Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2017-09-10 Thread Yaniv Kaul 
On Thu, Aug 31, 2017 at 4:25 PM, Charles Kozler 
wrote:

> Also, to add to this, I figured all nodes need to "equal" in terms of
> selinux now so I went on node 1 and set selinux to permissive, rebooted,
> and then vdsmd wouldnt start which would show the host as nonresponsive in
> engine UI. Upon inspection of the log it was because of the missing sebool
> module. So I ran 'vdsm-tool configure --force' and then vdsmd started fine.
> Once doing this the host came up in the web UI
>
> Tested migrating a VM to it and it worked with no issue
>
> Hope this helps someone else who lands in this situation, however, I'd
> like to know what the expected environment of ovirt is. It would be helpful
> to have some checks along the way for this condition if its a blocker for
> functions
>

We do not test without SELinux enabled, and we know of issues when it's
only half disabled.
Y.


>
> On Thu, Aug 31, 2017 at 9:09 AM, Charles Kozler 
> wrote:
>
>> Hello,
>>
>> I recently installed ovirt cluster on 3 nodes and saw that I could only
>> migrate one way
>>
>> Reviewing the logs I found this
>>
>> 2017-08-31 09:04:30,685-0400 ERROR (migsrc/1eca84bd) [virt.vm]
>> (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') unsupported configuration:
>> Unable to find security driver for model selinux (migration:287)
>> 2017-08-31 09:04:30,698-0400 ERROR (migsrc/1eca84bd) [virt.vm]
>> (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') Failed to migrate
>> (migration:429)
>> Traceback (most recent call last):
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 411, in run
>> self._startUnderlyingMigration(time.time())
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 487, in _startUnderlyingMigration
>> self._perform_with_conv_schedule(duri, muri)
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 563, in _perform_with_conv_schedule
>> self._perform_migration(duri, muri)
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 529, in _perform_migration
>> self._vm._dom.migrateToURI3(duri, params, flags)
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line
>> 69, in f
>> ret = attr(*args, **kwargs)
>>   File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py",
>> line 123, in wrapper
>> ret = f(*args, **kwargs)
>>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 944, in
>> wrapper
>> return func(inst, *args, **kwargs)
>>   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1939, in
>> migrateToURI3
>> if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed',
>> dom=self)
>> libvirtError: unsupported configuration: Unable to find security driver
>> for model selinux
>>
>>
>> Which led me to this
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1013617
>>
>> I could migrate from node1 -> node 2 but not node2 -> node1, so obviously
>> I had something different with node 1. In this case, it was selinux
>>
>> On node 1 it is set to disabled but on node 2 it is set to permissive. I
>> am not sure how they got different but I wanted to update this list with
>> this finding
>>
>> Node 2 was setup directly via web UI in the engine with host -> new.
>> Perhaps I manually set node 1 to disabled
>>
>> Does ovirt / libvirt expect permissive? Or does it expect enforcing? Or
>> does it need to be both the same matching?
>>
>> thanks!
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2017-08-31 Thread Charles Kozler 
Also, to add to this, I figured all nodes need to "equal" in terms of
selinux now so I went on node 1 and set selinux to permissive, rebooted,
and then vdsmd wouldnt start which would show the host as nonresponsive in
engine UI. Upon inspection of the log it was because of the missing sebool
module. So I ran 'vdsm-tool configure --force' and then vdsmd started fine.
Once doing this the host came up in the web UI

Tested migrating a VM to it and it worked with no issue

Hope this helps someone else who lands in this situation, however, I'd like
to know what the expected environment of ovirt is. It would be helpful to
have some checks along the way for this condition if its a blocker for
functions

On Thu, Aug 31, 2017 at 9:09 AM, Charles Kozler 
wrote:

