September 2012 - Users - libvirt List Archives

[libvirt-users] some problem with snapshot by libvirt
by xingxing gao 22 Nov '14

22 Nov '14

Hi,all,i am using libvirt to manage my vm,in these days i am testing the libvirt snapshot ,but meet some problem: the snapshot was created from this command: snapshot-create-as win7 --disk-only --diskspec vda,snapshot=external --diskspec hda,snapshot=no but when i tried to revert from the snapshot which created from the above command ,i got error below: virsh # snapshot-revert win7 1338041515 --force error: unsupported configuration: revert to external disk snapshot not supported yet version: virsh # version Compiled against library: libvir 0.9.4 Using library: libvir 0.9.4 Using API: QEMU 0.9.4 Running hypervisor: QEMU 1.0.93

4 8

[libvirt-users] About IBM PowerVM hypervisor support
by Dennis Chen 22 Nov '12

22 Nov '12

Hi, I noticed that libvirt support the following hypervisors currently: * The KVM/QEMU <http://libvirt.org/drvqemu.html> Linux hypervisor * The Xen <http://libvirt.org/drvxen.html> hypervisor on Linux and Solaris hosts. * The LXC <http://libvirt.org/drvlxc.html> Linux container system * The OpenVZ <http://libvirt.org/drvopenvz.html> Linux container system * The User Mode Linux <http://libvirt.org/drvuml.html> paravirtualized kernel * The VirtualBox <http://libvirt.org/drvvbox.html> hypervisor * The VMware ESX and GSX <http://libvirt.org/drvesx.html> hypervisors * The VMware Workstation and Player <http://libvirt.org/drvvmware.html> hypervisors * The Microsoft Hyper-V <http://libvirt.org/drvhyperv.html> hypervisor /"the goal of libvirt: *to provide a common and stable layer sufficient to securely manage domains on a node, possibly remote*."/ My question is, does redhat's libvirt team have the plan to support IBM PowerVM hypervisor? If the answer is NO, what's the reason to make the support for IBM PowerVM hypervisor doesn't make sense... BRs, Dennis

5 17

[libvirt-users] Create and revert to snapshot fails silently after device update on running domain
by Jasper Spit 19 Oct '12

