Hello.

I'm trying to deploy OpenNebula 2.2.1 cluster with following
configuration:

1) `cf` (cloud front-end) node — oned + sunstone.
2) `one1` node — worker host using im_kvm, vmm_kvm, tm_ssh (host is
perfectly monitored by oned @ cf).

On one1 node I have Scientific Linux 6.1 installed with SELinux working
in enforcing targeted mode.

When I've tried to execute the sample VM with ttylinux
( http://opennebula.org/documentation:rel2.2:vmg ), my ttylinux VM fails
because of permission denied to disk image (the relevant oned.log
fragment is attached).

I guess, that is the trouble in security context so I've tried to modify
the tm_clone.sh script with chcon (like this:
http://equivocation.org/node/122 ), but nothing happened (the modified
script with `ls -laZR` output are attached, too).

Please, tell what should I do to make me, OpenNebula & SELinux happy
togeter.

Thanks.
-- 
Dmitry A. Ustalov
http://balcone.eveel.ru/
icq:1996961 xmpp:[email protected]
# ls -laZR
.:
drwxrwxr-x. oneadmin oneadmin unconfined_u:object_r:user_home_t:s0 .
drwxrwxr-x. oneadmin oneadmin unconfined_u:object_r:user_home_t:s0 ..
drwxrwxr-x. oneadmin oneadmin unconfined_u:object_r:user_home_t:s0 images

./images:
drwxrwxr-x. oneadmin oneadmin unconfined_u:object_r:user_home_t:s0 .
drwxrwxr-x. oneadmin oneadmin unconfined_u:object_r:user_home_t:s0 ..
-rw-rw-r--. oneadmin oneadmin unconfined_u:object_r:user_home_t:s0 deployment.0
-rw-rw-rw-. root     root     system_u:object_r:var_t:s0       disk.0

Sun Sep 11 19:46:12 2011 [ReM][D]: VirtualMachinePoolInfo method invoked
Sun Sep 11 19:46:12 2011 [ReM][D]: VirtualMachineDeploy invoked
Sun Sep 11 19:46:12 2011 [DiM][D]: Deploying VM 19
Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: cf:/srv/cloud/one/one-templates/ttylinux.img 195.19.133.24:/srv/cloud/one/var//19/images/disk.0

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: DST: /srv/cloud/one/var//19/images/disk.0

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: Creating directory /srv/cloud/one/var//19/images

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: Executed "/usr/bin/ssh 195.19.133.24 mkdir -p /srv/cloud/one/var//19/images".

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: Cloning cf:/srv/cloud/one/one-templates/ttylinux.img

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: Executed "/usr/bin/scp cf:/srv/cloud/one/one-templates/ttylinux.img 195.19.133.24:/srv/cloud/one/var//19/images/disk.0".

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: Executed "/usr/bin/ssh 195.19.133.24 chcon -h -u system_u -r object_r -t virt_image_t /srv/cloud/one/var//19/images/disk.0".

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: LOG - 19 tm_clone.sh: Executed "/usr/bin/ssh 195.19.133.24 chmod a+rw /srv/cloud/one/var//19/images/disk.0".

Sun Sep 11 19:46:17 2011 [TM][D]: Message received: TRANSFER SUCCESS 19 -

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: LOG - 19 Command execution fail: 'if [ -x "/var/tmp/one/vmm/kvm/deploy" ]; then /var/tmp/one/vmm/kvm/deploy /srv/cloud/one/var//19/images/deployment.0; else                              exit 42; fi'

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: LOG - 19 STDERR follows.

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: LOG - 19 error: Failed to create domain from /srv/cloud/one/var//19/images/deployment.0

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: LOG - 19 error: internal error process exited while connecting to monitor: qemu: could not open disk image /srv/cloud/one/var//19/images/disk.0: Permission denied

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: LOG - 19 

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: LOG - 19 ExitCode: 255

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: DEPLOY FAILURE 19 error: Failed to create domain from /srv/cloud/one/var//19/images/deployment.0

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: error: internal error process exited while connecting to monitor: qemu: could not open disk image /srv/cloud/one/var//19/images/disk.0: Permission denied

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: 

Sun Sep 11 19:46:20 2011 [VMM][D]: Message received: ExitCode: 255

Sun Sep 11 19:46:21 2011 [TM][D]: Message received: LOG - 19 tm_delete.sh: Deleting /srv/cloud/one/var//19/images

Sun Sep 11 19:46:21 2011 [TM][D]: Message received: TRANSFER SUCCESS 19 -

Attachment: tm_clone.sh
Description: application/shellscript

_______________________________________________
Users mailing list
[email protected]
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org

Reply via email to