Hi This is a security improvement in 3.2. As the images are copied as oneadmin, any file readable by oneadmin could be registered as an image (including for example /var/lib/one/one.db, other users images /var/lib/one/3/images/disk.0 etc)
you can tune the behavior in /etc/one/image/fs.conf, more info at http://www.opennebula.org/documentation:rel3.2:image_repo Cheers Ruben On Thu, Jan 19, 2012 at 5:32 PM, Florian Antonescu < florinantone...@gmail.com> wrote: > I am trying to create an image using OpenNebula 3.2 and the provided > ttylinux but I get some strange errors (see below). The strange thing is > that if I manually try to copy the image with cp > /srv/cloud/one/one-templates/ttylinux.img /srv/cloud/one/var/images/ it > works just fine. The /srv/cloud/one/var folder is exported using nfs to the > frontend and oneadmin can read and write both one-templates and var/images > folders. > Any ideas? > > Thank you, > Florian Antonescu > > Thu Jan 19 08:19:26 2012 [ReM][D]: ImageAllocate method invoked > Thu Jan 19 08:19:26 2012 [ImM][I]: Copying > /srv/cloud/one/one-templates/ttylinux.img to repository for image 2 > Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG I 2 Command > execution fail: /srv/cloud/one/var/remotes/image/fs/cp > /srv/cloud/one/one-templates/ttylinux.img 2 2 > Thu Jan 19 08:19:27 2012 [ImM][I]: Command execution fail: > /srv/cloud/one/var/remotes/image/fs/cp > /srv/cloud/one/one-templates/ttylinux.img 2 2 > Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG E 2 cp: Not > allowed to copy images from /srv/cloud/one/var/ /srv/cloud/one/etc/ > /srv/cloud/one/ /etc/ > Thu Jan 19 08:19:27 2012 [ImM][E]: cp: Not allowed to copy images from > /srv/cloud/one/var/ /srv/cloud/one/etc/ /srv/cloud/one/ /etc/ > Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG E 2 Not allowed > to copy image file /srv/cloud/one/one-templates/ttylinux.img > Thu Jan 19 08:19:27 2012 [ImM][E]: Not allowed to copy image file > /srv/cloud/one/one-templates/ttylinux.img > Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: LOG I 2 ExitCode: 255 > Thu Jan 19 08:19:27 2012 [ImM][I]: ExitCode: 255 > Thu Jan 19 08:19:27 2012 [ImG][D]: Message received: CP FAILURE 2 Not > allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img > Thu Jan 19 08:19:27 2012 [ImM][E]: Error copying image in the repository: > Not allowed to copy image file /srv/cloud/one/one-templates/ttylinux.img > > > _______________________________________________ > Users mailing list > Users@lists.opennebula.org > http://lists.opennebula.org/listinfo.cgi/users-opennebula.org > > -- Dr. Ruben Santiago Montero Associate Professor (Profesor Titular), Complutense University of Madrid URL: http://dsa-research.org/doku.php?id=people:ruben Weblog: http://blog.dsa-research.org/?author=7
_______________________________________________ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
