Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1151357

Summary: Could not access KVM kernel module: Permission denied
Product: Red Hat OpenStack Reporter: Marko Myllynen <myllynen>
Component: qemu-kvm-rhevAssignee: Virtualization Maintenance <virt-maint>
Status: CLOSED WONTFIX QA Contact: yeylon <yeylon>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: crobinso, hhuang, huding, juzhang, knoel, mrezanin, myllynen, rbalakri, srevivo, virt-maint, xfu, yeylon
Target Milestone: ---Keywords: ZStream
Target Release: 5.0 (RHEL 7)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-12-16 15:23:59 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
rpms installed during the yum transaction none

Description Marko Myllynen 2014-10-10 08:40:48 UTC 
Description of problem:
This is reincarnation of bug 950436 on RHEL 7 (up-to-date as of 2014-10-07).

On HP BL460c G8 (40 CPU / 128 GB / non-SSD) after RHEL 7 Minimal installation the node was configured as OpenStack compute node by packstack, all virtualization related packages were installed then. There is nothing relevant in system logs during that period but after the installation the situation was:

[root@node3 ~]# ls -l /dev/kvm
crw-------. 1 root root 10, 232 Oct  7 15:44 /dev/kvm
[root@node3 ~]# getfacl /dev/kvm
getfacl: Removing leading '/' from absolute path names
# file: dev/kvm
# owner: root
# group: root
user::rw-
group::---
other::---

[root@node3 ~]# dmesg | grep -i kvm
[root@node3 ~]# rmmod kvm_intel
[root@node3 ~]# rmmod kvm
[root@node3 ~]# modprobe kvm
[root@node3 ~]# modprobe kvm_intel
[root@node3 ~]# ls -l /dev/kvm
crw-rw-rw-. 1 root kvm 10, 232 Oct  9 16:46 /dev/kvm
[root@node3 ~]# getfacl /dev/kvm
getfacl: Removing leading '/' from absolute path names
# file: dev/kvm
# owner: root
# group: kvm
user::rw-
group::rw-
other::rw-

[root@node3 ~]# dmesg | grep -i kvm
[root@node3 ~]#
Comment 2 Miroslav Rezanina 2014-10-23 07:01:53 UTC 
What version of qemu-kvm was used? 
What was the exact installation and configuration procedure?
Comment 3 Marko Myllynen 2014-10-23 07:25:32 UTC 
(In reply to Miroslav Rezanina from comment #2)
> What version of qemu-kvm was used? 

qemu-img-rhev-1.5.3-60.el7_0.7.x86_64

> What was the exact installation and configuration procedure?

See comment 0 - PackStack installed several RPMs on a RHEL 7 node which had RHEL 7 Minimal install. I'll attach the list of RPMs which were installed during the same Yum transaction as qemu-img-rhev.

Thanks.
Comment 4 Marko Myllynen 2014-10-23 07:26:04 UTC 
Created attachment 949691 [details]
rpms installed during the yum transaction
Comment 5 Miroslav Rezanina 2014-10-23 08:57:55 UTC 
I try to reproduce the behavior with RHEL 7 installation and then installing qemu-kvm-rhev as I do not have proper rhos enviroment. However, permissions for /dev/kvm are correctly changed with qemu-kvm-rhev installation. 

Reloading shows that qemu-kvm-rhev properly setup permissions but they are not effectively set. This can be by some interaction with other installed packages - probably some of openstack related.


I reassign this bz to RHOS so they can investigate the scenario properly and hopefully identify reason why reload is needed for change of permissions. 

In case of any fix is required in qemu-kvm-rhev, please describe it and reassing the bz to qemu-kvm-rhev component in RHEL 7 product.