September 2011 - Users - libvirt List Archives

[libvirt-users] converting save/dump output into physical memory image
by Andrew Tappert 04 Jun '12

04 Jun '12

A lot of people in the security community, myself included, are interested in memory forensics these days. Virtualization is a natural fit with memory forensics because it allows one to get access to a guest's memory without having to introduce any extra software into the guest or otherwise interfere with it. Incident responders are particularly interested in getting memory dumps from systems they're investigating. Virsh has "save" and "dump" commands for storing the state of a guest to a file on disk, but memory of KVM guests doesn't get saved in the "standard" input format for memory forensics tools, which is a raw physical memory image. (This is what you'd get via the classical "dd /dev/mem" approach or the contemporary equivalent using the crash driver; and VMware Server and Workstation produce .vmem files, which are such raw physical memory images, when a guest is paused or snapshotted.) In order to analyze the memory of Libvirt/KVM guests with my Linux memory forensics software, Second Look, I've created a tool for converting Libvirt-QEMU-save files (output of virsh save command) or QEMU-savevm files (output of virsh dump command) to raw physical memory images. I've got a basic working capability, though I'm still tracking down some problems with a guest allocated 8GB RAM--not all the memory seems to be present in the save or dump file. And I haven't tested very extensively yet, version support is limited to what I myself am currently running, etc. I'd like to know if this is a capability that others are interested in. Is this something that would be of interest to the Libvirt project if I were to contribute the code, or to the KVM project, or do you think it best exists as a separate project? I've also got a proof-of-concept tool for converting hibernate images to raw physical memory images. Perhaps a collection of tools for converting various memory dump formats would be a good project. Anyone else interested in this kind of stuff? As an author of commercial memory forensics software I've got a vested interest in availability of good memory acquisition capabilities. But there are a number of people working on FOSS Linux memory analysis tools, too... Andrew

4 5

Re: [libvirt-users] ruby-libvirt 0.4.0
by Chris Lalancette 09 Nov '11

09 Nov '11

On 07/29/11 - 09:34:17AM, David M. Barlieb wrote: > Hi, I'm fairly new to using libvirt. I have RHEL6 servers running KVM > virtual environment. As I understand it, libvirt provides the tools to > the KVM environment so that I can create domains or virtual guests. So, > that being said, what does this ruby-libvirt provide me or enhance given > my current setup. > > > > I'll understabnd if this is a little rudimentary but I really do not > know who or where else to ask these types of question. I get quite a bit > of email from the libvirt-users groups about libvirt and really have no > idea if I can or should put any of these into my current setup, or if I > should be asking RedHat this. > > > > I certainly wouldn't mind testing and contributing to these effort to > enhance the libvirt tools and KVM hypervisor but think I need a better > understanding of exactly how libvirt and KVM interact and what the > enhancements bring to the table. In the future it is usually best to keep one of the lists on an email; that way, if I'm away or not responding, someone else can help you. I've added libvirt-users to this response. In any case, you have the right idea. Libvirt is a control plane for various different virtualization solutions. Arguably the most popular virtualization solution that libvirt can control is KVM, but it can also manage Xen, VMware ESX, LXC (linux containers), UML, etc. Libvirt provides both tools (like virsh and libvirtd) and APIs for interacting with virtual machines. The APIs are things like virDomainShutdown(), virDomainReboot(), etc. The ruby-libvirt package is a thin wrapper around these APIs, so that you can use this functionality from ruby programs. That is, you would be able to do something like: dom.reboot dom.shutdown from your ruby programs. There are also bindings for other languages such as python, php, and perl. There is a lot more information at http://libvirt.org, and there is more information specifically about the ruby bindings at http://libvirt.org/ruby -- Chris Lalancette

3 2

[libvirt-users] Second VM cannot get dhcp ip in NAT mode
by Magicloud Magiclouds 03 Oct '11

03 Oct '11

Hi, Yesterday I started to use libvirt with kvm under centos6. The first VM works great. Today I added another VM and start to initialize with virt-install. Well, it seems that, the second VM cannot get dhcp ip. I did not change the default libvirt network configuration. What should I do? -- 竹密岂妨流水过山高哪阻野云飞

