- Devel - libvirt List Archives

[libvirt] PATCH: 0/5: Enhancing the virExec function
by Daniel P. Berrange 02 Sep '08

02 Sep '08

The following series of patches do a bunch of work on the virExec function. Overall this leads to a more robust implementation with better error reporting, and an increased level functionality. This lets us remove all uses of fork/exec in libvirt and replace them with virExec. This was all motivated by some fork/exec bugs discovered when refactoring LXC driver which have potential to affect every use of fork/exec in our code. Daniel -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

3 24

[libvirt] Unable to find node's mem and cpu api
by jovialGuy _ 01 Sep '08

01 Sep '08

hey, I am unable to find the api in java and perl binding to find the host node's current memory and cpu information. Any body has any idea where I can find the information? - Jovial

2 3

[libvirt] Confirm libvirt supported distro?
by atif bajwa 01 Sep '08

01 Sep '08

Hi! I have a list of Linux distributions with Xen support. Please confirm libvirt (remote access, >= version 0.3.0 ) support. 1. Solaris SPARC 81/9/10 2. Solaris x64/x86 9/10 3. Red Hat RHEL AS/ES/WS 3/4/5 4. Novell SUSE & SLES 8/9/10 Regards, Atif

1 0

[libvirt] Remote access from libvirt windows client
by atif bajwa 01 Sep '08

01 Sep '08

Hi! I am looking to add support for Xen. Please guide me which is best method to connect to remote system(host) from windows client. What privileges and binaries will be required for client program to read data only. If possible please list supported libvirt versions that can be port to windows. Also list xen-based-hypervisor distributions that I can get remote access with libvirt windows based client. Regards, Atif

2 1

[libvirt] remote driver?
by Jun Koi 01 Sep '08

01 Sep '08

Hi, I am connecting to libvirtd with virsh using qemu:///system connection type. However, it seems virsh uses "remote" driver for all the action on the VM. So this means qemu:///system considers all the action is done "remotely" even if it is on the same physical machine? I really expected that it uses "QEMU" driver, but that is not the case. So I wonder in which case "QEMU" driver is used? Many thanks, Jun

2 1

[libvirt] console not working anymore
by Stefan de Konink 31 Aug '08

31 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I have reopenend the <bootloader /> bug, because with this fix I was unable to start any host again with respect to console allocation. Did anyone see this problem too? Stefan -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEAREKAAYFAki69PsACgkQYH1+F2Rqwn2X4QCgkHxpu0WDDCKgoRn02P6F3hxw ncIAn09ahmzjjp3LHGuzVZ8LQREOnsoL =WVQk -----END PGP SIGNATURE-----

1 0

[libvirt] ANNOUNCE: virt-what 1.0 - a shell script to detect if you are running in a virtual machine
by Richard W.M. Jones 31 Aug '08

31 Aug '08

I'm pleased to announce the first release of 'virt-what', which is a simple shell script that detects if you are running inside a virtual machine, and prints some "facts" about that virtual machine. This is a frequently requested feature. Home page: http://et.redhat.com/~rjones/virt-what/ Source and RPMs: http://et.redhat.com/~rjones/virt-what/files/ So far we can detect: - Xen - QEMU and KVM (but not distinguish between them) - VMware - Microsoft VirtualPC I'm hoping that people who run or develop other virtualization technology will be able to contribute snippets to detect those. It's worth saying (before Dan Berrange says it anyway) that although people often think they need this sort of feature, in most cases using this script is the WRONG THING. If you need a specific virtualization feature, then add code to your application to detect that feature. eg. If you need to make Xen hypervisor calls, your application should try to open /proc/xen/privcmd. As Dan once put it: A shell script just printing out 'native', 'dom0' or 'domU' is too simplistic to be broadly useful to management applications. The concepts are also ill-defined, eg 'native' as a concept can be a baremetal kernel, or a fully-virtualized guest, or both. 'DomU' does not distinguish full or paravirt. The distinction of 'dom0' vs 'native' is irrelevant in non-Xen virtualization systems (eg KVM). Rich. -- Richard Jones, Emerging Technologies, Red Hat http://et.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://et.redhat.com/~rjones/virt-top

