René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Don't allow NAS backup for vm with encrypted volumes","articleBody":"### problem\n\nDon't allow backup for vm with encrypted volumes\n\n### versions\n\nACS 4.22 \n\n### The steps to reproduce the bug\n\n\n1. Configure the backup.framework.provider.plugin to nas\n2. Launch a vm and assign a backup offering\n3. Take a backup of the encrypted vm \n4. Try to create an instance from the backup \n\n\u003cimg width=\"803\" height=\"308\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/6ac70c0a-3fc7-4b2b-9992-e8e9f4cbda38\" /\u003e\n\n5. Exception observed \n\n```\n2026-05-20 05:46:29,634 WARN  [resource.wrapper.LibvirtStartCommandWrapper] (AgentRequest-Handler-5:[]) (logid:ae054c8c) LibvirtException org.libvirt.LibvirtException: internal error: qemu unexpectedly closed the monitor: 2026-05-20T05:46:29.444365Z qemu-kvm: -blockdev {\"node-name\":\"libvirt-3-format\",\"read-only\":false,\"cache\":{\"direct\":true,\"no-flush\":false},\"driver\":\"qcow2\",\"encrypt\":{\"format\":\"luks\",\"key-secret\":\"libvirt-3-format-encryption-secret0\"},\"file\":\"libvirt-3-storage\",\"backing\":null}: No encryption in image header, but options specified format 'luks'\n\tat org.libvirt.ErrorHandler.processError(Unknown Source)\n\tat org.libvirt.ErrorHandler.processError(Unknown Source)\n\tat org.libvirt.Connect.domainCreateXML(Unknown Source)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.startVM(LibvirtComputingResource.java:2241)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.startVM(LibvirtComputingResource.java:2210)\n\tat com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:91)\n\tat com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:52)\n\tat com.cloud.hypervisor.kvm.resource.wrapper.LibvirtRequestWrapper.execute(LibvirtRequestWrapper.java:78)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:2280)\n\tat com.cloud.agent.Agent.processRequest(Agent.java:813)\n\tat com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:1295)\n\tat com.cloud.utils.nio.Task.call(Task.java:83)\n\tat com.cloud.utils.nio.Task.call(Task.java:29)\n\tat java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)\n\tat java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)\n\tat java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)\n\tat java.base/java.lang.Thread.run(Thread.java:840)\n\n```\n\n\u003cimg width=\"1585\" height=\"523\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/226f0d2c-f7cd-4861-84ef-6c471920bd03\" /\u003e\n \n6. Stop the vm \n\n7. Restore the vm to backup \u003e Exception observed\n\n8. Vm is unable to start due to insufficent capacity even , not sure why this error comes when there is enough capacity \n\n```\n2026-05-20 06:19:16,470 DEBUG [c.c.d.DeploymentPlanningManagerImpl] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) DeploymentPlan [DataCenterDeployment] has specified host [1] without HA flag. Choosing this host to deploy VM [VM instance {\"id\":24,\"instanceName\":\"i-2-24-VM\",\"state\":\"Starting\",\"type\":\"User\",\"uuid\":\"e2ae52ce-4249-4772-b789-26f566cbe52f\"}].\n2026-05-20 06:19:16,470 DEBUG [c.c.d.DeploymentPlanningManagerImpl] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) Cannot deploy VM [VM instance {\"id\":24,\"instanceName\":\"i-2-24-VM\",\"state\":\"Starting\",\"type\":\"User\",\"uuid\":\"e2ae52ce-4249-4772-b789-26f566cbe52f\"}] to host [Host {\"id\":1,\"name\":\"ref-trl-11676-k-Mol8-kiran-chavala-kvm1\",\"type\":\"Routing\",\"uuid\":\"71c97b41-2f20-4576-9e1f-110cdf73fbb4\"}] because this host is in the avoid set.