Hello Amit. Thanks for you reply.

This is the content of /etc/sudoers.d/50_vdsm file (it's the default generated 
by ovirt install):

Cmnd_Alias VDSM_LIFECYCLE = \
    /usr/sbin/dmidecode -s system-uuid
Cmnd_Alias VDSM_STORAGE = \
    /usr/sbin/fsck -p *, \
    /usr/sbin/tune2fs -j *, \
    /usr/sbin/mkfs -q -j *, \
    /usr/bin/kill, \
    /usr/bin/chown vdsm\:qemu *, \
    /usr/bin/chown vdsm\:kvm *, \
    /usr/sbin/iscsiadm *, \
    /usr/sbin/lvm, \
    /usr/bin/setsid /usr/bin/ionice -c ? -n ? /usr/bin/su vdsm -s /bin/sh -c 
/usr/libexec/vdsm/spmprotect.sh*, \
    /usr/sbin/service vdsmd *, \
    /usr/sbin/reboot -f

vdsm  ALL=(ALL) NOPASSWD: VDSM_LIFECYCLE, VDSM_STORAGE
Defaults:vdsm !requiretty
Defaults:vdsm !syslog

I was pretty curious about the format of the line "/usr/bin/setsid 
/usr/bin/ionice -c ? -n ? /usr/bin/su vdsm -s /bin/sh -c 
/usr/libexec/vdsm/spmprotect.sh*", but looking at source code 
(https://github.com/oVirt/vdsm/blob/master/static/etc/sudoers.d/50_vdsm.in) it 
looks to be just like that. If I need to change anything on this file, it looks 
that there's some bug on vdsm package.

In other hand, I watched the /var/log/secure file while I was trying to attach 
a Datacenter to ISO Domain and it didn't showed anything new, meaning that the 
referred "ionice" command was not executed via sudo by vdsm. If it's is true, 
that could explain the "permission denied" error.

About the NFS export, it is exactly the same as parameters as Data Domain 
exports (which works perfectly):

exportfs -v
/storage/vm     
172.31.17.0/24(sync,wdelay,hide,no_subtree_check,sec=sys,rw,secure,root_squash,no_all_squash)
/storage/vm     
172.31.48.0/24(sync,wdelay,hide,no_subtree_check,sec=sys,rw,secure,root_squash,no_all_squash)
/storage/iso    
<world>(sync,wdelay,hide,no_subtree_check,sec=sys,rw,secure,root_squash,no_all_squash)


What else do I need to check?
Thanks
Ivan
_______________________________________________
Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/[email protected]/message/BPEKZ4JEDMLLMDXCJWX5IOIKYIU5NRVF/

Reply via email to