Re: [Users] oVIRT3.3.3 Live Migration fails

</p><p style=3D"margin:0px; padding:0px;" ><span style=3D"font-family:Verd= ana"><span style=3D"font-size:12px">To: Hans-Joachim</span></span></p><p st= yle=3D"margin:0px; padding:0px;" ><span style=3D"font-family:Verdana"><span=
--========GMXBoundary68791394728764546928 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Hello, Thank you for your help. finally, it was a mismatch between a server running in SE permissive mode and a server running in disabled mode. Hans-Joachim ----- Original Message ----- From: Itamar Heim Sent: 03/12/14 02:08 PM To: Hans-Joachim Subject: Re: [Users] oVIRT3.3.3 Live Migration fails On 03/12/2014 02:39 PM, Hans-Joachim wrote: > Hello Itamar, > > I've found nothing special... beside the info about Domain not found. > > BTW.: SELINUX is disabled please keep on mailing list. please check selinux is disabeld on both or enabled on both (before the VM was launched) > > Hans-Joachim > >> ----- Original Message ----- >> >> From: Itamar Heim >> >> Sent: 03/11/14 03:28 PM >> >> To: Hans-Joachim, users@ovirt.org >> >> Subject: Re: [Users] oVIRT3.3.3 Live Migration fails >> >> On 03/05/2014 06:09 PM, Hans-Joachim wrote: >> > Hello, >> > >> > I'm running into a funny problem on a CentOS 6.5 system >> > >> > Starting a VM on server1, migrate it to server2 and than back to server1 >> > fails. >> > >> > The logs (engine and server1) are attached... >> > >> > >> > server1: >> > vdsm.x86_64 4.13.3-3.el6 @ovirt >> > vdsm-cli.noarch 4.13.3-3.el6 @ovirt >> > vdsm-python.x86_64 4.13.3-3.el6 @ovirt >> > vdsm-python-cpopen.x86_64 4.13.2-1.el6 @ovirt >> > vdsm-xmlrpc.noarch 4.13.3-3.el6 @ovirt >> > qemu-img-rhev.x86_64 2:0.12.1.2-2.415.el6 @ovirt >> > qemu-kvm-rhev.x86_64 2:0.12.1.2-2.415.el6 @ovirt >> > qemu-kvm-rhev-tools.x86_64 2:0.12.1.2-2.415.el6 @ovirt >> > >> > server2: >> > vdsm.x86_64 4.13.3-3.el6 @ovirt >> > vdsm-cli.noarch 4.13.3-3.el6 @ovirt >> > vdsm-python.x86_64 4.13.3-3.el6 @ovirt >> > vdsm-python-cpopen.x86_64 >> > vdsm-xmlrpc.noarch 4.13.3-3.el6 @ovirt >> > qemu-img-rhev.x86_64 2:0.12.1.2-2.415.el6 >> > qemu-kvm-rhev.x86_64 2:0.12.1.2-2.415.el6 >> > >> > >> > >> > Thank you for your help >> > >> > Hans-Joachim >> > >> > >> > _______________________________________________ >> > Users mailing list >> > Users@ovirt.org >> > http://lists.ovirt.org/mailman/listinfo/users >> > >> >> anything in the libvirt log? > > --========GMXBoundary68791394728764546928 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <span style=3D'font-family:Verdana'><span style=3D'font-size:12px'>Hello,<b= r /><br />Thank you for your help.<br /><br />finally, it was a mismatch be= tween a server running in SE permissive mode and a server running in disabl= ed mode.<br /><br />Hans-Joachim<p style=3D"margin:0px; padding:0px;" >=C2= =A0</p><blockquote style=3D"border-left: 1px solid #CCC; padding-left: 5px;= margin-left: 5px; margin-bottom: 0px; margin-top: 0px; margin-right: 0px;"= type=3D"cite"><p style=3D"margin:0px; padding:0px;" ><span style=3D"font-f= amily:Verdana"><span style=3D"font-size:12px">----- Original Message -----<= /span></span></p><p style=3D"margin:0px; padding:0px;" ><span style=3D"font= -family:Verdana"><span style=3D"font-size:12px">From: Itamar Heim</span></s= pan></p><p style=3D"margin:0px; padding:0px;" ><span style=3D"font-family:V= erdana"><span style=3D"font-size:12px">Sent: 03/12/14 02:08 PM</span></span= style=3D"font-size:12px">Subject: Re: [Users] oVIRT3.3.3 Live Migration fa= ils</span></span></p>=C2=A0<div><div><pre style=3D"white-space: pre-wrap; w= ord-wrap: break-word; font-size:11;pre">On 03/12/2014 02:39 PM, Hans-Joachi= m wrote:=20 > Hello Itamar,=20 >=20 > I've found nothing special... beside the info about Domain not found.= =20 >=20 > BTW.: SELINUX is disabled=20 please keep on mailing list.=20 please check selinux is disabeld on both or enabled on both (before the=20 VM was launched)=20 >=20 > Hans-Joachim=20 >=20 >> ----- Original Message -----=20 >>=20 >> From: Itamar Heim=20 >>=20 >> Sent: 03/11/14 03:28 PM=20 >>=20 >> To: Hans-Joachim, users@ovirt.org=20 >>=20 >> Subject: Re: [Users] oVIRT3.3.3 Live Migration fails=20 >>=20 >> On 03/05/2014 06:09 PM, Hans-Joachim wrote:=20 >> > Hello,=20 >> >=20 >> > I'm running into a funny problem on a CentOS 6.5 system=20 >> >=20 >> > Starting a VM on server1, migrate it to server2 and than back= to server1=20 >> > fails.=20 >> >=20 >> > The logs (engine and server1) are attached...=20 >> >=20 >> >=20 >> > server1:=20 >> > vdsm.x86_64 4.13.3-3.el6 = @ovirt=20 >> > vdsm-cli.noarch 4.13.3-3.el6 = @ovirt=20 >> > vdsm-python.x86_64 4.13.3-3.el6 = @ovirt=20 >> > vdsm-python-cpopen.x86_64 4.13.2-1.el6 = @ovirt=20 >> > vdsm-xmlrpc.noarch 4.13.3-3.el6 = @ovirt=20 >> > qemu-img-rhev.x86_64 2:0.12.1.2-2.415.el6 = @ovirt=20 >> > qemu-kvm-rhev.x86_64 2:0.12.1.2-2.415.el6 = @ovirt=20 >> > qemu-kvm-rhev-tools.x86_64 2:0.12.1.2-2.415.el6 = @ovirt=20 >> >=20 >> > server2:=20 >> > vdsm.x86_64 4.13.3-3.el6 @ovirt=20 >> > vdsm-cli.noarch 4.13.3-3.el6 @ovirt=20 >> > vdsm-python.x86_64 4.13.3-3.el6 @ovirt=20 >> > vdsm-python-cpopen.x86_64=20 >> > vdsm-xmlrpc.noarch 4.13.3-3.el6 @ovirt=20 >> > qemu-img-rhev.x86_64 2:0.12.1.2-2.415.el6=20 >> > qemu-kvm-rhev.x86_64 2:0.12.1.2-2.415.el6=20 >> >=20 >> >=20 >> >=20 >> > Thank you for your help=20 >> >=20 >> > Hans-Joachim=20 >> >=20 >> >=20 >> > _______________________________________________=20 >> > Users mailing list=20 >> > Users@ovirt.org=20 >> > http://lists.ovirt.org/mailman/listinfo/users=20 >> >=20 >>=20 >> anything in the libvirt log?=20 >=20 >=20 </pre></div></div></blockquote></span></span> --========GMXBoundary68791394728764546928--

