February 2014 - Users - libvirt List Archives

[libvirt-users] Error when building from source
by arnaud gaboury 19 Feb '14

19 Feb '14

Hi all, I can not build from source since a few days. Make left me with this error: Making install in tools/wireshark make[1]: Entering directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[2]: Entering directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[3]: Entering directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[3]: Nothing to be done for 'install-exec-am'. make[3]: Nothing to be done for 'install-data-am'. make[3]: Leaving directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[2]: Leaving directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[1]: Leaving directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' mv: cannot stat ‘/developement/aur/libvirt-git/pkg/libvirt-git/lib/*’: No such file or directory I am on Arch linux and use the AUR mechanism package to build/install packages from source. Here is the build part of the PKGBUILD file : build() { cd "$srcdir/libvirt" export LDFLAGS=-lX11 export RADVD=/usr/bin/radvd ./autogen.sh #./configure --prefix=/usr --libexec=/usr/lib/"$pkgname" --sbindir=/usr/bin \ ./configure --prefix=/usr --libexec=/usr/lib/"${pkgname/-git/}" --sbindir=/usr/bin \ --with-storage-lvm --without-xen --with-udev --without-hal --disable-static \ --with-init-script=systemd --with-audit \ --with-qemu-user=nobody --with-qemu-group=nobody \ --without-netcf --with-interface Thank you for help.

2 1

[libvirt-users] lxc state driver is not active
by Tom Taylor 18 Feb '14

18 Feb '14

So I've followed this tutorial on a vanilla CentOS 6.5 (x64) hardware install ... http://wiki.centos.org/HowTos/LXC-on-CentOS6 (barring the name and location of the container) I'm getting the following error when trying to intialise the container ... # virt-install --connect lxc:/// --name dns --ram 512 --vcpu 1 --filesystem /srv/lxc/dns,/ --noautoconsole ERROR internal error lxc state driver is not active Does this howto miss a step somewhere? Is something in the CentOS distribution broken? # rpm -qa | egrep 'lxc|libvirt' lxc-0.9.0-2.el6.x86_64 libvirt-python-0.10.2-29.el6_5.3.x86_64 lxc-libs-0.9.0-2.el6.x86_64 libvirt-client-0.10.2-29.el6_5.3.x86_64 libvirt-0.10.2-29.el6_5.3.x86_64 lxc-templates-0.9.0-2.el6.x86_64 Thanks Tom Taylor

1 0

[libvirt-users] libvirtd ssl configuration
by Гусев Павел 18 Feb '14

18 Feb '14

Hi! I found little semantics bug: [13:53:40] root@dedicated-04:~ # LC_ALL=C libvirtd -h libvirtd: invalid option -- 'h' Usage: libvirtd [options] Options: -v | --verbose Verbose messages. -d | --daemon Run as a daemon & write PID file. -l | --listen Listen for TCP/IP connections. -t | --timeout <secs> Exit after timeout period. -f | --config <file> Configuration file. | --version Display version information. -p | --pid-file <file> Change name of PID file. libvirt management daemon: Default paths: Configuration file (unless overridden by -f): /etc/libvirt/libvirtd.conf Sockets: /var/run/libvirt/libvirt-sock /var/run/libvirt/libvirt-sock-ro TLS: CA certificate: /etc/pki/CA/caert.pem Server certificate: /etc/pki/libvirt/servercert.pem Server private key: /etc/pki/libvirt/private/serverkey.pem PID file (unless overridden by -p): /var/run/libvirtd.pid I think that caert.pem should be cacert.pem =) Tnx. С уважением, Гусев Павел Руководитель отдела системного администрирования QSOFT | Ведущий web-интегратор офис 7(495) 771-7363 #110 | моб. 7(926) 850-1108 pgusev(a)qsoft.ru Москва, Авангардная улица, 3 | qsoft.ru San Francisco, 222 Columbus Ave | qsoftus.com

2 2

[libvirt-users] tftp server inside a container ?
by Thomas Elsgaard 16 Feb '14

16 Feb '14

Hi list I am trying to understand the containers in red hat 7, and i have following questions: 1) Would it be possible to run an tftp server inside an container ? 2) Can i have containers binding to vlans on the host, so that i can have containers with overlapping IP networks, but in different vlans ? What i am trying to achieve is 10 containers with an tftp server inside, where the containers are on isolated IP networks via vlans. Thomas

