nova.virt.libvirt.driver [-] Connection event ‘0‘ reason ‘Failed to connect to libvirt: authenticati

安河桥北2025

已于 2024-01-29 17:08:14 修改

阅读量962

点赞数 8

CC 4.0 BY-SA版权

文章标签： openstack

于 2024-01-29 09:22:22 首次发布

本文链接：https://blog.youkuaiyun.com/qq_29060627/article/details/135904682

文章讲述了在使用Kolla部署OpenStack环境中，遇到libvirt连接失败的错误，原因在于libvirt的认证问题。通过检查日志和配置，发现是由于DNS设置导致的，解决方法是注释掉无效的DNS条目。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

kolla openstack yoga：

cat /var/log/kolla/nova/nova-compute.log  | grep authentication;



"_raw_params": "docker exec kolla_toolbox openstack --os-interface internal --os-auth-url http://10.1.0.7:35357 --os-username admin --os-password jaURhBGJ5iS8fsxmxfRpHQridvkxA7pdycYdLTwP --os-identity-api-version 3 --os-user-domain-name Default --os-system-scope all --os-region-name RegionOne  compute service list --format json --column Host --service nova-compute\n",

root@fv-az528-99:/root# uname -a
Linux fv-az528-99 5.15.0-1053-azure #61~20.04.1-Ubuntu SMP Tue Nov 21 17:50:57 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
root@fv-az528-99:/root# tail /var/log/kolla/nova/nova-compute.log 


2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib64/python3.6/site-packages/libvirt.py", line 148, in openAuth
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     raise libvirtError('virConnectOpenAuth() failed')
2024-01-29 01:15:18.717 7 ERROR oslo_service.service libvirt.libvirtError: authentication failed: authentication failed
2024-01-29 01:15:18.717 7 ERROR oslo_service.service 
2024-01-29 01:15:18.717 7 ERROR oslo_service.service During handling of the above exception, another exception occurred:
2024-01-29 01:15:18.717 7 ERROR oslo_service.service 
2024-01-29 01:15:18.717 7 ERROR oslo_service.service Traceback (most recent call last):
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/oslo_service/service.py", line 806, in run_service
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     service.start()
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/nova/service.py", line 159, in start
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     self.manager.init_host()
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/nova/compute/manager.py", line 1526, in init_host
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     self.driver.init_host(host=self.host)
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/driver.py", line 721, in init_host
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     self._update_host_specific_capabilities()
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/driver.py", line 827, in _update_host_specific_capabilities
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     'supports_secure_boot': self._host.supports_secure_boot,
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/host.py", line 1681, in supports_secure_boot
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     arch = self.get_capabilities().host.cpu.arch
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/host.py", line 782, in get_capabilities
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     xmlstr = self.get_connection().getCapabilities()
2024-01-29 01:15:18.717 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/nova/virt/libvirt/host.py", line 597, in get_connection
2024-01-29 01:15:18.717 7 ERROR oslo_service.service     raise exception.HypervisorUnavailable()
2024-01-29 01:15:18.717 7 ERROR oslo_service.service nova.exception.HypervisorUnavailable: Connection to the hypervisor is broken on host
2024-01-29 01:15:18.717 7 ERROR oslo_service.service 
2024-01-29 01:15:18.721 7 INFO nova.virt.libvirt.driver [-] Connection event '0' reason 'Failed to connect to libvirt: authentication failed: authentication failed'
root@fv-az528-99:/root#

root@fv-az528-99:/root# docker exec -it nova_libvirt bash -c "cat /var/lib/kolla/config_files/auth.conf;"
[credentials-default]
authname=nova
password=ceRL6wRRlsbM80K19INysC0L7BkKOBChhA5xjgWk

[auth-libvirt-default]
credentials=default
root@fv-az528-99:/root# grep gWk   /etc/kolla/passwords.yml;
libvirt_sasl_password: ceRL6wRRlsbM80K19INysC0L7BkKOBChhA5xjgWk
root@fv-az528-99:/root#

root@fv-az528-99:/tmp# cat /etc/kolla/nova-compute/auth.conf
[credentials-default]
authname=nova
password=ceRL6wRRlsbM80K19INysC0L7BkKOBChhA5xjgWk

