Could not create domain permission denied

Hi!
I want to create vm in opennebula but it says
Could not create domain
I configured glusterfs as storage
I already check permission
LOG:

Mon May 3 13:18:24 2021 [Z0][VM][I]: New LCM state is PROLOG
Mon May 3 13:18:25 2021 [Z0][VM][I]: New LCM state is BOOT
Mon May 3 13:18:25 2021 [Z0][VMM][I]: Generating deployment file: /var/lib/one/vms/895/deployment.0
Mon May 3 13:18:26 2021 [Z0][VMM][I]: Successfully execute transfer manager driver operation: tm_context.
Mon May 3 13:18:26 2021 [Z0][VMM][I]: ExitCode: 0
Mon May 3 13:18:26 2021 [Z0][VMM][I]: Successfully execute network driver operation: pre.
Mon May 3 13:18:28 2021 [Z0][VMM][I]: Command execution fail: cat << EOT | /var/tmp/one/vmm/kvm/deploy '/var/lib/one//datastores/0/895/deployment.0' 'provision-node-8' 895 provision-node-8
Mon May 3 13:18:28 2021 [Z0][VMM][I]: error: Failed to create domain from /var/lib/one//datastores/0/895/deployment.0
Mon May 3 13:18:28 2021 [Z0][VMM][I]: error: internal error: process exited while connecting to monitor: 2021-05-03T13:18:28.550731Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/lib/one/datastores/1/2c78ac1207ad2d91b2af971a63756351","node-name":"libvirt-3-storage","cache":{"direct":true,"no-flush":false},"auto-read-only":true,"discard":"unmap"}: Could not open '/var/lib/one/datastores/1/2c78ac1207ad2d91b2af971a63756351': Permission denied
Mon May 3 13:18:28 2021 [Z0][VMM][E]: Could not create domain from /var/lib/one//datastores/0/895/deployment.0
Mon May 3 13:18:28 2021 [Z0][VMM][I]: ExitCode: 255
Mon May 3 13:18:29 2021 [Z0][VMM][I]: ExitCode: 0
Mon May 3 13:18:29 2021 [Z0][VMM][I]: Successfully execute network driver operation: clean.
Mon May 3 13:18:29 2021 [Z0][VMM][I]: Failed to execute virtualization driver operation: deploy.
Mon May 3 13:18:29 2021 [Z0][VMM][E]: Error deploying virtual machine: Could not create domain from /var/lib/one//datastores/0/895/deployment.0
Mon May 3 13:18:29 2021 [Z0][VM][I]: New LCM state is BOOT_FAILURE```

Hi,

I’ve the same issue on a NFS datastore, do you have find any solution for this issue ?

Kind regards

1 Like

Hi,
I had a similar problem running Debian 11.2 OS in my lab.
For me, it turned out to be a restrictive app-armor profile.
And I worked around it by disabling the app-armor in the kernel at boot - though this is probably not the best way

https://wiki.debian.org/AppArmor/HowToUse#Disable_AppArmor