> Hello,
>
> I recently installed ovirt cluster on 3 nodes and saw that I could only
> migrate one way
>
> Reviewing the logs I found this
>
> 2017-08-31 09:04:30,685-0400 ERROR (migsrc/1eca84bd) [virt.vm]
> (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') unsupported configuration:
> Unable to find security driver for model selinux (migration:287)
> 2017-08-31 09:04:30,698-0400 ERROR (migsrc/1eca84bd) [virt.vm]
> (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') Failed to migrate
> (migration:429)
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
> 411, in run
> self._startUnderlyingMigration(time.time())
>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
> 487, in _startUnderlyingMigration
> self._perform_with_conv_schedule(duri, muri)
>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
> 563, in _perform_with_conv_schedule
> self._perform_migration(duri, muri)
>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
> 529, in _perform_migration
> self._vm._dom.migrateToURI3(duri, params, flags)
>   File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line
> 69, in f
> ret = attr(*args, **kwargs)
>   File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
> 123, in wrapper
> ret = f(*args, **kwargs)
>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 944, in
> wrapper
> return func(inst, *args, **kwargs)
>   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1939, in
> migrateToURI3
> if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed',
> dom=self)
> libvirtError: unsupported configuration: Unable to find security driver
> for model selinux
>
>
> Which led me to this
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1013617
>
> I could migrate from node1 -> node 2 but not node2 -> node1, so obviously
> I had something different with node 1. In this case, it was selinux
>
> On node 1 it is set to disabled but on node 2 it is set to permissive. I
> am not sure how they got different but I wanted to update this list with
> this finding
>
> Node 2 was setup directly via web UI in the engine with host -> new.
> Perhaps I manually set node 1 to disabled
>
> Does ovirt / libvirt expect permissive? Or does it expect enforcing? Or
> does it need to be both the same matching?
>
> thanks!
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2017-08-31 Thread Charles Kozler 
Hello,

I recently installed ovirt cluster on 3 nodes and saw that I could only
migrate one way

Reviewing the logs I found this

2017-08-31 09:04:30,685-0400 ERROR (migsrc/1eca84bd) [virt.vm]
(vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') unsupported configuration:
Unable to find security driver for model selinux (migration:287)
2017-08-31 09:04:30,698-0400 ERROR (migsrc/1eca84bd) [virt.vm]
(vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') Failed to migrate
(migration:429)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 411,
in run
self._startUnderlyingMigration(time.time())
  File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 487,
in _startUnderlyingMigration
self._perform_with_conv_schedule(duri, muri)
  File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 563,
in _perform_with_conv_schedule
self._perform_migration(duri, muri)
  File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 529,
in _perform_migration
self._vm._dom.migrateToURI3(duri, params, flags)
  File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 69,
in f
ret = attr(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
123, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 944, in
wrapper
return func(inst, *args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1939, in
migrateToURI3
if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed',
dom=self)
libvirtError: unsupported configuration: Unable to find security driver for
model selinux


Which led me to this

https://bugzilla.redhat.com/show_bug.cgi?id=1013617

I could migrate from node1 -> node 2 but not node2 -> node1, so obviously I
had something different with node 1. In this case, it was selinux

On node 1 it is set to disabled but on node 2 it is set to permissive. I am
not sure how they got different but I wanted to update this list with this
finding

Node 2 was setup directly via web UI in the engine with host -> new.
Perhaps I manually set node 1 to disabled

Does ovirt / libvirt expect permissive? Or does it expect enforcing? Or
does it need to be both the same matching?