19 Oct '12

Hi list, I'm having an issue with snapshot creation. Scenario: qemu 1.1 libvirt 0.9.12 I create a domain, and start it. The domain has 1 IDE cdrom device defined (see below). When started, I want to mount an ISO file to it. So I do updateDeviceFlags in libvirt-python or update-device in virsh (both have the same problem). This works fine, the ISO image becomes available to the domain. Now I create a snapshot on the still running domain using snapshotCreateXML in libvirt-python or snapshot-create in virsh. The command returns immediately without error (a normal snapshot takes several seconds to complete). If I revert to this snapshot this command also returns immediately without error, but the snapshot is not actually reverted to, the domain remains running in the same state as if nothing had happened (I test this by verifying console output and checking if a testfile is present on the domain). If I do not use the update device commands prior to creating a snapshot, all is well. If I remove the source from the cdrom device using update device, the snapshots work properly again. Any idea what causes this? Steps to reproduce using virsh: virsh # start 4d5d722b-864c-657e-0f39-55d1bafc760e Domain 4d5d722b-864c-657e-0f39-55d1bafc760e started virsh # snapshot-create 4d5d722b-864c-657e-0f39-55d1bafc760e Domain snapshot 1348653920 created virsh # snapshot-revert 4d5d722b-864c-657e-0f39-55d1bafc760e 1348653920 All is good, the snapshot is reverted to properly. Now I update the cdrom device: virsh # update-device 4d5d722b-864c-657e-0f39-55d1bafc760e deb.xml Device updated successfully virsh # snapshot-create 4d5d722b-864c-657e-0f39-55d1bafc760e Domain snapshot 1348654116 created Command returns instantly. virsh # snapshot-revert 4d5d722b-864c-657e-0f39-55d1bafc760e 1348654116 No errors, but the snapshot is not reverted to. Now I remove the <source .../> again and do an update-device. virsh # update-device 4d5d722b-864c-657e-0f39-55d1bafc760e deb-off.xml Device updated successfully virsh # snapshot-create 4d5d722b-864c-657e-0f39-55d1bafc760e Domain snapshot 1348654540 created virsh # snapshot-revert 4d5d722b-864c-657e-0f39-55d1bafc760e 1348654540 Snapshot is created and reverted to properly. virsh # dumpxml 4d5d722b-864c-657e-0f39-55d1bafc760e <domain type='kvm' id='135'> <name>4d5d722b-864c-657e-0f39-55d1bafc760e</name> <uuid>4d5d722b-864c-657e-0f39-55d1bafc760e</uuid> <memory unit='KiB'>786432</memory> <currentMemory unit='KiB'>786432</currentMemory> <vcpu placement='static'>1</vcpu> <os> <type arch='x86_64' machine='pc-1.1'>hvm</type> <boot dev='hd'/> <boot dev='cdrom'/> </os> <features> <acpi/> <apic/> <pae/> </features> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/bin/kvm</emulator> <disk type='file' device='cdrom'> <driver name='qemu' type='raw'/> <source file='/data/images/debian-live-6.0.4-amd64-standard.iso'/> <target dev='hdc' bus='ide'/> <readonly/> <alias name='ide0-1-0'/> <address type='drive' controller='0' bus='1' target='0' unit='0'/> </disk> <disk type='file' device='disk'> <driver name='qemu' type='qcow2'/> <source file='/data/domains/2f8baacd-563c-b747-b621-c0ddb4aa84bd'/> <target dev='vda' bus='virtio'/> <alias name='virtio-disk0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </disk> <controller type='usb' index='0'> <alias name='usb0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x2'/> </controller> <controller type='ide' index='0'> <alias name='ide0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/> </controller> <interface type='bridge'> <mac address='52:54:00:39:86:29'/> <source bridge='br0'/> <target dev='vnet2'/> <model type='virtio'/> <alias name='net0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <input type='tablet' bus='usb'> <alias name='input0'/> </input> <input type='mouse' bus='ps2'/> <graphics type='vnc' port='5902' autoport='yes'/> <video> <model type='vga' vram='9216' heads='1'/> <alias name='video0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </video> <memballoon model='virtio'> <alias name='balloon0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </memballoon> </devices> <seclabel type='none'/> </domain> deb.xml: <disk type='file' device='cdrom'> <driver name='qemu' type='raw'/> <source file='/data/images/debian-live-6.0.4-amd64-standard.iso'/> <target dev='hdc' bus='ide'/> </disk> deb-off.xml: <disk type='file' device='cdrom'> <driver name='qemu' type='raw'/> <target dev='hdc' bus='ide'/> </disk> Thanks much, - Jasper

2 2

[libvirt-users] can not connect hypervisor using libvirt-0.9.8 on windows
by xuanmao_001 10 Oct '12

10 Oct '12

Hi, Eric: I compiled libvirt-0.9.8 source code with the msys environment on windows xp. the compiltion was successed. but when I connect the remote host using virsh.exe, it occured error like: error: Failed to connect to the hypervisor error: Unable to set close-on-exec flag: No such file or directory Is there something wrong? give me some help, thanks! xuanmao_001

3 4

[libvirt-users] alias as volume names for multipath storrage pools
by Michael Menge 05 Oct '12

05 Oct '12

Hi, I use virt-manager 0.9.4 and libvirt 0.9.13-0 and have configured a multipath storage pool. In the storage management window of virtmanager, only the short device name "dm-1" is shown as volumename. Is there a way to display the alias name or the path in thes storage window, as example_vm_root oder /dev/mapper/example_vm_root is more informative as dm-1 Regards Michael Menge -------------------------------------------------------------------------------- M.Menge Tel.: (49) 7071/29-70316 Universität Tübingen Fax.: (49) 7071/29-5912 Zentrum für Datenverarbeitung mail: michael.menge(a)zdv.uni-tuebingen.de Wächterstraße 76 72074 Tübingen

