March 2012 - Users - libvirt List Archives

[libvirt-users] virsh list not working with xen 4
by Rogério Vinhal Nunes 21 Sep '12

21 Sep '12

Hi, I'm having some trouble to get libvirt to show the correct power state of my virtual machines. I'm using Ubuntu 10.04 + Xen 4.1.1 + libvirt 0.8.8. virsh list --all only shows turned off machines registered in xend. If I turn them on, they just "disappear", and when I start machines directly from xml, they just doesn't appear at all. Libvirt is correctly connecting to xen as I can use the other commands fine, just the list option doesn't seem to work at all. What can I do to change that? # virsh version Compiled against library: libvir 0.8.8 Using library: libvir 0.8.8 Using API: Xen 3.0.1 Running hypervisor: Xen 4.1.0

2 1

[libvirt-users] converting save/dump output into physical memory image
by Andrew Tappert 04 Jun '12

04 Jun '12

A lot of people in the security community, myself included, are interested in memory forensics these days. Virtualization is a natural fit with memory forensics because it allows one to get access to a guest's memory without having to introduce any extra software into the guest or otherwise interfere with it. Incident responders are particularly interested in getting memory dumps from systems they're investigating. Virsh has "save" and "dump" commands for storing the state of a guest to a file on disk, but memory of KVM guests doesn't get saved in the "standard" input format for memory forensics tools, which is a raw physical memory image. (This is what you'd get via the classical "dd /dev/mem" approach or the contemporary equivalent using the crash driver; and VMware Server and Workstation produce .vmem files, which are such raw physical memory images, when a guest is paused or snapshotted.) In order to analyze the memory of Libvirt/KVM guests with my Linux memory forensics software, Second Look, I've created a tool for converting Libvirt-QEMU-save files (output of virsh save command) or QEMU-savevm files (output of virsh dump command) to raw physical memory images. I've got a basic working capability, though I'm still tracking down some problems with a guest allocated 8GB RAM--not all the memory seems to be present in the save or dump file. And I haven't tested very extensively yet, version support is limited to what I myself am currently running, etc. I'd like to know if this is a capability that others are interested in. Is this something that would be of interest to the Libvirt project if I were to contribute the code, or to the KVM project, or do you think it best exists as a separate project? I've also got a proof-of-concept tool for converting hibernate images to raw physical memory images. Perhaps a collection of tools for converting various memory dump formats would be a good project. Anyone else interested in this kind of stuff? As an author of commercial memory forensics software I've got a vested interest in availability of good memory acquisition capabilities. But there are a number of people working on FOSS Linux memory analysis tools, too... Andrew

4 5

[libvirt-users] Thread-safety issues with vbox driver ?
by Jean-Baptiste Rouault 19 Apr '12

19 Apr '12

Hi, I'm experiencing weird things with the vbox driver when using multiple threads. Following is the snippet of code I experience problems with /*****************************************************/ #include <stdlib.h> #include <stdio.h> #include <pthread.h> #include <libvirt/libvirt.h> void *create_and_destroy(void *arg) { virDomainPtr dom = (virDomainPtr)arg; char buf[VIR_UUID_STRING_BUFLEN]; virDomainGetUUIDString(dom, buf); if (virDomainCreate(dom) != 0) { printf("failed to start %s\n", buf); goto end; } printf("%s started\n", buf); if (virDomainDestroy(dom) != 0) { printf("failed to destroy %s\n", buf); } printf("%s destroyed\n", buf); end: virDomainFree(dom); pthread_exit(NULL); } int main(int argc, char **argv) { virConnectPtr conn = virConnectOpen("vbox:///session"); int i; int count = virConnectNumOfDefinedDomains(conn); char **names = malloc(count * sizeof(char *)); virConnectListDefinedDomains(conn, names, count); virDomainPtr *doms = malloc(count * sizeof(virDomainPtr)); for (i = 0 ; i < count ; ++i) { doms[i] = virDomainLookupByName(conn, names[i]); } pthread_t *threads = malloc(count * sizeof(pthread_t)); pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setdetachstate(&attr, PTHREAD_CREATE_JOINABLE); for (i = 0 ; i < count ; ++i) { pthread_create(&threads[i], &attr, create_and_destroy, (void *)doms[i]); } pthread_attr_destroy(&attr); for (i = 0 ; i < count ; ++i) { pthread_join(threads[i], NULL); } virConnectClose(conn); pthread_exit(NULL); } /************************************************/ Here is the output of the program with 2 defined domains: > libvir: VBOX error : operation failed: OpenRemoteSession/LaunchVMProcess failed, domain can't be started > failed to start c538c89a-70da-42ab-a88a-5aeb15698c12 > 034cf837-abe7-4c48-8373-0ddcf480d416 started > 034cf837-abe7-4c48-8373-0ddcf480d416 destroyed Sometimes the first domain really fails to start, but sometimes it starts correctly but libvirt reports an error. Sometimes domains aren't destroyed but libvirt reports no error at all. If there is only one domain, no problem occurs at all. I also tried the same code (ie with multiple domains) but with only one thread and it works well. I managed to reproduce these issues with libvirt 0.9.4, 0.9.7, using VirtualBox 4.0 and 4.1. -- Jean-Baptiste ROUAULT Ingénieur R&D - diateam : Architectes de l'information Phone : +33 (0)9 53 16 02 70 Fax : +33 (0)2 98 050 051