thanks!
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-13 Thread Николаев Алексей 
  12.10.2016, 16:35, "Tom Gamull" :This should work but that is a little strange (I’m copying from the suggested action)-If you believe that qemu-kvm should be allowed getattr access on the a3f29de7-c6b9-410e-b635-9b3016da7ba2 lnk_file by default.Then you should report this as a bug.You can generate a local policy module to allow this access.Doallow this access for now by executing:# grep qemu-kvm /var/log/audit/audit.log | audit2allow -M mypol# semodule -i mypol.pp——— It looks like the qemu-kvm is having access issues on lnk files. Could you try the above action on node69-02 and see if that resolves the issue? It may be a bug.  Yes, this resolves issues with migration to node69-02 and from it. Thx!   On Oct 12, 2016, at 9:27 AM, Николаев Алексей  wrote:   12.10.2016, 15:53, "Tom Gamull" :Can you set it to permissive and runsealart -a /var/log/audit/audit.log  Added logs to attachment.  you may need to install selinux tools On Oct 12, 2016, at 4:49 AM, Краснобаев Михаил  wrote: Good day, had a similar problem, disabling selinux helped. Best,Mikhail 11.10.2016, 09:55, "Николаев Алексей" :Hi community! I have 4 hosts: 2 old servers and 2 new serversI have this error trying to migrate VM from new host to old one. Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 246, in run#012    self._startUnderlyingMigration(time.time())#012  File "/usr/share/vdsm/virt/migration.py", line 335, in _startUnderlyingMigration#012    None, maxBandwidth)#012  File "/usr/share/vdsm/virt/vm.py", line 703, in f#012    ret = attr(*args, **kwargs)#012  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012    ret = f(*args, **kwargs)#012  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in migrateToURI2#012    if ret == -1: raise libvirtError ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported configuration: Unable to find security driver for model selinux Migration from OLD host to another OLD host have not any problems.Migration from NEW host to another NEW host have not any problems.Migration from OLD host to NEW host have not any problems. Migration is not work only from NEW to OLD. oVirt Engine Version: 3.5.6.2-1.el6 All hosts:OS Version: RHEL - 7 - 2.1511.el7.centos.2.10Kernel Version: 3.10.0 - 327.36.1.el7.x86_64KVM Version: 2.3.0 - 29.1.el7LIBVIRT Version: libvirt-1.2.17-13.el7_2.5VDSM Version: vdsm-4.16.30-0.el7.centos Any ideas? Thx.,___Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users___Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-12 Thread Николаев Алексей 
  12.10.2016, 15:53, "Tom Gamull" :Can you set it to permissive and runsealart -a /var/log/audit/audit.log  Added logs to attachment.  you may need to install selinux tools On Oct 12, 2016, at 4:49 AM, Краснобаев Михаил  wrote: Good day, had a similar problem, disabling selinux helped. Best,Mikhail 11.10.2016, 09:55, "Николаев Алексей" :Hi community! I have 4 hosts: 2 old servers and 2 new serversI have this error trying to migrate VM from new host to old one. Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 246, in run#012    self._startUnderlyingMigration(time.time())#012  File "/usr/share/vdsm/virt/migration.py", line 335, in _startUnderlyingMigration#012    None, maxBandwidth)#012  File "/usr/share/vdsm/virt/vm.py", line 703, in f#012    ret = attr(*args, **kwargs)#012  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012    ret = f(*args, **kwargs)#012  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in migrateToURI2#012    if ret == -1: raise libvirtError ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported configuration: Unable to find security driver for model selinux Migration from OLD host to another OLD host have not any problems.Migration from NEW host to another NEW host have not any problems.Migration from OLD host to NEW host have not any problems. Migration is not work only from NEW to OLD. oVirt Engine Version: 3.5.6.2-1.el6 All hosts:OS Version: RHEL - 7 - 2.1511.el7.centos.2.10Kernel Version: 3.10.0 - 327.36.1.el7.x86_64KVM Version: 2.3.0 - 29.1.el7LIBVIRT Version: libvirt-1.2.17-13.el7_2.5VDSM Version: vdsm-4.16.30-0.el7.centos Any ideas? Thx.,___Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users___Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
found 18 alerts in /var/log/audit/audit.log


SELinux is preventing /usr/libexec/qemu-kvm from read access on the lnk_file 
2701cea5-6bb5-435d-9403-2343f43a914b.