2 3

[libvirt-users] Difficutlies with lp port
by Anselmo 30 Sep '11

30 Sep '11

Hello, I'm using libvirt on debian as host and Windows XP Home as guest. I would like to pass the /dev/parport0 to XP to attach a printer. I use virt-manager. When I add a parallel port as a "dev" type I got this conf file: .... <parallel type='dev'> <source path='/dev/parport0'/> <target port='0'/> </parallel> .... And this command line: .... -chardev tty,id=charparallel0,path=/dev/parport0 -device isa-parallel,chardev=charparallel0,id=parallel0 .... The first parameter is "tty".Should not it be "parport"? Anyway I never see any parallel port on the guest with these options. Even starting kvm from the command line. While is seems to work immediatly using the kvm option: "-parallel /dev/parport0" Where i've made a mistake? Or how can I just tell libvirt to use the "-parallel" option instead. Thank's for your help Anselmo Luginbühl

1 0

[libvirt-users] win7 instance just disappears
by Alex 30 Sep '11

30 Sep '11

Hi, I have a fedora15 box with a win7 kvm instance that has been running for some time, but lately it seems to just crash and disappear without any idea of what happened. It's never happened while I have been using it, only when the instance is idle. I usually start the instance using virt-manager, but also start it just using "virsh start mykvm" then access it using the spicec client. I can't find any logging information to indicate why this is happening or how to go about fixing it. I've tried accessing it using the normal virt-manager client as well as the spicec client an it doesn't make any difference. When it crashes, the whole process is gone. Is there something that could cause it to do this when the system is idle? I also installed the qxl video drivers (qxl-win-0.1010-20110308-d9eb3203bd) some time ago, so it could possibly be related to that. I thought it might be helpful to have a copy of the qemu XML file: <domain type='kvm'> <name>alex-win7</name> <uuid>f7decb31-88cf-d003-8716-66258550b996</uuid> <memory>3145728</memory> <currentMemory>3145728</currentMemory> <vcpu>1</vcpu> <os> <type arch='x86_64' machine='pc-0.14'>hvm</type> <boot dev='hd'/> </os> <features> <acpi/> <apic/> <pae/> </features> <cpu match='exact'> <model>Opteron_G3</model> <vendor>AMD</vendor> <feature policy='require' name='skinit'/> <feature policy='require' name='vme'/> <feature policy='require' name='mmxext'/> <feature policy='require' name='fxsr_opt'/> <feature policy='require' name='cr8legacy'/> <feature policy='require' name='ht'/> <feature policy='require' name='3dnowprefetch'/> <feature policy='require' name='3dnowext'/> <feature policy='require' name='wdt'/> <feature policy='require' name='extapic'/> <feature policy='require' name='pdpe1gb'/> <feature policy='require' name='osvw'/> <feature policy='require' name='cmp_legacy'/> <feature policy='require' name='3dnow'/> </cpu> <clock offset='localtime'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>restart</on_crash> <devices> <emulator>/usr/bin/qemu-kvm</emulator> <disk type='file' device='disk'> <driver name='qemu' type='raw'/> <source file='/home/libvirt-images/alex-win7.img'/> <target dev='hda' bus='ide'/> <address type='drive' controller='0' bus='0' unit='0'/> </disk> <disk type='file' device='disk'> <driver name='qemu' type='raw'/> <source file='/home/libvirt-images/alex-win7a-2.img'/> <target dev='vda' bus='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/> </disk> <controller type='ide' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/> </controller> <controller type='virtio-serial' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x07' function='0x0'/> </controller> <interface type='bridge'> <mac address='52:54:00:6c:6c:47'/> <source bridge='br0'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> <channel type='spicevmc'> <target type='virtio' name='com.redhat.spice.0'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> <input type='mouse' bus='ps2'/> <graphics type='spice' autoport='yes'/> <sound model='ich6'> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </sound> <video> <model type='qxl' vram='9216' heads='1'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </video> <memballoon model='virtio'> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </memballoon> </devices> </domain> Thanks, Alex

1 0

[libvirt-users] ANNOUNCE: Perl binding release Sys-Virt version 0.9.5
by Daniel P. Berrange 29 Sep '11

29 Sep '11

I am pleased to announce a new release of the Perl binding, Sys::Virt version 0.9.5, is now available for download: http://search.cpan.org/CPAN/authors/id/D/DA/DANBERR/Sys-Virt-0.9.5.tar.gz Changes in this release - Add all new APIs in libvirt 0.9.5 - Add missing snapshot creation/lookup methods - Fix typo in method listing snapshots - Add missing snapshot constant - Add example for save/restore usage - Re-add abort job binding accidentally deleted All historical releases and online documentation are available from the CPAN page http://search.cpan.org/dist/Sys-Virt/ There is no planned update for libvirt 0.9.6, since that did not introduce any new APIs that require work in the Perl layer. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[libvirt-users] virsh cannot list broken guest.
by Magicloud Magiclouds 29 Sep '11