1 0

[libvirt-users] lxc and cgroups
by arnaud gaboury 15 Feb '14

15 Feb '14

Dear list, I am bulding a VM using libvirt and lxc for linux container. I have an issue with my cgroups settings: gabx@hortensia ➤➤ ~ # virsh start dahlia error: Failed to start domain dahlia error: internal error: No valid cgroup for machine dahlia My environement: Host : Arch Linux - systemd 208-11, libvirt 1.2.1-4 guest : Arch Linux , machine name : dahlia , /etc/libvirt/lxc/dahlia.xml , mounted in /machine/dahlia My set up so far : - gabx@hortensia ➤➤ ~ % sudo virsh uri [sudo] password for root: lxc:/// - gabx@hortensia ➤➤ ~ # virsh -c lxc:/// list --all Id Name State ---------------------------------------------------- - dahlia shut off - custom kernel with user space set gabx@hortensia ➤➤ ~ % zgrep USER_NS /proc/config.gz CONFIG_USER_NS=y - /etc/libvirt/lxc/dahlia.xml $ ls -al -rw------- 1 root root 1.1K Feb 15 12:11 /etc/libvirt/lxc/dahlia.xml $ cat <domain type='lxc'> <name>dahlia</name> <uuid>a34b58db-894f-4f4a-81f0-b13d2d5d7732</uuid> <memory unit='KiB'>409600</memory> <currentMemory unit='KiB'>409600</currentMemory> <vcpu placement='static'>1</vcpu> <resource> <partition>/machine/dahlia</partition> </resource> <os> <type arch='x86_64'>exe</type> <init>/bin/init</init> </os> <idmap> <uid start='0' target='1000' count='10'/> <gid start='0' target='1000' count='10'/> </idmap> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/lib/libvirt/libvirt_lxc</emulator> <interface type='network'> <mac address='52:54:00:89:8f:1a'/> <source network='default'/> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> </domain> - fstab : UUID=f69d032f-c80f-4f2e-84cd-d2328a862818 /machine/dahlia ext4 defaults,relatime,discard 0 1 $ ls -al drwxr-xr-x 17 root root 4.0K Feb 11 21:41 dahlia/ - /etc/cgconfig: group dahlia { perm { # who can manage limits admin { uid = 1000; gid = 1004; } # who can add task task { uid = 1000; gid = 1004; } } # create this group in the controllers cpu { } cpuset { } memory { } devices { } freezer { } net_cls { } blkio { } } - /etc/cgrules is deafult one, so everything is commented. Maybe shall I edit a line ?? - gabx@hortensia ➤➤ ~ # cat /proc/cgroups #subsys_name hierarchy num_cgroups enabled cpuset 3 5 1 cpu 4 4 1 cpuacct 4 4 1 memory 5 5 1 devices 6 4 1 freezer 7 5 1 net_cls 8 5 1 blkio 9 4 1 Something puzzles me. In /sys/fs/cgroup/blkio, I see two dirs: dahlia and machine.slice. Inside machine.slice, I see another dir machine-dahlia. I guess there is something wrong here !! Same for cpuset or other controllers. - gabx@hortensia ➤➤ ~ % systemctl status machine-dahlia.slice machine-dahlia.slice - dahlia VM slice Loaded: loaded (/etc/systemd/system/machine-dahlia.slice; static) Active: active since Sat 2014-02-15 11:53:01 CET; 15min ago Feb 15 11:53:01 hortensia systemd[1]: Starting dahlia VM slice. Feb 15 11:53:01 hortensia systemd[1]: Created slice dahlia VM slice. My systemd unit file machine-dahlia.slice in /etc/systemd/system Apologize for the long post, but I wanted to detail everything. Thank you for help on my cgroup set up.

1 2

[libvirt-users] libvirt crashes with Caught Segmentation violation
by Minami Katsumata 14 Feb '14

