- Devel - libvirt List Archives

Re: [Libvir] virsh start problem + patch
by Daniel P. Berrange 11 Mar '08

11 Mar '08

On Tue, Mar 11, 2008 at 06:57:33AM +0100, Toth Istvan wrote: > # virsh list --all > Id Name State > ---------------------------------- > 0 Domain-0 running > - windows-xen shut off > - windows-xen2 no state > > # xm list > Name ID Mem VCPUs State > Time(s) > Domain-0 0 3489 4 r----- > 853.6 > windows-xen 1 512 0 > -b-s-d 39.4 > windows-xen2 4 512 0 > ------ 22.5 > > The windows-xen, and windows-xen2 domains were installed the very same > way, except I've had a Dom0 reboot since I've installed windows-xen, so > xen has had the opportunity to sort it's state out, whil the > windows-xen2 domain is a fresh install. Starting and stopping (by xm) a > freshly installed windows hvm domain does not sort out the state, only a > Dom0 reboot (or a xend restart) does. > > I have attached the output of xm list --long command. This shows that it is all XenD related - inactive domains should *not* have a 'domid' or 'state' field set in the 'xm list --long' output. In both your windows-xen & windows-xen2 VM, these fields are incorrectly present. > This problem indeed does look like a Xend bug, but it turns out that it > does not actually affect virsh. (It does affect virt-manager, as I've > written to the other list) > The other problem is I am pretty sure, a virsh logic bug, and is > independent of the first one. No, it is again a Xen bug. Inactive domains are *mandated* to have a domain ID of -1. They do not exist in the hypervisor anymore and thus have no domain ID associated with them. If XenD is not clearing the domain ID properly this is a XenD problem. That all said, we may need to workaround this XenD brokenness in the libirt XenD driver. Working around it in virsh is the wrong place. > and I get this: > > ./virsh start windows-xen > <warnings> > error: Domain is already active > virDomainGetID(dom) returns 1 > > ./virsh start windows-xen2 > <warnings> > error: Domain is already active > virDomainGetID(dom) returns 3 > > so virDomainGetID() does not return -1, but returns the actual xen > domain id of the managed, but inactive xen domain, and I believe this is > what it should do, > as it's job is not to tell us about the state of the domain, but to tell > the id of the domain, regardles of its state. No. Inactive domains are mandated to have an ID of -1. Dan. -- |: Red Hat, Engineering, Boston -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

1 0

Re: [Libvir] Accessing qemu from windows
by Richard W.M. Jones 11 Mar '08

11 Mar '08

On Tue, Mar 11, 2008 at 06:00:31PM +0200, Gabriel Kaufmann wrote: > I'm sure it actually makes a remote TCP connection since on the server side I get the error: > 'libvir: error : could not connect to qemu:///system?' It actually prints this out on the server side? Can you run the server with the --verbose option, you'll get a lot more detail about what is happening. Rich. -- Richard Jones, Emerging Technologies, Red Hat http://et.redhat.com/~rjones virt-p2v converts physical machines to virtual machines. Boot with a live CD or over the network (PXE) and turn machines into Xen guests. http://et.redhat.com/~rjones/virt-p2v

1 0

[Libvir] Accessing qemu from windows
by Gabriel Kaufmann 11 Mar '08

11 Mar '08

Hi, I'm running virsh from linux machine with the URI qemu+tcp://<user>:<password>@<ip>/system >From a linux machine (not the same that runs the libvirtd deamon) with libvirt 0.3.0, this URI allows me to connect. In the other hand, using the Virsh.exe (that comes with ocaml-libvirt-0.4.0.1.exe<http://libvirt.org/sources/ocaml/ocaml-libvirt-0.4.0.1.exe> ) on Windows XP, I receive the error 'Virtualization error: libvirt: VIR_ERROR_NO_CONNECT: VIR_FROM_NONE: could not connect to qemu:///system?' Is it a known bug, or is it configuration problem on my server? Best Regards, Gabriel Kaufmann Software Engineer Gabriel.Kaufmann(a)ericom.com<mailto:Gabriel.Kaufmann@ericom.com> Ericom Software Tel (Dir): +972 2 591 1700 Ext 754 Tel (Main): +972 2 591 1700 http://www.ericom.com Access Done Right Empower Enterprise-Wide Access to Microsoft(r) Terminal Server, Virtual Desktops and Legacy Applications