3 6

[libvirt-users] [API reference] confused by CPU time term
by Zhihua Che 16 Apr '12

16 Apr '12

Hi, everyone I'm writing a virtual machine monitor based on libvirt. As I read the api reference, I found I'm confused by some terms. 1, What is cumulative I/O wait CPU time? API reference says that VIR_NODE_CPU_STATS_IOWAIT indicate cumulative I/O wait CPU time. I'm confused by this time. As far as I know, when cpu meets IO wait situation, it will schedule another task, so, how this IO wait time is accounted? 2, How do I get VCPU runtime? In my mind, VIR_DOMAIN_CPU_STATS_CPUTIME indicates the physical cpu time consumed by the domain. Is there any API by which I can query virtual CPU running stats in one domain?

3 3

[libvirt-users] PCI passthrough error
by Jaap Winius 10 Apr '12

10 Apr '12

Hi folks, Has anyone encountered the following PCI passthrough error? error: internal error Process exited while reading console \ log output: char device redirected to /dev/pts/1 assigned_dev_pci_read: pread failed, ret = 0 errno = 2 It's produced after I've detached the PCI device from the base OS and have tried to start up the guest domain. To get to this point, I mostly followed these instructions: http://docs.fedoraproject.org/en-US/Fedora/13/html/Virtualization_Guide/cha… The distro I'm using is Debian squeeze, which by default comes with libvirt 0.8.3 and qemu-kvm 0.12.5, although to avoid a different PCI passthrough error, I used Debian backports for squeeze to upgrade them to libvirt 0.9.8 and qemu-kvm 1.0. The motherboard involved has VT-d support, which I've enabled with the "intel_iommu=on" kernel option (dmesg shows "Intel-IOMMU: enabled"). I did not bother with setsebool because SELinux is disabled. According to lspci, the device I want to pass through to the guest domain, a USB controller, has bus/slot/function 00:1a.0, so I added the following stanza to the <devices> section of my guest domain: <hostdev mode='subsystem' type='pci' managed='yes'> <source> <address domain='0x0000' bus='0x00' slot='0x1a' function='0x0'/> </source> </hostdev> Actually, every time I save this configuration, libvirt changes it to: <hostdev mode='subsystem' type='pci' managed='yes'> <source> <address domain='0x0000' bus='0x00' slot='0x1a' function='0x0'/> </source> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </hostdev> Huh, slot 5? I don't have any PCI devices that use slot 5. Well, at least the system doesn't complain, but I worry that this might be a symptom of something more serious. Anyway, I'd be very grateful if anyone has any tips on how I might avoid the aforementioned error and get PCI passthrough to to work. Thanks, Jaap

2 3

[libvirt-users] Suggestions on building VM disks from scratch
by Dale Amon 03 Apr '12

03 Apr '12

This may not be the best forum to ask, but it does seem to be one where it is as likely as anywhere that someone will have dealt with a similar problem. I need to define a procedure for last resort disaster recovery from an incremental file level backup of the root partition (and any others that are critical.) Now it is easy enough to create a raw virtual disk with dd, then to losetup and do a cfdisk and mkfs, then mount it and rsync the backup onto it. At this point I would like to be able to install grub and make the virtual disk bootable. I have 'issues' with the way grub does things and the way it seems to make certain assumptions for you. The virtual disk is in actuality going to become an hd(0) on the virtual machine; but my past experience with grub is that it is going to assume you really intend to install the MBR on your running system disk; but if you tell it hd(1) then when you try to boot it ain't gonna work. Has anyone dealt with these issues? It's more than just a VM one; I run up against it time and again. A few months ago I attempted to attach a brand new SATA disk via a USB converter to my laptop so I could build a system on it for a machine that has not CD, no floppy, etc, etc. I damn near clobbered my laptop but fortunately caught the problem in time and fixed it before a reboot... in which case I'd have *really* had issues.

