Set qemu group, 0770 directories permissions

and 660 files permissions for the localvm directory Signed-off-by: Asaf Rachmani <arachman@redhat.com>
oVirt · Dec 23, 2021 · 82d804e · 82d804e
1 parent 24241e1
commit 82d804e
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 8 deletions.
diff --git a/roles/hosted_engine_setup/tasks/bootstrap_local_vm/02_create_local_vm.yml b/roles/hosted_engine_setup/tasks/bootstrap_local_vm/02_create_local_vm.yml
@@ -92,9 +92,12 @@
           state: directory
           path: "{{ he_local_vm_dir }}"
           owner: vdsm
-          group: kvm
+          group: qemu
           recurse: yes
-          mode: u=rwX,g=rX,o=rX
+          mode: "{{ item }}"
+        loop:
+          - '0660'
+          - 'u=rwX,g=rwX'
       - name: Create local VM
         command: >-
           virt-install -n {{ he_vm_name }}Local --os-variant rhel8.0 --virt-type kvm --memory {{ he_mem_size_MB }}

diff --git a/roles/hosted_engine_setup/tasks/create_target_vm/03_hosted_engine_final_tasks.yml b/roles/hosted_engine_setup/tasks/create_target_vm/03_hosted_engine_final_tasks.yml
@@ -149,18 +149,12 @@
     with_items:
       - {src: "{{ he_local_vm_dir }}/vm.conf", dest: /var/run/ovirt-hosted-engine-ha}
       - {src: "{{ he_local_vm_dir }}/hosted-engine.conf", dest: /etc/ovirt-hosted-engine/}
-  - name: Adjust configuration archive file permissions
-    file:
-      path: "{{ he_local_vm_dir }}/{{ he_conf_disk_details.disk.image_id }}"
-      mode: 0644
   - name: Copy configuration archive to storage
     command: >-
       dd bs=20480 count=1 oflag=direct if="{{ he_local_vm_dir }}/{{ he_conf_disk_details.disk.image_id }}"
       of="{{ he_conf_disk_path }}"
     environment: "{{ he_cmd_lang }}"
     become: true
-    become_user: vdsm
-    become_method: sudo
     changed_when: true
     args:
       warn: false