*  Plugin catchall_labels (83.8 confidence) suggests   ***

If you want to allow qemu-kvm to have read access on the 
2701cea5-6bb5-435d-9403-2343f43a914b lnk_file
Then you need to change the label on 2701cea5-6bb5-435d-9403-2343f43a914b
Do
# semanage fcontext -a -t FILE_TYPE '2701cea5-6bb5-435d-9403-2343f43a914b'
where FILE_TYPE is one of the following: admin_home_t, alsa_etc_rw_t, 
alsa_home_t, antivirus_home_t, audio_home_t, auth_home_t, bin_t, boot_t, 
cache_home_t, cert_t, chrome_sandbox_home_t, cifs_t, config_home_t, cvs_home_t, 
data_home_t, dbus_home_t, device_t, devlog_t, etc_runtime_t, etc_t, 
fetchmail_home_t, fonts_cache_t, fonts_t, fusefs_t, gconf_home_t, 
git_user_content_t, gkeyringd_gnome_home_t, gnome_home_t, gpg_secret_t, 
gstreamer_home_t, home_bin_t, home_cert_t, home_root_t, httpd_user_content_t, 
httpd_user_htaccess_t, httpd_user_ra_content_t, httpd_user_rw_content_t, 
httpd_user_script_exec_t, icc_data_home_t, iceauth_home_t, irc_home_t, 
irc_tmp_t, irssi_home_t, kismet_home_t, krb5_home_t, ld_so_t, lib_t, 
local_login_home_t, locale_t, mail_home_rw_t, mail_home_t, man_cache_t, man_t, 
mandb_home_t, mnt_t, mozilla_home_t, mpd_home_t, mpd_user_data_t, 
mplayer_home_t, mysqld_home_t, net_conf_t, nfs_t, openshift_var_lib_t, 
polipo_cache_home_t, polipo_config_home_t, proc_t, procmail_home_t, 
public_content_rw_t, public_content_t, pulseaudio_home_t, qemu_var_run_t, 
rlogind_home_t, root_t, rpm_script_tmp_t, rssh_ro_t, rssh_rw_t, sandbox_file_t, 
screen_home_t, security_t, shell_exec_t, spamc_home_t, 
speech-dispatcher_home_t, src_t, ssh_home_t, svirt_home_t, svirt_image_t, 
svirt_tmp_t, svirt_tmpfs_t, sysfs_t, system_conf_t, system_db_t, 
systemd_home_t, telepathy_cache_home_t, telepathy_data_home_t, 
telepathy_gabble_cache_home_t, telepathy_logger_cache_home_t, 
telepathy_logger_data_home_t, telepathy_mission_control_cache_home_t, 
telepathy_mission_control_data_home_t, telepathy_mission_control_home_t, 
telepathy_sunshine_home_t, texlive_home_t, textrel_shlib_t, thumb_home_t, 
tmp_t, tvtime_home_t, uml_ro_t, uml_rw_t, usbfs_t, user_fonts_cache_t, 
user_fonts_config_t, user_fonts_t, user_home_dir_t, user_home_t, user_tmp_t, 
usr_t, var_run_t, var_t, virt_content_t, virt_etc_rw_t, virt_home_t, 
virt_image_t, virt_var_lib_t, virt_var_run_t, vmware_conf_t, vmware_file_

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-12 Thread Tom Gamull 
This should work but that is a little strange (I’m copying from the suggested 
action)
-
If you believe that qemu-kvm should be allowed getattr access on the 
a3f29de7-c6b9-410e-b635-9b3016da7ba2 lnk_file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep qemu-kvm /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
———

It looks like the qemu-kvm is having access issues on lnk files.

Could you try the above action on node69-02 and see if that resolves the issue? 
It may be a bug.

> On Oct 12, 2016, at 9:27 AM, Николаев Алексей  
> wrote:
> 
> 
> 
> 12.10.2016, 15:53, "Tom Gamull"  >:
>> Can you set it to permissive and run
>> sealart -a /var/log/audit/audit.log
> 
> 
> Added logs to attachment.
> 
> 
> 
> 
> 
>> 
>> you may need to install selinux tools
>> 
>>> On Oct 12, 2016, at 4:49 AM, Краснобаев Михаил >> > wrote:
>>> 
>>> Good day,
>>> 
>>> had a similar problem, disabling selinux helped.
>>> 
>>> Best,
>>> Mikhail
>>> 
>>> 11.10.2016, 09:55, "Николаев Алексей" >> >:
 Hi community!
 
 I have 4 hosts: 2 old servers and 2 new servers
 I have this error trying to migrate VM from new host to old one.
 
 Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to 
 find security driver for model selinux
 Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR 
 vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: 
 Unable to find security driver for model selinux
 Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR 
 vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to 
 migrate#012Traceback (most recent call last):#012  File 
 "/usr/share/vdsm/virt/migration.py", line 246, in run#012
 self._startUnderlyingMigration(time.time())#012  File 
 "/usr/share/vdsm/virt/migration.py", line 335, in 
 _startUnderlyingMigration#012None, maxBandwidth)#012  File 
 "/usr/share/vdsm/virt/vm.py", line 703, in f#012ret = attr(*args, 
 **kwargs)#012  File 
 "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in 
 wrapper#012ret = f(*args, **kwargs)#012  File 
 "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in 
 migrateToURI2#012if ret == -1: raise libvirtError 
 ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported 
 configuration: Unable to find security driver for model selinux
 
 Migration from OLD host to another OLD host have not any problems.
 Migration from NEW host to another NEW host have not any problems.
 Migration from OLD host to NEW host have not any problems.
 
 Migration is not work only from NEW to OLD.
 
 oVirt Engine Version: 3.5.6.2-1.el6
 
 All hosts:
 OS Version: RHEL - 7 - 2.1511.el7.centos.2.10
 Kernel Version: 3.10.0 - 327.36.1.el7.x86_64
 KVM Version: 2.3.0 - 29.1.el7
 LIBVIRT Version: libvirt-1.2.17-13.el7_2.5
 VDSM Version: vdsm-4.16.30-0.el7.centos
 
 Any ideas? Thx.
 ,
 ___
 Users mailing list
 Users@ovirt.org 
 http://lists.ovirt.org/mailman/listinfo/users 
 
>>> 
>>> 
>>> 
>>> ___
>>> Users mailing list
>>> Users@ovirt.org 
>>> http://lists.ovirt.org/mailman/listinfo/users 
>>> 



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-12 Thread Николаев Алексей 
Thx for answers! 1. Well, now i have SELinux mode: Enforcing on all hosts.Then trying to migrate VM from NEW host node69-06 to OLD host node69-02 (after selinux enabled on it) this errors appears: Oct 12 14:40:25 node69-06 journal: internal error: process exited while connecting to monitor: 2016-10-12T11:40:25.253691Z qemu-kvm: -drive file=/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/mages/decd47e0-5ab9-48ef-93be-32f07af93eb0/2701cea5-6bb5-435d-9403-2343f43a914b,if=none,id=drive-virtio-disk0,format=qcow2,serial=decd47e0-5ab9-48ef-93be-32f07af93eb0,cache=none,werror=stop,rerror=stop,aio=native: Could not open '/rhev/dta-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/images/decd47e0-5ab9-48ef-93be-32f07af93eb0/2701cea5-6bb5-435d-9403-2343f43a914b': Permission deniedOct 12 14:40:25 node69-06 journal: vdsm vm.Vm ERROR vmId=`01564034-b0c3-4caa-9250-3f27d069e0dd`::internal error: process exited while connecting to monitor: 2016-10-12T11:40:25.253691Z qemu-kvm: -drive file=/rhev/data-center/49ad3f2b-696-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/images/decd47e0-5ab9-48ef-93be-32f07af93eb0/2701cea5-6bb5-435d-9403-2343f43a914b,if=none,id=drive-virtio-disk0,format=qcow2,serial=decd47e0-5ab9-48ef-93be-32f07af93eb0,cache=noe,werror=stop,rerror=stop,aio=native: Could not open '/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/images/decd47e0-5ab9-48ef-93be-32f07af93eb0/2701cea5-6bb5-435d-9403-2343f43a914b': Permissin denied Oct 12 14:40:26 node69-06 journal: vdsm vm.Vm ERROR vmId=`01564034-b0c3-4caa-9250-3f27d069e0dd`::Failed to migrate#012Traceback (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 246, in run#012    self._startUnerlyingMigration(time.time())#012  File "/usr/share/vdsm/virt/migration.py", line 335, in _startUnderlyingMigration#012    None, maxBandwidth)#012  File "/usr/share/vdsm/virt/vm.py", line 703, in f#012    ret = attr(*args, **kwargs)#012 File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012    ret = f(*args, **kwargs)#012  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in migrateToURI2#012    if ret == -1: raise libirtError ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: internal error: process exited while connecting to monitor: 2016-10-12T11:40:25.253691Z qemu-kvm: -drive file=/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/caf230c-fa73-4022-9750-e5094669454d/images/decd47e0-5ab9-48ef-93be-32f07af93eb0/2701cea5-6bb5-435d-9403-2343f43a914b,if=none,id=drive-virtio-disk0,format=qcow2,serial=decd47e0-5ab9-48ef-93be-32f07af93eb0,cache=none,werror=stop,rerror=sto,aio=native: Could not open '/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/images/decd47e0-5ab9-48ef-93be-32f07af93eb0/2701cea5-6bb5-435d-9403-2343f43a914b': Permission deniedOct 12 14:45:32 node69-06 chronyd[1232]: Can't synchronise: no majority   2. And now with SELinux enabled on old host i can't start new VM on it. This error appear Oct 12 14:58:47 node69-02 journal: internal error: process exited while connecting to monitor: 2016-10-12T11:58:47.441275Z qemu-kvm: -drive file=/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/images/71f18680-1b93-4a2a-9bd1-95baeccf2d89/a3f29de7-c6b9-410e-b635-9b3016da7ba2,if=none,id=drive-virtio-disk0,format=qcow2,serial=71f18680-1b93-4a2a-9bd1-95baeccf2d89,cache=none,werror=stop,rerror=stop,aio=native: Could not open '/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/images/71f18680-1b93-4a2a-9bd1-95baeccf2d89/a3f29de7-c6b9-410e-b635-9b3016da7ba2': Permission deniedOct 12 14:58:47 node69-02 journal: vdsm vm.Vm ERROR vmId=`1a5de4ea-bd18-4170-b26d-1678a0cfe178`::The vm start process failed#012Traceback (most recent call last):#012  File "/usr/share/vdsm/virt/vm.py", line 2298, in _startUnderlyingVm#012    self._run()#012  File "/usr/share/vdsm/virt/vm.py", line 3363, in _run#012    self._connection.createXML(domxml, flags),#012  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012    ret = f(*args, **kwargs)#012  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 3611, in createXML#012    if ret is None:raise libvirtError('virDomainCreateXML() failed', conn=self)#012libvirtError: internal error: process exited while connecting to monitor: 2016-10-12T11:58:47.441275Z qemu-kvm: -drive file=/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e5094669454d/images/71f18680-1b93-4a2a-9bd1-95baeccf2d89/a3f29de7-c6b9-410e-b635-9b3016da7ba2,if=none,id=drive-virtio-disk0,format=qcow2,serial=71f18680-1b93-4a2a-9bd1-95baeccf2d89,cache=none,werror=stop,rerror=stop,aio=native: Could not open '/rhev/data-center/49ad3f2b-696e-4356-b44f-204aafbdda4e/dcaf230c-fa73-4022-9750-e509466945