2 2

[libvirt-users] High availability for guests
by Renich Bon Ciric 30 Sep '12

30 Sep '12

Hello, What is the recommended way to offer high availability to Guests? For example, let host1, host2 and host3 be libvirt and KVM/Qemu enabled. If I start a guest in host1, how can I guarantee that it will stay online if host1 goes down? GlusterFS, for example, would take care of storage; but what about CPU and RAM? How can this be accomplished? Thank you for any feedback or comment in adavance. -- It's hard to be free... but I love to struggle. Love isn't asked for; it's just given. Respect isn't asked for; it's earned! Renich Bon Ciric http://www.woralelandia.com/ http://www.introbella.com/

2 3

[libvirt-users] Inconsistent iptables forwarding rules for virtual networks?
by Marwan Tanager 27 Sep '12

27 Sep '12

Hi everyone. Those are the iptables forwarding rules associated with the two virtual networks on my machine: ----------------------------------------------------------------------------------------- -A FORWARD -d 192.168.100.0/24 -o virbr1 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.100.0/24 -i virbr1 -j ACCEPT -A FORWARD -i virbr1 -o virbr1 -j ACCEPT -A FORWARD -o virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT -A FORWARD -i virbr0 -o virbr0 -j ACCEPT -A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable ----------------------------------------------------------------------------------------- Using this setup I can ping from a guest on 192.168.100.0/24 to a guest on 192.168.122.0/24, however the reverse is not possible (I get 'port unreachable' icmp messages). This is caused by the fourth rule, which rejects packets forwarded to virbr1. Moving the fourth rule to the end, obviously eliminates this problem. So, is this default setup intentional for some reason, or should the rules just be rearranged by libvirt, so that any rule on the FORWARD chain which has a REJECT target (which reject forwarding "to" some virtual interface) would go to the end of the chain, and thus, allowing the virtual networks to reach each other by default? Thanks. Marwan

2 2

[libvirt-users] minor swap issue ....
by William A. Mahaffey III 26 Sep '12

26 Sep '12

.... I have a CentOS 5.n VM running on a Fedora 14 server/host, installed using virt-manager, pretty plain vanilla. I use it to compile binaries to run under RHEL/CentOS 5.n OS. I occasionally notice that when the VM gets paged out by the server, it takes several minutes to get it back in :-/ (see below). On the host, logged in to a shell through a terminal window, this A.M.: [wam@Q6600, test, 10:09:08am] 3384 % /sbin/swapon -s ; free -m ; uname -a ; /sbin/hwclock -r ; date Filename Type Size Used Priority /dev/md2 partition 16773116 1967524 -1 total used free shared buffers cached Mem: 7993 7932 61 0 11 7176 -/+ buffers/cache: 744 7249 Swap: 16379 1921 14458 Linux Q6600 2.6.35.14-106.fc14.x86_64 #1 SMP Wed Nov 23 13:07:52 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux Tue Sep 25 10:09:11 2012 -0.890900 seconds Tue Sep 25 10:09:11 CDT 2012 [wam@Q6600, test, 10:09:11am] 3385 % /sbin/swapon -s ; free -m ; uname -a ; /sbin/hwclock -r ; date Filename Type Size Used Priority /dev/md2 partition 16773116 1415136 -1 total used free shared buffers cached Mem: 7993 7939 54 0 12 6358 -/+ buffers/cache: 1568 6425 Swap: 16379 1381 14998 Linux Q6600 2.6.35.14-106.fc14.x86_64 #1 SMP Wed Nov 23 13:07:52 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux Tue Sep 25 10:14:09 2012 -0.281487 seconds Tue Sep 25 10:14:09 CDT 2012 [wam@Q6600, test, 10:14:09am] 3385 % on the VM, logged in through a different terminal window: [wam@centos-5, CFD, 10:09:14am] 6507 % [wam@centos-5, CFD, 10:09:14am] 6507 % ( cd ../Utils/ ; make extra ) ; cd . make[1]: Entering directory `/home/wam/dev/CFD/Utils' make[2]: Entering directory `/home/wam/dev/CFD/Utils' /home/wam/dev/CFD/Utils/../lib/R4/SSE2/libutils.a up to date. make[2]: Leaving directory `/home/wam/dev/CFD/Utils' make[2]: Entering directory `/home/wam/dev/CFD/Utils' /home/wam/dev/CFD/Utils/../lib/R8/SSE2/libutils.a up to date. make[2]: Leaving directory `/home/wam/dev/CFD/Utils' make[1]: Leaving directory `/home/wam/dev/CFD/Utils' cd /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/utils; icc -c -DNDEBUG -DUNDER_SCORE_SYS -DLOSE_GAMMAL -gcc-version=340 -gcc-name=gcc34 -fabi-version=2 -I /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/include -wd138,167,186,266,279,880,1418,1419,2330,2331 -O3 -ip -opt-prefetch -parallel -opt-multi-version-aggressive -xSSE2 -DP64_BIT test.cpp cd /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/utils; icc -o /home/wam/bin/checkout -parallel -mkl=parallel -Wl,-s test.o -L /home/wam/dev/CFD/Utils/../lib/R4/SSE2 -Wl,--start-group -lutils -lMemIO -Wl,--end-group && \rm -f test.o Done with extra. [wam@centos-5, CFD, 10:12:36am] 6508 % i.e. it took 3+ min. to get back to the prompt for this command (usually about 5 sec.) .... This isn't a show-stopped by any means, but it is irritating. From the timestamps & data from the host & guest, apparently all of that was used up swapping the guest back in. Is there any way to either prioritize the VM to not get swapped out, or preferentially swapped back in :-) ? TIA for any pointers .... -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr.