[auth-libvirt-default]
credentials=default
root@fv-az528-99:/tmp# cat /etc/kolla/nova-libvirt/libvirtd.conf
listen_tcp = 1
listen_tls = 0
auth_tcp = "sasl"
tcp_port = "16509"
ca_file = ""
log_level = 3
log_outputs = "3:file:/var/log/kolla/libvirt/libvirtd.log"
listen_addr = "10.1.0.7"
root@fv-az528-99:/tmp# 

(nova-libvirt)[root@fv-az528-99 /]#  cat /etc/libvirt/libvirtd.conf 
listen_tcp = 1
listen_tls = 0
auth_tcp = "sasl"
tcp_port = "16509"
ca_file = ""
log_level = 3
log_outputs = "3:file:/var/log/kolla/libvirt/libvirtd.log"
listen_addr = "10.1.0.7"
(nova-libvirt)[root@fv-az528-99 /]#

(nova-libvirt)[root@fv-az701-445 /]# sasldblistusers2 -f /etc/libvirt/passwd.db
nova@fv-az701-445: userPassword
(nova-libvirt)[root@fv-az701-445 /]# strings  /etc/libvirt/passwd.db 
TFLa4yUm97rtvnjR4dWmxPglsCYuAbe8JT9kKScc
nova
fv-az701-445
userPassword
(nova-libvirt)[root@fv-az701-445 /]# 

(nova-libvirt)[root@fv-az701-445 /]# virsh --connect=qemu+tcp://nova:TFLa4yUm97rtvnjR4dWmxPglsCYuAbe8JT9kKScc@fv-az701-445/system   # 又失败了
error: failed to connect to the hypervisor
error: authentication failed: authentication failed
(nova-libvirt)[root@fv-az701-445 /]#

(nova-libvirt)[root@fv-az701-445 /]# saslpasswd2 -a libvirt -u fv-az701-445  nova
Password: 
Again (for verification): 
(nova-libvirt)[root@fv-az701-445 /]# saslpasswd2 -a libvirt -u localhost  nova
Password: 
Again (for verification): 
(nova-libvirt)[root@fv-az701-445 /]# sasldblistusers2 -f /etc/libvirt/passwd.db
nova@fv-az701-445: userPassword
nova@localhost: userPassword
(nova-libvirt)[root@fv-az701-445 /]#

原来是DNS的问题：把第10行注释掉就ok

docker exec -it nova_libvirt bash;

(nova-libvirt)[root@fv-az701-445 /]# cat -n /etc/hosts
     1	127.0.0.1 localhost
     2	
     3	# The following lines are desirable for IPv6 capable hosts
     4	::1     localhost ip6-localhost ip6-loopback
     5	fe00::0 ip6-localnet
     6	ff00::0 ip6-mcastprefix
     7	ff02::1 ip6-allnodes
     8	ff02::2 ip6-allrouters
     9	ff02::3 ip6-allhosts
    10	#10.1.0.30 fv-az701-445.f3fyigry0suu1otrijw4un2zmf.cx.internal.cloudapp.net fv-az701-445
    11	# BEGIN ANSIBLE GENERATED HOSTS
    12	10.1.0.30 fv-az701-445
    13	# END ANSIBLE GENERATED HOSTS
(nova-libvirt)[root@fv-az701-445 /]#

(nova-libvirt)[root@fv-az701-445 /]# virsh --connect=qemu+tcp://nova:TFLa4yUm97rtvnjR4dWmxPglsCYuAbe8JT9kKScc@fv-az701-445/system 
Welcome to virsh, the virtualization interactive terminal.

Type:  'help' for help with commands
       'quit' to quit

virsh # list
 Id   Name                State
-----------------------------------
 1    instance-00000001   running

virsh #