November 2014 - Users - libvirt List Archives

[libvirt-users] virRandomBits - not very random
by Brian Rak 01 Jun '18

01 Jun '18

I just ran into an issue where I had about 30 guests get duplicate mac addresses assigned. These were scattered across 30 different machines. Some debugging revealed that: 1) All the host machines were restarted within a couple seconds of each other 2) All the host machines had fairly similar libvirtd pids (within ~100 PIDs of each other) 3) Libvirt seeds the RNG using 'time(NULL) ^ getpid()' This perfectly explains why I saw so many duplicate mac addresses. Why is the RNG seed such a predictable value? Surely there has to be a better source of a random seed then the timestamp and the pid? The PID seems to me to be a very bad source of any randomness. I just ran a test across 60 of our hosts. 43 of them shared their PID with at least one other machine.

7 13

[libvirt-users] Libvirt Live Migration
by Dhia Abbassi 05 Dec '14

05 Dec '14

I'm trying to implement a virtualization API. I was testing migration with libvirt I got some problems. When I use the following command : *virsh migrate --live --persistent --copy-storage-all vm-clone1 qemu+ssh://server_ip/system* the migration works fine but in the destination host the migrated vm is paused and I can't unpause it and I need to reboot the vm to be able use it in the new host. When I try to unoause it Igot the following error message: << *Error unpausing domain: internal error: unable to execute QEMU command 'cont': Resetting the Virtual Machine is required *>> How can I solve this problem, or is there an other way to make a live migration with libvirt?? Thank you for you consideration. -- Best regards *Dhia Abbassi* Full Stack Engineer | Rosafi Holding <http://tn.linkedin.com/in/dhiaabbassi> <https://github.com/DhiaTN> <https://plus.google.com/u/0/+DhiaAbbassi> <https://twitter.com/DhiaTN>

3 7

[libvirt-users] python migrateSetMaxSpeed not taking effect
by Krutskikh Ivan 28 Nov '14

28 Nov '14

Hi, I am writing a simple python script for migrating vm's based on zfs zvol's. Either I am doing something wrong or python migrateSetMaxSpeed not taking effect: no mater what value I specify (except for 0), I end up with 10 Mib/s migration speed. The code is: def virt_migrate(domain): conn = libvirt.open('qemu:///system') domain_obj = conn.lookupByName(domain) dst='qemu+ssh://root@%s/system' % args.remote domain_obj.migrateSetMaxSpeed(40,0) new_dom = domain_obj.migrateToURI(dst,libvirt.VIR_MIGRATE_LIVE | libvirt.VIR_MIGRATE_PEER2PEER | libvirt.VIR_MIGRATE_NON_SHARED_INC | libvirt.VIR_MIGRATE_PERSIST_DEST | libvirt.VIR_MIGRATE_UNDEFINE_SOURCE, None, 0) conn.close() Also tried to specify bandwidth at migrateToUri- I still get 10 mib/s at any value... Thanks in advance!

1 0

[libvirt-users] Live Disk Snapshot Not Supported
by Payes Anand 26 Nov '14

26 Nov '14

# virsh snapshot-create-as small snap1 --disk-only --atomic error: Operation not supported: live disk snapshot not supported with this QEMU binary OS used: CentOS 7 #virsh version Compiled against library: libvirt 1.1.1 Using library: libvirt 1.1.1 Using API: QEMU 1.1.1 Running hypervisor: QEMU 1.5.3 Any help would be greatly appreciated. Best Regards, Payes

3 4

[libvirt-users] how to modify virsh vm start script
by Ady Wahyudi Paundu 26 Nov '14

26 Nov '14

I use libvirt to manage a QEMU/KVM system. Starting a VM only by using > virsh start vmname What I want to know is how to add an option to virsh vm's start script, in my case I want to add QEMU logging option (-d and -D). I can see from > ps aux | grep qemu that current VM started using virsh not including those options ~ady

