** Description changed:
+ [Impact]
+
+ * A rather old bug which could have been solved much sooner. Attr support
+ was disabled way back in time for triggering some test issues. Since
+ then the test issues and also many more rough edges of ATTR support have
+ been fixed.
+
+ * This change shall enable attr support again which allows libvirt to
+ remember and carry ownership information on image files as extended
+ attributes.
+
+ [Test Case]
+
+ * Prepare a guest that you can start/stop e.g. with uvtool-libvirt
+ * Own the image by anything other than root:root
+ * Start the guest (ownership will change to the user the guest runs as)
+ * Stop the guest:
+ - fail: will set root:root to the images effectively stealing them
+ - correct: remembers the old ownership and restores that
+
+ [Regression Potential]
+
+ * This mostly influences DAC control of files, which is exactly what we
+ want to fix. There are a few lifecycle tasks which now also have to
+ carry labels e.g. on any image handling. I don't expect regressions, but
+ this is the place to look out for.
+ * The behavior on File systems unable to XATTR matches that of the
+ formerly disable feature, so on those cases where it has no positive
+ change it will have no change at all.
+
+ [Other Info]
+
+ * Technically we could backport this into all releases, but while I find
+ it right to fix in Focal OTOH Bionic and even more so Xenial really are
+ even "more stable" after their time in the field. Users either have
+ adapted already or even rely/expect the semi-broken behavior. Therefore
+ this is only targetting Focal intentionally.
+
+ * (very) worst case one can set the FS the images are on to "nouser_xattr"
+ as mount option.
+
+
+ ---
+
Natty (and it was also the same on Maverick, IIRC).
When you assign an ISO to a VM, libvirt will take over onwership of the
ISO. This creates problems if the ISO is updated.
For example, I am daily updating the Natty server ISOs, and running
tests on them via KVM (all automated). The ISO updates will fail because
libvirt chowns them.
I see no reason for this: libvirt only needs the ISO as input.
WORKAROUND:
edit /etc/libvirt/qemu.conf, change 'dynamic_ownership = 0', restart
qemu/KVM.
** Also affects: libvirt (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: libvirt (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: libvirt (Ubuntu Focal)
Status: New => Triaged
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/691590
Title:
libvirt restore exactly the old ownership of images
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/691590/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
