Mailing List Archive

[kolla-ansible] kvm permission denied for nova user for all-in-one deployment: cannot launch instance as consequence
Hello,

I'm having some trouble launching an instance after deploying using
kolla-ansible all-in-one deployment on Ubuntu and Centos using the most up
to date release, Rocky.

Here is the log.

(nova-compute)[nova@openstack /]$ cat /var/log/kolla/nova/nova-compute.log
| grep error
: libvirtError: internal error: process exited while connecting to monitor:
Could not access KVM kernel module: Permission denied
2018-11-05 15:10:36.720 6 ERROR nova.virt.libvirt.driver
[req-2bf6b5d8-cfba-449c-967b-2e3dae7a3a56 507ab1a9af604db19446ea9d97ac2503
634aee2a6cd8437c93395be07af6fe33 - default default] [instance:
8d323b09-27c3-4632-9c03-48d27bbc5840] Failed to start libvirt guest:
libvirtError: internal error: process exited while connecting to monitor:
Could not access KVM kernel module: Permission denied
2018-11-05 15:10:43.502 6 ERROR nova.compute.manager
[req-2bf6b5d8-cfba-449c-967b-2e3dae7a3a56 507ab1a9af604db19446ea9d97ac2503
634aee2a6cd8437c93395be07af6fe33 - default default] [instance:
8d323b09-27c3-4632-9c03-48d27bbc5840] Instance failed to spawn:
libvirtError: internal error: process exited while connecting to monitor:
Could not access KVM kernel module: Permission denied
2018-11-05 15:10:43.502 6 ERROR nova.compute.manager [instance:
8d323b09-27c3-4632-9c03-48d27bbc5840] self._encoded_xml,
errors='ignore')
2018-11-05 15:10:43.502 6 ERROR nova.compute.manager [instance:
8d323b09-27c3-4632-9c03-48d27bbc5840] libvirtError: internal error: process
exited while connecting to monitor: Could not access KVM kernel module:
Permission denied
: libvirtError: internal error: process exited while connecting to monitor:
Could not access KVM kernel module: Permission denied

It should work based on below?

(nova-compute)[nova@openstack /]$ cat /dev/kvm
cat: /dev/kvm: Permission denied

(nova-compute)[nova@openstack /]$ ls -al /dev/kvm
crw-rw----+ 1 root qemu 10, 232 Nov 5 15:10 /dev/kvm

(nova-compute)[nova@openstack /]$ whoami
nova

(nova-compute)[nova@openstack /]$ groups nova
nova : nova kolla qemu

Thanks,
JD