From Blaster at 556nato.com Mon Dec 23 12:08:28 2013 Content-Type: multipart/mixed; boundary="===============0120401617058591604==" MIME-Version: 1.0 From: Blaster To: users at ovirt.org Subject: Re: [Users] ISO datastore, permission denied Date: Mon, 23 Dec 2013 11:08:08 -0600 Message-ID: <52B86DF8.8080405@556nato.com> In-Reply-To: CAHa6cRS3iDZvT=tAmDVX+-xYwAo3PW+0tceRDF0Qr1EOjR+8tw@mail.gmail.com --===============0120401617058591604== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is a multi-part message in MIME format. --------------040203000408000403040001 Content-Type: text/plain; charset=3DISO-8859-1; format=3Dflowed Content-Transfer-Encoding: 7bit On 12/23/2013 10:07 AM, Sander Grendelman wrote: > On Mon, Dec 23, 2013 at 4:56 PM, Blaster > wrote: > > > My NFS server is Solaris 11.1, ZFS storage. > > I'm a bit confused now, is the NFS server linux or Solaris? ZFS or BTRFS? ISOs are on a Solaris 11.1 NFS server. > > If I copy the ISO directly to the directory it works fine. What > am I missing? > > > Maybe selinux labeling? Yup! > What happens if you (temporarily!) set selinux to permissive with = > "setenforce 0"? That fixed it....What's going on? I can su - vdsm and do an md5sum on = all the ISOs. Why can't they be accessed via ovirt? I have a local datastore on the same volume in another directory tree = that's working just fine. Why is selinux allowing local access, but not NFS via symlink? getsebool = shows virt_use_nfs --> on. What other label do I need? Thanks for the help! --------------040203000408000403040001 Content-Type: text/html; charset=3DISO-8859-1 Content-Transfer-Encoding: 7bit
On 12/23/2013 10:07 AM, Sander Grendelman wrote:
On Mon, Dec 23, 2013 at 4:56 PM, Blaster <Bla= ster(a)556nato.com> wrote:

My NFS server is Solaris 11.1, ZFS storage.
I'm a bit confused now, is the NFS server linux or Solaris?  ZFS or BTRFS?

ISOs are on a Solaris 11.1 NFS server.


If I copy the ISO directly to the directory it works fine.   What am I missing?

Maybe selinux labeling?

Yup!

What happens if you (temporarily!) set selinux to permissive with "setenforce 0"?

That fixed it....What's going on?  I can su - vdsm and do an md5sum on all the ISOs.  Why can't they be accessed via ovirt?

I have a local datastore on the same volume in another directory tree that's working just fine.

Why is selinux allowing local access, but not NFS via symlink?  getsebool shows virt_use_nfs --> on.  What other label do I nee= d?

Thanks for the help! 

