March 2011 - Users - libvirt List Archives

[libvirt-users] bridge and route without IP
by Robert Šmol 02 Apr '11

02 Apr '11

Hi, I want to forward all traffic received on eth1 into virtual domain 'firewall' (where I want to configure public IP+shorewall) I've created following network: node002 qemu # cat networks/int-001.xml <network> <name>int-001</name> <bridge name="intbr0" /> <forward mode="route" device="eth1"/> </network> virsh # net-create networks/int-001.xml error: Failed to create network from networks/int-001.xml error: internal error Forwarding requested, but no IP address provided But wan to set the public IP on the Firewall side. How do I do that? Would the macvtap help me? Regards, Robert -- stereoIT - Open Source Technology Partners http://www.stereoit.com mobile: +420 776 762378

2 1

[libvirt-users] ANNOUNCE: oz 0.3.0 release
by Chris Lalancette 01 Apr '11

01 Apr '11

All, I'm pleased to announce release 0.3.0 of Oz. Oz is a program for doing automated installation of guest operating systems with limited input from the user. Release 0.3.0 is mostly a bugfix release for Oz. However, there are also a few minor features included as well. Some of the highlights between Oz 0.2.0 and 0.3.0 are: - Add the ability to specify the output directory for screenshots (the default is still CWD). - Add the ability to specify the bridge to use for installs (the default is still the first libvirt NAT bridge on the system). - Nicer error messages from the command-line tools when debugging is off. - Add the ability to install Debian 5 and 6. - Detect servers that can't possibly work for installing RedHat/Fedora OSs, and fail the install. - Allow installs with spaces in the name. - Add the ability to install OpenSUSE 11.4. More documentation on Oz is available here: http://aeolusproject.org/oz.html If you have any questions or comments about oz, please feel free to contact aeolus-devel(a)fedorahosted.org or me (clalance(a)redhat.com) directly. Thanks, -- Chris Lalancette

1 0

[libvirt-users] ESX networking functions
by James Barkley 01 Apr '11

01 Apr '11

Greeetings, Using the latest git snapshot I noticed that none of the networking functions are implemented in the ESX driver. No listing networks, no adding networks, etc. This functionality seems to be fully implemented for most of the other drivers and I don't see it on the "todo" wiki. Does anyone have an idea if/when this might get implemented? Would others be interested if I were to add it and submit it as a patch? -jb

2 2

[libvirt-users] How to disconnect the ISO image using virsh
by Masanari Iida 31 Mar '11

31 Mar '11

Hello, I can attach disc ISO image to cd-rom from virsh. And I can replace the ISO image from disc1 to disc2 using the 2nd example. (example) attach-disk guest01 /root/disc1.iso hdc --driver file --type cdrom --mode readonly attach-disk guest01 /root/disc2.iso hdc --driver file --type cdrom --mode readonly My question is, how can I disconnect the image from the cdrom drive using virsh. Because, if I try to detach-disk hdc, I got following errors. virsh # detach-disk guest01 hdc error: Failed to detach disk error: this function is not supported by the connection driver: This type of device cannot be hot unplugged What I can do is possible from virt-manager's "Disconnect" button, (next to source path: line) from Hardware's TAB, Disk hdc screen. I want to do this from virsh. OS: RHEL5.6 libvirt-0.8.2-15.el5_6.1 is used. Regards, Masanari Iida

3 3

[libvirt-users] block migration
by mkey 31 Mar '11

31 Mar '11

Hello, I'm trying to use block migration with below procedure, but got some errors. I would highly appreciate if anyone give me a hand.. There are 2 hosts(hostA and hostB), both OS is Ubuntu 10.10(merverick). And a VM(named centos54-1mg) is running at hostA(centos54 64bit). [package version] +++-=====================-=====================-=================== ii kvm 1:84+dfsg-0ubuntu16+0 dummy transitional ii libvirt-bin 0.8.8-1ubuntu3~ppamav the programs for ii qemu-common 0.14.0~rc1+noroms-0ub qemu common ii qemu-kvm 0.14.0~rc1+noroms-0ub Full virtualization [proceduere] root@hostA:~# /etc/init.d/apparmor teardown root@hostA:~# stop libvirt-bin && start libvirt-bin root@hostB:~# /etc/init.d/apparmor teardown root@hostB:~# stop libvirt-bin && start libvirt-bin root@hostB:~# touch /tmp/centos54-1mg.img root@hostB:~# chown -R libvirt-qemu:kvm /tmp/centos54-1mg.img root@hostA:~# virsh migrate --live --copy-storage-all --p2p --direct centos54-1mg qemu+tcp://hostB/system [NOTE] 1. What I was being careful is permission. Therefore, apparmor is off, libvirt is running as root. 2. normal live migration is successfully finished. So, libvirtd can communicate between hostA and hostB. 3. Regarding to options "--live --copy-storage-all --p2p --direct", I think --copy-storage-all is minimum, so I was trying to change pairs of options, but no good result. The error logs and configuration at hostB are attached. Thanks in advance mkey

