<div dir="ltr">Hi Javier,<div><br></div><div>Restarted ONE and Sunstone-server service and now I am able to hot attach virtio nic model.</div><div><br></div><div>Thanks for you help</div><div><br></div><div>Regards</div><div>
Kiran Ranjane</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Aug 27, 2014 at 7:09 PM, kiran ranjane <span dir="ltr"><<a href="mailto:kiran.ranjane@gmail.com" target="_blank">kiran.ranjane@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Javier,</div><div><br></div>I have upgraded to latest libvirt version also applied patch to the file still getting same error. Do I need to restart any other service?<div>
<br></div><div><u>Restarted Service</u> :</div>
<div><br></div><div>sudo service apparmor restart<br></div><div>sudo service libvirt-bin restart<br></div><div><br></div><div><br></div><div><div>libvirtd --version</div><div>libvirtd (libvirt) 1.2.7</div></div><div><br>
</div>
<div><br></div><div>Added patch to /etc/apparmor.d/abstractions/libvirt-qemu<br></div><div><div><br></div><div> # this is needed with libcap-ng support, however it breaks a lot of things</div><div> # atm, so just silence the denial until libcap-ng works right. LP: #522845</div>
<div> deny capability setpcap,</div><div><br></div><div> network inet stream,</div><div> network inet6 stream,</div><div><br></div><div> /dev/net/tun rw,</div><div> /dev/tap* rw,</div><div> /dev/kvm rw,</div><div> /dev/ptmx rw,</div>
<div> /dev/kqemu rw,</div><div> /dev/vhost-net rw,</div><div> @{PROC}/*/status r,</div><div> owner @{PROC}/*/auxv r,</div><div> @{PROC}/sys/vm/overcommit_memory r,</div><div><br></div><div> # For hostdev access. The actual devices will be added dynamically</div>
<div> /sys/bus/usb/devices/ r,</div><div> /sys/devices/**/usb[0-9]*/** r,</div><div><br></div><div> # WARNING: this gives the guest direct access to host hardware and specific</div></div><div><br></div><div><br></div>
<div>
Regards</div><span class="HOEnZb"><font color="#888888"><div>Kiran Ranjane</div><div><br></div></font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Aug 27, 2014 at 6:36 PM, Javier Fontan <span dir="ltr"><<a href="mailto:jfontan@opennebula.org" target="_blank">jfontan@opennebula.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">It seems to be a bug in libvirt from Ubuntu 14.04. There is a fixed<br>
pakage in the trusty-proposed repo. You can try adding the<br>
ubuntu-proposed repo and upgrading libvirt or try applying this patch<br>
<br>
<a href="https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1322568/comments/3" target="_blank">https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1322568/comments/3</a><br>
<br>
The bug report is here:<br>
<br>
<a href="https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1322568" target="_blank">https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1322568</a><br>
<div><div><br>
On Wed, Aug 27, 2014 at 2:51 PM, kiran ranjane <<a href="mailto:kiran.ranjane@gmail.com" target="_blank">kiran.ranjane@gmail.com</a>> wrote:<br>
> Yes, it made libvirt unusable and had to install apparmor it again.<br>
><br>
> Tried again on a linux VM got the same error :<br>
><br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: Successfully execute network driver<br>
> operation: pre.<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: Command execution fail:<br>
> /var/tmp/one/vmm/kvm/attach_nic 'one-30' '02:00:c0:a8:7a:13' 'virbr0'<br>
> 'virtio' 'dummy' 30 kvm-node<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][E]: attach_nic: Command "virsh --connect<br>
> qemu:///system attach-device one-30 <(<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: cat <<EOT<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: <interface type='bridge'><br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: <source bridge='virbr0'/><br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: <mac address='02:00:c0:a8:7a:13'/><br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: <model type='virtio'/><br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]:<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: </interface><br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: EOT<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: )" failed: error: Failed to attach<br>
> device from /dev/fd/63<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: error: internal error: unable to<br>
> execute QEMU command 'getfd': No file descriptor supplied via SCM_RIGHTS<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][E]: Could not attach () to one-30<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: ExitCode: 1<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][I]: Failed to execute virtualization<br>
