 |
[root@3.10.0-123.el7.x86_64]# lsmod | grep kvm kvm_amd 65072 0 kvm 525409 1 kvm_amd cat /var/log/messages Mar 24 14:19:59 journal: libvirt version: 1.2.17, package: 13.el7_2.3 (CentOS BuildSystem <http://bugs.centos.org>, 2016-02-16-17:06:00, worker1.bsys.centos.org) Mar 24 14:19:59 journal: Unable to read from monitor: Connection reset by peer Mar 24 14:19:59 journal: internal error: early end of file from monitor: possible problem:#012Could not access KVM kernel module: Permission denied#012failed to initialize KVM: Permission denied |
|
|
What does the following command return. sudo systemctl list-units | grep libvirt |
|
|
[root@ganesh ~]# sudo systemctl list-units | grep libvirt libvirtd.service loaded active running Virtualization daemon |
|
|
Please ignore my earlier comment. 1. I saw the below in /var/log/messages so after reading sealert message set "setsebool -P virt_use_execmem 1", but even after that installation fails. virt_use_execmem on [root@ganesh ~]# sestatus SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: permissive Mode from config file: permissive Policy MLS status: enabled Policy deny_unknown status: allowed Max kernel policy version: 28 ===Installed RPMS=== selinux-policy-3.13.1-60.el7_2.3.noarch libselinux-python-2.2.2-6.el7.x86_64 selinux-policy-targeted-3.13.1-60.el7_2.3.noarch libselinux-2.2.2-6.el7.x86_64 libselinux-utils-2.2.2-6.el7.x86_64 ==/var/log/messages=== Apr 6 22:31:27 ganesh setroubleshoot: SELinux is preventing /usr/bin/qemu-system-x86_64 from using the execmem access on a process. For complete SELinux messages. run sealert -l 1e8cd6ae-11e4-4903-97f6-fd2d58ce3c91 Apr 6 22:31:27 ganesh python: SELinux is preventing /usr/bin/qemu-system-x86_64 from using the execmem access on a process.#012#012***** Plugin catchall_boolean (89.3 confidence) suggests ******************#012#012If you want to allow virt to use execmem#012Then you must tell SELinux about this by enabling the 'virt_use_execmem' boolean.#012#012Do#012setsebool -P virt_use_execmem 1#012#012***** Plugin catchall (11.6 confidence) suggests **************************#012#012If you believe that qemu-system-x86_64 should be allowed execmem access on processes labeled svirt_t by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# grep qemu-system-x86 /var/log/audit/audit.log | audit2allow -M mypol#012# semodule -i mypol.pp#012 2. systemctl status libvirtd.service shows the permission denied error. [root@ganesh ~]# systemctl status libvirtd.service ● libvirtd.service - Virtualization daemon Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; disabled; vendor preset: enabled) Active: active (running) since Wed 2016-04-06 22:21:10 IST; 18min ago Docs: man:libvirtd(8) http://libvirt.org Main PID: 2225 (libvirtd) CGroup: /system.slice/libvirtd.service ├─2225 /usr/sbin/libvirtd ├─2319 /sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper └─2320 /sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper Apr 06 22:21:12 ganesh dnsmasq[2319]: read /etc/hosts - 2 addresses Apr 06 22:21:12 ganesh dnsmasq[2319]: read /var/lib/libvirt/dnsmasq/default.addnhosts - 0 addresses Apr 06 22:21:12 ganesh dnsmasq-dhcp[2319]: read /var/lib/libvirt/dnsmasq/default.hostsfile Apr 06 22:26:21 ganesh libvirtd[2225]: libvirt version: 1.2.17, package: 13.el7_2.3 (CentOS BuildSystem <http://bugs.centos.org>, 2016-02-16-17:06:00, wo...entos.org) Apr 06 22:26:21 ganesh libvirtd[2225]: Unable to read from monitor: Connection reset by peer Apr 06 22:26:21 ganesh libvirtd[2225]: internal error: early end of file from monitor: possible problem: Could not access KVM kernel module: Permission denied failed to initialize KVM: Permission denied... Apr 06 22:31:26 ganesh libvirtd[2225]: failed to connect to monitor socket: No such process Apr 06 22:31:26 ganesh libvirtd[2225]: internal error: process exited while connecting to monitor: Could not access KVM kernel module: Permission denied failed to initialize KVM: Permission denied Apr 06 22:34:25 ganesh libvirtd[2225]: failed to connect to monitor socket: No such process Apr 06 22:34:25 ganesh libvirtd[2225]: internal error: process exited while connecting to monitor: Could not access KVM kernel module: Permission denied failed to initialize KVM: Permission denied |
|
|
Able to get rid of the above issue after setting user/group = root in /etc/libvirt/qemu.conf file. Domains are now getting created. |
- Anonymous
