<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div><br>
</div>
<div>Thanks for the reply Eric. We verified that VM creation works fine when dynamic ownership setting is enabled. So this seems like some missing configuration or permissions issue when dynamic ownership is disabled. More comments in line below..</div>
<br>
<div>
<div>On Feb 24, 2012, at 5:57 PM, Eric Blake wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div>On 02/24/2012 12:21 PM, Shantanu Pavgi wrote:<br>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">Hi,<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">I am getting following 'qemu: could not load kernel' error while trying to create a new VM using virt-install or virt-manager. The software versions are as follows: CentOS 6.2, Libvirt 0.9.4, qemu-kvm 2:0.12.1.2-2.209.el6_2.1.
<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">The qemu.conf has disabled dynamic_ownership setting. The VM instantiation has worked fine before when dynamic_ownership was enabled (default). So is this error related to dynamic ownership being disabled? I appreciate any help on how
to debug this error further. <br>
</blockquote>
<br>
Very well could be. If dynamic_ownership is on, then libvirt will chown<br>
the image prior to starting qemu, then revert it back on completion.<br>
But if you have it off, then libvirt assumes you have correct<br>
permissions on the file to begin with, and if that assumption is wrong,<br>
failure to open the image could indeed result.<br>
</div>
</blockquote>
<div><br>
</div>
<div>Since we are seeing permission denied error on boot image '<span class="Apple-style-span" style="font-family: monospace; font-size: 14px; white-space: pre; ">/var/lib/libvirt/boot/virtinst-vmlinuz.l4mEAd</span>' I am wondering what should be appropriate
permissions for it. The VM's disk image gets created with 'rw' permissions for 'kvm' group. The libvirt runs the qemu-kvm process as 'qemu' user which belongs to the 'kvm' group. If the 'qemu' user doesn't have write permissions on the disk image then we
have seen permission denied error on the disk image itself. But we hadn't seen 'qemu: could not load kernel' type errors before. </div>
<div><br>
</div>
<div>Any pointers on what permission settings are needed when dynamic ownership is disabled will be really helpful. Do users executing virt-tools (virt-install or virt-manager) commands need 'rw' permission on boot images '<span class="Apple-style-span" style="font-family: monospace; font-size: 14px; white-space: pre; ">/var/lib/libvirt/boot/*</span>'
when dynamic ownership is disabled? </div>
<br>
<blockquote type="cite">
<div><br>
We have a troubleshooting wiki that may give you more insight on things<br>
to try, and do feel free to add a page if you find a solution:<br>
<a href="http://wiki.libvirt.org/page/Troubleshooting">http://wiki.libvirt.org/page/Troubleshooting</a><br>
<br>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">Also, is there any documentation on why/when dynamic_ownership setting should be used?<br>
</blockquote>
<br>
http://libvirt.org/drvqemu.html#securitydac<br>
has a start; if you find more information would be useful, then let's<br>
get the documentation improved (the docs are kept as part of libvirt.git).<br>
<br>
<br>
</div>
</blockquote>
</div>
<br>
<div>We couldn't find much details on dynamic ownership setting other than few comment lines in qemu.conf file. They were helpful to start with; it would be good to have them in wiki as well. I appreciate all the help. </div>
<div><br>
</div>
<div>--</div>
<div>Thanks,</div>
<div>Shantanu</div>
<div><br>
</div>
</body>
</html>