April 2013 - Users - libvirt List Archives

[libvirt-users] some problem with snapshot by libvirt
by xingxing gao 22 Nov '14

22 Nov '14

Hi,all,i am using libvirt to manage my vm,in these days i am testing the libvirt snapshot ,but meet some problem: the snapshot was created from this command: snapshot-create-as win7 --disk-only --diskspec vda,snapshot=external --diskspec hda,snapshot=no but when i tried to revert from the snapshot which created from the above command ,i got error below: virsh # snapshot-revert win7 1338041515 --force error: unsupported configuration: revert to external disk snapshot not supported yet version: virsh # version Compiled against library: libvir 0.9.4 Using library: libvir 0.9.4 Using API: QEMU 0.9.4 Running hypervisor: QEMU 1.0.93

4 8

[libvirt-users] managedsave results in unexpected shutdown from inside Windows
by Nicolas Sebrecht 28 Jun '13

28 Jun '13

Hi, I'm facing a strange behaviour of windows 2008 guests. After a virsh managedsave and start, the windows guest open a "unexpected shutdown" window. The window looks like this one (randomly taken from the web): http://toastytech.com/guis/srv2k3login2.jpg This happens in all virtualized windows in a hypervisor. Has anyone else experienced such issue? Thanks, -- Nicolas Sebrecht

3 15

[libvirt-users] libvirt tls error
by yue 03 Jun '13

03 Jun '13

centos6.3,libvirt 0.9.10. [root@ovirtdev private]# virsh -c qemu+tls://ovirtdev.localhost/system list 2013-04-22 03:37:09.362+0000: 9898: info : libvirt version: 0.9.10, package: 21.el6_3.8 (CentOS BuildSystem <http://bugs.centos.org>, 2013-01-28-19:24:16, c6b10.bsys.dev.centos.org) 2013-04-22 03:37:09.362+0000: 9898: warning : virNetClientIncomingEvent:1665 : Something went wrong during async message processing error: Unable to read TLS confirmation: Input/output error error: failed to connect to the hypervisor thanks

3 2

[libvirt-users] /dev/tty only on a new container
by Sebastien Douche 31 May '13

31 May '13

Hi folks :), I migrated the host from the Debian Squeeze to Ubuntu 12.10. Old containers work but I can't use the ssh command, /dev/tty is missing. On a new container, /dev/tty is here. The libvirt configuration is the same. Any ideas? Thanks. -- Sebastien Douche <sdouche(a)gmail.com> Twitter: @sdouche / G+: +sdouche

3 4

[libvirt-users] How to use xl (in place of xm) with libvirt 1.0.2 and Xen 4.2.1 in Ubuntu 13.04?
by Gizmo Chicken 21 May '13

21 May '13

QUESTION: What, if anything, can I do so that I can use xl (in place of xm) with libvirt 1.0.2 and Xen 4.2.1 in Ubuntu 13.04? BACKGROUND: I am testing a fully updated (as of March 27) installation of Ubuntu 13.04 that includes the following packages: libvirt - version 1.0.2-0ubuntu9 xen-hypervisor-4.2-amd64 - version 4.2.1-0ubuntu1 Upon setting TOOLSTACK=xm in /etc/default/xen (as well as making a few needed tweaks to /etc/xen/xend-config.sxp), libvirt and virt-manager worked great. Yippee! I guess that I should be happy that the xm toolstack still works with Xen 4.2.1 and quit while I'm ahead, but... According to libvirt's documentation: "libxl: Starting with Xen 4.2, the legacy XenD/xm toolstack is deprecated in favor of libxl, also commonly called libxenlight. libvirt supports this new Xen toolstack via the libxl driver. If XenD is enabled, the legacy xen driver consisting of the above mentioned channels will be used. If XenD is disabled, the libxl driver will be used." See http://libvirt.org/drvxen.html. In view of the above, I attempted to use xl in place xm by setting TOOLSTACK=xl in /etc/default/xen. And after doing so (both with and without, the above mentioned tweaks to /etc/xen/xend-config.sxp), I recieved the following error when attempting to start virt-manager: Unable to connect to libvirt. unable to connect to 'localhost:8000': Connection refused Verify that: - A Xen host kernel was booted - The Xen service has been started Libvirt URI is: xen:/// Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/connection.py", line 1027, in _open_thread self.vmm = self._try_open() File "/usr/share/virt-manager/virtManager/connection.py", line 1009, in _try_open flags) File "/usr/lib/python2.7/dist-packages/libvirt.py", line 102, in openAuth if ret is None:raise libvirtError('virConnectOpenAuth() failed') libvirtError: unable to connect to 'localhost:8000': Connection refused

