[Bug 1452698] [NEW] Issue in sahara-common.postinst.in: sahara-db-manage is executet on fresh install (even without a db-connection)

2015-05-07 Thread Tino Schmeier
Public bug reported:

Hi there,

i dont know if this is the right place for this bug-report!?

But the following script-lines will execute sahara-db-manage, even on an
fresh install without any configured db-connection.

if ! grep -qE ^(sql_)?connection( )?=.* ${SAHARA_CONF} || \
 grep -qE ^(sql_)?connection.*sqlite.* ${SAHARA_CONF}; then
su -s /bin/sh -c 'sahara-db-manage --config-file 
/etc/sahara/sahara.conf upgrade head' sahara
fi

Becuse the default is:

#connection=None

and this matches the negated grep .

# lsb_release -rd
Description:Ubuntu 14.04.2 LTS
Release:14.04

# apt-cache policy sahara-common
sahara-common:
  Installed: 2015.1.0-0ubuntu1~cloud0
  Candidate: 2015.1.0-0ubuntu1~cloud0
  Version table:
 *** 2015.1.0-0ubuntu1~cloud0 0
500 http://ubuntu-cloud.archive.canonical.com/ubuntu/ 
trusty-proposed/kilo/main amd64 Packages
100 /var/lib/dpkg/status
 2015.1~rc1-0ubuntu1~cloud0 0
500 http://ubuntu-cloud.archive.canonical.com/ubuntu/ 
trusty-updates/kilo/main amd64 Packages


Regards
Tino

** Affects: sahara (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1452698

Title:
  Issue in sahara-common.postinst.in: sahara-db-manage is executet on
  fresh install (even without a db-connection)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sahara/+bug/1452698/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1288841] Re: l3-agent (dis)associate floatingip only after restart

2014-03-07 Thread Tino Schmeier
Hi,

i was able to solve our problem. The neutron-plugin-vpn-agent inherits
from the l3-agent !? Maybe this service also cosumes messages from the
l3-agent-queues.

l3_agentrabbit@ctl1.3.600.0   1   true
l3_agentrabbit@ctl1.3.13923.0 1   true
l3_agent.netnode1   rabbit@ctl1.3.600.0   2   true
l3_agent.netnode1   rabbit@ctl1.3.13923.0 2   true
l3_agent_fanout_439789853af24283bdb0bab8e5d11a42rabbit@ctl1.3.600.0   
3   true
l3_agent_fanout_648459462b1c4b158f9cbd01e27452b0rabbit@ctl1.3.13923.0 
3   true

I stopped the vpn-service and the (dis)association works as expected. Later i 
start the service and the problem did not recurred.
Now we have to look if the vpn-service works ;)

Thanks so far.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to neutron in Ubuntu.
https://bugs.launchpad.net/bugs/1288841

Title:
  l3-agent (dis)associate floatingip only after restart

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1288841/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1288841] Re: l3-agent (dis)associate floatingip only after restart

2014-03-07 Thread Tino Schmeier
Hi,

i was able to solve our problem. The neutron-plugin-vpn-agent inherits
from the l3-agent !? Maybe this service also cosumes messages from the
l3-agent-queues.

l3_agentrabbit@ctl1.3.600.0   1   true
l3_agentrabbit@ctl1.3.13923.0 1   true
l3_agent.netnode1   rabbit@ctl1.3.600.0   2   true
l3_agent.netnode1   rabbit@ctl1.3.13923.0 2   true
l3_agent_fanout_439789853af24283bdb0bab8e5d11a42rabbit@ctl1.3.600.0   
3   true
l3_agent_fanout_648459462b1c4b158f9cbd01e27452b0rabbit@ctl1.3.13923.0 
3   true

I stopped the vpn-service and the (dis)association works as expected. Later i 
start the service and the problem did not recurred.
Now we have to look if the vpn-service works ;)

Thanks so far.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1288841

Title:
  l3-agent (dis)associate floatingip only after restart

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1288841/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1288841] Re: l3-agent (dis)associate floatingip only after restart

2014-03-06 Thread Tino Schmeier
** Project changed: neutron = neutron (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to neutron in Ubuntu.
https://bugs.launchpad.net/bugs/1288841

Title:
  l3-agent (dis)associate floatingip only after restart

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1288841/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1288841] Re: l3-agent (dis)associate floatingip only after restart

2014-03-06 Thread Tino Schmeier
** Project changed: neutron = neutron (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1288841

Title:
  l3-agent (dis)associate floatingip only after restart

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1288841/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-27 Thread Tino Schmeier
I tried to repeatedly reproduce the error. I removed the rw-permission
from abstractions/libvirt-qemu, reloaded the apparmor-profiles. I start
an new intstance an try to get an snapshot.

