Bug 1853568

Summary:	Permission denied when starting VM
Product:	[oVirt] vdsm	Reporter:	Robin Opletal <me>
Component:	General	Assignee:	bugs <bugs>
Status:	CLOSED DUPLICATE	QA Contact:	Lukas Svaty <lsvaty>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	---	CC:	ahadas, bugs
Target Milestone:	ovirt-4.4.1
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-07-06 20:05:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Virt	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Robin Opletal 2020-07-03 07:01:06 UTC

Description of problem:

I am getting permission denied error when starting a VM from NFS attached storage. I have manually inspected the user permissions as well as SELinux logs, but everything looks good there.

Here is the error:

VM CentOS-8-test is down with error. Exit message: internal error: child reported (status=125): unable to open /rhev/data-center/e6958f26-bc70-11ea-a2b8-005056ad2176/63c16b7d-25ff-4fc2-8a68-23805f9d5543/images/999310c6-6ac5-49ee-a44f-675a698e9c0c/0b9d48bd-2849-4dfb-a463-7844d8e01fea: Permission denied.

Version-Release number of selected component (if applicable):


How reproducible:

100%

Steps to Reproduce:
1. Go to Compute > Virtual Machines > Select virtual machine > Run
2. Done

Comment 1 Robin Opletal 2020-07-03 07:14:44 UTC

Additionally, I am sorry if this is in the wrong place, I couldn't find a better fit myself

Comment 2 Arik 2020-07-05 19:59:19 UTC

Can you please attach logs?
What are the user permissions on that volume?

Comment 3 RHEL Program Management 2020-07-05 19:59:27 UTC

The documentation text flag should only be set after 'doc text' field is provided. Please provide the documentation text and set the flag to '?' again.

Comment 4 Robin Opletal 2020-07-06 10:54:53 UTC

Here is all the possibly relevant logs I could've thought about - permissions on the volume, libvirtd.service journal logs, vdsm.log, as well as the log from /var/log/libvirt/qemu/*

https://drive.google.com/drive/folders/1NjPU-yPGKyMxXfdBzuG6u68nhSvEWsOV?usp=sharing

If there is any further information that I could provide to help, please do let me know.

Have a great week and best regards,
Robin

Comment 5 Arik 2020-07-06 16:00:41 UTC

Thanks, the permissions look ok - do you see any selinux problem in /var/log/audit/audit.log? can you check the output of "getsebool virt_use_nfs"?

Comment 6 Robin Opletal 2020-07-06 18:10:17 UTC

Output of the SE boolean is >virt_use_nfs --> on<

I am not seeing anything suspicious in the audit.log either, here is the file in case you would like to inspect it yourself https://drive.google.com/file/d/1o7se6y0edN_LvCHhBnjAFBhlZm18Ba5Y/view?usp=sharing

Comment 7 Arik 2020-07-06 20:05:00 UTC

Seems like a duplicate of bz 1776843.
I'd suggest to try with a newer version of libvirt (see https://bugzilla.redhat.com/show_bug.cgi?id=1840414#c7)

*** This bug has been marked as a duplicate of bug 1776843 ***