June 2015 - Users - libvirt List Archives

[libvirt-users] ceph rbd pool and libvirt manageability (virt-install)
by Jelle de Jong 29 Aug '18

29 Aug '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everybody, I created a rbd pool and activated it, but I can't seem to create volumes in it with virsh or virt-install? # virsh pool-dumpxml myrbdpool <pool type='rbd'> <name>myrbdpool</name> <uuid>2d786f7a-2df3-4d79-ae60-1535bcf1c6b5</uuid> <capacity unit='bytes'>6997998301184</capacity> <allocation unit='bytes'>10309227031</allocation> <available unit='bytes'>6977204658176</available> <source> <host name='ceph01.powercraft.nl' port='6789'/> <host name='ceph02.powercraft.nl' port='6789'/> <host name='ceph03.powercraft.nl' port='6789'/> <name>libvirt-pool</name> <auth type='ceph' username='libvirt'> <secret uuid='029a334e-ed57-4293-bb99-ffafa8867122'/> </auth> </source> </pool> # virt-install --version 1.0.1 # virsh --version 1.2.9 I ended using virsh edit ceph-test.powercraft.nl and making creating the disk manually. <disk type='network' device='disk'> <auth username='libvirt'> <secret type='ceph' uuid='029a334e-ed57-4293-bb99-ffafa8867122'/> </auth> <source protocol='rbd' name='libvirt-pool/kvm01-storage'> <host name='ceph01.powercraft.nl' port='6789'/> <host name='ceph02.powercraft.nl' port='6789'/> <host name='ceph03.powercraft.nl' port='6789'/> </source> <target dev='vdc' bus='virtio'/> </disk> I use virt-install a lot to define, import and undefine domains, how can I use virt-install to manage my rdb disks? Kind regards, Jelle de Jong -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iJwEAQECAAYFAlV1xlQACgkQ1WclBW9j5HkbPQP+PjNrzvlqysslOp2Yk7wH4Mxy 2sh2dn96G0KOAHEeEn3BN6IWlnD1TADZbHdpTtMwkdv48Xwn0sP1s+3QDM4pb3gP n+z+dVxS8FouDIy/eiso3IBCj3g4TWbEX8ZHqs3jKqe0lZgAXBzB9xYSUowcEBrZ ddkPbr8p8ozWyOG+9V8= =lkK7 -----END PGP SIGNATURE-----

2 3

[libvirt-users] virRandomBits - not very random
by Brian Rak 01 Jun '18

01 Jun '18

I just ran into an issue where I had about 30 guests get duplicate mac addresses assigned. These were scattered across 30 different machines. Some debugging revealed that: 1) All the host machines were restarted within a couple seconds of each other 2) All the host machines had fairly similar libvirtd pids (within ~100 PIDs of each other) 3) Libvirt seeds the RNG using 'time(NULL) ^ getpid()' This perfectly explains why I saw so many duplicate mac addresses. Why is the RNG seed such a predictable value? Surely there has to be a better source of a random seed then the timestamp and the pid? The PID seems to me to be a very bad source of any randomness. I just ran a test across 60 of our hosts. 43 of them shared their PID with at least one other machine.

7 13

[libvirt-users] Libvirt bite sized tasks
by Michal Privoznik 21 Mar '16

21 Mar '16

Dear lists, I've just started new wiki page which aim is to summarize small and trivial tasks, that starting contributors can take, investigate and implement. The aim is to give them something easy to start with while not scaring them out about complexity of our code. The page can be found here: http://wiki.libvirt.org/page/BiteSizedTasks The name is copied from qemu wiki: http://wiki.qemu.org/BiteSizedTasks Please, feel free to extend the list. I plan to use it in the future when interviewing GSoC candidates. Michal

2 1

[libvirt-users] virDomainCoreDumpWithFormat files created as root
by NoxDaFox 19 Nov '15

19 Nov '15

Greetings, I am dumping a guest VM memory for inspection using the command "virDomainCoreDumpWithFormat" and the created files appear to belong to root (both user and group). I have searched around but didn't find any answer. Is there a way to instruct QEMU to create those files under a different user? Thank you.

5 7

[libvirt-users] Access to virtualization on a multi-user system
by sbaugh＠catern.com 09 Jul '15

09 Jul '15

Hi libvirt-users, I find myself wanting to do something that seems like it must have some obvious solution: I have multiple users (let's just assume local Unix accounts) on a Linux system, and I want them all to have access to KVM-accelerated virtualization. But, I don't want them to be able to meddle with each other's virtual machines. Is there a solution to this problem? Methods of attack that have occured to me: - Use PolicyKit to only allow a user to access qemu:///system VMs that are somehow marked as owned by that user - Run multiple libvirt qemu:///system daemons and restrict access to each on a per-user basis - Allow qemu:///session VMs to actually be KVM-accelerated (this seems like the best way to do it, but I have no idea if that's even possible) Again, the third seems like the best way, but I'm not sure of how to allow such VMs to be KVM-accelerated, and not sure if it's possible for them to use anything other than usermode networking. Hopefully I'm missing some obvious way to do it! Thanks for any assistance!