\n2026-05-20 06:19:16,484 DEBUG [c.c.c.CapacityManagerImpl] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) VM instance {\"id\":24,\"instanceName\":\"i-2-24-VM\",\"state\":\"Stopped\",\"type\":\"User\",\"uuid\":\"e2ae52ce-4249-4772-b789-26f566cbe52f\"} state transited from [Starting] to [Stopped] with event [OperationFailed]. VM's original host: Host {\"id\":2,\"name\":\"ref-trl-11676-k-Mol8-kiran-chavala-kvm2\",\"type\":\"Routing\",\"uuid\":\"4c8f5777-b8fb-4bf9-ab31-461c2474dd36\"}, new host: null, host before state transition: Host {\"id\":1,\"name\":\"ref-trl-11676-k-Mol8-kiran-chavala-kvm1\",\"type\":\"Routing\",\"uuid\":\"71c97b41-2f20-4576-9e1f-110cdf73fbb4\"}\n2026-05-20 06:19:16,488 DEBUG [c.c.c.CapacityManagerImpl] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) Hosts's actual total CPU: 6000 and CPU after applying overprovisioning: 12000\n2026-05-20 06:19:16,488 DEBUG [c.c.c.CapacityManagerImpl] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) Hosts's actual total RAM: (6.76 GB) 7259152384 and RAM after applying overprovisioning: (6.76 GB) 7259152384\n2026-05-20 06:19:16,488 DEBUG [c.c.c.CapacityManagerImpl] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) release cpu from host: Host {\"id\":1,\"name\":\"ref-trl-11676-k-Mol8-kiran-chavala-kvm1\",\"type\":\"Routing\",\"uuid\":\"71c97b41-2f20-4576-9e1f-110cdf73fbb4\"}, old used: 2500, reserved: 0, actual total: 6000, total with overprovisioning: 12000; new used: 500,reserved:0; movedfromreserved: false,moveToReservered: false\n2026-05-20 06:19:16,488 DEBUG [c.c.c.CapacityManagerImpl] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) release mem from host: Host {\"id\":1,\"name\":\"ref-trl-11676-k-Mol8-kiran-chavala-kvm1\",\"type\":\"Routing\",\"uuid\":\"71c97b41-2f20-4576-9e1f-110cdf73fbb4\"}, old used: (2.50 GB) 2684354560, reserved: (0 bytes) 0, total: (6.76 GB) 7259152384; new used: (512.00 MB) 536870912, reserved: (0 bytes) 0; movedfromreserved: false, moveToReservered: false\n2026-05-20 06:19:16,498 ERROR [c.c.v.VmWorkJobHandlerProxy] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) Invocation exception, caused by: com.cloud.exception.InsufficientServerCapacityException: Unable to create a deployment for VM instance {\"id\":24,\"instanceName\":\"i-2-24-VM\",\"state\":\"Starting\",\"type\":\"User\",\"uuid\":\"e2ae52ce-4249-4772-b789-26f566cbe52f\"}Scope=interface com.cloud.dc.DataCenter; id=1\n2026-05-20 06:19:16,498 INFO  [c.c.v.VmWorkJobHandlerProxy] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331, ctx-8fad60d0]) (logid:d156b428) Rethrow exception com.cloud.exception.InsufficientServerCapacityException: Unable to create a deployment for VM instance {\"id\":24,\"instanceName\":\"i-2-24-VM\",\"state\":\"Starting\",\"type\":\"User\",\"uuid\":\"e2ae52ce-4249-4772-b789-26f566cbe52f\"}Scope=interface com.cloud.dc.DataCenter; id=1\n2026-05-20 06:19:16,498 DEBUG [c.c.v.VmWorkJobDispatcher] (Work-Job-Executor-136:[ctx-b060718b, job-330/job-331]) (logid:d156b428) Done with run of VM work job: com.cloud.vm.VmWorkStart for VM 24, job origin: 330\n\n```\n\n\u003cimg width=\"613\" height=\"298\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/f76b86ea-47b2-4610-8abd-7831eb317c46\" /\u003e\n\n\n\n\n### What to do about it?\n\nValidate if the vm disk are encrypted , and don't allow assigning a backup offering to the vm","author":{"url":"https://github.com/kiranchavala","@type":"Person","name":"kiranchavala"},"datePublished":"2026-05-20T07:53:37.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/13197/cloudstack/issues/13197"}