From didi at redhat.com Mon Dec 23 12:38:46 2013 Content-Type: multipart/mixed; boundary="===============6281348881604641304==" MIME-Version: 1.0 From: Yedidyah Bar David To: users at ovirt.org Subject: Re: [Users] ISO datastore, permission denied Date: Mon, 23 Dec 2013 12:37:37 -0500 Message-ID: <1426329885.615158.1387820257252.JavaMail.root@redhat.com> In-Reply-To: 52B86DF8.8080405@556nato.com --===============6281348881604641304== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable ------=3D_Part_615157_1219040895.1387820257251 Content-Type: text/plain; charset=3Dutf-8 Content-Transfer-Encoding: 7bit Hi, = ----- Original Message ----- > From: "Blaster" > To: "Sander Grendelman" > Cc: users(a)ovirt.org > Sent: Monday, December 23, 2013 7:08:08 PM > Subject: Re: [Users] ISO datastore, permission denied > On 12/23/2013 10:07 AM, Sander Grendelman wrote: > > On Mon, Dec 23, 2013 at 4:56 PM, Blaster < Blaster(a)556nato.com > wrot= e: > = > > > My NFS server is Solaris 11.1, ZFS storage. > > = > = > > I'm a bit confused now, is the NFS server linux or Solaris? ZFS or BTRF= S? > = > ISOs are on a Solaris 11.1 NFS server. > > > If I copy the ISO directly to the directory it works fine. What am I > > > missing? > > = > = > > Maybe selinux labeling? > = > Yup! > > What happens if you (temporarily!) set selinux to permissive with > > "setenforce > > 0"? > = > That fixed it....What's going on? I can su - vdsm and do an md5sum on all= the > ISOs. Why can't they be accessed via ovirt? Seems similar to https://bugzilla.redhat.com/1023970 although it's opened o= n hosted-engine. = > I have a local datastore on the same volume in another directory tree tha= t's > working just fine. > Why is selinux allowing local access, but not NFS via symlink? getsebool > shows virt_use_nfs --> on. What other label do I need? > Thanks for the help! > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users -- = Didi = ------=3D_Part_615157_1219040895.1387820257251 Content-Type: text/html; charset=3Dutf-8 Content-Transfer-Encoding: 7bit
Hi,

Fr= om: "Blaster" <Blaster(a)556nato.com>
To: "Sander Grend= elman" <sander(a)grendelman.com>
Cc: users(a)ovirt.org
<= b>Sent: Monday, December 23, 2013 7:08:08 PM
Subject: Re: [Us= ers] ISO datastore, permission denied

On 12/23/2013 10:07 AM, Sander Grendelman wrote:
On Mon, Dec 23, 2013 at 4= :56 PM, Blaster <Blaster(a)556nato.com> wrote:

My NFS server is Solaris 11.1, ZFS storage.
I'm a bit confused now, is the NFS server linux or Solaris?  ZFS or BTRFS?

ISOs are on a Solaris 11.1 NFS server.


If I copy the ISO directly to the directory it works fine.   What am I missing?
=

Maybe selinux labeling?

Yup!

What happens if you (temporarily!) se= t selinux to permissive with "setenforce 0"?

That fixed it....What's going on?  I can su - vdsm and do an md5sum on all the ISOs.  Why can't they be accessed via ovirt?

Seems similar to https://bugzilla.redhat.com/1023970&nbs= p;although it's opened on hosted-engine.



I have a local datastore on the same volume in another directory tree that's working just fine.

Why is selinux allowing local access, but not NFS via symlink?  getsebool shows virt_use_nfs --> on.  What other label do I nee= d?

Thanks for the help! 


________________________________= _______________
Users mailing list
Users(a)ovirt.org
http://lists.= ovirt.org/mailman/listinfo/users