3 4

[libvirt-users] Xen Paravirtualized Guest and drive order
by Cyril Peponnet 25 Sep '12

25 Sep '12

Hello, When defining a paravirtulized xen guest and use pygrub as a loader, it will seek into the first drive defined in order to fetch the kernel and boot the machine. As the boot tag is not used, and boot order seems to have no effect, I try to define the disk I want the kernel been seeked as first in my xml definition. Unfortunately, after defining the vm, the order is not kept. As I have seen, the order is made by alphabetical order. I mean if I define a disk as xvda and a cdrom as xvdc, the first drive will be the disk xvda. To be able to make the cdrom first I need to define xvda as a target for cdrom and xvdb or xvdc ... for the disk. It is not really usefull... Is there any way to keep the order of drive as defined in the xml config file ? Thanks

1 0

[libvirt-users] Quadratic function-like call delay
by Andrey Korolyov 25 Sep '12

25 Sep '12

Hi, There is a quite annoying thing, don`t sure if I can call it a bug. How to reproduce: - start a bunch of VMs, - stop libvirt, - start libvirt and immediately issue any call, say, 'virsh version', - delay until call completion may be fitted nearly as quadratic function from number of running VMs, qemu-kvm in my case (see link below). After this delay passed, any calls executed without slowdown, so problem is only a 'dead gap' after restarting service. http://xdel.ru/downloads/libvirt.png

4 6

[libvirt-users] VLANs with Open vSwitch in libvirt 0.10.1
by Scott Lowe 24 Sep '12

24 Sep '12

Hello all, I'm trying to take advantage of libvirt's VLAN and OVS support in the 0.10.1 release and consistently getting an "error: internal error corrupted profileid string" when starting a guest. I've defined a network using virsh; the configuration looks like this: <network> <name>ovs-network</name> <uuid>40c32a20-9eed-238c-895c-b9af7eaf72f1</uuid> <forward mode='bridge'/> <bridge name='ovsbr0' /> <virtualport type='openvswitch'/> <portgroup name='green' default='yes'> <virtualport> <parameters profileid='green-profile'/> </virtualport> </portgroup> <portgroup name='blue'> <vlan> <tag id='2'/> </vlan> <virtualport> <parameters profileid='blue-profile'/> </virtualport> </portgroup> </network> This network is listed when I run "virsh net-list --all" and is listed as active. In a guest, the network is defined like this: <interface type='network'> <mac address='52:54:00:a8:bf:8f'/> <source network='ovs-network'/> <virtualport type='openvswitch'> <parameters interfaceid='2913d936-6771-4983-1cdf-753c45ac24d2' profileid='green-profile'/> </virtualport> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </interface> This is running on Ubuntu 12.04.1 (and QEMU-KVM) with manually compiled libvirt 0.10.1 and OVS version 1.4.0+build0. For troubleshooting, I've undefined/re-define both the network and the guest, and restarted libvirtd in between. I've also tried different network names, different portgroup names, and different profileid's. I'm sure I'm missing something obvious but I can't seem to find it--any suggestions? Any and all help is appreciated. -- Scott

