On Mon, Oct 12, 2020 at 6:03 PM <lee.hanel@gmail.com> wrote:
Greetings,

I'm trying to upgrade from 4.3 to 4.4.  When trying to mount the original nfs items, I'm getting the following error:

vdsm.storage.exception.StorageServerAccessPermissionError: Permission settings on the specified path do not allow access to the storage. Verify permission settings on the specified storage path.: 'path = /rhev/data-center/mnt/nfshost:nfs_path'

with the following stack trace:

2020-10-08 19:00:17,961+0000 ERROR (jsonrpc/4) [storage.HSM] Could not connect to storageServer (hsm:2421)
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/vdsm/storage/fileSD.py", line 82, in validateDirAccess
    getProcPool().fileUtils.validateAccess(dirPath)
  File "/usr/lib/python3.6/site-packages/vdsm/storage/outOfProcess.py", line 194, in validateAccess
    raise OSError(errno.EACCES, os.strerror(errno.EACCES))
PermissionError: [Errno 13] Permission denied

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/vdsm/storage/hsm.py", line 2418, in connectStorageServer
    conObj.connect()
  File "/usr/lib/python3.6/site-packages/vdsm/storage/storageServer.py", line 449, in connect
    return self._mountCon.connect()
  File "/usr/lib/python3.6/site-packages/vdsm/storage/storageServer.py", line 190, in connect
    six.reraise(t, v, tb)
  File "/usr/lib/python3.6/site-packages/six.py", line 703, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/vdsm/storage/storageServer.py", line 183, in connect
    self.getMountObj().getRecord().fs_file)
  File "/usr/lib/python3.6/site-packages/vdsm/storage/fileSD.py", line 93, in validateDirAccess
    raise se.StorageServerAccessPermissionError(dirPath)


via an ls, it looks like there are the correct permissions:

ls -alh
total 0
drwxr-xr-x. 1 vdsm kvm 100 Oct  8 19:15  .
drwxr-xr-x. 4 vdsm kvm 115 Oct  8 19:02  ..
drwxr-xr-x. 1 vdsm kvm  52 Oct  1 20:35  ffe7b7bb-a391-42a9-9bae-480807509778
d---------. 1 vdsm kvm  22 Mar 17  2020 '#recycle'


The permissions and ownership seem correct, make sure the rest is set as specified:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/administration_guide/sect-preparing_and_adding_nfs_storage
In addition make sure you are exporting the shares with *(rw,sync,no_root_suqash) for the relevant export paths on the NFS server side,
and there is selinux context set for the shared folders:
# ls -lhZ
...
drwxr-xr-x. 2 vdsm kvm unconfined_u:object_r:default_t:s0  6 Jul 20 18:21 data

 

But, I wrote a short script to check the individual permissions that are checked, and it thinks I can't write to the directory:

We can Read From  it:  /rhev/data-center/mnt/nfshost:nfspath
We can't write to it:  /rhev/data-center/mnt/nfshost:nfspath
We can execute to it:  /rhev/data-center/mnt/nfshost:nfspath

This is doing a simple:

print(os.stat(path))
if os.access(path, os.F_OK):
  print("It Exists", "/rhev/data-center/mnt/nfshost:nfspath")
else:
  print("It Doesn't Exists", "/rhev/data-center/mnt/nfshost:nfspath")
if os.access(path, os.R_OK):
  print("We can Read From  it: ", "/rhev/data-center/mnt/nfshost:nfspath")
else:
  print("We can't Read from it: ", "/rhev/data-center/mnt/nfshost:nfspath")
if os.access(path, os.W_OK):
  print("We can write to it: ", "/rhev/data-center/mnt/nfshost:nfspath")
else:
  print("We can't write to it: ", "/rhev/data-center/mnt/nfshost:nfspath")
if os.access(path, os.X_OK):
  print("We can execute to it: ", "/rhev/data-center/mnt/nfshost:nfspath")
else:
  print("We can can't to it: ", "/rhev/data-center/mnt/nfshost:nfspath")

I took this same checks over to the Centos 7 host, and I it passes the checks fine.


Does anyone have any ideas?

Thanks,
Lee
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y33ZNSVWCR6PJCH3TYUMXM72EBTUH4ZQ/