I have added some debug-output to the soruce code of /usr/lib/python2.7
/dist-packages/nova/virt/libvirt/driver.py to check if the directory
exists or not.

disk_delta = out_path + '.delta'
...
import os.path
disk_delta_exists = os.path.isfile(disk_delta)
LOG.debug(_(disk_delta_exists: %s) % disk_delta_exists)

domain.blockRebase(disk_path, disk_delta, 0,
   libvirt.VIR_DOMAIN_BLOCK_REBASE_COPY |
   libvirt.VIR_DOMAIN_BLOCK_REBASE_REUSE_EXT |
   libvirt.VIR_DOMAIN_BLOCK_REBASE_SHALLOW)

 LOG.debug(_(disk_delta_exists2: %s) % disk_delta_exists)


This leads to this debug-log:

2013-11-27 09:21:21.172 5568 DEBUG nova.virt.libvirt.driver 
[req-5bd8a420-2747-490f-a688-7468ffcd3c00 b6d2602f38914f20a0fec492fd1482e8 
32c4869a7fee41ecb953cd00
c3e71eac] disk_delta_exists: True _live_snapshot 
/usr/lib/python2.7/dist-packages/nova/virt/libvirt/driver.py:1484
2013-11-27 09:21:21.500 5568 INFO nova.virt.libvirt.driver 
[req-5bd8a420-2747-490f-a688-7468ffcd3c00 b6d2602f38914f20a0fec492fd1482e8 
32c4869a7fee41ecb953cd00c
3e71eac] [instance: df82e015-077c-48d7-8008-5b5f64efb6da] Snapshot extracted, 
beginning image upload
2013-11-27 09:21:21.500 5568 DEBUG nova.compute.manager 
[req-5bd8a420-2747-490f-a688-7468ffcd3c00 b6d2602f38914f20a0fec492fd1482e8 
32c4869a7fee41ecb953cd00c3e7
1eac] [instance: df82e015-077c-48d7-8008-5b5f64efb6da] Cleaning up image 
a2074ffb-e556-4263-9843-698867e79dae decorated_function 
/usr/lib/python2.7/dist-packag
es/nova/compute/manager.py:313
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] Traceback (most recent call last):
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/compute/
manager.py, line 309, in decorated_function
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] *args, **kwargs)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/compute/
manager.py, line 2293, in snapshot_instance
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] task_states.IMAGE_SNAPSHOT)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/compute/
manager.py, line 2324, in _snapshot_instance
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] update_task_state)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/virt/lib
virt/driver.py, line 1400, in snapshot
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] image_format)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/virt/lib
virt/driver.py, line 1489, in _live_snapshot
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] 
libvirt.VIR_DOMAIN_BLOCK_REBASE_SHALLOW)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/eventlet/tpoo
l.py, line 179, in doit
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] result = proxy_call(self._autowrap, 
f, *args, **kw
args)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/eventlet/tpoo
l.py, line 139, in proxy_call
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] rv = execute(f,*args,**kwargs)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/eventlet/tpoo
l.py, line 77, in tworker
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] rv = meth(*args,**kwargs)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/libvirt.py, 
line 646, in blockRebase
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] if ret == -1: raise 

[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-27 Thread Tino Schmeier
I tried to repeatedly reproduce the error. I removed the rw-permission
from abstractions/libvirt-qemu, reloaded the apparmor-profiles. I start
an new intstance an try to get an snapshot.

I have added some debug-output to the soruce code of /usr/lib/python2.7
/dist-packages/nova/virt/libvirt/driver.py to check if the directory
exists or not.

disk_delta = out_path + '.delta'
...
import os.path
disk_delta_exists = os.path.isfile(disk_delta)
LOG.debug(_(disk_delta_exists: %s) % disk_delta_exists)

domain.blockRebase(disk_path, disk_delta, 0,
   libvirt.VIR_DOMAIN_BLOCK_REBASE_COPY |
   libvirt.VIR_DOMAIN_BLOCK_REBASE_REUSE_EXT |
   libvirt.VIR_DOMAIN_BLOCK_REBASE_SHALLOW)