3 2

[libvirt-users] Slow network performance issues
by Alex Regan 03 Jul '15

03 Jul '15

Hi, I have a fedora21 system that's been running fine under normal network activity, but trying to perform a full backup of the 300GB filesystem is taking forever because the network speed appears to be very slow. Using rsync, the transfer speeds reach a max of like 180kB/s. Using rsync to copy files on the local filesystem is greater than 55MB/s, so I don't think it's a disk issue. What kind of network speed can I expect copying data across the network from the guest to another host on the same gigabit network? I'm using the virtio driver: # lsmod|grep virtio virtio_console 28672 0 virtio_balloon 16384 0 virtio_net 32768 0 virtio_blk 20480 4 virtio_pci 24576 0 virtio_ring 20480 5 virtio_blk,virtio_net,virtio_pci,virtio_balloon,virtio_console virtio 16384 5 virtio_blk,virtio_net,virtio_pci,virtio_balloon,virtio_console ethtool on the vnet0 interface shows the speed at only 10Mb/s. Is that normal? Or even changable? I've included the qemu command-line below. # ps ax|grep propguest 1582 ? Sl 25433:37 /usr/bin/qemu-system-x86_64 -machine accel=kvm -name propguest -S -machine pc-1.2,accel=kvm,usb=off -m 16384 -realtime mlock=off -smp 4,sockets=4,cores=1,threads=1 -uuid b67e10fe-7ef0-a1ca-cecf-3f3506d54e1a -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/propguest.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -drive file=/var/lib/libvirt/iso-images/Fedora-18-x86_64-DVD.iso,if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/var/lib/libvirt/images/propguest.img,if=none,id=drive-virtio-disk0,format=qcow2 -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -drive file=/var/lib/libvirt/images/propguest-2.img,if=none,id=drive-virtio-disk2,format=raw -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x9,drive=drive-virtio-disk2,id=virtio-disk2 -netdev tap,fd=23,id=hostnet0,vhost=on,vhostfd=24 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:11:66:5a:51,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -spice port=5900,addr=127.0.0.1,disable-ticketing,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=67108864,bus=pci.0,addr=0x2 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x8 Any ideas greatly appreciated. Thanks, Alex

3 2

[libvirt-users] qemu-img snapshots configuration
by sergio 01 Jul '15

01 Jul '15

Hello. What it the difference in external snapshot configuration with and without <domainsnapshot> ? What is the difference between vda and vdb in the following example? (From https://libvirt.org/formatsnapshot.html) <domainsnapshot> ... <memory snapshot='no'/> <disks> <disk name='vda' snapshot='external'> <driver type='qcow2'/> <source file='/path/vda-delta.qcow2'/> </disk> <disk name='vdb' snapshot='no'/> </disks> <domain> ... <devices> <disk type='file' device='disk'> <driver name='qemu' type='raw'/> <source file='/path/vda-img.qcow2'/> <target dev='vda' bus='virtio'/> </disk> <disk type='file' device='disk' snapshot='external'> <driver name='qemu' type='raw'/> <source file='/path/vdb-img.qcow2'/> <backingStore type='file'> <format type='qcow2'/> <source file='/path/vdb-delta.qcow2'/> </backingStore> <target dev='vdb' bus='virtio'/> </disk> ... </devices> </domain> </domainsnapshot> -- sergio.

1 0

[libvirt-users] QEMU-KVM and bare metal performance impact
by nishtala 01 Jul '15