2 4

[libvirt-users] libvirtd using 11GB
by Alex Leonhardt 20 May '13

20 May '13

Hi All, Am new to this list, and have asked in #ovirt / ovirt-users list and they pointed me to here ... I've seen libvirtd using ~11 GB of resident memory after the host has been running for about 60+ days with about 40 VMs running on it. The versions I'm currently running are : libvirt.x86_64 0.9.10-21.el6_3.7 libvirt-client.x86_64 0.9.10-21.el6_3.7 libvirt-lock-sanlock.x86_64 libvirt-python.x86_64 0.9.10-21.el6_3.7 I know I can just restart libvirtd and "all should be fine" (and hopefully I'll regain the 11GB of memory) - however, is there an updated version that maybe fixes a memory leak ?? Thanks in advance, Alex -- | RHCE | Sen Sys Engineer / Platform Architect | www.vcore.co | www.vsearchcloud.com |

4 7

[libvirt-users] Java client error on Windows 7 64 bit for Libvirt on KVM
by george john 08 May '13

08 May '13

Hi, I need some help in building a Java client on Windows 7 64 bit plaftorm to manage a KVM using the libvirt APIs. Using the instructions at http://libvirt.org/java.html, i was able to build libvirt.jar. My understanding is that libvirt.jar uses JNA to call libvirt's native windows library. I tried using the libvirt dlls in the experimental Windows installation package mentioned in http://libvirt.org/windows.html at http://libvirt.org/sources/win32_experimental/Libvirt-0.8.8-0.exe but whenever I try to connect to my remote API, I get the below Java exception : Exception in thread "main" java.lang.UnsatisfiedLinkError: %1 is not a valid Win32 application. at com.sun.jna.Native.open(Native Method) at com.sun.jna.Native.open(Native.java:1718) at com.sun.jna.NativeLibrary.loadLibrary(NativeLibrary.java:210) at com.sun.jna.NativeLibrary.getInstance(NativeLibrary.java:322) at com.sun.jna.Library$Handler.<init>(Library.java:142) at com.sun.jna.Native.loadLibrary(Native.java:387) at com.sun.jna.Native.loadLibrary(Native.java:366) at org.libvirt.jna.Libvirt.<clinit>(Unknown Source) at org.libvirt.Library.<clinit>(Unknown Source) at org.libvirt.Connect.<init>(Unknown Source) at Main.main(Main.java:8) But when I try the same client code on a Windows XP 32 bit machine (with 32 bit JVM), I don't see this problem and the connection succeeds. So it looks like the problem is that I am not using 64 bit windows libvirt dlls. Is my assumption correct? Is there a Windows installer with 64 bit Libvirt dlls ? Or are the 64 bit version of DLLs published somewhere? I tried using Matthias Bolte's msys_setup script (I tried in 2 machines) and in both machines, I get the below error when I try to run compile_libxml2.sh as per instructions https://github.com/photron/msys_setup/blob/master/readme_libvirt.txt Last few lines before the error is : >>>>>>>>>>>>>>>>> make[5]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' make[4]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' Making install in tests make[4]: Entering directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[5]: Entering directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[5]: Nothing to be done for `install-exec-am'. test -z "/share/doc/libxml2-python-2.9.0/examples" || /bin/mkdir -p "/share/doc/ libxml2-python-2.9.0/examples" /bin/install -c -m 644 build.py attribs.py tst.py tstxpath.py xpathext.py push. py pushSAX.py pushSAXhtml.py error.py serialize.py validate.py tstURI.py cutnpas te.py xpathret.py xpath.py outbuf.py inbuf.py resolver.py regexp.py reader.py re ader2.py reader3.py reader4.py reader5.py reader6.py reader7.py reader8.py reade rnext.py walker.py nsdel.py ctxterror.py readererr.py relaxng.py schema.py threa d2.py sync.py tstLastError.py indexes.py dtdvalid.py tstmem.py '/share/doc/libxm l2-python-2.9.0/examples' /bin/install -c -m 644 validDTD.py validSchemas.py validRNG.py compareNodes.py xpathns.py xpathleak.py tst.xml valid.xml invalid.xml test.dtd '/share/doc/libxm l2-python-2.9.0/examples' make[5]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[4]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[3]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' make[2]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' make[1]: Leaving directory `/src/libxml2/libxml2-2.9.0-0' + cp /python/Lib/site-packages/libxml2mod.dll /python/DLLs/libxml2mod.pyd cp: cannot stat `/python/Lib/site-packages/libxml2mod.dll': No such file or dire ctory >>>>>>>>>>>>>>>>>> Do you know how this error could be resolved? All help will be greatly appreciated. Thank you.

