Comment 10 for bug 322779

Hi,

On 26.03.2010, at 10:56, Ruben S, Montero wrote:
> Well actually is the opposite: the patch defaults the driver to use
> qemu:///system. It also does a touch to the checkpoint file before
> saving the image so it belongs to oneadmin and not to root.

Okay, I just assumed the possibility to change the driver was a suggestion to use qemu:///session (in the bug description it is mentioned as well).

I just missed the touch command. It works like a charm.

> You can check the commit
>
> http://dev.opennebula.org/projects/opennebula/repository/revisions/f8252cfe8bc49bc0ecec376476b711e5d2f1c5dd

Unfortunately the changeset cannot be easily integrated into OpenNebula 1.2 since one_vmm_kvm.rb seems to be completely rewritten in OpenNebula 1.4. However, I made a small, quick and very dirty workaround for the current OpenNebula implementation of Karmic. Below you can see the patch that needs to be applied to /usr/lib/one/mads/one_vmm_kvm.rb.

Yet there is still another problem. AppArmor prevents libvirt to write checkpoints outside of oneadmin's home. Is there an open bug ticket for that or should I file a new one? There was a similar bug report in an earlier Ubuntu release but the fix only gave libvirt the ability to write inside the user's home and not in /var/lib/one/...

$ diff -u /usr/lib/one/mads/one_vmm_kvm.ubuntu-orig.rb /usr/lib/one/mads/one_vmm_kvm.rb
--- /usr/lib/one/mads/one_vmm_kvm.ubuntu-orig.rb 2010-03-26 19:30:51.434615520 +0100
+++ /usr/lib/one/mads/one_vmm_kvm.rb 2010-03-26 19:58:07.475803935 +0100
@@ -112,6 +112,7 @@
     end

     def action_save(args)
+ touch_checkpoint_file(args[2], args[4])
         std_action("SAVE", "save #{args[3]} #{args[4]}", args)
     end

@@ -179,6 +180,18 @@
         res[0].close
         res
     end
+
+ def touch_checkpoint_file(host, file)
+ res=Open3.popen3(
+ "ssh -n #{host} touch #{file} ;"+
+ " echo ExitCode: $? 1>&2")
+ res[0].close
+
+ stdout=res[1].read
+ stderr=res[2].read
+
+ write_response("TOUCH", stdout, stderr, file)
+ end

     def write_response(action, stdout, stderr, args)
         exit_code=get_exit_code(stderr)