From stefan.wendler at tngtech.com Mon Sep 22 10:28:10 2014 Content-Type: multipart/mixed; boundary="===============0327976557683336005==" MIME-Version: 1.0 From: Stefan Wendler To: users at ovirt.org Subject: [ovirt-users] changing uid:gid of vdsm:kvm Date: Mon, 22 Sep 2014 16:27:56 +0200 Message-ID: <542031EC.2000100@tngtech.com> --===============0327976557683336005== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hi, this might be documented somewhere but I cannot find it. In what way does ovirt rely on vdsm:kvm being 36:36? Or can I just change the uid:gid everywhere and be golden? I need to change the uid:gid of vdsm:kvm to a value >1024. It has something to do with the setup of the diskstore I am supposed to use for this setup. The diskstore is a Synology which has all kinds of strange implications on the setup. Cheers, Stefan --===============0327976557683336005==-- From noc at nieuwland.nl Tue Sep 23 03:29:37 2014 Content-Type: multipart/mixed; boundary="===============0813970748880753266==" MIME-Version: 1.0 From: noc To: users at ovirt.org Subject: Re: [ovirt-users] changing uid:gid of vdsm:kvm Date: Tue, 23 Sep 2014 09:29:34 +0200 Message-ID: <5421215E.1020402@nieuwland.nl> In-Reply-To: 542031EC.2000100@tngtech.com --===============0813970748880753266== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is a multi-part message in MIME format. --------------010203040307060507000405 Content-Type: text/plain; charset=3DISO-8859-1 Content-Transfer-Encoding: 7bit Should have send it the the ML: On 22-9-2014 16:27, Stefan Wendler wrote: > Hi, > > this might be documented somewhere but I cannot find it. > > In what way does ovirt rely on vdsm:kvm being 36:36? Or can I just > change the uid:gid everywhere and be golden? > > I need to change the uid:gid of vdsm:kvm to a value >1024. It has > something to do with the setup of the diskstore I am supposed to use for > this setup. The diskstore is a Synology which has all kinds of strange > implications on the setup. > > I use a Synology (DS211j and now DS214play) at home and have my storage for oVirt on it and no problems with 36:36. I think I modified /etc/exports after creating it so that it keeps the 36:36 permissions. /volume1/nfs/data = 192.168.x.x/24(rw,async,no_wdelay,root_squash,insecure_locks,sec=3Dsys,anon= uid=3D36,anongid=3D36) Joop --------------010203040307060507000405 Content-Type: text/html; charset=3DISO-8859-1 Content-Transfer-Encoding: 7bit

Should have send it the the ML:

On 22-9-2014 16:27, Stefan Wendler wrote:

Hi,

this might be documented somewhere but I cannot find it.

In what way does ovirt rely on vdsm:kvm being 36:36? Or can I just
change the uid:gid everywhere and be golden?

I need to change the uid:gid of vdsm:kvm to a value >1024. It has
something to do with the setup of the diskstore I am supposed to use for
this setup. The diskstore is a Synology which has all kinds of strange
implications on the setup.

I use a Synology (DS211j and now DS214play) at home an=
d have my storage
for oVirt on it and no problems with 36:36.
I think I modified /etc/exports after creating it so that it keeps the
36:36 permissions.
/volume1/nfs/data      =

192.168.x.x/24(rw,async,no_wdelay,root_squash,insecure_locks,sec=3Dsys,anon=
uid=3D36,anongid=3D36)

