virt-install: failed to initialize KVM: Permission denied

virt-install: failed to initialize KVM: Permission denied

[arnaud gaboury]

$ uname -r
3.16.1-1-ARCH
---------------------

As a regular user, member of the libvirt group, I run this command to
create a basic VM:

virt-install --connect qemu:///system --name=test --ram 2048 --cpu
host-model-only --os-variant=win7 --disk /myVM/test --boot cdrom,hd
--virt-type kvm --graphics spice --controller scsi,model=virtio-scsi
--cdrom=/drawer/myIso/w8.iso

It returns an error :
------------------------------
---
Starting install...
ERROR    internal error: process exited while connecting to monitor:
Could not access KVM kernel module: Permission denied
failed to initialize KVM: Permission denied
---------------------------------

$ getfacl /dev/kvm

# file: dev/kvm
# owner: root
# group: kvm
user::rw-
user:martinus:rw-
group::rw-
mask::rw-
other::---

The command return seems to indicate rights are correct.
$ lsmod return kvm & kvm_intel are loaded.

If I run the virt-install with qemu:///session, I do not have this
issue and can create the VM.

I found many entries about the KVM permission issue, but with no clear
answer to solve it.

Thank you for any suggestion

-- 

google.com/+arnaudgabourygabx

Re: virt-install: failed to initialize KVM: Permission denied

[Cole Robinson]

On 08/19/2014 02:38 PM, arnaud gaboury wrote:
> $ uname -r
> 3.16.1-1-ARCH
> ---------------------
> 
> As a regular user, member of the libvirt group, I run this command to
> create a basic VM:
> 
> virt-install --connect qemu:///system --name=test --ram 2048 --cpu
> host-model-only --os-variant=win7 --disk /myVM/test --boot cdrom,hd
> --virt-type kvm --graphics spice --controller scsi,model=virtio-scsi
> --cdrom=/drawer/myIso/w8.iso
> 
> It returns an error :
> ------------------------------
> ---
> Starting install...
> ERROR    internal error: process exited while connecting to monitor:
> Could not access KVM kernel module: Permission denied
> failed to initialize KVM: Permission denied
> ---------------------------------
> 
> $ getfacl /dev/kvm
> 
> # file: dev/kvm
> # owner: root
> # group: kvm
> user::rw-
> user:martinus:rw-
> group::rw-
> mask::rw-
> other::---
> 
> The command return seems to indicate rights are correct.
> $ lsmod return kvm & kvm_intel are loaded.
> 
> If I run the virt-install with qemu:///session, I do not have this
> issue and can create the VM.
> 
> I found many entries about the KVM permission issue, but with no clear
> answer to solve it.
> 

When connecting to qemu:///system, libvirt does not run VMs as your regular
user. What user libvirtd uses though is dependent on how it's configured. On
Fedora, qemu VMs are run as the 'qemu' user. If that's how it's configured on
your distro, the above permissions would block use of /dev/kvm. Here's how
permissions look on Fedora 20 for me:

$ ls -l /dev/kvm
crw-rw-rw-+ 1 root kvm 10, 232 Aug  8 09:51 /dev/kvm

$ getfacl /dev/kvm
getfacl: Removing leading '/' from absolute path names
# file: dev/kvm
# owner: root
# group: kvm
user::rw-
user:crobinso:rw-
group::rw-
mask::rw-
other::rw-

Those permissive permissions are set by a udev rule installed by qemu-system-x86:

$ cat /lib/udev/rules.d/80-kvm.rules
KERNEL=="kvm", GROUP="kvm", MODE="0666"

So perhaps your distro should do the same.

- Cole

Re: virt-install: failed to initialize KVM: Permission denied

[arnaud gaboury]

> Those permissive permissions are set by a udev rule installed by qemu-system-x86:
>
> $ cat /lib/udev/rules.d/80-kvm.rules
> KERNEL=="kvm", GROUP="kvm", MODE="0666"
>
> So perhaps your distro should do the same.
>

I have it as /lib/udev/rules.d/65-kvm.rules.

In fact, I solved my issue when setting user:group to qemu:kvm in
/etc/libvirt/qemu.conf