I recently installed ovirt cluster on 3 nodes and saw that I could only migrate one way
2017-08-31 09:04:30,685-0400 ERROR (migsrc/1eca84bd) [virt.vm] (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') unsupported configuration: Unable to find security driver for model selinux (migration:287)
2017-08-31 09:04:30,698-0400 ERROR (migsrc/1eca84bd) [virt.vm] (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') Failed to migrate (migration:429)
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 411, in run
self._startUnderlyingMigration(time.time())
File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 487, in _startUnderlyingMigration
self._perform_with_conv_schedule(duri, muri)
File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 563, in _perform_with_conv_schedule
self._perform_migration(duri, muri)
File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 529, in _perform_migration
self._vm._dom.migrateToURI3(duri, params, flags)
File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 69, in f
ret = attr(*args, **kwargs)
File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 123, in wrapper
ret = f(*args, **kwargs)
File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 944, in wrapper
return func(inst, *args, **kwargs)
File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1939, in migrateToURI3
if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed', dom=self)
libvirtError: unsupported configuration: Unable to find security driver for model selinux
I could migrate from node1 -> node 2 but not node2 -> node1, so obviously I had something different with node 1. In this case, it was selinux
On node 1 it is set to disabled but on node 2 it is set to permissive. I am not sure how they got different but I wanted to update this list with this finding
Node 2 was setup directly via web UI in the engine with host -> new. Perhaps I manually set node 1 to disabled
Does ovirt / libvirt expect permissive? Or does it expect enforcing? Or does it need to be both the same matching?