Joop

--------------010203040307060507000405-- --===============0813970748880753266== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" VGhpcyBpcyBhIG11bHRpLXBhcnQgbWVzc2FnZSBpbiBNSU1FIGZvcm1hdC4KLS0tLS0tLS0tLS0t LS0wMTAyMDMwNDAzMDcwNjA1MDcwMDA0MDUKQ29udGVudC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFy c2V0PUlTTy04ODU5LTEKQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzogN2JpdAoKU2hvdWxkIGhh dmUgc2VuZCBpdCB0aGUgdGhlIE1MOgoKT24gMjItOS0yMDE0IDE2OjI3LCBTdGVmYW4gV2VuZGxl ciB3cm90ZToKCj4gSGksCj4KPiB0aGlzIG1pZ2h0IGJlIGRvY3VtZW50ZWQgc29tZXdoZXJlIGJ1 dCBJIGNhbm5vdCBmaW5kIGl0Lgo+Cj4gSW4gd2hhdCB3YXkgZG9lcyBvdmlydCByZWx5IG9uIHZk c206a3ZtIGJlaW5nIDM2OjM2PyBPciBjYW4gSSBqdXN0Cj4gY2hhbmdlIHRoZSB1aWQ6Z2lkIGV2 ZXJ5d2hlcmUgYW5kIGJlIGdvbGRlbj8KPgo+IEkgbmVlZCB0byBjaGFuZ2UgdGhlIHVpZDpnaWQg b2YgdmRzbTprdm0gdG8gYSB2YWx1ZSA+MTAyNC4gSXQgaGFzCj4gc29tZXRoaW5nIHRvIGRvIHdp dGggdGhlIHNldHVwIG9mIHRoZSBkaXNrc3RvcmUgSSBhbSBzdXBwb3NlZCB0byB1c2UgZm9yCj4g dGhpcyBzZXR1cC4gVGhlIGRpc2tzdG9yZSBpcyBhIFN5bm9sb2d5IHdoaWNoIGhhcyBhbGwga2lu ZHMgb2Ygc3RyYW5nZQo+IGltcGxpY2F0aW9ucyBvbiB0aGUgc2V0dXAuCj4KPgpJIHVzZSBhIFN5 bm9sb2d5IChEUzIxMWogYW5kIG5vdyBEUzIxNHBsYXkpIGF0IGhvbWUgYW5kIGhhdmUgbXkgc3Rv cmFnZQpmb3Igb1ZpcnQgb24gaXQgYW5kIG5vIHByb2JsZW1zIHdpdGggMzY6MzYuCkkgdGhpbmsg SSBtb2RpZmllZCAvZXRjL2V4cG9ydHMgYWZ0ZXIgY3JlYXRpbmcgaXQgc28gdGhhdCBpdCBrZWVw cyB0aGUKMzY6MzYgcGVybWlzc2lvbnMuCi92b2x1bWUxL25mcy9kYXRhICAgICAgCjE5Mi4xNjgu eC54LzI0KHJ3LGFzeW5jLG5vX3dkZWxheSxyb290X3NxdWFzaCxpbnNlY3VyZV9sb2NrcyxzZWM9 c3lzLGFub251aWQ9MzYsYW5vbmdpZD0zNikKCkpvb3AKCgoKLS0tLS0tLS0tLS0tLS0wMTAyMDMw NDAzMDcwNjA1MDcwMDA0MDUKQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9SVNPLTg4 NTktMQpDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA3Yml0Cgo8aHRtbD4KICA8aGVhZD4KICAg IDxtZXRhIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD1JU08tODg1OS0xIgogICAgICBodHRw LWVxdWl2PSJDb250ZW50LVR5cGUiPgogIDwvaGVhZD4KICA8Ym9keSBiZ2NvbG9yPSIjRkZGRkZG IiB0ZXh0PSIjMDAwMDAwIj4KICAgIDxkaXYgY2xhc3M9Im1vei10ZXh0LXBsYWluIiB3cmFwPSJ0 cnVlIiBncmFwaGljYWwtcXVvdGU9InRydWUiCiAgICAgIHN0eWxlPSJmb250LWZhbWlseTogLW1v ei1maXhlZDsgZm9udC1zaXplOiAxNHB4OyIgbGFuZz0ieC13ZXN0ZXJuIj4KICAgICAgPHByZSB3 cmFwPSIiPlNob3VsZCBoYXZlIHNlbmQgaXQgdGhlIHRoZSBNTDoKCk9uIDIyLTktMjAxNCAxNjoy