2 2

[libvirt-users] Libvirt fullscreen sdl problem
by Дориан Грей 25 Nov '14

25 Nov '14

Hi all, I use libvirt/kvm for my virtualization needs and have a little scerio in mind that I want to implement: a small linux box boots up, launches an X session and after that launches a virtual machine with a fullscreen sdl window, With this I hope to achive several goals: user gets a familiar experience with guest os ( I had windows in mind), near native graphics responsiveness ( we deploy cctv video servers and viewing live video in a virt machine is a must) and security based on isolation from i/o ports. But when I tried this scenario with <graphics type='sdl' display=':0.0' xauth='/home/stein/.XAuthority'/> in xml file I got: linux-aeo3:/etc/libvirt/qemu # virsh start wintest setlocale: No such file or directory error: Failed to start domain wintest error: internal error: early end of file from monitor: possible problem: No protocol specified xcb_connection_has_error() returned true pulseaudio: pa_context_connect() failed pulseaudio: Reason: Connection refused pulseaudio: Failed to initialize PA contextaudio: Could not init `pa' audio driver ALSA lib pcm_dmix.c:1022:(snd_pcm_dmix_open) unable to open slave alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: Device or resource busy ALSA lib pcm_dmix.c:1022:(snd_pcm_dmix_open) unable to open slave alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: Device or resource busy audio: Failed to create voice `dac' No protocol specified Could not initialize SDL(No available video device) - exiting Even if I disable audio and get rid of alsa problems, I still get Could not initialize SDL(No available video device) - exiting error. What am I doing wrong? Please not that lauching qemu-kvm with sdl window goes without problems. Thanks in advance!

3 2

[libvirt-users] Put virbr0 in promiscusous
by Sagar Shedge 24 Nov '14

24 Nov '14

Hi , I have two virtual machines VM1 and VM2. Then I have added eth0 of my VM to 'default' network. Use case :- I want to monitor all traffic on virbr0('default' network). Steps followed :- 1. Add VM1 eth0 to virbr0 2. Add VM2 eth1 to virbr0 3. brctl setageing ovsbr0 0 ..(To put bridge in promiscuous) Now I am running tcpdump on eth1 of VM2 and trying to ping google.com(outside world) In VM2 (tcpdump -i eth1), I can see only ingress(incoming) traffic of VM1. I am not able see outgoing traffic of VM1. If I create another bridge and trying same scenario with 2 VM then VM2 can see both ingress and outgress traffic. So want to know what is the issue? Is libvirt doing something different with this virtbr0 bridge? -- Sagar Dilip Shedge, Pune. With Regards.

2 5

[libvirt-users] Error starting domain: internal error: missing IFLA_VF_INFO in netlink response
by Hong-Hua.Yin＠freescale.com 24 Nov '14

24 Nov '14

Hi, We try PCI Passthrough of host network devices on PPC platform. http://wiki.libvirt.org/page/Networking#Assignment_with_.3Cinterface_type.3… But we got a similar issue as below that reported on RedHat before: https://bugzilla.redhat.com/show_bug.cgi?id=1040626 With <hostdev>, it could start VM successfully. <hostdev mode='subsystem' type='pci' managed='yes'> <driver name='vfio'/> <source> <address domain='0x0000' bus='0x01' slot='0x00' function='0x4'/> </source> </hostdev> Logged into VM and checked for VF using lspci root@model : qemu ppce500:~# lspci 00:00.0 PCI bridge: Freescale Semiconductor Inc MPC8533E 00:02.0 Power PC: Freescale Semiconductor Inc Device 0000 (rev 20) 00:03.0 Unclassified device [00ff]: Red Hat, Inc Virtio memory balloon But it will fail if using <interface type="hostdev">: <interface type="hostdev" managed="yes"> <mac address="00:e0:0c:00:20:01"/> <source> <address type="pci" domain="0x0000" bus="0x01" slot="0x00" function="0x4"/> </source> </interface> # virsh create vf.xml 2014-11-24 11:08:31.390+0000: 3556: info : libvirt version: 1.2.2 2014-11-24 11:08:31.390+0000: 3556: debug : virLogParseOutputs:1378 : outputs=1:file:virsh.log error: Failed to create domain from vf.xml error: internal error: missing IFLA_VF_INFO in netlink response Exactly We're using max_vfs=2 and libnl-3.2.22 # ls -l /usr/lib64/libnl-3.so.200.17.0 -rwxr-xr-x 1 root root 154440 Sep 17 07:15 /usr/lib64/libnl-3.so.200.17.0 Why this issue happened on PPC? Is there anything architecture-specific support needed to add? Thanks, Olivia