29 Sep '11

Hi, I am starting to learn using libvirt with kvm on CentOS 6. Just used this command to start a guest: virt-install -ntest -r1024 --vcpus=1 -c/var/lib/libvirt/images/CentOS-6.0-x86_64-netinstall.iso --os-type=linux --os-variant=rhel6 --disk vol=kvmguests/test --vnc -v --virt-type=kvm --check-cpu --prompt --arch=x86_64 Then I found out that I misconfigured vnc. And I do not know how to gracefully stop qemu. So I killed it. Then with the command, I got: ERROR Guest name 'test' is already in use. What is the name of your virtual machine? But at this time, there is nothing listed in virsh: Welcome to virsh, the virtualization interactive terminal. Type: 'help' for help with commands 'quit' to quit virsh # list Id Name State ---------------------------------- virsh # connect qemu:///system virsh # list Id Name State ---------------------------------- virsh # What should I do? -- 竹密岂妨流水过山高哪阻野云飞

1 2

[libvirt-users] Snapshot Error
by huachao yao 28 Sep '11

28 Sep '11

Hey When I want to take a snapshot for a Domain by using virDomainSnapshotCreateXML. The Error as below happen: libvir: QEMU error : Requested operation is not valid: Disk '/var/lib/libvirt/images/fedora-qcow.qcow2' does not support snapshotting The snapshot Configuration is : <domainsnapshot> <description>Snapshot of OS install and updates</description> <disks> <disk name='/var/lib'> <source file='/var/lib-snapshot'/> </disk> <disk name='vdb' snapshot='no'/> </disks> </domainsnapshot> And /var/lib/libvirt/images/fedora-qcow.qcow2 is the disk for the domain (use qemu-img to create). And I had tried another Disk format (*.img), but the error still happen. how can i deal with this error?? PS:qemu version is 0.14 & libvirt version is 0.9.4. Pls help. :-(

3 2

[libvirt-users] how to convert from xen .cfg files to libvirt xml?
by Mauro 27 Sep '11

27 Sep '11

I have a .cfg configuration file for a xen virtual machine. I need to convert it in xml format to use with libvirt. So I run virsh domxml-from-native xen-xm backupsrv.cfg but I have an error: error: Unknown failure. How can I investigate about the error?

2 7

[libvirt-users] virsh edit problems
by Robin Lee Powell 26 Sep '11

26 Sep '11

I've got a problem where I can't access my console (well, I can', but I can't type in a password), which I don't think is a libvirt issue but any help or commentary is certainly welcome http://thread.gmane.org/gmane.comp.emulators.kvm.devel/79561 , and I'm trying to debug it by trying out different console/serial options in my .xml file, and I can't change them. What I have now: <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> No matter what I change, whether I use "virsh edit" or edit the files directly, even with libvirt off, as soon as libvirt notices (i.e. when I turn it back on) my changes get blown away and it ends up looking just like the above. Even as simple a thing as changing the port number, or removing the console, or adding a second serial... all gone. Oh, wait, that's not quite true; adding a second serial *does* work. But nothing else I've tried does. What I'm actually trying to do is copy the docs http://libvirt.org/formatdomain.html#elementsConsole more closely and specify my own source paths; I'm worried that the serial and the console are somehow ending up in the same place and maybe that's causing my problem? What I've been trying to do is something like: <serial type='pty'> <source path='/dev/pts/3'/> <target port='0'/> </serial> <console type='pty'> <source path='/dev/pts/4'/> <target port='0'/> </console> And it just won't stick. Maybe that's not even my problem, but it's not showing any errors, and it's annoying me and I'd like to understand why. -Robin

2 2

[libvirt-users] changue bridge name, libvirt refuses to take new name
by Sergio A. Kessler 26 Sep '11