01 Jul '15

Hi, My name is Rajiv Nishtala and I am a PhD student in UPC. I am trying to investigate the performance (instructions per second (IPS)) impact of an application on QEMU-KVM and bare metal using the performance monitoring tools perfmon and perf. The performance counter used for measuring this is "instructions" and "instructions_retired" on perf and perfmon, respectively. The application is a *stress* microbenchmark that does not produce any cache misses (LLC). I account for the performance of the application on QEMU-KVM using the following procedure: A) Record the IPS of the QEMU-KVM (using its PID) on perf and perfmon when idle. B) Launch the stress benchmark and record IPS. C) the difference between *B* and *A* should give the performance of the application since the KVM does not inherently provide a technique to collect this statistic. However the performance of the application on bare metal is recorded as is using the per-thread session available in perfmon and perf. The sampling frequency to collect the statistics is 1 second. The result obtained on bare metal are in the order of magnitude of billions. On the other hand, results from KVM do not show any difference in performance when idle or when an application is running and is in the order of magnitude of 100's of thousands. IPS_KVM_IDLE LLC_KVM_IDLE IPS_KVM_STRESS LLC_KVM_STRESS IPS_bare metal_STRESS LLC_bare metal_STRESS 47902 2495 25157 600 8116556011 3805 23437 758 48762 1032 8166564000 2140 834370 9954 543690 2379 8326333629 234 25261 662 49139 997 8057453733 1399 47998 2767 23773 600 8214761042 494 542039 2299 843266 2231 8075529487 4593 47982 2781 25249 603 8327678364 443 23833 794 49138 622 8058893864 1870 832913 9978 544567 2204 8210889659 394 I also tried using perf-kvm using the following command: sudo perf kvm --guest --guestkallsyms=guest-kallsyms --guestmodules=guest-modules record -a -o perf.data but failed with the following error: *Couldn't record guest kernel [0]'s reference relocation symbol. *and no events were recorded. I describe details of QEMU and the host machine (bare metal) below. QEMU emulator version 2.0.0 in conjunction with KVM as the virtual environment and libvirt 1.2.2 The guest machine is running kernel version 3.19.0-15-generic and the host machine is running version 3.14.5-031405-generic on a x86_64 machine I setup the guest machine with Intel SandyBridge processor (model name:Intel Xeon E312xx) with the following flags: sockets=2,cores=2,threads=1 and 4mb cache. More details: cpu family : 6 model : 42 max freq : 2394.560 MHz flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc rep_good nopl eagerfpu pni pclmulqdq vmx ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx hypervisor lahf_lm vnmi ept xsaveopt The host machine is an Intel Sandy Bridge processor (Intel(R) Core(TM) i7-2760QM CPU @ 2.40GHz) with 4 cores and 6mb cache. cpu family : 6 model : 42 flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat epb xsaveopt pln pts dtherm tpr_shadow vnmi flexpriority ept vpid Thanks Rajiv Nishtala WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

1 0

[libvirt-users] qemu-img snapshots configuration
by sergio 30 Jun '15

30 Jun '15

Hello. What it the difference in external snapshot configuration with and without <domainsnapshot> ? What is the difference between vda, vdb and vdc in the following example? (From https://libvirt.org/formatsnapshot.html) <domainsnapshot> ... <memory snapshot='no'/> <disks> <disk name='vda' snapshot='external'> <driver type='qcow2'/> <source file='/path/vda-delta.qcow2'/> </disk> <disk name='vdb' snapshot='no'/> <disk name='vdc' snapshot='no'/> </disks> <domain> ... <devices> <disk type='file' device='disk'> <driver name='qemu' type='raw'/> <source file='/path/vda-img.qcow2'/> <target dev='vda' bus='virtio'/> </disk> <disk type='file' device='disk' snapshot='external'> <driver name='qemu' type='raw'/> <source file='/path/vdb-img.qcow2'/> <target dev='vdb' bus='virtio'/> </disk> <disk type='file' device='disk' snapshot='external'> <driver name='qemu' type='raw'/> <source file='/path/vdc-img.qcow2'/> <backingStore type='file'> <format type='qcow2'/> <source file='/path/vdc-delta.qcow2'/> </backingStore> <target dev='vdc' bus='virtio'/> </disk> ... </devices> </domain> </domainsnapshot> -- sergio.

1 0

[libvirt-users] Compiling Libvirt-snmp on VMware Vsphere ESXi
by Aleem Akhtar 28 Jun '15

28 Jun '15

How can I compile and run Libvirt-snmp on VMware Vsphere ESXi? Can somebody guide me with step by step procedure. I tried to followed steps mentioned on Libvirt Website <https://libvirt.org/compiling.html> but I guess they are for Linux distribution. Because I could not execute ./configure command. After searching on Google I found a similar question <https://communities.vmware.com/thread/514078> which tells that I need to create a VIB and than install that VIB. Now I have no idea about creating VIB. Can somebody please guide me on this. *Regards,* *Aleem Akhtar * *Lecturer Computer Science* Punjab Group of Colleges P. D. Khan Campus Email: aleem.akhtar(a)seecs.nust.edu.pk <aleem.akhtar(a)seecs.nust.edu.pk> Website: aleemakhtar.com