3 7

[libvirt-users] hyperv connection failing with libvirt 1.0.4 virsh.
by D e e p a k 07 May '13

07 May '13

Trying to use virsh for hyperv and getting this. virsh # connect hyperv://172.168.1.111:5985/?transport=http Enter username for 172.168.1.111 [administrator]: administrator Enter administrator's password for 172.168.1.111: 2013-04-29 10:36:48.690+0000: 13991: error : hypervDebugHandler:1444 : openwsman error: NULL response error: Failed to connect to the hypervisor error: internal error Transport error during enumeration: User, password or similar was not accepted (26) Using libvirt 1.0.4 from source code. What is going wrong in this hyperv connection ? Regards, Deepak

2 6

[libvirt-users] Location of 64 bit libvirt dlls (Windows)?
by george john 07 May '13

07 May '13

I have written a Java client (64 bit JVM) that uses libvirt APIs on a remote KVM for KVM management. Since the JVM is 64 bit, the client needs 64 bit libvirt dlls and I could not find them (I found 32 bit libvirt dlls on http://libvirt.org/windows.html) Could someone point to where I could find 64 bit libvirt dlls? Thank you, George

2 2

[libvirt-users] Basic Network Connections
by Slater, Joseph 02 May '13

02 May '13

Hi, If I have these fragments in a domain definition, the guest will start with "eth0" assigned by dhcp to an address on my lan. Things seem to work according to the documentation I can find. <network> <name>direct-macvtap</name> <forward mode='bridge'> <interface dev='eth0' /> </forward> </network> <devices> <interface type='direct'> <mac address='00:15:17:A6:BC:C9' /> <source dev='eth0' mode='bridge' /> <model type='virtio' /> </interface> </devices> I don't understand the <network> part here. It doesn't seem to be documented. I inherited these pieces so I do not know why they are as they are. If, instead, I have the following, the guest comes up with no network interface at all (except lo). On the host, interfaces vnet0 and virbr0 exist and virbr0 is 192.168.122.1. <devices> <interface type='network'> <source network='default'/> </interface> </devices> Adding in <model type='virtio' /> makes it start with "eth0", but no address has been assigned. I can manually do that and then I can communicate with the host but it's kind of a pain to add the address and routing manually. Oddly enough, though, ping from host to guest works normally, but ping guest to host seems to succeed once then hang (with no timeout). It is not at all obvious to me how virtio magically creates eth0. Am I doing something wrong, here? And, if anyone could advise how to use openvswitch I'd appreciate it. I've seen adding <virtualport type='openvswitch/> might be enough, presumably with an appropriate name for the source network. Joe

3 3

[libvirt-users] Libvirt and Glusterfs
by Pierre-Gilles Mialon 30 Apr '13

30 Apr '13

Hi, On a Fedora 18, I try to launch a VM with QEMU-GlusterFS native integration. I have enable fedora-virt-preview repo, and gluster-alpha3 repo. Below the list of installed package : glusterfs-3.4.0-0.3.alpha3.fc18.x86_64 glusterfs-devel-3.4.0-0.3.alpha3.fc18.x86_64 glusterfs-fuse-3.4.0-0.3.alpha3.fc18.x86_64 glusterfs-server-3.4.0-0.3.alpha3.fc18.x86_64 ipxe-roms-qemu-20130103-2.git717279a.fc18.noarch libvirt-1.0.4-1.fc18.x86_64 libvirt-client-1.0.4-1.fc18.x86_64 libvirt-daemon-1.0.4-1.fc18.x86_64 libvirt-daemon-config-network-1.0.4-1.fc18.x86_64 libvirt-daemon-config-nwfilter-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-interface-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-libxl-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-lxc-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-network-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-nodedev-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-nwfilter-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-qemu-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-secret-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-storage-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-uml-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-xen-1.0.4-1.fc18.x86_64 libvirt-python-1.0.4-1.fc18.x86_64 qemu-common-1.4.1-2.fc18.x86_64 qemu-img-1.4.1-2.fc18.x86_64 qemu-kvm-1.4.1-2.fc18.x86_64 qemu-system-arm-1.4.1-2.fc18.x86_64 qemu-system-x86-1.4.1-2.fc18.x86_64 I have recompiled Qemu with –enable-glusterfs . Here the content of my /etc/glusterfs/glusterd.vol volume management type mgmt/glusterd option working-directory /var/lib/glusterd option transport-type socket option transport.socket.nodelay on option transport.socket.keepalive-time 10 option transport.socket.keepalive-interval 2 option transport.socket.read-fail-log off option rpc-auth.ports.insecure yes option rpc-auth-allow-insecure on end-volume I have defined the following line in my domain.xml <disk type='network' device='disk'> <driver name='qemu' cache='none'/> <source protocol='gluster' name='gv1/test.img'> <host name='127.0.0.1' transport='tcp' /> </source> <target dev='vda' bus='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </disk> # virsh start test LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin QEMU_AUDIO_DRV=spice /usr/bin/qemu-kvm -name test -S -M pc-i440fx-1.4 -m 1024 -smp 1,sockets=1,cores=1,threads=1 -uuid 4c8686bc-9da9-c61d-cd85-8b2865ea4124 -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/test.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -boot order=dc,menu=on -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x4 -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 -netdev tap,fd=26,id=hostnet0,vhost=on,vhostfd=27 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:cf:d2:62,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -spice port=5900,addr=127.0.0.1,disable-ticketing,seamless-migration=on -vga qxl -global qxl-vga.ram_size=67108864 -global qxl-vga.vram_size=67108864 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6 char device redirected to /dev/pts/4 (label charserial0) qemu-system-x86_64: -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none: Gluster connection failed for server=127.0.0.1 port=24007 volume=gv1 image=test.img transport=tcp qemu-system-x86_64: -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none: could not open disk image gluster://127.0.0.1:24007/gv1/test.img: No data available 2013-04-30 10:39:44.466+0000: shutting down but launching qemu with commant line work great : # qemu-system-x86_64 -name test -M pc-i440fx-1.4 -m 1024 -smp 1 -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 Am I missing something ? Regards, -- Pierre-Gilles Mialon

