OpenNebula

I am not sure if you are using KVM, if so please check that user/group are set for your oneadmin ID's in qemu.conf

Thanks for the quick reply.

Indeed, I am using KVM, with Debian Wheezy (7.0). Unfortunately, even with qemu.conf set as

1. The user ID for QEMU processes run by the system instance.
   user = "oneadmin"
2. The group ID for QEMU processes run by the system instance.
   group = "oneadmin"

That didn't work. When I list the processes running in my system (ps aux | grep kvm), VMs are clearly running under "oneadmin" account :
"oneadmin 53747 88.5 0.3 804356 27536 ? Sl 21:31 0:03 /usr/bin/kvm -S -M pc-0.15 -enable-kvm -m 512 -smp 1,sockets=1,cores=1,threads=...."

Still images are saved_as "root" :(

Only libvirtd runs as run, but that's not easy to change.

I believe there's a bug somewhere... :). Can someone reproduce ?

Thanks

What about dynamic_ownership, is that set to 0?

So I investigated a little...
I used a shared datastore.

Let's go through an example. I start a new vm, vm ID is 21, one disk and one cdrom (context). When the vm is running, my local datastore (id 0) looks like :
root@sd-34837:/home/oneadmin/var# ls la datastores/0/21/
total 717700
drwxr-xr-x 2 oneadmin oneadmin 4096 juil. 2 21:53 .
drwxr-xr-x 3 oneadmin oneadmin 4096 juil. 2 21:53 ..
-rw-r--r- 1 oneadmin oneadmin 1058 juil. 2 21:53 deployment.0
rw-r---- 1 oneadmin oneadmin 177209344 juil. 2 21:53 disk.0
rw-r---- 1 oneadmin oneadmin 1073741825 juil. 2 21:54 disk.1 <<-- this is the image i want to save, notice the correct permission

I click "save as" through Sunstone, permissions don't change. So far, so good.
I click "shutdown" through Sunstone. A fraction of second before the directory "datastores/0/21/" vanishes, I see :
root@sd-34837:/home/oneadmin/var# ls la datastores/0/21/
total 717700
drwxr-xr-x 2 oneadmin oneadmin 4096 juil. 2 21:53 .
drwxr-xr-x 3 oneadmin oneadmin 4096 juil. 2 21:53 ..
-rw-r--r- 1 oneadmin oneadmin 1058 juil. 2 21:53 deployment.0
rw-r---- 1 oneadmin oneadmin 177209344 juil. 2 21:53 disk.0
rw-r---- 1 root root 1073741825 juil. 2 21:56 disk.1 <<-- "ooohhh noeeess" The ownership has changed and so has the time...

Then obviously, the script "remotes/tm/shared/mvds" issues the "mv -f" on the file, which has now wrong ownership and my saved image is left unusable.

So something is changing the ownership between the "shutdown" call and the "mv -f" (in mvds) call. I have no clue :(

OK, you had me...

dynamic_ownership set to 0 is the right answer. I works now...
I guess I should have read the doc : http://opennebula.org/documentation:archives:rel3.2:kvmg

Thanks a lot, sorry for the inconvenience.