[prev in list] [next in list] [prev in thread] [next in thread] 

List:       vdsm-devel
Subject:    =?utf-8?q?=5Bovirt-devel=5D?= Re: somehow, no permission to run VM
From:       Nir Soffer <nsoffer () redhat ! com>
Date:       2020-02-15 20:16:54
Message-ID: CAMRbyysLk_cEeX_w=O_qwjSEWWvx=bD6C2J09hUObBYza2ZUSg () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


On Sat, Feb 15, 2020, 21:12 Fedor Gavrilov <fgavrilo@redhat.com> wrote:

> Hi,
> 
> Have you ever seen an error like this:
> 
> 2020-02-15 20:05:16,246+01 ERROR
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ForkJoinPool-1-worker-27) [] EVENT_ID: VM_DOWN_ERROR(119), VM vm0 is down
> with error. Exit message: internal error: child reported (status=125):
> unable to open
> /rhev/data-center/mnt/banana:_nfsshare/45e51eaa-b608-40b1-9db6-6e6a1b3ed428/images/9d440b9a-b033-4209-898b-6667a4605281/ead2017a-a7fe-4408-b8d4-1670cb767474:
>  Permission denied.
> 

You are missing anonuid=36,annongid=36 in the export for this domain.

Libvirt runs as root and when it tries to access storage its uid/gid are
squashed to nobody. With proper configuration it will be squashed to
vdsm:kvm.


> in the engine logs? I'm getting it on my env (master branch) and can't
> figure out why. I login as admin, I have a perfectly working host and
> storage machines, on which I created this VM and its disk. Without any
> actions in between, I try to run it and get this. Storage domain and data
> center statuses are updated as you expect when you put the host to
> maintenance and back, so it seems this is the only thing wrong. Do you know
> what that might be?
> 
> Thanks,
> Fedor
> _______________________________________________
> Devel mailing list -- devel@ovirt.org
> To unsubscribe send an email to devel-leave@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/Z7S2EDKOAJECSLNIZGN6CWGPJZ4YUFPM/
>  


[Attachment #5 (text/html)]

<div dir="auto"><div><br><br><div class="gmail_quote"><div dir="ltr" \
class="gmail_attr">On Sat, Feb 15, 2020, 21:12 Fedor Gavrilov &lt;<a \
href="mailto:fgavrilo@redhat.com">fgavrilo@redhat.com</a>&gt; \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br> <br>
Have you ever seen an error like this:<br>
<br>
2020-02-15 20:05:16,246+01 ERROR \
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] \
(ForkJoinPool-1-worker-27) [] EVENT_ID: VM_DOWN_ERROR(119), VM vm0 is down with \
error. Exit message: internal error: child reported (status=125): unable to open \
/rhev/data-center/mnt/banana:_nfsshare/45e51eaa-b608-40b1-9db6-6e6a1b3ed428/images/9d440b9a-b033-4209-898b-6667a4605281/ead2017a-a7fe-4408-b8d4-1670cb767474: \
Permission denied.<br></blockquote></div></div><div dir="auto"><br></div><div \
dir="auto">You are missing anonuid=36,annongid=36 in the export for this \
domain.</div><div dir="auto"><br></div><div dir="auto">Libvirt runs as root and when \
it tries to access storage its uid/gid are squashed to nobody. With proper \
configuration it will be squashed to vdsm:kvm.</div><div dir="auto"><br></div><div \
dir="auto"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 \
0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <br>
in the engine logs? I&#39;m getting it on my env (master branch) and can&#39;t figure \
out why. I login as admin, I have a perfectly working host and storage machines, on \
which I created this VM and its disk. Without any actions in between, I try to run it \
and get this. Storage domain and data center statuses are updated as you expect when \
you put the host to maintenance and back, so it seems this is the only thing wrong. \
Do you know what that might be?<br> <br>
Thanks,<br>
Fedor<br>
_______________________________________________<br>
Devel mailing list -- <a href="mailto:devel@ovirt.org" target="_blank" \
rel="noreferrer">devel@ovirt.org</a><br> To unsubscribe send an email to <a \
href="mailto:devel-leave@ovirt.org" target="_blank" \
rel="noreferrer">devel-leave@ovirt.org</a><br> Privacy Statement: <a \
href="https://www.ovirt.org/site/privacy-policy/" rel="noreferrer noreferrer" \
target="_blank">https://www.ovirt.org/site/privacy-policy/</a><br> oVirt Code of \
Conduct: <a href="https://www.ovirt.org/community/about/community-guidelines/" \
rel="noreferrer noreferrer" \
target="_blank">https://www.ovirt.org/community/about/community-guidelines/</a><br> \
List Archives: <a href="https://lists.ovirt.org/archives/list/devel@ovirt.org/message/Z7S2EDKOAJECSLNIZGN6CWGPJZ4YUFPM/" \
rel="noreferrer noreferrer" \
target="_blank">https://lists.ovirt.org/archives/list/devel@ovirt.org/message/Z7S2EDKOAJECSLNIZGN6CWGPJZ4YUFPM/</a><br>
 </blockquote></div></div></div>


[Attachment #6 (text/plain)]

_______________________________________________
Devel mailing list -- devel@ovirt.org
To unsubscribe send an email to devel-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/devel@ovirt.org/message/6EGONZ2Z73WC76LQ2NMDEYRNF5JSQCOH/




[prev in list] [next in list] [prev in thread] [next in thread]