F9 and KVM

Tom London selinux at gmail.com
Thu May 8 18:23:28 UTC 2008


On Thu, May 8, 2008 at 11:18 AM, Suren Karapetyan
<surenkarapetyan at gmail.com> wrote:
> Tom London wrote:
>>
>> 2008/5/8 Gerry Reno <greno at verizon.net>:
>>>
>>> Gerry Reno wrote:
>>>
>>> Here's what I found so far:
>>>  In BIOS there is a setting "AMD Cool n Quiet".  I thought this was some
>>> type of fan thing.  It is not.  It controls the cpu speed.  So I disable
>>> this and now dmesg and /proc/cpuinfo both show same at 2510 MHz.  And I
>>> try
>>> creating a new F9 VM with 1 VCPU.  The install now seems to run at a
>>> normal
>>> speed but still I cannot get F9 to install in VM.  It says partition
>>> table
>>> on /dev/sda is unreadable and it needs to initialize.  So I say yes and
>>> it
>>> sits there for about 10 mins until it give you an error (i/o error on
>>> device) retry,ignore,cancel.  No choice helps.  So I try with F7 as well
>>> and
>>> same thing, it cannot initialize the virtual drive (mine is file-based).
>>>
>>>
>>> I think SELinux is causing some problems with KVM:
>>>
>>> log:
>>> May  7 18:29:54 grp-01-10-01 yum: Installed: kvm-65-1.fc9.i386
>>> May  7 23:00:14 grp-01-10-01 setroubleshoot: SELinux is preventing
>>> qemu-kvm
>>> (qemu_t) "write" to ./MX_1-0.vmdk (var_t). For complete SELinux messages.
>>> run sealert -l c5d1da68-2969-4a93-843c-774a346e4705
>>> May  7 23:29:12 grp-01-10-01 setroubleshoot: SELinux is preventing
>>> qemu-kvm
>>> (qemu_t) "write" to ./MX_1-0.vmdk (var_t). For complete SELinux messages.
>>> run sealert -l c5d1da68-2969-4a93-843c-774a346e4705
>>> May  8 12:20:56 grp-01-10-01 setroubleshoot: SELinux is preventing
>>> qemu-kvm
>>> (qemu_t) "write" to ./MX_1-0.vmdk (var_t). For complete SELinux messages.
>>> run sealert -l e1adef63-a2c9-4e8e-a834-14cc9df77259
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:21:06 grp-01-10-01 kernel: kvm: 3997: cpu0 kvm_set_msr_common:
>>> MSR_IA32_MC0_STATUS 0x0, nop
>>> May  8 12:21:06 grp-01-10-01 kernel: kvm: 3997: cpu1 kvm_set_msr_common:
>>> MSR_IA32_MC0_STATUS 0x0, nop
>>> May  8 12:21:06 grp-01-10-01 kernel: kvm: 3997: cpu2 kvm_set_msr_common:
>>> MSR_IA32_MC0_STATUS 0x0, nop
>>> May  8 12:21:07 grp-01-10-01 kernel: kvm: 3997: cpu3 kvm_set_msr_common:
>>> MSR_IA32_MC0_STATUS 0x0, nop
>>> May  8 12:21:08 grp-01-10-01 kernel: kvm: emulating exchange as write
>>> May  8 12:26:20 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:26:20 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 12:26:20 grp-01-10-01 setroubleshoot: SELinux is preventing
>>> qemu-kvm
>>> (qemu_t) "write" to ./TEST1.img (var_t). For complete SELinux messages.
>>> run
>>> sealert -l 15c2312c-dd5f-44fd-b2d1-b9fb90188284
>>> May  8 12:26:20 grp-01-10-01 setroubleshoot: SELinux is preventing
>>> qemu-kvm
>>> (qemu_t) "write" to ./f9-preview-i386-dvd.iso (var_t). For complete
>>> SELinux
>>> messages. run sealert -l af4954a1-8379-403d-bc1b-ff6b1e0041df
>>> May  8 12:26:26 grp-01-10-01 kernel: kvm: 4075: cpu0 kvm_set_msr_common:
>>> MSR_IA32_MC0_STATUS 0x0, nop
>>> May  8 13:28:25 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 13:28:25 grp-01-10-01 kernel: kvm: guest NX capability removed
>>> May  8 13:28:25 grp-01-10-01 setroubleshoot: SELinux is preventing
>>> qemu-kvm
>>> (qemu_t) "write" to ./TEST1.img (var_t). For complete SELinux messages.
>>> run
>>> sealert -l 15c2312c-dd5f-44fd-b2d1-b9fb90188284
>>> May  8 13:28:25 grp-01-10-01 setroubleshoot: SELinux is preventing
>>> qemu-kvm
>>> (qemu_t) "write" to ./f9-preview-i386-dvd.iso (var_t). For complete
>>> SELinux
>>> messages. run sealert -l af4954a1-8379-403d-bc1b-ff6b1e0041df
>>> May  8 13:29:35 grp-01-10-01 kernel: kvm: 4353: cpu0 kvm_set_msr_common:
>>> MSR_IA32_MC0_STATUS 0x0, nop
>>>
>>>
>>> I ran a fixfiles on all filesystems but still get the messages.
>>>
>>>
>>> Regards,
>>> Gerry
>>>
>>
>> Try the following:   "chcon -t virt_image_t ./f9-preview-i386-dvd.iso"
>> before running qemu-kvm.
>>
>> tom
>
> And what about ./TEST1.img ?
> I think THIS is the problem.
>
> Is ./TEST1.img the file which holds hda?
>
Yeah.... sorry..... only saw the .iso one.

tom

-- 
Tom London




More information about the devel mailing list