26 Sep '11

hi all, (this events ocurred before my previous mail about the uuid incident) so, I installed a vm host: rhel6 guest: centos6 network: bridge (br0, eth1 as slave) but then, I changed the name of the bridge from br0 to br1 (because br1<->eth1 seems pretty than br0<->eth1) so: - mv /etc/sysconfig/network-scripts/ifcfg-br0 /etc/sysconfig/network-scripts/ifcfg-br1 - edited /etc/sysconfig/network-scripts/ifcfg-br1 change DEVICE=br0 by DEVICE=br1 - edited /etc/sysconfig/network-scripts/ifcfg-eth1 and changed the line BRIDGE=br0 to BRIDGE=br1 - edited /etc/libvirt/qemu/rmdev2.xml and changed the line <source bridge='br0'/> to <source bridge='br1'/> - service network restart <aside note> boom! lost connection to the server I had to go to server location (a few miles) by car because the network restart didn't stop br0 because thera was no script br0 and when br1 started produced a collision </aside note> - service libvirtd restart # brctl show bridge name bridge id STP enabled interfaces br1 8000.e41f13ba6e1a no eth1 virbr0 8000.5254003a3124 yes virbr0-nic # virsh -c qemu:///system start rmdev2 error: Failed to start domain rmdev2 error: Failed to add tap interface to bridge 'br0': No such device there *nothing* 'br0' in /etc in the system (I grepped it), why is looking for br0 instead of br1 ? I ended up undefining rmdev2, installing a new guest called rmdev2 using br1, and that was when I got the error: operation failed: cannot restore domain 'rmdev2' uuid 9e9ea633-9691-f3d6-64da-ae9c8b3e5810 from a file which belongs to domain 'rmdev2' uuid 4f425d14-335b-0adc-11af-06e503c6b54d yes, I was ready to fire the house and leaving for better places... thanks, /sergio

2 1

[libvirt-users] new guest with same name as undefined one
by Sergio A. Kessler 26 Sep '11

26 Sep '11

hi, - host: rhel6 - I created a guest rmdev2 (centos6) - undefined it - again created rmdev2 guest (centos6) now I get: [root@rmdev1 var]# virsh -c qemu:///system Welcome to virsh, the virtualization interactive terminal. Type: 'help' for help with commands 'quit' to quit virsh # list --all Id Name State ---------------------------------- - rmdev2 shut off virsh # start rmdev2 error: Failed to start domain rmdev2 error: operation failed: cannot restore domain 'rmdev2' uuid 9e9ea633-9691-f3d6-64da-ae9c8b3e5810 from a file which belongs to domain 'rmdev2' uuid 4f425d14-335b-0adc-11af-06e503c6b54d why ? it seems the ghost of the old guest is causing problems... all the files used by the first guest are deleted... thanks. /sergio

3 4

[libvirt-users] ANNOUNCE: oz 0.7.0 release
by Chris Lalancette 23 Sep '11

23 Sep '11

All, I'm pleased to announce release 0.7.0 of Oz. Oz is a program for doing automated installation of guest operating systems with limited input from the user. Release 0.7.0 is a bugfix and feature release for Oz. Some of the highlights between Oz 0.6.0 and 0.7.0 are: - Ability to use the "direct initrd injection" method to install Fedora/RHEL guests. This is an internal implementation detail, but can significantly speed up installs for Fedora or RHEL guests. (thanks for the tip from Kashyap Chamarthy) - Support for Fedora-16 (thanks to Steve Dake for help in making this work) - Use the serial port to announce guest boot, rather than a network port. This makes it so we no longer have to manipulate iptables, and gets us one step closer to having Oz run as non-root - (for developers) Re-written unittests in python for speedier execution - (for developers) Additional methods in the TDL class to merge in external package lists (thanks to Ian McLeod) A tarball of this release is available, as well as packages for Fedora-14, Fedora-15, and RHEL-6. Note that to install the RHEL-6 packages, you must be running RHEL-6.1 or later. Instructions on how to get and use Oz are available at http://aeolusproject.org/oz.html If you have any questions or comments about Oz, please feel free to contact aeolus-devel(a)lists.fedorahosted.org or me (clalance(a)redhat.com) directly. Thanks to everyone who contributed to this release through bug reports, patches, and suggestions for improvement. -- Chris Lalancette

2 1

[libvirt-users] virDomainDefineXml Issue
by Kiran Javaid 23 Sep '11

23 Sep '11

Hello Everyone, I am facing a problem in defining the xml for domain creation using libvirt. I am using Xen hypervisor. domPtr = lib.virDomainDefineXML(conPtr, domainXML); I get the following error: "libvir: Xen Daemon error : XML error: failed to parse domain description" Any suggestions are welcome. Regards.

