[ovirt-users] Ip spoofing

Punit Dambiwal hypunit at gmail.com
Mon Jun 30 02:11:21 UTC 2014


Hi Dan,

I did the same as you suggested...please find the attached logs and
domainxml....


On Fri, Jun 27, 2014 at 7:51 PM, Dan Kenigsberg <danken at redhat.com> wrote:

> On Fri, Jun 27, 2014 at 05:36:49PM +0800, Punit Dambiwal wrote:
> > Hi Dan,
> >
> > Please find the below :-
> >
> > [root at gfs1 ~]#  su - vdsm -s /bin/bash
> > -bash-4.1$ cd /usr/share/vdsm; python -c 'import hooks;print
> > hooks._scriptsPerDir("before_device_create")'
> > ['/usr/libexec/vdsm/hooks/before_device_create/50_noipspoof']
> > -bash-4.1$
>
> very odd. could you try again and attach a fresh log of the vmCreate
> flow? Maybe you could add a
>
>   sys.stderr.write('%s' % os.environ)
>
> line in the main() function of the script just to see if it's ever
> called?
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20140630/6036a8a8/attachment-0001.html>
-------------- next part --------------
<domain type='kvm' id='26'>
  <name>vm100</name>
  <uuid>98753df5-f972-425a-92b5-d376e16d939a</uuid>
  <memory unit='KiB'>1048576</memory>
  <currentMemory unit='KiB'>1048576</currentMemory>
  <memtune>
    <min_guarantee unit='KiB'>1048576</min_guarantee>
  </memtune>
  <vcpu placement='static' current='1'>160</vcpu>
  <cputune>
    <shares>1020</shares>
  </cputune>
  <sysinfo type='smbios'>
    <system>
      <entry name='manufacturer'>oVirt</entry>
      <entry name='product'>oVirt Node</entry>
      <entry name='version'>6-5.el6.centos.11.1</entry>
      <entry name='serial'>44454C4C-3500-104B-8051-B6C04F504E31</entry>
      <entry name='uuid'>98753df5-f972-425a-92b5-d376e16d939a</entry>
    </system>
  </sysinfo>
  <os>
    <type arch='x86_64' machine='rhel6.5.0'>hvm</type>
    <boot dev='hd'/>
    <smbios mode='sysinfo'/>
  </os>
  <features>
    <acpi/>
  </features>
  <cpu mode='custom' match='exact'>
    <model fallback='allow'>Nehalem</model>
    <topology sockets='160' cores='1' threads='1'/>
  </cpu>
  <clock offset='variable' adjustment='0' basis='utc'>
    <timer name='rtc' tickpolicy='catchup'/>
  </clock>
  <on_poweroff>destroy</on_poweroff>
  <on_reboot>restart</on_reboot>
  <on_crash>destroy</on_crash>
  <devices>
    <emulator>/usr/libexec/qemu-kvm</emulator>
    <disk type='file' device='cdrom'>
      <driver name='qemu' type='raw'/>
      <source startupPolicy='optional'/>
      <target dev='hdc' bus='ide'/>
      <readonly/>
      <serial></serial>
      <alias name='ide0-1-0'/>
      <address type='drive' controller='0' bus='1' target='0' unit='0'/>
    </disk>
    <disk type='file' device='cdrom'>
      <driver name='qemu' type='raw'/>
      <source file='/var/run/vdsm/payload/98753df5-f972-425a-92b5-d376e16d939a.12ec06e6b66f8291886fd33f0007dc75.img' startupPolicy='optional'/>
      <target dev='hdd' bus='ide'/>
      <readonly/>
      <serial></serial>
      <alias name='ide0-1-1'/>
      <address type='drive' controller='0' bus='1' target='0' unit='1'/>
    </disk>
    <disk type='file' device='disk' snapshot='no'>
      <driver name='qemu' type='raw' cache='none' error_policy='stop' io='threads'/>
      <source file='/rhev/data-center/mnt/glusterSD/117.18.79.174:_vol2/e9180a4c-74e3-496a-b472-baa3c50d2cd2/images/ce7177f6-770f-42a5-a2a9-e746a82ed14d/cf72d3a5-aad4-46c9-a4eb-7e8336ebc717'>
        <seclabel model='selinux' relabel='no'/>
      </source>
      <target dev='vda' bus='virtio'/>
      <serial>ce7177f6-770f-42a5-a2a9-e746a82ed14d</serial>
      <alias name='virtio-disk0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/>
    </disk>
    <controller type='usb' index='0'>
      <alias name='usb0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x2'/>
    </controller>
    <controller type='ide' index='0'>
      <alias name='ide0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/>
    </controller>
    <controller type='virtio-serial' index='0'>
      <alias name='virtio-serial0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/>
    </controller>
    <interface type='bridge'>
      <mac address='00:1a:4a:81:80:01'/>
      <source bridge='private'/>
      <target dev='vnet0'/>
      <model type='virtio'/>
      <filterref filter='vdsm-no-mac-spoofing'/>
      <link state='up'/>
      <alias name='net0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/>
    </interface>
    <channel type='unix'>
      <source mode='bind' path='/var/lib/libvirt/qemu/channels/98753df5-f972-425a-92b5-d376e16d939a.com.redhat.rhevm.vdsm'/>
      <target type='virtio' name='com.redhat.rhevm.vdsm'/>
      <alias name='channel0'/>
      <address type='virtio-serial' controller='0' bus='0' port='1'/>
    </channel>
    <channel type='unix'>
      <source mode='bind' path='/var/lib/libvirt/qemu/channels/98753df5-f972-425a-92b5-d376e16d939a.org.qemu.guest_agent.0'/>
      <target type='virtio' name='org.qemu.guest_agent.0'/>
      <alias name='channel1'/>
      <address type='virtio-serial' controller='0' bus='0' port='2'/>
    </channel>
    <input type='tablet' bus='usb'>
      <alias name='input0'/>
    </input>
    <input type='mouse' bus='ps2'/>
    <graphics type='vnc' port='5900' autoport='yes' listen='0' keymap='en-us' passwdValidTo='1970-01-01T00:00:01'>
      <listen type='address' address='0'/>
    </graphics>
    <video>
      <model type='cirrus' vram='32768' heads='1'/>
      <alias name='video0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/>
    </video>
    <memballoon model='none'>
      <alias name='balloon0'/>
    </memballoon>
  </devices>
  <seclabel type='dynamic' model='selinux' relabel='yes'>
    <label>system_u:system_r:svirt_t:s0:c942,c1012</label>
    <imagelabel>system_u:object_r:svirt_image_t:s0:c942,c1012</imagelabel>
  </seclabel>
</domain>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vdsm.log
Type: application/octet-stream
Size: 79485 bytes
Desc: not available
URL: <http://lists.ovirt.org/pipermail/users/attachments/20140630/6036a8a8/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vdsm1.log
Type: application/octet-stream
Size: 194907 bytes
Desc: not available
URL: <http://lists.ovirt.org/pipermail/users/attachments/20140630/6036a8a8/attachment-0003.obj>


More information about the Users mailing list