NywgU3RlZmFuIFdlbmRsZXIgd3JvdGU6CjwvcHJlPgogICAgICA8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBzdHlsZT0iY29sb3I6ICMwMDAwMDA7Ij4KICAgICAgICA8cHJlIHdyYXA9IiI+SGksCgp0 aGlzIG1pZ2h0IGJlIGRvY3VtZW50ZWQgc29tZXdoZXJlIGJ1dCBJIGNhbm5vdCBmaW5kIGl0LgoK SW4gd2hhdCB3YXkgZG9lcyBvdmlydCByZWx5IG9uIHZkc206a3ZtIGJlaW5nIDM2OjM2PyBPciBj YW4gSSBqdXN0CmNoYW5nZSB0aGUgdWlkOmdpZCBldmVyeXdoZXJlIGFuZCBiZSBnb2xkZW4/CgpJ IG5lZWQgdG8gY2hhbmdlIHRoZSB1aWQ6Z2lkIG9mIHZkc206a3ZtIHRvIGEgdmFsdWUgJmd0OzEw MjQuIEl0IGhhcwpzb21ldGhpbmcgdG8gZG8gd2l0aCB0aGUgc2V0dXAgb2YgdGhlIGRpc2tzdG9y ZSBJIGFtIHN1cHBvc2VkIHRvIHVzZSBmb3IKdGhpcyBzZXR1cC4gVGhlIGRpc2tzdG9yZSBpcyBh IFN5bm9sb2d5IHdoaWNoIGhhcyBhbGwga2luZHMgb2Ygc3RyYW5nZQppbXBsaWNhdGlvbnMgb24g dGhlIHNldHVwLgoKCjwvcHJlPgogICAgICA8L2Jsb2NrcXVvdGU+CiAgICAgIDxwcmUgd3JhcD0i Ij5JIHVzZSBhIFN5bm9sb2d5IChEUzIxMWogYW5kIG5vdyBEUzIxNHBsYXkpIGF0IGhvbWUgYW5k IGhhdmUgbXkgc3RvcmFnZQpmb3Igb1ZpcnQgb24gaXQgYW5kIG5vIHByb2JsZW1zIHdpdGggMzY6 MzYuCkkgdGhpbmsgSSBtb2RpZmllZCAvZXRjL2V4cG9ydHMgYWZ0ZXIgY3JlYXRpbmcgaXQgc28g dGhhdCBpdCBrZWVwcyB0aGUKMzY6MzYgcGVybWlzc2lvbnMuCi92b2x1bWUxL25mcy9kYXRhICAg ICAgCjE5Mi4xNjgueC54LzI0KHJ3LGFzeW5jLG5vX3dkZWxheSxyb290X3NxdWFzaCxpbnNlY3Vy ZV9sb2NrcyxzZWM9c3lzLGFub251aWQ9MzYsYW5vbmdpZD0zNikKCkpvb3AKCjwvcHJlPgogICAg PC9kaXY+CiAgICA8YnI+CiAgPC9ib2R5Pgo8L2h0bWw+CgotLS0tLS0tLS0tLS0tLTAxMDIwMzA0 MDMwNzA2MDUwNzAwMDQwNS0tCg== --===============0813970748880753266==-- From stefan.wendler at tngtech.com Tue Sep 23 10:04:50 2014 Content-Type: multipart/mixed; boundary="===============7511067323058684789==" MIME-Version: 1.0 From: Stefan Wendler To: users at ovirt.org Subject: Re: [ovirt-users] changing uid:gid of vdsm:kvm Date: Tue, 23 Sep 2014 16:04:33 +0200 Message-ID: <54217DF1.3080800@tngtech.com> In-Reply-To: 5421215E.1020402@nieuwland.nl --===============7511067323058684789== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --c16hSnjeI5RwlMV3MxaBI3LiNudQxHUp3 Content-Type: text/plain; charset=3Dwindows-1252 Content-Transfer-Encoding: quoted-printable On 09/23/2014 09:29, noc wrote: > Should have send it the the ML: >=3D20 > On 22-9-2014 16:27, Stefan Wendler wrote: >=3D20 >> Hi, >> >> this might be documented somewhere but I cannot find it. >> >> In what way does ovirt rely on vdsm:kvm being 36:36? Or can I just >> change the uid:gid everywhere and be golden? >> >> I need to change the uid:gid of vdsm:kvm to a value >1024. It