1 0

[libvirt-users] Snapshots vs filesystem shares
by anonym 27 Jun '15

27 Jun '15

[Please keep me Cc:ed since I'm not subscribed to the list!] Hi list, The tl;dr; is: with Libvirt/QEMU, should it be possible to mount a filesystem share (of type='mount') after restoring from a snapshot that was taken when the filesystem share wasn't mounted? It's pretty clear that Libvirt/QEMU (currently, at least) doesn't support taking snapshots of a live guest which has active filesystem shares (type='mount'). I get this error: Call to virDomainSaveFlags failed: internal error: unable to execute QEMU command 'migrate': Migration is disabled when VirtFS export path '${TARGET_PATH}' is mounted in the guest using mount_tag '$TAG' (Libvirt::Error) I have a use case where I very much would like this combination. It wouldn't be a problem if the filesystem shares would have to be temporarily unmounted while taking the snapshot, and mounted again after restoring it. However, while trying that, `mount` hangs when trying to mount a filesystem share again *after* restoring the snapshot (unmounting and remounting works perfectly before that, of course). Nothing is reported in syslog. I've also tried unloading combinations of the various 9p and virtio related modules (like 9p, 9pnet_virtio, 9pnet, virtio, etc) before taking the snapshot, and then reload them after restoring it, in hope of getting them into a sane state again (or whatever is the issue). But then I've seen errors like this in syslog: 9pnet: Installing 9P2000 support virtio-pci 0000:00:08.0: irq 42 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 43 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 42 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 43 for MSI/MSI-X 9pnet_virtio: probe of virtio3 failed with error -2 FS-Cache: Loaded 9p: Installing v9fs 9p2000 file system support FS-Cache: Netfs '9p' registered for caching 9pnet_virtio: no channels available and `mount` complains that the source (tag) doesn't exist when trying to mount the filesystem share again. For the record, the mount command I always use is simply: mount -t 9p -o trans=virtio $TAG $TARGET_DIR I've tried setting `-o debug=0xfff` but I get no debug info at all. Is it expected behaviour that filesystem shares get into a broken state after restoring a snapshot? If it's of any relevance, here's some more context: * The host is running Debian Jessie with Linux 3.16.7-ckt9-3~deb8u1, Libvirt 1.2.9, QEMU 2.1. * The guest is Tails (https://tails.boum.org) which is Debian Wheezy with Linux 3.16.7-ckt9-3. I doubt it matters since I tested this ~two years ago, and got (IIRC) the exact same results. Cheers!

1 1

[libvirt-users] ANNOUNCE: Oz 0.14.0 release
by Chris Lalancette 27 Jun '15

27 Jun '15

All, I'm pleased to announce release 0.14.0 of Oz. Oz is a program for doing automated installation of guest operating systems with limited input from the user. Release 0.14.0 is a bugfix and feature release for Oz. Some of the highlights between Oz 0.13.0 and 0.14.0 are: * Fix a bug in checksum checking (this should work again) * Add a global lock around pool refresh; should get rid of a user-visible failure * Support for Debian 8 * Support for Ubuntu 15.04 * Support for Fedora 22 * Support for installing aarch64 guests * Support for installing POWER guests * Support for install arm 32-bit guests A tarball and zipfile of this release is available on the Github releases page: https://github.com/clalancette/oz/releases . Packages for Fedora-21, Fedora-22, EPEL-7, and EPEL-6 have been built in Koji and will eventually make their way to stable. Instructions on how to get and use Oz are available at http://github.com/clalancette/oz/wiki . If you have questions or comments about Oz, please feel free to contact me at clalancette at gmail.com, or open up an issue on the github page: http://github.com/clalancette/oz/issues . Thanks to everyone who contributed to this release through bug reports, patches, and suggestions for improvement. Chris Lalancette

1 0

[libvirt-users] "connect at power-on" NIC feature equivalent to that found in ESX
by Ryan, Lyle 25 Jun '15

25 Jun '15

With ESX and the vSphere Client, I can enable or disable a VM's NIC to "connect at power-on". This is very useful when cloning, since you can leave the NIC not connected, power-up the VM, connect to it's console, and modify ifcfg-eth0 etc, before bringing the VM online. Is there a virsh equivalent way of doing this. Thanks....Lyle

3 2

[libvirt-users] Libvirt
by Ivo Hora 24 Jun '15

24 Jun '15

Dear Sir, I am facing the same problem you were discussing here: https://www.redhat.com/archives/libvirt-users/2015-January/msg00070.html I am getting this error: Starting install... ERROR internal error: unable to execute QEMU command 'qom-list': The command qom-list has not been found Domain installation does not appear to have been successful. If it was, you can restart your domain by running: virsh --connect qemu:///system start myguest otherwise, please restart your installation. [root@server-topcon horai]# my virtual machine creation script is: #OS="--os-variant=winxp --disk path=/var/lib/libvirt/mages/Windows.iso,device=cdrom" OS="--os-variant=winxp --disk path=/var/lib/libvirt/images/virtio-win-0.1.96.iso" Net="--network model=virtio,bridge=virbr0" Disk="--disk /var/lib/libvirt/images/Name.qcow2,sparse=false,bus=virtio,size=8" Src="--cdrom=/var/lib/libvirt/images/Windows.iso" #Gr="--graphics none" Gr="--graphics vnc" Cpu="--vcpus=1" Ram="--ram=768" Name="myguest" virt-install $OS $Net $Disk $Src $Gr $Cpu $Ram --name=$Name I would kindly like to ask you whether you found a solution for this problem or whether you could help me fixing it. With sincerely, Ivo Hora