--
Didi
------=3D_Part_615157_1219040895.1387820257251-- --===============6281348881604641304== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" LS0tLS0tPV9QYXJ0XzYxNTE1N18xMjE5MDQwODk1LjEzODc4MjAyNTcyNTEKQ29udGVudC1UeXBl OiB0ZXh0L3BsYWluOyBjaGFyc2V0PXV0Zi04CkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IDdi aXQKCkhpLCAKCi0tLS0tIE9yaWdpbmFsIE1lc3NhZ2UgLS0tLS0KCj4gRnJvbTogIkJsYXN0ZXIi IDxCbGFzdGVyQDU1Nm5hdG8uY29tPgo+IFRvOiAiU2FuZGVyIEdyZW5kZWxtYW4iIDxzYW5kZXJA Z3JlbmRlbG1hbi5jb20+Cj4gQ2M6IHVzZXJzQG92aXJ0Lm9yZwo+IFNlbnQ6IE1vbmRheSwgRGVj ZW1iZXIgMjMsIDIwMTMgNzowODowOCBQTQo+IFN1YmplY3Q6IFJlOiBbVXNlcnNdIElTTyBkYXRh c3RvcmUsIHBlcm1pc3Npb24gZGVuaWVkCgo+IE9uIDEyLzIzLzIwMTMgMTA6MDcgQU0sIFNhbmRl ciBHcmVuZGVsbWFuIHdyb3RlOgoKPiA+IE9uIE1vbiwgRGVjIDIzLCAyMDEzIGF0IDQ6NTYgUE0s IEJsYXN0ZXIgPCBCbGFzdGVyQDU1Nm5hdG8uY29tID4gd3JvdGU6Cj4gCgo+ID4gPiBNeSBORlMg c2VydmVyIGlzIFNvbGFyaXMgMTEuMSwgWkZTIHN0b3JhZ2UuCj4gPiAKPiAKCj4gPiBJJ20gYSBi aXQgY29uZnVzZWQgbm93LCBpcyB0aGUgTkZTIHNlcnZlciBsaW51eCBvciBTb2xhcmlzPyBaRlMg b3IgQlRSRlM/Cj4gCgo+IElTT3MgYXJlIG9uIGEgU29sYXJpcyAxMS4xIE5GUyBzZXJ2ZXIuCgo+ ID4gPiBJZiBJIGNvcHkgdGhlIElTTyBkaXJlY3RseSB0byB0aGUgZGlyZWN0b3J5IGl0IHdvcmtz IGZpbmUuIFdoYXQgYW0gSQo+ID4gPiBtaXNzaW5nPwo+ID4gCj4gCgo+ID4gTWF5YmUgc2VsaW51 eCBsYWJlbGluZz8KPiAKCj4gWXVwIQoKPiA+IFdoYXQgaGFwcGVucyBpZiB5b3UgKHRlbXBvcmFy aWx5ISkgc2V0IHNlbGludXggdG8gcGVybWlzc2l2ZSB3aXRoCj4gPiAic2V0ZW5mb3JjZQo+ID4g MCI/Cj4gCgo+IFRoYXQgZml4ZWQgaXQuLi4uV2hhdCdzIGdvaW5nIG9uPyBJIGNhbiBzdSAtIHZk c20gYW5kIGRvIGFuIG1kNXN1bSBvbiBhbGwgdGhlCj4gSVNPcy4gV2h5IGNhbid0IHRoZXkgYmUg YWNjZXNzZWQgdmlhIG92aXJ0PwpTZWVtcyBzaW1pbGFyIHRvIGh0dHBzOi8vYnVnemlsbGEucmVk aGF0LmNvbS8xMDIzOTcwIGFsdGhvdWdoIGl0J3Mgb3BlbmVkIG9uIGhvc3RlZC1lbmdpbmUuIAoK PiBJIGhhdmUgYSBsb2NhbCBkYXRhc3RvcmUgb24gdGhlIHNhbWUgdm9sdW1lIGluIGFub3RoZXIg ZGlyZWN0b3J5IHRyZWUgdGhhdCdzCj4gd29ya2luZyBqdXN0IGZpbmUuCgo+IFdoeSBpcyBzZWxp bnV4IGFsbG93aW5nIGxvY2FsIGFjY2VzcywgYnV0IG5vdCBORlMgdmlhIHN5bWxpbms/IGdldHNl Ym9vbAo+IHNob3dzIHZpcnRfdXNlX25mcyAtLT4gb24uIFdoYXQgb3RoZXIgbGFiZWwgZG8gSSBu ZWVkPwoKPiBUaGFua3MgZm9yIHRoZSBoZWxwIQoKPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwo+IFVzZXJzIG1haWxpbmcgbGlzdAo+IFVzZXJzQG92aXJ0 Lm9yZwo+IGh0dHA6Ly9saXN0cy5vdmlydC5vcmcvbWFpbG1hbi9saXN0aW5mby91c2VycwoKLS0g CkRpZGkgCgotLS0tLS09X1BhcnRfNjE1MTU3XzEyMTkwNDA4OTUuMTM4NzgyMDI1NzI1MQpDb250 ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD11dGYtOApDb250ZW50LVRyYW5zZmVyLUVuY29k aW5nOiA3Yml0Cgo8aHRtbD48Ym9keT48ZGl2IHN0eWxlPSJmb250LWZhbWlseTogdGltZXMgbmV3 