2 1

[libvir] Could not connect to xend
by Anton Protopopov 11 Mar '08

11 Mar '08

Hi. When I tried to run virsh to connect to xen, I have got an error --- libvirt failed to open connection to xend. Here is output with DEBUG enabled. What kind of additional information do you need? [root@localhost ~]# LIBVIRT_DEBUG=SPAM virsh DEBUG: libvirt.c: virInitialize (register drivers) DEBUG: libvirt.c: virConnectOpenAuth (name=(null), auth=0xb7ed79d8, flags=0) DEBUG: libvirt.c: do_open (Probed xen:///) DEBUG: libvirt.c: do_open (Using xen:/// as default URI, 1 hypervisor found) DEBUG: libvirt.c: do_open (name "xen:///" to URI components: scheme xen opaque (null) authority (null) server (null) user (null) port 0 path / ) DEBUG: libvirt.c: do_open (trying driver 0 (Test) ...) DEBUG: libvirt.c: do_open (driver 0 Test returned DECLINED) DEBUG: libvirt.c: do_open (trying driver 1 (QEMU) ...) DEBUG: libvirt.c: do_open (driver 1 QEMU returned DECLINED) DEBUG: libvirt.c: do_open (trying driver 2 (Xen) ...) DEBUG: xen_unified.c: xenUnifiedOpen (trying Xen sub-driver 0) DEBUG: xen_unified.c: xenUnifiedOpen (Xen sub-driver 0 open ok ) DEBUG: xen_unified.c: xenUnifiedOpen (trying Xen sub-driver 2) libvir: Xen Daemon error : internal error failed to connect to xend libvir: Xen Daemon error : internal error failed to connect to xend DEBUG: xen_unified.c: xenUnifiedOpen (Xen sub-driver 2 open failed ) DEBUG: libvirt.c: do_open (driver 2 Xen returned ERROR) DEBUG: hash.c: virUnrefConnect (unref connection 0x807bf88 xen:/// 1) DEBUG: hash.c: virReleaseConnect (release connection 0x807bf88 xen:///) error: failed to connect to the hypervisor

2 1

[Libvir] Need Help on Error handling.
by Ajishrao.r 11 Mar '08

11 Mar '08

Hi, I am using libvirt to manage, The Hypervisor, Can Any one Help me about handling error? My main questions are. --- What is Library level Error Handling? --- Any Example to use void virSetErrorFunc (void * userData,virErrorFunc <http://libvirt.org/html/libvirt-virterror.html#virErrorFunc> handler) --- What is the difference between these two funtions? int virConnCopyLastError (virConnectPtr <http://libvirt.org/html/libvirt-libvirt.html#virConnectPtr> conn,virErrorPtr <http://libvirt.org/html/libvirt-virterror.html#virErrorPtr> to) virErrorPtr <http://libvirt.org/html/libvirt-virterror.html#virErrorPtr> virConnGetLastError (virConnectPtr <http://libvirt.org/html/libvirt-libvirt.html#virConnectPtr> conn) -- Thanks&Regards Ajeesh

3 3

[Libvir] PATCH: Don't make connection read-only when non-root
by Daniel P. Berrange 11 Mar '08

11 Mar '08

The virsh commands has long forced the connection to be read-only if running as non-root. This is bogus because it is perfectly capable of authenticating full read-write connections as non-root since we gained kerberos/policykit support. The user can always use the explicit --readonly flag if they only want a read only connection Dan. Index: src/virsh.c =================================================================== RCS file: /data/cvs/libvirt/src/virsh.c,v retrieving revision 1.135 diff -r1.135 virsh.c 6048,6054d6047 < #ifndef __MINGW32__ < /* Force a non-root, Xen connection to readonly */ < if ((ctl->name == NULL || < !strcasecmp(ctl->name, "xen")) && ctl->uid != 0) < ctl->readonly = 1; < #endif < -- |: Red Hat, Engineering, Boston -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