4 5

[libvirt-users] 9p host/guest permissions & selinux...?
by Morgan Read 22 Jun '15

22 Jun '15

Hello Folks It's with some trepidation that I venture on to such a heady newsgroup, but I'm about ready to throw myself off a bridge after getting this all set up and apparently working only to be struck down by permissions and selinux hell (either, or both). I've followed instructions here: http://wiki.qemu.org/Documentation/9psetup http://troglobit.github.io/blog/2013/07/05/file-system-pass-through-in-kvm-… http://www.linux-kvm.org/page/9p_virtio The page at the last link helpfully concludes: Note: likely to hit some issues w/ privileges since Fedora libvirt runs guests unprivileged and with SELinux confinement...careful use of chown, chmod and chcon should get it working And, that's the most useful information I've been able to find... *Set up* Host - f21 server [user@frontserver ~]$ uname -a Linux frontserver.lan 4.0.4-202.fc21.i686+PAE #1 SMP Wed May 27 22:51:47 UTC 2015 i686 i686 i386 GNU/Linux Guest - f20 (vortexbox) [root@vortexbox ~]# uname -a Linux vortexbox 3.12.5-301.fc20.i686+PAE #1 SMP Mon Dec 16 18:42:48 EST 2013 i686 i686 i386 GNU/Linux Share is at /home/vortexbox-storage and shared to /storage Output of mount, touch, ls etc on host and guest: [user@frontserver home]$ ls lost+found user vortexbox-storage [user@frontserver home]$ ls -al vortexbox-storage total 12 drwxrwxrwx. 2 qemu qemu 4096 Apr 4 09:58 . drwxr-xr-x. 5 root root 4096 Mar 24 11:23 .. -rwxrwxrwx. 1 qemu qemu 17 Apr 3 17:54 hello [user@frontserver home]$ cd vortexbox-storage [user@frontserver vortexbox-storage]$ touch hello2 [user@frontserver vortexbox-storage]$ ls -al total 12 drwxrwxrwx. 2 qemu qemu 4096 Jun 20 22:07 . drwxr-xr-x. 5 root root 4096 Mar 24 11:23 .. -rwxrwxrwx. 1 qemu qemu 17 Apr 3 17:54 hello -rw-rw-r--. 1 user user 0 Jun 20 22:07 hello2 [user@frontserver vortexbox-storage]$ echo hello2 > hello2 [user@frontserver vortexbox-storage]$ cat hello2 hello2 [user@frontserver vortexbox-storage]$ ssh root(a)192.168.122.61 root(a)192.168.122.61's password: Last login: Sat Jun 20 16:44:37 2015 [root@vortexbox /]# umount /storage [root@vortexbox /]# ls -al | grep storage drwxr-xr-x 2 root root 4096 Jun 20 12:24 storage drwxr-xr-x 5 root root 4096 Mar 24 07:31 storage-tmp [root@vortexbox /]# mount -t 9p -o trans=virtio,version=9p2000.L,rw storage /storage [root@vortexbox /]# ls -al | grep storage drwxrwxrwx 2 107 107 4096 Jun 21 14:11 storage drwxr-xr-x 5 root root 4096 Mar 24 07:31 storage-tmp [root@vortexbox /]# cd /storage [root@vortexbox storage]# ls -al ls: cannot access hello: Permission denied total 8 drwxrwxrwx 2 107 107 4096 Jun 21 14:11 . dr-xr-xr-x. 20 root root 4096 Mar 24 07:43 .. -?????????? ? ? ? ? ? hello [root@vortexbox storage]# cat hello cat: hello: Permission denied [root@vortexbox storage]# ls -al ls: cannot access hello2: Permission denied ls: cannot access hello: Permission denied total 8 drwxrwxrwx 2 107 107 4096 Jun 21 14:13 . dr-xr-xr-x. 20 root root 4096 Mar 24 07:43 .. -?????????? ? ? ? ? ? hello -?????????? ? ? ? ? ? hello2 [root@vortexbox storage]# cat hello2 cat: hello2: Permission denied [root@vortexbox storage]# When I try touch or cat the hellos selinux-troubleshoot throws a wobbly. I've logged that as a bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1234067 I figure it must be possible to give some fairly straight forward instruction (even for me) on what permissions to set where to get this working... If anyone can help, I would be very very grateful (and happy:) Thanks, M -- Morgan Read <mailto:mstuffATreadDOTorgDOTnz> Confused about DRM? Get all the info you need at: http://drm.info/