14 Feb '14

Hi, I'm having problems with libvirt crashing after a couple hours when a specific domain monitoring program is running. I have pasted below the following: 1. libvirt version 2. qemu-kvm version 3. OS version 4. Kernel version 5. libvirt status post-crash 6. libvirtd.log (info level dump around crash; too long to post everything so just the beginning and end. UTC) 7. custom.log (on what this domain monitoring program was doing around the time of the crash. JST) 8. FYI on the program being executed 9. other related server settings Please, if anyone can look through these and give some insight as to what is causing libvirt to crash, that would be greatly appreciated. 1.) libvirt version: # rpm -q libvirt libvirt-0.9.10-21.el6.x86_64 2.) qemu-kvm version: qemu-kvm-0.12.1.2-3.295.el6.10.x86_64 3.) OS version: # cat /etc/redhat-release CentOS release 6.3 (Final) 4.) Kernel version: # uname -r 2.6.32-279.22.1.el6.x86_64 5.) libvirt status after crash: # service libvirtd status libvirtd dead but pid file exists 6.) libvirtd.log 2014-02-06 10:25:05.173+0000: 1187: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58626,uid:0 2014-02-06 10:25:05.237+0000: 1184: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58636,uid:0 2014-02-06 10:25:05.271+0000: 1185: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58646,uid:0 2014-02-06 10:25:05.301+0000: 1184: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58648,uid:0 2014-02-06 10:25:05.400+0000: 1184: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58650,uid:0 Caught Segmentation violation dumping internal log buffer: ====== start of log ===== ^(a)05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=19 w=21, f=32 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=20 w=22, f=34 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=21 w=23, f=33 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=22 w=24, f=36 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=23 w=25, f=38 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=24 w=26, f=39 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=25 w=27, f=41 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=26 w=28, f=40 e=25 d=0 (cut out due to length) 2014-02-06 10:25:05.423+00001182: debug : virEventPollDispatchHandles:488 : EVENT_POLL_DISPATCH_HANDLE: watch=2791 events=2 2014-02-06 10:25:05.423+00001182: debug : virNetMessageFree:75 : msg=0x2326a20 nfds=0 cb=(nil) 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientCalculateHandleMode:137 : tls=(nil) hs=-1, rx=0x2266390 tx=(nil) 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientCalculateHandleMode:167 : mode=1 2014-02-06 10:25:05.423+00001182: debug : virEventPollUpdateHandle:151 : EVENT_POLL_UPDATE_HANDLE: watch=2791 events=1 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 1 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virEventPollDispatchHandles:474 : i=33 w=2793 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:506 : Cleanup 12 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupHandles:554 : Cleanup 34 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientClose:632 : client=0x22e6860 refs=3 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveStop:382 : RPC_KEEPALIVE_STOP: ka=0x225bf20 client=0x22e6860 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveTimeout:293 : EVENT_POLL_REMOVE_TIMEOUT: timer=8290 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 0 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveTimeout:293 : EVENT_POLL_REMOVE_TIMEOUT: timer=8289 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 0 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveFree:304 : RPC_KEEPALIVE_FREE: ka=0x225bf20 client=0x22e6860 refs=3 2014-02-06 10:25:05.423+00001182: debug : daemonRemoveAllClientStreams:493 : stream=(nil) 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveHandle:180 : EVENT_POLL_REMOVE_HANDLE: watch=2791 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveHandle:193 : mark delete 32 50 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 0 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virNetMessageFree:75 : msg=0x2266390 nfds=0 cb=(nil) 2014-02-06 10:25:05.423+00001182: debug : virNetSocketFree:722 : RPC_SOCKET_FREE: sock=0x22e66a0 refs=2 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientFree:591 : RPC_SERVER_CLIENT_FREE: client=0x22e6860 refs=3 2014-02-06 10:25:05.423+00001182: debug : virEventRunDefaultImpl:244 : running default event implementation 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:506 : Cleanup 12 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:519 : EVENT_POLL_PURGE_TIMEOUT: timer=8289 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveFree:304 : RPC_KEEPALIVE_FREE: ka=0x225bf20 client=0x22e6860 refs=2 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:519 : EVENT_POLL_PURGE_TIMEOUT: timer=8290 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveFree:304 : RPC_KEEPALIVE_FREE: ka=0x225bf20 client=0x22e6860 refs=1 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientFree:591 : RPC_SERVER_CLIENT_FREE: client=0x22e6860 refs=2 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupHandles:554 : Cleanup 34 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupHandles:567 : EVENT_POLL_PURGE_HANDLE: watch=2791 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientFree:591 : RPC_SERVER_CLIENT_FREE: client=0x22e6860 refs=1 2014-02-06 10:25:05.423+00001182: debug : virConnectClose:1462 : conn=0x7f1b380c4630 2014-02-06 10:25:05.423+00001182: debug : virUnrefConnect:145 : unref connection 0x7f1b380c4630 1 2014-02-06 10:25:05.423+00001182: debug : virReleaseConnect:94 : release connection 0x7f1b380c4630 ====== end of log ===== 7.) custom.log Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM Interf ace Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM vnet4 Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domiflist i-8-114-VM Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM Interf ace Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM vnet4 Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so 8.) FYI on this program: This program consists of three main scripts that are run via cron. 2 run every 5 minutes, and 1 runs every minute. The two scripts that are executed every 5 minutes rely heavily on the virsh command. However, it is made so that the simultaneous number of connections to libvirt is not too large; the max number of libvirt-sock connections at any given moment does not go over 6. As it is a domain monitoring program, it only executes the following virsh commands: virsh list --all virsh dominfo virsh domblklist virsh domblkstat virsh domiflist virsh domifstat 9.) other related server settings 9-1) user resource limits [root@ ~]# ulimit -a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 773493 max locked memory (kbytes, -l) 64 max memory size (kbytes, -m) unlimited open files (-n) 1024 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) 10240 cpu time (seconds, -t) unlimited max user processes (-u) 32768 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited 9-2) libvirtd.conf The following settings have been changed: #max_clients = 20 max_clients = 250 #max_workers = 20 max_workers = 250 #max_requests = 20 max_requests = 250 Regards, Minami

2 2

[libvirt-users] F20 Virt-Manager with MacVTap not working
by John Obaterspok 13 Feb '14

13 Feb '14

Hello, I've setup a VM with default networking (NAT) and this works fine but hosts on my LAN can't get to the VM since it uses NAT. When I try to set network to use MacVTap with either default or bridged I get no networking for the VM. Any hints around this? I would like to have the VM's on the same LAN as my host and other machines. I don't care if the VM host can't reach the guests. It did work find in F19 but there I believe I had more MacVtap devices to choose from. -- john

2 4

[libvirt-users] Help? Running into problems with migrateToURI2() and virDomainDefCheckABIStability()
by Chris Friesen 13 Feb '14

13 Feb '14

Hi, We've run into a problem with libvirt 1.1.2 and are looking for some comments on whether this is a bug or design intent. We're trying to use migrateToURI() but we're using a few things (numatune, vcpu mask, etc.) that may need adjustment during the migration. We found that migrateToURI2() mostly works if we use XML created by copying the domain XML from the running instance and modifying the appropriate sections. The problem that we're seeing is that the serial console checking in libvirt/src/conf/domain_conf.c::virDomainDefCheckABIStability() is failing even though we haven't touched the serial console XML: 2014-02-10 19:41:07.196 1264 ERROR nova.virt.libvirt.driver [-] [instance: 42a841a8-034f-4565-937e-adb396a2ec48] Live Migration failure: unsupported configuration: Target domain console count 1 does not match source 0 On occasion it passes if the devices/serial/source element happens to be the same after migration, but this seems to be a fluke. If we remove the devices/serial/source element in the XML it seems to make the serial console check work on the first migration, but upon doing subsequent migration it fails with a console count error: 2014-02-07 16:11:32.459 28759 ERROR nova.virt.libvirt.driver [-] [instance: 1d7c470d-4337-450a-8a40-d0fb375ca2c1] Live Migration failure: unsupported configuration: Target domain console count 0 does not match source 1 Are we doing something wrong? Is there an issue with the console check code? Is there a better way to do what we're trying to do? Any help would be appreciated... Thanks, Chris

3 4

[libvirt-users] Can you verify currently defined libvirt secret provides valid Cephx auth?
by Scott Sullivan 13 Feb '14

13 Feb '14

As the subject suggests, I am wondering if its possible to verify if the currently defined libvirt secret provides valid authentication via Cephx to a Ceph cluster? I ask because ideally I would like to verify that the given cephx credentials in my libvirt secret are valid before I even attempt the virsh attach-device on the domain. I tried searching for a solution to this, but I can't seem to find a way to _just_ check if the currently defined libvirt secret provides valid authentication to the Ceph cluster or not. Is this possible?

2 2

[libvirt-users] LXC container driver
by arnaud gaboury 13 Feb '14

13 Feb '14

Dear all, I am slowly building a Arch Linux VM guest on my Arch Linux host. The guest machine is now built and is recognized as shown by this command : gabx@hortensia ➤➤ ~ % machinectl list MACHINE CONTAINER SERVICE dahlia container nspawn 1 machines listed. I an following the libvirt.org documentation. Now, according this page[1] about lxc driver, i am dealing with namespace requirements. This sentence, in bold, puzzles me: A suitably configured UID/GID mapping is a pre-requisite to making containers secure, in the absence of sVirt confinement. If I understand what a namespace is, I have no idea how to make sure my UIG/GID mapping is well configured. I would appreciate having any hints abut this part of the settings. Another question : is there any advantage/disadvantage using the lxc Userspace tools[2] instead of libvirt to manage these namespaces ? Thank you for help. [1]http://libvirt.org/drvlxc.html [2]http://linuxcontainers.org/

2 5

[libvirt-users] Connection from host to lxc container dbus
by Piotr Bartosiewicz 12 Feb '14

12 Feb '14

Hi, I am unsuccessfully trying to connect from host to containers dbus. Inside container dbus socket file is visible as /run/dbus/system_bus_socket. The problem is that /run is mounted as tmpfs in container (by systemd on container) and thus the directory content is not visible outside the container. Is there any way to make this file visible also outside the container? Regards, Piotrek

2 2

[libvirt-users] SR-IOV: no traffic isolation between VFs with Broadcom 10Gbps cards
by Yoann Juet 11 Feb '14