2 4

[libvirt-users] virsh - specifying openvz vm sample in domain creation xml
by Jamshaid 31 Mar '12

31 Mar '12

Hello I need to specify the "vm sample name" in domain creation xml. This is the option which is provided to vzctl wtih --config parameter, I can see that in openvz_driver.c there is below code ..... if ((vmdef->profile && *(vmdef->profile))) { ADD_ARG_LIT("--config"); ADD_ARG_LIT(vmdef->profile); } But i am not sure what to put in "domain creation xml" to avail that option ? I cant find anything about it in documentation or around google. Regards James

1 0

[libvirt-users] Libvirt source code cannot built with libnettle.
by Chatsiri Ratana 31 Mar '12

31 Mar '12

Hello All, I try to build dependency library name is gnutls which require by libvirt, but show error us below. $./configure checking for shared library run path origin... done checking whether to use nettle... yes checking for libnettle... no configure: error: *** *** Libnettle 2.4 was not found. I specify macros are LD_LIBRARY_PATH=$LD_LIBRARY_PATH/path_of_nettle_2.4/lib and "PATH:path_of_nettle_2.4/bin/:$PATH" on ~/.bashrc . Why show an errors for requiring libnettle version 2.4? VIM command line for show data in config.log. it's show as below. 739 | #define __EXTENSIONS__ 1 740 | #define _ALL_SOURCE 1 741 | #define _DARWIN_C_SOURCE 1 742 | #define _GNU_SOURCE 1 743 | #define _POSIX_PTHREAD_SEMANTICS 1 744 | #define _TANDEM_SOURCE 1 745 | #define HAVE_FSEEKO 1 746 | #define STDC_HEADERS 1 747 | /* end confdefs.h. */ 748 | #include <nettle/ripemd160.h> 749 | int 750 | main () 751 | { 752 | ripemd160_init (0) 753 | ; 754 | return 0; 755 | } 756 configure:8887: result: no 757 configure:8913: error: 758 *** 759 *** Libnettle 2.4 was not found. Best Regards, Chatsiri Rattana. -- :-------------------------------------------------------- http://about.me/chatsiri.ratana

3 2

[libvirt-users] vzctl 3.1 not supported in virsh ?
by Jamshaid 31 Mar '12

31 Mar '12

Hello If i use virsh with vzctl 3.1 i get below error virsh -c openvz:///system error: /Could not extract vzctl version It works ok with vzctl 3.0.x Is there any way i can use virsh with vzctl 3.1 ? ---------------------------------------------------------------- [root@test ~]# /usr/bin/virsh --version=long Virsh command line tool of libvirt 0.9.11 See web site at http://libvirt.org/ Compiled with support for: Hypervisors: QEmu/KVM UML OpenVZ VirtualBox Test Networking: Remote Daemon Network Bridging Nwfilter Storage: Dir Filesystem SCSI Multipath iSCSI LVM Miscellaneous: Secrets Debug -------------------------------------------------------- [root@test ~]# vzctl --version vzctl version 3.1 -------------------------------------------------------- Regards James /

2 2

[libvirt-users] virsh create failed: cannot set CPU affinity on process 0
by 杨镭 30 Mar '12

30 Mar '12

Hello Everyone: We can't create vm on a physical server with 64 CPU(as reported by /proc/cpuinfo). The error message is: "cannot set CPU affinity on process 0" The following is the capabilities detected by libvirt: <arch>x86_64</arch> <model>Westmere</model> <vendor>Intel</vendor> <topology sockets='4' cores='10' threads='2'/> I wonder if libvirt uses incorrect CPU topology information to set process affinity which lead to the error above.

2 1

[libvirt-users] Specifying the KVM binary to use with libvirt
by Alexander Lyakas 30 Mar '12

30 Mar '12

Greetings everybody, I am running stock ubuntu-natty with kernel 2.6.38-8, KVM 0.14.0 and libvirt 0.8.8. I am spawning virtual machines with libvirt. I would like to test a new KVM version built aside without installing it over existing KVM. Is there a way to tell libvirt which KVM binary to pick up? I've been searching and saw that QEMU driver looks in /usr/bin for KVM executable. Is there a way to adjust that? Thanks, Alex.

