After upgrading from F7 kvm-65-15 to F10 kvm-74-10
Hi,
We had setup a number of VM's using KVM-65 running on F7 some time
ago. We just ocmpleted upgrading a number of hosts to F10 and with that came KVM-74-10. We had some problems after that upgrade. First, none of the VM's would start. After digging around awhile we finally figured out that we had to once again 'chcon -t virt_image_t path_to_image' as we had done back when we first setup the VM's. But what is the proper procedure so that we don't lose the selinux attributes on these image files? Shouldn't this be set by fedora's selinux-policy package? Or by the kvm upgrade? Next issue is that with KVM-74 we are having a lot of problems with the dreaded "TCP/IP VNC connection to hypervisor host has been refused or disconnected". This has now happened to one of the VM's after it was shutdown and then we tried to Run it again and we haven't found a way to reconnect to it. Also, another VM has this weird problem that when you run it, it looks like its running because the screen keeps changing size but all we see is a blank palette on the console page, no screen at all, but the thing is running. How do we fix these things?
Regards,
Gerry
Quoted 4 lines · Gerry Reno
Hi,
We had setup a number of VM's using KVM-65 running on F7 some time
ago. We just ocmpleted upgrading a number of hosts to F10 and with that came KVM-74-10. We had some problems after that upgrade. First, none of the VM's would start. After digging around awhile we finally figured out that we had to once again 'chcon -tvirt_image_tpath_to_image' as we had done back when we first setup the VM's. But what is the proper procedure so that we don't lose the selinux attributes on these image files? Shouldn't this be set by fedora's selinux-policy package? Or by the kvm upgrade? Next issue is that with KVM-74 we are having a lot of problems with the dreaded "TCP/IP VNC connection to hypervisor host has been refused or disconnected". This has now happened to one of the VM's after it was shutdown and then we tried to Run it again and we haven't found a way to reconnect to it. Also, another VM has this weird problem that when you run it, it looks like its running because the screen keeps changing size but all we see is a blank palette on the console page, no screen at all, but the thing is running. How do we fix these things?
And we have a VM that when you start it says its Connecting to console for guest. But the console message just stays like that and yet the machine completely boots up and we can log into it remotely in a terminal window. We just cannot get a console screen.
We've tried putting the vnc on different ports 5901,5902,5903,etc. But it doesn't help. Again, what can we do to fix these problems? Thanks.
Regards,
Gerry
Quoted 5 lines · Gerry Reno
[...] After digging around awhile we finally figured
out that we had to once again 'chcon -tvirt_image_tpath_to_image' as we had done back when we first setup the VM's. But what is the proper procedure so that we don't lose the selinux attributes on these image files? [...]
You need to tell selinux about paths that you have custom selinux contexts on if you want those contexts to persist. Something like (assuming /path/to/image is a folder):
semanage fcontext -a -t virt_image_t "/path/to/image(/.*)?"
That will add them to the selinux database, and a restorecon will preserve your changes (and reassert them if something else changes the contexts of the files, or if you move a file from another place into /path/to/image)
Signature · 3 lines
Ross McKay, Toronto, NSW Australia "Let the laddie play wi the knife - he'll learn" - The Wee Book of Calvin
Quoted 10 lines · Ross McKay
Quoted 2 lines · Gerry Reno
[...] After digging around awhile we finally figured out that we had to once again 'chcon -t
virt_image_tpath_to_image' as we had done back when we first setup the VM's. But what is the proper procedure so that we don't lose the selinux attributes on these image files? [...]You need to tell selinux about paths that you have custom selinux contexts on if you want those contexts to persist. Something like (assuming /path/to/image is a folder):
Quoted 7 lines
semanage fcontext -a -t
virt_image_t"/path/to/image(/.*)?"That will add them to the selinux database, and a restorecon will preserve your changes (and reassert them if something else changes the contexts of the files, or if you move a file from another place into /path/to/image)
Ok, thanks. I'll run that command on all the image file directory trees.
Now if we can just get some guidance on all this console connection craziness maybe we can get back to normal running.
