Bug 1351296

Summary:	doc specifies root user to connect to libvirt/kvm provider, instead of foreman user
Product:	Red Hat Satellite	Reporter:	Karl Stevens <kstevens>
Component:	Docs Provisioning Guide	Assignee:	Dan Macpherson <dmacpher>
Status:	CLOSED NOTABUG	QA Contact:	satellite-doc-list
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	6.2.0	CC:	dmacpher
Target Milestone:	Unspecified
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-06-30 05:40:13 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Karl Stevens 2016-06-29 16:04:45 UTC

Document URL: 

https://access.redhat.com/documentation/en/red-hat-satellite/6.2-beta/provisioning-guide/chapter-7-provisioning-virtual-machines-on-a-kvm-server-libvirt

Section Number and Name: 

7.2. CONFIGURING THE SATELLITE SERVER FOR KVM CONNECTIONS

Describe the issue: 

Doc specifies copying ssh key for, and connecting as root to the libvirt/kvm host, but in my implementation I found that I needed to create a user 'foreman' in the group 'libvirt' on the KVM host, and then copy the ssh key and connect as user 'foreman' from the Satellite server to the libvirt/kvm host, as suggested here:
http://projects.theforeman.org/projects/foreman/wiki/Virtual_Machine_Provisioning/16

Suggestions for improvement: 

Doc should reflect that foreman user be used rather than root

Additional information:

Comment 1 Dan Macpherson 2016-06-30 00:52:53 UTC

Hi Karl,

Thanks for submitting this BZ. However, I don't think this is a bug in the documentation because you can use any user on libvirt server just as long as you copy the SSH key to that specific user on the libvirt server from the foreman user on the Satellite server. This means you can use the root user or create a special user for libvirt access.

For example, in the upstream Foreman docs, they use the root user on the libvirt server:

https://theforeman.org/manuals/1.11/index.html#5.2.5LibvirtNotes

I'm thinking of closing this as NOTABUG, but was there anything you wanted to add in this case.

Comment 2 Karl Stevens 2016-06-30 05:36:29 UTC

Hi Dan

My apologies. Yes, I can see that this *should* work as root.  In my case i've copied the keys OK and can ssh without password from the Sat6 host to the KVM host, but the issue is with running the virsh commands requesting password, even directly as root on the KVM server.  I can debug this issue separately on my system, and I accept this is not a bug in the Sat documentation.  Please feel free to close.

Comment 3 Dan Macpherson 2016-06-30 05:40:13 UTC

No problem. If you need any help with debugging, please feel free to reach out to me at dmacpher.