1 0

[libvirt-users] Invitation to connect on LinkedIn
by Kadir Yuceer 30 Mar '11

30 Mar '11

LinkedIn ------------ I'd like to add you to my professional network on LinkedIn. - Kadir Kadir Yuceer Software Developer at Atos Consulting Turkey Confirm that you know Kadir Yuceer https://www.linkedin.com/e/qej7u0-glw6ia58-71/isd/2602897787/y-Avz2HO/ -- (c) 2011, LinkedIn Corporation

2 1

[libvirt-users] Event Types Libvirt can handle
by kadir yüceer 30 Mar '11

30 Mar '11

Hello all, I'm trying to observe access events of guest VMs. However, as far as I understand event types in libvirt are really generic, like domain defined/undefined, started/stopped, etc. Isn't there any specific event types that libvirt can handle (like access to a disk), or I'm missing them? Thanks in advance Kind regards Kadir

2 1

[libvirt-users] stage of data upload/download patch
by James Barkley 29 Mar '11

29 Mar '11

Hey all, I'm looking at ways to upload/download to/from a datastore. I see it is on the todo roadmap wiki (http://libvirt.org/todo.html) and also on bugzilla at https://bugzilla.redhat.com/show_bug.cgi?id=636130. It looks to be a low priority item, so I was thinking about writing my own patch for this when I ran across this thread http://comments.gmane.org/gmane.comp.emulators.libvirt/35532. It looks like a patch going through discussion/revision for a variety of operations (e.g., vol-upload) to do exactly what I need. Does anyone have more info on the status of this patch (or the "todo" feature in general) and when it may be accepted into the baseline? I've been checking the hourly snapshots but haven't seen it show up yet. -jb

2 1

Re: [libvirt-users] libvirt-users Digest, Vol 15, Issue 26
by Zvi Dubitzky 28 Mar '11