--------------040203000408000403040001-- --===============0120401617058591604== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" VGhpcyBpcyBhIG11bHRpLXBhcnQgbWVzc2FnZSBpbiBNSU1FIGZvcm1hdC4KLS0tLS0tLS0tLS0t LS0wNDAyMDMwMDA0MDgwMDA0MDMwNDAwMDEKQ29udGVudC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFy c2V0PUlTTy04ODU5LTE7IGZvcm1hdD1mbG93ZWQKQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzog N2JpdAoKT24gMTIvMjMvMjAxMyAxMDowNyBBTSwgU2FuZGVyIEdyZW5kZWxtYW4gd3JvdGU6Cj4g T24gTW9uLCBEZWMgMjMsIDIwMTMgYXQgNDo1NiBQTSwgQmxhc3RlciA8Qmxhc3RlckA1NTZuYXRv LmNvbSAKPiA8bWFpbHRvOkJsYXN0ZXJANTU2bmF0by5jb20+PiB3cm90ZToKPgo+Cj4gICAgIE15 IE5GUyBzZXJ2ZXIgaXMgU29sYXJpcyAxMS4xLCBaRlMgc3RvcmFnZS4KPgo+IEknbSBhIGJpdCBj b25mdXNlZCBub3csIGlzIHRoZSBORlMgc2VydmVyIGxpbnV4IG9yIFNvbGFyaXM/ICBaRlMgb3Ig QlRSRlM/CgpJU09zIGFyZSBvbiBhIFNvbGFyaXMgMTEuMSBORlMgc2VydmVyLgoKPgo+ICAgICBJ ZiBJIGNvcHkgdGhlIElTTyBkaXJlY3RseSB0byB0aGUgZGlyZWN0b3J5IGl0IHdvcmtzIGZpbmUu ICAgV2hhdAo+ICAgICBhbSBJIG1pc3Npbmc/Cj4KPgo+IE1heWJlIHNlbGludXggbGFiZWxpbmc/ CgpZdXAhCgo+IFdoYXQgaGFwcGVucyBpZiB5b3UgKHRlbXBvcmFyaWx5ISkgc2V0IHNlbGludXgg dG8gcGVybWlzc2l2ZSB3aXRoIAo+ICJzZXRlbmZvcmNlIDAiPwoKVGhhdCBmaXhlZCBpdC4uLi5X aGF0J3MgZ29pbmcgb24/ICBJIGNhbiBzdSAtIHZkc20gYW5kIGRvIGFuIG1kNXN1bSBvbiAKYWxs IHRoZSBJU09zLiAgV2h5IGNhbid0IHRoZXkgYmUgYWNjZXNzZWQgdmlhIG92aXJ0PwoKSSBoYXZl IGEgbG9jYWwgZGF0YXN0b3JlIG9uIHRoZSBzYW1lIHZvbHVtZSBpbiBhbm90aGVyIGRpcmVjdG9y eSB0cmVlIAp0aGF0J3Mgd29ya2luZyBqdXN0IGZpbmUuCgpXaHkgaXMgc2VsaW51eCBhbGxvd2lu ZyBsb2NhbCBhY2Nlc3MsIGJ1dCBub3QgTkZTIHZpYSBzeW1saW5rPyBnZXRzZWJvb2wgCnNob3dz IHZpcnRfdXNlX25mcyAtLT4gb24uICBXaGF0IG90aGVyIGxhYmVsIGRvIEkgbmVlZD8KClRoYW5r cyBmb3IgdGhlIGhlbHAhCgoKLS0tLS0tLS0tLS0tLS0wNDAyMDMwMDA0MDgwMDA0MDMwNDAwMDEK Q29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9SVNPLTg4NTktMQpDb250ZW50LVRyYW5z ZmVyLUVuY29kaW5nOiA3Yml0Cgo8aHRtbD4KICA8aGVhZD4KICAgIDxtZXRhIGNvbnRlbnQ9InRl eHQvaHRtbDsgY2hhcnNldD1JU08tODg1OS0xIgogICAgICBodHRwLWVxdWl2PSJDb250ZW50LVR5 cGUiPgogIDwvaGVhZD4KICA8Ym9keSBiZ2NvbG9yPSIjRkZGRkZGIiB0ZXh0PSIjMDAwMDAwIj4K ICAgIDxkaXYgY2xhc3M9Im1vei1jaXRlLXByZWZpeCI+T24gMTIvMjMvMjAxMyAxMDowNyBBTSwg U2FuZGVyCiAgICAgIEdyZW5kZWxtYW4gd3JvdGU6PGJyPgogICAgPC9kaXY+CiAgICA8YmxvY2tx dW90ZQpjaXRlPSJtaWQ6Q0FIYTZjUlMzaURadlQ9dEFtRFZYKy14WXdBbzNQVyswdGNlUkRGMFFy MUVPalIrOHR3QG1haWwuZ21haWwuY29tIgogICAgICB0eXBlPSJjaXRlIj4KICAgICAgPGRpdiBk aXI9Imx0ciI+CiAgICAgICAgPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPgogICAgICAgICAgPGRp diBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIE1vbiwgRGVjIDIzLCAyMDEzIGF0IDQ6NTYgUE0sCiAg ICAgICAgICAgIEJsYXN0ZXIgPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBtb3otZG8tbm90LXNlbmQ9 InRydWUiCiAgICAgICAgICAgICAgICBocmVmPSJtYWlsdG86Qmxhc3RlckA1NTZuYXRvLmNvbSIg dGFyZ2V0PSJfYmxhbmsiPkJsYXN0ZXJANTU2bmF0by5jb208L2E+Jmd0Ozwvc3Bhbj4KICAgICAg ICAgICAgd3JvdGU6PGJyPgogICAgICAgICAgICA8YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVv dGUiIHN0eWxlPSJtYXJnaW46MCAwIDAKICAgICAgICAgICAgICAuOGV4O2JvcmRlci1sZWZ0OjFw eCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiPgogICAgICAgICAgICAgIDxkaXYgYmdjb2xv