2 2

[libvirt-users] Constantly changing USB product ID
by Jaap Winius 29 Mar '12

29 Mar '12

Hi folks, Recently I learned how to configure libvirt with USB pass-though functionality. In my case I configured my guest domain with this block of code: <hostdev mode='subsystem' type='usb' managed='yes'> <source> <vendor id='0x0c93'/> <product id='0x1772'/> <address bus='1' device='4'/> </source> </hostdev> At first this worked fine, but then later the guest domain refused to start because the USB device was absent. When I checked, I found that its product ID had mysteriously changed to 1771. Later it was back at 1772. Now it appears that the USB device I am dealing with has a product ID that changes back and forth between 1771 and 1772 at random. Apparently, the Windows program running on the guest domain is designed to deal with this nonsense, but the question is, Can the guest domain be configured to deal with it? Something like <product id='0x177?'/> would be useful, but that doesn't work, nor does omitting the product tag. Any ideas would be much appreciated. Thanks, Jaap

1 2

[libvirt-users] Problems with nwfilters/iptables
by Nicolai Stange 29 Mar '12

29 Mar '12

Hi all, I've got a problem with nwfilters/iptables. For one of my guest's interfaces, I have established the following filter: --8<---------------cut here---------------start------------->8--- <filter name='p-mgmt' chain='root'> <uuid>94fdd15b-b380-ba8c-6685-91206829adc7</uuid> <filterref filter='clean-traffic'/> <rule action='accept' direction='in' priority='500'> <tcp dstportstart='22'/> </rule> <rule action='drop' direction='inout' priority='1000'> <all/> </rule> </filter> </filter>--8<---------------cut here---------------end--------------->8--- The intent is to allow incoming ssh only. However, ssh from my host to my guest does not work. This is the relevant iptables excerpt with the filter given as above: --8<---------------cut here---------------start------------->8--- root:~# iptables -L HI-vnet5 Chain HI-vnet5 (1 references) target prot opt source destination RETURN tcp -- anywhere anywhere tcp spt:ssh state ESTABLISHED ctdir ORIGINAL DROP all -- anywhere anywhere root:~# --8<---------------cut here---------------end--------------->8--- The chain relations are: INPUT -> libvirt-host-in -> HI-vnet5. The interesting thing is: If I insert the same rule again, but with ctdir reversed, everything works just fine: --8<---------------cut here---------------start------------->8--- root:~# iptables -I HI-vnet5 1 -p tcp --sport 22 -m state --state ESTABLISHED -m conntrack --ctdir REPLY -j RETURN root:~# iptables -L HI-vnet5 Chain HI-vnet5 (1 references) target prot opt source destination RETURN tcp -- anywhere anywhere tcp spt:ssh state ESTABLISHED ctdir REPLY RETURN tcp -- anywhere anywhere tcp spt:ssh state ESTABLISHED ctdir ORIGINAL DROP all -- anywhere anywhere root:~# --8<---------------cut here---------------end--------------->8--- I am not an iptables expert, but if my guest's ssh daemon replies to my host's requests (and thus the packets are traversing my host's INPUT chain), I would guess that the direction is "REPLY" rather than "ORIGINAL". I'm really stuck with this and it would be really great if someone could clarify things to me! I'm running Ubuntu 12.04 (kernel 3.2.0-20-generic) coming with libvirt 0.9.8-2ubuntu1. Best, Nicolai

1 0

[libvirt-users] Problem using virt-manager to create a VM remotely
by Dale Amon 28 Mar '12

28 Mar '12

Well, not that remote. I'm trying to get it working from my laptop to an ancient workstation behind me I use for testing. I appear to get the connection okay. virt-manager --connect qemu+ssh://root@<host_ip>/system I can click on the entry on the panel that comes up and see facts about the remote machine. I then tried the "Create a new virtual machine" item on the tool bar. Fine so far. I get a nice looking panel for New VM and since this is just an experiment, I call it "test". The correct Connection is showing, ie the host ip (QEMU). I accept the default "Local install media (ISO or CDROM)" and go to the next panel. I take the "Use ISO Image" and then give it the full directory path and name of the iso on the remote machine <host_ip>. I have tried leaving OS Type and version Generic; I have also tried setting them to match the iso (an 11.10 i386 server). When I attempt to go forward, it gives me an error panel, "Error Setting install media location. Checking installer location failed: Could not find media '/KdevArchive1/ubuntu-11.10-server-i386.iso' On the off chance that it was trying to mount the iso from my laptop instead of the test machine, I have also tried pointing to the path of the same iso there as well with no joy. I am finding very little documentation on the GUI mode and none of it seems to give me any indication of what is going wrong. Ideas?

