[ops][nova][victoria] QEMU/KVM libvirt Authentication Failed

Laurent Dumont laurentfdumont at gmail.com
Sat Nov 20 01:45:29 UTC 2021


Which version of Openstack are you running?

It seems to try to connect over qemu with auth over tcp. Without ssh?

Is the cold migration working now?

On Fri, Nov 19, 2021 at 8:35 PM Mohammed Naser <mnaser at vexxhost.com> wrote:

> Just a heads up even if you get things working you’re not going to be able
> to live migrate from centos to ubuntu and vice versa since there’s going to
> be things like apparmor and SELinux issues
>
> On Fri, Nov 19, 2021 at 11:35 AM <DHilsbos at performair.com> wrote:
>
>> All;
>>
>> I feel like I've dealt with this issue before, but I can't find any
>> records of it.
>>
>> I've been swapping out the compute nodes in my cluster for newer and
>> better hardware.  We also decided to abandon CentOS.  All the differences
>> mean that we haven't been able to do live migrations.  I now have 2 servers
>> with the same CPUs, OS (Ubuntu), OS Version (20.10), etc., and would like
>> to get live migration working again.
>>
>> I configured passwordless ssh access between the servers for the nova
>> users to get cold migration working.  I have also configured passwordless
>> ssh for the root users in accordance with [1].
>>
>> When I try to do a live migration, the origin server generates this
>> error, in the nova-compute log:
>> 2021-11-19 15:52:31.130 15610 ERROR nova.virt.libvirt.driver [-]
>> [instance: 5935c07d-0c7f-48cc-a4b9-674504fc6005] Live Migration failure:
>> operation failed: Failed to connect to remote libvirt URI
>> qemu+tcp://<remote_server>/system: authentication failed: authentication
>> failed: libvirt.libvirtError: operation failed: Failed to connect to remote
>> libvirt URI qemu+tcp://<remote_server>/system: authentication failed:
>> authentication failed
>>
>> At one point, I came across a tutorial on configuring live-migration for
>> libvirt, which included a bunch of user configuration.  I don't remember
>> having to do that before, but is that what I need to be looking for?
>>
>> Thank you,
>>
>> Dominic L. Hilsbos, MBA
>> Vice President - Information Technology
>> Perform Air International Inc.
>> DHilsbos at PerformAir.com
>> www.PerformAir.com
>>
>> 1:
>> https://docs.openstack.org/nova/victoria/admin/configuring-migrations.html#section-configuring-compute-migrations
>>
>> --
> Mohammed Naser
> VEXXHOST, Inc.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211119/3d6564c7/attachment-0001.htm>


More information about the openstack-discuss mailing list