Nova_compute libvirt-sock permission denied

Bug #1528328 reported by Artur Zarzycki
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla
New
Undecided
Kuo-tung Kao (jelly)

Bug Description

The container nova_compute starts with "USER nova" who has no permissions to libvirt-sock

2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host [req-46eea594-1b72-46d6-8d89-8ea13a2e0852 - - - - -] Connection to libvirt failed: Failed to connect socket to '/var/run/libvirt/libvirt-sock': Permission denied
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host Traceback (most recent call last):
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/host.py", line 528, in get_connection
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host conn = self._get_connection()
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/host.py", line 515, in _get_connection
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host wrapped_conn = self._get_new_connection()
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/host.py", line 467, in _get_new_connection
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host wrapped_conn = self._connect(self._uri, self._read_only)
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/host.py", line 321, in _connect
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host libvirt.openAuth, uri, auth, flags)
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/eventlet/tpool.py", line 141, in proxy_call
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host rv = execute(f, *args, **kwargs)
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/eventlet/tpool.py", line 122, in execute
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host six.reraise(c, e, tb)
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/eventlet/tpool.py", line 80, in tworker
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host rv = meth(*args, **kwargs)
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host File "/usr/lib/python2.7/dist-packages/libvirt.py", line 105, in openAuth
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host if ret is None:raise libvirtError('virConnectOpenAuth() failed')
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host libvirtError: Failed to connect socket to '/var/run/libvirt/libvirt-sock': Permission denied
2015-12-21 10:19:49.422 1 ERROR nova.virt.libvirt.host
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/eventlet/queue.py", line 117, in switch
    self.greenlet.switch(value)
  File "/usr/lib/python2.7/dist-packages/eventlet/greenthread.py", line 214, in main
    result = function(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/oslo_service/service.py", line 645, in run_service
    service.start()
  File "/usr/lib/python2.7/dist-packages/nova/service.py", line 164, in start
    self.manager.init_host()
  File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 1297, in init_host
    self.driver.init_host(host=self.host)
  File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/driver.py", line 562, in init_host
    self._do_quality_warnings()
  File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/driver.py", line 540, in _do_quality_warnings
    caps = self._host.get_capabilities()
  File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/host.py", line 765, in get_capabilities
    xmlstr = self.get_connection().getCapabilities()
  File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/host.py", line 537, in get_connection
    raise exception.HypervisorUnavailable(host=CONF.host)
HypervisorUnavailable: Connection to the hypervisor is broken on host: operator.local

Changed in kolla:
assignee: nobody → kao kuo-tung (ya790206)
assignee: kao kuo-tung (ya790206) → nobody
assignee: nobody → Kuo-tung Kao (jelly) (coding1314)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.