28 Mar '11

I resolved topic 1 please diregard ( libvirtd.conf : Authentication / auth_tcp="none") . Please answer topic 2 as ver 0.8.8 claims cpu controller (cgroups) is not mounted while it is thanks Zvi Dubitzky Email:dubi@il.ibm.com libvirt-users-bounces(a)redhat.com wrote on 27/03/2011 18:00:05: > From: libvirt-users-request(a)redhat.com > To: libvirt-users(a)redhat.com > Date: 27/03/2011 18:00 > Subject: libvirt-users Digest, Vol 15, Issue 26 > Sent by: libvirt-users-bounces(a)redhat.com > > Send libvirt-users mailing list submissions to > libvirt-users(a)redhat.com > > To subscribe or unsubscribe via the World Wide Web, visit > https://www.redhat.com/mailman/listinfo/libvirt-users > or, via email, send a message with subject or body 'help' to > libvirt-users-request(a)redhat.com > > You can reach the person managing the list at > libvirt-users-owner(a)redhat.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of libvirt-users digest..." > > > Today's Topics: > > 1. Re: libvirt-users Digest, Vol 15, Issue 25 (Zvi Dubitzky) > 2. virsh sechedinfo with libvirt-0.8.8 (Zvi Dubitzky) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 26 Mar 2011 20:31:55 +0300 > From: Zvi Dubitzky <DUBI(a)il.ibm.com> > To: libvirt-users(a)redhat.com > Subject: Re: [libvirt-users] libvirt-users Digest, Vol 15, Issue 25 > Message-ID: > <OF433F2588.21ED2F16-ONC225785F.005EC3E4-C225785F.00605332(a)il.ibm.com> > Content-Type: text/plain; charset="US-ASCII" > > Sorry, let me rephrase the question again: > > I need define a user /password for sasl but want the authentication at > runtime > be automatic - no explicit promting the user while accessing a tcp socket > > with some applications that need authentication (e.g libvirt) > > I try : saslpasswd2 -c -p -a libvirt <user> > > and it hangs (if i now press Enter it says : "invalid parameter > supplied") . if I avoid the -p flag the above commad works fine and > prompts for password and later when using the tcp (virsh -c > qemu+tcp:...) it prompts for the above defined user/password and > autheticates ok. > > But I want without the explicit authentication > > > > The man pages says : > "-p Pipe mode - saslpasswd2 will neither prompt for the password nor > verify that it was entered correctly. This is the default when standard > input is not a terminal. " > > > > In the past (before upgrading of libvirt via rpm) I had the SASL > authentication done automatically without prompting the user at runtime > (virsh qemu+tcp:///system <command> ) and without need to configure that. > > Don't know how to restore it . > > Any help ? > > thanks > > Zvi Dubitzky > Email:dubi@il.ibm.com > > > > libvirt-users-bounces(a)redhat.com wrote on 26/03/2011 18:00:08: > > > From: libvirt-users-request(a)redhat.com > > To: libvirt-users(a)redhat.com > > Date: 26/03/2011 18:08 > > Subject: libvirt-users Digest, Vol 15, Issue 25 > > Sent by: libvirt-users-bounces(a)redhat.com > > > > Send libvirt-users mailing list submissions to > > libvirt-users(a)redhat.com > > > > To subscribe or unsubscribe via the World Wide Web, visit > > https://www.redhat.com/mailman/listinfo/libvirt-users > > or, via email, send a message with subject or body 'help' to > > libvirt-users-request(a)redhat.com > > > > You can reach the person managing the list at > > libvirt-users-owner(a)redhat.com > > > > When replying, please edit your Subject line so it is more specific > > than "Re: Contents of libvirt-users digest..." > > > > > > Today's Topics: > > > > 1. saslpasswd2 and virsh -c qemu+tcp:///system <command> > > (Zvi Dubitzky) > > > > > > ---------------------------------------------------------------------- > > > > Message: 1 > > Date: Sat, 26 Mar 2011 16:27:06 +0300 > > From: Zvi Dubitzky <DUBI(a)il.ibm.com> > > To: libvirt-users(a)redhat.com > > Subject: [libvirt-users] saslpasswd2 and virsh -c qemu+tcp:///system > > <command> > > Message-ID: > > <OF80114F71.6895179C-ONC225785F.00498EC8-C225785F.0049E967(a)il.ibm.com> > > Content-Type: text/plain; charset="US-ASCII" > > > > I need define a user /password for sasl but want that to do the > > verification > > automatically no -promting ( or even maybe avoid the verification) > while > > using a tcp socket with some applications that need authentication (e.g > > > libvirt) > > > > so I try : saslpasswd2 -c -p -a libvirt <user> > > > > and it hangs (if i now press Enter it says : "invalid parameter > > supplied") . if I avoid the -p flag the above commad works fine and > > prompts for password and later when using the tc p (virsh -c > > qemu+tcp:...) it prompts for the above defined user/password and > > autheticates ok . > > But I want without the prompting > > > > The man pages says > > -p Pipe mode - saslpasswd2 will neither prompt for the password nor > > verify that it was entered correctly. This is the default when standard > > input is not a terminal. > > > > In the past (before some upgrading of libvirt via rpm) the SASL > > authentication was done automatically no need for prompting > > Don't know how to restore it . > > > > Any help ? > > > > thanks > > > > Zvi Dubitzky > > Email:dubi@il.ibm.com > > > > > > > > > > ------------------------------ > > > > _______________________________________________ > > libvirt-users mailing list > > libvirt-users(a)redhat.com > > https://www.redhat.com/mailman/listinfo/libvirt-users > > > > End of libvirt-users Digest, Vol 15, Issue 25 > > ********************************************* > > > > ------------------------------ > > Message: 2 > Date: Sun, 27 Mar 2011 18:32:29 +0300 > From: Zvi Dubitzky <DUBI(a)il.ibm.com> > To: libvirt-users(a)redhat.com > Subject: [libvirt-users] virsh sechedinfo with libvirt-0.8.8 > Message-ID: > <OF06ABB03A.CFC8CAEA-ONC2257860.00546582-C2257860.00556403(a)il.ibm.com> > Content-Type: text/plain; charset="US-ASCII" > > I have fedora14 installed with standard libvirt-0.8.3. I can start VM > using .xml files and also run: virsh schedinfo. the cgroup CPU > controller is mounted and active . In fact I have the path to the Virtual > machine : /dev/cgroup/cpu/libvirt/qemu/<vm name > > > Now I upgraded to libvirt-0.8.8 from a tar ball ( configure , make , make > install) . I rebooted , new libvirtd started . virsh is working ok > (I can create a vm) except for the commands : schedinfo and memtune that > say upon ' virsh schedinfo <vm name>' > > Scheduler : Unknown > error: Requested operation is not valid: cgroup CPU controller is not > mounted > > Indeed I have the path : /dev/cgroup/cpu/libvirt/qemu/ but now without > the <vm_name> group which is not generated despite > that the VM was generated ok by virsh and I can access it > > Any idea what is missing or some config file needs a change ? > > thanks > > Zvi Dubitzky > Email:dubi@il.ibm.com > > > > > ------------------------------ > > _______________________________________________ > libvirt-users mailing list > libvirt-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvirt-users > > End of libvirt-users Digest, Vol 15, Issue 26 > *********************************************