1 0

[libvirt-users] IOV / SR-IOV / MR-IOV for non-network hardware?
by nusrat 22 Jun '15

22 Jun '15

I've been looking for real-world examples of this for a long time -- mainly because I'm trying to decide whether to restrict my build-options to using only components which are all compatible with IOV. I'm thinking that the constraint would be worth it, if IOV could provide a significant performance benefit for non-network peripherals such as storage, video processing, etc. (compared to passthru / VT-d). http://www.storage-switzerland.com/Articles/Entries/2010/9/29_Offloading_I_… , http://www.plda.com/white-paper-why-using-single-root-io-virtualization-sr-… Almost everything I've found about this is in the abstract or inapplicable to multiple VMs in the same physical host. Examples: hypothetical use with HBAs or multiple graphics cards, http://blog.scottlowe.org/2009/12/02/what-is-sr-iov , http://lists.xen.org/archives/html/xen-users/2013-04/msg00126.html ; academic papers & theses, e.g. http://cs.uccs.edu/~gsc/pub/master/mkopps/doc/MKoppsReportRev3.pdf ; conference presentations, e.g. http://searchstorage.techtarget.com/video/I-O-virtualization-video-SR-IOV-M… ; hardware positioned between multiple hosts and a single peripheral, e.g. http://topics-cdn.dell.com/pdf/poweredge-vrtx_User's%20Guide_en-us.pdf ; and conceptual support for IOV in the spec for NVM Express. I did find actual physical products which claim IOV support, e.g. the LSI 3008 chip, which is used in some mobos and LSI HBAs. I've even found some posts re virtualization by people who discuss various aspects of having and using one of these products. But I have yet to find anyone -- certainly not anyone at or below the level of of "enthusiast", not anyone with a non-"enterprise-class" environment or budget -- who discusses even attempting IOV-based I/O other than for networking, let alone actually achieving it, let alone anyone with even subjective descriptions of performance differences. If non-networking IOV has the great potential discussed in the links above, can anyone tell me why it seems that no one is actually doing it? Kihl? Braren? zir_blazer? ScottLowe? Don Fountain? Boesch? John Howard? George Crump? Anyone? Anyone? Bueller?...

1 0

[libvirt-users] Migrating guests
by Dominique Ramaekers 20 Jun '15

20 Jun '15

Hi, I'm experimenting with the migration function of virsh. I'm doing the migrate with following commands: virsh migrate --life --persistent --copy-storage-all --verbose --abort-on-error domain qemu+ssh://root@destination/system virsh migrate-setmaxdowntime domain 20000 However sometimes at the end of the migration, the guest isn't started on the destination host. So I'm left with a machine that had an improper shutdown... If a live migration isn't reliable, I'm thinking to migrate as such: - guest is still runing - copy or rsync the disk image to the destination - shut down the guest - rsync the disk image again (to minimise the off-line period) - dumpxml of guest and copy to destination - define and start the guest on the destination With the methode of the live migration, the machine will be unresponsive for max 20s = 20000ms (or less if I chose to). The migration it self will take op to 5 hours but I guess I plan these nightly. With the other migration the guest will be really off-line for the duration of the (second) rsync. In my case with disk images from 50 to 150Gb, the rsync wil take up at least 30 minutes and every connection will be closed... Does any body has good experiences with live migrations (without shared storage)? Any tips? Any thoughts on the second method of migrating? Greetings, Dominique.

2 2

[libvirt-users] libvirt/dnsmasq integration
by Boylan, Ross 20 Jun '15

20 Jun '15

I'm struggling with getting this to work smoothly, meaning 1) from the host system I can resolve the names of the VM's and 2) from the VM's I can properly resolve the host name (I get 127.0.0.1, presumably because dnsmasq parsed /etc/hosts on the host). There was some encouraging discussion of this in 2010 (http://www.redhat.com/archives/libvir-list/2010-March/msg00005.html) but no resolution I can see. BTW, the resolvconf machinery (at least on Debian) might provide another line of attack, for systems that have it. Thanks. Ross Boylan

2 1

[libvirt-users] CPU Usage and Memory Usage for VM and Host
by Kumar R, Prashanth (Prashanth) 19 Jun '15