2 2

[libvirt-users] ARP entry intermittently is incorrect for guest - lose connectivity
by Trey Dockendorf 28 Mar '12

28 Mar '12

I've run into a problem on my KVM host where a single guest will be unreachable to other guests on the same host. This host has 2 bridged devices and guests assigned to each have the same issue. I've noticed that when I can't reach the problematic guest, the ARP entry for that system is incorrect. This issue seems to only be a problem about 75% of the time when making connections between the guests. I've checked the logs and haven't seen anything indicating a problem. Here's relavant information, if more is needed please let me know CentOS 6.2 x86_64 libvirt-0.9.4-23.el6_2.4 kernel-2.6.32-220.4.1.el6 # brctl show bridge name bridge id STP enabled interfaces br0 8000.001b21a1cf76 no eth3 vnet0 # Problematic host vnet1 vnet3 vnet4 vnet5 br1 8000.001b21a1ce4d no eth2 vnet6 virbr0 8000.525400a050ba yes virbr0-nic vnet2 # ARP entry when it's the correct MAC <omitted>.tamu.edu ether 52:54:00:e0:1e:6f C eth0 # ARP entry when it's wrong and ping or other connections time out <omitted>.tamu.edu ether 00:1e:c9:bb:cd:d4 C eth0 The MAC ending in cd:d4 does not exist on any system on this network. I've confirmed this with my campus IT who manages the switches and routers. # cat ifcfg-eth3 DEVICE="eth3" HWADDR="00:1B:21:A1:CF:76" NM_CONTROLLED="no" ONBOOT="yes" BRIDGE="br0" # cat ifcfg-br0 DEVICE="br0" ONBOOT="yes" TYPE=Bridge IPADDR="<omitted>" NETMASK="255.255.255.192" GATEWAY="<omitted>" DOMAIN="tamu.edu" # service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot opt source destination 13 ACCEPT tcp -- <omitted> 0.0.0.0/0 multiport dports 10050 /* 001 zabbix agent port */ 14 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 16 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67 17 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16509 19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16514 20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpts:8002:8012 21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:3493 22 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 23 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 24 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 26 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED 2 ACCEPT all -- 192.168.122.0/24 0.0.0.0/0 3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 4 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 5 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 6 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-is-bridged 7 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) num target prot opt source destination Table: mangle Chain PREROUTING (policy ACCEPT) num target prot opt source destination Chain INPUT (policy ACCEPT) num target prot opt source destination Chain FORWARD (policy ACCEPT) num target prot opt source destination Chain OUTPUT (policy ACCEPT) num target prot opt source destination Chain POSTROUTING (policy ACCEPT) num target prot opt source destination 1 CHECKSUM udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:68 CHECKSUM fill Table: nat Chain PREROUTING (policy ACCEPT) num target prot opt source destination Chain POSTROUTING (policy ACCEPT) num target prot opt source destination 1 MASQUERADE tcp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535 2 MASQUERADE udp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535 3 MASQUERADE all -- 192.168.122.0/24 !192.168.122.0/24 Chain OUTPUT (policy ACCEPT) num target prot opt source destination Thanks - Trey

1 0

[libvirt-users] VM Migration error: got unknown HTTP error code
by vipul borikar 28 Mar '12

28 Mar '12

Hi, I am trying to migrate Fedora12 VM from one RHEL 5.5 host to another RHEL 5.5 Host running Xen Hypervisor I am getting the error : error: got unknown HTTP error code -599690112 I have enabled the (xend-relocation-server yes) on the destination machine. I am able to telnet the 8002 default port from source machine but the connection drops down immediately. I have stopped the firewall on both the machines. I am attaching the Debug log of for libvirt command : virsh -c xen:/// migrate Fedora12 xen://megha/ Any Ideas??? -- Thanks Vipul Borikar "Our task must be to free ourselves...by widening our circle of compassion to embrace all living creatures and the whole of nature and its beauty."