1 0

Re: [libvirt-users] some problem with snapshot by libvirt
by Payes Anand 22 Nov '14

22 Nov '14

Eric Blake <eblake@...> writes: > > On 05/27/2012 06:39 PM, xingxing gao wrote: > > Hi,all,i am using libvirt to manage my vm,in these days i am testing > > the libvirt snapshot ,but meet some problem: > > > > the snapshot was created from this command: > > snapshot-create-as win7 --disk-only --diskspec > > vda,snapshot=external --diskspec hda,snapshot=no > > > > but when i tried to revert from the snapshot which created from the > > above command ,i got error below: > > > > virsh # snapshot-revert win7 1338041515 --force > > error: unsupported configuration: revert to external disk snapshot not > > supported yet > > Yep. You've run into a case where I haven't yet been able to code > things. The problem is that reverting to a disk image has a question - > you are starting with two files (the snapshot backing file and the new > qcow2 wrapper), but the moment you reload the backing file for > modification, you invalidate the qcow2 wrapper. There are two sane > options - create yet another qcow2 wrapper around the same backing file, > or delete the qcow2 wrapper as part of reverting to the snapshot, but we > would probably need two new flags to the virDomainRevertToSnapshot API > to select one of these two behaviors. In the meantime, the only way to > revert to a disk-only snapshot is to manually edit the domain XML to > match what you want to do, possibly with manual qemu-img operations as well. > > Help in writing the patches to improve the functionality would be welcome. > Has the issue ( revert to external disk snapshot ) been solved in later versions of libvirt? I am using: Compiled against library: libvirt 1.2.2 Using library: libvirt 1.2.2 Using API: QEMU 1.2.2 Running hypervisor: QEMU 2.1.92 On trying to revert to an external snapshot, Getting the error: revert to external disk snapshot not supported yet If not is there any alternate.

2 1

[libvirt-users] some problem with snapshot by libvirt
by xingxing gao 22 Nov '14

22 Nov '14

Hi,all,i am using libvirt to manage my vm,in these days i am testing the libvirt snapshot ,but meet some problem: the snapshot was created from this command: snapshot-create-as win7 --disk-only --diskspec vda,snapshot=external --diskspec hda,snapshot=no but when i tried to revert from the snapshot which created from the above command ,i got error below: virsh # snapshot-revert win7 1338041515 --force error: unsupported configuration: revert to external disk snapshot not supported yet version: virsh # version Compiled against library: libvir 0.9.4 Using library: libvir 0.9.4 Using API: QEMU 0.9.4 Running hypervisor: QEMU 1.0.93

4 8

[libvirt-users] How to enable apparmor security driver for libvirt
by Jackie 21 Nov '14

21 Nov '14

Hi guys, I want to enable apparmor security driver for my libvirt env with ubuntu os. What I do is as following: First, I got the source code and compile it. ubuntu@ubuntu:~/github$git clone git://libvirt.org/libvirt.git ubuntu@ubuntu:~/github/libvirt$ dpkg -l|grep apparmor ii apparmor 2.8.95~2430-0ubuntu5 amd64 User-space parser utility for AppArmor ii libapparmor-dev:amd64 2.8.95~2430-0ubuntu5.1 amd64 AppArmor development libraries and header files ii libapparmor-perl 2.8.95~2430-0ubuntu5 amd64 AppArmor library Perl bindings ii libapparmor1:amd64 2.8.95~2430-0ubuntu5.1 amd64 changehat AppArmor library ubuntu@ubuntu:~/github/libvirt$./autogen.sh --system --with-apparmor ubuntu@ubuntu:~/github/libvirt$make -j8 ubuntu@ubuntu:~/github/libvirt$sudo make install Then I configure the apparmor (security_driver = "apparmor") in /etc/libvirt/qemu.conf, and restart libvirtd. I thought this may be ok. But it turned out that apparmor security driver is not loaded for my libvirt: The output of "virsh capabilities | grep apparmor" is None. What's the problem? Best Regards~ Jackie