11 Feb '14

Hi all, I'm testing on debian/unstable SR-IOV feature with Broadcom BCM57810 cards and KVM hypervisor: Compiled against library: libvirt 1.2.1 Using library: libvirt 1.2.1 Using API: QEMU 1.2.1 Running hypervisor: QEMU 1.7.0 bnx2x -> firmware 7.8.17 -> driver from kernel 3.12.7 8 VFs are created on the first PF. For each VF, a specific mac address is set manually using "ip link set eth0 vf x mac xx:xx:xx:xx:xx" command. I run several KVM guests with PCI passthrough (same kernel, bnx2x driver and firmware as the host), performance is close to bare metal. Well, that sounds good, until I start capturing the traffic inside each VM: host traffic is visible as well as traffic destined to other VM. It's like if internal card switching was inoperable. I made several tests with different kernels, different PCIe Passthrough method assignments for libvirt. All failed. Has anyone successfully experiment SR-IOV with Broadcom cards on linux ? ----- Some details: 01:00.0 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet (rev 10) 01:00.1 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet (rev 10) 01:09.0 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function 01:09.1 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function 01:09.2 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function 01:09.3 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function 01:09.4 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function 01:09.5 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function 01:09.6 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function 01:09.7 Ethernet controller: Broadcom Corporation NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function # virsh nodedev-dumpxml pci_0000_01_09_0 <device> <name>pci_0000_01_09_0</name> <path>/sys/devices/pci0000:00/0000:00:01.0/0000:01:09.0</path> <parent>pci_0000_00_01_0</parent> <driver> <name>vfio-pci</name> </driver> <capability type='pci'> <domain>0</domain> <bus>1</bus> <slot>9</slot> <function>0</function> <product id='0x16af'>NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function</product> <vendor id='0x14e4'>Broadcom Corporation</vendor> <capability type='phys_function'> <address domain='0x0000' bus='0x01' slot='0x00' function='0x1'/> </capability> <iommuGroup number='35'> <address domain='0x0000' bus='0x01' slot='0x09' function='0x0'/> </iommuGroup> </capability> </device> # virsh nodedev-dumpxml pci_0000_01_09_1 <device> <name>pci_0000_01_09_1</name> <path>/sys/devices/pci0000:00/0000:00:01.0/0000:01:09.1</path> <parent>pci_0000_00_01_0</parent> <driver> <name>vfio-pci</name> </driver> <capability type='pci'> <domain>0</domain> <bus>1</bus> <slot>9</slot> <function>1</function> <product id='0x16af'>NetXtreme II BCM57810 10 Gigabit Ethernet Virtual Function</product> <vendor id='0x14e4'>Broadcom Corporation</vendor> <capability type='phys_function'> <address domain='0x0000' bus='0x01' slot='0x00' function='0x1'/> </capability> <iommuGroup number='36'> <address domain='0x0000' bus='0x01' slot='0x09' function='0x1'/> </iommuGroup> </capability> </device> Guest A XML: ... <hostdev mode='subsystem' type='pci' managed='yes'> <source> <address domain='0x0000' bus='0x01' slot='0x09' function='0x0'/> </source> </hostdev> ... Guest B XML: ... <hostdev mode='subsystem' type='pci' managed='yes'> <source> <address domain='0x0000' bus='0x01' slot='0x09' function='0x1'/> </source> </hostdev> ... -- Université de Nantes - Direction des Systèmes d'Information

2 3

[libvirt-users] libvirt 1.2.1 / lxc : default virtual network not defined after installing/starting Libvirt
by Mohamed Amine Larabi 11 Feb '14

11 Feb '14

Hi There, I am using Libvirt 1.2.1 on Fedora 20. So, Libvirt is well installed and started but the weird thing is that the 'default' virtual network is not automatically defined and started, knowing that I can define/start it manually and everything goes fine. previously I was using libvirt 1.0.4 and the 'default' virtual network was defined/started at Libvirt startup. so, I am wondering if this new behavior was introduced intentionally in the latest versions of Libvirt or it's a known issue. Thank you in advance for your help. Regards Mohamed.

2 2

[libvirt-users] event-test.py cannot detects domain shutdown
by Kim Larry 11 Feb '14

11 Feb '14

Hi, I used event-test.py from here: http://libvirt.org/git/?p=libvirt-python.git;a=blob;f=examples/event-test.p… which is very lasted version. However, it detects all of events but not domain shutdown. I've searched through Google and got nothing. libvirtd version is 1.1.4 and using Xen for hypervisor. Any ideas? Larry

2 1

[libvirt-users] libvirt/qemu and cgroups
by arnaud gaboury 11 Feb '14

11 Feb '14

Dear list, I am building a Arch server on my Arch box. My tools are QEMU/KVM and libvirt to manage the guest, systemd as system manager. I am looking at implementing the Linux Control Groups facilities for resource management. Even after long hours of reading, I am not quite sure about how to deal with the cgroups facilities. First, do I really need to care about all that, or libvirt and systemd will manage the resource in an efficient way right out of the box? If not, It's all about /etc/cgconfig.conf and cgrules.conf. I am honestly not sure : -what are the correct mount points for cpu, memory etc in the /sys/fs/cgroup directory . - which directories am I supposed to mk, if any ? Then, Archwiki[1] says: # cgcreate -a $USER -g memory,cpu:groupname - what is the groupename I shall create (qemu*, MyMachine) ? - which $USER shall I use (qemu*, my username) ? * qemu:qemu as user:group in /etc/libvirt/qemu.conf Thank you for some help as I admit if I understand the cgroups principle and advantages, I am far from understanding how to create such a group in case of a VM. [1]https://wiki.archlinux.org/index.php/Cgroups