 LOG.debug(_(disk_delta_exists2: %s) % disk_delta_exists)


This leads to this debug-log:

2013-11-27 09:21:21.172 5568 DEBUG nova.virt.libvirt.driver 
[req-5bd8a420-2747-490f-a688-7468ffcd3c00 b6d2602f38914f20a0fec492fd1482e8 
32c4869a7fee41ecb953cd00
c3e71eac] disk_delta_exists: True _live_snapshot 
/usr/lib/python2.7/dist-packages/nova/virt/libvirt/driver.py:1484
2013-11-27 09:21:21.500 5568 INFO nova.virt.libvirt.driver 
[req-5bd8a420-2747-490f-a688-7468ffcd3c00 b6d2602f38914f20a0fec492fd1482e8 
32c4869a7fee41ecb953cd00c
3e71eac] [instance: df82e015-077c-48d7-8008-5b5f64efb6da] Snapshot extracted, 
beginning image upload
2013-11-27 09:21:21.500 5568 DEBUG nova.compute.manager 
[req-5bd8a420-2747-490f-a688-7468ffcd3c00 b6d2602f38914f20a0fec492fd1482e8 
32c4869a7fee41ecb953cd00c3e7
1eac] [instance: df82e015-077c-48d7-8008-5b5f64efb6da] Cleaning up image 
a2074ffb-e556-4263-9843-698867e79dae decorated_function 
/usr/lib/python2.7/dist-packag
es/nova/compute/manager.py:313
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] Traceback (most recent call last):
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/compute/
manager.py, line 309, in decorated_function
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] *args, **kwargs)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/compute/
manager.py, line 2293, in snapshot_instance
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] task_states.IMAGE_SNAPSHOT)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/compute/
manager.py, line 2324, in _snapshot_instance
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] update_task_state)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/virt/lib
virt/driver.py, line 1400, in snapshot
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] image_format)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/nova/virt/lib
virt/driver.py, line 1489, in _live_snapshot
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] 
libvirt.VIR_DOMAIN_BLOCK_REBASE_SHALLOW)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/eventlet/tpoo
l.py, line 179, in doit
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] result = proxy_call(self._autowrap, 
f, *args, **kw
args)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/eventlet/tpoo
l.py, line 139, in proxy_call
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] rv = execute(f,*args,**kwargs)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/eventlet/tpoo
l.py, line 77, in tworker
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] rv = meth(*args,**kwargs)
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da]   File 
/usr/lib/python2.7/dist-packages/libvirt.py, 
line 646, in blockRebase
2013-11-27 09:21:21.500 5568 TRACE nova.compute.manager [instance: 
df82e015-077c-48d7-8008-5b5f64efb6da] if ret == -1: raise 

[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
Another logentry points to the dynamic-profiles

[868559.234898] type=1400 audit(1384528406.841:246): apparmor=DENIED
operation=open parent=1 profile=libvirt-
7aa8a408-8ca0-46b3-8ab8-e89b334082d2
name=/var/lib/nova/instances/snapshots/tmpflKt2v/9f52ec7cb15d458488df1a1efad52d9c.delta
pid=7957 comm=qemu-system-x86 requested_mask=rw denied_mask=rw
fsuid=110 ouid=110

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
Hello, we have the same problem. I found logentries in syslog.

for example:

kernel: [866752.543340] type=1400 audit(1384526598.408:216):
apparmor=DENIED operation=open parent=28895
profile=/usr/lib/libvirt/virt-aa-helper
name=/var/lib/nova/instances/snapshots/tmpCqBRJZ/ac7c0eb07b474579a02775ce9cd4301c.delta
pid=17696 comm=virt-aa-helper requested_mask=r denied_mask=r
fsuid=0 ouid=109

Maybe the apparmor-profile /etc/apparmor.d/usr.lib.libvirt.virt-aa-
helper should be extended, or how does this work at runtime !?

