<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Nov 19, 2016 at 7:35 AM, Kenneth Bingham <span dir="ltr"><<a target="_blank" href="mailto:w@qrk.us">w@qrk.us</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><div dir="ltr">I suspect this has something to do with macspoofing because I found that I was able to start a guest by changing the virtual network interface profile to remove network filtering. I verified the guests are able to start with filtering enabled on the vnic profile if it is set to false in engine-config and ovirt-engine service bounced. I'd prefer to leaf macspoofing disabled globally and only enable for things like VRR, CARP; but I'll have to leave it enabled for now. Could it be that the macs of the imported guests, being from the foreign mac pool, are being blocked by an ebtables policy? I wonder if I add their Ethernet range to the pools of the gaining Manager...</div><div class="gmail-HOEnZb"><div class="gmail-h5"><br><div class="gmail_quote"><div dir="ltr">On Fri, Nov 18, 2016 at 9:35 PM Kenneth Bingham <<a target="_blank" href="mailto:w@qrk.us">w@qrk.us</a>> wrote:<br></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><div class="gmail-m_-6432848098067399668gmail_msg" dir="ltr"><div class="gmail-m_-6432848098067399668gmail_msg">I imported a guest from its iscsi storage domain and clicked the green UP button, but the guest failed to start. This was the first time vdsm tried to create a temporary storage domain for a host other than hosted_engine. I'm using the same chap credential that was used with the same iscsi storage domain with the old instance of Manager. It looks like it wasn't able to get permission to do something, but everything was set up with sudo-as-root. I used CentOS 7.2 with the ovirt-release repository and hosted-engine script to deploy Manager.</div><div class="gmail-m_-6432848098067399668gmail_msg"><br class="gmail-m_-6432848098067399668gmail_msg"></div><div class="gmail-m_-6432848098067399668gmail_msg">From /var/log/vdsm/vdsm.log on the host where it tried to start:</div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace">Thread-23385::ERROR::2016-11-<wbr>19 02:12:41,907::vm::765::virt.<wbr>vm::(_startUnderlyingVm) vmId=`c3125d32-ae2a-4d2f-af4c-<wbr>13661d90ddf9`::<b class="gmail-m_-6432848098067399668gmail_msg">The vm start process failed</b></font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace">Traceback (most recent call last):</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> File "/usr/share/vdsm/virt/vm.py", line 706, in _startUnderlyingVm</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> self._run()</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> File "/usr/share/vdsm/virt/vm.py", line 1996, in _run</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> self._connection.createXML(<wbr>domxml, flags),</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> File "/usr/lib/python2.7/site-<wbr>packages/vdsm/<wbr>libvirtconnection.py", line 123, in wrapper</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> ret = f(*args, **kwargs)</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> File "/usr/lib/python2.7/site-<wbr>packages/vdsm/utils.py", line 917, in wrapper</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> return func(inst, *args, **kwargs)</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> File "<b class="gmail-m_-6432848098067399668gmail_msg">/usr/lib64/python2.7/site-<wbr>packages/libvirt.py</b>", line 3611, in <b class="gmail-m_-6432848098067399668gmail_msg">createXML</b></font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> if ret is None:raise libvirtError('<wbr>virDomainCreateXML() failed', conn=self)</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace">libvirtError: internal error: <b class="gmail-m_-6432848098067399668gmail_msg">Could not get access to ACL tech driver 'ebiptables'</b></font></div><div class="gmail-m_-6432848098067399668gmail_msg"><br class="gmail-m_-6432848098067399668gmail_msg"></div><div class="gmail-m_-6432848098067399668gmail_msg"><div class="gmail-m_-6432848098067399668gmail_msg">From <span class="gmail-m_-6432848098067399668gmail_msg" style="font-family:monospace">/usr/lib64/python2.7/<wbr>site-packages/libvirt.py which raised the error:</span></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace">def createXML(self, xmlDesc, flags=0):</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> """Launch a new guest domain, based on an XML description similar</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> to the one returned by virDomainGetXMLDesc()</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> This function may require privileged access to the hypervisor.</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> The domain is not persistent, so its definition will disappear when it</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> is destroyed, or if the host is restarted (see virDomainDefineXML() to</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> define persistent domains).</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> </font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> If the VIR_DOMAIN_START_PAUSED flag is set, the guest domain</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> will be started, but its CPUs will remain paused. The CPUs</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> can later be manually started using virDomainResume.</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> </font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> If the VIR_DOMAIN_START_AUTODESTROY flag is set, the guest</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> domain will be automatically destroyed when the virConnectPtr</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> object is finally released. This will also happen if the</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> client application crashes / loses its connection to the</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> libvirtd daemon. Any domains marked for auto destroy will</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> block attempts at migration, save-to-file, or snapshots.</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> </font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> virDomainFree should be used to free the resources after the</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> domain object is no longer needed. """</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> ret = libvirtmod.virDomainCreateXML(<wbr>self._o, xmlDesc, flags)</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> if ret is None:raise libvirtError('<wbr>virDomainCreateXML() failed', conn=self)</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> __tmp = virDomain(self,_obj=ret)</font></div><div class="gmail-m_-6432848098067399668gmail_msg"><font class="gmail-m_-6432848098067399668gmail_msg" face="monospace"> return __tmp</font></div></div><div class="gmail-m_-6432848098067399668gmail_msg"><br class="gmail-m_-6432848098067399668gmail_msg"></div></div></blockquote></div>
</div></div><br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a target="_blank" rel="noreferrer" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br>
<br></blockquote></div><br></div><div class="gmail_extra">Please include the Kernel, libvirt and ebtables versions you run with.<br></div><div class="gmail_extra">In addition, the logs from libvirt and vdsm (vdsm.log, supervdsm.log) would help.<br><br></div><div class="gmail_extra">Laine, Thomas, can this be related to <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1396032">https://bugzilla.redhat.com/show_bug.cgi?id=1396032</a> ?<br> <br></div><div class="gmail_extra"><br></div></div>