1 0

[libvirt-users] prefer_msi=on in xml file
by klak2 24 Sep '12

24 Sep '12

Hello, here is a problem with KVM passthrough of TechnoTrend S2-6400. Bug report is done. The last answer of the debian maintainer: --> Please check with lspci -vv whenever your device is MSI-capable, --> and if yes, try to add prefer_msi=on to the pci-assign device --> argument -- like, from your original report, --> --> -device pci- assign,host=08:00.0,id=hostdev0,configfd=23,bus=pci.0,addr=0xa,prefer_msi=on --> --> I don't know how to add this to libvirt however, maybe they have --> some knobs for that nowadays. and now my question: How do I add the parameter "prefer_msi=on" to the xml file? Thank and greets klak2

1 0

[libvirt-users] sharing read-only LOCAL disks among KVM guests
by Amos Shapira 23 Sep '12

23 Sep '12

Hello, Is it possible to share a single host's Logical Volume among multiple local KVM guests which mount it read-only? I'm asking this because I have an idea to run multiple idential KVM guests (they all have exactly the same software installed on them), booting them from a shared local Logical Volume read-only root file system, or alternatively let them share the bulk of the software (/usr, /opt, /lib) from a common KVM host Logical volume. Is this possible? All my searches so far failed to turn up anything like this. Would it be possible using qcow2 instead of raw LV? If so - would it be worth the performance hit of switching from LV to qcow2? The motivation for this is two-fold: 1. Speed-up - I suspect that sharing the same disk block among all KVM agents (we currently have 14 KVM guests on each server) should lead to better cache utilisation and reduce disk access. Also the cost of maintaining the mutiple identical servers and keeping them up to date could be eating into our server's resource usage. 2. Maintenance - if I get to share the common disk image among all of them then I only need to install/update it once instead of once for each KVM guest (we already use Puppet but it doesn't mean it comes for free). Thanks, --Amos

3 7

[libvirt-users] picking a NUMA cell for pinning using virsh freecell
by Edoardo Comar 22 Sep '12

22 Sep '12

Hi I'd want to pin the vcpu of a guest to a pcpu. the docs clearly say https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/h… "Locking a guest to a particular NUMA node offers no benefit if that node does not have sufficient free memory for that guest. libvirt stores information on the free memory available on each node. Use the virsh freecell --all command to display the free memory on all NUMA nodes " I have tried to look at what freecell returns and heuristically its total across cells looks roughly the same value returned by the 'free' command but without discounting buffers and cache. While free is able to show the value when buffers/cache are taken into account, free is not able to apportion that to NUMA cells. So is it really a valid strategy to choose the NUMA cell for pinning vcpus looking at virsh freecell or ideally we'd need those values adjusted with buffers+cache ? And if so how could one do that ? -------------------------------------------------- regards, Edoardo Comar IBM SWG UK - Hursley JTC ecomar(a)uk.ibm.com Tel +44 (0)1962 81 5576 (external) 245576 (internal) IBM UK Ltd, Hursley, SO21 2JN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

1 0

[libvirt-users] virsh list not working with xen 4
by Rogério Vinhal Nunes 22 Sep '12

22 Sep '12

Hi, I'm having some trouble to get libvirt to show the correct power state of my virtual machines. I'm using Ubuntu 10.04 + Xen 4.1.1 + libvirt 0.8.8. virsh list --all only shows turned off machines registered in xend. If I turn them on, they just "disappear", and when I start machines directly from xml, they just doesn't appear at all. Libvirt is correctly connecting to xen as I can use the other commands fine, just the list option doesn't seem to work at all. What can I do to change that? # virsh version Compiled against library: libvir 0.8.8 Using library: libvir 0.8.8 Using API: Xen 3.0.1 Running hypervisor: Xen 4.1.0

2 1

[libvirt-users] Xen domains appear randomly
by Mathias Gaunard 22 Sep '12

22 Sep '12

Hi, I have a problem with libvirt or at least with virt-manager and virsh. I have created Xen domains with them, and they do exist and are running without problems, which I can attest by using Xen native tools. However, depending on how I can connect to the machine (direct xen, xen+ssh), and depending on the user I log in as, I may or may not see the domains, or I may or may not be able to configure storage. I am running Debian Wheezy and using the libvirt version from the repositories. Any idea of how I could try to troubleshoot this problem?

