openstack team mailing list archive

Thread
Date

Re: Nova and external NFS

To: Jorge de la Cruz <jorge.delacruz@xxxxxxxxxxxx>
From: Sergio Ariel de la Campa Saiz <sacampa@xxxxxxx>
Date: Thu, 26 Apr 2012 10:12:23 +0200
Accept-language: es-ES
Acceptlanguage: es-ES
Cc: "openstack@xxxxxxxxxxxxxxxxxxx" <openstack@xxxxxxxxxxxxxxxxxxx>
In-reply-to: <25850944.1322.1335373607995.JavaMail.DSPC202@ANADAT-HP>
Thread-index: Ac0jBdusKPVOM/Z4RgWeW+QihykhpAAfDdm2
Thread-topic: [Openstack] Nova and external NFS

Hi Jorge:

These are the permissions when instances are created locally in the Nova server (not using NFS). User nova is the owner of instance directory. The instance is created using the web interface (Horizon dashboard).
In the NFS server there is no user named nova. Any file or folder created from any user not root, is changed to nobody:nogroup (root user is keeped). So, when nova user creates a file, appears nobody:nogroup.

# ll /var/lib/nova/instances/instance-0000000b
total 150124
drwxrwxr-x 2 nova nova 4096 abr 23 15:17 ./
drwxr-xr-x 4 nova nova 4096 abr 23 15:17 ../
-rw-rw---- 1 root root 0 abr 24 17:57 console.log
-rw-r--r-- 1 root root 140509184 abr 25 18:20 disk
-rw-r--r-- 1 root root 16777216 abr 24 17:56 disk.local
-rw-rw-r-- 1 root root 4790624 abr 23 15:17 kernel
-rw-rw-r-- 1 nova nova 1812 abr 23 15:17 libvirt.xml
Thanks...

Regards...
Sergio Ariel
de la Campa Saiz
GMV-SES Infraestructura /
GMV-SES Infrastructure

GMV
Isaac Newton, 11
P.T.M. Tres Cantos
E-28760 Madrid
Tel.
+34 91 807 21 00
Fax
+34 91 807 21 99
www.gmv.com

________________________________
De: Jorge de la Cruz [jorge.delacruz@xxxxxxxxxxxx]
Enviado el: miércoles, 25 de abril de 2012 19:06
Para: Sergio Ariel de la Campa Saiz
CC: openstack@xxxxxxxxxxxxxxxxxxx
Asunto: Re: [Openstack] Nova and external NFS

Hi Sergio,
Dont worry about the questions, this a list for help.
I see that nobody:nogroup is the owner of the top folder, i think this is wrong, change with a chown -R to root:root for the top folder, be sure of all the files have root:root, and try again.

drwxrwxr-x 2 nobody nogroup 4096 abr 25 2012 ./
drwxrwxrwx 4 root root 4096 abr 25 2012 ../
-rw-rw---- 1 root root 0 abr 25 2012 console.log
-rw-r--r-- 1 root root 25165824 abr 25 2012 disk
-rw-r--r-- 1 root root 6291968 abr 25 2012 disk.local
-rw-rw-r-- 1 root root 4790624 abr 25 2012 kernel
-rw-rw-r-- 1 nobody nogroup 1856 abr 25 2012 libvirt.xml

Regards

________________________________
De: "Sergio Ariel de la Campa Saiz" <sacampa@xxxxxxx>
Para: "Jorge de la Cruz" <jorge.delacruz@xxxxxxxxxxxx>
CC: openstack@xxxxxxxxxxxxxxxxxxx
Enviados: Miércoles, 25 de Abril 2012 18:50:47
Asunto: RE: [Openstack] Nova and external NFS

Hi:

Thanks for your respond.

This is my /etc/export file in the NFS server:

/export 192.168.111.0/24(rw,sync,no_root_squash,fsid=0)

and my /etc/fstab file in my host is:

<ip nfs server>:/ /nfs-directory nfs4 defaults 0 0

Directories /export and /nfs-directory have 777 permissions

Sorry if I bother you... but It is driving me crazy
Sergio Ariel
de la Campa Saiz
GMV-SES Infraestructura /
GMV-SES Infrastructure

GMV
Isaac Newton, 11
P.T.M. Tres Cantos
E-28760 Madrid
Tel.
+34 91 807 21 00
Fax
+34 91 807 21 99
www.gmv.com

________________________________
De: Jorge de la Cruz [jorge.delacruz@xxxxxxxxxxxx]
Enviado el: miércoles, 25 de abril de 2012 17:52
Para: Sergio Ariel de la Campa Saiz
CC: openstack@xxxxxxxxxxxxxxxxxxx
Asunto: Re: [Openstack] Nova and external NFS

Hi Sergio,
We have environment with external NFS Server, NetAPP, Nexenta, EMC, etc and we haven´t this problem, sounds like a problem with privileges, i can see the libvirt.xml is nobody:nogroup, it is wrong, must be root:root. Try to change manually, but maybe you have a wrong parameter in a configuration that generate this file with this permissions.

Cheers

PS: Nosotros también estamos en Madrid, podemos conocernos un día si os apetece.

