- Devel - libvirt List Archives

[libvirt] Confirm libvirt supported distro?
by atif bajwa 01 Sep '08

01 Sep '08

Hi! I have a list of Linux distributions with Xen support. Please confirm libvirt (remote access, >= version 0.3.0 ) support. 1. Solaris SPARC 81/9/10 2. Solaris x64/x86 9/10 3. Red Hat RHEL AS/ES/WS 3/4/5 4. Novell SUSE & SLES 8/9/10 Regards, Atif

1 0

[libvirt] Remote access from libvirt windows client
by atif bajwa 01 Sep '08

01 Sep '08

Hi! I am looking to add support for Xen. Please guide me which is best method to connect to remote system(host) from windows client. What privileges and binaries will be required for client program to read data only. If possible please list supported libvirt versions that can be port to windows. Also list xen-based-hypervisor distributions that I can get remote access with libvirt windows based client. Regards, Atif

2 1

[libvirt] remote driver?
by Jun Koi 01 Sep '08

01 Sep '08

Hi, I am connecting to libvirtd with virsh using qemu:///system connection type. However, it seems virsh uses "remote" driver for all the action on the VM. So this means qemu:///system considers all the action is done "remotely" even if it is on the same physical machine? I really expected that it uses "QEMU" driver, but that is not the case. So I wonder in which case "QEMU" driver is used? Many thanks, Jun

2 1

[libvirt] console not working anymore
by Stefan de Konink 31 Aug '08

31 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I have reopenend the <bootloader /> bug, because with this fix I was unable to start any host again with respect to console allocation. Did anyone see this problem too? Stefan -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEAREKAAYFAki69PsACgkQYH1+F2Rqwn2X4QCgkHxpu0WDDCKgoRn02P6F3hxw ncIAn09ahmzjjp3LHGuzVZ8LQREOnsoL =WVQk -----END PGP SIGNATURE-----

1 0

[libvirt] ANNOUNCE: virt-what 1.0 - a shell script to detect if you are running in a virtual machine
by Richard W.M. Jones 31 Aug '08

31 Aug '08

I'm pleased to announce the first release of 'virt-what', which is a simple shell script that detects if you are running inside a virtual machine, and prints some "facts" about that virtual machine. This is a frequently requested feature. Home page: http://et.redhat.com/~rjones/virt-what/ Source and RPMs: http://et.redhat.com/~rjones/virt-what/files/ So far we can detect: - Xen - QEMU and KVM (but not distinguish between them) - VMware - Microsoft VirtualPC I'm hoping that people who run or develop other virtualization technology will be able to contribute snippets to detect those. It's worth saying (before Dan Berrange says it anyway) that although people often think they need this sort of feature, in most cases using this script is the WRONG THING. If you need a specific virtualization feature, then add code to your application to detect that feature. eg. If you need to make Xen hypervisor calls, your application should try to open /proc/xen/privcmd. As Dan once put it: A shell script just printing out 'native', 'dom0' or 'domU' is too simplistic to be broadly useful to management applications. The concepts are also ill-defined, eg 'native' as a concept can be a baremetal kernel, or a fully-virtualized guest, or both. 'DomU' does not distinguish full or paravirt. The distinction of 'dom0' vs 'native' is irrelevant in non-Xen virtualization systems (eg KVM). Rich. -- Richard Jones, Emerging Technologies, Red Hat http://et.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://et.redhat.com/~rjones/virt-top

2 2

[libvirt] How to get the real error?
by Christoph Höger 30 Aug '08

30 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am trying to use libvirt to manage a virtualized HPC cluster software. That works well so far. But when I encounter an error and try to get it with virGetLastError() I often see an error message that makes no sense. E.g. I had virDomainCreateLinux(...) returning NULL and virGetLastError()->message stating "Failed to find the network: Is the daemon running ?" which is obviously wrong, because libvirtd is running and the network is using bridged mode (no 'source' element). This also happened when I had that particular domain name already in use and on other errors. I am using libvirt version 0.4.4. is that a known regression or am I just missing something? thanks christoph -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFIuU1FhMBO4cVSGS8RAiVRAJ0ad31+Bf5k7V7axKHDx4Yv5xc3VgCfcKsl GiHynl3ac0fdwrx+vTrvSxU= =ZqQs -----END PGP SIGNATURE-----

1 0

[libvirt] A laundry list of "TODO" items for libvirt
by Daniel P. Berrange 29 Aug '08

29 Aug '08

A bunch of us at Red Hat had a bit of a brainstorming session to make a list of things we'd like to see added to libvirt going forward, to better support our needs for virtualization in Fedora / oVirt. We've put details of everything up on the libvirt wiki: http://wiki.libvirt.org/page/Todo This list isn't a firm commitment to actually implement these features. We may later decide that some of them don't belong in libvirt (eg, the question of allowing multiu-thread access to virConnectPtr is open to debate). Nor have we got people actually working on these items - unless explicitly noted against a todo item. If anyone is looking to do work on libvirt and isn't sure of what to work on, this list may be of interest. Also, this is a wiki, so feel free to add more ideas - or add expanded details to existing ideas. Or reply to this mail, and one of us will add new ideas to the wiki for you The only request is that you don't actually start implementing things from the list without first discussing proposals on this list, because most of these ideas need more design / analysis before its reasonable to write code Regards, Daniel -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

5 8

[libvirt] XML representation of security labels
by James Morris 29 Aug '08

29 Aug '08

As part of the sVirt effort, I'm investigating how and when to label the resources accessed by domains. There is already some support for querying security labels in libvirt, although it does not seem to be widely used as yet. For storage pool XML descriptors, there's a permissions element per http://libvirt.org/formatstorage.html : <permissions> <owner>0744</owner> <group>0744</group> <mode>0744</mode> <label>virt_image_t</label> </permissions> The label element in this is currently assumed by libvirt to be an SELinux security label obtainable via getfilecon(3). There are a couple of issues here: 1. We should probably not build security model specific code directly into the library. It's more flexible and also cleaner to abstract the security model out. So, I suggest making a plugin scheme similar to those already present in libvirt, where a security model can register a driver to handle abstracted operations like "getSecurityLabel". 2. The XML format for security labels needs to be extended to indicate which security model is in use, and potentially carry model-specific metadata. For SELinux, we may want to know what type of policy is active, and later, be able to interpret labels generated on other systems. In this case, I suggest we deprecate the existing label element and, if present, assume it's a plain SELinux context (or perhaps ignore it). I'd suggest we implement a new label element to avoid breaking compatibility and to avoid potential confusion with other types of device labels (e.g. as you might see via /dev/disk/by-label). So, how about the following: <seclabel> <model>  <selinux> <type>targeted</type> </selinux> </model> <value>system_u:object_r:virt_image_t:s0</value> </seclabel> The model and value elements would be mandatory, but possibly empty. The seclabel element would be a child of the permissions element: <permissions> <owner>0744</owner> <group>0744</group> <mode>0744</mode> <seclabel> <model> <selinux> <type>targeted</type> </selinux> </model> <value>system_u:object_r:virt_image_t:s0</value> </seclabel> </permissions> It would also likely be reused for labeling domains themselves, and other resources. Thoughts? - James -- James Morris <jmorris(a)namei.org>

6 9

[libvirt] [PATCH] virConnectListAllDomains
by Richard W.M. Jones 29 Aug '08

29 Aug '08

As observed in this thread: https://www.redhat.com/archives/libvir-list/2008-July/msg00215.html several tools need to grab the complete list of domains frequently (eg. virt-manager and virt-top) and the way they do it currently is very inefficient, both in terms of the number of round-trips in the remote case (4 + 2*N calls), and the fact that we could implement drivers better if we could get all domains in a single operation. Therefore this patch adds the virConnectListAllDomains call: int virConnectListAllDomains (virConnectPtr conn, virDomainPtr **domains, virDomainInfo **infos, int stateflags); This call gets domains and virDomainInfo structures. The reasons for getting the info structures as well are that we get them anyway as a side-effect of filtering on state, and virsh, virt-top and virt-manager all get the info structures at the same time as getting the domains. As in Dan's proposal above, you can filter on state, with three special values (VIR_DOMAIN_LIST_ACTIVE, VIR_DOMAIN_LIST_INACTIVE and VIR_DOMAIN_LIST_ALL) which do what you think. virConnectListAllDomains is always available. If the driver doesn't implement it directly, then we emulate it in src/libvirt.c. This ensures that virt-manager etc can start to use this call straightaway. There is no direct implementation for Xen or QEMU yet. (If the general patch is accepted, then I'll implement at least for QEMU). However there is already a benefit to applying this patch because it optimizes the remote case from 4 + 2*N calls down to 1. There is no Python binding yet. Rich. -- Richard Jones, Emerging Technologies, Red Hat http://et.redhat.com/~rjones Read my OCaml programming blog: http://camltastic.blogspot.com/ Fedora now supports 64 OCaml packages (the OPEN alternative to F#) http://cocan.org/getting_started_with_ocaml_on_red_hat_and_fedora

3 6

[libvirt] "Choose alarm timer" feature for kvm
by Tiziano Müller 29 Aug '08

29 Aug '08

Hi everyone In KVM it is possible to select the alarm timer being used (dynticks, hpet, rtc, unix). Is someone already working on the support of this for libvirt? If not I'll see that I can come up with patches for libvirt and virt-inst within the next month (if time permits). Cheers, Tiziano -- ------------------------------------------------------- Tiziano Müller Gentoo Linux Developer Areas of responsibility: Samba, PostgreSQL, CPP, Python, sysadmin E-Mail : dev-zero(a)gentoo.org GnuPG FP : F327 283A E769 2E36 18D5 4DE2 1B05 6A63 AE9C 1E30

3 3