2 3

[libvirt-users] The Format Of URI when Migrating
by huachao yao 23 Sep '11

23 Sep '11

Hi, when I try to use such API: virDomainPtr <http://www.libvirt.org/html/libvirt-libvirt.html#virDomainPtr> virDomainMigrate (virDomainPtr <http://www.libvirt.org/html/libvirt-libvirt.html#virDomainPtr> domain, virConnectPtr <http://www.libvirt.org/html/libvirt-libvirt.html#virConnectPtr> dconn, unsigned long flags, const char * dname, const char * uri, unsigned long bandwidth) to achieve the domain to the remote host. I set the "const char * uri" as "qemu+ssh://root@116.56.142.199/system". But the Error "libvir: QEMU error : invalid argument in only tcp URIs are supported for KVM/QEMU migrations" happened. I want to know when i want the migrate ,how can i set the URI ? offer a example is better. :-)

2 1

[libvirt-users] Hot cloning & P2V
by smain kahlouch 22 Sep '11

22 Sep '11

Hi all, I guess my question is stupid and has been asked a thousand times but i was wondering if it's possible to do the following things: - Cloning of a running virtual machine (hot copy) - Migrate a physical server to a virtual one. I googled a bit and am not able to find the answers. Thanks. Regards, Sam

2 1

[libvirt-users] random "monitor socket did not show up"
by Gian Uberto Lauri 22 Sep '11

22 Sep '11

Hello gentlemen! I just experienced this weird thing: I have 2 machines (one is a Dell Pe1950 with 2 Xeon 5130, the other is a Fujitsu RX200S6 with 2 Xeon E5645), both run CentoOS 5.6, the DELL has the 2.6.18-238.9.1.el5 while the Fujitsu runs the 2.6.18-238.12.1.el5 kernel. But when I try to do a virsh create with this script <domain type='kvm'> <name>one-292</name> <memory>1894400</memory> <os> <type arch='i686'>hvm</type> <boot dev='hd'/> </os> <devices> <emulator>/usr/bin/kvm</emulator> <disk type='file' device='disk'> <source file='/var/lib/one/292/images/disk.0'/> <target dev='hda'/> <driver name='qemu' type='qcow2'/> </disk> <disk type='file' device='cdrom'> <source file='/var/lib/one/292/images/disk.1'/> <target dev='hdb'/> <readonly/> <driver name='qemu' type='raw'/> </disk> <interface type='bridge'> <source bridge='br0:0'/> <mac address='20:00:ac:14:fe:06'/> </interface> <graphics type='vnc' listen='0.0.0.0' port='6192'/> </devices> </domain> it works perfectly on the Dell. On the Fujitsu it failed repeatedly and then worked. Any explainations and some hint on getting it work always ? -- ing. Gian Uberto Lauri Ricercatore / Reasearcher Laboratorio Ricerca e Sviluppo / Research & Development Lab. Area Calcolo Distribuito / Distributed Computation Area GianUberto.Lauri(a)eng.it Engineering Ingegneria Informatica spa Corso Stati Uniti 23/C, 35127 Padova (PD) Tel. +39-049.8283.571 | main(){printf(&unix["\021%six\012\0"], Fax +39-049.8283.569 | (unix)["have"]+"fun"-0x60);} Skype: gian.uberto.lauri | David Korn, AT&T Bell Labs http://www.eng.it | ioccc best One Liner, 1987

4 4

[libvirt-users] Problem with allocation of big files
by Nikita A Menkovich 20 Sep '11

20 Sep '11

Hello, I found a strange problem with allocationg big files on drive. For example in guestfish I allocate large disk image for example: $ guestfish ><fs> allocate test.img 20G When an image allocating, there is a big slowdown of guest OSes, launched on host machine, and on different drives. For Linux guests with virtio drivers, there is no so big performance penalty, but for FreeBSD guests with ide it seems like the OS locked. Manipulating with ionice and niceness do not affect at all. Manipulating with cfq, deadline schedulers also do not have any results. OS Debian Squeeze libvirtd (libvirt) 0.9.2 QEMU emulator version 0.14.0 (Debian 0.14.0+dfsg-5.1), Copyright (c) 2003-2008 Fabrice Bellard guestfish 1.10.3 with some local patches, backported from main tree Does anyone have ideas how to fix it? -- Nikita A Menkovich http://libc6.org/ JID: menkovich(a)gmail.com

2 1

[libvirt-users] Remote connect using virsh qemu+ssh hangs / PolicyKit issue
by Trey Dockendorf 20 Sep '11