3 2

[Libvir] PATCH: Fix libvirtd to not shutdown at startup
by Daniel P. Berrange 11 Mar '08

11 Mar '08

Changes to the daemon to make it called qemudShutdown() broke the network driver when run in --daemon mode. This is because the main daemon forks into the background, and the original PID then exits destroying any active networks & removing the iptables rules. # /usr/sbin/libvirtd --daemon Shutting down network 'default'iptables: No chain/target/match by that name iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: No chain/target/match by that name iptables: No chain/target/match by that name iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) Failed to bring down bridge 'virbr0' : No such device Failed to delete bridge 'virbr0' : No such device or address The core issue is that when forking into daemon mode the original process should immediately exit & not do invoke cleanup functions. This patch makes it do that Dan. Index: qemud/qemud.c =================================================================== RCS file: /data/cvs/libvirt/qemud/qemud.c,v retrieving revision 1.89 diff -u -r1.89 qemud.c --- qemud/qemud.c 3 Mar 2008 18:10:19 -0000 1.89 +++ qemud/qemud.c 9 Mar 2008 20:56:27 -0000 @@ -393,7 +393,7 @@ case -1: return -1; default: - return nextpid; + _exit(0); } cleanup: @@ -418,8 +418,7 @@ status != 0) { return -1; } - - return pid; + _exit(0); } } } @@ -2116,16 +2115,12 @@ goto error1; if (godaemon) { - int pid; openlog("libvirtd", 0, 0); - pid = qemudGoDaemon(); - if (pid < 0) { + if (qemudGoDaemon() < 0) { qemudLog(QEMUD_ERR, _("Failed to fork as daemon: %s"), strerror(errno)); goto error1; } - if (pid > 0) - goto out; /* Choose the name of the PID file. */ if (!pid_file) { @@ -2172,7 +2167,6 @@ if (godaemon) closelog(); - out: ret = 0; error2: -- |: Red Hat, Engineering, Boston -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

3 2

Re: [Libvir] virsh start problem + patch
by Richard W.M. Jones 11 Mar '08

11 Mar '08

OK, I think that's a good explanation but I'll leave it to Dan to comment 'coz he wrote the code ... Rich. -- Richard Jones, Emerging Technologies, Red Hat http://et.redhat.com/~rjones virt-p2v converts physical machines to virtual machines. Boot with a live CD or over the network (PXE) and turn machines into Xen guests. http://et.redhat.com/~rjones/virt-p2v

1 0

[Libvir] virsh start problem + patch
by Toth Istvan 11 Mar '08

11 Mar '08

Hello! I've been trying to use virsh to manage my Xen domains on Fedora 8. I found that I am unable to start any xen managed domains from virsh, because virsh complains that 'Domain is already running'. Actually, I am able to start them once, but once they are stopped, they are impossible to re-start. steps to reprouce: 1. use virt-install to install HVM domain 2. virsh start domain 3. shut down the domain from within the guest (i.e. Start-> shutdown) 4. virsh start domain -> error The problem appears with stock F8 (with current updates), but I've also tried the same with libvirt 4.1, with the same results. I've looked into the virsh code, and it seems that it was written with only only old-style xen in mind, and xen 3.1's managed domains break the logic. I've attached a simple patch against 0.4.1 that checks the actual domain state, instead of simply checking if libvirt knows about the domain. I have experienced a similar problem with virt-manager 0.5.3, where virt-manager is stuck showing 'running' status even after a domain has been shut down, hence it is not able to start the domain. regards István Tóth