On Thu, Mar 13, 2014 at 12:39:24PM -0400, Hans-Joachim wrote:
Hello,
Thank you for your help.
finally, it was a mismatch between a server running in SE permissive mode and a server running in disabled mode.
Yet another reminder that we should implement 894084 [RFE] engine should check and enforce selinux state in cluster policies Having Vdsm report selinux state (disabled/enforcing/permissive) in getVdsCaps should be a piece of cake.

Hi, what I really do not understand how could it be an issue if server 1 runs in permissive mode while server 2 runs in disabled mode? server 1 just logs selinux violations, how should this prevent anything? Am 16.03.2014 23:44, schrieb Dan Kenigsberg:
On Thu, Mar 13, 2014 at 12:39:24PM -0400, Hans-Joachim wrote:
Hello,
Thank you for your help.
finally, it was a mismatch between a server running in SE permissive mode and a server running in disabled mode.
Yet another reminder that we should implement
894084 [RFE] engine should check and enforce selinux state in cluster policies
Having Vdsm report selinux state (disabled/enforcing/permissive) in getVdsCaps should be a piece of cake.
-- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen

On 03/17/2014 05:44 AM, Sven Kieske wrote:
Hi,
what I really do not understand how could it be an issue if server 1 runs in permissive mode while server 2 runs in disabled mode?
server 1 just logs selinux violations, how should this prevent anything?
iirc, libvirt fails the selinux operations on the target host.
Am 16.03.2014 23:44, schrieb Dan Kenigsberg:
On Thu, Mar 13, 2014 at 12:39:24PM -0400, Hans-Joachim wrote:
Hello,
Thank you for your help.
finally, it was a mismatch between a server running in SE permissive mode and a server running in disabled mode.
Yet another reminder that we should implement
894084 [RFE] engine should check and enforce selinux state in cluster policies
Having Vdsm report selinux state (disabled/enforcing/permissive) in getVdsCaps should be a piece of cake.
participants (4)
-
Dan Kenigsberg
-
Hans-Joachim
-
Itamar Heim
-
Sven Kieske