CentOS - Jul 2018 - kvm & permission denied

Everyone,

I am trying to install KVM on a desktop unit as a lab project with the
hope of being able to use kvm on one of our office servers after I
learn how.  So far I am very low on the learning curve.

I have used the guide to make the installation :

https://www.linuxtechi.com/install-kvm-hypervisor-on-centos-7-and-rhel-
7/

The installation seemed to go well, but when I tried to add Fedora 27
with virt-manager I have continued to get file permission errors.  I
have tried turning selinux off, and making sure the directory
permissions are 777 and the file permissions are 666, but have not been
able to succeed.  A google search demonstrates others have had this
problem, and I have tried many of the fixes that have been recorded,
but no success.

I am running : CentOS Linux release 7.5.1804 (Core)??with 3.10.0-
862.6.3.el7.x86_64 kernel?

CPU : AMD FX(tm)-6300 Six-Core Processor

I am using the root account through a konsole interface to activate
virt-manager.

The Error Message from virt-manager is :
Unable to complete install: 'internal error: process exited while
connecting to monitor: 2018-07-15T13:55:37.836269Z qemu-kvm: -drive
file=/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-27-
1.6.iso,format=raw,if=none,id=drive-virtio-disk0: Could not open
'/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-27-
1.6.iso': Permission denied'

Traceback (most recent call last):
? File "/usr/share/virt-manager/virtManager/asyncjob.py", line 89, in
cb_wrapper
????callback(asyncjob, *args, **kwargs)
? File "/usr/share/virt-manager/virtManager/create.py", line 2545, in
_do_async_install
????guest.start_install(meter=meter)
? File "/usr/share/virt-manager/virtinst/guest.py", line 498, in
start_install
????doboot, transient)
? File "/usr/share/virt-manager/virtinst/guest.py", line 434, in
_create_guest
????domain = self.conn.createXML(install_xml or final_xml, 0)
? File "/usr/lib64/python2.7/site-packages/libvirt.py", line 3658, in
createXML
????if ret is None:raise libvirtError('virDomainCreateXML() failed',
conn=self)
libvirtError: internal error: process exited while connecting to
monitor: 2018-07-15T13:55:37.836269Z qemu-kvm: -drive
file=/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-27-
1.6.iso,format=raw,if=none,id=drive-virtio-disk0: Could not open
'/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-27-
1.6.iso': Permission denied



The /var/log/message entries associated with the above error message is
 the following :

Jul 15 08:55:37 HmGp libvirtd: 2018-07-15 13:55:37.922+0000: 1643:
error : qemuMonitorOpenUnix:385 : failed to connect to monitor socket:
No such process

Jul 15 08:55:37 HmGp libvirtd: 2018-07-15 13:55:37.927+0000: 1643:
error : qemuProcessReportLogError:1912 : internal error: process exited
while connecting to monitor: 2018-07-15T13:55:37.836269Z qemu-kvm:
-drive file=/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-
x86_64-27-1.6.iso,format=raw,if=none,id=drive-virtio-disk0: Could not
open '/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-
27-1.6.iso': Permission denied

Thanks ahead of time for your help.

Greg Ennis

On 07/15/2018 07:16 AM, Gregory P. Ennis wrote:
> The installation seemed to go well, but when I tried to add Fedora 27
> with virt-manager I have continued to get file permission errors.  I
> have tried turning selinux off,
Don't turn SELinux off.
> and making sure the directory
> permissions are 777 and the file permissions are 666, but have not been
> able to succeed.
Don't completely disable your security systems.
> The Error Message from virt-manager is :
> Unable to complete install: 'internal error: process exited while
> connecting to monitor: 2018-07-15T13:55:37.836269Z qemu-kvm: -drive
> file=/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-27-
> 1.6.iso,format=raw,if=none,id=drive-virtio-disk0: Could not open
> '/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-27-
> 1.6.iso': Permission denied'
/home/greg will be protected from other users by default.? You would 
need to change permissions on that directory from 0700 to 0701 to use an 
ISO there.? The "right" fix, though, would be to copy the ISO file to 
/var/lib/libvirt/images/

On 07/15/2018 07:16 AM, Gregory P. Ennis wrote:
> The installation seemed to go well, but when I tried to add Fedora 27
> with virt-manager I have continued to get file permission errors.??I
> have tried turning selinux off,
Don't turn SELinux off.
> and making sure the directory
> permissions are 777 and the file permissions are 666, but have not
> been
> able to succeed.
Don't completely disable your security systems.
> The Error Message from virt-manager is :
> Unable to complete install: 'internal error: process exited while
> connecting to monitor: 2018-07-15T13:55:37.836269Z qemu-kvm: -drive
> file=/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-
> 27-
> 1.6.iso,format=raw,if=none,id=drive-virtio-disk0: Could not open
> '/home/greg/Downloads/Fedora/f27/Fedora-Workstation-Live-x86_64-27-
> 1.6.iso': Permission denied'
/home/greg will be protected from other users by default.? You would?
need to change permissions on that directory from 0700 to 0701 to use
an?
ISO there.? The "right" fix, though, would be to copy the ISO file to?
/var/lib/libvirt/images/

------------------------------------------------

Gordan,?

I appreciate your admonition about selinux and the protectioin levels
of the directories.  As soon as I discovered that these aspects were
not the issues, I changed them back to the original values. 

The location of the iso image in /var/lib/libvirt/images/ directory
fixed the problem and allowed me to proceed with my laboratory
development. Thank you very much.  After knowing the importance of the
location of the iso image files,  I re-read the tutorials and I could
not identify this piece of information, hopefully this thread will help
others that are newbies with kvm.

Thanks again!!!!

Greg

-- 
Gregory P. Ennis, M.D., M.R.O.
Medical Director
EcCare Health Centers
972-659-1234
www.EcCare.com