I have seen a lot of users to use anonguid=36,anonuid=36,all_squash to force 
the vdsm:kvm ownership on the system.

Best Regards,
Strahil Nikolov






В понеделник, 12 октомври 2020 г., 21:40:42 Гринуич+3, Amit Bawer 
<[email protected]> написа: 







On Mon, Oct 12, 2020 at 9:33 PM Amit Bawer <[email protected]> wrote:
> 
> 
> On Mon, Oct 12, 2020 at 9:12 PM Lee Hanel <[email protected]> wrote:
>> my /etc/exports looks like:
>> (rw,async,no_wdelay,crossmnt,insecure,no_root_squash,insecure_locks,sec=sys,anonuid=1025,anongid=100)
> The anongid,anonuid options could be failing the qemu user access check, 
> 
> Is there a special need to have them for the nfs shares for ovirt?
> I'd suggest to specify the exports for ovirt on their own 
> /export/path1   *(rw,sync,no_root_suqash)
> /export/path2   *(rw,sync,no_root_suqash)
mind the typo "squash": 
/export/path2   *(rw,sync,no_root_squash) 

> ...
> 
>>  
>> also to note, as vdsm I can create files/directories on the share.
>> 
>> 
>> On Mon, Oct 12, 2020 at 12:34 PM Amit Bawer <[email protected]> wrote:
>>>
>>>
>>>
>>> On Mon, Oct 12, 2020 at 7:47 PM <[email protected]> wrote:
>>>>
>>>> ok, I think that the selinux context might be wrong?   but I saw nothing 
>>>> in the audit logs about it.
>>>>
>>>> drwxr-xr-x. 1 vdsm kvm system_u:object_r:nfs_t:s0 40 Oct  8 17:19 /data
>>>>
>>>> I don't see in the ovirt docs what the selinux context needs to be.  Is 
>>>> what you shared as an example the correct setting?
>>>
>>> It's taken from a working nfs setup,
>>> what is the /etc/exports (or equiv.) options settings on the server?
>>>
>>>> _______________________________________________
>>>> Users mailing list -- [email protected]
>>>> To unsubscribe send an email to [email protected]
>>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>>> oVirt Code of Conduct: 
>>>> https://www.ovirt.org/community/about/community-guidelines/
>>>> List Archives: 
>>>> https://lists.ovirt.org/archives/list/[email protected]/message/5OSGBFRHYC3AMI2E3ZYRRBIAJINYOIBG/
>> 
>> 
> 
_______________________________________________
Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/[email protected]/message/VGLS62COSG774PI6JJKP44JTL6QQWRHW/
_______________________________________________
Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/[email protected]/message/O4R6EWTDXC77F22F464SYDZKYSCTJGER/

Reply via email to