20 Sep '11

I'm attempting to remote connect to my KVM instance using virsh, but all the commands hang. When issuing the below command, nothing on the remote system happens, and no errors are displayed, (hostname changed) $ virsh --debug 5 --log /var/lib/foreman/virsh.log -c qemu+ssh://foreman@kvmhost.tld:16509/system?no_tty=1 This is the uncommented lines in /etc/libvirt/libvirtd.conf ---------- listen_tls = 0 listen_tcp = 1 listen_addr = "<omitted, set to management NIC>" log_level = 1 log_filters="1:remote 1:event 1:qemu" log_outputs="1:syslog:libvirtd 1:file:/var/log/libvirt/libvirtd.log" This is the only debug output I get in /var/log/libvirt/libvirtd.log during the remote connection attempt ----------- 17:56:04.579: debug : virEventRunOnce:595 : Poll got 1 event 17:56:04.580: debug : virEventDispatchTimeouts:405 : Dispatch 3 17:56:04.580: debug : virEventDispatchHandles:450 : Dispatch 10 17:56:04.580: debug : virEventDispatchHandles:464 : i=0 w=1 17:56:04.580: debug : virEventDispatchHandles:464 : i=1 w=2 17:56:04.580: debug : virEventDispatchHandles:464 : i=2 w=3 17:56:04.580: debug : virEventDispatchHandles:464 : i=3 w=4 17:56:04.580: debug : virEventDispatchHandles:464 : i=4 w=5 17:56:04.580: debug : virEventDispatchHandles:464 : i=5 w=6 17:56:04.580: debug : virEventDispatchHandles:464 : i=6 w=7 17:56:04.580: debug : virEventDispatchHandles:464 : i=7 w=8 17:56:04.580: debug : virEventDispatchHandles:477 : Dispatch n=7 f=13 w=8 e=1 0x1629640 17:56:04.580: debug : virEventAddHandleImpl:113 : Add handle fd=20 events=1 cb=0x4196e0 opaque=0x1629640 17:56:04.580: debug : virEventInterruptLocked:664 : Skip interrupt, 1 -1447459072 17:56:04.580: debug : virEventDispatchHandles:464 : i=8 w=9 17:56:04.580: debug : virEventDispatchHandles:464 : i=9 w=10 17:56:04.580: debug : virEventCleanupTimeouts:495 : Cleanup 3 17:56:04.580: debug : virEventCleanupHandles:536 : Cleanupo 11 17:56:04.580: debug : virEventCleanupTimeouts:495 : Cleanup 3 17:56:04.580: debug : virEventCleanupHandles:536 : Cleanupo 11 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=0 w=1, f=5 e=1 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=1 w=2, f=7 e=1 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=2 w=3, f=14 e=1 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=3 w=4, f=15 e=1 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=4 w=5, f=17 e=25 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=5 w=6, f=18 e=25 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=6 w=7, f=19 e=25 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=7 w=8, f=13 e=25 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=8 w=9, f=12 e=25 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=9 w=10, f=11 e=25 17:56:04.580: debug : virEventMakePollFDs:373 : Prepare n=10 w=15, f=20 e=1 17:56:04.580: debug : virEventCalculateTimeout:314 : Calculate expiry of 3 timers 17:56:04.580: debug : virEventCalculateTimeout:344 : Timeout at 0 due in -1 ms 17:56:04.580: debug : virEventRunOnce:593 : Poll on 11 handles 0x7f35a4001240 timeout -1 I've already opened up the firewall for port 16509, and allowed the user foreman (member of libvirt_admin) to manage libvirt via PolicyKit Relevant line in iptables, 5 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16509 /etc/polkit-1/localauthority/50-local.d/50-libvirt-remote-access.pkla ----------- [libvirt Remote Access] Identity=unix-group:libvirt_admin Action=org.libvirt.unix.manage ResultAny=yes ResultInactive=yes ResultActive=yes Originally I had created the file /etc/polkit-1/localauthority/50-local.d/51-libvirt-foreman-remote-access.pkla with contents below, and had the file 50-libvirt-remote-access.pkla only allowing a single user. /etc/polkit-1/localauthority/50-local.d/51-libvirt-foreman-remote-access.pkla ---------- [libvirt Foreman Remote Access] Identity=unix-user:foreman Action=org.libvirt.unix.manage ResultAny=yes ResultInactive=yes ResultActive=yes However I wasn't able to connect to libvirt on the host itself, and the logs indicated it was a PolicyKit block, so my second problem/question...Is it possible to have multiple local PolicyKit *.pkla files or can only one exist? From the documentation here, http://wiki.libvirt.org/page/SSHPolicyKitSetup, it seems like so long as the names are unique then multiple would be allowed. Reason that's key is I'm using Puppet and will have multiple servers/applications needing access and being restricted to a single file to manage will be a problem. Connecting locally with a specific pkla for "foreman"... ----------- $ virsh -c qemu:///system error: authentication failed error: failed to connect to the hypervisor /var/log/libvirt/libvirtd.log --------- 17:50:06.102: debug : virRunWithHook:914 : Command stderr: Not authorized. 17:50:06.103: error : remoteDispatchAuthPolkit:3810 : Policy kit denied action org.libvirt.unix.manage from pid 29640, uid 503, result: 256 Thanks - Trey

