Bug 1242448

Sos report:
http://file.tlv.redhat.com/ebenahar/sosreport-green-vdsb.qa.lab.tlv.redhat.com-20150713141553.tar.xz

Elad, ban you please check SELinux logs?

(In reply to Simone Tiraboschi from comment #2)
> Elad, ban you please check SELinux logs?

can, sorry :-)

Auditd was disabled.
Reproduced again with auditd enabled.
Here is the sosreport:
http://file.tlv.redhat.com/ebenahar/sosreport-green-vdsb.qa.lab.tlv.redhat.com-20150713151711.tar.xz

From audit.log:

type=CRED_DISP msg=audit(1436789811.558:357): pid=3672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sud
o" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1436789811.564:358): avc:  denied  { read write } for  pid=3677 comm="sanlock" name="ids" dev="loop1" ino=16390 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file

Does it work in permissive mode?

(In reply to Simone Tiraboschi from comment #6)
> Does it work in permissive mode?
Tested with permissive and it works

The HE VM is not started automatically once HE installation is finished. 
Checked for its status and got the following exception:


[root@green-vdsb ovirt-hosted-engine-setup]# hosted-engine --vm-status
Traceback (most recent call last):
  File "/usr/lib64/python2.7/runpy.py", line 162, in _run_module_as_main
    "__main__", fname, loader, pkg_name)
  File "/usr/lib64/python2.7/runpy.py", line 72, in _run_code
    exec code in run_globals
  File "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_setup/vm_status.py", line 117, in <module>
    if not status_checker.print_status():
  File "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_setup/vm_status.py", line 60, in print_status
    all_host_stats = ha_cli.get_all_host_stats()
  File "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/client/client.py", line 157, in get_all_host_stats
    return self.get_all_stats(self.StatModes.HOST)
  File "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/client/client.py", line 102, in get_all_stats
    stats = broker.get_stats_from_storage(service)
  File "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/brokerlink.py", line 232, in get_stats_from_storage
    result = self._checked_communicate(request)
  File "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/brokerlink.py", line 260, in _checked_communicate
    .format(message or response))
ovirt_hosted_engine_ha.lib.exceptions.RequestError: Request failed: <type 'exceptions.OSError'>


So I started the VM manually:

[root@green-vdsb ovirt-hosted-engine-setup]# hosted-engine --vm-start

a7567b69-c29c-46a2-a643-799acf0b1a87
        Status = WaitForLaunch
        nicModel = rtl8139,pv
        statusTime = 4300682480
        emulatedMachine = rhel6.5.0
        pid = 0
        vmName = HostedEngine
        devices = [{'index': '2', 'iface': 'ide', 'specParams': {}, 'readonly': 'true', 'deviceId': '1a732367-113d-4e6a-8dcb-9adb45e3e1de', 'address': {'bus': '1', 'controller': '0', 'type': 'drive', 'target': '0', 'unit': '0'}, 'device': 'cdrom', 'shared': 'false', 'path': '', 'type': 'disk'}, {'index': '0', 'iface': 'virtio', 'format': 'raw', 'bootOrder': '1', 'poolID': '00000000-0000-0000-0000-000000000000', 'volumeID': '6a80ef55-6f15-492d-b962-123615bf27cf', 'imageID': 'df02f4f1-e1c7-474b-8075-b839e4bc1c95', 'specParams': {}, 'readonly': 'false', 'domainID': '4a5d3450-655b-452f-8dda-2ef7e051b1a8', 'optional': 'false', 'deviceId': 'df02f4f1-e1c7-474b-8075-b839e4bc1c95', 'address': {'slot': '0x06', 'bus': '0x00', 'domain': '0x0000', 'type': 'pci', 'function': '0x0'}, 'device': 'disk', 'shared': 'exclusive', 'propagateErrors': 'off', 'type': 'disk'}, {'device': 'scsi', 'model': 'virtio-scsi', 'type': 'controller'}, {'nicModel': 'pv', 'macAddr': '00:16:3E:76:D5:D5', 'linkActive': 'true', 'network': 'ovirtmgmt', 'filter': 'vdsm-no-mac-spoofing', 'specParams': {}, 'deviceId': 'a4c22ecc-0e5b-4548-b10a-5ca884d22946', 'address': {'slot': '0x03', 'bus': '0x00', 'domain': '0x0000', 'type': 'pci', 'function': '0x0'}, 'device': 'bridge', 'type': 'interface'}, {'device': 'console', 'specParams': {}, 'type': 'console', 'deviceId': '131f7a43-a609-4795-ba03-9f25f327f6f9', 'alias': 'console0'}]
        guestDiskMapping = {}
        vmType = kvm
        clientIp = 
        displaySecurePort = -1
        memSize = 4096
        displayPort = -1
        cpuType = Conroe
        spiceSecureChannels = smain,sdisplay,sinputs,scursor,splayback,srecord,ssmartcard,susbredir
        smp = 2
        displayIp = 0
        display = vnc


Checked again for the status and got the same exception.

Simone, is this failure to start the VM automatically and the mentioned exception related to the fact I'm working in permissive?

(In reply to Elad from comment #8)
> Simone, is this failure to start the VM automatically and the mentioned
> exception related to the fact I'm working in permissive?

No, it isn't. It looks like a different issue.

*** Bug 1238313 has been marked as a duplicate of this bug. ***

*** Bug 1247165 has been marked as a duplicate of this bug. ***

*** Bug 1225366 has been marked as a duplicate of this bug. ***

*** Bug 1247181 has been marked as a duplicate of this bug. ***

Hosted-engine deployment over FC is completed successfully.
Note that the import of the HE storage domain is blocked due to https://bugzilla.redhat.com/show_bug.cgi?id=1273378

Verified using:
ovirt-hosted-engine-setup-1.3.0-1.el7ev.noarch
vdsm-4.17.10-5.el7ev.noarch
selinux-policy-3.13.1-60.el7.noarch

oVirt 3.6.0 has been released on November 4th, 2015 and should fix this issue.
If problems still persist, please open a new BZ and reference this one.