[one-users] one3.2: Problem creating image

[Ruben S. Montero]

Hi

This is a security improvement in 3.2. As the images are copied as
oneadmin, any file readable by oneadmin could be registered as an image
(including for example /var/lib/one/one.db, other users images
/var/lib/one/3/images/disk.0 etc)

you can tune the behavior in /etc/one/image/fs.conf, more info at
http://www.opennebula.org/documentation:rel3.2:image_repo

Cheers

Ruben

On Thu, Jan 19, 2012 at 5:32 PM, Florian Antonescu <
florinantonescu at gmail.com> wrote:

> I am trying to create an image using OpenNebula 3.2 and the provided
> ttylinux but I get some strange errors (see below). The strange thing is
> that if I manually try to copy the image with cp
> /srv/cloud/one/one-templates/ttylinux.img /srv/cloud/one/var/images/ it
> works just fine. The /srv/cloud/one/var folder is exported using nfs to the
> frontend and oneadmin can read and write both one-templates and var/images
> folders.
> Any ideas?
>
> Thank you,
> Florian Antonescu
>
> Thu Jan 19 08:19:26 2012 [ReM][D]: ImageAllocate method invoked
> Thu Jan 19 08:19:26 2012 [ImM][I]: Copying
> /srv/cloud/one/one-templates/ttylinux.img to repository for image 2
> Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG I 2 Command
> execution fail: /srv/cloud/one/var/remotes/image/fs/cp
> /srv/cloud/one/one-templates/ttylinux.img 2 2
> Thu Jan 19 08:19:27 2012 [ImM][I]: Command execution fail:
> /srv/cloud/one/var/remotes/image/fs/cp
> /srv/cloud/one/one-templates/ttylinux.img 2 2
> Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG E 2 cp: Not
> allowed to copy images from /srv/cloud/one/var/ /srv/cloud/one/etc/
> /srv/cloud/one/ /etc/
> Thu Jan 19 08:19:27 2012 [ImM][E]: cp: Not allowed to copy images from
> /srv/cloud/one/var/ /srv/cloud/one/etc/ /srv/cloud/one/ /etc/
> Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG E 2 Not allowed
> to copy image file /srv/cloud/one/one-templates/ttylinux.img
> Thu Jan 19 08:19:27 2012 [ImM][E]: Not allowed to copy image file
> /srv/cloud/one/one-templates/ttylinux.img
> Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG I 2 ExitCode: 255
> Thu Jan 19 08:19:27 2012 [ImM][I]: ExitCode: 255
> Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: CP FAILURE 2 Not
> allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img
> Thu Jan 19 08:19:27 2012 [ImM][E]: Error copying image in the repository:
> Not allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
>


-- 
Dr. Ruben Santiago Montero
Associate Professor (Profesor Titular), Complutense University of Madrid

URL: http://dsa-research.org/doku.php?id=people:ruben
Weblog: http://blog.dsa-research.org/?author=7
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20120119/3169ac1e/attachment-0003.htm>