1 0

[libvirt-users] virsh sechedinfo with libvirt-0.8.8
by Zvi Dubitzky 28 Mar '11

28 Mar '11

I have fedora14 installed with standard libvirt-0.8.3. I can start VM using .xml files and also run: virsh schedinfo. the cgroup CPU controller is mounted and active . In fact I have the path to the Virtual machine : /dev/cgroup/cpu/libvirt/qemu/<vm name > Now I upgraded to libvirt-0.8.8 from a tar ball ( configure , make , make install) . I rebooted , new libvirtd started . virsh is working ok (I can create a vm) except for the commands : schedinfo and memtune that say upon ' virsh schedinfo <vm name>' Scheduler : Unknown error: Requested operation is not valid: cgroup CPU controller is not mounted Indeed I have the path : /dev/cgroup/cpu/libvirt/qemu/ but now without the <vm_name> group which is not generated despite that the VM was generated ok by virsh and I can access it Any idea what is missing or some config file needs a change ? thanks Zvi Dubitzky Email:dubi@il.ibm.com

1 0

Re: [libvirt-users] libvirt-users Digest, Vol 15, Issue 25
by Zvi Dubitzky 27 Mar '11

27 Mar '11

Sorry, let me rephrase the question again: I need define a user /password for sasl but want the authentication at runtime be automatic - no explicit promting the user while accessing a tcp socket with some applications that need authentication (e.g libvirt) I try : saslpasswd2 -c -p -a libvirt <user> and it hangs (if i now press Enter it says : "invalid parameter supplied") . if I avoid the -p flag the above commad works fine and prompts for password and later when using the tcp (virsh -c qemu+tcp:...) it prompts for the above defined user/password and autheticates ok. But I want without the explicit authentication The man pages says : "-p Pipe mode - saslpasswd2 will neither prompt for the password nor verify that it was entered correctly. This is the default when standard input is not a terminal. " In the past (before upgrading of libvirt via rpm) I had the SASL authentication done automatically without prompting the user at runtime (virsh qemu+tcp:///system <command> ) and without need to configure that. Don't know how to restore it . Any help ? thanks Zvi Dubitzky Email:dubi@il.ibm.com libvirt-users-bounces(a)redhat.com wrote on 26/03/2011 18:00:08: > From: libvirt-users-request(a)redhat.com > To: libvirt-users(a)redhat.com > Date: 26/03/2011 18:08 > Subject: libvirt-users Digest, Vol 15, Issue 25 > Sent by: libvirt-users-bounces(a)redhat.com > > Send libvirt-users mailing list submissions to > libvirt-users(a)redhat.com > > To subscribe or unsubscribe via the World Wide Web, visit > https://www.redhat.com/mailman/listinfo/libvirt-users > or, via email, send a message with subject or body 'help' to > libvirt-users-request(a)redhat.com > > You can reach the person managing the list at > libvirt-users-owner(a)redhat.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of libvirt-users digest..." > > > Today's Topics: > > 1. saslpasswd2 and virsh -c qemu+tcp:///system <command> > (Zvi Dubitzky) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 26 Mar 2011 16:27:06 +0300 > From: Zvi Dubitzky <DUBI(a)il.ibm.com> > To: libvirt-users(a)redhat.com > Subject: [libvirt-users] saslpasswd2 and virsh -c qemu+tcp:///system > <command> > Message-ID: > <OF80114F71.6895179C-ONC225785F.00498EC8-C225785F.0049E967(a)il.ibm.com> > Content-Type: text/plain; charset="US-ASCII" > > I need define a user /password for sasl but want that to do the > verification > automatically no -promting ( or even maybe avoid the verification) while > using a tcp socket with some applications that need authentication (e.g > libvirt) > > so I try : saslpasswd2 -c -p -a libvirt <user> > > and it hangs (if i now press Enter it says : "invalid parameter > supplied") . if I avoid the -p flag the above commad works fine and > prompts for password and later when using the tc p (virsh -c > qemu+tcp:...) it prompts for the above defined user/password and > autheticates ok . > But I want without the prompting > > The man pages says > -p Pipe mode - saslpasswd2 will neither prompt for the password nor > verify that it was entered correctly. This is the default when standard > input is not a terminal. > > In the past (before some upgrading of libvirt via rpm) the SASL > authentication was done automatically no need for prompting > Don't know how to restore it . > > Any help ? > > thanks > > Zvi Dubitzky > Email:dubi@il.ibm.com > > > > > ------------------------------ > > _______________________________________________ > libvirt-users mailing list > libvirt-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvirt-users > > End of libvirt-users Digest, Vol 15, Issue 25 > *********************************************