1 0

[libvirt-users] qemu-monitor-command
by Shawn Davis 27 Mar '12

27 Mar '12

Hello Everyone, I am working on a grad school project for virtual introspection. I have a vm running (with 512mb of memory) and want to access the pmemsave function through virsh with the qemu-monitor-command. I am typing the following: virsh qemu-monitor-command --hmp Shawn 'pmemsave 0 536870912 image.dump' Shawn is the name of my vm and image.dump is the name of my output file. No matter what I do, I keep getting: Could not open 'image.dump' I have tried the above with sudo and with the absolute path of where the newly created dump file should go and I still get that error. Any help is appreciated as to how I should enter this command. If I type in virsh qemu-monitor-command --hmp Shawn 'info mem' or any other command without an output path, it works fine and brings up information about my running vm. Regards, Shawn

4 18

[libvirt-users] Cant Update libvirt on fedora 15 i686
by siddharth jain 27 Mar '12

27 Mar '12

I am running Fedora15 on a i386 machine, and using libvirt 0.8.7. I cant update libvirt to 0.9.10 as they have not released 0.9.10 for i386 or i686 machines. need help . -- Siddharth Jain Final year,B.Tech Computer Engineering M.N.I.T Jaipur

3 3

[libvirt-users] simulate "network cable unplugged"
by David Mansfield 26 Mar '12

26 Mar '12

Hi All, Using the virt-manager/libvirtd/qemu-kvm stack (centos 6), is it possible to leave a NIC "installed" but cause it to simulate that the network cable is unplugged? Preferably this could be "hot" plugged/unplugged but otherwise doing it cold. Guest os is also centos 6, in case it matters (shouldn't). Any pointers? Thanks, David Mansfield Cobite, INC.

2 1

Re: [libvirt-users] [libvirt] Problem with Open vSwitch and dnsmasq
by Daniele Milani 26 Mar '12

26 Mar '12

Date: Thu, 22 Mar 2012 11:43:03 -0700 Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq From: aatteka(a)nicira.com To: dano1988(a)hotmail.it CC: libvir-list(a)redhat.com; roberto.sassu(a)polito.it; paolo.smiraglia(a)polito.it; dev(a)openvswitch.org On Thu, Mar 22, 2012 at 11:11 AM, Daniele Milani <dano1988(a)hotmail.it> wrote: I think I could try the first solution. Can you explain me how do I create the port used by dnsmasq? For example, is it correct to execute # ovs-vsctl add-port virbr1 port2 tag=2 to create a port for the vLan whose tag is 2 named "port2"? Try something like this: ovs-vsctl add-port virbr1 port2 tag=2 ovs-vsctl set Interface port2 type=internal ifconfig port2 10.0.0.1 ifconfig port2 up /usr/sbin/dnsmasq --strict-order --bind-interfaces --except-interface lo --listen-address 10.0.0.1 --dhcp-range 10.0.0.10,10.0.0.20 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/vlan2.leases --dhcp-lease-max=253 --dhcp-no-override Though I have not tested it... I tried the configuration you suggest; and the request is now received by dnsmasq. I executed: ifconfig port2 192.168.100.128 netmask 255.255.255.0 ifconfig port2 up /usr/sbin/dnsmasq --strict-order --bind-interfaces --except-interface lo --listen-address 192.168.100.128 --dhcp-range 192.168.100.129,192.168.100.139 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/vlan2.leases --dhcp-lease-max=11 --dhcp-no-override --log-queries --log-facilities=/path_to_my_file/my_file tailf /path_to_my_file/my_file obtaining the following output: dnsmasq-dhcp[]: DHCPDISCOVER(port2) 52:94:00:02:a7:1e dnsmasq-dhcp[]: DHCPOFFER(port2) 192.168.100.129 52:94:00:02:a7:1e ... dnsmasq-dhcp[]: DHCPDISCOVER(port2) 52:94:00:02:a7:1e dnsmasq-dhcp[]: DHCPOFFER(port2) 192.168.100.129 52:94:00:02:a7:1e ... Now I have a different problem: none DHCP Offer is sent by port2. Do someone know why does it happen and what to do about it? Thanks, Daniele Milani Daniele Milani Date: Thu, 22 Mar 2012 10:54:21 -0700 Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq From: aatteka(a)nicira.com To: dano1988(a)hotmail.it CC: libvir-list(a)redhat.com; roberto.sassu(a)polito.it On Thu, Mar 22, 2012 at 6:10 AM, Daniele Milani <dano1988(a)hotmail.it> wrote: Dear all, I have the following situation: -I replaced the standard bridge driver with the Open VSwitch one; -I started a NAT-network on Libvirt (bridge name virbr1); -I started a Virtual Machine (VM1) on Libvirt, and I tagged his interface (vnet0) with tag=2; -if I run "# ovs-vsctl show" I obtain: Bridge "virbr1" Port "vnet0" tag: 2 Interface "vnet0" Port "virbr1-nic" Interface "virb1-nic" Port "virbr1" Interface "virbr1" type: internal -the problem is that it is impossible to assign to VM1 an IP, because the dnsmasq daemon does not accept the tagged DHCP Discover frame. Does someone know if there is a way for dnsmasq to accept tagged frames through "virbr1", and send a tagged DHCP Offer packet back to VM1? I believe you would need to run dedicated dnsmasq process instance per each VLAN that you have. By default I guess dnsmasq runs on virbr1, hence it does not see the tagged traffic that comes from vnet0. You could try to: add another port to that bridge with the same VLAN as VM has. And run a separate instance of dnsmasq there; or change the tag of virb1 port, but this might lead to other issues (e.g. then non-tagged VMs will not get DHCP leases). Perhaps someone else can suggest something easier... Greetings, Daniele Milani -- libvir-list mailing list libvir-list(a)redhat.com https://www.redhat.com/mailman/listinfo/libvir-list