1 0

[libvirt-users] Cannot find suitable CPU model for given data
by mb 21 Nov '14

21 Nov '14

Hello all, I have a new Sun fire X4140 server with two amd opteron 2435 CPUs running debian jessie, libvirt 1.2.9-3, virtinst 1.0.1-3, qemu/kvm 2.1. When attempting to create virtual machines (with --debug), I receive this: [Thu, 20 Nov 2014 13:56:36 virt-install 1842] DEBUG (cli:234) File "/usr/share/virt-manager/virt-install", line 876, in <module> sys.exit(main()) File "/usr/share/virt-manager/virt-install", line 870, in main start_install(guest, continue_inst, options) File "/usr/share/virt-manager/virt-install", line 588, in start_install fail(e, do_exit=False) File "/usr/share/virt-manager/virtinst/cli.py", line 234, in fail logging.debug("".join(traceback.format_stack())) [Thu, 20 Nov 2014 13:56:36 virt-install 1842] ERROR (cli:235) internal error: Cannot find suitable CPU model for given data [Thu, 20 Nov 2014 13:56:36 virt-install 1842] DEBUG (cli:237) Traceback (most recent call last): File "/usr/share/virt-manager/virt-install", line 560, in start_install dom = guest.start_install(meter=meter, noboot=options.noreboot) File "/usr/share/virt-manager/virtinst/guest.py", line 403, in start_install noboot) File "/usr/share/virt-manager/virtinst/guest.py", line 467, in _create_guest dom = self.conn.createLinux(start_xml or final_xml, 0) File "/usr/lib/python2.7/dist-packages/libvirt.py", line 3440, in createLinux if ret is None:raise libvirtError('virDomainCreateLinux() failed', conn=self) libvirtError: internal error: Cannot find suitable CPU model for given data [Thu, 20 Nov 2014 13:56:36 virt-install 1842] DEBUG (cli:248) Domain installation does not appear to have been successful. svm and svm_lock are present in /proc/cpuinfo, in the initial output of virt-install with --debug, it says it will use the proper cpu: <cpu mode="custom" match="exact"> <model>Opteron_G3</model> </cpu> I've tried using --cpu host, --cpu best, --cpu Opteron_G3, all fail with the same error. Anyone know what I can do here? I'd like to stick with KVM, but maybe Xen would work? I'm not sure if this error is coming from libvirt, or KVM itself. Thanks! mb

1 0

[libvirt-users] maxvcpus
by Laszlo Hornyak 20 Nov '14

20 Nov '14

Hi list, According to the libvirt documentation [1] "Show maximum number of virtual CPUs for guest domains on this connection" This may not be a complete definition. My first guess from the above was that this returns the number of virtual CPUs that can exist at the same time on the host, either one or several VMs. In fact it returned 16 in my fedora 20 desktop running with KVM, while this is not the real limit of vCPUs. I can define a VM with more than 16 vCPUs (which does not really make sense when I have only two cores, but it looks cool) and also I can have well over 16 virtual machines running on the host. I looked into the implementation and now I understand that each driver returns different values, but I do not understand the constants. Can you guys give me some hints how should I understand the output of the command? Best regards, Laszlo [1] : http://libvirt.org/sources/virshcmdref/html/sect-maxvcpus.html -- EOF

2 2

Re: [libvirt-users] virsh net-start default fails
by Michal Privoznik 20 Nov '14

20 Nov '14

On 22.10.2014 00:03, David Roundy wrote: > Hi Michal, > > I am attaching debug logs. > > David Well, I can see the error message there, but not the reason. Does the /etc/libvirt/qemu/networks/default.xml file exist? Michal

3 3

[libvirt-users] Whether Virsh migrate VM works with xen hypervisor??
by Ajitha Robert 20 Nov '14

20 Nov '14

Hi all By referring https://libvirt.org/migration.html.. I tried VM migration between two libvirt machines I tried instance migration with ssh, tls and tcp. In all three I got the same error as " this function is not supported by the connection driver" *Eg* migrate --live domuname xen+tls://desthostname/system error: this function is not supported by the connection driver: virDomainMigrate3 My question is Whether live migration is supported with Xen hypervisor. -- *Regards,Ajitha R*

1 0

[libvirt-users] Connecting libvirt remotely using tls: TLS handshake failed : packet with unexpected length +gnutls_handhsake Error
by Ajitha Robert 19 Nov '14

