<html>
<body>
<br>
<br>
On 04/09/2015 10:12 AM, Sandro Bonazzola wrote: <br>
<font color="#000000">> Il 09/04/2015 10:03, Vinzenz Feenstra ha scritto: </font><br>
<font color="#000000">>> On 04/09/2015 09:55 AM, Jorick Astrego wrote: </font><br>
<font color="#000000">>>> </font><br>
<font color="#000000">>>> On 04/09/2015 08:56 AM, Vinzenz Feenstra wrote: </font><br>
<font color="#000000">>>>> On 04/08/2015 04:34 PM, Jorick Astrego wrote: </font><br>
<font color="#000000">>>>>> Hi, </font><br>
<font color="#000000">>>>> Hi, </font><br>
<font color="#000000">>>>>> Testing 3.5.2rc3, I see AVC denied messages for the ovrit-guest agent (installed through cloud-init). </font><br>
<font color="#000000">>>>>> </font><br>
<font color="#000000">>>>>> type=AVC msg=audit(1428510418.333:142): avc: denied { read } for pid=1113 comm="ovirt-guest-age" name="online" dev=sysfs ino=23 </font><br>
<font color="#000000">>>>>> scontext=system_u:system_r:rhev_agentd_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file </font><br>
<font color="#000000">>>>>> type=AVC msg=audit(1428510418.333:142): avc: denied { open } for pid=1113 comm="ovirt-guest-age" name="online" dev=sysfs ino=23 </font><br>
<font color="#000000">>>>>> scontext=system_u:system_r:rhev_agentd_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file </font><br>
<font color="#000000">>>>>> type=SYSCALL msg=audit(1428510418.333:142): arch=c000003e syscall=2 success=yes exit=6 a0=7f8a655612b8 a1=80000 a2=2803ff a3=0 items=0 ppid=1 </font><br>
<font color="#000000">>>>>> pid=1113 auid=4294967295 uid=175 gid=175 euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175 tty=(none) ses=4294967295 </font><br>
<font color="#000000">>>>>> comm="ovirt-guest-age" exe="/usr/bin/python" subj=system_u:system_r:rhev_agentd_t:s0 key=(null) </font><br>
<font color="#000000">>>>>> </font><br>
<font color="#000000">>>>>> And when I check the rpm I see: </font><br>
<font color="#000000">>>>>> </font><br>
<font color="#000000">>>>>> rpm -qa|grep ovirt </font><br>
<font color="#000000">>>>>> ovirt-release-el6-10.0.1-3.noarch </font><br>
<font color="#000000">>>>>> ovirt-guest-agent-1.0.8-1.el6.noarch </font><br>
<font color="#000000">>>>>> </font><br>
<font color="#000000">>>>> Well the latest guest agent is always available on epel for el5/6/7 and for fedora in the fedora repos I am not sure why it's not available in the </font><br>
<font color="#000000">>>>> public ovirt repositories, however that was somehow always a problem with ovirt releases, but I recommend anyway to use epel for the ovirt guest </font><br>
<font color="#000000">>>>> agent due to the fact that I am releasing the guest agent always to epel and it will get updated from there. </font><br>
<font color="#000000">>>>> </font><br>
<font color="#000000">>>>> Please also note that the repo location has changed. ovirt-3.5 for el6 is now here: <a href="http://resources.ovirt.org/pub/ovirt-3.5/rpm/el6/">http://resources.ovirt.org/pub/ovirt-3.5/rpm/el6/</a> </font><br>
<font color="#000000">>>>> </font><br>
<font color="#000000">>>>> However what I don't know, is how the 3.3.3 repository got installed for you, I am not sure that this was done by the bare 'cloud-init', that might </font><br>
<font color="#000000">>>>> be specific to your cloud init configuration. </font><br>
<font color="#000000">>>> Well that can't be specific. I completely wipe the test environment every couple weeks and just provisioned a completely fresh ovirt 3.5.2rc3 install. </font><br>
<font color="#000000">>>> </font><br>
<font color="#000000">>>> Normally I don't use cloud-init as we have foreman, but I was testing it. The only thing I did was, create new VM and checked the cloud-init/sysprep </font><br>
<font color="#000000">>>> checkbox. The rest oVirt did automatically. </font><br>
<font color="#000000">>>> </font><br>
<font color="#000000">>>> What I think is happening is that the CentOS 6.5 image in the ovirt-image-repository glance provider is outdated. I used this as template for quick </font><br>
<font color="#000000">>>> testing. </font><br>
<font color="#000000">>>> </font><br>
<font color="#000000">>>> Does anyone know who maintains these images? </font><br>
<font color="#000000">>> Sandro, do you by any chance know who does? </font><br>
<font color="#000000">> Nobody maintains actively the images in the glance repository. </font><br>
<font color="#000000">> I raised the issue a while ago[1] and proposed as "get involved" task to provide updated images[2] for the glance repository. </font><br>
<font color="#000000">> Once new images will be available, Oved can upload them into the glance repository. </font><br>
<font color="#000000">> </font><br>
<font color="#000000">> [1] <a href="http://lists.ovirt.org/pipermail/devel/2015-April/010193.html">http://lists.ovirt.org/pipermail/devel/2015-April/010193.html</a> </font><br>
<font color="#000000">> [2] <a href="http://lists.ovirt.org/pipermail/devel/2015-April/010199.html">http://lists.ovirt.org/pipermail/devel/2015-April/010199.html</a> </font><br>
<font color="#000000">> </font><br>
<font color="#000000">> </font><br>
Ok, I will schedule some time to update them as I had been planning to <br>
"get involved" some more ;-) <br>
<br>
Will upload somewhere next week. <br>
<br>
<br>
<BR />
<BR />
<b style="color:#604c78"></b><br><span style="color:#604c78;"><font color="000000"><span style="mso-fareast-language:en-gb;" lang="NL">Met vriendelijke groet, With kind regards,<br><br></span>Jorick Astrego</font></span><b style="color:#604c78"><br><br>Netbulae Virtualization Experts </b><br><hr style="border:none;border-top:1px solid #ccc;"><table style="width: 522px"><tbody><tr><td style="width: 130px;font-size: 10px">Tel: 053 20 30 270</td> <td style="width: 130px;font-size: 10px">info@netbulae.eu</td> <td style="width: 130px;font-size: 10px">Staalsteden 4-3A</td> <td style="width: 130px;font-size: 10px">KvK 08198180</td></tr><tr> <td style="width: 130px;font-size: 10px">Fax: 053 20 30 271</td> <td style="width: 130px;font-size: 10px">www.netbulae.eu</td> <td style="width: 130px;font-size: 10px">7547 TA Enschede</td> <td style="width: 130px;font-size: 10px">BTW NL821234584B01</td></tr></tbody></table><br><hr style="border:none;border-top:1px solid #ccc;"><BR />
</body>
</html>