--
Jorge de la Cruz
<http://www.stackops.com/>Cloud Architect
www.stackops.com<http://www.stackops.com/> | jorge.delacruz@xxxxxxxxxxxx<https://mail.gmv.com/owa/UrlBlockedError.aspx> | +34 91 309 48 77 | skype:jorge.delacruz.stackops
<http://www.stackops.com/>

[http://stackops.s3-external-3.amazonaws.com/STACKOPSLOGO-ICON.png]

******************** ADVERTENCIA LEGAL ********************
Le informamos, como destinatario de este mensaje, que el correo electrónico y las comunicaciones por medio de Internet no permiten asegurar ni garantizar la confidencialidad de los mensajes transmitidos, así como tampoco su integridad o su correcta recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume responsabilidad alguna por tales circunstancias. Si no consintiese en la utilización del correo electrónico o de las comunicaciones vía Internet le rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata. Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene información confidencial y sujeta al secreto profesional, cuya divulgación no está permitida por la ley. En caso de haber recibido este mensaje por error, le rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico remitido a nuestra atención y proceda a su eliminación, así como a la de cualquier documento adjunto al mismo. Asimismo, le comunicamos que la distribución, copia o utilización de este mensaje, o de cualquier documento adjunto al mismo, cualquiera que fuera su finalidad, están prohibidas por la ley.

***************** PRIVILEGED AND CONFIDENTIAL ****************
We hereby inform you, as addressee of this message, that e-mail and Internet do not guarantee the confidentiality, nor the completeness or proper reception of the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any liability for those circumstances. Should you not agree to the use of e-mail or to communications via Internet, you are kindly requested to notify us immediately. This message is intended exclusively for the person to whom it is addressed and contains privileged and confidential information protected from disclosure by law. If you are not the addressee indicated in this message, you should immediately delete it and any attachments and notify the sender by reply e-mail. In such case, you are hereby notified that any dissemination, distribution, copying or use of this message or any attachments, for any purpose, is strictly prohibited by law.

________________________________
De: "Sergio Ariel de la Campa Saiz" <sacampa@xxxxxxx>
Para: openstack@xxxxxxxxxxxxxxxxxxx
Enviados: Miércoles, 25 de Abril 2012 17:18:34
Asunto: [Openstack] Nova and external NFS

Hello:

I have found some examples to configure NFS in Nova. But all of them use one of the hosts as NFS server. In my case, I need to use an external NFS server, which do not have installed OpenStack.
I have been working on it but I have found some problems. For example: when I created a new instance these are the files that were created:

root@opst1:~# ll /nfs/NOVA-INST-DIR/instances/instance-00000015/
total 29284
drwxrwxr-x 2 nobody nogroup 4096 abr 25 2012 ./
drwxrwxrwx 4 root root 4096 abr 25 2012 ../
-rw-rw---- 1 root root 0 abr 25 2012 console.log
-rw-r--r-- 1 root root 25165824 abr 25 2012 disk
-rw-r--r-- 1 root root 6291968 abr 25 2012 disk.local
-rw-rw-r-- 1 root root 4790624 abr 25 2012 kernel
-rw-rw-r-- 1 nobody nogroup 1856 abr 25 2012 libvirt.xml
Instead of libvirt-qemu and kvm, root is the owner of the files.

Please.. help me about it

Thanks a lot...

Sergio Ariel
de la Campa Saiz
GMV-SES Infraestructura /
GMV-SES Infrastructure

GMV
Isaac Newton, 11
P.T.M. Tres Cantos
E-28760 Madrid
Tel.
+34 91 807 21 00
Fax
+34 91 807 21 99
www.gmv.com

________________________________
This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it.
________________________________
Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener información clasificada por su emisor como confidencial en el marco de su Sistema de Gestión de Seguridad de la Información siendo para uso exclusivo del destinatario, quedando prohibida su divulgación copia o distribución a terceros sin la autorización expresa del remitente. Si Vd. ha recibido este mensaje erróneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboración.
________________________________
Esta mensagem, incluindo qualquer ficheiro anexo, pode conter informação confidencial, de acordo com nosso Sistema de Gestão de Segurança da Informação, sendo para uso exclusivo do destinatário e estando proibida a sua divulgação, cópia ou distribuição a terceiros sem autorização expressa do remetente da mesma. Se recebeu esta mensagem por engano, por favor avise de imediato o remetente e apague-a. Obrigado pela sua colaboração.

________________________________

_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to : openstack@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp

________________________________

______________________
This message including any attachments may contain confidential
information, according to our Information Security Management System,
and intended solely for a specific individual to whom they are addressed.
Any unauthorised copy, disclosure or distribution of this message
is strictly forbidden. If you have received this transmission in error,
please notify the sender immediately and delete it.

______________________
Este mensaje, y en su caso, cualquier fichero anexo al mismo,
puede contener informacion clasificada por su emisor como confidencial
en el marco de su Sistema de Gestion de Seguridad de la
Informacion siendo para uso exclusivo del destinatario, quedando
prohibida su divulgacion copia o distribucion a terceros sin la
autorizacion expresa del remitente. Si Vd. ha recibido este mensaje
erroneamente, se ruega lo notifique al remitente y proceda a su borrado.
Gracias por su colaboracion.

______________________

References

Re: Nova and external NFS
From: Sergio Ariel de la Campa Saiz, 2012-04-25
Re: Nova and external NFS
From: Jorge de la Cruz, 2012-04-25