June 2015 - Users - libvirt List Archives

[libvirt-users] Snapshots vs filesystem shares
by anonym 27 Jun '15

27 Jun '15

[Please keep me Cc:ed since I'm not subscribed to the list!] Hi list, The tl;dr; is: with Libvirt/QEMU, should it be possible to mount a filesystem share (of type='mount') after restoring from a snapshot that was taken when the filesystem share wasn't mounted? It's pretty clear that Libvirt/QEMU (currently, at least) doesn't support taking snapshots of a live guest which has active filesystem shares (type='mount'). I get this error: Call to virDomainSaveFlags failed: internal error: unable to execute QEMU command 'migrate': Migration is disabled when VirtFS export path '${TARGET_PATH}' is mounted in the guest using mount_tag '$TAG' (Libvirt::Error) I have a use case where I very much would like this combination. It wouldn't be a problem if the filesystem shares would have to be temporarily unmounted while taking the snapshot, and mounted again after restoring it. However, while trying that, `mount` hangs when trying to mount a filesystem share again *after* restoring the snapshot (unmounting and remounting works perfectly before that, of course). Nothing is reported in syslog. I've also tried unloading combinations of the various 9p and virtio related modules (like 9p, 9pnet_virtio, 9pnet, virtio, etc) before taking the snapshot, and then reload them after restoring it, in hope of getting them into a sane state again (or whatever is the issue). But then I've seen errors like this in syslog: 9pnet: Installing 9P2000 support virtio-pci 0000:00:08.0: irq 42 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 43 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 42 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 43 for MSI/MSI-X 9pnet_virtio: probe of virtio3 failed with error -2 FS-Cache: Loaded 9p: Installing v9fs 9p2000 file system support FS-Cache: Netfs '9p' registered for caching 9pnet_virtio: no channels available and `mount` complains that the source (tag) doesn't exist when trying to mount the filesystem share again. For the record, the mount command I always use is simply: mount -t 9p -o trans=virtio $TAG $TARGET_DIR I've tried setting `-o debug=0xfff` but I get no debug info at all. Is it expected behaviour that filesystem shares get into a broken state after restoring a snapshot? If it's of any relevance, here's some more context: * The host is running Debian Jessie with Linux 3.16.7-ckt9-3~deb8u1, Libvirt 1.2.9, QEMU 2.1. * The guest is Tails (https://tails.boum.org) which is Debian Wheezy with Linux 3.16.7-ckt9-3. I doubt it matters since I tested this ~two years ago, and got (IIRC) the exact same results. Cheers!

1 1

[libvirt-users] ANNOUNCE: Oz 0.14.0 release
by Chris Lalancette 26 Jun '15

26 Jun '15

All, I'm pleased to announce release 0.14.0 of Oz. Oz is a program for doing automated installation of guest operating systems with limited input from the user. Release 0.14.0 is a bugfix and feature release for Oz. Some of the highlights between Oz 0.13.0 and 0.14.0 are: * Fix a bug in checksum checking (this should work again) * Add a global lock around pool refresh; should get rid of a user-visible failure * Support for Debian 8 * Support for Ubuntu 15.04 * Support for Fedora 22 * Support for installing aarch64 guests * Support for installing POWER guests * Support for install arm 32-bit guests A tarball and zipfile of this release is available on the Github releases page: https://github.com/clalancette/oz/releases . Packages for Fedora-21, Fedora-22, EPEL-7, and EPEL-6 have been built in Koji and will eventually make their way to stable. Instructions on how to get and use Oz are available at http://github.com/clalancette/oz/wiki . If you have questions or comments about Oz, please feel free to contact me at clalancette at gmail.com, or open up an issue on the github page: http://github.com/clalancette/oz/issues . Thanks to everyone who contributed to this release through bug reports, patches, and suggestions for improvement. Chris Lalancette

1 0

[libvirt-users] "connect at power-on" NIC feature equivalent to that found in ESX
by Ryan, Lyle 25 Jun '15

25 Jun '15

With ESX and the vSphere Client, I can enable or disable a VM's NIC to "connect at power-on". This is very useful when cloning, since you can leave the NIC not connected, power-up the VM, connect to it's console, and modify ifcfg-eth0 etc, before bringing the VM online. Is there a virsh equivalent way of doing this. Thanks....Lyle