3 7

[libvirt-users] How to use /dev/mapper in virt-manager/libvirt
by Marc Haber 10 Feb '14

10 Feb '14

Hi, my test host is running Debian/GNU Linux unstable and has virt-manger 0.9.5 and libvirt 1.2.1. I am using encryption and thus have devices in /dev/mapper that are not LVs, for example called /dev/mapper/myvirtualdisk. I'd like to configure libvirt in a way that allows me to directly assign such devices to a VM. This does not work when I create a filesystem directory storage pool in virt-manager since virt-manager obviously choked in /dev/mapper/control, which is a character special device that is only readable by root. I currently help myself by linking the devices in question manually to /dev/luksdev and having a filesystem directory storage pool point to that directory. this works, but is ugly. Is there a nicer way to get the contents of /dev/mapper available as volumes in virt-manager? Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 31958061 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 31958062

2 1

[libvirt-users] Failed to terminate process X with SIGKILL: Device or resource busy
by sylecn 10 Feb '14

10 Feb '14

Hi, I'm using libvirt/kvm with openstack. When vm has CPU stall, the instance can't be destroyed. I have asked the question on openstack user mailing list and received no answers in weeks. Here is one example: # virsh destroy instance-00000085 error: Failed to destroy domain instance-00000085 error: Failed to terminate process 61222 with SIGKILL: Device or resource busy # lsof -p 61222 # ps -f -p 61222 UID PID PPID C STIME TTY TIME CMD 107 61222 1 68 Jan24 ? 9-23:06:19 [qemu-system-x86] <defunct> The log in /var/log/libvirt/libvirtd.log: 2014-02-08 03:21:31.597+0000: 2177: error : virProcessKillPainfully:315 : Failed to terminate process 61222 with SIGKILL: Device or resource busy Restart libvirt-bin service did not solve the problem. virsh shutdown/reboot just hang. Maybe that is because the CPU in vm is stalled. I wonder if there is some way to destroy (or rebuild) dead instance without rebooting the hypervisor. Any suggestions is welcome. The software I am running: hypervisor os: ubuntu 12.04.3 hypervisor kernel: 3.8.0-35-generic vm os: ubuntu 12.04 vm kernel: 3.2.0-56-virtual openstack: havana libvirt: 1.1.1-0ubuntu8~cloud2 Thanks, Yuanle

1 1

[libvirt-users] Automate Windows 7 installation via Answer file
by RAJESH David John 08 Feb '14

08 Feb '14

Hello, Is there a means to automate windows 7 installation after Running "Virsh create windows7.xml" OS = Centos 6.2 Hypervisor = KVM Any ideas or pointer is greatly appreciated. Thanks Rajesh J

3 3

[libvirt-users] Connecting disks to controller virtio-scsi of qemu/kvm
by chickenmarkus＠freenet.de 08 Feb '14

08 Feb '14

Hello, I try to use the virtio-scsi driver to use my disks. But my setup at first: * in general Debian Wheezy * Kernel: 3.11-0.bpo.2-amd64 (http://packages.debian.org/wheezy-backports/linux-image-3.11-0.bpo.2-amd64) * Qemu-KVM: 1.7.0 (http://packages.debian.org/jessie/qemu-kvm) * Virsh 1.2.1 (http://packages.debian.org/jessie/libvirt-bin) The new kernel and dirty things from Jessie are for discard support (also not working with current configuration despite thin volumes with working discard). Once I have the this "new" qemu version, why not to use virtio... Every disk with target bus "scsi" gets an own scsi-hd device. Libvirt ignores the scsi controller of type virtio-scsi. Here is a XML snippet: <devices> <controller type='scsi' model='virtio-scsi' index="0"/> <disk type="block" device="disk"> <source dev="/dev/ssd0/sarabi"/> <driver discard="unmap"/> <target dev="sda" bus="scsi"/> <address type="drive" controller="0" bus=0/> </disk> </devices> This creates the virtio-scsi controller (verified by lspci in guest) but do not "connect" the disks to it. The resulting command line looks following: kvm [...] -device virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x5 -drive file=/dev/ssd0/sarabi,if=none,id=drive-scsi0-0-0-0,format=raw,discard=unmap -device scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0,bootindex=2 [...] How get my disk to run over virtio-scsi? Or did I found something like a bug? Bye Markus

1 2

[libvirt-users] Can I move the disk image of the guest while it is running?
by Gergely Horváth 08 Feb '14