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-12 Thread Tom Gamull 
Can you set it to permissive and run
sealart -a /var/log/audit/audit.log

you may need to install selinux tools

> On Oct 12, 2016, at 4:49 AM, Краснобаев Михаил  wrote:
> 
> Good day,
> 
> had a similar problem, disabling selinux helped.
> 
> Best,
> Mikhail
> 
> 11.10.2016, 09:55, "Николаев Алексей" :
>> Hi community!
>> 
>> I have 4 hosts: 2 old servers and 2 new servers
>> I have this error trying to migrate VM from new host to old one.
>> 
>> Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find 
>> security driver for model selinux
>> Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR 
>> vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: 
>> Unable to find security driver for model selinux
>> Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR 
>> vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback 
>> (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 
>> 246, in run#012self._startUnderlyingMigration(time.time())#012  File 
>> "/usr/share/vdsm/virt/migration.py", line 335, in 
>> _startUnderlyingMigration#012None, maxBandwidth)#012  File 
>> "/usr/share/vdsm/virt/vm.py", line 703, in f#012ret = attr(*args, 
>> **kwargs)#012  File 
>> "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in 
>> wrapper#012ret = f(*args, **kwargs)#012  File 
>> "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in 
>> migrateToURI2#012if ret == -1: raise libvirtError 
>> ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported 
>> configuration: Unable to find security driver for model selinux
>> 
>> Migration from OLD host to another OLD host have not any problems.
>> Migration from NEW host to another NEW host have not any problems.
>> Migration from OLD host to NEW host have not any problems.
>> 
>> Migration is not work only from NEW to OLD.
>> 
>> oVirt Engine Version: 3.5.6.2-1.el6
>> 
>> All hosts:
>> OS Version: RHEL - 7 - 2.1511.el7.centos.2.10
>> Kernel Version: 3.10.0 - 327.36.1.el7.x86_64
>> KVM Version: 2.3.0 - 29.1.el7
>> LIBVIRT Version: libvirt-1.2.17-13.el7_2.5
>> VDSM Version: vdsm-4.16.30-0.el7.centos
>> 
>> Any ideas? Thx.
>> ,
>> ___
>> Users mailing list
>> Users@ovirt.org 
>> http://lists.ovirt.org/mailman/listinfo/users 
>> 
> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-12 Thread Краснобаев Михаил 
Good day, had a similar problem, disabling selinux helped. Best,Mikhail 11.10.2016, 09:55, "Николаев Алексей" :Hi community! I have 4 hosts: 2 old servers and 2 new serversI have this error trying to migrate VM from new host to old one. Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 246, in run#012    self._startUnderlyingMigration(time.time())#012  File "/usr/share/vdsm/virt/migration.py", line 335, in _startUnderlyingMigration#012    None, maxBandwidth)#012  File "/usr/share/vdsm/virt/vm.py", line 703, in f#012    ret = attr(*args, **kwargs)#012  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012    ret = f(*args, **kwargs)#012  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in migrateToURI2#012    if ret == -1: raise libvirtError ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported configuration: Unable to find security driver for model selinux Migration from OLD host to another OLD host have not any problems.Migration from NEW host to another NEW host have not any problems.Migration from OLD host to NEW host have not any problems. Migration is not work only from NEW to OLD. oVirt Engine Version: 3.5.6.2-1.el6 All hosts:OS Version: RHEL - 7 - 2.1511.el7.centos.2.10Kernel Version: 3.10.0 - 327.36.1.el7.x86_64KVM Version: 2.3.0 - 29.1.el7LIBVIRT Version: libvirt-1.2.17-13.el7_2.5VDSM Version: vdsm-4.16.30-0.el7.centos Any ideas? Thx.,___Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-11 Thread Michal Skrivanek 

