From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Campbell Subject: RE: Generic PV Guests on XCP? Date: Mon, 29 Mar 2010 19:30:38 +0100 Message-ID: <1269887438.2490.60.camel@localhost.localdomain> References: <38AD81989214D54EB5F20C69477AF6C10ADF1279@xmb-sjc-217.amer.cisco.com> <1269459935.28761.910.camel@localhost.localdomain> <38AD81989214D54EB5F20C69477AF6C10AEA72E9@xmb-sjc-217.amer.cisco.com> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <38AD81989214D54EB5F20C69477AF6C10AEA72E9@xmb-sjc-217.amer.cisco.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: "Phil Winterfield (winterfi)" Cc: "Don Banks (donbanks)" , "xen-devel@lists.xensource.com" , "David.Cottingham@eu.citrix.com" , "xen-api@lists.xensource.com" List-Id: xen-devel@lists.xenproject.org On Mon, 2010-03-29 at 19:21 +0100, Phil Winterfield (winterfi) wrote:=20 > Ian-=20 >=20 > I have taken your advice and created a generic template using > vm-create, but for some reason it doesn=E2=80=99t like the kernel path,= even > though it is clearly accessible - see below. Any ideas? Some security stuff got added to xapi recently which requires that the guest kernel and ramdisk be under "/boot/guest/". I'm not really sure why -- I think it's because with RBAC non root users with the VM admin role can set PV-kernel/PV-initrd/etc (imagine setting PV-initrd to /etc/shadow) but I'm not sure why restricting to just /boot wasn't sufficiently secure. If you move (or symlink) your stuff to /boot/guest and use /boot/guest/ios/i86bi_etcetc I think things should work. Ian. >=20 > Phil >=20 >=20 > [root@xenserver-wvgdltag ~]# xe vm-create name-label=3DIOSonXen name-de= scription=3D"Paravirtualized IOS on Xen" > 5c56afe3-a729-bcaa-a543-d87987167a3d > [root@xenserver-wvgdltag ~]# xe vm-param-set uuid=3D5c56afe3-a729-bcaa-= a543-d87987167a3d \ > > PV-kernel=3D'/boot/ios/i86bi_xen-ipbase-ms' \ > > PV-args=3D \ > > PV-bootloader=3D \ > > PV-bootloader-args=3D \ > > memory-static-min=3D2048 \ > > VCPUs-at-startup=3D1 \ > > other-config:pause=3D1 \ > > other-config:disable_pv_vnc=3D1 > [root@xenserver-wvgdltag ~]# xe vm-start uuid=3D5c56afe3-a729-bcaa-a543= -d87987167a3d > Caller not allowed to perform this operation. > message: illegal kernel path /boot/ios/i86bi_xen-ipbase-ms > [root@xenserver-wvgdltag ~]# ls -l /boot/ios/i86bi_xen-ipbase-ms > -rwxr-xr-x 1 root root 61649099 Mar 23 13:37 /boot/ios/i86bi_xen-ipbase= -ms > [root@xenserver-wvgdltag ~]# >=20