From: Masaki Kimura <masaki.kimura.kz@hitachi.com>
To: Timon Wang <timonwst@gmail.com>
Cc: Paolo Bonzini <pbonzini@redhat.com>,
"Nicholas A. Bellinger" <nab@linux-iscsi.org>,
Stefan Hajnoczi <stefanha@gmail.com>,
Don Koch <dkoch@verizon.com>,
libvirt-users <libvirt-users@redhat.com>,
kvm@vger.kernel.org
Subject: Re: Re: Oracle RAC in libvirt+KVM environment
Date: Tue, 27 Aug 2013 19:29:57 +0900 [thread overview]
Message-ID: <521C7FA5.5040401@hitachi.com> (raw)
In-Reply-To: <CAH+8Fsy_-udtSKrc27kii-KPSEF0BE5Md8gdGNO7eF=gG7D9hg@mail.gmail.com>
>> I found that scsicmd can't pass all the scsi3_test but the result of
>> sg_inq is the same as it in the host.
>>
>> I am absolutely confused about this situation. Am I missed some
>> information about it?
I guess this is caused by the lack of capability.
Please check if enough capability was added to kvm process by the following
steps.
1. Check the pid of kvm process.
# ps -C qemu-system-x86_64 -o pid=
5177
2. Check the capability for the process.
# getpcaps 5177
Capabilities for `5177': = cap_sys_rawio+i
In my fedora19 environment, as seen in above, only cap_sys_rawio+i was added
with rawio='yes'. Even though, cap_sys_rawio+ep is required to pass-through
SCSI Reservation from the guest.
Note that I succeeded to pass-through SCSI Reservation with the following steps
in my environment, not a Windows guest though.
1. Stop the guest.
2. Add CAP_SYS_RAWIO(effective, permitted) to qemu-kvm.
# setcap cap_sys_rawio=ep /usr/bin/qemu-system-x86_64
3. Start the guest.
However, I don't think this is the right way to workaround it, because it
gives cap_sys_rawio+ep to all the kvm processes executed from this binary.
I believe following patches, which are not merged yet, are trying to solve
this problem in a different approach.
- [PATCH v3 part2] Add per-device sysfs knob to enable unrestricted,
unprivileged SG_IO
https://lkml.org/lkml/2013/5/23/294
- [RFC PATCH 0/4] SG_IO filtering via sysfs and minimal whitelist
https://lkml.org/lkml/2013/5/27/230
Any comments on this?
Masaki
next prev parent reply other threads:[~2013-08-27 10:32 UTC|newest]
Thread overview: 32+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-08-02 5:58 Oracle RAC in libvirt+KVM environment Timon Wang
2013-08-08 7:54 ` Timon Wang
[not found] ` <CAH+8Fsxhgkd2ScivXcPc7WzXyie4AHUsuNvLEUgo2rvTBtzdNA-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2013-08-08 14:04 ` Don Koch
2013-08-10 3:14 ` Timon Wang
2013-08-12 9:53 ` Stefan Hajnoczi
[not found] ` <20130812095304.GE29880-lxVrvc10SDTaErKTczak/Dh473NlOPsLVpNB7YpNyf8@public.gmane.org>
2013-08-12 10:17 ` Timon Wang
2013-08-13 9:18 ` Stefan Hajnoczi
2013-08-14 6:33 ` Timon Wang
2013-08-14 8:40 ` Timon Wang
2013-08-14 14:02 ` Stefan Hajnoczi
2013-08-15 10:01 ` Timon Wang
2013-08-19 11:10 ` Paolo Bonzini
2013-08-20 6:00 ` Timon Wang
2013-08-20 6:05 ` Timon Wang
2013-08-20 8:33 ` Paolo Bonzini
2013-08-20 9:59 ` Timon Wang
2013-08-20 10:16 ` Paolo Bonzini
2013-08-20 10:42 ` Timon Wang
2013-08-20 10:49 ` Paolo Bonzini
2013-08-20 11:43 ` Timon Wang
2013-08-20 11:57 ` Timon Wang
2013-08-20 12:09 ` Paolo Bonzini
2013-08-21 2:11 ` Timon Wang
2013-08-21 9:09 ` Paolo Bonzini
2013-08-21 9:40 ` Nicholas A. Bellinger
2013-08-22 7:46 ` Timon Wang
2013-08-22 9:02 ` Paolo Bonzini
2013-08-23 2:44 ` Timon Wang
2013-08-27 10:29 ` Masaki Kimura [this message]
2013-08-27 11:07 ` Paolo Bonzini
2013-08-27 12:09 ` Timon Wang
2013-08-12 9:49 ` Stefan Hajnoczi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=521C7FA5.5040401@hitachi.com \
--to=masaki.kimura.kz@hitachi.com \
--cc=dkoch@verizon.com \
--cc=kvm@vger.kernel.org \
--cc=libvirt-users@redhat.com \
--cc=nab@linux-iscsi.org \
--cc=pbonzini@redhat.com \
--cc=stefanha@gmail.com \
--cc=timonwst@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.