Bug 218275

Summary: Can't install guest from locally exported media
Product: [Fedora] Fedora Reporter: David Juran <djuran>
Component: xenAssignee: Xen Maintainance List <xen-maint>
Status: CLOSED NOTABUG QA Contact: Brian Brock <bbrock>
Severity: medium Docs Contact:
Priority: medium    
Version: 6CC: bstein, katzj
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-12-04 15:36:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
virt-manager.log
none
ifconfig -a none

Description David Juran 2006-12-04 11:40:33 UTC 
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.8) Gecko/20061105 Red Hat/1.5.0.8-0.1.el4 Firefox/1.5.0.8 pango-text

Description of problem:
Installing a paravirtualised guest from a media exported by the same machine that the hypervisor is running on doesn't seem to work. I tried exporting the install tree both NFS and HTTP and neither works. Exporting the install tree(via HP) from a different system works just fine.

Version-Release number of selected component (if applicable):
xen-3.0.3-0.1.rc3

How reproducible:
Always


Steps to Reproduce:
1. Copy the FC6 install tree off the DVD to somewhere accessible by apache.
2. In virt-manager, create a new paravirtualised guest.
3. Point virt-manager to use the install tree at the IP# of either eth0 or lo using http.
4. Anaconda in the guest starts up, asks you for you language, keyboard and network settings.
5. Anconda then complains that it can't find the installation media on this server.
6. Looking at the apache logs will show you that it didn't even try to access stage2.img.

Actual Results:


Expected Results:


Additional info:
Comment 1 Daniel Berrangé 2006-12-04 13:41:28 UTC 
What iptables firewall rules are active ?  Traffic between DomU & Dom0 gets
processed by same firewall rules are traffic between the public network & Dom0,
so it could well be that HTTP traffic is getting dropped. Can you upload output
of '/root/.virt-manager/virt-manager.log', 'ifconfig -a' in the Dom0, and
'iptables -L -n' in Dom0.
Comment 2 David Juran 2006-12-04 15:15:50 UTC 
Created attachment 142738 [details]
virt-manager.log
Comment 3 David Juran 2006-12-04 15:18:05 UTC 
Created attachment 142739 [details]
ifconfig -a
Comment 4 David Juran 2006-12-04 15:21:44 UTC 
Output of iptables below and output from ifconfig and the virt-manager log
attached. Do note that when I try to install from the same tree exported by
another computer in the lab it works fine... Also pinging the guest domain from
Dom0 works fine.

[root@sepeteus ~]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           PHYSDEV match
--physdev-in vif1.0

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 255
ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     ah   --  0.0.0.0/0            0.0.0.0/0
ACCEPT     udp  --  0.0.0.0/0            224.0.0.251         udp dpt:5353
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:631
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:631
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with
icmp-host-prohibited
Comment 5 Daniel Berrangé 2006-12-04 15:26:07 UTC 
The abouve iptables output shows your Dom0 is not configured to allow incoming
HTTP (port 80)  requests. Please run system-config-securitylevel, toggle the
checkbox to allow HTTP access through the firewall, and then retry your install.
Comment 6 David Juran 2006-12-04 15:36:13 UTC 
Thanks... guess I should have been able to figure this out on my own )-: