- Devel - libvirt List Archives

[libvirt] [PATCH] don't dereference uninitialized pointer
by Jim Meyering 02 Mar '09

02 Mar '09

>From a907d2da7e7f9d1f58009ff6a95454ac0eb2cbf1 Mon Sep 17 00:00:00 2001 From: Jim Meyering <meyering(a)redhat.com> Date: Mon, 2 Mar 2009 10:10:02 +0100 Subject: [PATCH] don't dereference uninitialized pointer * src/storage_conf.c (virStoragePoolDefParsePerms): Initialize "ptr" to NULL. --- ChangeLog | 6 ++++++ src/storage_conf.c | 2 +- 2 files changed, 7 insertions(+), 1 deletions(-) diff --git a/ChangeLog b/ChangeLog index 12715f5..ede7e0d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,9 @@ +2009-03-02 Jim Meyering <meyering(a)redhat.com> + + don't dereference uninitialized pointer + * src/storage_conf.c (virStoragePoolDefParsePerms): Initialize + "ptr" to NULL. + Fri Feb 27 17:15:00 CET 2009 Chris Lalancette <clalance(a)redhat.com> * src/qemu_driver.c: If there is a failure during offline migrate, diff --git a/src/storage_conf.c b/src/storage_conf.c index 70107a2..4a53ff4 100644 --- a/src/storage_conf.c +++ b/src/storage_conf.c @@ -381,7 +381,7 @@ virStoragePoolDefParsePerms(virConnectPtr conn, if (!mode) { perms->mode = 0700; } else { - char *end; + char *end = NULL; perms->mode = strtol(mode, &end, 8); if (*end || perms->mode < 0 || perms->mode > 0777) { virStorageReportError(conn, VIR_ERR_XML_ERROR, -- 1.6.2.rc1.285.gc5f54

2 2

[libvirt] Update on host interface configuration
by David Lutterkort 01 Mar '09

01 Mar '09

Hi, I thought I'd write an update of what I've been doing with the host interface configuration previously discussed[1] After talking with Dan Williams, who is working in NetworkManager, it is clear that the network interface functionality for libvirt is also useful for NM and would help them with handling system-wide interface configuration. To accomodate that, I will implement network interface configuration in a separate library (inspiringly called 'netcf', until somebody thinks of something catchier) and add public API to libvirt that will use netcf to do the actual work. One thorny issue is how libvirt's public API and netcf's public API relate to each other, especially since both libvirt and netcf use XML descriptions to describe network interfaces (netcf does that for exactly the same reasons that libvirt does it, since it will have to deal with similar stability issues) For the time being, I am assuming that the two XML descriptions are identical, with no guarantee that that will always be the case. If and when we run into a case where libvirt's and netcf's needs diverge, we'll break that identity. On the implementation side, that means that, for now, netcf will do all the validation and pass errors back to libvirt. In more concrete terms, I put up a git repo[2] for netcf. There's hardly any code in there, the things I'd particularly appreciate review/feedback on are * the RelaxNG specification of the interface XML (in xml/interface.rng) together with examples of such interface specifications (in tests/interface/) * the (very rough) sketch of the netcf public API, which should map almost 1-1 to the public libvirt API in src/netcf.h I know that the XML schema doesn't cover everything we've discussed in [1], but I think it's a small enough subset to tackle relatively quickly and large enough to be useful. So, one of the main things to think about when looking at the schema is places where the schema would make it hard to make desirable enhancements in the near future (like Marius' point about default routes/gateways) One important point about the model of network config in the schema is that it is centered around what NM calls a 'connection' (though it's called 'interface' in the schema): a grouping of the components that make up the interface the user really cares about (a bridge or a bond) together with the components subordinate to it (e.g. ethernet interfaces enslaved to the bridge or bond) It's those groups that netcf deals with, i.e. if eth0 is enslaved to br0, netcf won't list eth0 as an interface, but only br0, with eth0 as a subinterface. For the implementation, netcf will have a separate backend for each network configuration regime (initscripts for Fedora/RHEL, /etc/network/interfaces for Debian, ...) - once the initscripts backend is done, I'd be very grateful for contributions for the other backends. To sketch out the initscripts implementation, I wrote two XSL stylesheets, xml/initscripts-get.xml that goes from interface XML -> initscripts files (via Augeas) and xml/initscripts-put.xml to go the other way for querying; I'll use those for the core of the initscripts backend. Whether other backands can be done in a similar manner is TBD. David [1] https://www.redhat.com/archives/libvir-list/2009-January/msg00350.html [2] http://git.et.redhat.com/?p=netcf.git;a=tree

5 10

[libvirt] virsh and api
by Zvi Dubitzky 01 Mar '09

01 Mar '09

Hi How about adding the following info to the virsh / dominfo command ( and to the programmable libvirt API:): - IP address of the domain in case the host was configured as a bridge - cpu utilization (at least for Linux) Is that possible ? thanks Zvi Dubitzky Virtualization and System Architecture Email:dubi@il.ibm.com IBM Haifa Research Laboratory Phone: +972-4-8296182 Haifa, 31905, ISRAEL

1 0

[libvirt] Problem installing KVM Guest from command line
by aliahsan naqvi 28 Feb '09

28 Feb '09

Hi All >From past many days i am trying to install KVM Guest Machine from command line via virt-install.Below is many command i have testing this on Fedora 9 and fedora 10 but not able to do it. virt-install -n testing -r 256 -w bridge:virbr0 --location /mnt/Fedora-10-i386-DVD.iso --accelerate --os-type=linux --hvm --nographics -f /var/imgVM1 --force -x "console=ttyS0" I am installing from HTTP server.After give Network information.Following error comes.i have also tried with NFS and ftp but same result.It seem guest machine not able to get ip address.Because when i ping the ip address of the guest which is provided in Networking setting during guest installation.It was not pingable.And this http server is working fine.i can browse all the install directory with no problem and i have install other machine with the http install directory. I am getting following error after TCP/IP Manual/ DHCP Configuration Network Settings +-----------+ Error +------------+ | | | Unable to retrieve | | http://192.168.1.8/fedora | | /linux/releases/10/Fedora/i38 | | 6/os//images/install.img. | | | | +----+ | | | OK | | | +----+ | | | | | +--------------------------------+ Please Advise.Please let me if i am doing some thing wrong or this a bug. _________________________________________________________________ Windows Live™: Life without walls. http://windowslive.com/explore?ocid=TXT_TAGLM_WL_allup_1a_explore_032009

1 0

RE: [libvirt] Help with bridged networking
by Jesus Urroa 27 Feb '09

27 Feb '09

Hi, Thanks all for your help, I installed libvirt 0.6.0-4 and kvm 84-1 from fedora's rawhide and that solved the problem. However know I have a new problem I tried the other virtual machines and some of them just don't start, they seem to stop when the bios jumps to the disk and grub, any ideas? The only thing I can think of is to upgrade the host kernel but if I'm not wrong I have to upgrade to Fedora 9 or 10, and I would like to try something else before because I want to have everything running before leaving xen completely > Subject: RE: [libvirt] Help with bridged networking > From: lutter(a)redhat.com > To: observer1(a)hotmail.es > Date: Fri, 27 Feb 2009 08:48:13 -0800 > > On Fri, 2009-02-27 at 00:55 +0000, Jesus Urroa wrote: > > My mistake I see the lines for the ip config commented out in the file > > and I place them again > > Anyway I remove the card from the bridge to simplify the problem a > > little, this the output of brctl show for the bridge using only xen > > (no libvirt at all) and using kvm with libvirt and running only 2 vms: > > > > worknet 8000.feffffffffff no vif1.0 > > vif4.0 > > vif5.0 > > vif6.1 > > vif7.1 > > vif8.0 > > > > worknet 8000.00ff52959073 no vnet0 > > > > vnet3 > > With the non-Xen setup, your bridge should have the same IP address as > the enslaved NIC. > > What exactly is not working ? Can VM's on the same bridge ping each > other ? > > Did you add teh following iptables rule (to forward packages from the > bridge to the outside): > > # echo "-I FORWARD -m physdev --physdev-is-bridged -j ACCEPT" > /etc/sysconfig/iptables-forward-bridged > # lokkit --custom-rules=ipv4:filter:/etc/sysconfig/iptables-forward-bridged > # service libvirtd reload > > Otherwise, your VM;s can't talk to the outside. > > David > > _________________________________________________________________ Anímate y disfruta con los mejores juegos de Messenger, ¡descúbrelos! http://www.vivelive.com/juegos/

1 0

[libvirt] internal error Timed out while reading console log output
by jmandawg 27 Feb '09

27 Feb '09

Hi, I just compiled installed Libvirt from the latest git repo, and for some reason when I try to start a VM from virsh I get the following error: virsh # start XPTest error: Failed to start domain XPTest error: internal error unable to start guest: and the corresponding output from libvirtd running in verbose mode: 08:19:53.163: info : Received unexpected signal 17 08:20:00.083: info : Received unexpected signal 17 08:20:00.095: info : Received unexpected signal 17 08:20:03.200: error : internal error Timed out while reading console log output libvir: QEMU error : internal error Timed out while reading console log output 08:20:03.200: error : internal error unable to start guest: libvir: QEMU error : internal error unable to start guest: Here is the command virsh is trying to run from the Libvirt log file: LC_ALL=C PATH=/usr/bin:/bin:/root/bin:/usr/X11R6/bin:/usr/local/kvm/bin:/usr/local/sb in:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games HOME=/root USER=root LOGNAME=root /usr/bin/kvm -S -M pc -m 512 -smp 1 -name XPTest -uuid 732fcba8-b71f-face-e067-cf8431fc94aa -monitor pty -pidfile /var/run/libvirt/qemu//XPTest.pid -localtime -no-acpi -boot c -drive file=/var/kvm-images/XPTest/XP_Test.img,if=ide,index=0,boot=on -net nic,macaddr=00:0c:29:f6:c4:f8,vlan=0,model=e1000 -net tap,fd=20,script=,vlan=0,ifname=vnet3 -serial none -parallel none -usb -usbdevice tablet -vnc 0.0.0.0:9 If I start the VM from the commandline manually using this command and then shutdown, I can successfully start it from Virsh qemu-system-x86_64 -no-acpi -m 512 -hda XP_Test.img \ -net nic,macaddr=00:0C:29:F6:C4:F8 \ -net tap \ -usb -usbdevice tablet \ -monitor unix:monitor,server,nowait \ -soundhw all \ -pidfile pid & virsh # version Compiled against library: libvir 0.6.0 Using library: libvir 0.6.0 Using API: QEMU 0.6.0 Running hypervisor: QEMU 0.9.1 Any help would be appreciated. Thanks, John

1 1

[libvirt] [PATCH]: Fix non-live migration failure
by Chris Lalancette 27 Feb '09

27 Feb '09

There is a logic error in the Qemu driver when doing a non-live migrate. During a non-live migrate, on the source host during the Perform step, we pause the domain; however, if there was ever a failure, we were forgetting to unpause the domain, meaning that the domain was paused forever. Add a flag to tell us when we should unpause the domain after a failure. Also, as pointed out by DV, we were unnecessarily using a snprintf to a buffer to execute qemu monitor commands, when we could get away with just sending a static string. Fix that as well. Signed-off-by: Chris Lalancette <clalance(a)redhat.com>

2 2

[libvirt] libvirt tls vnc
by Michael Kress 27 Feb '09

27 Feb '09

Hi, is there a comprehensive howto/tutorial you can recommend me on how to set up libvirt with vnc over tls properly? What I'm trying to do is to use vnc for production use outside my local network and therefore I'd like to secure the vnc sessions. I already made some attempts with ssvnc and Ultr@VNC (both windows clients) but these attemps all failed. I can't get the vnc server (launched by virt-install / kvm) to be displayed via tls. It all runs perfectly without tls. Thanx for any hints! Michael

4 16

[libvirt] using virsh remotely
by Andreas Rittershofer 27 Feb '09

27 Feb '09

I can use virsh as a command line tool, for exampe virsh list gives me the list of the running machines and I am back to the prompt. When I make virsh -c qemu+ssh://maschine-2/system list I get the list of the running machine on the remote machine-2 - but that's it, I am not back to the prompt automatically. I want virsh to behave used remotely as used locally - execute the command and go back to the prompt. How this can be done? mfg ar -- Hier könnte keine Signatur stehen.

2 2

[libvirt] adding bandwidth control support
by Max Zhen 27 Feb '09

27 Feb '09

My last post failed, resend... Max Zhen at 2008-12-24 18:39 wrote: > Hi, > > I'm working on adding bandwidth control support in > virt-install/virsh/libvirt on Xen. > This support can allow setting bandwidth control in dom0 (I'm working on > Solaris dom0 now) for virtual nic devices used in a domU. > I've attached my design in this email. > Basically, this design is about how to represent bandwidth limit > information in command line for virsh/virt-install and how to represent > it in current XML configuration file for a domU. > > Your comments will be highly appreciated :). > > Thanks, > Max > > There are a few things to do to achieve this goal: 1. extend current command line syntax of 'virsh attach-interface' 2. extend current command line syntax of 'virt-install' 3. define bandwidth representation in XML format For 1. I will change the current command line syntax to: virsh attach-interface <domain> <type> <source> [--target <target>] [--mac <mac>] [--script <script>] [--rate <rate-string>] So that we are able to specify bandwidth as "--rate 100M" in command line, like: #virsh attach-interface domu bridge bge0 --rate 100M In this case, bandwidth is specified as an integer with one of the scale suffixes K, M, or G for Kbps, Mbps, or Gbps. For 2. I will add one more option "--rate=rate-string" to current option set of virt-install command. Users can repeatedly add more than one 'rate' options to set bandwidth for multiple nic devices respectively, if needed. For example, with below command line, we start installing a domain with two nic devices whose bandwidth are set to 100Mb/s and 200Mb/s respectively: #virt-install -n snv105 -r 2048 -p --file=/root/snv105 --location=/solarisdvd.iso -b bge0 --rate=100M -b bge1 --rate=200M In this case, bandwidth is specified as an integer with one of the scale suffixes K, M, or G for Kbps, Mbps, or Gbps. For 3. All user specified bandwidth will be represented as part of interface element currently defined in XML configuration file. The new format looks like: <interface type='bridge'> <source bridge='e1000g1'/> <flowcontrol> <rate unit='megabit' period='second' value='100'/> </flowcontrol> </interface> So, I create a new element, "flowcontrol", inside "interface" element. Inside "flowcontrol", I provide bandwidth by setting "rate" element with three attributes, "unit", "period" and "value" to express the bandwidth limit. The supported unit can be 'gigabit', 'megabit' and 'kilobit'. The supported period can be 'second', 'millisecond' and 'microsecond'. And value is an integer to express the amount of data in unit allowed to be transfered in period of time. More elements can be added inside "flowcontrol" element, if we want to add more flow control policies in the future.

2 5

[libvirt] Help with bridged networking
by watcher lines 26 Feb '09

26 Feb '09

Hi, I have setup my virtual networks with initscripts like in this link: http://wiki.libvirt.org/page/Networking#Bridged_networking_.28aka_.22shared…, but there is no networking whitin any system either between vms or with the host and the vms. This setup is for kvm, but with Xen in Fedora 8 it works perfect, but xen is now deprecated in Fedora. This is my setup: /etc/sysconfig/network-scripts/ifcfg-worknet: # worknet bridge DEVICE=worknet BOOTPROTO=none BROADCAST=172.16.1.255 #HWADDR=00:50:56:C0:00:01 IPADDR=172.16.1.1 NETMASK=255.255.255.0 NETWORK=172.16.1.0 ONBOOT=yes TYPE=Bridge STP=off DELAY=0 With Xen this alone lets ip traffic pass between host and to allow dhcp and other protocols i have this line in my iptables: -A FORWARD -i worknet -j ACCEPT This is the software I'm using: libvirt-0.4.4-2.fc8 kvm-60-7.fc8 Thanks for your attention. _________________________________________________________________ Consigue gratis el nuevo Messenger. ¡Descárgatelo! http://download.live.com/

1 0

[libvirt] networking with two hosts
by Andreas Rittershofer 26 Feb '09

26 Feb '09

The following situation is given: Host A with VM1 and VM2 running. Host B with VM3 und VM4 running. Task 1.) Each VM must have network access to each other VM and to the outside. Task 2.) When one host fails, all VMs are running on the remainig host and 1.) must still be fulfilled. Does somebody has any hints about realising this scenario with libvirt and KVM? mfg ar -- Hier könnte keine Signatur stehen.

3 7

[libvirt] Adding VirtualBox support to libvirt
by Pritesh Kothari 26 Feb '09

26 Feb '09

Hi, I am in the process of adding support for virtualbox in libvirt. Basically Virtualbox exports its API through XPCOM. Now to simplify things I was thinking of using C++ and already existing xpcom component in virtualbox but since libvirt exports C API i am not sure if i should use C++ or stick to plain C. I would like to request the libvirt community for its comment on this. Regards, Pritesh

4 10

[libvirt] PATCH: Support memory balloon device in QEMU (incomplete)
by Daniel P. Berrange 26 Feb '09

26 Feb '09

This is an incomplete patch starting to support the memory balloon device in QEMU guests. This requires the VirtIO Balloon driver be present in the guest. In much the same way as with Xen guests, this lets you adjust the memory allocation of the guest on the fly, ceiling limited by the initial memory allocation when booted. The missing bit is to use 'info balloon' to fetch the current allocation for the virDomainGetInfo() API call. Regards, Daniel diff -r 2662c220efc8 src/qemu_driver.c --- a/src/qemu_driver.c Thu Feb 26 15:31:11 2009 +0000 +++ b/src/qemu_driver.c Thu Feb 26 15:31:23 2009 +0000 @@ -2223,6 +2223,46 @@ cleanup: return ret; } + +static int qemudDomainSetMemoryBalloon(virConnectPtr conn, + virDomainObjPtr vm, + unsigned long newmem) { + char *cmd; + char *reply; + + /* + * 'newmem' is in KB, QEMU monitor works in MB, and we all wish + * we just worked in bytes with unsigned long long everywhere. + */ + if (virAsprintf(&cmd, "balloon %lu", (newmem / 1024)) < 0) { + virReportOOMError(conn); + return -1; + } + + if (qemudMonitorCommand(vm, cmd, &reply) < 0) { + qemudReportError(conn, dom, NULL, VIR_ERR_OPERATION_FAILED, + "%s", _("could not balloon memory allocation")); + VIR_FREE(cmd); + return -1; + } + VIR_FREE(cmd); + + /* If the command failed qemu prints: + * device not found, device is locked ... + * No message is printed on success it seems */ + DEBUG ("balloon reply: %s", reply); + if (strstr(reply, "\nunknown command:")) { + qemudReportError (conn, dom, NULL, VIR_ERR_OPERATION_FAILED, + _("memory ballooning is not supported %s"), reply); + VIR_FREE(reply); + return -1; + } + VIR_FREE(reply); + + return 0; +} + + static int qemudDomainSetMemory(virDomainPtr dom, unsigned long newmem) { struct qemud_driver *driver = dom->conn->privateData; virDomainObjPtr vm; @@ -2240,20 +2280,18 @@ static int qemudDomainSetMemory(virDomai goto cleanup; } + if (newmem > vm->def->maxmem) { + qemudReportError(dom->conn, dom, NULL, VIR_ERR_INVALID_ARG, + "%s", _("cannot set memory higher than max memory")); + goto cleanup; + } + if (virDomainIsActive(vm)) { - qemudReportError(dom->conn, dom, NULL, VIR_ERR_NO_SUPPORT, - "%s", _("cannot set memory of an active domain")); - goto cleanup; - } - - if (newmem > vm->def->maxmem) { - qemudReportError(dom->conn, dom, NULL, VIR_ERR_INVALID_ARG, - "%s", _("cannot set memory higher than max memory")); - goto cleanup; - } - - vm->def->memory = newmem; - ret = 0; + ret = qemudDomainSetMemoryBalloon(dom->conn, vm, newmem); + } else { + vm->def->memory = newmem; + ret = 0; + } cleanup: if (vm) -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

1 0

[libvirt] [PATCH]: Fix non-live migration failure case
by Chris Lalancette 26 Feb '09

26 Feb '09

All, There was a logic error in the Qemu driver when doing a non-live migrate. During a non-live migrate, on the source host during the Perform step, we pause the domain; however, if there was ever a failure, we were forgetting to unpause the domain, meaning that the domain was paused forever. Add a flag to tell us when we should unpause the domain after a failure. Signed-off-by: Chris Lalancette <clalance(a)redhat.com>

2 2

[libvirt] [PATCH 0/1] Resend of example program
by David Allan 26 Feb '09

26 Feb '09

I'm just resending this patch, as nobody objected to it after I incorporated the feedback I got, but it never got applied, either. Dave

2 2

[libvirt] PATCH: Fix autostart of session daemon
by Daniel P. Berrange 26 Feb '09

26 Feb '09

When connecting qemu:///session we can autostart the libvirtd daemon. With the node device APIs present, it can take upto a second to start up while talking to dbus. The remote driver was only waiting for a fraction of a second. This changes it to wait for upto 2 seconds, and also not to spawn multiple instances of the daemon. Daniel diff -rup libvirt-0.6.0.orig/src/remote_internal.c libvirt-0.6.0.new/src/remote_internal.c --- libvirt-0.6.0.orig/src/remote_internal.c 2009-02-18 10:56:34.000000000 +0000 +++ libvirt-0.6.0.new/src/remote_internal.c 2009-02-18 13:35:26.000000000 +0000 @@ -654,12 +654,13 @@ doRemoteOpen (virConnectPtr conn, */ if (errno == ECONNREFUSED && flags & VIR_DRV_OPEN_REMOTE_AUTOSTART && - trials < 5) { + trials < 20) { close(priv->sock); priv->sock = -1; - if (remoteForkDaemon(conn) == 0) { + if (trials > 0 || + remoteForkDaemon(conn) == 0) { trials++; - usleep(5000 * trials * trials); + usleep(1000 * 100 * trials); goto autostart_retry; } } -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

2 2

[libvirt] storage_backend_fs.c Bug
by Russell 26 Feb '09

26 Feb '09

Line 1133 of storage_backend_fs.c in 0.6.0: if (vol->target.backingStore != NULL) { virStorageReportError(conn, VIR_ERR_NO_SUPPORT, _("copy-on-write image not supported with " "qcow-create")); return -1; } virStorageVolTarget has no member called backingStore, resulting in compile errors.

5 5

[libvirt] [PATCH] Don't generate python bindings multiple times w/ parallel build
by Cole Robinson 26 Feb '09

26 Feb '09

The attached patch was posted by Michael Marineau at: https://bugzilla.redhat.com/show_bug.cgi?id=472702 It prevents generating the python bindings multiple times in a parallel build. Works fine in my testing, so I figured I'd pass it along here for better exposure, since it has been languishing in bugzilla. Thanks, Cole

3 2

[libvirt] [PATCH 0/5] Add device assignment related node device methods
by Mark McLoughlin 25 Feb '09

25 Feb '09

Hi, The following patches implement three new node device methods that are needed for KVM PCI device assignment. The dettach method unbinds the device from its device driver and binds it to the pci-stub driver, if available. This ensures the device is not being used by the host. The reattach method undos this operation. It unbinds the device from pci-stub and attempts to re-bind it to the original device driver. This allows the device to be used by the host again. The reset method is intended to be used on a dettached device before it is used by the guest or host. This operation may in future affect other devices, so it is intended that all devices to be assigned to a guest are first dettached before any device is reset. A writeup of some more background details are available here: http://marc.info/?l=kvm&m=123454366317045 Cheers, Mark.

2 13

[libvirt] [PATCH] document static host IP assignment
by Charles Duffy 25 Feb '09

25 Feb '09

Back in August 2008, DV added support for providing static IP/hostname assignments to dnsmasq via <host> elements in the network definition. Since this functionality isn't covered in the documentation, I wrote up a quick patch, attached.

3 2

[libvirt] [PATCH 0/2] Dettach and reset devices before assigning to guests
by Mark McLoughlin 25 Feb '09

25 Feb '09

Hi, The following two patches build on the previous series. The idea is simple - when starting a guest, we should automatically dettach and reset any devices assigned to it. Rather than change the semantics of the existing hostdev source, we only do this when the node device name is used as the hostdev source. Directly specifying the device address rather than its name can be seen as an option for people who know what they're doing. Cheers, Mark.

2 6

[libvirt] "type 'hvm' & arch 'i686' combination is not supported" error
by Frederik Himpe 25 Feb '09

25 Feb '09

I recently updated for libvirt 0.4.6 to libvirt 0.6.0. Now several of the virtual machines I defined, are not shown in virt-manager nor by virsh list --all, although the config files are still in /etc/libvirt/qemu. I tried to run virsh create, and this error is shown: libvir: Domain Config error : internal error os type 'hvm' & arch 'i686' combination is not supported This configuration was working perfectly with libvirt 0.4.6. I needed to change i686 to x86_64 in all config files of 32 bit systems to make them work again. Is there no way libvirt could migrate those configuration files automatically? -- Frederik Himpe

2 5

[libvirt] Patch to python-virtinst to allow it to choose svirt labels
by Daniel J Walsh 24 Feb '09

24 Feb '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Also found at least one big bug in python-virtinst, VirtualDisk.py was dropping the "/" between dirname and basename of installation object, when you told it to create the object. I think we want to have a big switch stored in libvirt somewhere saying whether or not we want isolated virtual machines. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkme++4ACgkQrlYvE4MpobM5ewCeP3iaq3HwT/Rw71E2YElbxKyg 66gAoJaCUkQkBvJz80wjztYiwOGsAKaj =GlDN -----END PGP SIGNATURE----- diff -r -u virtinst-0.400.1/virtinst/Guest.py virtinst-0.400.1.new/virtinst/Guest.py --- virtinst-0.400.1/virtinst/Guest.py 2009-01-26 14:33:25.000000000 -0500 +++ virtinst-0.400.1.new/virtinst/Guest.py 2009-02-19 17:36:35.000000000 -0500 @@ -32,6 +32,8 @@ import __builtin__ import CapabilitiesParser import VirtualDevice +import selinux +import random import osdict from VirtualDisk import VirtualDisk @@ -315,8 +317,9 @@ self._install_disk = None # VirtualDisk that contains install media if type is None: - type = "xen" - self.type = type + self.type = "xen" + else: + self.type = type if not location is None: self.location = location @@ -526,6 +529,7 @@ self._vcpus = None self._cpuset = None self._graphics_dev = None + self._seclabel = None self._os_type = None self._os_variant = None @@ -552,12 +556,34 @@ self.disknode = None # this needs to be set in the subclass + self.default_seclabel , self.default_imagelabel = self._default_seclabels() + + while self._seclabel == None: + seclabel, imagelabel = self.gen_seclabels() + if self.is_conflict_seclabel(self.conn, seclabel): + continue + self.set_seclabel(seclabel) + self.set_imagelabel(imagelabel) + def get_installer(self): return self._installer def set_installer(self, val): self._installer = val installer = property(get_installer, set_installer) + # Security context used to secure guest image + def get_imagelabel(self): + return self._imagelabel + def set_imagelabel(self, val): + self._imagelabel = val + imagelabel = property(get_imagelabel, set_imagelabel) + + # Security context used to secure guest process + def get_seclabel(self): + return self._seclabel + def set_seclabel(self, val): + self._seclabel = val + seclabel = property(get_seclabel, set_seclabel) def get_type(self): return self._installer.type @@ -565,7 +591,6 @@ self._installer.type = val type = property(get_type, set_type) - # Domain name of the guest def get_name(self): return self._name @@ -750,7 +775,7 @@ if enabled not in (True, False): raise ValueError, _("Graphics enabled must be True or False") - if enabled == True: + if enabled: gdev = VirtualGraphics(type=gtype) if port: gdev.port = port @@ -807,9 +832,23 @@ """Ensure that devices are setup""" for disk in self._install_disks: disk.setup(progresscb) + # Not sure of this, might want to put this in VirtualDisk class + selinux.setfilecon(disk.path, self._imagelabel) for nic in self._install_nics: nic.setup(self.conn) + def _get_seclabel_xml(self): + xml = "" + if self._seclabel != None: + xml = """ + <seclabel model='selinux'> + <label>%s</label> + <image>%s</image> + </seclabel> +""" % ( self._seclabel, self._imagelabel) + print xml + return xml + def _get_disk_xml(self, install=True): """Return xml for disk devices (Must be implemented in subclass)""" raise NotImplementedError @@ -899,6 +938,7 @@ <devices> %(devices)s </devices> + %(secxml)s </domain> """ % { "type": self.type, "name": self.name, \ @@ -909,7 +949,8 @@ "maxramkb": self.maxmemory * 1024, \ "devices": self._get_device_xml(install), \ "osblob": osblob, \ - "action": action } + "action": action, \ + "secxml": self._get_seclabel_xml()} def start_install(self, consolecb=None, meter=None, removeOld=False, @@ -1026,6 +1067,108 @@ if self.domain is not None: raise RuntimeError, _("Domain has already been started!") + def _default_seclabels(self): + try: + fd = open(selinux.selinux_virtual_domain_context_path(), 'r') + except OSError, (err_no, msg): + raise RuntimeError, \ + "failed to SELinux virtual domains context: %s: %s %s" % (selinux.selinux_virtual_domain_context_path(),err_no, msg) + + label = fd.read() + fd.close() + try: + fd = open(selinux.selinux_virtual_image_context_path(), 'r') + except OSError, (err_no, msg): + raise RuntimeError, \ + "failed to SELinux virtual domains context: %s: %s %s" % (selinux.selinux_virtual_domain_context_path(), err_no, msg) + + image = fd.read() + fd.close() + + return (label, image) + + def is_conflict_seclabel(self, conn, seclabel): + """ + check if security label is in use by any other VMs on passed + connection. + + @param conn: connection to check for collisions on + @type conn: libvirt.virConnect + + @param seclabel: Security Label + @type str: Security label + + @return: True if a collision, False otherwise + @rtype: C{bool} + """ + if not seclabel: + return False + + vms = [] + # get working domain's name + ids = conn.listDomainsID() + for i in ids: + try: + vm = conn.lookupByID(i) + vms.append(vm) + except libvirt.libvirtError: + # guest probably in process of dieing + logging.warn("Failed to lookup domain id %d" % i) + # get defined domain + names = conn.listDefinedDomains() + for name in names: + try: + vm = conn.lookupByName(name) + vms.append(vm) + except libvirt.libvirtError: + # guest probably in process of dieing + logging.warn("Failed to lookup domain name %s" % name) + + count = 0 + for vm in vms: + doc = None + try: + doc = libxml2.parseDoc(vm.XMLDesc(0)) + except: + continue + ctx = doc.xpathNewContext() + try: + try: + label = ctx.xpathEval("/domain/seclabel/label/") + if label[0].content == seclabel: + count += 1 + break + except: + continue + finally: + if ctx is not None: + ctx.xpathFreeContext() + if doc is not None: + doc.freeDoc() + if count > 0: + return True + else: + return False + + def _get_random_mcs(self): + f1 = random.randrange(1024) + f2 = random.randrange(1024) + if f1 < f2: + return "s0:c%s,c%s" % (f1, f2) + else: + if f1 == f2: + return "s0:c%s" % f1 + else: + return "s0:c%s,c%s" % (f2, f1) + + def gen_seclabels(self): + mcs = self._get_random_mcs() + con = self.default_seclabel.split(':') + seclabel = "%s:%s:%s:%s" % (con[0], con[1], con[2], mcs) + con = self.default_imagelabel.split(':') + imagelabel = "%s:%s:%s:%s" % (con[0], con[1], con[2], mcs) + return (seclabel, imagelabel) + def _set_defaults(self): if self.uuid is None: while 1: diff -r -u virtinst-0.400.1/virtinst/VirtualDisk.py virtinst-0.400.1.new/virtinst/VirtualDisk.py --- virtinst-0.400.1/virtinst/VirtualDisk.py 2009-01-26 14:33:25.000000000 -0500 +++ virtinst-0.400.1.new/virtinst/VirtualDisk.py 2009-02-19 19:43:44.000000000 -0500 @@ -172,8 +172,6 @@ """ return "%s:%s" %(self.type, self.path) - - def _get_path(self): return self._path def _set_path(self, val, validate=True): @@ -413,7 +411,7 @@ newpath = self.vol_object.path() elif self.vol_install: newpath = _util.get_xml_path(self.vol_install.pool.XMLDesc(0), - "/pool/target/path") + \ + "/pool/target/path") + "/" + \ self.vol_install.name if newpath and newpath != self.path:

3 6

[libvirt] iptables and libvirt
by Karl Wirth 24 Feb '09

24 Feb '09

Hi, I would like your feedback on the following idea. What if we could flexibly change the iptables rules for the different guests as they are deployed onto the node/host. The idea would be to do all of this within the iptables of the host leaving alone the iptables of the guests themselves. Here are some specifics: - Physical systems typically isolated using firewalls protecting well known ports. - With virt, on shared physical device, use a bridge to give full LAN access to vm - Or a virtual network which is an isolated bridge with no physical connection. Guest can talk to each other directly. Only NAT'd outbound. - The idea is to eventually make it easy to centrally set up iptable rules for guests that are applied in the host iptables. - We would have to be able to migrate the iptables rules and the state data with vm as it moves The benefits of this would be we could: - Create networking controls that provide same isolation as physical systems - Control which VMs can talk to which others Integration option: - Integration in virtd because it knows about the guests and their network parameters. Thanks for your feedback. Best regards, Karl

6 8

[libvirt] About virtualization, libvirt and xen...
by Patrick Archibal 24 Feb '09

24 Feb '09

Hello, I have understand that : ---------------------------- guest ---------------------------- driver_device0_guest ---------------------------- hypervisor ---------------------------- driver_device0_hypervisor ---------------------------- device0 ---------------------------- in order to access to a device, a guest use driver_device0_guest The driver_device0_guest is modified to ask the hypervisor instead of the device0 directly. Then the hypervisor uses the driver_device0_hypervisor in order to ask the device0. It's my understant, maybe it's false. I have few questions : 1 - what is the difference between libvirt and virtio. 2 - why developpers for xen, kvm... must develop drivers each time there are new devices ? Because the driver must ask the hypervisor instead of device directly. 3 - The devices presented to the guest are real or emulated ? (for xen and/or kvm) if devices are real, for example, i can use my graphic card with a virtual machine ?? 4 - Can you tell me why kvm is best or xen is best in enterprise. In my understand, in the future, kvm is in good position because the developpment is integrated in the kernel. Also, i feel xen progress because firms like citrix contribute but it's seems there is no big update since few years. My vision is xen is best for production environnement because it takes advantages of minimal hypervisor code while kvm must be install with the kernel. Also, it seems, performance will be better in kvm with virtio. Can we use virtio with xen ? _________________________________________________________________ Vous voulez savoir ce que vous pouvez faire avec le nouveau Windows Live ? Lancez-vous ! http://www.microsoft.com/windows/windowslive/default.aspx

2 1

[libvirt] [Patch 0/1] enable --checkpoint option in 'virsh save'
by Matt McCowan 24 Feb '09

24 Feb '09

Along the lines of Xen's 'xm save' function with the '-c' checkpoint flag, following up is a patch to basically make-it-so, plus enable it for qemu. Patch merges with CVS, and passes tests as described in the HACKING file. The code implementing the '--live' option for 'virsh migrate' was copied/pasted/mod'ed to create the --checkpoint option for 'virsh save' Regards Matt McCowan

2 2

[libvirt] networking static ip address
by Francisco José Martín 23 Feb '09

23 Feb '09

Hi, we are using the 0.6.0 version and an Ubuntu guest os under KVM virtualization. We have tried several ways to assign a static ip address to the guest os eth0 device on boot, but we didn't success. Is there any easy way to do it? We are trying to have a guest with the ip 192.168.0.1 in the eth0 device, enslaved to the br0 bridge on the host machine, which seems to be a pretty easy setup to test. When the guest OS is booted, the eth0 device exists, but is not up, and doesn't have the IP. Regards, Francisco.

3 3

[libvirt] [PATCH 1/5] Fix a typo in hostdev docs
by Mark McLoughlin 23 Feb '09

23 Feb '09

It's: <address bus='0x06' slot='0x02' function='0x0'/> not: <address>bus='0x06' slot='0x02' function='0x0'</address> Signed-off-by: Mark McLoughlin <markmc(a)redhat.com> --- docs/formatdomain.html | 2 +- docs/formatdomain.html.in | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/formatdomain.html b/docs/formatdomain.html index 17384b3..17dc0cd 100644 --- a/docs/formatdomain.html +++ b/docs/formatdomain.html @@ -485,7 +485,7 @@ ... <hostdev mode='subsystem' type='pci'> <source> - <address>bus='0x06' slot='0x02' function='0x0'</address> + <address bus='0x06' slot='0x02' function='0x0'/> </source> </hostdev> ...</pre> diff --git a/docs/formatdomain.html.in b/docs/formatdomain.html.in index c1e6a16..ee32354 100644 --- a/docs/formatdomain.html.in +++ b/docs/formatdomain.html.in @@ -397,7 +397,7 @@ ... <hostdev mode='subsystem' type='pci'> <source> - <address>bus='0x06' slot='0x02' function='0x0'</address> + <address bus='0x06' slot='0x02' function='0x0'/> </source> </hostdev> ...</pre> -- 1.6.0.6

2 9

[libvirt] networking with VMs on two nodes
by Andreas Rittershofer 23 Feb '09

23 Feb '09

I have two nodes and on each several virtual machines running under KVM/qemu. I've set up the default-network on each node and so I can: 1.) ping from host do guest 2.) ping from guest to host 3.) ping from guest tu guest But all this is only possibe on each node by itself. What I need now is network connection between a VM on node 1 to another VM on node 2. How to setup this? When both nodes are fine every node runs a few guests. But when one node goes down, all guests have to be run on the remaining node. mfg ar -- Hier könnte keine Signatur stehen.

1 0

[libvirt] Re: [et-mgmt-tools] attach hot usb device
by Cole Robinson 23 Feb '09

23 Feb '09

cc-ing libvir-list (future libvirt questions should be directed there) jmandawg wrote: > Hi, > > > > Quick question, since I can’t get to the qemu monitor anymore, how do I > hot add a usb device (smartphone)? > > Is it possible to do through virsh? > Sure: - Use 'lsusb' to determine the bus and device. Example listing looks like: Bus 001 Device 006: ID 0781:5151 SanDisk Corp. Cruzer Micro 256/512MB Flash Drive - Put hostdev xml in a file: cat << __EOF__ > usb.xml <hostdev mode='subsystem' type='usb'> <source> <address bus='1' device='6'/> </source> </hostdev> __EOF__ - Run 'virsh attach-device {VMNAME} usb.xml' on a running VM. Hope that helps, Cole

2 3

[libvirt] Networking with libvirt
by Andreas Rittershofer 22 Feb '09

22 Feb '09

I want to setup networking under KVM and with libvirt. I read a lot the last two days, but it is not working as desired. I don't want bridging, I want it with a tap-device created via vde_switch. I cannot figure out what to put in /etc/libvirt/qemu/machine.xml and /etc/ libvirt/qemu/networks/network.xml - there is no really good documentation. /var/log/libvirt/qemu/maschine.log shows a lot of parameters when I start the VM with virsh start machine, but I cannot figure out where to set these values or where to set the defaults. mfg ar -- Hier könnte keine Signatur stehen.

1 2

[libvirt] update documentation
by jesse lauren farinacci 22 Feb '09

22 Feb '09

I hit a small snag when following the documentation, specifically the doc says to use <clock sync='localtime'/> when it should say <clock offset='localtime'/>.

4 5

[libvirt] [PATCH] Fix bugzilla link in virsh man page
by Mark McLoughlin 22 Feb '09

22 Feb '09

Note, I haven't generated a new virsh.1 because Pod::Man 2.16 gives a bunch of warnings even with the existing version. Signed-off-by: Mark McLoughlin <markmc(a)redhat.com> --- docs/virsh.pod | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/virsh.pod b/docs/virsh.pod index 8b42ea0..58bba6b 100644 --- a/docs/virsh.pod +++ b/docs/virsh.pod @@ -540,9 +540,9 @@ L<virt-install(1)>, L<xm(1)>, L<virt-top(1)>, L<virt-mem(1)>, L<virt-df(1)>, L<h =head1 BUGS -Bugs can be view on the RedHat bugzilla page under the libvirt +Bugs can be filed in Red Hat bugzilla under the Virtualization Tools/libvirt L<https://bugzilla.redhat.com/> -L<https://bugzilla.redhat.com/bugzilla/buglist.cgi?product=Fedora+Core&compon…> +L<https://bugzilla.redhat.com/buglist.cgi?product=Virtualization+Tools&compon…> =end -- 1.6.0.6

2 8

[libvirt] restore as init script
by Matthias Pfafferodt 21 Feb '09

21 Feb '09

Hello, first i'm using kvm-84 and libvirt 0.6.0 on opensuse 11.1. I try to use the attached script to save some domains on shutdown and restore them on host boot. The script also tries to cleanly shutdown all other domains. The save and shutdown part is working as expected but on system boot the restore of the saved domains fails. If I manually run 'rclibvirtdomains start' after a boot it needs 1 to 3 tries to restore the domain. After that I can run a stop/start cycle of libvirtdomains without problems. How can I debug this problem? After the system boot libvirt seems to have problems to connect to qemu/kvm. The log messages are for a failed start: --- start log --- LC_ALL=C PATH=/bin:/sbin:/usr/bin:/usr/sbin HOME=/ /usr/bin/qemu-kvm -S -M pc -m 1024 -smp 1 -name kvm-virt03 -uuid 864c0b59-705e-5d78-dc3e-1a9de7dd305f -monitor pty -pidfile /var/run/libvirt/qemu//kvm-virt03.pid -boot c -drive file=/dev/virtual/kvm_virt03,if=ide,index=0,boot=on -net nic,macaddr=00:16:3e:00:01:05,vlan=0,model=e1000 -net tap,fd=15,script=,vlan=0,ifname=vnet0 -serial none -parallel none -usb -vnc 192.168.110.78:0 -k de -soundhw es1370 -incoming exec:cat char device redirected to /dev/pts/6 qemu_popen: returning result of qemu_fopen_ops cat: write error: Broken pipe --- end log --- and for a successful start: --- start log --- LC_ALL=C PATH=/bin:/sbin:/usr/bin:/usr/sbin HOME=/ /usr/bin/qemu-kvm -S -M pc -m 1024 -smp 1 -name kvm-virt03 -uuid 864c0b59-705e-5d78-dc3e-1a9de7dd305f -monitor pty -pidfile /var/run/libvirt/qemu//kvm-virt03.pid -boot c -drive file=/dev/virtual/kvm_virt03,if=ide,index=0,boot=on -net nic,macaddr=00:16:3e:00:01:05,vlan=0,model=e1000 -net tap,fd=15,script=,vlan=0,ifname=vnet0 -serial none -parallel none -usb -vnc 192.168.110.78:0 -k de -soundhw es1370 -incoming exec:cat char device redirected to /dev/pts/6 qemu_popen: returning result of qemu_fopen_ops info cpus * CPU #0: pc=0xffffffff80221f1d thread_id=7398 cont --- end log --- Kind regards Matthias Pfafferodt -- Matthias Pfafferodt - http://www.mapfa.de Matthias.Pfafferodt <at> mapfa.de ## Path: System/Virtualization ## Description: libvirtd stop configuration ## Type: yesno ## Default: yes # # On 'libvirtd stop' all running domains are killed. If # LIBVIRTDOMAINS_SHUTDOWN is set to 'yes' all running vm's are given time # for a gracefully shutdown. # LIBVIRTDOMAINS_SHUTDOWN="yes" ## Path: System/Virtualization ## Description: libvirtd timeout ## Type: integer ## Default: 300 # # On 'libvirtd stop' the vm's are ask to shutdown. This optine gives the # maximum number of seconds the script will wait until libvirt is stopped. # LIBVIRTDOMAINS_SHUTDOWN_MAXWAIT=300 ## Path: System/Virtualization ## Description: should domains be saved ## Type: yesno ## Default: yes # # If set to yes domains are saved on shutdown and restored on boot. # LIBVIRTDOMAINS_SAVE="yes" ## Path: System/Virtualization ## Description: domains which should be save and restored ## Type: string ## Default: # # The listed vms are saved on shutdown and restored at boot time # LIBVIRTDOMAINS_SAVE_VM="kvm-virt03" ## Path: System/Virtualization ## Description: save path for domains ## Type: string ## Default: /var/lib/libvirtdomains/save # # Path there the domains should be saved # LIBVIRTDOMAINS_SAVE_DIR="/var/lib/libvirtdomains/save"

1 0

[libvirt] bridge-to-lan interfaces with network type
by Zhengang Li 21 Feb '09

21 Feb '09

Hi All, The documentation on the libvirt website explains the way to define a bridge to LAN network interfaces with a 'bridge' type. E.g.: <interface type='bridge'> <source bridge='br0'/> <mac address='52:54:00:00:00:11'/> </interface> I'm working in a limited environment. Only 'network' type interfaces can be defined for a guest. Is it possible to define a bridge-to-lan interfaces with a 'network' type? The question actually goes to: How to write a network definition xml for libvirt to use as bridge to LAN type NIC in guest? I tried with 'nat' and 'route' forward in network xml, neither works for me. Regards, Zhengang

3 2

[libvirt] can't install fedora guest
by Farkas Levente 19 Feb '09

19 Feb '09

hi, while i try to install fedora-10 guest on centos-5 host i've got the error bellow virt-manager. our setup: virt-manager-0.6.1-1 libvirt-0.6.0-1 kvm-83-1 ----------------------------------------------- Unable to complete install 'libvirt.libvirtError internal error unable to start guest: Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/create.py", line 717, in do_install dom = guest.start_install(False, meter = meter) File "/usr/lib/python2.4/site-packages/virtinst/Guest.py", line 926, in start_install return self._do_install(consolecb, meter, removeOld, wait) File "/usr/lib/python2.4/site-packages/virtinst/Guest.py", line 966, in _do_install self.domain = self.conn.createLinux(install_xml, 0) File "/usr/lib64/python2.4/site-packages/libvirt.py", line 973, in createLinux if ret is None:raise libvirtError('virDomainCreateLinux() failed', conn=self) libvirtError: internal error unable to start guest: ----------------------------------------------- while this is in virt-manager's log: ----------------------------------------------- [Fri, 06 Feb 2009 10:27:15 virt-manager 31523] DEBUG (Storage:908) Storage volume 'fedora-i386.img' install complete. [Fri, 06 Feb 2009 10:27:15 virt-manager 31523] DEBUG (Guest:964) Creating guest from: <domain type='kvm'> <name>fedora-i386</name> <currentMemory>524288</currentMemory> <memory>524288</memory> <uuid>75330b36-f8e3-8459-2d71-fb47245d7203</uuid> <os> <type arch='x86_64'>hvm</type> <boot dev='cdrom'/> </os> <features> <acpi/><apic/> </features> <clock offset="utc"/> <on_poweroff>destroy</on_poweroff> <on_reboot>destroy</on_reboot> <on_crash>destroy</on_crash> <vcpu>1</vcpu> <devices> <emulator>/usr/bin/qemu-kvm</emulator> <console type='pty'/> <disk type='file' device='disk'> <source file='/var/lib/libvirt/images/fedora-i386.img'/> <target dev='vda' bus='virtio'/> </disk> <disk type='block' device='cdrom'> <source dev='/dev/hda'/> <target dev='hdc' bus='ide'/> <readonly/> </disk> <interface type='bridge'> <source bridge='eth0'/> <mac address='54:52:00:5d:99:c0'/> <model type='virtio'/> </interface> <input type='mouse' bus='ps2'/> <graphics type='vnc' port='-1' keymap='en-us'/> <sound model='es1370'/> </devices> </domain> [Fri, 06 Feb 2009 10:27:16 virt-manager 31523] ERROR (create:735) Unable to complete install 'libvirt.libvirtError internal error unable to start guest: Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/create.py", line 717, in do_install dom = guest.start_install(False, meter = meter) File "/usr/lib/python2.4/site-packages/virtinst/Guest.py", line 926, in start_install return self._do_install(consolecb, meter, removeOld, wait) File "/usr/lib/python2.4/site-packages/virtinst/Guest.py", line 966, in _do_install self.domain = self.conn.createLinux(install_xml, 0) File "/usr/lib64/python2.4/site-packages/libvirt.py", line 973, in createLinux if ret is None:raise libvirtError('virDomainCreateLinux() failed', conn=self) libvirtError: internal error unable to start guest: ' [Fri, 06 Feb 2009 10:27:16 virt-manager 31523] DEBUG (error:76) Uncaught Error: Unable to complete install: 'internal error unable to start guest: ' : Unable to complete install 'libvirt.libvirtError interna l error unable to start guest: Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/create.py", line 717, in do_install dom = guest.start_install(False, meter = meter) File "/usr/lib/python2.4/site-packages/virtinst/Guest.py", line 926, in start_install return self._do_install(consolecb, meter, removeOld, wait) File "/usr/lib/python2.4/site-packages/virtinst/Guest.py", line 966, in _do_install self.domain = self.conn.createLinux(install_xml, 0) File "/usr/lib64/python2.4/site-packages/libvirt.py", line 973, in createLinux if ret is None:raise libvirtError('virDomainCreateLinux() failed', conn=self) libvirtError: internal error unable to start guest: ' ----------------------------------------------- -- Levente "Si vis pacem para bellum!"

4 11

[libvirt] Java binding - JVM crashes .. sometimes
by Daniel Schwager 18 Feb '09

18 Feb '09

Hi, since I updated to the new libvirt-version (CVS snapshot of today), my JVM running my multi-thread application "sometimes" will crashes if I open or close libvirt-connection (on KVM hypervisor). I didn't find out the exact szenario - simple junit tests are running well. But inside my main application (multi tread, multiple fast access to libvirt java interface) will crash the JVM. The crash-report looks like ALWAYS like the following 2 examples. Is there a way to - debug this - make the JNI code more robust ? - make the open/close of libvirt more robust ? I think the JVM crashes, because the libvirt crashes. Is there a way to look inside libvirt to see a "crash" of the native libvirt-prog ? My application runs very well with the old version libvirt-0.4.5. I think, problem starts with >= 0.5. One more: Something, it happens, that a virsh -command on the commandline prints out an error message similar to "Can't connect to hypervisor" (I can't reproduce it at the moment). Multiple repeating the command works well. This happens not often - but sometimes.. Now, the Stacktrace of the crashed JVM ** first ... Instructions: (pc=0x0000000001206351) 0x0000000001206341: c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f c9 c3 0x0000000001206351: 49 8b 3e e8 47 f7 fc ff 84 c0 74 18 48 8b 15 bc Stack: [0x0000000002430000,0x0000000002531000], sp=0x000000000252f0d0, free space=1020k Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code) V [libjvm.so+0x34a351] V [libjvm.so+0x325201] Java frames: (J=compiled Java code, j=interpreted, Vv=VM code) j org.libvirt.Connect._close(J)I+0 j org.libvirt.Connect.close()V+5 j org.libvirt.Connect.finalize()V+1 v ~StubRoutines::call_stub j java.lang.ref.Finalizer.invokeFinalizeMethod(Ljava/lang/Object;)V+0 j java.lang.ref.Finalizer.runFinalizer()V+45 j java.lang.ref.Finalizer.access$100(Ljava/lang/ref/Finalizer;)V+1 j java.lang.ref.Finalizer$FinalizerThread.run()V+11 v ~StubRoutines::call_stub ... ** Second ... Stack: [0x000000002a061000,0x000000002a162000], sp=0x000000002a15e050, free space=1012k Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code) V [libjvm.so+0x34a351] V [libjvm.so+0x325201] Java frames: (J=compiled Java code, j=interpreted, Vv=VM code) j org.libvirt.Connect._open(Ljava/lang/String;)J+0 j org.libvirt.Connect.<init>(Ljava/lang/String;Z)V+23 j de.dtnet.virtcontroller.server.command.VDomain.open(Ljava/lang/String;)Lorg/libvirt/Connect;+74 ... Viele Gruesse Daniel Schwager ------------------------------------------------------------------- DT Netsolution GmbH - Taläckerstr. 30 - D-70437 Stuttgart Geschäftsführer: Daniel Schwager, Stefan Hörz - HRB Stuttgart 19870 Tel: +49-711-849910-32, Fax: -932 - Mailto:daniel.schwager@dtnet.de

2 5

[libvirt] A problem about libvir
by 刘刚 18 Feb '09

18 Feb '09

Hello, I have a problem for help. I use the libvir library 0.4.2 on Xen 3.2.0, the host OS is Suse 10.2 . I start a windows domain (windows xp). I use the function virDomainAttachDevice() to attach an iSCSI device to the windows domain,but it failed. I can use this function to attach an iSCSI device to a linux domain. How can I attach an iSCSI device to a windows domain ? or libvir doesn't support attach device to windows domain ? thanks a lot! MOBILE: 13622388220 HUAWEI TECHNOLOGIES CO.,LTD. Address: Huawei Industrial Base Bantian Longgang Shenzhen 518129, P.R.China E-mail: liugang8440265(a)huawei.com www.huawei.com

1 0

[libvirt] [PATCH] Remove invalid ATTRIBUTE_UNUSED
by Cole Robinson 18 Feb '09

18 Feb '09

Stumbled on an ATTRIBUTE_UNUSED that is actually used. Patch attached. Thanks, Cole

4 5

[libvirt] [PATCH] Initialize vm def monitor fd
by Cole Robinson 17 Feb '09

17 Feb '09

We weren't properly initializing the monitor fd value in the VM definition structure. If qemu failed to start up, this could lead to closing stdin, which made all sorts of poo hit the fan. The attached patch fixes this. Thanks, Cole

3 4

[libvirt] Bug in qemud/Makefile.in, compiling CVS-snapshot failed.
by Daniel Schwager 17 Feb '09

17 Feb '09

Hi, i checked out the current CVS snapshot (20090217-1530GMT+1), but compiling failed: sh autogen.sh make rpm .... make[4]: Leaving directory `/root/rpmbuild/BUILD/libvirt-0.6.99/src' make[3]: Leaving directory `/root/rpmbuild/BUILD/libvirt-0.6.99/src' Making all in qemud make[3]: Entering directory `/root/rpmbuild/BUILD/libvirt-0.6.99/qemud' Makefile:1284: *** missing separator. Stop. make[3]: Leaving directory `/root/rpmbuild/BUILD/libvirt-0.6.99/qemud' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/rpmbuild/BUILD/libvirt-0.6.99' ... Please adapt the qemud/Makefile.in to use TAB instead of spaces in the "remote_protocol.c: remote_protocol.h" make-target. regards Danny

2 1

[libvirt] [PATCH] Fix daemon TCP listen cleanup
by Cole Robinson 17 Feb '09

17 Feb '09

Just looking through the code, I stumbled on a bug in a cleanup routine in the daemon. Patch attached. Thanks, Cole

3 3

[libvirt] [PATCH] Detect bridge name collisions when defining a virtual network
by Cole Robinson 17 Feb '09

17 Feb '09

The attached patch is a partial fix for rhbz 479622. If a virtual network is defined with an explicit bridge name, make sure it doesn't collide with other virtual network bridge names. Thanks, Cole

2 1

[libvirt] [PATCH 1/4] fix problem with MKDIR_P vs mkdir_p
by Maximilian Wilhelm 17 Feb '09

17 Feb '09

From: Matthias Bolte <photon(a)upb.de> configure defines mkdir_p but src/Makefile.am uses MKDIR_P --- src/Makefile.am | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/src/Makefile.am b/src/Makefile.am index 9d934b4..eff9039 100644 --- a/src/Makefile.am +++ b/src/Makefile.am @@ -589,6 +589,8 @@ endif endif EXTRA_DIST += $(LXC_CONTROLLER_SOURCES) +MKDIR_P = $(mkdir_p) + install-exec-local: $(MKDIR_P) "$(DESTDIR)$(localstatedir)/cache/libvirt" $(MKDIR_P) "$(DESTDIR)$(localstatedir)/lib/libvirt/images" -- 1.5.6.5

3 14

[libvirt] Network Configuration question
by Remko Nolten 17 Feb '09

17 Feb '09

Hi! For a shared virtual hosting project with some friends we need a pretty specialized network configuration. Because we have virtually no time for experimenting (no pun intended), and the hosting organization has no experience with libvirt/KVM configurations they suggested to try and ask here. So, this is the situation: We have a server with one physical connection. Each user gets one virtual machine with its own IP-address (we have our own ip-range). The hosting organization gives us one "main" address 'A' with netmask 255.255.255.0 (/24) and a default gateway for our host machine. Besides this we get a number of addresses B1, B2, etc. with netmask 255.255.255.255 (/32) and without a default gateway. The switch just routes the traffic to our server for each ip-address we own (A and Bn). According to our hosting organization, the normal solution is to configure a loopback interface for each of the ip-addresses on the server so you can configure your software just to use one of the addresses. But we are not sure how this will work out in our virtual environment. Our intuition tells us we need to use the routing network forwarding mode, but when we bring the server to the data center we don't want to have any surprises. :) Here at home I don't have to possibility to create similar circumstances as in the data center due to some restriction from my ISP, so I hope someone can tell me if our intuition is correct or that we need to use some other method. Thanks in advance! -- Remko Nolten Tel: 06-45600767 E-mail: remko(a)nolten.nu

3 4

[libvirt] [PATCH] Don't check volume format for lvm backing store
by Cole Robinson 16 Feb '09

16 Feb '09

With the recently added COW support, we were trying to validate the passed logical volume's format, when there won't ever be one pulled from the xml (logical volumes don't have any valid format values). Just remove this check, and let any validation in this manner be done by the actual call to 'lvcreate'. Thanks, Cole

3 4

[libvirt] [PATCH] Fix generating python bindings
by Cole Robinson 16 Feb '09

16 Feb '09

The recent API additions virSaveLastError and virFreeError upset the python bindings generator. Add a rule to explicitly skip them for the bindings, since (as far as I can tell) the libvirtError class provides everything we need. Thanks, Cole

3 4

[libvirt] [PATCH] Fix virsh {net,pool}-edit
by Cole Robinson 16 Feb '09

16 Feb '09

The dumpxml commands for networks and pools don't support any flag arguments, and in fact explictly fail if flags != 0. This is not the case for vm dumpxml though, and flags were added to the base 'edit' implementation in virsh recently. The net and pool derivatives were not addressing this difference, so any net-edit or pool-edit attempt currently gives an error like: Network error : invalid argument in virNetworkGetXMLDesc The attached patch is one way to fix this. Thanks to Charles Duffy for the report. - Cole

3 7

[libvirt] Per-VM access control
by Jan Kasprzak 16 Feb '09

16 Feb '09

Hello, is it possible to run libvirt as a "hosting-like" environment? we would like to provide virtual machines for our users, but we would like them to be able to reset/reboot/poweroff only their own VMs, connect to the serial console of their own VMs only, and even maybe connect to the graphical console of their own VMs. Is it possible with libvirt, and without giving them shell access to the hosting machine? For the serial console, I thought about creating a ssh-only account with hardcoded "virsh console <their_machine_name>" command, but "virsh console" can be escaped from using ^], so this is not secure - this way they would be able to get access to other VMs as well. Thanks, -Yenya -- | Jan "Yenya" Kasprzak <kas at {fi.muni.cz - work | yenya.net - private}> | | GPG: ID 1024/D3498839 Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E | | http://www.fi.muni.cz/~kas/ Journal: http://www.fi.muni.cz/~kas/blog/ | >> If you find yourself arguing with Alan Cox, you’re _probably_ wrong. << >> --James Morris in "How and Why You Should Become a Kernel Hacker" <<

3 2