1 0

[libvirt-users] virt-install creates a snapshot as the volume backend
by Ahmed Ossama 30 Apr '13

30 Apr '13

Greetings All, I was running libvirt-0.9.10 on CentOS 6.3 and it was working perfectly until yesterday when I decided to update to 6.4, which upgraded libvirt-0.9.10 to libvirt-0.10.2. I have a storage pool of type volume group, upon upgrading to libvirt-0.10.2, the disk image gets created as a snapshot on the volume group not as a regular volume. Now every time I create a vm using virt-install on a vg, the lv gets created as a snapshot not a regular lv, as a result I get the following error when I run dmesg: device-mapper: snapshots: Invalidating snapshot: Unable to allocate exception. Buffer I/O error on device dm-5, logical block 128251 Buffer I/O error on device dm-5, logical block 256 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 257 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 258 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 259 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 260 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 261 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 262 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 263 lost page write due to I/O error on dm-5 lost page write due to I/O error on dm-5 and the following on the domain's log file: block I/O error in device 'drive-virtio-disk0': Input/output error (5) # virt-install --name="ns1" --vcpus="2" --check-cpu --ram=512 --os-variant="rhel6" --network "bridge=br0" --disk "pool=vdisks,size=22,cache=writeback" --vnc --hvm --vnclisten="0.0.0.0" --cdrom="/mnt/ISOs/centos/x86_64/CentOS-6.3-x86_64-bin-DVD1.iso" --hvm # lvs | grep ns ns1.img vm_volumes swi-aos-- 4.00m [ns1.img_vorigin] 0.00 When I try to create a volume using virt-manager on the volume group, it gets created as a snapshot. But when I create a volume using virsh, it gets created correctly; virsh # vol-create-as vdisks test 23622320128 # lvs | grep test test vm_volumes -wi-a---- 22.00g If anyone came across this issue or can provide an advice, I will appreciate it so much. -- Best Regards, Ahmed Ossama

2 2

[libvirt-users] No route to host
by digvijay chauhan 28 Apr '13

28 Apr '13

Hello, I tried to migrate the virtual machine using kvm,but it is giving me the error, "LIBVIRT ERROR NO ROUTE TO HOST" .How can i solve it. regards, DIgvijaySingh

1 0

[libvirt-users] How to tell if a hypervisor connection has died?
by Guido Winkelmann 27 Apr '13

27 Apr '13

Hi, What's the best way to tell if a virConnect object is not good to use anymore? (For example because the libvirtd on the other side crashed/has been stopped or because of some network failure) When I try this, the first API call I do on a broken connection yields an error with error number 38 (VIR_ERR_SYSTEM_ERROR) and all subsequent calls yield an error number 1 (VIR_ERR_INTERNAL_ERROR). Both of those are really unhelpful and could mean just about anything... Guido

3 3

[libvirt-users] how to control usb read write perm
by yue 25 Apr '13

25 Apr '13

hi,all i have 2 questions. both is related to spice usb redirect. 1. if i can control RW perm of usb device which is producted via spice ? in order to control user's rw operation in guestVM . 2.if user have several usbs, and plug them at the same time when using spice client. if i can control which usb(s) can be accessed by user in guestVM? thanks