2 5

[libvirt-users] Where can I get curl-devel version >=7.18.0 . libvirt 0.9.10 compile error with ESX in CentOs
by li_fuqiong 26 Mar '12

26 Mar '12

To whom maybe concerned: I compile libvirt 0.9.10 in Centos. Command as follows: cd libvirt-0.9.10 ./configure --with-esx throw exception "configure: error: libcurl >= 7.18.0 is required for the ESX driver " yum install curl-devel: but the version is 7.15.5, is older than 7.18.0. Please Help: where can i get curl-devel version>-7.18.0? Thank you. Mark

2 1

[libvirt-users] 转发: Error when executing virsh command to ESX
by li_fuqiong 26 Mar '12

26 Mar '12

To Whom It May concern: I found that the following error is caused by adding a scsi disk to install the os, I remove the scsi disk and the error remove but still report 'out of memory': virsh # dumpxml win2003_122 internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # list --all Id Name State ---------------------------------- 80 win2003_122 running - winxp121 shut off virsh # nodeinfo error: failed to get node information error: out of memory virsh # dumpxml win2003_122 error: out of memory li_fuqiong 发件人： li_fuqiong 发送时间： 2012-03-21 15:24 收件人： libvirt-users 主题： Error when executing virsh command to ESX To Whom It May Concern: I use virsh windows 0.9.3 to connect an esx server 4.0 with no_verify=1. The Esx server is intel 2 x 3.19 GHZ CPU, 8G memroy and 2 TB hard disk. following is my execute commands and results. virsh -c esx://xxx.xxx.xxx.x?no_verify=1 virsh # list all Id Name State ---------------------------------- 80 win2003_122 running virsh # nodeinfo error: failed to get node information error: out of memory virsh # dumpxml win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # edit win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # destroy win2003_122 Domain win2003_122 destroyed virsh # start win2003_122 Domain win2003_122 started virsh # edit win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' question: 1.Why error when executeing dumpxml and edit command? How to fix it? 2.Why out of memory when nodeinfo. How to fix it? I have only one test vm on my esx server. Thanks in advance. Mark

3 4

Re: [libvirt-users] [libvirt] Problem with Open vSwitch and dnsmasq
by Daniele Milani 23 Mar '12

23 Mar '12

> Date: Thu, 22 Mar 2012 15:11:44 -0400 > From: laine(a)laine.org > To: libvir-list(a)redhat.com > Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq > > On 03/22/2012 09:10 AM, Daniele Milani wrote: > > Dear all, > > I have the following situation: > > -I replaced the standard bridge driver with the Open VSwitch one; > > I'm curious what you mean by this. > > libvirt's virtual networks currently only support the standard linux > bridge device. There is no code in libvirt to use openvswitch devices > for libvirt's virtual networks. The openvswitch support in libvirt only > applies to guest devices that use <interface type='bridge'>. > > >From your message, it sounds like there is a driver that that replaces > the linux host bridge driver with something that emulates that driver, > but is actually an openvswitch bridge on the backend. I hadn't > previously heard of this. > I did it by installing Open vSwitch with kernel modules: % ./configure --with-linux=/lib/modules/`uname -r`/build after that I replaced the standard linux bridge driver by executing: % rmmod bridge % insmod datapath/linux/brcompat.ko% ovs-brcompatd --pidfile --detachyou can find all this information at: http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob_plain;f=INST… http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob_plain;f=INST… Daniele Milani > > > -I started a NAT-network on Libvirt (bridge name virbr1); > > -I started a Virtual Machine (VM1) on Libvirt, and I tagged his > > interface (vnet0) with tag=2; > > -if I run "# ovs-vsctl show" I obtain: > > > > Bridge "virbr1" > > Port "vnet0" > > tag: 2 > > Interface "vnet0" > > Port "virbr1-nic" > > Interface "virb1-nic" > > Port "virbr1" > > Interface "virbr1" > > type: internal > > > > -the problem is that it is impossible to assign to VM1 an IP, because > > the dnsmasq daemon does not accept the tagged DHCP Discover frame. > > > > Does someone know if there is a way for dnsmasq to accept tagged > > frames through "virbr1", and send a tagged DHCP Offer packet back to VM1? > > > -- > libvir-list mailing list > libvir-list(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvir-list

