[ovirt-users] gluster VM disk permissions

Bill James bill.james at j2.com
Tue May 24 18:18:49 UTC 2016

I just tried importing using the import script and got this error:

[root at ovirt1 prod ~]# import-to-ovirt.pl 
libvirt needs authentication to connect to libvirt URI qemu:///system
(see also: http://libvirt.org/auth.html http://libvirt.org/uri.html)
Please enter your authentication name: vdsm at ovirt
Please enter your password:
could not create appliance through libvirt.

Try running qemu directly without libvirt using this environment variable:

Original error from libvirt: internal error: process exited while 
connecting to monitor: 2016-05-24T18:10:21.651694Z qemu-kvm: -drive 
Could not open '/tmp/libguestfsWx9FbI/overlay1': Permission denied
  [code=1 domain=10] at /usr/local/bin/import-to-ovirt.pl line 233.

I believe this is the same error that prompted me to use "user = root" 
in qemu.conf, but sounds like there is a better resolution?

[root at ovirt1 prod qemu]# less guestfs-7ogk4gszrvsyv7j7.log
2016-05-24 18:10:21.617+0000: starting up libvirt version: 1.2.17, 
package: 13.el7_2.4 (CentOS BuildSystem <http://bugs.centos.org>, 
2016-03-31-16:56:26, worker1.bsys.centos.org), qemu version: 2.3.0 
LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin 
QEMU_AUDIO_DRV=none TMPDIR=/var/tmp /usr/libexec/qemu-kvm -name 
guestfs-7ogk4gszrvsyv7j7 -S -machine 
pc-i440fx-rhel7.2.0,accel=kvm,usb=off -cpu host -m 500 -realtime 
mlock=off -smp 1,sockets=1,cores=1,threads=1 -uuid 
ceeecdda-e44e-4227-990d-84261d0161aa -nographic -no-user-config 
-nodefaults -device sga -chardev 
-mon chardev=charmonitor,id=monitor,mode=control -rtc 
base=utc,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet 
-no-reboot -no-acpi -boot strict=on -kernel 
/var/tmp/.guestfs-0/appliance.d/kernel -initrd 
/var/tmp/.guestfs-0/appliance.d/initrd -append panic=1 console=ttyS0 
udevtimeout=6000 udev.event-timeout=6000 no_timer_check acpi=off 
printk.time=1 cgroup_disable=memory root=/dev/sdb selinux=0 TERM=screen 
-device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device 
virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x2 -device 
virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x3 -drive 
-chardev socket,id=charserial0,path=/tmp/libguestfsWx9FbI/console.sock 
-device isa-serial,chardev=charserial0,id=serial0 -chardev 
socket,id=charchannel0,path=/tmp/libguestfsWx9FbI/guestfsd.sock -device 
-device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x4 -msg timestamp=on
Domain id=5 is tainted: custom-argv
Domain id=5 is tainted: host-cpu
2016-05-24T18:10:21.651694Z qemu-kvm: -drive 
Could not open '/tmp/libguestfsWx9FbI/overlay1': Permission denied
2016-05-24 18:10:21.825+0000: shutting down

[root at ovirt1 prod ~]# ps -e -o 
euser,user,suser,fuser,egroup,rgroup,sgroup,fgroup,cmd | egrep 
'qemu-kvm'|head -2
qemu     qemu     qemu     qemu     qemu     qemu     qemu qemu     
/usr/libexec/qemu-kvm -name billj6-1.j2noc.com -S -machine 
pc-i440fx-rhel7.2.0,accel=kvm,usb=off -cpu SandyBridge -m 
size=2097152k,slots=16,maxmem=4294967296k -realtime mlock=off -smp 
1,maxcpus=16,sockets=16,cores=1,threads=1 -numa 
node,nodeid=0,cpus=0,mem=2048 -uuid 60ded316-aa18-4eda-9c52-16016d026e1a 
-smbios type=1,manufacturer=oVirt,product=oVirt 

On 05/23/2016 09:17 AM, Richard W.M. Jones wrote:
> On Mon, May 23, 2016 at 09:00:48AM -0700, Bill James wrote:
>> thank you very much for the reply.
>> My main question now is does it required to use "user = root" in
>> qemu.conf for the import script to work?
> I haven't knowingly modified qemu.conf in my life, so likely the
> answer is no.
> Rich.

Cloud Services for Business www.j2.com
j2 | eFax | eVoice | FuseMail | Campaigner | KeepItSafe | Onebox

This email, its contents and attachments contain information from j2 Global, Inc. and/or its affiliates which may be privileged, confidential or otherwise protected from disclosure. The information is intended to be for the addressee(s) only. If you are not an addressee, any disclosure, copy, distribution, or use of the contents of this message is prohibited. If you have received this email in error please notify the sender by reply e-mail and delete the original message and any copies. (c) 2015 j2 Global, Inc. All rights reserved. eFax, eVoice, Campaigner, FuseMail, KeepItSafe, and Onebox are registered trademarks of j2 Global, Inc. and its affiliates.

More information about the Users mailing list