1 0

[libvirt-users] 答复: libvirt_lxc start problem when selinux enbale
by Huang,Chaochang 25 Apr '13

25 Apr '13

Sorry “There is avc error messages in dmesg ……” ――should be “There is no avc error……” 发件人: Huang,Chaochang 发送时间: 2013年4月25日 15:41 收件人: 'libvir-list(a)redhat.com'; 'libvirt-users(a)redhat.com' 主题: libvirt_lxc start problem when selinux enbale Hi，all： the problem came out when selinux was enforced in targeted+MCS I start lxc through virsh――“virsh -c lxc:/// start instance-00004bd6” 1. When selinux is Permissive，lxc start is ok The result of “Ps auxZ” is： system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 19218 0.0 0.0 47624 1244 ? Ss 15:26 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19219 0.3 0.0 19276 1532 ? Ss 15:26 0:00 /sbin/init system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19406 0.0 0.0 177444 1332 ? Sl 15:26 0:00 /sbin/rsyslogd -i /var/run/sysl system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19420 0.0 0.0 64120 1144 ? Ss 15:26 0:00 /usr/sbin/sshd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19427 0.0 0.0 22136 956 ? Ss 15:26 0:00 xinetd -stayalive -pidfile /var system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19434 0.0 0.0 64316 832 ? Ss 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19435 0.0 0.0 64316 600 ? S 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19450 0.0 0.0 82388 2392 ? Ss 15:26 0:00 sendmail: rejecting new message system_u:system_r:svirt_lxc_net_t:s0:c192,c392 51 19459 0.0 0.0 78116 2016 ? Ss 15:26 0:00 sendmail: Queue runner@01:00:00 system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19467 0.0 0.0 175528 3672 ? Ss 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 48 19470 0.0 0.0 175528 2204 ? S 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19475 0.0 0.0 117212 1348 ? Ss 15:26 0:00 crond system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19491 0.0 0.0 4108 600 pts/0 Ss+ 15:26 0:00 /sbin/mingetty /dev/tty1 We can get into the lxc through “ssh” 2. When selinux is Enforcing，lxc start bad Th result of “ps auxZ” is: system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 20624 0.0 0.0 47624 1244 ? Ss 15:29 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 20625 0.0 0.0 17172 1036 pts/0 Ss+ 15:29 0:00 /sbin/init Only /sbin/init process started, no else. This is the real problem There is avc error messages in dmesg、/var/log/messages、/var/log/secure, and the same with selinux is Permissive Can anybody give some hints? Here are some system information: Kernel version 3.3.4 Libvirt version 0.9.13 Lxc guest image Centos 6.3 Lxc xml info is:  <domain type='lxc'> <name>instance-00004bd6</name> <uuid>96eada0e-7ea0-4865-8271-3565811c8eb0</uuid> <memory unit='KiB'>524288</memory> <currentMemory unit='KiB'>524288</currentMemory> <vcpu placement='static'>1</vcpu> <os> <type arch='x86_64'>exe</type> <init>/sbin/init</init> <cmdline>console=ttyS0</cmdline> </os> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/home/stack/nova_state/instances/instance-00004bd6/rootfs'/> <target dir='/'/> </filesystem> <interface type='bridge'> <mac address='fa:16:3e:09:00:a2'/> <source bridge='br100'/> <filterref filter='nova-instance-instance-00004bd6-fa163e0900a2'> <parameter name='DHCPSERVER' value='10.0.0.1'/> <parameter name='IP' value='10.0.0.11'/> <parameter name='PROJMASK' value='255.255.254.0'/> <parameter name='PROJNET' value='10.0.0.0'/> </filterref> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> <seclabel type='static' model='selinux' relabel='yes'> <label>system_u:system_r:svirt_lxc_net_t:s0:c192,c392</label> </seclabel> </domain> Best Regard Huangchaochang

1 0

[libvirt-users] libvirt_lxc start problem when selinux enbale
by Huang,Chaochang 25 Apr '13