IHJvbWFuLCBuZXcgeW9yaywgdGltZXMsIHNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiAj MDAwMDAwIj48ZGl2PkhpLDwvZGl2PjxkaXY+PGJyPjwvZGl2PjxociBpZD0iendjaHIiPjxibG9j a3F1b3RlIHN0eWxlPSJib3JkZXItbGVmdDoycHggc29saWQgIzEwMTBGRjttYXJnaW4tbGVmdDo1 cHg7cGFkZGluZy1sZWZ0OjVweDtjb2xvcjojMDAwO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0 eWxlOm5vcm1hbDt0ZXh0LWRlY29yYXRpb246bm9uZTtmb250LWZhbWlseTpIZWx2ZXRpY2EsQXJp YWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTJwdDsiPjxiPkZyb206IDwvYj4iQmxhc3RlciIgJmx0 O0JsYXN0ZXJANTU2bmF0by5jb20mZ3Q7PGJyPjxiPlRvOiA8L2I+IlNhbmRlciBHcmVuZGVsbWFu IiAmbHQ7c2FuZGVyQGdyZW5kZWxtYW4uY29tJmd0Ozxicj48Yj5DYzogPC9iPnVzZXJzQG92aXJ0 Lm9yZzxicj48Yj5TZW50OiA8L2I+TW9uZGF5LCBEZWNlbWJlciAyMywgMjAxMyA3OjA4OjA4IFBN PGJyPjxiPlN1YmplY3Q6IDwvYj5SZTogW1VzZXJzXSBJU08gZGF0YXN0b3JlLCBwZXJtaXNzaW9u IGRlbmllZDxicj48ZGl2Pjxicj48L2Rpdj48ZGl2IGNsYXNzPSJtb3otY2l0ZS1wcmVmaXgiPk9u IDEyLzIzLzIwMTMgMTA6MDcgQU0sIFNhbmRlcgogICAgICBHcmVuZGVsbWFuIHdyb3RlOjxicj48 L2Rpdj48YmxvY2txdW90ZSBjaXRlPSJtaWQ6Q0FIYTZjUlMzaURadlQ9dEFtRFZYKy14WXdBbzNQ VyswdGNlUkRGMFFyMUVPalIrOHR3QG1haWwuZ21haWwuY29tIj48ZGl2IGRpcj0ibHRyIj48ZGl2 IGNsYXNzPSJnbWFpbF9leHRyYSI+PGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIE1vbiwgRGVj IDIzLCAyMDEzIGF0IDQ6NTYgUE0sCiAgICAgICAgICAgIEJsYXN0ZXIgPHNwYW4gZGlyPSJsdHIi PiZsdDs8YSBocmVmPSJtYWlsdG86Qmxhc3RlckA1NTZuYXRvLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PkJsYXN0ZXJANTU2bmF0by5jb208L2E+Jmd0Ozwvc3Bhbj4KICAgICAgICAgICAgd3JvdGU6PGJy PjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdpbjowIDAgMAogICAg ICAgICAgICAgIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFl eCI+PGRpdj48YnI+CiAgICAgICAgICAgICAgICBNeSBORlMgc2VydmVyIGlzIFNvbGFyaXMgMTEu MSwgWkZTIHN0b3JhZ2UuPGJyPjwvZGl2PjwvYmxvY2txdW90ZT48ZGl2PkknbSBhIGJpdCBjb25m dXNlZCBub3csIGlzIHRoZSBORlMgc2VydmVyIGxpbnV4IG9yCiAgICAgICAgICAgICAgU29sYXJp cz8mbmJzcDsgWkZTIG9yIEJUUkZTPzxicj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj48L2Jsb2Nr cXVvdGU+PGJyPgogICAgSVNPcyBhcmUgb24gYSBTb2xhcmlzIDExLjEgTkZTIHNlcnZlci48YnI+ PGJyPjxibG9ja3F1b3RlIGNpdGU9Im1pZDpDQUhhNmNSUzNpRFp2VD10QW1EVlgrLXhZd0FvM1BX KzB0Y2VSREYwUXIxRU9qUis4dHdAbWFpbC5nbWFpbC5jb20iPjxkaXYgZGlyPSJsdHIiPjxkaXYg Y2xhc3M9ImdtYWlsX2V4dHJhIj48ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+PGJsb2NrcXVvdGUg Y2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjAgMCAwCiAgICAgICAgICAgICAgLjhl eDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij48ZGl2Pjxicj4K ICAgICAgICAgICAgICAgIElmIEkgY29weSB0aGUgSVNPIGRpcmVjdGx5IHRvIHRoZSBkaXJlY3Rv