[ovirt-users] ovirt-guest-agent outdated?

Vinzenz Feenstra vfeenstr at redhat.com
Thu Apr 9 08:03:27 UTC 2015


On 04/09/2015 09:55 AM, Jorick Astrego wrote:
>
>
> On 04/09/2015 08:56 AM, Vinzenz Feenstra wrote:
>> On 04/08/2015 04:34 PM, Jorick Astrego wrote:
>>> Hi,
>> Hi,
>>>
>>> Testing 3.5.2rc3, I see AVC denied messages for the ovrit-guest 
>>> agent (installed through cloud-init).
>>>
>>>     type=AVC msg=audit(1428510418.333:142): avc: denied  { read }
>>>     for  pid=1113 comm="ovirt-guest-age" name="online" dev=sysfs
>>>     ino=23 scontext=system_u:system_r:rhev_agentd_t:s0
>>>     tcontext=system_u:object_r:sysfs_t:s0 tclass=file
>>>     type=AVC msg=audit(1428510418.333:142): avc:  denied  { open }
>>>     for  pid=1113 comm="ovirt-guest-age" name="online" dev=sysfs
>>>     ino=23 scontext=system_u:system_r:rhev_agentd_t:s0
>>>     tcontext=system_u:object_r:sysfs_t:s0 tclass=file
>>>     type=SYSCALL msg=audit(1428510418.333:142): arch=c000003e
>>>     syscall=2 success=yes exit=6 a0=7f8a655612b8 a1=80000 a2=2803ff
>>>     a3=0 items=0 ppid=1 pid=1113 auid=4294967295 uid=175 gid=175
>>>     euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175
>>>     tty=(none) ses=4294967295 comm="ovirt-guest-age"
>>>     exe="/usr/bin/python" subj=system_u:system_r:rhev_agentd_t:s0
>>>     key=(null)
>>>
>>> And when I check the rpm I see:
>>>
>>>     rpm -qa|grep ovirt
>>>     ovirt-release-el6-10.0.1-3.noarch
>>>     ovirt-guest-agent-1.0.8-1.el6.noarch
>>>
>> Well the latest guest agent is always available on epel for el5/6/7 
>> and for fedora in the fedora repos I am not sure why it's not 
>> available in the public ovirt repositories, however that was somehow 
>> always a problem with ovirt releases, but I recommend anyway to use 
>> epel for the ovirt guest agent due to the fact that I am releasing 
>> the guest agent always to epel and it will get updated from there.
>>
>> Please also note that the repo location has changed. ovirt-3.5 for 
>> el6 is now here: http://resources.ovirt.org/pub/ovirt-3.5/rpm/el6/
>>
>> However what I don't know, is how the 3.3.3 repository got installed 
>> for you, I am not sure that this was done by the bare 'cloud-init', 
>> that might be specific to your cloud init configuration.
>
> Well that can't be specific. I completely wipe the test environment 
> every couple weeks and just provisioned a completely fresh ovirt 
> 3.5.2rc3 install.
>
> Normally I don't use cloud-init as we have foreman, but I was testing 
> it. The only thing I did was, create new VM and checked the 
> cloud-init/sysprep checkbox. The rest oVirt did automatically.
>
> What I think is happening is that the CentOS 6.5 image in the 
> ovirt-image-repository glance provider is outdated. I used this as 
> template for quick testing.
>
> Does anyone know who maintains these images?
Sandro, do you by any chance know who does?
>
>
>
>
>
>
>
> Met vriendelijke groet, With kind regards,
>
> Jorick Astrego*
>
> Netbulae Virtualization Experts *
> ------------------------------------------------------------------------
> Tel: 053 20 30 270 	info at netbulae.eu 	Staalsteden 4-3A 	KvK 08198180
> Fax: 053 20 30 271 	www.netbulae.eu 	7547 TA Enschede 	BTW NL821234584B01
>
>
> ------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users


-- 
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R & D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20150409/18d400da/attachment-0001.html>


More information about the Users mailing list