[Users] Starting VM Error

[Dan Kenigsberg]

On Mon, Sep 02, 2013 at 03:41:41PM +0200, Joop wrote:
> Dan Kenigsberg wrote:
> >On Sun, Sep 01, 2013 at 08:41:24PM +0200, Joop wrote:
> >>Shaun Glass wrote:
> >>>Good Day All,
> >>>
> >>>I am running the latest version of oVirt for Fedora 18 (3.2.2)
> >>>
> >>>I have re-installed just in case but still get this error below :
> >>>
> >>>VM freenas is down. Exit message: internal error process exited
> >>>while connecting to monitor: ((null):3390): Spice-Warning **:
> >>>reds.c:3247:reds_init_ssl: Could not use private key file
> >>>qemu-kvm: failed to initialize spice server .
> >>>
> >>Got the same error on one of my hosts which I incidentally I just
> >>upgraded and before the upgrade it did work. On my other hosts which
> >>isn't upgraded yet I can still start VMs. The differences are
> >>minimal but either libvirt of qemu is probably having a problem.
> >>Reinstalling will give you the latest packages WITH the problem so
> >>that won't help.
> >>I'll try to add logs tomorrow.
> >
> >Please include qemu logs from /var/log/libvirt/qemu/<vmname>.log, and
> >the qemu/libvirt versions on the working setup and the failing one.
> OK, here come the logs.
> Logs and packages might seem strange at first but don't worry to
> much about that. The *working* files are from a rather standard
> install of F18 and the *nonw* are from a F18 install which used to
> be a allinone but has been 'converted' to an engine/host, thats why
> it has a quite a few more packages. This worked until I did yum
> update!
> Can't go back because yum downgrade will go back to the base
> packages and there are requirements because of other packages and
> thus won't work.
> 
> Regards,
> 
> Joop
> 
> 

> 2013-09-02 15:12:02.988+0000: starting up
> LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin QEMU_AUDIO_DRV=spice /usr/bin/qemu-kvm -name test06-puzzle-it-local -S -M pc-0.14 -cpu Nehalem,+vmx -enable-kvm -m 1024 -smp 2,sockets=1,cores=2,threads=1 -uuid a4d1cbed-3daa-4669-8f1d-3a6cdd4337a9 -smbios type=1,manufacturer=oVirt,product=oVirt Node,version=18-1,serial=dee2fbc8-b54c-46dc-87c1-fa2ea3784c1f,uuid=a4d1cbed-3daa-4669-8f1d-3a6cdd4337a9 -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/test06-puzzle-it-local.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=2013-09-02T15:12:02,driftfix=slew -no-shutdown -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x4 -drive if=none,id=drive-ide0-1-0,readonly=on,format=raw,serial= -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/rhev/data-center/ccf85fab-6d36-4db9-bffd-e55b78bcf100/4897d9dc-f651-466d-bbe6-9f884892f77f/images/3b0de05b-3b7d-4664-8e6c-a11be5c5ee83/27eee563-2b6e-4663-99a8-4c420bed1068,if=none,id=drive-virtio-disk0,format=qcow2,serial=3b0de05b-3b7d-4664-8e6c-a11be5c5ee83,cache=none,werror=stop,rerror=stop,aio=threads -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 -netdev tap,fd=27,id=hostnet0,vhost=on,vhostfd=28 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:a8:0b:f5,bus=pci.0,addr=0x3,bootindex=1 -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/test06-puzzle-it-local.com.redhat.rhevm.vdsm,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.vdsm -chardev socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/test06-puzzle-it-local.org.qemu.guest_agent.0,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0 -chardev spicevmc,id=charchannel2,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=3,chardev=charchannel2,id=channel2,name=com.redhat.spice.0 -spice port=5900,tls-port=5901,addr=0,x509-dir=/etc/pki/vdsm/libvirt-spice,tls-channel=main,tls-channel=display,tls-channel=inputs,tls-channel=cursor,tls-channel=playback,tls-channel=record,tls-channel=smartcard,tls-channel=usbredir -k en-us -vga qxl -global qxl-vga.vram_size=67108864 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6

> spice-server-0.12.2-3.fc18.x86_64
> spice-vdagent-0.14.0-1.fc18.x86_64

> ipxe-roms-qemu-20120328-2.gitaac9718.fc18.noarch
> libvirt-daemon-driver-qemu-0.10.2.4-1.fc18.x86_64
> qemu-common-1.2.2-11.fc18.x86_64
> qemu-img-1.2.2-11.fc18.x86_64
> qemu-kvm-1.2.2-11.fc18.x86_64
> qemu-kvm-tools-1.2.2-11.fc18.x86_64
> qemu-system-x86-1.2.2-11.fc18.x86_64

> libvirt-0.10.2.4-1.fc18.x86_64
> libvirt-client-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-config-network-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-config-nwfilter-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-interface-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-libxl-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-lxc-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-network-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-nodedev-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-nwfilter-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-qemu-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-secret-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-storage-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-uml-0.10.2.4-1.fc18.x86_64
> libvirt-daemon-driver-xen-0.10.2.4-1.fc18.x86_64
> libvirt-lock-sanlock-0.10.2.4-1.fc18.x86_64
> libvirt-python-0.10.2.4-1.fc18.x86_64

> spice-glib-0.18-2.fc18.x86_64
> spice-gtk3-0.18-2.fc18.x86_64
> spice-parent-15-6.fc18.noarch
> spice-server-0.12.0-1.fc18.x86_64
> spice-vdagent-0.14.0-1.fc18.x86_64
> spice-xpi-2.8-1.fc18.x86_64

> libvirt-0.10.2.7-1.fc18.x86_64
> libvirt-client-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-config-network-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-config-nwfilter-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-interface-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-libxl-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-lxc-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-network-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-nodedev-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-nwfilter-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-qemu-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-secret-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-storage-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-uml-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-driver-xen-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-kvm-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-qemu-0.10.2.7-1.fc18.x86_64
> libvirt-devel-0.10.2.7-1.fc18.x86_64
> libvirt-docs-0.10.2.7-1.fc18.x86_64
> libvirt-gconfig-0.1.6-1.fc18.x86_64
> libvirt-gconfig-devel-0.1.6-1.fc18.x86_64
> libvirt-glib-0.1.6-1.fc18.x86_64
> libvirt-glib-devel-0.1.6-1.fc18.x86_64
> libvirt-gobject-0.1.6-1.fc18.x86_64
> libvirt-gobject-devel-0.1.6-1.fc18.x86_64
> libvirt-lock-sanlock-0.10.2.7-1.fc18.x86_64
> libvirt-python-0.10.2.7-1.fc18.x86_64

> ipxe-roms-qemu-20120328-2.gitaac9718.fc18.noarch
> libvirt-daemon-driver-qemu-0.10.2.7-1.fc18.x86_64
> libvirt-daemon-qemu-0.10.2.7-1.fc18.x86_64
> qemu-1.2.2-13.fc18.x86_64
> qemu-common-1.2.2-13.fc18.x86_64
> qemu-img-1.2.2-13.fc18.x86_64
> qemu-kvm-1.2.2-13.fc18.x86_64
> qemu-system-alpha-1.2.2-13.fc18.x86_64
> qemu-system-arm-1.2.2-13.fc18.x86_64
> qemu-system-cris-1.2.2-13.fc18.x86_64
> qemu-system-lm32-1.2.2-13.fc18.x86_64
> qemu-system-m68k-1.2.2-13.fc18.x86_64
> qemu-system-microblaze-1.2.2-13.fc18.x86_64
> qemu-system-mips-1.2.2-13.fc18.x86_64
> qemu-system-or32-1.2.2-13.fc18.x86_64
> qemu-system-ppc-1.2.2-13.fc18.x86_64
> qemu-system-s390x-1.2.2-13.fc18.x86_64
> qemu-system-sh4-1.2.2-13.fc18.x86_64
> qemu-system-sparc-1.2.2-13.fc18.x86_64
> qemu-system-unicore32-1.2.2-13.fc18.x86_64
> qemu-system-x86-1.2.2-13.fc18.x86_64
> qemu-system-xtensa-1.2.2-13.fc18.x86_64
> qemu-user-1.2.2-13.fc18.x86_64

> 2013-09-02 14:14:46.460+0000: starting up
> LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin QEMU_AUDIO_DRV=spice /usr/bin/qemu-kvm -name test06-puzzle-it-local 
> ((null):4547): Spice-Warning **: reds.c:3317:reds_init_ssl: Could not use private key file
> qemu-kvm: -drive file=/rhev/data-center/ccf85fab-6d36-4db9-bffd-e55b78bcf100/4897d9dc-f651-466d-bbe6-9f884892f77f/images/3b0de05b-3b7d-4664-8e6c-a11be5c5ee83/27eee563-2b6e-4663-99a8-4c420bed1068,if=none,id=drive-virtio-disk0,format=qcow2,serial=3b0de05b-3b7d-4664-8e6c-a11be5c5ee83,cache=none,werror=stop,rerror=stop,aio=threads: could not open disk image /rhev/data-center/ccf85fab-6d36-4db9-bffd-e55b78bcf100/4897d9dc-f651-466d-bbe6-9f884892f77f/images/3b0de05b-3b7d-4664-8e6c-a11be5c5ee83/27eee563-2b6e-4663-99a8-4c420bed1068: Permission denied
> 2013-09-02 14:14:46.677+0000: shutting down

I'm only guessing here, but has there been a change in selinux-policy?
Is selinux enforcing?

Could you provide the output of

ls -lRZ /etc/pki/vdsm ?
Does these paths show up in /var/log/audit.log?