25 Apr '13

Hi，all： the problem came out when selinux was enforced in targeted+MCS I start lxc through virsh――“virsh -c lxc:/// start instance-00004bd6” 1. When selinux is Permissive，lxc start is ok The result of “Ps auxZ” is： system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 19218 0.0 0.0 47624 1244 ? Ss 15:26 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19219 0.3 0.0 19276 1532 ? Ss 15:26 0:00 /sbin/init system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19406 0.0 0.0 177444 1332 ? Sl 15:26 0:00 /sbin/rsyslogd -i /var/run/sysl system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19420 0.0 0.0 64120 1144 ? Ss 15:26 0:00 /usr/sbin/sshd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19427 0.0 0.0 22136 956 ? Ss 15:26 0:00 xinetd -stayalive -pidfile /var system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19434 0.0 0.0 64316 832 ? Ss 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19435 0.0 0.0 64316 600 ? S 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19450 0.0 0.0 82388 2392 ? Ss 15:26 0:00 sendmail: rejecting new message system_u:system_r:svirt_lxc_net_t:s0:c192,c392 51 19459 0.0 0.0 78116 2016 ? Ss 15:26 0:00 sendmail: Queue runner@01:00:00 system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19467 0.0 0.0 175528 3672 ? Ss 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 48 19470 0.0 0.0 175528 2204 ? S 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19475 0.0 0.0 117212 1348 ? Ss 15:26 0:00 crond system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19491 0.0 0.0 4108 600 pts/0 Ss+ 15:26 0:00 /sbin/mingetty /dev/tty1 We can get into the lxc through “ssh” 2. When selinux is Enforcing，lxc start bad Th result of “ps auxZ” is: system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 20624 0.0 0.0 47624 1244 ? Ss 15:29 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 20625 0.0 0.0 17172 1036 pts/0 Ss+ 15:29 0:00 /sbin/init Only /sbin/init process started, no else. This is the real problem There is avc error messages in dmesg、/var/log/messages、/var/log/secure, and the same with selinux is Permissive Can anybody give some hints? Here are some system information: Kernel version 3.3.4 Libvirt version 0.9.13 Lxc guest image Centos 6.3 Lxc xml info is:  <domain type='lxc'> <name>instance-00004bd6</name> <uuid>96eada0e-7ea0-4865-8271-3565811c8eb0</uuid> <memory unit='KiB'>524288</memory> <currentMemory unit='KiB'>524288</currentMemory> <vcpu placement='static'>1</vcpu> <os> <type arch='x86_64'>exe</type> <init>/sbin/init</init> <cmdline>console=ttyS0</cmdline> </os> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/home/stack/nova_state/instances/instance-00004bd6/rootfs'/> <target dir='/'/> </filesystem> <interface type='bridge'> <mac address='fa:16:3e:09:00:a2'/> <source bridge='br100'/> <filterref filter='nova-instance-instance-00004bd6-fa163e0900a2'> <parameter name='DHCPSERVER' value='10.0.0.1'/> <parameter name='IP' value='10.0.0.11'/> <parameter name='PROJMASK' value='255.255.254.0'/> <parameter name='PROJNET' value='10.0.0.0'/> </filterref> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> <seclabel type='static' model='selinux' relabel='yes'> <label>system_u:system_r:svirt_lxc_net_t:s0:c192,c392</label> </seclabel> </domain> Best Regard Huangchaochang

1 0

[libvirt-users] how to control usb read write perm
by yue 25 Apr '13

25 Apr '13

hi,all i have 2 questions. both is related to spice usb redirect. 1. if i can control RW perm of usb device which is producted via spice ? in order to control user's rw operation in guestVM . 2.if user have several usbs, and plug them at the same time when using spice client. if i can control which usb(s) can be accessed by user in guestVM? thanks

1 0

[libvirt-users] dnsmasq does not start
by Alexey Kardashevskiy 25 Apr '13

25 Apr '13

Hi! I am trying to run tap networking with libvirtd. My test system is Fedora18/ppc64, libvirt 1.0.4 (compiled from git and installed). On another system with Fedora17/ppc64 with the same settings, dnsmasq is running. All configs in /etc/libvirt/ are default and not changed, the only exception is /etc/libvirt/qemu/networks/default.xml which I copied from Fedora17/ppc64 setup. What does exactly force libvirtd to start dnsmasq? Some debug info: [root@vpl2 ~]# ps ax | egrep $dnsmasq\|libvirt$ 9021 ? Ssl 0:00 /usr/sbin/libvirtd 9271 pts/0 S+ 0:00 egrep --color=auto (dnsmasq|libvirt) [root@vpl2 ~]# [root@vpl2 ~]# cat /etc/libvirt/qemu/networks/default.xml <network> <name>default</name> <bridge name="virbr%d" /> <forward/> <ip address="192.168.122.1" netmask="255.255.255.0"> <dhcp> <range start="192.168.122.2" end="192.168.122.254" /> </dhcp> </ip> </network> [root@vpl2 ~]# [root@vpl2 ~]# service libvirtd restart Redirecting to /bin/systemctl restart libvirtd.service [root@vpl2 ~]# [root@vpl2 ~]# [root@vpl2 ~]# ps ax | egrep $dnsmasq\|libvirt$ 9365 ? Ssl 0:00 /usr/sbin/libvirtd 9507 pts/0 S+ 0:00 egrep --color=auto (dnsmasq|libvirt) [root@vpl2 ~]# [root@vpl2 ~]# ls -laR /var/log/libvirt/ /var/log/libvirt/: total 20 drwx------. 5 root root 4096 Apr 9 16:51 . drwxr-xr-x. 18 root root 4096 Apr 24 13:48 .. drwx------. 2 root root 4096 Apr 9 16:51 lxc drwx------. 2 root root 4096 Apr 24 17:22 qemu drwx------. 2 root root 4096 Apr 9 16:51 uml /var/log/libvirt/lxc: total 8 drwx------. 2 root root 4096 Apr 9 16:51 . drwx------. 5 root root 4096 Apr 9 16:51 .. /var/log/libvirt/qemu: total 8 drwx------. 2 root root 4096 Apr 24 17:22 . drwx------. 5 root root 4096 Apr 9 16:51 .. /var/log/libvirt/uml: total 8 drwx------. 2 root root 4096 Apr 9 16:51 . drwx------. 5 root root 4096 Apr 9 16:51 .. [root@vpl2 ~]# -- Alexey