1 0

[libvirt-users] Network inoperable with QEMU arm example image
by Larry Brown 21 Sep '12

21 Sep '12

Is this thing on? I posted the message below twice now with no response by anyone. Can someone tell me what I'm doing wrong or at least let me know this is not something they've ever seen so I know my posts are being viewed by those in the know? I'll try replicating the install process on another machine with hopes it will work there, but this is my desktop and I'd really like to have it run here rather than running a separate machine just to run the VM in. (That is provided it will run anywhere using these installation mechanisms) "I am running Fedora 16 64bit and installed libvirt. I have the VM running with arm emulation with this one issue I can't figure out. I used Virtual Machine Manager to manage the VM and can access its console there. The Ethernet appears to be eth1 and the guest can set an IP on it etc. However, I cannot see any traffic from the Host when dumping any of the interfaces. I've tried several combinations of network setups using the GUI and none appear to work. Optimally I'd like to bridge to my primary interface (em1) and be able to pull an address and talk directly to my network so I can download packages etc while in the VM. I tried setting up networking in that fashion with: Source Device : em1 with macvtap Device Model: Hypervisor Default Source Mode: Bridge but alas I cannot pull dhcp nor can I set a static address and ping other interfaces on the network. It also appears that every time I start the VM it creates another vnetX interface. One of the troubleshooting pages I came across listed all the tools but nothing about what to look for: 1) virsh net-list --all Name State Autostart ----------------------------------------- default active yes 2) brctl show bridge name bridge id STP enabled interfaces virbr0 8000.52540029e6c7 yes virbr0-nic vnet0 vnet1 vnet2 vnet3 vnet4 3) sysctl net.bridge.bridge-nf-call-iptables sysctl net.bridge.bridge-nf-call-iptables = 1 4) iptables -L -v -n Chain INPUT (policy ACCEPT 767K packets, 189M bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain OUTPUT (policy ACCEPT 532K packets, 79M bytes) pkts bytes target prot opt in out source destination 5) ps -ef | grep dnsmasq nobody 12382 1 0 Sep11 ? 00:00:00 /usr/sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/default.pid --conf-file= --except-interface lo --listen-address 192.168.122.1 --dhcp-range 192.168.122.2,192.168.122.254 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/default.leases --dhcp-lease-max=253 --dhcp-no-override 6) ifconfig -a em1 Link encap:Ethernet HWaddr 00:19:B9:48:2B:BA inet addr:10.45.212.46 Bcast:10.45.212.255 Mask:255.255.255.0 inet6 addr: fe80::219:b9ff:fe48:2bba/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:19048593 errors:95686 dropped:154 overruns:0 frame:98437 TX packets:10619346 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:12559170813 (11.6 GiB) TX bytes:1700214519 (1.5 GiB) Interrupt:16 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2978074 errors:0 dropped:0 overruns:0 frame:0 TX packets:2978074 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:847201395 (807.9 MiB) TX bytes:847201395 (807.9 MiB) macvtap0 Link encap:Ethernet HWaddr 52:54:00:AC:7F:0C inet6 addr: fe80::5054:ff:feac:7f0c/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:294814 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:42804350 (40.8 MiB) TX bytes:468 (468.0 b) virbr0 Link encap:Ethernet HWaddr 52:54:00:29:E6:C7 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:621 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:43217 (42.2 KiB) virbr0-nic Link encap:Ethernet HWaddr 52:54:00:29:E6:C7 BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) vnet0 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:38159 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1995337 (1.9 MiB) vnet1 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:37299 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1949439 (1.8 MiB) vnet2 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:36154 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1888745 (1.8 MiB) vnet3 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:35068 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1832375 (1.7 MiB) vnet4 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:207 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:10896 (10.6 KiB) 7) cat /proc/sys/net/ipv4/ip_forward 1 Any help I can get to resolve this would be greatly appreciated. Very frustrating... Larry