1 0

[libvirt-users] libvirt does not recognize all devices in iscsi and mpath pools in a predictable manner
by Guido Winkelmann 19 Sep '11

19 Sep '11

Hi, I'm using libvirt 0.8.3 on Fedora 14 (as I wrote earlier, I'm having some trouble updating to the newest version), and I'm having problems getting iscsi and mpath storage pools to work in a usable and consistent manner. I have two storage pools defined on the host machine, one for raw iscsi- devices and one for those same iscsi devices device-mapped by multipath. They look like this: <pool type='iscsi'> <name>iscsi01</name> <source> <host name='10.3.1.15'/> <device path='iqn.1984-05.com.dell:powervault.md3200i.6782bcb0000859f3000000004d3eec7d'/> </source> <target> <path>/dev/disk/by-id</path> </target> </pool> and: <pool type="mpath"> <name>mpath01</name> <target> <path>/dev/mapper</path> </target> </pool> I chose <path>/dev/disk/by-id</path> over /dev/disk/by-path for the iscsi pool because I need to be able to migrate running virtual machines to other hosts, so the actual device paths for the disks need to be the same on all hosts in the cluster. I have two LUNs configured in the iSCSI array, and when I list the volumes in the iscsi pool, I get this: virsh # vol-list iscsi01 Name Pfad ----------------------------------------- 23.0.0.1 /dev/disk/by-id/wwn-0x6782bcb0000859f3000007004e680190 23.0.0.2 /dev/disk/by-id/scsi-36782bcb0000859f3000007294e6e73f2 Apparently, for some weird reason, libvirt chooses one naming scheme for one of the volumes and another for the other one. This a problem for me for two reasons. 1 - Once I create a new lun for a new VM, rescan the iscsi bus and refresh libvirt's pool (see my mail from 24th of August on this list), I need to be able to automatically and reliably identify the corresponding new volumes in libvirt's volume list, so I can initialize them by copying an OS image onto them and then assign them to the new virtual machine. This is made a lot harder if libvirt randomly switches between naming schemes - though still feasible if I'm aware of the problem. 2 - I need to be able to migrate running VMs to a different host machine, in case the current one is overloaded or in need of maintenance. This is bound to be problematic if the storage volumes go by different path names on the different hosts. Both LUNs do appear under both naming schemes under /dev/disk/by-id: ls /dev/disk/by-id/ [...] scsi-36782bcb0000859f3000007004e680190 [...] scsi-36782bcb0000859f3000007294e6e73f2 scsi-36a4badb00b0f910012e0fccb07606fe6 [...] wwn-0x6782bcb0000859f3000007004e680190 [...] wwn-0x6782bcb0000859f3000007294e6e73f2 wwn-0x6a4badb00b0f910012e0fccb07606fe6 [...] (snipped some irrelevant parts) With the mpath pool, it's even worse: One of the two volumes is completely missing: virsh # vol-list mpath01 Name Pfad ----------------------------------------- dm-3 /dev/mapper/36782bcb0000859f3000007004e680190 Both iscsi volumes have in fact been picked up by multipathd and do appear in /dev/mapper/, too, but no matter how often I say refresh-pool mpath01, it will always only show the one volume. Does anybody know of these problems or how to work around them? Are these problems solved in newer versions? (I could not find anyhting in the bugtracker...) Guido

2 2

[libvirt-users] Config Errro when Creating a virtual device attachment to backend
by huachao yao 15 Sep '11

15 Sep '11

Hi, buddy, I want to create a virtual device attachment to backend. The domain is running, and my code phase is as below: xmlConfiguration = "<devices><sound model='es1370'/></devices>"; virDomainAttachDevice(dom,xmlConfiguration); But the exception "libvir: Domain Config error : XML error: unknown device type " happen when running. Is it something wrong in the XML configuration? What should i do to deal with such Config error ? ps: the hypervisor is KVM.

