Boot VM’s with virt-manager and libvirt with ISO’s stored remotely via samba/cifs

major@mhtx.net (Major Hayden) — Sun, 07 Jul 2013 01:51:10 +0000

Pairing virt-manager with KVM makes booting new VM’s pretty darned easy. I have a QNAP NAS at home with a bunch of ISO’s stored in share available to guests and I wanted to use that with libvirt to boot new VM’s. (By the way, if you’re looking for an off-the-shelf NAS that is built with solid hardware and pretty reliable software, try one of the QNAP devices. You still get access to many of the usual commands that you would normally find on a Linux box for emergencies. More on that in a later post.)

The first step was creating a mountpoint and configuring the mount in /etc/fstab:

# mkdir /mnt/iso
# grep qemu /etc/passwd
qemu❌107:107:qemu user:/:/sbin/nologin
# echo "//qnap/ISO /mnt/iso cifs _netdev,guest,uid=107,gid=107,defaults 0 0" >> /etc/fstab
# mount /mnt/iso

My QNAP is already in /etc/hosts so I didn’t need to specify the IP in the file. Adding _netdev ensures that the network will be up before the mount is made. The guest option ensures that I won’t be prompted for credentials and the uid=107,gid=107 mounts the share as the qemu user. If you forget this, virt-manager will throw some ugly permissions errors from libvirt.

From there, I had another permissions error and I suspected that SELinux was preventing libvirt from accessing the files in the share. A quick check of /var/log/messages revealed that I was right:

Jul 6 16:12:51 nuc1 setroubleshoot: SELinux is preventing /usr/bin/qemu-system-x86_64 from open access on the file /mnt/iso/livecd.iso. For complete SELinux messages. run sealert -l c1c80b2c-b5df-4114-86c7-ffee98274552

Here’s the output from sealert:

# sealert -l c1c80b2c-b5df-4114-86c7-ffee98274552
SELinux is preventing /usr/bin/qemu-system-x86_64 from open access on the file /mnt/iso/livecd.iso.

***** Plugin catchall_boolean (89.3 confidence) suggests *******************

If you want to allow virt to use samba
Then you must tell SELinux about this by enabling the 'virt_use_samba' boolean.
You can read 'None' man page for more details.
Do
setsebool -P virt_use_samba 1

The fix is a quick one:

# setsebool -P virt_use_samba 1

You should be all set after that. Press “Browse Local” in virt-manager when you look for your ISO to boot the virtual machine and navigate over to /mnt/iso for your list of ISO’s.

Samba on Major Hayden

Boot VM’s with virt-manager and libvirt with ISO’s stored remotely via samba/cifs