1 0

[libvirt-users] Article about libvirt and audit subsystem
by Marcelo Cerri 21 Sep '12

21 Sep '12

Hi, Sometime ago I wrote an article about libvirt describing how the Linux audit subsystem can be used to track qemu guest's life-cycle. I think this is a topic that can be useful for many people here and so I'm forwarding the URL: http://www.ibm.com/developerworks/linux/library/l-kvm-libvirt-audit/index.h… Regards, Marcelo Cerri

3 3

Re: [libvirt-users] How to pass info to a guest?
by Renich Bon Ciric 21 Sep '12

21 Sep '12

On Thu, Sep 20, 2012 at 12:09 PM, Andrew Cathrow <acathrow(a)redhat.com> wrote: > So you really want to run apt commands on fedora ;-) > > ssh stuff should work fine for you. LOL, ok, you're right. Anyway, thinking it over, I need to apply these injections every time I boot. If the user updates his/her VNC password or rsa-id.pub file on the outside, I need it synced on the inside.

1 0

[libvirt-users] How to pass info to a guest?
by Renich Bon Ciric 21 Sep '12

21 Sep '12

Hello, I would love to be able to pass information to a Guest. For example: - I'd love to sync the root password with the VNC/Spice one - I'd like to be able to inject stuff to /root/.ssh/authorized_keys All of these at boot time. How would I do it? I'd make these files/strings available in the BIOS or something; maybe some kind of storage local to the host and guest as well. Then, I'd create a systemd script that checks these and syncs stuff @ reboot time. I don't know how to make this local storage available or if it is doable to insert this info into some BIOS string; obtainable with dmidecode or something. It would be awesome if this could be dynamic as well. Any feedback is appreciated! -- It's hard to be free... but I love to struggle. Love isn't asked for; it's just given. Respect isn't asked for; it's earned! Renich Bon Ciric http://www.woralelandia.com/ http://www.introbella.com/

3 2

[libvirt-users] How to migrate over TCP without certs
by Renich Bon Ciric 21 Sep '12

21 Sep '12

Hey guys, I have a private network and I trust it! /me hides behind trees... So, in order to exercise my trust, I wanna migrate guests over TCP; with and without shared storage. This is: - I want to migrate from host1 to host2; which have shared storage; over TCP without certs - I want to migrate from host1 to host99, which don't have shared storage, over TCP without certs I am asking because, every time I try anythng, it complains: error: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory If I need to setup this cacert, no problem; point me to it! Anyway, thank you for taking the time to read this email. Fedora 17 x86_64 libvirt-0.9.11.5-3.fc17.x86_64 qemu-kvm-1.0.1-1.fc17.x86_64 private network on vlan2, Dual 10 Gbps bonded (20, perhaps?) -- It's hard to be free... but I love to struggle. Love isn't asked for; it's just given. Respect isn't asked for; it's earned! Renich Bon Ciric http://www.woralelandia.com/ http://www.introbella.com/

4 7

[libvirt-users] libvirt network without dns ?
by Scott Moser 21 Sep '12

21 Sep '12

Hey, I've opened a bug against ubuntu at [1]. I realize this is probably not a high priority, but I was just curious if it is possible to have libvirt configure a network and *not* run a DNS server on it (dnsmasq). Perhaps I could convince libvirt to run dnsmasq with '--port 0'? For my explicit use case i was hoping/expecting to run my own dns and dhcp servers, possibly a specific server bound only to that interface (as dnsmasq does). I just wanted libvirt to create the bridge and setup NAT (and automatically bring the network and any configured guests on it up on boot). Heres what I did. $ BRIDGE="mybr0"; IP="192.168.123.1"; $ cat > $BRIDGE.xml <<EOF <network> <name>$BRIDGE</name> <forward mode='nat'/> <bridge name='$BRIDGE' stp='off' delay='0' /> <ip address='$IP' netmask='255.255.255.0'> </ip> </network> EOF $ sudo virsh -c qemu:///system net-define $BRIDGE.xml $ sudo virsh -c qemu:///system net-start $BRIDGE ## See, after 'start' dnsmasq is running and usable on that interface. $ ps axw | grep dnsm | grep $BRIDGE.pid 9888 ? S 0:00 /usr/sbin/dnsmasq -u libvirt-dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/mybr0.pid --conf-file= --except-interface lo --listen-address 192.168.123.1 $ dig +short @$IP www.ubuntu.com 91.189.90.41 -- [1] https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1053408