2 1

Re: [libvirt-users] Libvirt daemon usage question
by Eric Blake 15 Sep '11

15 Sep '11

[let's keep the list in the loop] On 09/14/2011 04:07 PM, Trey Dockendorf wrote: >> Given your original qeustion, if your management apps really do require > 0.8.8 APIs, then you'll need to upgrade libvirtd on your CentOS host to be > at least 0.8.8 in order to honor your management app requests, or else > modify your management app to gracefully implement fallbacks to older API > approaches that were available in 0.8.1. >> > > How risky is it to implement a newer version of libvirt in something like > centos? I figure based on the huge number of dependencies that its not > something to safely do. So far we building my libvirt rpms Ive only used > the same source for the version with centos and the libvirt specs provided > in the fedora src rpms. Do the specs know to check for specific versions of > dependencies? There's not that many source dependencies for building a newer libvirt out-of-the-box on top of CentOS. You might also find https://fedoraproject.org/wiki/Virtualization_Preview_Repository as a useful example for the amount of effort involved in running newer virt tools on top of an otherwise stable repository. Also, search the list archives; the topic of installing the latest libvirt on CentOS or RHEL 5 has come up several times recently, with various tidbits of good advice. -- Eric Blake eblake(a)redhat.com +1-801-349-2682 Libvirt virtualization library http://libvirt.org

2 1

[libvirt-users] Libvirt daemon usage question
by Trey Dockendorf 14 Sep '11

14 Sep '11

I could use some help with clarification on the use of the libvirtd daemon with regards to managing remote KVM instances. Right now I have a CentOS 6 KVM server (libvirt-0.8.1), but would like to use some management applications that require higher version (0.8.8). First, is it possible to run the libvirtd daemon from within a VM, or does it require active kvm kernel module? Secondly, could a daemon running in say Fedora 15 (0.8.8) be used to communicate with my CentOS 6 daemon (0.8.1). Does this sort of model present a problem if the KVM host is not using the same or close to the same version as the remote libvirtd? My understanding of how to use libvirtd remotely is a bit weak, so any clarification would be greatly appreciated. Thanks - Trey

2 1

[libvirt-users] How to install libvirt 0.9.4 RPM on Fedora 14?
by Guido Winkelmann 14 Sep '11

14 Sep '11

Hi, I'm trying to install the newest version of libvirt and libvirt-client from the rpms at ftp://libvirt.org/libvirt/ on a Fedora 14 machine. The naming of the rpms as "libvirt-0.9.4-1.fc14.x86_64.rpm" suggests that this is exactly the system this was made for, however, installation still does not go smoothly. When I try to install these packages with yum install libvirt-client-0.9.4-1.fc14.x86_64.rpm \ libvirt-0.9.4-1.fc14.x86_64.rpm , some of the dependencies get resolved automatically, but not all of them, and I get these error messages: Error: Package: libvirt-0.9.4-1.fc14.x86_64 (/libvirt-0.9.4-1.fc14.x86_64) Requires: libblktapctl.so.1.0()(64bit) Error: Package: libvirt-client-0.9.4-1.fc14.x86_64 (/libvirt- client-0.9.4-1.fc14.x86_64) Requires: libnetcf.so.1(NETCF_1.4.0)(64bit) Error: Package: libvirt-0.9.4-1.fc14.x86_64 (/libvirt-0.9.4-1.fc14.x86_64) Requires: libnetcf.so.1(NETCF_1.4.0)(64bit) Apparently, I need newer versions of netcf-libs and xen-libs. Where do I get these from? There don't appear to be any official rpms or that for Fedora 14... Regards, Guido

3 3

[libvirt-users] using virsh (or something) to convert from KVM domain XML to vmx...
by Frank Hauptle 14 Sep '11

14 Sep '11

HI folks, For reasons I'd rather not go into (not my choice) we are moving our current virtual servers at the uni here, (using KVM and libvirt) to outsourced vmware ESX and vcenter. I really don't want to use the Vcenter Converter to create running esx vm's from within the KVM VM's as I feel that doing it within the client VM is inefficient and slow. Thus far however, I've not found anything that gives me any other alternatives. I thought perhaps the domxml-to-native virsh function demo'd at http://libvirt.org/drvesx.html#xmlexport would be the go, but that appears to be just a way to change from libvirt managed esx to native vmx. Converting the KVM raw img files to vmdk has been easy, converting the KVM domain XML to vmx appears to be impossible unless you do it by hand. Have I missed some cool/feature that would do this? Apologies if I'm going about this all wrong, What I know about vmware, I could write on the head of a pin with a felt tip pen.. kindest regards Frank UWA

1 0