19 Jun '15

Hi All, I would like to know if there is a way to fetch the "CPU Usage and Memory Usage for VM " and CPU Usage and Memory Usage for a Host in the KVM environment using libvirt java sdk . I am using libvirt-0.5.1.jar. This is the maximum Information I could fetch using the libvirt java API.: ________________________________ vmname:flow-cluster1 state:VIR_DOMAIN_RUNNING ostype:hvm guest id :8f0b96e5-1e08-40ce-aea1-9985d80fcabb Max memory : 8388608 Max cpus : 4 Guest Info-cputime: 58930890000000 Guest Info-maxMem: 8388608 Guest Info-memory: 8388608 Guest Info-nrVirtCpu: 4 MemoryStatistic: 8388608 Autostart :false ________________________________ I tried looking into the libvirt java sdk but did not find any methods to fetch the exact CPU Usage percentage and Memory Usage percentage for a VM and Host. Can you please provide me with the java example if possible. Thanks, Prashanth R

1 0

[libvirt-users] Migration b/w nodes with different security models
by Andrey Korolyov 19 Jun '15

19 Jun '15

Hello, I`ve found that the currently end-user may not migrate a VM between nodes with different security_require_confined, what are reasons to forbid such a thing? The security measures are almost not applicable here - if the guest was able to poison the emulator` stack on an unsecured node, he may do the same on a secured one, though the potential consequences will be far more limited. Are there any real-world cases whose prohibition may be helpful in a terms of security measurements for migration I am currently missing? I think it would be safe to exclude total poisoning of a source node in which case libvirtd itself is owned and can try to send a malicious configuration (with changed backing files locations for example). Thanks!

1 0

[libvirt-users] Use virtio channel send data to vm fail
by 2020human 18 Jun '15

18 Jun '15

1. I created a virtual machine and add channel: <channel type='unix'> <source mode='bind' path='/var/lib/libvirt/qemu/r-22-VM.agent'/> <target type='virtio' name='r-22-VM.vport'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> 2. Use scripts,run this scripts is no error output #!/usr/bin/python import socket s=socket.socket(socket.AF_UNIX,socket.SOCK_STREAM) s.connect("/var/lib/libvirt/qemu/r-22-VM.agent") s.send("test\n") s.close 3. But i not read date in vm device /dev/vport0p1 (vm is run) My version, libvirt: 1.2.13.1 qmeu: 2.3.0 system: centos 6.5 This test in libvirt 1.0.5.7 qemu 1.5.3 is success. Please help , thanks

1 0

[libvirt-users] Libvirt LXC hostname
by Anu Mercian 15 Jun '15

15 Jun '15

Hello, I am trying to bring up an lxc with Centos 6.6 using libvirt command: "virsh -c lxc:/// create vm.xml" When I do the above, the new VM created gets the hostname of the host where libvirt is installed. When I looked up help on the past mail-lists. It seems like this was a problem back in 2013 and it was mentioned that host name cannot be provided. I was wondering if this has been resolved and the host name can be provided in the URI. Link to the similar issue back in 2013: https://www.redhat.com/archives/libvirt-users/2013-November/msg00080.html Any help is much appreciated. Thank you, Anu

2 1

[libvirt-users] Recommended change for the networking page in wiki
by BJ 13 Jun '15

13 Jun '15

Hello all, I was told on IRC that I should come here to discuss a recommended change on the networking page in the wiki. If you take a look at the "Basic Script" shown here: http://wiki.libvirt.org/page/Networking#Forwarding_Incoming_Connections It does two things: 1) Create a DNAT rule in the NAT table of IPTABLES 2) Create a FORWARD rule in the FILTER table of IPTABLES The FORWARD rule is set up as it ought to be, however, the DNAT rule has some unintended consequences. I set up a DNAT on port 80, and suddenly, I couldn't access out on port 80 anymore from my guest machine. However, if I changed the destination address from "anywhere" to the IP of the host machine, the problem resolved. So I change the script to as follows. (Changes are highlighted. For some reason the original script didn't work using /bin/sh, but it did with /bin/bash, so I changed that too). *#!/bin/bash* # used some from advanced script to have multiple ports: use an equal number of guest and host ports Guest_name=xxxxxxx Guest_ipaddr=xxx.xxx.xxx.xx *Host_ipaddr=xxx.xxx.xxx.xx* Host_port=( '80' '443' ) Guest_port=( '80' '443' ) length=$(( ${#Host_port[@]} - 1 )) if [ "${1}" = "${Guest_name}" ]; then if [ "${2}" = "stopped" -o "${2}" = "reconnect" ]; then for i in `seq 0 $length`; do iptables -t nat -D PREROUTING *-d ${Host_ipaddr}* -p tcp --dport ${Host_port[$i]} -j DNAT --to ${Guest_ipaddr}:${Guest_port[$i]} iptables -D FORWARD -d ${Guest_ipaddr}/32 -p tcp -m state --state NEW -m tcp --dport ${Guest_port[$i]} -j ACCEPT done fi if [ "${2}" = "start" -o "${2}" = "reconnect" ]; then for i in `seq 0 $length`; do iptables -t nat -A PREROUTING *-d ${Host_ipaddr}* -p tcp --dport ${Host_port[$i]} -j DNAT --to ${Guest_ipaddr}:${Guest_port[$i]} iptables -I FORWARD 4 -d ${Guest_ipaddr}/32 -p tcp -m state --state NEW -m tcp --dport ${Guest_port[$i]} -j ACCEPT done fi fi Lastly, I should note that I am using Ubuntu 14.04, both for the host and guest. I'm also curious as to why this is considered a hack method. It states in the wiki that "This method is a hack", but it doesn't express why. Many VM Servers have similar features. I know Virtual Box does, I use the same feature there. It may not be how I would set up a production server, but doesn't make it a hack. Thanks, BJ