2 1

[libvirt-users] how to limit each spice-client can only see its own usb device.
by yue 24 Apr '13

24 Apr '13

hi,all i use thin client to visit guestVM(throught spice), if i attach usb device to thin client, how to assure that this usb can be only accessed by the guestVM corresponding to thin client? thanks

2 1

[libvirt-users] Lack of ebtables rules when using nwfilters
by Maciej Gałkiewicz 24 Apr '13

24 Apr '13

Hi I am using libvirt (0.9.12) with openstack and xen. It looks like libvirt is not creating ebtables rules against arp spoofing etc. Here are my configs: VM definition: <domain type='xen'> <uuid>d49b777f-32f1-4093-ae47-a12efd0efd2c</uuid> <name>instance-00000168</name> <memory>2097152</memory> <os> <type>linux</type> <root>/dev/xvda</root> <kernel>/var/lib/nova/instances/instance-00000168/kernel</kernel> <cmdline>ro</cmdline> <initrd>/var/lib/nova/instances/instance-00000168/ramdisk</initrd> </os> <features> <acpi/> </features> <vcpu>2</vcpu> <devices> <disk type='file' device='disk'> <driver type='raw' cache='none'/> <source file='/var/lib/nova/instances/instance-00000168/disk'/> <target dev='sda' bus='scsi'/> </disk> <disk type='file'> <driver type='raw' cache='none'/> <source file='/var/lib/nova/instances/instance-00000168/disk.swap'/> <target dev='sdb' bus='scsi'/> </disk> <interface type='bridge'> <source bridge='br0'/> <mac address='fa:16:3e:1e:70:87'/> <filterref filter="nova-instance-instance-00000168-fa163e1e7087"> <parameter name="IP" value="10.255.0.114" /> <parameter name="DHCPSERVER" value="10.255.0.3" /> </filterref> </interface> <console type='pty'/> <graphics type='vnc' port='-1' autoport='yes' keymap='en-us' listen='127.0.0.1'/> </devices> </domain> # virsh nwfilter-dumpxml nova-instance-instance-00000168-fa163e1e7087 <filter name='nova-instance-instance-00000168-fa163e1e7087' chain='root'> <uuid>b6475525-5901-aeab-4ed0-dc0d7b545aea</uuid> <filterref filter='nova-base'/> </filter> # virsh nwfilter-dumpxml nova-base <filter name='nova-base' chain='root'> <uuid>197b7f7a-389c-bd6d-6b77-07b88d3d9138</uuid> <filterref filter='no-mac-spoofing'/> <filterref filter='no-ip-spoofing'/> <filterref filter='no-arp-spoofing'/> </filter> # ebtables -t nat -L Bridge table: nat Bridge chain: PREROUTING, entries: 0, policy: ACCEPT Bridge chain: OUTPUT, entries: 0, policy: ACCEPT Bridge chain: POSTROUTING, entries: 0, policy: ACCEPT # ebtables -L Bridge table: filter Bridge chain: INPUT, entries: 0, policy: ACCEPT Bridge chain: FORWARD, entries: 0, policy: ACCEPT Bridge chain: OUTPUT, entries: 0, policy: ACCEPT logs: 2013-04-23 10:47:37.438+0000: 30155: debug : virNWFilterDefineXML:16099 : conn=0x1331ff0, xmlDesc=<filter name='nova-instance-instance-00000167-fa163e4faae5' chain='roo t'><filterref filter='nova-base'/></filter> 2013-04-23 10:47:37.544+0000: 30155: debug : virNWFilterFree:15971 : nwfilter=0x7f18400bc2b0 2013-04-23 10:47:37.544+0000: 30155: debug : virUnrefNWFilter:1262 : unref nwfilter 0x7f18400bc2b0 nova-instance-instance-00000167-fa163e4faae5 1 2013-04-23 10:47:37.544+0000: 30155: debug : virReleaseNWFilter:1222 : release nwfilter 0x7f18400bc2b0 nova-instance-instance-00000167-fa163e4faae5 875ff1e5-fc4d-2fca-9 da2-f163f273ad6a 2013-04-23 10:47:37.544+0000: 30155: debug : virReleaseNWFilter:1229 : unref connection 0x1331ff0 2 regards Maciej Gałkiewicz