1 0

[libvirt-users] saslpasswd2 and virsh -c qemu+tcp:///system <command>
by Zvi Dubitzky 26 Mar '11

26 Mar '11

I need define a user /password for sasl but want that to do the verification automatically no -promting ( or even maybe avoid the verification) while using a tcp socket with some applications that need authentication (e.g libvirt) so I try : saslpasswd2 -c -p -a libvirt <user> and it hangs (if i now press Enter it says : "invalid parameter supplied") . if I avoid the -p flag the above commad works fine and prompts for password and later when using the tc p (virsh -c qemu+tcp:...) it prompts for the above defined user/password and autheticates ok . But I want without the prompting The man pages says -p Pipe mode - saslpasswd2 will neither prompt for the password nor verify that it was entered correctly. This is the default when standard input is not a terminal. In the past (before some upgrading of libvirt via rpm) the SASL authentication was done automatically no need for prompting Don't know how to restore it . Any help ? thanks Zvi Dubitzky Email:dubi@il.ibm.com

1 0

[libvirt-users] how to restart the network connection of kvm guest OS ?
by 何文聪 26 Mar '11

26 Mar '11

When a vm move from one VLAN(e.g. VLAN 1) to another VLAN (e.g. VLAN 2), it is needed to restart the network connection of guest OS, so that it can begin a dhcp discover and get a new ip again. But i can't find the way to restart the guest os's network connection by libvirt (neither python API nor virsh command). Is any other ways? PS: i found that the VirtualBox can detach the cable of VMs and re-attach so that the guest OS will recognize and restart a dhcp discover when the cable re-attach. I guess the KVM will have some feature like that , is anybody know something about that? thanks and looking forward to your answers.

3 2

[libvirt-users] livemigration over specific bridge/nic?
by Christoph Raible 25 Mar '11

25 Mar '11

Hi @all, I have a question about the livemigration with libvirt / kvm. I have two bridges configured in my setup of each host. Now I want to set br1 (private network) as default NIC for live migration. Is there any solution to get this work for me? I tried to bind libvirt to those IP-Range but after that the livemigration doesn't works. If you need more details please tell me :) Regards, Christoph -- Vorstand/Board of Management: Dr. Bernd Finkbeiner, Dr. Roland Niemeier, Dr. Arno Steitz, Dr. Ingrid Zech Vorsitzender des Aufsichtsrats/ Chairman of the Supervisory Board: Michel Lepert Sitz/Registered Office: Tuebingen Registergericht/Registration Court: Stuttgart Registernummer/Commercial Register No.: HRB 382196

2 2

Re: [libvirt-users] libvirt unavailable while a VM is in migration?]
by Igor Serebryany 24 Mar '11

