[one-users] Permission denied while creating VM

Thu Feb 28 09:28:36 PST 2013

Hi Jaime,

bash-4.1$ sudo -u oneadmin virsh -c qemu:///system create deployment.0
Fehler: Fehler beim Erstellen der Domain von deployment.0
Fehler: internal error process exited while connecting to monitor: qemu-kvm:
-drive 
file=/var/lib/one//datastores/0/18/disk.0,if=none,id=drive-ide0-0-0,format=r
aw: could not open disk image /var/lib/one//datastores/0/18/disk.0:
Permission denied

bash-4.1$ ls -lL disk.0
brw-rw---- 1 root disk 253, 9 28. Feb 18:26 disk.0

Best regards,
Tobias

Von:  Jaime Melis <jmelis at opennebula.org>
Datum:  Thu, 28 Feb 2013 18:21:50 +0100
An:  Tobias Honacker <t.honacker at googlemail.com>
Cc:  Users OpenNebula <users at lists.opennebula.org>
Betreff:  Re: [one-users] Permission denied while creating VM

Sorry Tobias, the command I sent is not the correct one, you have to
explicitely say that you want to connect to the system socket. Do this
instead:

$ sudo -u oneadmin virsh -c qemu:///system create deployment.0

On Thu, Feb 28, 2013 at 6:14 PM, Tobias Honacker <t.honacker at googlemail.com>
wrote:
> Hi Jaime,
> 
> Thanks for the support.
> 
> ---snip---
> bash-4.1$ sudo -u oneadmin virsh create deployment.0
> 
> Fehler: Fehler beim Erstellen der Domain von deployment.0
> 
> Fehler: Unable to create tap device vnet%d: Operation not permitted
> 
> ---snip---
> 
> 
> 
> 
> 
> Does /var/log/libvirtd/qemu/one-<vm_id>.log shed any light on the issue?
> 
> 
> 
> --> nope, exact same error.
> 
> 
> 
> It could be a polkit problem, have you grepped the usual suspects? auth.log,
> etcŠ
> 
> 
> 
> --> can't see any error or strange log files
> 
> 
> 
> 
> 
> /var/log/libvirt/libvirtd.log :
> 
> 
> 
> 2013-02-28 14:57:10.341+0000: 11893: error : qemuMonitorOpenUnix:266 : failed
> to connect to monitor socket: No such process
> 
> 2013-02-28 14:57:10.342+0000: 11893: error : qemuProcessWaitForMonitor:1533 :
> internal error process exited while connecting to monitor:
> 
> qemu-kvm: -drive 
> file=/var/lib/one//datastores/0/17/disk.0,if=none,id=drive-ide0-0-0,format=raw
> : could not open disk image /var/lib/one//datastores/0/17/disk.0: Permission
> denied
> 
> 
> 
> Don't know what "
> 
> failed to connect to monitor socket: No such process" means, all settings are
> correct in my opinion.
> 
> 
> 
> 
> 
> Best regards,
> 
> Tobias
> 
> 
> 
> Von:  Jaime Melis <jmelis at opennebula.org>
> Datum:  Thu, 28 Feb 2013 16:36:45 +0100
> An:  Tobias Honacker <t.honacker at googlemail.com>
> Cc:  Users OpenNebula <users at lists.opennebula.org>
> Betreff:  Re: [one-users] Permission denied while creating VM
> 
> Hi Tobias,
> 
> I have no idea why that's happening to you. I'm wondering, have you tried
> start the VM manually in the host after it fails to deploy? the files should
> be still there until you do "onevm delete".
> $ virsh create /var/lib/one/datastores/0/<vm_id>/deployment.0
> 
> Does /var/log/libvirtd/qemu/one-<vm_id>.log shed any light on the issue?
> 
> It could be a polkit problem, have you grepped the usual suspects? auth.log,
> etc...
> 
> cheers,
> Jaime
> 
> 
> On Tue, Feb 26, 2013 at 5:21 PM, Tobias Honacker <t.honacker at googlemail.com>
> wrote:
>> Hi guys,
>> 
>> My environment:
>> 
>> OS: CentOS 6.3
>> Version: OpenNebula 3.8.3
>> Datastore: LVM (DRBD 8.4.3 + clvm + crm)
>> Filesystem of /var/lib/one: ext4
>> Images: 1x (Type: Datablock - 10G) and 1x (Type: CDROM - Path
>> /tmp/debian-image.iso)
>> LVM Storage is working perfectly and without errors!
>> 
>> 
>> My Problem:
>> 
>> VM is not booting cause of this error:
>> 
>> ---snip---
>> Tue Feb 26 16:17:35 2013 [VMM][D]: Message received: LOG I 1 Successfully
>> execute network driver operation: pre.
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 Command
>> execution fail: cat << EOT | /var/lib/one/remotes/vmm/kvm/deploy
>> /var/lib/one//datastores/0/1/deployment.0 priv$
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 error: Failed
>> to create domain from /var/lib/one//datastores/0/1/deployment.0
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 error:
>> internal error process exited while connecting to monitor: qemu-kvm:
>> -drive
>> file=/var/lib/one//datastores/0/1/disk.0,if=none,id=drive-ide0-0-0,format=r
>> aw: could not open disk image /var/lib/one//datastores/0/1/disk.0:
>> Permission denied
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG E 1 Could not
>> create domain from /var/lib/one//datastores/0/1/deployment.0
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 ExitCode: 255
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: LOG I 1 Failed to
>> execute virtualization driver operation: deploy.
>> 
>> Tue Feb 26 16:17:39 2013 [VMM][D]: Message received: DEPLOY FAILURE 1
>> Could not create domain from /var/lib/one//datastores/0/1/deployment.0
>> ---snip---
>> 
>> 
>> 
>> Datastore Config:
>> 
>> NAME = drbd
>> DS_MAD = lvm
>> TM_MAD = lvm
>> VG_NAME = vg-one
>> HOST = localhost
>> 
>> 
>> 
>> [root at priv001 one]# grep -vE '^($|#)' /etc/libvirt/qemu.conf
>> user  = "oneadmin"
>> group = "oneadmin"
>> dynamic_ownership = 0
>> 
>> 
>> 
>> root at priv001 one]# grep -vE '^($|#)' /etc/libvirt/libvirtd.conf
>> listen_tls = 0
>> listen_tcp = 1
>> mdns_adv = 0
>> unix_sock_group = "libvirt"
>> unix_sock_ro_perms = "0777"
>> unix_sock_rw_perms = "0770"
>> auth_unix_ro = "none"
>> auth_unix_rw = "none"
>> 
>> 
>> 
>> [root at priv001 one]# id oneadmin
>> uid=9869(oneadmin) gid=9869(oneadmin)
>> Gruppen=9869(oneadmin),36(kvm),9870(libvirt)
>> 
>> 
>> 
>> [root at priv001 one]# cat
>> /etc/polkit-1/localauthority/50-local.d/50-org.libvirt.unix.manage-opennebu
>> la.pkla
>> # content of file:
>> /etc/polkit-1/localauthority/50-local.d/50-org.libvirt.unix.manage-opennebu
>> la.pkla
>> [Allow oneadmin user to manage virtual machines]
>> Identity=unix-user:oneadmin
>> Action=org.libvirt.unix.manage
>> #Action=org.libvirt.unix.monitor
>> ResultAny=yes
>> ResultInactive=yes
>> ResultActive=yes
>> 
>> 
>> 
>> [root at priv001 ~]# getenforce
>> Disabled
>> 
>> 
>> Diskpermission:
>> 
>> lrwxrwxrwx 1 oneadmin oneadmin   24 26. Feb 17:01 disk.0 ->
>> /dev/vg-one/lv-one-0-3-0
>> 
>> 
>> 
>> I've tried lots of thins like upgrading drbd, OpenNebula from 3.8.1 to
>> 3.8.3, using other filesystems, playing around with libvirt rights, tried
>> oneadmin as group from libvirt etc.pp.
>> 
>> 
>> Any idea whats wrong with my system?
>> Thanks for helping.
>> 
>> 
>> 
>> Best regards,
>> Tobias
>> 
>> 
>> _______________________________________________
>> Users mailing list
>> Users at lists.opennebula.org
>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
> 
> 
> 
> -- 
> Jaime Melis
> Project Engineer
> OpenNebula - The Open Source Toolkit for Cloud Computing
> www.OpenNebula.org <http://www.OpenNebula.org>  | jmelis at opennebula.org

-- 
Jaime Melis
Project Engineer
OpenNebula - The Open Source Toolkit for Cloud Computing
www.OpenNebula.org <http://www.OpenNebula.org>  | jmelis at opennebula.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20130228/ea4187cd/attachment-0002.htm>