08 Feb '14

Hello guys! We want to move some guests' disk images to different locations (within the same machine, locally), but we do not want to turn off the guests. Can we do that while the guest is running, like live migration? I did not find any related documentation or posts about it. Let's say the guest has a disk at /ssd/image.raw We want to move that to /hdd/image.raw Is there any way to do that without interrupting the guest? -- Üdvözlettel / Best regards Horváth Gergely | gergely.horvath(a)inepex.com IneTrack - Nyomkövetés egyszerűen | Inepex Kft. Ügyfélszolgálat: support(a)inetrack.hu | +36 30 825 7646 | support.inetrack.hu Web: www.inetrack.hu | nyomkovetes-blog.hu | facebook.com/inetrack Inepex - The White Label GPS fleet-tracking platform | www.inepex.com

4 10

[libvirt-users] Question about managing migration transfers
by Joaquim Barrera 07 Feb '14

07 Feb '14

Hi folks, As part of a project I am working on, I need to control every step of a migration, from when I establish the connection to the destination, to when I decide to move data blocks, its size, etc. As I can see in the documentation, tunnelled migration allows some kind of control, as the data goes through libvirt before leaving the host. May someone put more light on the subject? Is there any possibility to achieve such control I am looking for, or libvirt hacking will be needed? Thank you very much.

1 0

[libvirt-users] Extending an existing LVM pool - vgextend and pool XML
by Daniel H Barboza 05 Feb '14

05 Feb '14

Hi, I am trying to figure it out the best way to add a disk/partition to an existing LVM pool. A google search led me to this link (a thread from this same mailing list, September 2013): https://www.redhat.com/archives/libvirt-users/2013-September/msg00136.html The interesting part is this: " On 21/09/13 02:15, McEvoy, James wrote: I looked around but could not find any info on how to expand a libvirt managed LVM storage pool. I do not see any virsh command to do it but I was successful using the vgexpand command to add some more storage once I destroyed the pools and then restarted it. I'd like to verify that this is the proper way to grow the storage in a libvirt LVM storage pool. It's not the proper way in principle, but since libvirt doesn't supportto extendthe volume groups for a logical pool yet, it's the only way now. Onehint though,you can try to refresh the pool by command "virsh pool-refresh" afterthe volume group of the pool is extended. I.e, don't have to restart the pool." I've tried this method and it works, but checking the pool XML using "virsh pool-edit <vg_name>" shows that the XML didn't change. Is it intended? The versions I'm using: # libvirtd --version libvirtd (libvirt) 1.1.3 # virsh --version 1.1.3 Any thoughts/comments are welcome. Thanks!

1 0

[libvirt-users] libvirt-1.2.0
by cool dharma06 04 Feb '14

04 Feb '14

hi, i am using libvirt-1.2.0 which is installed from source. Which i am using to launch instance on xen. its working fine when i am launching vm from the root user. But i am entered as another user means its throwing the error. And libvirt is working fine in that user except the creating vm: Please refer the following things: eucalyptus@cooldharma06:/opt/i-47FD0798$ virsh -c xen:/// WARNING: gnome-keyring:: couldn't connect to: /home/dharmalingams/.cache/keyring-r004e7/pkcs11: Permission denied Welcome to virsh, the virtualization interactive terminal. Type: 'help' for help with commands 'quit' to quit virsh # version Compiled against library: libvirt 1.2.0 Using library: libvirt 1.2.0 Using API: Xen 1.2.0 Running hypervisor: Xen 4.3.0 virsh # list Id Name State ---------------------------------------------------- *virsh # create libvirt_sec.xml * *error: Failed to create domain from libvirt_sec.xml* *error: access denied* >From the libvirtd.log: 2014-01-31 09:46:16.329+0000: 27937: error : virAccessDriverPolkitCheck:176 : access denied: Policy kit denied action org.libvirt.api.domain.write from 28281,1877379: exit status 1 2014-01-31 09:46:16.329+0000: 27937: error : virAccessManagerSanitizeError:203 : access denied 2014-01-31 09:46:16.329+0000: 27937: error : virAccessManagerSanitizeError:203 : access denied Suggest me some solution to solve this one. Thanks & Regards, cooldharma06.