> driver operation: attach_nic.<br>
> Wed Aug 27 18:20:33 2014 [Z0][VMM][E]: Error attaching new VM NIC: Could not<br>
> attach () to one-30<br>
><br>
><br>
> On Wed, Aug 27, 2014 at 6:12 PM, Javier Fontan <<a href="mailto:jfontan@opennebula.org" target="_blank">jfontan@opennebula.org</a>><br>
> wrote:<br>
>><br>
>> You can try but I think disabling apparmor will make libvirt unusable.<br>
>> I'm not sure about it.<br>
>><br>
>> On Wed, Aug 27, 2014 at 2:20 PM, kiran ranjane <<a href="mailto:kiran.ranjane@gmail.com" target="_blank">kiran.ranjane@gmail.com</a>><br>
>> wrote:<br>
>> > Hi Javier,<br>
>> ><br>
>> > I am using Ubuntu 14.04 as host OS, Do you want me to disable apparmor?<br>
>> ><br>
>> > Regards<br>
>> > Kiran Ranjane<br>
>> ><br>
>> ><br>
>> > On Wed, Aug 27, 2014 at 5:44 PM, Javier Fontan <<a href="mailto:jfontan@opennebula.org" target="_blank">jfontan@opennebula.org</a>><br>
>> > wrote:<br>
>> >><br>
>> >> There seems to be a problem related with libvirt and selinux. Can you<br>
>> >> try disabling SElinux and doing the attach again? Virtio nic attach is<br>
>> >> supported.<br>
>> >><br>
>> >> On Fri, Aug 22, 2014 at 2:01 PM, kiran ranjane<br>
>> >> <<a href="mailto:kiran.ranjane@gmail.com" target="_blank">kiran.ranjane@gmail.com</a>><br>
>> >> wrote:<br>
>> >> > Hello Everyone,<br>
>> >> ><br>
>> >> > I am getting error while hot plugging virtio nic model to VM<br>
>> >> > One 4.8<br>
>> >> > Host - Ubuntu 14.04<br>
>> >> > VM - Windows 2008 R2 (Virtio Drivers already install in the VM)<br>
>> >> ><br>
>> >> ><br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: Command execution fail:<br>
>> >> > /var/tmp/one/vmm/kvm/attach_nic 'one-15' '02:00:c0:a8:7a:08' 'virbr0'<br>
>> >> > 'virtio' 'dummy' 15 kvm-node<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][E]: attach_nic: Command "virsh<br>
>> >> > --connect<br>
>> >> > qemu:///system attach-device one-15 <(<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: cat <<EOT<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: <interface type='bridge'><br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: <source bridge='virbr0'/><br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: <mac<br>
>> >> > address='02:00:c0:a8:7a:08'/><br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: <model type='virtio'/><br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]:<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: </interface><br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: EOT<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: )" failed: error: Failed to<br>
>> >> > attach<br>
>> >> > device from /dev/fd/63<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: error: internal error: unable<br>
>> >> > to<br>
>> >> > execute QEMU command 'getfd': No file descriptor supplied via<br>
>> >> > SCM_RIGHTS<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][E]: Could not attach () to one-15<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: ExitCode: 1<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][I]: Failed to execute<br>
>> >> > virtualization<br>
>> >> > driver operation: attach_nic.<br>
>> >> > Fri Aug 22 17:22:41 2014 [Z0][VMM][E]: Error attaching new VM NIC:<br>
>> >> > Could<br>
>> >> > not<br>
>> >> > attach () to one-15<br>
>> >> ><br>
>> >> > Regards<br>
>> >> > Kiran Ranjane<br>
>> >> ><br>
>> >> > _______________________________________________<br>
>> >> > Users mailing list<br>
>> >> > <a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
>> >> > <a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
>> >> ><br>
>> >><br>
>> >><br>
>> >><br>
>> >> --<br>
>> >> Javier Fontán Muiños<br>
>> >> Developer<br>
>> >> OpenNebula - Flexible Enterprise Cloud Made Simple<br>
>> >> <a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | @OpenNebula | <a href="http://github.com/jfontan" target="_blank">github.com/jfontan</a><br>
>> ><br>
>> ><br>
>><br>
>><br>
>><br>
>> --<br>
>> Javier Fontán Muiños<br>
>> Developer<br>
>> OpenNebula - Flexible Enterprise Cloud Made Simple<br>
>> <a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | @OpenNebula | <a href="http://github.com/jfontan" target="_blank">github.com/jfontan</a><br>
><br>
><br>
<br>
<br>
<br>
--<br>
Javier Fontán Muiños<br>
Developer<br>
OpenNebula - Flexible Enterprise Cloud Made Simple<br>
<a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | @OpenNebula | <a href="http://github.com/jfontan" target="_blank">github.com/jfontan</a><br>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>