2 1

[libvirt-users] Create image from running domain
by Hongbin Lu 23 Apr '13

23 Apr '13

Hi. A short question. I want to know what is the proper steps to create an image from a running domain and use it as base image of another domains. The domain is with Qemu Hypervisor, persistent, and created based on Ubuntu Cloud image. Thank in advance Hongbin

3 2

[libvirt-users] failure creating a snapshot volume within a lvm-based pool
by Edoardo Comar 23 Apr '13

23 Apr '13

Hi I have defined a logical pool and a volume within it # virsh vol-create-as images_lvm myvol 2G Vol myvol created # virsh vol-list images_lvm Name Path ----------------------------------------- myvol /dev/libvirt_images_vg/myvol if I try to create another volume using the previous one as backing-vol, the creation fails with what looks like an incorrect commandline for lvcreate: # virsh vol-create-as images_lvm myvol-instance 2G --backing-vol myvol error: Failed to create vol myvol-instance error: internal error Child process (/usr/sbin/lvcreate --name myvol-instance -L 2097152K -s=/dev/libvirt_images_vg/myvol) unexpected exit status 3: /usr/sbin/lvcreate: invalid option -- '=' Error during parsing of command line. Exactly the same happens if I specify a qcow2 format (the doc however says that The logical volume pool does not use the volume format type element). is this a known bug? I'm running Fedora 18 # virsh version Compiled against library: libvirt 0.10.2 Using library: libvirt 0.10.2 Using API: QEMU 0.10.2 Running hypervisor: QEMU 1.2.2 -------------------------------------------------- regards, Edoardo Comar WebSphere Application Service Platform for Networks (ASPN) ecomar(a)uk.ibm.com Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

2 2

Re: [libvirt-users] Fwd: kvm
by Stefan Hajnoczi 23 Apr '13

23 Apr '13

On Mon, Apr 22, 2013 at 10:59:25AM +0100, Gary Lloyd wrote: > I was wondering if anyone could help me with an issue with KVM and ISCSI. > > If we restart a controller on our EqualLogic SAN or there are any > network interruptions on the storage network, KVM guests throw a > wobbler and their files systems go into read only(centos 5.9 guest > with virtio driver). > > I have read a few forums that indicate you can set disk timeout values > on the guests themselves but this is not possible using the virtio > driver, which is what we are currently using. > > Is there any way we can instruct KVM to pause the vm's if there is a > storage failure and resume them when the storage comes back online ? > > We are currently running Centos 6.4. There seems to be a werror='stop' > and rerror='stop' options to achieve this but if I try to put these in > options in the libvirt xml file for a vm, libvirt appears to be > removing them. Please email libvirt-users(a)redhat.com for questions about libvirt in the future. This is a question about libvirt domain XML. The documentation is here: http://libvirt.org/formatdomain.html#elementsDisks The attribute is called "error_policy". The documentation says: The optional error_policy attribute controls how the hypervisor will behave on a disk read or write error, possible values are "stop", "report", "ignore", and "enospace".Since 0.8.0, "report" since 0.9.7 The default setting of error_policy is "report". There is also an optional rerror_policy that controls behavior for read errors only. Since 0.9.7. If no rerror_policy is given, error_policy is used for both read and write errors. If rerror_policy is given, it overrides the error_policy for read errors. Also note that "enospace" is not a valid policy for read errors, so if error_policy is set to "enospace" and no rerror_policy is given, the read error policy will be left at its default, which is "report". Stefan

1 0

[libvirt-users] Libvirt profiling
by Jon Martin Sigvaldsen 23 Apr '13

23 Apr '13

Hi For a school project I am researching performance issues when using libvirt to run very large numbers of virtual machines. My experiments indicate that having more CPU cores negatively impacts the performance. A simple desktop with an Intel Core 2 Duo E6550 performs better than a server with a 48 core AMD CPU. Limiting the cores used through 'cputune' improves performance on the server. If anyone has got any explanations for this, it would be greatly appreciated. Further on I would like to profile the slowdowns, but I am not sure how to approach this problem. Any recommendations on how to do this? Best regards Jon

2 1