2 1

[libvirt-users] Management of host device for network passthrough
by Richard Gomes 03 Feb '14

03 Feb '14

Hello, I've configured a network passtrough like this: <interface type='direct'> <mac address='52:54:00:ec:e8:d9'/> <source dev='eth1' mode='passthrough'/> <target dev='macvtap0'/> <model type='rtl8139'/> <alias name='net1'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x09' function='0x0'/> </interface> OK. it works :) There's only one small difficulty: I have to make sure the host network interface is down before I start the VM. Then, after the VM starts, I have to bring the host network interface up by hand. If the host interface is up before the VM starts, the VM fails to start. If I do not bring the host network interface up after the VM starts, the VM cannot effectively communicate using that network interface. Does anybody has a "clean" solution for it, I mean: without employing some external "dirty" script or so? Thanks -- Richard Gomes http://rgomes.info http://www.linkedin.com/in/rgomes mobile: +44(77)9955-6813 inum <http://www.inum.net/>: +883(5100)0800-9804 sip:rgomes@ippi.fr

1 0

[libvirt-users] Trouble configuring with macvtap passthrough on Debian Wheezy / Jessie
by Richard Gomes 03 Feb '14

03 Feb '14

( Posting again. Correct subject line now! ) Hello, I'm trying to use macvtap on Debian Wheezy. Actually, I've installed a recent version of libvirt and qemu from Jessie, using wheezy-backports. $ virsh version Compiled against library: libvirt 1.2.1 Using library: libvirt 1.2.1 Using API: QEMU 1.2.1 Running hypervisor: QEMU 1.7.0 I'm trying to configure a macvtap interface like this: <interface type='direct'> <mac address='52:54:00:7b:05:cd'/> <source dev='eth1' mode='passthrough'/> <model type='rtl8139'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x08' function='0x0'/> </interface> The interface eth1 is used exclusively by this VM, so as far as I understand, mode 'passthrough' is enough since I'd like to "plug" the VM straight onto a public static IP. On my /etc/networks/interfaces, I have this: # start :: define eth1 iface eth1 inet manual # end :: define eth1 It does not matter whether eth1 is up or down, when I try to start the VM, I get the following error: Error starting domain: Cannot create macvlan devices on this platform: Function not implemented Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/asyncjob.py", line 45, in cb_wrapper callback(asyncjob, *args, **kwargs) File "/usr/share/virt-manager/virtManager/asyncjob.py", line 66, in tmpcb callback(*args, **kwargs) File "/usr/share/virt-manager/virtManager/domain.py", line 1114, in startup self._backend.create() File "/usr/lib/python2.7/dist-packages/libvirt.py", line 866, in create if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self) libvirtError: Cannot create macvlan devices on this platform: Function not implemented Trying to solve the issue, I found this: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737097 I've tried to rebuild the package from Debian sources, but apparently, macvtap is already defined, as I've reported to another mailing list. For your information: > I'm new to building packages from Debian sources, so I followed > instructions from > > https://wiki.debian.org/HowToPackageForDebian#Building_Debian_packages > > $ apt-get -t wheezy-backports source libvirt > $ cd libvirt-0.9.12.3/ > $ sudo apt-get build-dep libvirt > $ debuild -i -us -uc -b > > So... yes, it works and builds without any errors. > > Next step now is applying the changes mentioned. > But I'm confused because /apparently/ debian/rules is already the way > it should be. > > ifneq (,$(findstring $(DEB_HOST_ARCH_OS), linux)) > WITH_STORAGE_LVM = --with-storage-lvm > WITH_STORAGE_ISCSI = --with-storage-iscsi > WITH_STORAGE_DISK = --with-storage-disk > WITH_UDEV = --with-udev --without-hal > WITH_CAPNG = --with-capng > WITH_POLKIT = --with-polkit > * WITH_MACVTAP = --with-macvtap** > ** WITH_NETWORK = --with-network** > * WITH_QEMU = --with-qemu > WITH_OPENVZ = --with-openvz > WITH_NETCF = --with-netcf > ifneq (,$(findstring $(DEB_HOST_ARCH), amd64 i386 ia64 mips mipsel powerpc)) > WITH_NUMA = --with-numactl > else > WITH_NUMA = --without-numactl > endif > ifneq (,$(findstring $(DEB_HOST_ARCH), ia64)) > WITH_LXC = --without-lxc > else > WITH_LXC = --with-lxc > endif > else > WITH_STORAGE_LVM = --without-storage-lvm > WITH_STORAGE_ISCSI = --without-storage-iscsi > WITH_STORAGE_DISK = --without-storage-disk > WITH_UDEV = --without-udev --with-hal > WITH_CAPNG = --without-capng > WITH_POLKIT = --without-polkit > * WITH_MACVTAP = --without-macvtap** > ** WITH_NETWORK = --without-network** > * WITH_QEMU = --without-qemu > WITH_LXC = --without-lxc > WITH_NUMA = --without-numactl > WITH_NETCF = --without-netcf > endif > > > I suppose that nothing has to be changed, correct? ... since the > _/then/_ branch already has the change mentioned and the _/else/_ > branch probably means that nothing related to networking would be > enabled anyway. > > Am I missing something ? Thoughts? Thanks a lot :) -- Richard Gomes http://rgomes.info http://www.linkedin.com/in/rgomes mobile: +44(77)9955-6813 inum <http://www.inum.net/>: +883(5100)0800-9804 sip:rgomes@ippi.fr

1 1