> On 11 Oct 2016, at 08:49, Николаев Алексей  
> wrote:
> 
> Hi community!
>  
> I have 4 hosts: 2 old servers and 2 new servers
> I have this error trying to migrate VM from new host to old one.
>  
> Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find 
> security driver for model selinux
> Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR 
> vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: 
> Unable to find security driver for model selinux
> Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR 
> vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback 
> (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 
> 246, in run#012self._startUnderlyingMigration(time.time())#012  File 
> "/usr/share/vdsm/virt/migration.py", line 335, in 
> _startUnderlyingMigration#012None, maxBandwidth)#012  File 
> "/usr/share/vdsm/virt/vm.py", line 703, in f#012ret = attr(*args, 
> **kwargs)#012  File 
> "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in 
> wrapper#012ret = f(*args, **kwargs)#012  File 
> "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in 
> migrateToURI2#012if ret == -1: raise libvirtError 
> ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported 
> configuration: Unable to find security driver for model selinux
>  
> Migration from OLD host to another OLD host have not any problems.
> Migration from NEW host to another NEW host have not any problems.
> Migration from OLD host to NEW host have not any problems.
>  
> Migration is not work only from NEW to OLD.

You likely have different SELinux status on each host. Make sure it’s enabled 
on both sides (or disabled on both, but that’s discouraged)

Thanks,
michal

>  
> oVirt Engine Version: 3.5.6.2-1.el6
>  
> All hosts:
> OS Version: RHEL - 7 - 2.1511.el7.centos.2.10
> Kernel Version: 3.10.0 - 327.36.1.el7.x86_64
> KVM Version: 2.3.0 - 29.1.el7
> LIBVIRT Version: libvirt-1.2.17-13.el7_2.5
> VDSM Version: vdsm-4.16.30-0.el7.centos
>  
> Any ideas? Thx.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2016-10-10 Thread Николаев Алексей 
Hi community! I have 4 hosts: 2 old servers and 2 new serversI have this error trying to migrate VM from new host to old one. Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: Unable to find security driver for model selinuxOct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 246, in run#012    self._startUnderlyingMigration(time.time())#012  File "/usr/share/vdsm/virt/migration.py", line 335, in _startUnderlyingMigration#012    None, maxBandwidth)#012  File "/usr/share/vdsm/virt/vm.py", line 703, in f#012    ret = attr(*args, **kwargs)#012  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012    ret = f(*args, **kwargs)#012  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in migrateToURI2#012    if ret == -1: raise libvirtError ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported configuration: Unable to find security driver for model selinux Migration from OLD host to another OLD host have not any problems.Migration from NEW host to another NEW host have not any problems.Migration from OLD host to NEW host have not any problems. Migration is not work only from NEW to OLD. oVirt Engine Version: 3.5.6.2-1.el6 All hosts:OS Version: RHEL - 7 - 2.1511.el7.centos.2.10Kernel Version: 3.10.0 - 327.36.1.el7.x86_64KVM Version: 2.3.0 - 29.1.el7LIBVIRT Version: libvirt-1.2.17-13.el7_2.5VDSM Version: vdsm-4.16.30-0.el7.centos Any ideas? Thx.___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users