19 Nov '14

Hi all, I am facing an error while connecting libvirt remotely using tls.. I have created CA, client and server certificates with RSA 1024 bit using Openssl. I am using debian linux flavor in both client and server. *Original Error:* (When trying to connect remote libvirt) virsh -c xen+tls://destinationipaddr/system error: failed to connect to the hypervisor error: authentication failed: TLS handshake failed A TLS packet with unexpected length was received. In source code i found the error line. the return value is 21 ./src/rpc/virnettlscontext.c: ret = gnutls_handshake(sess->session); *Below are log details* *client(Initiator of ssl connection ) :* virNetTLSSessionHandshake:1351 : Ret=-21 error: authentication failed: TLS handshake failed A TLS packet with unexpected length was received. *In the server side, * virNetTLSSessionHandshake:1369 : authentication failed: TLS handshake failed Could not negotiate a supported cipher suite. Please guide me for solving this error -- *Regards,Ajitha R*

2 2

[libvirt-users] Unable to start container after OS upgrade
by mallu mallu 19 Nov '14

19 Nov '14

I upgraded my container from CentOS 6.4 to CentOS 6.5. Everything looks good after upgrade until reboot. When rebooted to container I'm getting the following errors.. Any help would be greatly appreciated /bin/mknod: `/dev/lp2': Operation not permitted /bin/chown: cannot access `/dev/lp2': No such file or directory /bin/mknod: `/dev/lp3': Operation not permitted /bin/chown: cannot access `/dev/lp3': No such file or directory /bin/mknod: `/dev/net/tun': Operation not permitted /bin/mknod: `/dev/ppp': Operation not permitted /bin/mknod: `/dev/fuse': Operation not permitted /sbin/start_udev: line 269: /proc/sys/kernel/hotplug: Read-only file system udevd[71]: file_contexts: invalid context system_u:object_r:device_t:s0 udevd[71]: file_contexts: invalid context system_u:object_r:device_t:s0 udevd[71]: matchpathcon(/dev/.udev/rules.d) failed udevd[71]: matchpathcon(/dev/.udev/rules.d) failed [ OK ] Setting hostname vm1292ussac1-goagent1.cust.aops-eds.com: [ OK ] Checking filesystems [ OK ] mount: can't find / in /etc/fstab or /etc/mtab Mounting local filesystems: [ OK ] /etc/rc.d/rc.sysinit: line 606: plymouth: command not found Enabling /etc/fstab swaps: [ OK ] init: kexec-disable main process (139) terminated with status 1

2 2

[libvirt-users] Changing 'source file' on running VM.
by mathew.moon＠vipaar.com 19 Nov '14

19 Nov '14

2 1

[libvirt-users] Problem with the use of domfsfreeze mountpoint option
by Payes Anand 18 Nov '14

18 Nov '14

Hi everybody, I am having a problem with the use of domfsfreeze command. It is freezing all the filesystems present on the domain, instead of freezing just the mountpoints provided. I am issuing the command-- # virsh domfsfreeze <domain> --mountpoint <mountpoint> Output was-- Froze 3 filesystem(s) I want to freeze a particular mount point on the VM, so that i can take a snapshot using my own snapshot feature. Using library: libvirt 1.2.5 Using API: QEMU 1.2.5 Running hypervisor: QEMU 2.0.0 --Upgraded libvirt to 1.2.10, but that also didn't solve the problem. Am i missing something over here? Any help would be greatly appreciated. Best Regards, Payes

5 8

[libvirt-users] Do not attempt to add physical NIC to virbr0
by Sagar Shedge 17 Nov '14

17 Nov '14

Hi, I got this NOTE on most of the link. But I am not getting reason for this. Why someone should not add physical NIC to virbr0. I tried to add my eth1 to virbr0 and it get added. So whether it affects to some functionality of NAT network? -- Sagar Dilip Shedge, Pune. With Regards.