24 Mar '11

On Mon, Dec 20, 2010 at 02:14:42PM +0100, Jiri Denemark wrote: > Ouch, I wonder if that could be the reason... Just to make sure that my strange compiling/packages aren't causing the problem, I've set up two servers running fedora 14 with the official libvirt packages. i experience the same problem -- while a vm is in migration, nothing else works. my traces reveal libvirt getting stuck at the same exact spot as on my debian machines. at this point, i'm pretty sure that this is a bug in libvirt. Has libvirt ever had the ability to perform other operations while a qemu migration is in progress? If so than this is a regression, and a pretty serious one. For me, this makes live-migrations totally unusable, and since I cannot run my project without live-migrations and I cannot use any outside tools to do live-migrations when I'm using libvirt this makes libvirt totally unusable. i am desperate to get this bug fixed, and i don't think i have the resources to try to patch it myself. is there anything i can do to help you guys? more debugging info? foot massage? --Igor

2 3

[libvirt-users] storage pool vs storage volume
by Zvi Dubitzky 23 Mar '11

23 Mar '11

Can anybody give a good reference to understand the difference between storage pool and storage volume >From what I have seem storage volume describes the physical storage media and the pool a collection of such But from the XML at libvirt I do not exactly understand that . thanks Zvi Dubitzky Email:dubi@il.ibm.com

2 2

[libvirt-users] using more than 1 core by a virtual machine
by Zvi Dubitzky 22 Mar '11

22 Mar '11

My virtual machine xml file has <vcpu>2</vcpu> clause while the host has 2 physical cpus (cores). Is this enough to cause a VM running 2 endless loop threads to use the 2 cores ? In my case the VM running reports (cat /roc/cpuinfo) that it has 2 vcpus but it uses only 1 core (at a time) because the 'top' at the host shows 100%cpu (out of total 200%) used by the endless loop application Also virsh vcpuinfo <vm> shows only 1 CPU and 1 vcpu any idea ? thanks Zvi Dubitzky Email:dubi@il.ibm.com

2 3

[libvirt-users] About monitoring
by kadir yüceer 22 Mar '11

22 Mar '11

Hello all, As I've been exporing libvirt api, I've seen event registerers, and types of events are defined, undefined, and you know the rest. Is it all for event types? Any ideas about how to look for a device access event, for example? Kind regards

2 1

[libvirt-users] start/stop hooks
by Mateusz Kijowski 22 Mar '11

22 Mar '11

Hi list, I have a quick question. Is there a way to run a script on the libvirt host after a domain is started/stopped ? -- Mateusz

2 1

[libvirt-users] error : remoteDispatchAuthPolkit:3799 : Policy kit denied action org.libvirt.unix.manage from pid 2381
by Christoph Raible 21 Mar '11

21 Mar '11

Hi @all, first my system: OS: Scientific Linux 6.0 Hypervisor: KVM + libvirt I got the following error /*error : remoteDispatchAuthPolkit:3799 : Policy kit denied action org.libvirt.unix.manage from pid 2381*/ when I want to connect with: /*virsh -c qemu:///system*/ to the hypervisor with a new added user. The user is in in kvm and qmeu group and the connection with virsh -c qemu://$hostname/system works fine. Also root login with the "login" works fine. I configured libvirt to use TLS-authetification... Did anyone of you have a solution to solve this problem. Best Regards Christoph Raible -- Vorstand/Board of Management: Dr. Bernd Finkbeiner, Dr. Roland Niemeier, Dr. Arno Steitz, Dr. Ingrid Zech Vorsitzender des Aufsichtsrats/ Chairman of the Supervisory Board: Michel Lepert Sitz/Registered Office: Tuebingen Registergericht/Registration Court: Stuttgart Registernummer/Commercial Register No.: HRB 382196