2 2

[libvirt] How to get the real error?
by Christoph Höger 30 Aug '08

30 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am trying to use libvirt to manage a virtualized HPC cluster software. That works well so far. But when I encounter an error and try to get it with virGetLastError() I often see an error message that makes no sense. E.g. I had virDomainCreateLinux(...) returning NULL and virGetLastError()->message stating "Failed to find the network: Is the daemon running ?" which is obviously wrong, because libvirtd is running and the network is using bridged mode (no 'source' element). This also happened when I had that particular domain name already in use and on other errors. I am using libvirt version 0.4.4. is that a known regression or am I just missing something? thanks christoph -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFIuU1FhMBO4cVSGS8RAiVRAJ0ad31+Bf5k7V7axKHDx4Yv5xc3VgCfcKsl GiHynl3ac0fdwrx+vTrvSxU= =ZqQs -----END PGP SIGNATURE-----

1 0

[libvirt] A laundry list of "TODO" items for libvirt
by Daniel P. Berrange 29 Aug '08

29 Aug '08

A bunch of us at Red Hat had a bit of a brainstorming session to make a list of things we'd like to see added to libvirt going forward, to better support our needs for virtualization in Fedora / oVirt. We've put details of everything up on the libvirt wiki: http://wiki.libvirt.org/page/Todo This list isn't a firm commitment to actually implement these features. We may later decide that some of them don't belong in libvirt (eg, the question of allowing multiu-thread access to virConnectPtr is open to debate). Nor have we got people actually working on these items - unless explicitly noted against a todo item. If anyone is looking to do work on libvirt and isn't sure of what to work on, this list may be of interest. Also, this is a wiki, so feel free to add more ideas - or add expanded details to existing ideas. Or reply to this mail, and one of us will add new ideas to the wiki for you The only request is that you don't actually start implementing things from the list without first discussing proposals on this list, because most of these ideas need more design / analysis before its reasonable to write code Regards, Daniel -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

5 8

[libvirt] XML representation of security labels
by James Morris 29 Aug '08

29 Aug '08

As part of the sVirt effort, I'm investigating how and when to label the resources accessed by domains. There is already some support for querying security labels in libvirt, although it does not seem to be widely used as yet. For storage pool XML descriptors, there's a permissions element per http://libvirt.org/formatstorage.html : <permissions> <owner>0744</owner> <group>0744</group> <mode>0744</mode> <label>virt_image_t</label> </permissions> The label element in this is currently assumed by libvirt to be an SELinux security label obtainable via getfilecon(3). There are a couple of issues here: 1. We should probably not build security model specific code directly into the library. It's more flexible and also cleaner to abstract the security model out. So, I suggest making a plugin scheme similar to those already present in libvirt, where a security model can register a driver to handle abstracted operations like "getSecurityLabel". 2. The XML format for security labels needs to be extended to indicate which security model is in use, and potentially carry model-specific metadata. For SELinux, we may want to know what type of policy is active, and later, be able to interpret labels generated on other systems. In this case, I suggest we deprecate the existing label element and, if present, assume it's a plain SELinux context (or perhaps ignore it). I'd suggest we implement a new label element to avoid breaking compatibility and to avoid potential confusion with other types of device labels (e.g. as you might see via /dev/disk/by-label). So, how about the following: <seclabel> <model>  <selinux> <type>targeted</type> </selinux> </model> <value>system_u:object_r:virt_image_t:s0</value> </seclabel> The model and value elements would be mandatory, but possibly empty. The seclabel element would be a child of the permissions element: <permissions> <owner>0744</owner> <group>0744</group> <mode>0744</mode> <seclabel> <model> <selinux> <type>targeted</type> </selinux> </model> <value>system_u:object_r:virt_image_t:s0</value> </seclabel> </permissions> It would also likely be reused for labeling domains themselves, and other resources. Thoughts? - James -- James Morris <jmorris(a)namei.org>

6 9