F9 and KVM

Tom London selinux at gmail.com
Thu May 8 18:03:01 UTC 2008


2008/5/8 Gerry Reno <greno at verizon.net>:
> Gerry Reno wrote:
>
> Here's what I found so far:
>   In BIOS there is a setting "AMD Cool n Quiet".  I thought this was some
> type of fan thing.  It is not.  It controls the cpu speed.  So I disable
> this and now dmesg and /proc/cpuinfo both show same at 2510 MHz.  And I try
> creating a new F9 VM with 1 VCPU.  The install now seems to run at a normal
> speed but still I cannot get F9 to install in VM.  It says partition table
> on /dev/sda is unreadable and it needs to initialize.  So I say yes and it
> sits there for about 10 mins until it give you an error (i/o error on
> device) retry,ignore,cancel.  No choice helps.  So I try with F7 as well and
> same thing, it cannot initialize the virtual drive (mine is file-based).
>
>
> I think SELinux is causing some problems with KVM:
>
> log:
> May  7 18:29:54 grp-01-10-01 yum: Installed: kvm-65-1.fc9.i386
> May  7 23:00:14 grp-01-10-01 setroubleshoot: SELinux is preventing qemu-kvm
> (qemu_t) "write" to ./MX_1-0.vmdk (var_t). For complete SELinux messages.
> run sealert -l c5d1da68-2969-4a93-843c-774a346e4705
> May  7 23:29:12 grp-01-10-01 setroubleshoot: SELinux is preventing qemu-kvm
> (qemu_t) "write" to ./MX_1-0.vmdk (var_t). For complete SELinux messages.
> run sealert -l c5d1da68-2969-4a93-843c-774a346e4705
> May  8 12:20:56 grp-01-10-01 setroubleshoot: SELinux is preventing qemu-kvm
> (qemu_t) "write" to ./MX_1-0.vmdk (var_t). For complete SELinux messages.
> run sealert -l e1adef63-a2c9-4e8e-a834-14cc9df77259
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:20:56 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:21:06 grp-01-10-01 kernel: kvm: 3997: cpu0 kvm_set_msr_common:
> MSR_IA32_MC0_STATUS 0x0, nop
> May  8 12:21:06 grp-01-10-01 kernel: kvm: 3997: cpu1 kvm_set_msr_common:
> MSR_IA32_MC0_STATUS 0x0, nop
> May  8 12:21:06 grp-01-10-01 kernel: kvm: 3997: cpu2 kvm_set_msr_common:
> MSR_IA32_MC0_STATUS 0x0, nop
> May  8 12:21:07 grp-01-10-01 kernel: kvm: 3997: cpu3 kvm_set_msr_common:
> MSR_IA32_MC0_STATUS 0x0, nop
> May  8 12:21:08 grp-01-10-01 kernel: kvm: emulating exchange as write
> May  8 12:26:20 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:26:20 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 12:26:20 grp-01-10-01 setroubleshoot: SELinux is preventing qemu-kvm
> (qemu_t) "write" to ./TEST1.img (var_t). For complete SELinux messages. run
> sealert -l 15c2312c-dd5f-44fd-b2d1-b9fb90188284
> May  8 12:26:20 grp-01-10-01 setroubleshoot: SELinux is preventing qemu-kvm
> (qemu_t) "write" to ./f9-preview-i386-dvd.iso (var_t). For complete SELinux
> messages. run sealert -l af4954a1-8379-403d-bc1b-ff6b1e0041df
> May  8 12:26:26 grp-01-10-01 kernel: kvm: 4075: cpu0 kvm_set_msr_common:
> MSR_IA32_MC0_STATUS 0x0, nop
> May  8 13:28:25 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 13:28:25 grp-01-10-01 kernel: kvm: guest NX capability removed
> May  8 13:28:25 grp-01-10-01 setroubleshoot: SELinux is preventing qemu-kvm
> (qemu_t) "write" to ./TEST1.img (var_t). For complete SELinux messages. run
> sealert -l 15c2312c-dd5f-44fd-b2d1-b9fb90188284
> May  8 13:28:25 grp-01-10-01 setroubleshoot: SELinux is preventing qemu-kvm
> (qemu_t) "write" to ./f9-preview-i386-dvd.iso (var_t). For complete SELinux
> messages. run sealert -l af4954a1-8379-403d-bc1b-ff6b1e0041df
> May  8 13:29:35 grp-01-10-01 kernel: kvm: 4353: cpu0 kvm_set_msr_common:
> MSR_IA32_MC0_STATUS 0x0, nop
>
>
> I ran a fixfiles on all filesystems but still get the messages.
>
>
> Regards,
> Gerry
>

Try the following:   "chcon -t virt_image_t ./f9-preview-i386-dvd.iso"
before running qemu-kvm.

tom
-- 
Tom London




More information about the fedora-devel-list mailing list