1 0

[libvirt-users] libvirtd -- iptables
by Kurian Thayil 18 Mar '11

18 Mar '11

Hi All, I created a couple of virtual networks (forward mode=nat) in my rhel6-kvm box. I've come across 2 weird issues. 1. My Iptables rule chainset contains repeated rules. The same rule gets repeated block by block 2. For connecting to guest using SSH, I created a custom IPTables chain. I want this chain to be on top of the FORWARD chain, but everytime the libvirtd is restarted the rule comes to the bottom of the chain (Appended). Can anyone suggest me what the solution could be? My IPtable rules are given below: Let me know if any further info is needed. [root@santiago Packages]# iptables -L -n -v Chain INPUT (policy ACCEPT 41 packets, 5818 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- vbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * vbr0 0.0.0.0/0 10.10.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr0 * 10.10.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr0 vbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr1 0.0.0.0/0 10.10.1.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr1 * 10.10.1.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr1 vbr1 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr1 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr1 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 5688 588K rhel-virt-forward-1 all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * vbr0 0.0.0.0/0 10.10.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr0 * 10.10.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr0 vbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr1 0.0.0.0/0 10.10.1.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr1 * 10.10.1.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr1 vbr1 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr1 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr1 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr0 0.0.0.0/0 10.10.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr0 * 10.10.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr0 vbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr1 0.0.0.0/0 10.10.1.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr1 * 10.10.1.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr1 vbr1 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr1 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr1 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr0 0.0.0.0/0 10.10.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr0 * 10.10.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr0 vbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr1 0.0.0.0/0 10.10.1.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr1 * 10.10.1.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr1 vbr1 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr1 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr1 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr0 0.0.0.0/0 10.10.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr0 * 10.10.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr0 vbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * vbr1 0.0.0.0/0 10.10.1.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- vbr1 * 10.10.1.0/24 0.0.0.0/0 0 0 ACCEPT all -- vbr1 vbr1 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * vbr1 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- vbr1 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-is-bridged Chain OUTPUT (policy ACCEPT 38 packets, 4234 bytes) pkts bytes target prot opt in out source destination Chain rhel-virt-forward-1 (1 references) pkts bytes target prot opt in out source destination 25 2100 ACCEPT icmp -- eth0 vbr1 0.0.0.0/0 0.0.0.0/0 3515 262K ACCEPT tcp -- eth0 vbr1 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT icmp -- eth0 vbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT tcp -- eth0 vbr0 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 **************Details about my virtual network interfaces are given below: [root@santiago Packages]# virsh net-list --all Name State Autostart ----------------------------------------- vir0 active yes vir1 active yes Thank you in advance. Regards, --Kurian.

1 0

[libvirt-users] RH6 qemu expects driver name
by Robert Šmol 18 Mar '11

18 Mar '11

Hi, I am trying to start machine on RH6. virsh # start ulp-001 error: Failed to start domain ulp-001 error: internal error process exited while connecting to monitor: char device redirected to /dev/pts/1 qemu-kvm: -device lsi,id=scsi0,bus=pci.0,addr=0x5: Parameter 'driver' expects a driver name Try with argument '?' for a list. virsh # version Compiled against library: libvir 0.8.1 Using library: libvir 0.8.1 Using API: QEMU 0.8.1 Running hypervisor: QEMU 0.12.1 This is part of the config <disk type='file' device='disk'> <driver name='qemu' type='raw'/> <source file='/rhev-data/defaultStore/ulp-001a.img'/> <target dev='sda' bus='scsi'/> <address type='drive' controller='0' bus='0' unit='0'/> </disk> <controller type='ide' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/> </controller> <controller type='scsi' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </controller> Any tips? -- stereoIT - Open Source Technology Partners http://www.stereoit.com mobile: +420 776 762378

2 3

[libvirt-users] SSH recovery console
by Nikita A Menkovich 17 Mar '11

17 Mar '11

Hello, Is there available to create ssh recovery console except vnc console, that is default by libvirt. For example connect to kvm@host:2220 and go to first console For example like here <serial type="tcp"> <source mode="bind" host="127.0.0.1" service="2445"/> <protocol type="telnet"/> <target port="1"/> </serial> But not plain format -- Nikita A Menkovich http://libc6.org/ JID: menkovich(a)gmail.com

2 1

[libvirt-users] With which VMM ,libvirt cooperates the most?
by kadir yüceer 17 Mar '11

17 Mar '11

Hi all, I'm trying to develop some applications that communicate with VMM about guest OSs. Libvirt has drivers for many VMMs like Qemu, Vbox, etc. I'm currently using Vbox and time to time I get the error that says "this function is not supported by the connection driver". So, for which VMM, libvirt has the most compatible driver, regarding your experiences? Kind regards Kadir

2 1

[libvirt-users] remote xen+ssh://host
by sd 16 Mar '11

16 Mar '11

Hello, Is there a way where I can connect remote via ssh on a host and specify the username / password ? So far I found out that only the username can be specified and that will ssh keys. I would like something like xen+ssh://user:password@host thanks sd

1 0