[one-users] Permission denied while creating VM

[Tobias Honacker]

Hi guys,

My environment:

OS: CentOS 6.3
Version: OpenNebula 3.8.3
Datastore: LVM (DRBD 8.4.3 + clvm + crm)
Filesystem of /var/lib/one: ext4
Images: 1x (Type: Datablock - 10G) and 1x (Type: CDROM - Path
/tmp/debian-image.iso)
LVM Storage is working perfectly and without errors!


My Problem:

VM is not booting cause of this error:

---snip---
Tue Feb 26 16:17:35 2013 [VMM][D]: Message received: LOG I 1 Successfully
execute network driver operation: pre.

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 Command
execution fail: cat << EOT | /var/lib/one/remotes/vmm/kvm/deploy
/var/lib/one//datastores/0/1/deployment.0 priv$

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 error: Failed
to create domain from /var/lib/one//datastores/0/1/deployment.0

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 error:
internal error process exited while connecting to monitor: qemu-kvm:
-drive 
file=/var/lib/one//datastores/0/1/disk.0,if=none,id=drive-ide0-0-0,format=r
aw: could not open disk image /var/lib/one//datastores/0/1/disk.0:
Permission denied

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG E 1 Could not
create domain from /var/lib/one//datastores/0/1/deployment.0

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 ExitCode: 255

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 Failed to
execute virtualization driver operation: deploy.

Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: DEPLOY FAILURE 1
Could not create domain from /var/lib/one//datastores/0/1/deployment.0
---snip---



Datastore Config:

NAME = drbd
DS_MAD = lvm
TM_MAD = lvm
VG_NAME = vg-one
HOST = localhost



[root at priv001 one]# grep -vE '^($|#)' /etc/libvirt/qemu.conf
user  = "oneadmin"
group = "oneadmin"
dynamic_ownership = 0



root at priv001 one]# grep -vE '^($|#)' /etc/libvirt/libvirtd.conf
listen_tls = 0
listen_tcp = 1
mdns_adv = 0
unix_sock_group = "libvirt"
unix_sock_ro_perms = "0777"
unix_sock_rw_perms = "0770"
auth_unix_ro = "none"
auth_unix_rw = "none"



[root at priv001 one]# id oneadmin
uid=9869(oneadmin) gid=9869(oneadmin)
Gruppen=9869(oneadmin),36(kvm),9870(libvirt)



[root at priv001 one]# cat
/etc/polkit-1/localauthority/50-local.d/50-org.libvirt.unix.manage-opennebu
la.pkla 
# content of file: 
/etc/polkit-1/localauthority/50-local.d/50-org.libvirt.unix.manage-opennebu
la.pkla
[Allow oneadmin user to manage virtual machines]
Identity=unix-user:oneadmin
Action=org.libvirt.unix.manage
#Action=org.libvirt.unix.monitor
ResultAny=yes
ResultInactive=yes
ResultActive=yes



[root at priv001 ~]# getenforce
Disabled


Diskpermission:

lrwxrwxrwx 1 oneadmin oneadmin   24 26. Feb 17:01 disk.0 ->
/dev/vg-one/lv-one-0-3-0



I've tried lots of thins like upgrading drbd, OpenNebula from 3.8.1 to
3.8.3, using other filesystems, playing around with libvirt rights, tried
oneadmin as group from libvirt etc.pp.


Any idea whats wrong with my system?
Thanks for helping.



Best regards,
Tobias