4 3

[Libvir] PATCH: Remove use of polkit-grant
by Daniel P. Berrange 10 Mar '08

10 Mar '08

I formerly added support for calling polkit-auth and/or polkit-grant to get PolicyKit credentials. It turns out that polkit-grant is fundamentally flawed & unusable, so this patch removes use of polkit-grant. This is not a big issue, since polkit-auth is more functional and present in 0.7 or later. Second, it removes use of virRun() and does a direct execve() since we need to keep stdin & stdout open in all circumstances so the polkit-auth can prompt for & accept passwords depending on config. Dan. Index: configure.in =================================================================== RCS file: /data/cvs/libvirt/configure.in,v retrieving revision 1.133 diff -u -p -r1.133 configure.in --- configure.in 3 Mar 2008 14:42:37 -0000 1.133 +++ configure.in 9 Mar 2008 21:00:21 -0000 @@ -450,10 +450,6 @@ if test "x$with_polkit" = "xyes" -o "x$w CFLAGS="$old_CFLAGS" LDFLAGS="$old_LDFLAGS" - AC_PATH_PROG(POLKIT_GRANT, polkit-grant) - if test "x$POLKIT_GRANT" != "x"; then - AC_DEFINE_UNQUOTED([POLKIT_GRANT],["$POLKIT_GRANT"],[Location of polkit-grant program]) - fi AC_PATH_PROG(POLKIT_AUTH, polkit-auth) if test "x$POLKIT_AUTH" != "x"; then AC_DEFINE_UNQUOTED([POLKIT_AUTH],["$POLKIT_AUTH"],[Location of polkit-auth program]) Index: src/libvirt.c =================================================================== RCS file: /data/cvs/libvirt/src/libvirt.c,v retrieving revision 1.125 diff -u -p -r1.125 libvirt.c --- src/libvirt.c 26 Feb 2008 07:06:48 -0000 1.125 +++ src/libvirt.c 9 Mar 2008 21:00:24 -0000 @@ -19,6 +19,7 @@ #include <sys/stat.h> #include <unistd.h> #include <assert.h> +#include <sys/wait.h> #include <libxml/parser.h> #include <libxml/xpath.h> @@ -66,6 +67,39 @@ static int initialized = 0; int debugFlag = 0; #endif +#if defined(POLKIT_AUTH) +static int virConnectAuthGainPolkit(const char *privilege) { + const char *const args[] = { + POLKIT_AUTH, "--obtain", privilege, NULL + }; + int childpid, status, ret; + + /* Root has all rights */ + if (getuid() == 0) + return 0; + + if ((childpid = fork()) < 0) + return -1; + + if (!childpid) { + execvp(args[0], (char **)args); + _exit(-1); + } + + while ((ret = waitpid(childpid, &status, 0) == -1) && errno == EINTR); + if (ret == -1) { + return -1; + } + + if (!WIFEXITED(status) || + (WEXITSTATUS(status) != 0 && WEXITSTATUS(status) != 1)) { + return -1; + } + + return 0; +} +#endif + static int virConnectAuthCallbackDefault(virConnectCredentialPtr cred, unsigned int ncred, void *cbdata ATTRIBUTE_UNUSED) { @@ -77,25 +111,15 @@ static int virConnectAuthCallbackDefault size_t len; switch (cred[i].type) { -#if defined(POLKIT_GRANT) || defined(POLKIT_AUTH) +#if defined(POLKIT_AUTH) case VIR_CRED_EXTERNAL: { int ret; - const char *const args[] = { -#if defined(POLKIT_GRANT) - POLKIT_GRANT, "--gain", cred[i].prompt, NULL -#else - POLKIT_AUTH, "--obtain", cred[i].prompt, NULL -#endif - }; - if (STRNEQ(cred[i].challenge, "PolicyKit")) return -1; - if (virRun(NULL, (char **) args, &ret) < 0) - return -1; - if (!WIFEXITED(ret) || - (WEXITSTATUS(ret) != 0 && WEXITSTATUS(ret) != 1)) + if (virConnectAuthGainPolkit(cred[i].prompt) < 0) return -1; + break; } #endif @@ -158,7 +182,7 @@ static int virConnectCredTypeDefault[] = VIR_CRED_REALM, VIR_CRED_PASSPHRASE, VIR_CRED_NOECHOPROMPT, -#if defined(POLKIT_AUTH) || defined(POLKIT_GRANT) +#if defined(POLKIT_AUTH) VIR_CRED_EXTERNAL, #endif }; -- |: Red Hat, Engineering, Boston -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

2 1