1 0

[libvirt-users] libvirt and lxc and puppet
by erkan yanar 20 Sep '12

20 Sep '12

Hoi, Im running some hosts with a lot of lxc-containers (lxc-execute). Now Im going to have a look into libvirt. So I wonder: Are there some docs about what lxc@libvirt is supporting? Imho you have a subset of the lxc-capabilities with libvirt. Anyone doing by any chance the same and using puppet to deploy (application)containers? So I could get a recommendation which module to use, instead of writing ma own. Regards Erkan -- über den grenzen muß die freiheit wohl wolkenlos sein

1 0

[libvirt-users] libvirt 0.10 and cephx
by Andrey Korolyov 20 Sep '12

20 Sep '12

Hello, Current version adding 'auth_supported=none' at the end of disk path and failing to do an authentication with specified cephx key: <source protocol='rbd' name='rbd/vmxxxxxxxxx:id=qemukvm:key=[cut]==:auth_supported=cephx'> <host name='10.0.0.13' port='6789'/> <host name='10.0.0.10' port='6789'/> <host name='10.0.0.17' port='6789'/> </source> results to: 0.10.1 -drive file=rbd:rbd/vmxxxxxxxxx-YSG:id=qemukvm:key=[cut]:auth_supported=cephx:auth_supported=none:mon_host=10.0.0.13\:6789\;10.0.0.10\:6789\;10.0.0.17\:6789,if=none,id=drive-virtio-disk0,format=raw,bps_rd=80000000,bps_wr=40000000,iops_rd=400,iops_wr=200 0.9.13 -drive file=rbd:rbd/vmxxxxxxxxx-YSG:id=qemukvm:key=[cut]:auth_supported=cephx:mon_host=10.0.0.13\:6789\;10.0.0.10\:6789\;10.0.0.17\:6789,if=none,id=drive-virtio-disk0,format=raw,bps_rd=80000000,bps_wr=40000000,iops_rd=400,iops_wr=200 In ceph-devel I have mentioned incorrectly that both strings are the same due to incorrect grep statement, so all that needs to be fixed is an wrong parameter at the end. Thanks!

2 1

[libvirt-users] start failure with lxc
by Eric J Nelson 20 Sep '12

20 Sep '12

Hello, I think I've done something to my machine, but I can't seem to figure out what. I have now set up a very simple lxc setup to try and test this. Here is the XML: ~> cat vm1GPU.xml <domain type='lxc'> <name>vm1GPU</name> <memory>1020400</memory> <os> <type>exe</type> <init>/bin/sh</init> </os> <vcpu>1</vcpu> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <interface type='bridge'> <source bridge='br0' /> </interface> <filesystem type='mount'> <source dir='/export/vm1gpu/root' /> <target dir='/' /> </filesystem> <console type='pty'/> </devices> </domain> Here is what I get when I try to start it. >sudo virsh --connect lxc:// start vm1GPU error: Failed to start domain vm1GPU error: internal error guest failed to start: 2012-09-19 21:26:48.673+0000: 12702: info : libvirt version: 0.9.10, package: 21.el6_3.4 (CentOS BuildSystem <http://bugs.centos.org>, 2012-08-23-18:28:26, c6b9.bsys.dev.centos.org) 2012-09-19 21:26:48.673+0000: 12702: error : lxcControllerRun:1484 : Failed to query file context on /export/vm1gpu/root: No data available Now if change the target directory to something other than the root it starts right up. Any help would be much appreciated. Thanks! Eric

1 0