Thank you for your answer. Maybe this aspect should be mentioned in the documentation on
<a href="http://opennebula.org/documentation:rel3.2:vmg">http://opennebula.org/documentation:rel3.2:vmg</a> <div><br></div><div>Best regards,</div><div>Florian<br><br><div class="gmail_quote">On Thu, Jan 19, 2012 at 5:40 PM, Ruben S. Montero <span dir="ltr"><<a href="mailto:rubensm@dacya.ucm.es">rubensm@dacya.ucm.es</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi<div><br></div><div>This is a security improvement in 3.2. As the images are copied as oneadmin, any file readable by oneadmin could be registered as an image (including for example /var/lib/one/one.db, other users images /var/lib/one/3/images/disk.0 etc)</div>
<div><br></div><div>you can tune the behavior in /etc/one/image/fs.conf, more info at <a href="http://www.opennebula.org/documentation:rel3.2:image_repo" target="_blank">http://www.opennebula.org/documentation:rel3.2:image_repo</a></div>
<div><br></div><div>Cheers</div><div><br></div><div>Ruben</div><div><br><div class="gmail_quote"><div><div class="h5">On Thu, Jan 19, 2012 at 5:32 PM, Florian Antonescu <span dir="ltr"><<a href="mailto:florinantonescu@gmail.com" target="_blank">florinantonescu@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">I am trying to create an image using OpenNebula 3.2 and the provided ttylinux but I get some strange errors (see below). The strange thing is that if I manually try to copy the image with cp /srv/cloud/one/one-templates/ttylinux.img /srv/cloud/one/var/images/ it works just fine. The /srv/cloud/one/var folder is exported using nfs to the frontend and oneadmin can read and write both one-templates and var/images folders.<div>
Any ideas?</div><div><br></div><div>Thank you,</div><div>Florian Antonescu<div><br></div><div><div>Thu Jan 19 08:19:26 2012 [ReM][D]: ImageAllocate method invoked</div><div>Thu Jan 19 08:19:26 2012 [ImM][I]: Copying /srv/cloud/one/one-templates/ttylinux.img to repository for image 2</div>
<div>Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG I 2 Command execution fail: /srv/cloud/one/var/remotes/image/fs/cp /srv/cloud/one/one-templates/ttylinux.img 2 2</div><div>Thu Jan 19 08:19:27 2012 [ImM][I]: Command execution fail: /srv/cloud/one/var/remotes/image/fs/cp /srv/cloud/one/one-templates/ttylinux.img 2 2</div>
<div>Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG E 2 cp: Not allowed to copy images from /srv/cloud/one/var/ /srv/cloud/one/etc/ /srv/cloud/one/ /etc/</div><div>Thu Jan 19 08:19:27 2012 [ImM][E]: cp: Not allowed to copy images from /srv/cloud/one/var/ /srv/cloud/one/etc/ /srv/cloud/one/ /etc/</div>
<div>Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG E 2 Not allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img</div><div>Thu Jan 19 08:19:27 2012 [ImM][E]: Not allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img</div>
<div>Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG I 2 ExitCode: 255</div><div>Thu Jan 19 08:19:27 2012 [ImM][I]: ExitCode: 255</div><div>Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: CP FAILURE 2 Not allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img</div>
<div>Thu Jan 19 08:19:27 2012 [ImM][E]: Error copying image in the repository: Not allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img</div></div><div><br></div></div>
<br></div></div>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br>Dr. Ruben Santiago Montero<br>Associate Professor (Profesor Titular), Complutense University of Madrid<br><br>URL: <a href="http://dsa-research.org/doku.php?id=people:ruben" target="_blank">http://dsa-research.org/doku.php?id=people:ruben</a><br>
Weblog: <a href="http://blog.dsa-research.org/?author=7" target="_blank">http://blog.dsa-research.org/?author=7</a><br>
</font></span></div>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><br></div>