3 6

[libvirt-users] <vcpu placement='static' current='N'>M</vcpu>
by Thomas Stein 12 Jun '15

12 Jun '15

Hello. I seem to be to stupid to configure vcpu hotplugging on one of my machines. Whenever i set: <vcpu placement='static' current='4'>4</vcpu> and save this setting, this setting is undone by libvirt. It jumps back to: <vcpu placement='static'>4</vcpu> I'm confused now. Someone has an idea what's going on here? Any hints are really appreciated. cheers t.

2 2

Re: [libvirt-users] <vcpu placement='static' current='N'>M</vcpu>
by Thomas Stein 12 Jun '15

12 Jun '15

Am 12.06.15 um 11:43 schrieb Dominique Ramaekers: > Did you shutdown the guest before making this change? Yes. I even can't set this setting while the machine is powered off. Here ist the machines xml. <domain type='kvm'> <name>changed</name> <uuid>c71f66b3-2fd1-42f0-b8be-42999857eb95</uuid> <memory unit='KiB'>4194304</memory> <currentMemory unit='KiB'>2097152</currentMemory> <vcpu placement='static'>4</vcpu> <resource> <partition>/machine</partition> </resource> <os> <type arch='x86_64' machine='pc-0.14'>hvm</type> <boot dev='hd'/> </os> <features> <acpi/> <apic/> <pae/> </features> <cpu mode='host-model'> <model fallback='allow'/> </cpu> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>restart</on_crash> <devices> <emulator>/usr/bin/qemu-system-x86_64</emulator> <disk type='file' device='disk'> <driver name='qemu' type='qcow2' cache='writeback' io='threads'/> <source file='/var/lib/libvirt/images/1.qcow2'/> <target dev='vda' bus='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </disk> <disk type='file' device='disk'> <driver name='qemu' type='qcow2' cache='writethrough' io='threads'/> <source file='/var/lib/libvirt/images/nfs.qcow2'/> <target dev='vdb' bus='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/> </disk> <controller type='virtio-serial' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </controller> <controller type='usb' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x2'/> </controller> <controller type='pci' index='0' model='pci-root'/> <interface type='network'> <mac address='52:54:00:18:75:ef'/> <source network='routed'/> <model type='virtio'/> <filterref filter='filter-changed'> <parameter name='IP' value='changed'/> </filterref> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> <channel type='unix'> <source mode='bind' path='/var/lib/libvirt/qemu/f16x86_64.agent'/> <target type='virtio' name='org.qemu.guest_agent.0'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> <input type='mouse' bus='ps2'/> <input type='keyboard' bus='ps2'/> <graphics type='vnc' port='-1' autoport='yes' listen='127.0.0.1'> <listen type='address' address='127.0.0.1'/> </graphics> <video> <model type='cirrus' vram='16384' heads='1'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </video> <memballoon model='virtio'> <address type='pci' domain='0x0000' bus='0x00' slot='0x07' function='0x0'/> </memballoon> </devices> <seclabel type='none' model='none'/> </domain> cheers t. > -----Oorspronkelijk bericht----- > Van: Thomas Stein [mailto:himbeere@meine-oma.de] > Verzonden: vrijdag 12 juni 2015 11:32 > Aan: libvirt-users(a)redhat.com > Onderwerp: [libvirt-users] <vcpu placement='static' current='N'>M</vcpu> > > Hello. > > I seem to be to stupid to configure vcpu hotplugging on one of my machines. Whenever i set: > > <vcpu placement='static' current='4'>4</vcpu> > > and save this setting, this setting is undone by libvirt. It jumps back to: > > <vcpu placement='static'>4</vcpu> > > I'm confused now. Someone has an idea what's going on here? Any hints are really appreciated. > > cheers > t. > > _______________________________________________ > libvirt-users mailing list > libvirt-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvirt-users >

1 1