<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Aug 31, 2017 at 4:25 PM, Charles Kozler <span dir="ltr"><<a href="mailto:ckozleriii@gmail.com" target="_blank">ckozleriii@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Also, to add to this, I figured all nodes need to "equal" in terms of selinux now so I went on node 1 and set selinux to permissive, rebooted, and then vdsmd wouldnt start which would show the host as nonresponsive in engine UI. Upon inspection of the log it was because of the missing sebool module. So I ran 'vdsm-tool configure --force' and then vdsmd started fine. Once doing this the host came up in the web UI<div><br></div><div>Tested migrating a VM to it and it worked with no issue</div><div><br></div><div>Hope this helps someone else who lands in this situation, however, I'd like to know what the expected environment of ovirt is. It would be helpful to have some checks along the way for this condition if its a blocker for functions</div></div></blockquote><div><br></div><div>We do not test without SELinux enabled, and we know of issues when it's only half disabled.</div><div>Y.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Aug 31, 2017 at 9:09 AM, Charles Kozler <span dir="ltr"><<a href="mailto:ckozleriii@gmail.com" target="_blank">ckozleriii@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hello,<div><br></div><div>I recently installed ovirt cluster on 3 nodes and saw that I could only migrate one way</div><div><br></div><div>Reviewing the logs I found this</div><div><br></div><div><div>2017-08-31 09:04:30,685-0400 ERROR (migsrc/1eca84bd) [virt.vm] (vmId='1eca84bd-2796-469d-a071<wbr>-6ba2b21d82f4') unsupported configuration: Unable to find security driver for model selinux (migration:287)</div><div>2017-08-31 09:04:30,698-0400 ERROR (migsrc/1eca84bd) [virt.vm] (vmId='1eca84bd-2796-469d-a071<wbr>-6ba2b21d82f4') Failed to migrate (migration:429)</div><div>Traceback (most recent call last):</div><div> File "/usr/lib/python2.7/site-packa<wbr>ges/vdsm/virt/migration.py", line 411, in run</div><div> self._startUnderlyingMigration<wbr>(time.time())</div><div> File "/usr/lib/python2.7/site-packa<wbr>ges/vdsm/virt/migration.py", line 487, in _startUnderlyingMigration</div><div> self._perform_with_conv_schedu<wbr>le(duri, muri)</div><div> File "/usr/lib/python2.7/site-packa<wbr>ges/vdsm/virt/migration.py", line 563, in _perform_with_conv_schedule</div><div> self._perform_migration(duri, muri)</div><div> File "/usr/lib/python2.7/site-packa<wbr>ges/vdsm/virt/migration.py", line 529, in _perform_migration</div><div> self._vm._dom.migrateToURI3(du<wbr>ri, params, flags)</div><div> File "/usr/lib/python2.7/site-packa<wbr>ges/vdsm/virt/virdomain.py", line 69, in f</div><div> ret = attr(*args, **kwargs)</div><div> File "/usr/lib/python2.7/site-packa<wbr>ges/vdsm/libvirtconnection.py"<wbr>, line 123, in wrapper</div><div> ret = f(*args, **kwargs)</div><div> File "/usr/lib/python2.7/site-packa<wbr>ges/vdsm/utils.py", line 944, in wrapper</div><div> return func(inst, *args, **kwargs)</div><div> File "/usr/lib64/python2.7/site-pac<wbr>kages/libvirt.py", line 1939, in migrateToURI3</div><div> if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed', dom=self)</div><div>libvirtError: unsupported configuration: Unable to find security driver for model selinux</div></div><div><br></div><div><br></div><div>Which led me to this</div><div><br></div><div><a href="https://bugzilla.redhat.com/show_bug.cgi?id=1013617" target="_blank">https://bugzilla.redhat.com/sh<wbr>ow_bug.cgi?id=1013617</a><br></div><div><br></div><div>I could migrate from node1 -> node 2 but not node2 -> node1, so obviously I had something different with node 1. In this case, it was selinux</div><div><br></div><div>On node 1 it is set to disabled but on node 2 it is set to permissive. I am not sure how they got different but I wanted to update this list with this finding</div><div><br></div><div>Node 2 was setup directly via web UI in the engine with host -> new. Perhaps I manually set node 1 to disabled </div><div><br></div><div>Does ovirt / libvirt expect permissive? Or does it expect enforcing? Or does it need to be both the same matching?</div><div><br></div><div>thanks!</div></div>
</blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br>
<br></blockquote></div><br></div></div>