has >> something to do with the setup of the diskstore I am supposed to use f= =3D or >> this setup. The diskstore is a Synology which has all kinds of strange= =3D >> implications on the setup. >> >> > I use a Synology (DS211j and now DS214play) at home and have my storage= =3D > for oVirt on it and no problems with 36:36. > I think I modified /etc/exports after creating it so that it keeps the > 36:36 permissions. > /volume1/nfs/data =3D20 > 192.168.x.x/24(rw,async,no_wdelay,root_squash,insecure_locks,sec=3D3Dsys,= =3D anonuid=3D3D36,anongid=3D3D36) >=3D20 > Joop >=3D20 Hey, thanks for the answer. This definitely helped knowing somebody uses a Syno box with ovirt. After fiddling around for some hours I think I have this working now. But especially the nfs and the permission parts are really really fragile. One wrong click and everything goes to hell. And as I have figured out this wont always happen instantaneously. But sometimes only after a reboot. I personally cannot recommend |ynology as a Diskstore for ovirt and don't feel too comfortable with this solution. I personally favour a FreeBSD box with decent zfs support. Cheers, Stefan --c16hSnjeI5RwlMV3MxaBI3LiNudQxHUp3 Content-Type: application/pgp-signature; name=3D"signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename=3D"signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlQhffcACgkQ01vvrYDXSqvm/wCggSITLqDXoDNKpDvSNqEFbI71 aYEAn1SzMadsoc4bQ04Q1G0RFULXrcAI =3Dyz8w -----END PGP SIGNATURE----- --c16hSnjeI5RwlMV3MxaBI3LiNudQxHUp3-- --===============7511067323058684789== Content-Type: multipart/signed MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" VGhpcyBpcyBhbiBPcGVuUEdQL01JTUUgc2lnbmVkIG1lc3NhZ2UgKFJGQyA0ODgwIGFuZCAzMTU2 KQotLWMxNmhTbmplSTVSd2xNVjNNeGFCSTNMaU51ZFF4SFVwMwpDb250ZW50LVR5cGU6IHRleHQv cGxhaW47IGNoYXJzZXQ9d2luZG93cy0xMjUyCkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IHF1 b3RlZC1wcmludGFibGUKCk9uIDA5LzIzLzIwMTQgMDk6MjksIG5vYyB3cm90ZToKPiBTaG91bGQg aGF2ZSBzZW5kIGl0IHRoZSB0aGUgTUw6Cj49MjAKPiBPbiAyMi05LTIwMTQgMTY6MjcsIFN0ZWZh biBXZW5kbGVyIHdyb3RlOgo+PTIwCj4+IEhpLAo+Pgo+PiB0aGlzIG1pZ2h0IGJlIGRvY3VtZW50 ZWQgc29tZXdoZXJlIGJ1dCBJIGNhbm5vdCBmaW5kIGl0Lgo+Pgo+PiBJbiB3aGF0IHdheSBkb2Vz IG92aXJ0IHJlbHkgb24gdmRzbTprdm0gYmVpbmcgMzY6MzY/IE9yIGNhbiBJIGp1c3QKPj4gY2hh