present
> [584224.038415] kvm: 19538: cpu0 unhandled rdmsr: 0xc0010001
> [584485.067707] type=1400 audit(1335631552.015:79): apparmor="DENIED"
> operation="open" parent=65334 profile="/usr/lib/libvirt/virt-aa-helper"
> name="/var/lib/one/datastores/101/b79b6b3f36d4ba5f42f42af394b1a450"
> pid=20285 comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0
> ouid=1001
> [584485.613221] type=1400 audit(1335631552.563:80): apparmor="STATUS"
> operation="profile_replace"
> name="libvirt-987e7f7c-cb53-7093-4b4e-e87892109432" pid=20286
> comm="apparmor_parser"
> [584489.907793] virbr1: port 2(vnet0) entering forwarding state
> [584489.910679] device vnet0 left promiscuous mode
> [584489.910693] virbr1: port 2(vnet0) entering disabled state
> [584491.054608] type=1400 audit(1335631558.003:81): apparmor="STATUS"
> operation="profile_remove"
> name="libvirt-987e7f7c-cb53-7093-4b4e-e87892109432" pid=20300
> comm="apparmor_parser"
> [603789.617042] type=1400 audit(1335650856.569:82): apparmor="DENIED"
> operation="open" parent=65334 profile="/usr/lib/libvirt/virt-aa-helper"
> name="/var/lib/one/datastores/101/b79b6b3f36d4ba5f42f42af394b1a450"
> pid=56380 comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0
> ouid=1001
> [603790.163553] type=1400 audit(1335650857.113:83): apparmor="STATUS"
> operation="profile_load" name="libvirt-5deab1dd-a5eb-8780-5468-e0456feda51e"
> pid=56381 comm="apparmor_parser"
> [603790.488174] device vnet0 entered promiscuous mode
> [603790.569330] virbr1: topology change detected, propagating
> [603790.569344] virbr1: port 2(vnet0) entering forwarding state
> [603790.569370] virbr1: port 2(vnet0) entering forwarding state
> [603790.806858] type=1400 audit(1335650857.757:84): apparmor="DENIED"
> operation="open" parent=1
> profile="libvirt-5deab1dd-a5eb-8780-5468-e0456feda51e"
> name="/proc/56410/auxv" pid=56410 comm="kvm" requested_mask="r"
> denied_mask="r" fsuid=1001 ouid=1001
> requested_mask="r" denied_mask="r" fsuid=0 ouid=1001
>
> This issue leads me to another question.. would it be prudent to to
> configure mass live migrations as a serialized operation?
>
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>