/**.delta r, or something like that

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
I set the dynamic profile

aa-complain libvirt-7aa8a408-8ca0-46b3-8ab8-e89b334082d2

and shut-off and start the instance. After that i get an snapshot

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
I added the following line to abstractions/libvirt-qemu:

/var/lib/nova/instances/snapshots/*/*.delta rw,

This is not very secure but at the moment it work. Keep in mind, i have
to restart the kvm-process to apply the new/reloaded profile.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
Ok. I can reproduce the problem. If i enforce the profile and restart
the machine. The snapshot fails. The profile seems to be ok:

Before snapshot:
# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
  /var/log/libvirt/**/instance-001e.log w,
  /var/lib/libvirt/**/instance-001e.monitor rw,
  /var/run/libvirt/**/instance-001e.pid rwk,
  /run/libvirt/**/instance-001e.pid rwk,
  /var/run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  /run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/disk rw,
  /var/lib/nova/instances/_base/50c5b15302a6962ee9f93d2e70ce27fedce888ed r,
  # don't audit writes to readonly files
  deny /var/lib/nova/instances/_base/50c5b15302a6962ee9f93d2e70ce27fedce888ed 
w,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,

After snapshot:
# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
  /var/log/libvirt/**/instance-001e.log w,
  /var/lib/libvirt/**/instance-001e.monitor rw,
  /var/run/libvirt/**/instance-001e.pid rwk,
  /run/libvirt/**/instance-001e.pid rwk,
  /var/run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  /run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  
/var/lib/nova/instances/snapshots/tmpZzbTj8/9ce55aae608343b987a3b287da39cc59.delta
 rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,

Is this an racecondition? Maybe the profile is replaced/reloaded to late
in an parrallel task?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
Hello, we have the same problem. I found logentries in syslog.

for example:

kernel: [866752.543340] type=1400 audit(1384526598.408:216):
apparmor=DENIED operation=open parent=28895
profile=/usr/lib/libvirt/virt-aa-helper
name=/var/lib/nova/instances/snapshots/tmpCqBRJZ/ac7c0eb07b474579a02775ce9cd4301c.delta
pid=17696 comm=virt-aa-helper requested_mask=r denied_mask=r
fsuid=0 ouid=109

Maybe the apparmor-profile /etc/apparmor.d/usr.lib.libvirt.virt-aa-
helper should be extended, or how does this work at runtime !?

/**.delta r, or something like that

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
Another logentry points to the dynamic-profiles

[868559.234898] type=1400 audit(1384528406.841:246): apparmor=DENIED
operation=open parent=1 profile=libvirt-
7aa8a408-8ca0-46b3-8ab8-e89b334082d2
name=/var/lib/nova/instances/snapshots/tmpflKt2v/9f52ec7cb15d458488df1a1efad52d9c.delta
pid=7957 comm=qemu-system-x86 requested_mask=rw denied_mask=rw
fsuid=110 ouid=110

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
I set the dynamic profile

aa-complain libvirt-7aa8a408-8ca0-46b3-8ab8-e89b334082d2

and shut-off and start the instance. After that i get an snapshot

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
Ok. I can reproduce the problem. If i enforce the profile and restart
the machine. The snapshot fails. The profile seems to be ok:

Before snapshot:
# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
  /var/log/libvirt/**/instance-001e.log w,
  /var/lib/libvirt/**/instance-001e.monitor rw,
  /var/run/libvirt/**/instance-001e.pid rwk,
  /run/libvirt/**/instance-001e.pid rwk,
  /var/run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  /run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/disk rw,
  /var/lib/nova/instances/_base/50c5b15302a6962ee9f93d2e70ce27fedce888ed r,
  # don't audit writes to readonly files
  deny /var/lib/nova/instances/_base/50c5b15302a6962ee9f93d2e70ce27fedce888ed 
w,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,

After snapshot:
# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
  /var/log/libvirt/**/instance-001e.log w,
  /var/lib/libvirt/**/instance-001e.monitor rw,
  /var/run/libvirt/**/instance-001e.pid rwk,
  /run/libvirt/**/instance-001e.pid rwk,
  /var/run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  /run/libvirt/**/*.tunnelmigrate.dest.instance-001e rw,
  
/var/lib/nova/instances/snapshots/tmpZzbTj8/9ce55aae608343b987a3b287da39cc59.delta
 rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,
  /var/lib/nova/instances/7aa8a408-8ca0-46b3-8ab8-e89b334082d2/console.log rw,

Is this an racecondition? Maybe the profile is replaced/reloaded to late
in an parrallel task?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1244694] Re: Creating snapshot fails due to nonexistent temporary directory

2013-11-15 Thread Tino Schmeier
I added the following line to abstractions/libvirt-qemu:

/var/lib/nova/instances/snapshots/*/*.delta rw,

This is not very secure but at the moment it work. Keep in mind, i have
to restart the kvm-process to apply the new/reloaded profile.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1244694

Title:
  Creating snapshot fails due to nonexistent temporary directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1244694/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs