[ovirt-users] ovirt-guest-agent outdated?

[Vinzenz Feenstra]

On 04/08/2015 04:34 PM, Jorick Astrego wrote:
> Hi,
Hi,
>
> Testing 3.5.2rc3, I see AVC denied messages for the ovrit-guest agent 
> (installed through cloud-init).
>
>     type=AVC msg=audit(1428510418.333:142): avc:  denied { read } for 
>     pid=1113 comm="ovirt-guest-age" name="online" dev=sysfs ino=23
>     scontext=system_u:system_r:rhev_agentd_t:s0
>     tcontext=system_u:object_r:sysfs_t:s0 tclass=file
>     type=AVC msg=audit(1428510418.333:142): avc:  denied  { open }
>     for  pid=1113 comm="ovirt-guest-age" name="online" dev=sysfs
>     ino=23 scontext=system_u:system_r:rhev_agentd_t:s0
>     tcontext=system_u:object_r:sysfs_t:s0 tclass=file
>     type=SYSCALL msg=audit(1428510418.333:142): arch=c000003e
>     syscall=2 success=yes exit=6 a0=7f8a655612b8 a1=80000 a2=2803ff
>     a3=0 items=0 ppid=1 pid=1113 auid=4294967295 uid=175 gid=175
>     euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175 tty=(none)
>     ses=4294967295 comm="ovirt-guest-age" exe="/usr/bin/python"
>     subj=system_u:system_r:rhev_agentd_t:s0 key=(null)
>
> And when I check the rpm I see:
>
>     rpm -qa|grep ovirt
>     ovirt-release-el6-10.0.1-3.noarch
>     ovirt-guest-agent-1.0.8-1.el6.noarch
>
Well the latest guest agent is always available on epel for el5/6/7 and 
for fedora in the fedora repos I am not sure why it's not available in 
the public ovirt repositories, however that was somehow always a problem 
with ovirt releases, but I recommend anyway to use epel for the ovirt 
guest agent due to the fact that I am releasing the guest agent always 
to epel and it will get updated from there.

Please also note that the repo location has changed. ovirt-3.5 for el6 
is now here: http://resources.ovirt.org/pub/ovirt-3.5/rpm/el6/

However what I don't know, is how the 3.3.3 repository got installed for 
you, I am not sure that this was done by the bare 'cloud-init', that 
might be specific to your cloud init configuration.

> Then I checked the cloud-init installed 
> /etc/yum.repos.d/el6-ovirt.repo and see version 3.3.3 is active. 
> Shouldn't this be updated to 3.5.* ????
>
>     [ovirt-stable]
>     name=Older Stable builds of the oVirt project
>     baseurl=http://ovirt.org/releases/stable/rpm/EL/$releasever/
>     enabled=1
>     skip_if_unavailable=1
>     gpgcheck=0
>
>     [ovirt-3.3.3]
>     name=oVirt 3.3.3 release
>     baseurl=http://resources.ovirt.org/releases/3.3.3/rpm/EL/$releasever/
>     enabled=1
>     skip_if_unavailable=1
>     gpgcheck=0
>
>     [ovirt-updates-testing]
>     name=Test Updates builds of the oVirt project
>     baseurl=http://ovirt.org/releases/updates-testing/rpm/EL/$releasever/
>     enabled=0
>     skip_if_unavailable=1
>     gpgcheck=0
>
>     [ovirt-beta]
>     name=Beta builds of the oVirt project
>     baseurl=http://ovirt.org/releases/beta/rpm/EL/$releasever/
>     enabled=0
>     skip_if_unavailable=1
>     gpgcheck=0
>
>     [ovirt-nightly]
>     name=Nightly builds of the oVirt project
>     baseurl=http://ovirt.org/releases/nightly/rpm/EL/$releasever/
>     enabled=0
>     skip_if_unavailable=1
>     gpgcheck=0
>
>     [ovirt-3.4.0-alpha]
>     name=3.4.0 alpha testing repo for the oVirt project
>     baseurl=http://ovirt.org/releases/3.4.0-alpha/rpm/EL/$releasever/
>     enabled=0
>     skip_if_unavailable=1
>     gpgcheck=0
>
>     [ovirt-3.4.0-prerelease]
>     name=Pre release builds of the oVirt 3.4 project
>     baseurl=http://resources.ovirt.org/releases/3.4.0_pre/rpm/EL/$releasever/
>     enabled=0
>     skip_if_unavailable=1
>     gpgcheck=0
>
>
>
>
>
>
>
> Met vriendelijke groet, With kind regards,
>
> Jorick Astrego*
>
> Netbulae Virtualization Experts *
> ------------------------------------------------------------------------
> Tel: 053 20 30 270 	info at netbulae.eu 	Staalsteden 4-3A 	KvK 08198180
> Fax: 053 20 30 271 	www.netbulae.eu 	7547 TA Enschede 	BTW NL821234584B01
>
>
> ------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users


-- 
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R & D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20150409/6e7f24e0/attachment.html>