2 2

[libvirt-users] Suspend Domain (virsh suspend) or Freeze Filesystems (virsh domfsfreze) to take Snapshot of ISCSI volume
by Payes Anand 16 Nov '14

16 Nov '14

Hi everybody, I am trying to take snapshot of a particular iscsi disk mounted inside the guest operating system. I have created my own snapshot feature for that. Could someone please suggest the better choice for stopping read/write operations on disk out of the two to take snapshots, or if you have any better solution, 1) freeze filesystems ( using domfsfreeze ) and then take the snapshot or, 2) suspend the VM ( using virsh suspend ) and then take the snapshot And, before taking the snapshots what other operations should i perform ( like sync or flush buffer ) for a consistent snapshot. Any help would be greatly appreciated. Best Regards, Payes

1 0

[libvirt-users] Trouble creating virtio-serial device
by David Richardson 15 Nov '14

15 Nov '14

Hello, I've running Ubuntu-14.04 as my host and my guest. I've been trying to get guest to host communication set up by configuring a virtio-serial device. My xml file contains: <channel type='unix'> <source mode='bind' path='/home/dave/vm1.agent'/> <target type='virtio' name='vm1'/> </channel> When I start up the VM, I get the following error: error: Failed to create domain from vm1.xml error: internal error: process exited while connecting to monitor: qemu-system-x86_64: -chardev socket,id=charchannel0,path=/home/dave/vm1.agent,server,nowait: Failed to bind socket: Permission denied qemu-system-x86_64: -chardev socket,id=charchannel0,path=/home/dave/vm1.agent,server,nowait: chardev: opening backend "socket" failed dmesg shows what appears to be an apparmor denial for mknod: [250108.632450] type=1400 audit(1415994657.679:152): apparmor="DENIED" operation="mknod" profile="libvirt-2fd2ec54-f644-228e-08ba-297c8b304153" name="/home/dave/vm1.agent" pid=21856 comm="qemu-system-x86" requested_mask="c" denied_mask="c" fsuid=112 ouid=112 I can add a line to /etc/apparmor.d/abstractions/libvirt-qemu similar to: owner /home/dave/vm1.agent rw, After restarting apparmor, this gets rid of the apparmor complaint, but I still get the same error from 'virsh create vm1.xml' when trying to create the VM. Any suggestions for how to fix this? Thanks, ~Dave

1 0

[libvirt-users] hostdev a Xeon Phi
by lejeczek 14 Nov '14

14 Nov '14

hi everybody I'd like to ask around if Xeon Phis are any good for passthrough? Are there any plans for near future or maybe there are already some success stories using this product? many thanks, P.

1 0

[libvirt-users] Is there a way to disable libvirt qemu monitor while creating kvm vm using virsh?
by Min Du 12 Nov '14

12 Nov '14

Hi, Now for some reason, I need to add “ -qmp tcp:127.0.0.1:1235” when creating a KVM VM using libvirt. This command meaning in “qemu-kvm --help” is: -qmp dev like -monitor but opens in 'control' mode. I added command-line equivalent options into the xml file, like below format: <qemu:commandline> <qemu:arg value="-s"/> <qemu:arg value="-qmp"/> <qemu:arg value="tcp:127.0.0.1:1235"/> </qemu:commandline> However when I create VM using this xml file, I got the error: # virsh create instance-libvirt.xml error: Failed to create domain from instance-libvirt.xml error: internal error process exited while connecting to monitor: qemu-kvm: -qmp tcp:127.0.0.1:1235: Duplicate ID 'monitor' for mon duplicate chardev: monitor The VM I created, without “—qmp” option, has below options showing in “ps aux | grep qemu-kvm”: -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/vmifs_test.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control Looks like libvirt automatically adds the monitor options upon VM creation. Is there a way to disable this and use “—qmp” instead when creating VM? Thanks for your help. Best Regards, Min

4 6

[libvirt-users] TCP or TLS Connection error
by Ajitha Robert 12 Nov '14

12 Nov '14

Hi all i am using libvirt 1.2.0 with xen hypervisor 4.4.. I am facing error while remotely connecting other libvirt using TCP or TLS. I couldnt make libvirt to listen to the port.. I installed libvirt from source in debian. I enabled --listen option by uncommenting LIBVIRTD_ARGS="--listen" /opt/libvirt-1.2.1/daemon/libvirtd.sysconf .. I killed the current libvirt. and started the daemon again.. when i gave ps aux | grep libvirtd the listen is not enabled.. Pls guide me -- *Regards,Ajitha R*

1 0