• D
    Don't reset user/group/security label on shared filesystems during migrate · 02ddaddf
    Daniel P. Berrange 提交于
    When QEMU runs with its disk on NFS, and as a non-root user, the
    disk is chownd to that non-root user. When migration completes
    the last step is shutting down the QEMU on the source host. THis
    normally resets user/group/security label. This is bad when the
    VM was just migrated because the file is still in use on the dest
    host. It is thus neccessary to skip the reset step for any files
    found to be on a shared filesystem
    
    * src/libvirt_private.syms: Export virStorageFileIsSharedFS
    * src/util/storage_file.c, src/util/storage_file.h: Add a new
      method virStorageFileIsSharedFS() to determine if a file is
      on a shared filesystem (NFS, GFS, OCFS2, etc)
    * src/qemu/qemu_driver.c: Tell security driver not to reset
      disk labels on migration completion
    * src/qemu/qemu_security_dac.c, src/qemu/qemu_security_stacked.c,
      src/security/security_selinux.c, src/security/security_driver.h,
      src/security/security_apparmor.c: Add ability to skip disk
      restore step for files on shared filesystems.
    02ddaddf
libvirt_private.syms 14.9 KB