[pve-devel] pve: cloning

[Alexandre DERUMIER]

I can reproduce here too with full clone: (only with nexenta plugin in the game)

(Works fine in command line, don't work only with gui)

create full clone of drive ide0 (nexentatestapi:vm-277-disk-1)
TASK ERROR: clone failed: unable to create image: Insecure dependency in exec while running with -T switch at /usr/share/perl/5.14/IPC/Open3.pm line 186.

nexenta -> local : fail on alloc_image  (qemu-img create)

rbd -> nexenta : ok
 

I don't known exactly how tainted mode work, we have already fixed a bug like this here:

https://git.proxmox.com/?p=pve-storage.git;a=blobdiff;f=PVE/Storage/Plugin.pm;h=462d9e1e21d40d66b8545aadfd46669a10b986d8;hp=de2818cd62d0aab634258d27c54aba26ec123ed7;hb=7fc619d5d31c2eba2cfab6f1fcf6cb9dca7ddf55;hpb=32437ed2791882342928e081bcbffeb9c70cdc59



----- Mail original ----- 

De: "Michael Rasmussen" <mir at datanom.net> 
À: "Michael Rasmussen" <mir at datanom.net> 
Cc: "Alexandre DERUMIER" <aderumier at odiso.com>, pve-devel at pve.proxmox.com 
Envoyé: Vendredi 24 Mai 2013 01:33:58 
Objet: Re: [pve-devel] pve: cloning 

On Thu, 23 May 2013 09:16:38 +0200 
Michael Rasmussen <mir at datanom.net> wrote: 

> Using the clone features from the nexenta-plugin does not work either: 
> create full clone of drive virtio0 (nexenta_iscsi:vm-101-disk-1) 
> TASK ERROR: clone failed: unable to create image: Insecure dependency 
> in exec while running with -T switch 
> at /usr/share/perl/5.14/IPC/Open3.pm line 186. 
> 
I have found out what is causing the above error. Every time you try to 
make a clone where the target for the clone is a different storage than 
the storage of the source the error above is thrown. 

Following use cases have been tried with the same result: 
source target result 
nexenta zfs fails 
nexenta local fails 
nexenta nexenta success 
zfs nexenta fails 
zfs local fails 
zfs zfs success 

seems that command 'exec' in IPC/Open3.pm cannot be executed on a 
tainted command which normally is seen when path is not untainted. 


-- 
Hilsen/Regards 
Michael Rasmussen 

Get my public GnuPG keys: 
michael <at> rasmussen <dot> cc 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E 
mir <at> datanom <dot> net 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C 
mir <at> miras <dot> org 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 
-------------------------------------------------------------- 
Your step will soil many countries.