bmdlIHRoZSB1aWQ6Z2lkIGV2ZXJ5d2hlcmUgYW5kIGJlIGdvbGRlbj8KPj4KPj4gSSBuZWVkIHRv IGNoYW5nZSB0aGUgdWlkOmdpZCBvZiB2ZHNtOmt2bSB0byBhIHZhbHVlID4xMDI0LiBJdCBoYXMK Pj4gc29tZXRoaW5nIHRvIGRvIHdpdGggdGhlIHNldHVwIG9mIHRoZSBkaXNrc3RvcmUgSSBhbSBz dXBwb3NlZCB0byB1c2UgZj0Kb3IKPj4gdGhpcyBzZXR1cC4gVGhlIGRpc2tzdG9yZSBpcyBhIFN5 bm9sb2d5IHdoaWNoIGhhcyBhbGwga2luZHMgb2Ygc3RyYW5nZT0KCj4+IGltcGxpY2F0aW9ucyBv biB0aGUgc2V0dXAuCj4+Cj4+Cj4gSSB1c2UgYSBTeW5vbG9neSAoRFMyMTFqIGFuZCBub3cgRFMy MTRwbGF5KSBhdCBob21lIGFuZCBoYXZlIG15IHN0b3JhZ2U9Cgo+IGZvciBvVmlydCBvbiBpdCBh bmQgbm8gcHJvYmxlbXMgd2l0aCAzNjozNi4KPiBJIHRoaW5rIEkgbW9kaWZpZWQgL2V0Yy9leHBv cnRzIGFmdGVyIGNyZWF0aW5nIGl0IHNvIHRoYXQgaXQga2VlcHMgdGhlCj4gMzY6MzYgcGVybWlz c2lvbnMuCj4gL3ZvbHVtZTEvbmZzL2RhdGEgICAgID0yMAo+IDE5Mi4xNjgueC54LzI0KHJ3LGFz eW5jLG5vX3dkZWxheSxyb290X3NxdWFzaCxpbnNlY3VyZV9sb2NrcyxzZWM9M0RzeXMsPQphbm9u dWlkPTNEMzYsYW5vbmdpZD0zRDM2KQo+PTIwCj4gSm9vcAo+PTIwCgpIZXksCgp0aGFua3MgZm9y IHRoZSBhbnN3ZXIuIFRoaXMgZGVmaW5pdGVseSBoZWxwZWQga25vd2luZyBzb21lYm9keSB1c2Vz IGEKU3lubyBib3ggd2l0aCBvdmlydC4KCkFmdGVyIGZpZGRsaW5nIGFyb3VuZCBmb3Igc29tZSBo b3VycyBJIHRoaW5rIEkgaGF2ZSB0aGlzIHdvcmtpbmcgbm93LgpCdXQgZXNwZWNpYWxseSB0aGUg bmZzIGFuZCB0aGUgcGVybWlzc2lvbiBwYXJ0cyBhcmUgcmVhbGx5IHJlYWxseQpmcmFnaWxlLiBP bmUgd3JvbmcgY2xpY2sgYW5kIGV2ZXJ5dGhpbmcgZ29lcyB0byBoZWxsLiBBbmQgYXMgSSBoYXZl CmZpZ3VyZWQgb3V0IHRoaXMgd29udCBhbHdheXMgaGFwcGVuIGluc3RhbnRhbmVvdXNseS4gQnV0 IHNvbWV0aW1lcyBvbmx5CmFmdGVyIGEgcmVib290LiBJIHBlcnNvbmFsbHkgY2Fubm90IHJlY29t bWVuZCB8eW5vbG9neSBhcyBhIERpc2tzdG9yZQpmb3Igb3ZpcnQgYW5kIGRvbid0IGZlZWwgdG9v IGNvbWZvcnRhYmxlIHdpdGggdGhpcyBzb2x1dGlvbi4gSQpwZXJzb25hbGx5IGZhdm91ciBhIEZy ZWVCU0QgYm94IHdpdGggZGVjZW50IHpmcyBzdXBwb3J0LgoKQ2hlZXJzLApTdGVmYW4KCgotLWMx NmhTbmplSTVSd2xNVjNNeGFCSTNMaU51ZFF4SFVwMwpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9u L3BncC1zaWduYXR1cmU7IG5hbWU9InNpZ25hdHVyZS5hc2MiCkNvbnRlbnQtRGVzY3JpcHRpb246 IE9wZW5QR1AgZGlnaXRhbCBzaWduYXR1cmUKQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVu dDsgZmlsZW5hbWU9InNpZ25hdHVyZS5hc2MiCgotLS0tLUJFR0lOIFBHUCBTSUdOQVRVUkUtLS0t LQpWZXJzaW9uOiBHbnVQRyB2MQoKaUVZRUFSRUNBQVlGQWxRaGZmY0FDZ2tRMDF2dnJZRFhTcXZt L3dDZ2dTSVRMcURYb0ROS3BEdlNOcUVGYkk3MQphWUVBbjFTek1hZHNvYzRiUTA0UTFHMFJGVUxY cmNBSQo9eXo4dwotLS0tLUVORCBQR1AgU0lHTkFUVVJFLS0tLS0KCi0tYzE2aFNuamVJNVJ3bE1W M014YUJJM0xpTnVkUXhIVXAzLS0K --===============7511067323058684789==--