<div dir="ltr">Hi,<div><br></div><div class="gmail_extra"><div class="gmail_quote">On Mon, Dec 22, 2014 at 7:46 PM, Mr Sensible <span dir="ltr"><<a href="mailto:doilooksensible@gmail.com" target="_blank">doilooksensible@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">So, the question. How can I allow members of a group to RUN a persistent vm?<br>
<br>
Current Setup<br>
<br>
OpenNebula 4.10.1<br>
<br>
SO I have a VM, that :<br>
- is running in an SSH system datastore.<br>
- has an image marked as persistent<br>
- set to group infAdmins<br>
<br>
Current permissions<br>
- image Use : NO Manage : YES Admin : YES<br>
- network Use : YES Manage : YES Admin : YES<br>
- template Use : YES Manage : YES Admin : YES<br>
- vm Use : YES Manage : YES Admin : YES<br>
<br>
<br>
I find that admins in the group can not run this VM. I checked the vm permissions, and yes, group run permission was unchecked. However, I am unable to allow Group Run privilege, as "A persistent image cannot be made public".<br>
<br>
So I am a bit stuck. I need the vm to be persistent (in case of hardware failure) but I need the ssh local system datastore for performance, and I really need a small group other than me to be able to run up VMs, either pre-created by me, or from scratch. I also create VMs for project teams, and need them to be able to run up their own VMs (at the group level).<br>
<br>
<br>
Apologies if I am trying to do something stupid (or missing something obvious).<br>
<br>
Thanks and seasons greetings<br>
<br>
Peter<br></blockquote><div><br></div><div>This limitation is there for legacy reasons, and because of your mail we have decided to remove it in the next maintenance release [1].</div><div>Meanwhile, you can give USE permissions to the group through an ACL rule [2].</div><div><br></div><div>In any case, please be aware that a persistent Image can only be used by 1 VM at a time.</div><div><br></div><div>Best regards.</div><div><br></div><div>[1] <a href="http://dev.opennebula.org/issues/3494">http://dev.opennebula.org/issues/3494</a><br></div><div>[2] <a href="http://docs.opennebula.org/4.10/administration/users_and_groups/manage_acl.html">http://docs.opennebula.org/4.10/administration/users_and_groups/manage_acl.html</a><br></div><div><div class="gmail_signature"><div dir="ltr"><br class="">--<br><div>Carlos Martín, MSc<br>Project Engineer</div><div>OpenNebula - Flexible Enterprise Cloud Made Simple<br><div><span style="border-collapse:collapse;color:rgb(136,136,136);font-size:13px"><a href="http://www.opennebula.org/" target="_blank">www.OpenNebula.org</a> | <a href="mailto:cmartin@opennebula.org" target="_blank">cmartin@opennebula.org</a> | <a href="http://twitter.com/opennebula" target="_blank">@OpenNebula</a></span><span style="border-collapse:collapse;color:rgb(136,136,136);font-size:13px"><a href="mailto:cmartin@opennebula.org" target="_blank" style="color:rgb(42,93,176)"></a></span></div></div></div></div></div><div> </div><div><br></div><div> </div></div><br></div></div>