PCI passthrough only works for oneadmin (ONE 5.2)


While we are testing the upgrade from 4.14.2 to 5.2 I ran in to the following problem, it seems that as oneadmin I am able to attach a PCI device (in this case a GPU) to a template but as a normal user it doesn’t work at all. Added to this problem is that I don’t get any feedback from the UI and there is nothing in /var/log/one/oned.log which might indicate something is wrong on our side. So it seems to work but the template is not updated with the PCI block entry.

Second thing I did was to check if there were any changes with regards to the ACL’s but I couldn’t find anything there related to PCI devices. Hope that someone can help me here.

Found the issue, the following was enabled in /etc/one/oned.conf


Maybe add something to the documentation on http://docs.opennebula.org/5.2/deployment/open_cloud_host_setup/pci_passthrough.html which links to http://docs.opennebula.org/5.2/deployment/references/oned_conf.html?highlight=restricted#restricted-attributes-configuration? And make sure you disable that restriction? And perhaps also throw an error in both the logfile and the UI when you try to add a restricted attribute to your template?