1 0

[libvirt-users] HDD- and NIC-stats for dom0
by inge85＠web.de 22 Mar '12

22 Mar '12

1 0

Re: [libvirt-users] [libvirt] Problem with Open vSwitch and dnsmasq
by Laine Stump 22 Mar '12

22 Mar '12

(Cc'ing to libvirt-users(a)redhat.com) On 03/22/2012 02:43 PM, Ansis Atteka wrote: > > > On Thu, Mar 22, 2012 at 11:11 AM, Daniele Milani <dano1988(a)hotmail.it > <mailto:dano1988@hotmail.it>> wrote: > > I think I could try the first solution. Can you explain me how do > I create the port used by dnsmasq? > > For example, is it correct to execute > # ovs-vsctl add-port virbr1 port2 tag=2 > to create a port for the vLan whose tag is 2 named "port2"? > > > Try something like this: > > ovs-vsctl add-port virbr1 port2 tag=2 > ovs-vsctl set Interface port2 type=internal > ifconfig port2 10.0.0.1 > ifconfig port2 up > /usr/sbin/dnsmasq --strict-order --bind-interfaces > --except-interface lo --listen-address 10.0.0.1 --dhcp-range > 10.0.0.10,10.0.0.20 > --dhcp-leasefile=/var/lib/libvirt/dnsmasq/vlan2.leases > --dhcp-lease-max=253 --dhcp-no-override > By the time you are doing this much stuff outside of libvirt, I think it would really be better to not use a libvirt virtual network at all, since libvirt is likely to do things to that network that would end up breaking the config you've done outside of libvirt. Instead, just use the host OS configuration files to create the bridge, add the tagged port, run dnsmasq, etc., then use <interface type='bridge'> in the guest rather than <interface type='network'> > Though I have not tested it... > > > Daniele Milani > > > Date: Thu, 22 Mar 2012 10:54:21 -0700 > Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq > From: aatteka(a)nicira.com <mailto:aatteka@nicira.com> > To: dano1988(a)hotmail.it <mailto:dano1988@hotmail.it> > CC: libvir-list(a)redhat.com <mailto:libvir-list@redhat.com>; > roberto.sassu(a)polito.it <mailto:roberto.sassu@polito.it> > > > > > On Thu, Mar 22, 2012 at 6:10 AM, Daniele Milani > <dano1988(a)hotmail.it <mailto:dano1988@hotmail.it>> wrote: > > Dear all, > I have the following situation: > -I replaced the standard bridge driver with the Open VSwitch one; > -I started a NAT-network on Libvirt (bridge name virbr1); > -I started a Virtual Machine (VM1) on Libvirt, and I tagged > his interface (vnet0) with tag=2; > -if I run "# ovs-vsctl show" I obtain: > > Bridge "virbr1" > Port "vnet0" > tag: 2 > Interface "vnet0" > Port "virbr1-nic" > Interface "virb1-nic" > Port "virbr1" > Interface "virbr1" > type: internal > > -the problem is that it is impossible to assign to VM1 an IP, > because the dnsmasq daemon does not accept the tagged DHCP > Discover frame. > > Does someone know if there is a way for dnsmasq to accept > tagged frames through "virbr1", and send a tagged DHCP Offer > packet back to VM1? > > I believe you would need to run dedicated dnsmasq process instance > per each VLAN that you have. By > default I guess dnsmasq runs on virbr1, hence it does not see the > tagged traffic that comes from vnet0. > > You could try to: > > 1. add another port to that bridge with the same VLAN as VM has. > And run a separate instance of dnsmasq there; or > > > > > change the tag of virb1 port, but this might lead to other issues > (e.g. then non-tagged VMs will not get DHCP leases). > Perhaps someone else can suggest something easier... > > Greetings, > Daniele Milani > > > -- > libvir-list mailing list > libvir-list(a)redhat.com <mailto:libvir-list@redhat.com> > https://www.redhat.com/mailman/listinfo/libvir-list > > > > > > -- > libvir-list mailing list > libvir-list(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvir-list

1 0