Regards,
Gerry
Quoted 6 lines · Gerry Reno
Quoted 5 lines · Gerry Reno
Hi,
We had setup a number of VM's using KVM-65 running on F7 some time
ago. We just ocmpleted upgrading a number of hosts to F10 and with that came KVM-74-10. We had some problems after that upgrade.we are having a lot of problems with the dreaded "TCP/IP VNC connection to hypervisor host has been refused or disconnected". This has now happened to one of the VM's after it was shutdown and then we tried to Run it again and we haven't found a way to reconnect to it.
This is happening on a VM that was just anaconda upgraded to F9 and is on its first reboot. But that reboot we cannot make happen because the VM refuses to run.
Quoted 1 line
Quoted 1 line
Also, another VM has this weird problem that when you run it, it looks like its running because the screen keeps changing size but all we see is a blank palette on the console page, no screen at all, but the thing is running. How do we fix these things?
We kicked everyone off the VM's and rebooted the host and now we have access again to this VM.
Quoted 2 lines
Quoted 1 line
And we have a VM that when you start it says its Connecting to console for guest. But the console message just stays like that and yet the machine completely boots up and we can log into it remotely in a terminal window. We just cannot get a console screen.
This also got corrected through a host reboot.
So the only problem I'm very concerned about at the moment is the VM that was at the point of first reboot after the successful completion of an F9 install. Any suggestions as to how to get that VM running?
Regards,
Gerry
Quoted 4 lines · Gerry Reno
So the only problem I'm very concerned about at the moment is the VM that was at the point of first reboot after the successful completion of an F9 install. Any suggestions as to how to get that VM running?
In the virtmanager log we see this when we try to start this VM:
[Sun, 29 Mar 2009 22:37:27 virt-manager 5707] DEBUG (manager:427) VM MX_2 started
[Sun, 29 Mar 2009 22:37:27 virt-manager 5707] DEBUG (details:1042) Got timed retry
[Sun, 29 Mar 2009 22:37:27 virt-manager 5707] DEBUG (details:1094) Trying console login
[Sun, 29 Mar 2009 22:37:27 virt-manager 5707] DEBUG (details:1108) Graphics console configured at vnc://127.0.0.1:5901
[Sun, 29 Mar 2009 22:37:27 virt-manager 5707] DEBUG (details:1121) Starting connect process for 127.0.0.1 5901
[Sun, 29 Mar 2009 22:37:27 virt-manager 5707] DEBUG (details:1020) VNC initialized
[Sun, 29 Mar 2009 22:37:30 virt-manager 5707] DEBUG (details:1006) VNC disconnected
[Sun, 29 Mar 2009 22:37:30 virt-manager 5707] WARNING (details:1032) Retrying connection in 125 ms
[Sun, 29 Mar 2009 22:37:30 virt-manager 5707] ERROR (proxies:400) Introspect error on :1.5:/org/freedesktop/Hal/devices/net_06_d3_60_e9_70_0f: dbus.exceptions.DBusException: org.freedesktop.Hal.NoSuchDevice: No device with id /org/freedesktop/Hal/devices/net_06_d3_60_e9_70_0f [Sun, 29 Mar 2009 22:37:30 virt-manager 5707] DEBUG (proxies:403) Executing introspect queue due to error
[Sun, 29 Mar 2009 22:37:30 virt-manager 5707] ERROR (connection:218) Exception in handler for D-Bus signal:
Traceback (most recent call last):
File "/usr/lib/python2.5/site-packages/dbus/connection.py", line 214,
in maybe_handle_message
self._handler(*args, **kwargs)
File "/usr/share/virt-manager/virtManager/connection.py", line 278, in_net_phys_device_removed
if objif.QueryCapability("net"):
File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 68, in__call__
return self._proxy_method(*args, **keywords)
File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 140, in__call__
**keywords)
File "/usr/lib/python2.5/site-packages/dbus/connection.py", line 630,
in call_blocking
message, timeout)
What does this mean?
Regards,
Gerry