cnkgaXQgd29ya3MKICAgICAgICAgICAgICAgIGZpbmUuJm5ic3A7Jm5ic3A7IFdoYXQgYW0gSSBt aXNzaW5nPzxicj48L2Rpdj48L2Jsb2NrcXVvdGU+PGRpdj48YnI+PC9kaXY+PGRpdj5NYXliZSBz ZWxpbnV4IGxhYmVsaW5nPzxicj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj48L2Jsb2NrcXVvdGU+ PGJyPgogICAgWXVwITxicj48YnI+PGJsb2NrcXVvdGUgY2l0ZT0ibWlkOkNBSGE2Y1JTM2lEWnZU PXRBbURWWCsteFl3QW8zUFcrMHRjZVJERjBRcjFFT2pSKzh0d0BtYWlsLmdtYWlsLmNvbSI+PGRp diBkaXI9Imx0ciI+PGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxkaXYgY2xhc3M9ImdtYWlsX3F1 b3RlIj48ZGl2PldoYXQgaGFwcGVucyBpZiB5b3UgKHRlbXBvcmFyaWx5ISkgc2V0IHNlbGludXgg dG8KICAgICAgICAgICAgICBwZXJtaXNzaXZlIHdpdGggInNldGVuZm9yY2UgMCI/PGJyPjwvZGl2 PjwvZGl2PjwvZGl2PjwvZGl2PjwvYmxvY2txdW90ZT48YnI+CiAgICBUaGF0IGZpeGVkIGl0Li4u LldoYXQncyBnb2luZyBvbj8mbmJzcDsgSSBjYW4gc3UgLSB2ZHNtIGFuZCBkbyBhbiBtZDVzdW0K ICAgIG9uIGFsbCB0aGUgSVNPcy4mbmJzcDsgV2h5IGNhbid0IHRoZXkgYmUgYWNjZXNzZWQgdmlh IG92aXJ0PzwvYmxvY2txdW90ZT48ZGl2Pjxicj48L2Rpdj48ZGl2PlNlZW1zIHNpbWlsYXIgdG8m bmJzcDs8YSBocmVmPSJodHRwczovL2J1Z3ppbGxhLnJlZGhhdC5jb20vc2hvd19idWcuY2dpP2lk PTEwMjM5NzAiIGRhdGEtbWNlLWhyZWY9Imh0dHBzOi8vYnVnemlsbGEucmVkaGF0LmNvbS9zaG93 X2J1Zy5jZ2k/aWQ9MTAyMzk3MCI+aHR0cHM6Ly9idWd6aWxsYS5yZWRoYXQuY29tLzEwMjM5NzA8 L2E+Jm5ic3A7YWx0aG91Z2ggaXQncyBvcGVuZWQgb24gaG9zdGVkLWVuZ2luZS48L2Rpdj48ZGl2 Pjxicj48L2Rpdj48YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyLWxlZnQ6MnB4IHNvbGlkICMxMDEw RkY7bWFyZ2luLWxlZnQ6NXB4O3BhZGRpbmctbGVmdDo1cHg7Y29sb3I6IzAwMDtmb250LXdlaWdo dDpub3JtYWw7Zm9udC1zdHlsZTpub3JtYWw7dGV4dC1kZWNvcmF0aW9uOm5vbmU7Zm9udC1mYW1p bHk6SGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEycHQ7Ij48YnI+PGJyPgog ICAgSSBoYXZlIGEgbG9jYWwgZGF0YXN0b3JlIG9uIHRoZSBzYW1lIHZvbHVtZSBpbiBhbm90aGVy IGRpcmVjdG9yeQogICAgdHJlZSB0aGF0J3Mgd29ya2luZyBqdXN0IGZpbmUuPGJyPjxicj4KICAg IFdoeSBpcyBzZWxpbnV4IGFsbG93aW5nIGxvY2FsIGFjY2VzcywgYnV0IG5vdCBORlMgdmlhIHN5 bWxpbms/Jm5ic3A7CiAgICBnZXRzZWJvb2wgc2hvd3MgdmlydF91c2VfbmZzIC0tJmd0OyBvbi4m bmJzcDsgV2hhdCBvdGhlciBsYWJlbCBkbyBJIG5lZWQ/PGJyPjxicj4KICAgIFRoYW5rcyBmb3Ig dGhlIGhlbHAhJm5ic3A7IDxicj48YnI+PGJyPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fPGJyPlVzZXJzIG1haWxpbmcgbGlzdDxicj5Vc2Vyc0BvdmlydC5v cmc8YnI+aHR0cDovL2xpc3RzLm92aXJ0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3VzZXJzPGJyPjwv YmxvY2txdW90ZT48ZGl2Pjxicj48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj4tLSA8YnI+ PC9kaXY+PGRpdj48c3BhbiBuYW1lPSJ4Ij48L3NwYW4+RGlkaTxzcGFuIG5hbWU9IngiPjwvc3Bh bj48YnI+PC9kaXY+PC9kaXY+PC9ib2R5PjwvaHRtbD4KLS0tLS0tPV9QYXJ0XzYxNTE1N18xMjE5 MDQwODk1LjEzODc4MjAyNTcyNTEtLQo= --===============6281348881604641304==--