So I did some testing and and removed the "all_squash,anonuid=36,anongid=36",
set all the image directories to 0755, added libvirt to the kvm group, then rebooted.
After doing so, sanlock had no access to the directories and neither did libvert. Leaving
everything else alone, I changed the the perms to 0760, sanlock no longer complained, but
libvirtd still complained about file permissions.
Next test was to the change file perms to 770 and I got the same error with libvertd.
I have not done any linux work for quite a while so please correct me, but if I do a
"ps aux | grep libvirt" I see the libvritd process running as root. Does the
libvirt user get invoked only when a script is running? If the daemon is only running as
root, then would it not be trying to access storage as root at this point?
This is my ps list:
root 2898 0.1 0.0 1553860 28580 ? Ssl 14:45 0:01 /usr/sbin/libvirtd
-listen
Here is what I see in the audit log:
type=VIRT_CONTROL msg=audit(1576336098.295:451): pid=2898 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start
reason=booted vm="HostedEngine" uuid=70679ece-fbe9-4402-b9b0-34bbee9b6e69
vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed
Show replies by date