cj0iI0ZGRkZGRiIgdGV4dD0iIzAwMDAwMCI+IDxicj4KICAgICAgICAgICAgICAgIE15IE5GUyBz ZXJ2ZXIgaXMgU29sYXJpcyAxMS4xLCBaRlMgc3RvcmFnZS48YnI+CiAgICAgICAgICAgICAgPC9k aXY+CiAgICAgICAgICAgIDwvYmxvY2txdW90ZT4KICAgICAgICAgICAgPGRpdj5JJ20gYSBiaXQg Y29uZnVzZWQgbm93LCBpcyB0aGUgTkZTIHNlcnZlciBsaW51eCBvcgogICAgICAgICAgICAgIFNv bGFyaXM/Jm5ic3A7IFpGUyBvciBCVFJGUz88YnI+CiAgICAgICAgICAgIDwvZGl2PgogICAgICAg ICAgPC9kaXY+CiAgICAgICAgPC9kaXY+CiAgICAgIDwvZGl2PgogICAgPC9ibG9ja3F1b3RlPgog ICAgPGJyPgogICAgSVNPcyBhcmUgb24gYSBTb2xhcmlzIDExLjEgTkZTIHNlcnZlci48YnI+CiAg ICA8YnI+CiAgICA8YmxvY2txdW90ZQpjaXRlPSJtaWQ6Q0FIYTZjUlMzaURadlQ9dEFtRFZYKy14 WXdBbzNQVyswdGNlUkRGMFFyMUVPalIrOHR3QG1haWwuZ21haWwuY29tIgogICAgICB0eXBlPSJj aXRlIj4KICAgICAgPGRpdiBkaXI9Imx0ciI+CiAgICAgICAgPGRpdiBjbGFzcz0iZ21haWxfZXh0 cmEiPgogICAgICAgICAgPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPgogICAgICAgICAgICA8Ymxv Y2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAKICAgICAgICAg ICAgICAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiPgog ICAgICAgICAgICAgIDxkaXYgYmdjb2xvcj0iI0ZGRkZGRiIgdGV4dD0iIzAwMDAwMCI+IDxicj4K ICAgICAgICAgICAgICAgIElmIEkgY29weSB0aGUgSVNPIGRpcmVjdGx5IHRvIHRoZSBkaXJlY3Rv cnkgaXQgd29ya3MKICAgICAgICAgICAgICAgIGZpbmUuJm5ic3A7Jm5ic3A7IFdoYXQgYW0gSSBt aXNzaW5nPzxicj4KICAgICAgICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgPC9ibG9ja3F1b3Rl PgogICAgICAgICAgICA8ZGl2Pjxicj4KICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICAgIDxk aXY+TWF5YmUgc2VsaW51eCBsYWJlbGluZz88YnI+CiAgICAgICAgICAgIDwvZGl2PgogICAgICAg ICAgPC9kaXY+CiAgICAgICAgPC9kaXY+CiAgICAgIDwvZGl2PgogICAgPC9ibG9ja3F1b3RlPgog ICAgPGJyPgogICAgWXVwITxicj4KICAgIDxicj4KICAgIDxibG9ja3F1b3RlCmNpdGU9Im1pZDpD QUhhNmNSUzNpRFp2VD10QW1EVlgrLXhZd0FvM1BXKzB0Y2VSREYwUXIxRU9qUis4dHdAbWFpbC5n bWFpbC5jb20iCiAgICAgIHR5cGU9ImNpdGUiPgogICAgICA8ZGl2IGRpcj0ibHRyIj4KICAgICAg ICA8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+CiAgICAgICAgICA8ZGl2IGNsYXNzPSJnbWFpbF9x dW90ZSI+CiAgICAgICAgICAgIDxkaXY+V2hhdCBoYXBwZW5zIGlmIHlvdSAodGVtcG9yYXJpbHkh KSBzZXQgc2VsaW51eCB0bwogICAgICAgICAgICAgIHBlcm1pc3NpdmUgd2l0aCAic2V0ZW5mb3Jj ZSAwIj88YnI+CiAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgPC9kaXY+CiAgICAgICAgPC9k aXY+CiAgICAgIDwvZGl2PgogICAgPC9ibG9ja3F1b3RlPgogICAgPGJyPgogICAgVGhhdCBmaXhl ZCBpdC4uLi5XaGF0J3MgZ29pbmcgb24/Jm5ic3A7IEkgY2FuIHN1IC0gdmRzbSBhbmQgZG8gYW4g bWQ1c3VtCiAgICBvbiBhbGwgdGhlIElTT3MuJm5ic3A7IFdoeSBjYW4ndCB0aGV5IGJlIGFjY2Vz c2VkIHZpYSBvdmlydD88YnI+CiAgICA8YnI+CiAgICBJIGhhdmUgYSBsb2NhbCBkYXRhc3RvcmUg b24gdGhlIHNhbWUgdm9sdW1lIGluIGFub3RoZXIgZGlyZWN0b3J5CiAgICB0cmVlIHRoYXQncyB3 b3JraW5nIGp1c3QgZmluZS48YnI+CiAgICA8YnI+CiAgICBXaHkgaXMgc2VsaW51eCBhbGxvd2lu ZyBsb2NhbCBhY2Nlc3MsIGJ1dCBub3QgTkZTIHZpYSBzeW1saW5rPyZuYnNwOwogICAgZ2V0c2Vi b29sIHNob3dzIHZpcnRfdXNlX25mcyAtLSZndDsgb24uJm5ic3A7IFdoYXQgb3RoZXIgbGFiZWwg ZG8gSSBuZWVkPzxicj4KICAgIDxicj4KICAgIFRoYW5rcyBmb3IgdGhlIGhlbHAhJm5ic3A7IDxi cj4KICAgIDxicj4KICA8L2JvZHk+CjwvaHRtbD4KCi0tLS0tLS0tLS0tLS0tMDQwMjAzMDAwNDA4 MDAwNDAzMDQwMDAxLS0KCg== --===============0120401617058591604==--