3 2

[libvirt-users] Libvirt
by Ivo Hora 23 Jun '15

23 Jun '15

Dear Sir, I am facing the same problem you were discussing here: https://www.redhat.com/archives/libvirt-users/2015-January/msg00070.html I am getting this error: Starting install... ERROR internal error: unable to execute QEMU command 'qom-list': The command qom-list has not been found Domain installation does not appear to have been successful. If it was, you can restart your domain by running: virsh --connect qemu:///system start myguest otherwise, please restart your installation. [root@server-topcon horai]# my virtual machine creation script is: #OS="--os-variant=winxp --disk path=/var/lib/libvirt/mages/Windows.iso,device=cdrom" OS="--os-variant=winxp --disk path=/var/lib/libvirt/images/virtio-win-0.1.96.iso" Net="--network model=virtio,bridge=virbr0" Disk="--disk /var/lib/libvirt/images/Name.qcow2,sparse=false,bus=virtio,size=8" Src="--cdrom=/var/lib/libvirt/images/Windows.iso" #Gr="--graphics none" Gr="--graphics vnc" Cpu="--vcpus=1" Ram="--ram=768" Name="myguest" virt-install $OS $Net $Disk $Src $Gr $Cpu $Ram --name=$Name I would kindly like to ask you whether you found a solution for this problem or whether you could help me fixing it. With sincerely, Ivo Hora

4 5

[libvirt-users] 9p host/guest permissions & selinux...?
by Morgan Read 21 Jun '15

21 Jun '15

Hello Folks It's with some trepidation that I venture on to such a heady newsgroup, but I'm about ready to throw myself off a bridge after getting this all set up and apparently working only to be struck down by permissions and selinux hell (either, or both). I've followed instructions here: http://wiki.qemu.org/Documentation/9psetup http://troglobit.github.io/blog/2013/07/05/file-system-pass-through-in-kvm-… http://www.linux-kvm.org/page/9p_virtio The page at the last link helpfully concludes: Note: likely to hit some issues w/ privileges since Fedora libvirt runs guests unprivileged and with SELinux confinement...careful use of chown, chmod and chcon should get it working And, that's the most useful information I've been able to find... *Set up* Host - f21 server [user@frontserver ~]$ uname -a Linux frontserver.lan 4.0.4-202.fc21.i686+PAE #1 SMP Wed May 27 22:51:47 UTC 2015 i686 i686 i386 GNU/Linux Guest - f20 (vortexbox) [root@vortexbox ~]# uname -a Linux vortexbox 3.12.5-301.fc20.i686+PAE #1 SMP Mon Dec 16 18:42:48 EST 2013 i686 i686 i386 GNU/Linux Share is at /home/vortexbox-storage and shared to /storage Output of mount, touch, ls etc on host and guest: [user@frontserver home]$ ls lost+found user vortexbox-storage [user@frontserver home]$ ls -al vortexbox-storage total 12 drwxrwxrwx. 2 qemu qemu 4096 Apr 4 09:58 . drwxr-xr-x. 5 root root 4096 Mar 24 11:23 .. -rwxrwxrwx. 1 qemu qemu 17 Apr 3 17:54 hello [user@frontserver home]$ cd vortexbox-storage [user@frontserver vortexbox-storage]$ touch hello2 [user@frontserver vortexbox-storage]$ ls -al total 12 drwxrwxrwx. 2 qemu qemu 4096 Jun 20 22:07 . drwxr-xr-x. 5 root root 4096 Mar 24 11:23 .. -rwxrwxrwx. 1 qemu qemu 17 Apr 3 17:54 hello -rw-rw-r--. 1 user user 0 Jun 20 22:07 hello2 [user@frontserver vortexbox-storage]$ echo hello2 > hello2 [user@frontserver vortexbox-storage]$ cat hello2 hello2 [user@frontserver vortexbox-storage]$ ssh root(a)192.168.122.61 root(a)192.168.122.61's password: Last login: Sat Jun 20 16:44:37 2015 [root@vortexbox /]# umount /storage [root@vortexbox /]# ls -al | grep storage drwxr-xr-x 2 root root 4096 Jun 20 12:24 storage drwxr-xr-x 5 root root 4096 Mar 24 07:31 storage-tmp [root@vortexbox /]# mount -t 9p -o trans=virtio,version=9p2000.L,rw storage /storage [root@vortexbox /]# ls -al | grep storage drwxrwxrwx 2 107 107 4096 Jun 21 14:11 storage drwxr-xr-x 5 root root 4096 Mar 24 07:31 storage-tmp [root@vortexbox /]# cd /storage [root@vortexbox storage]# ls -al ls: cannot access hello: Permission denied total 8 drwxrwxrwx 2 107 107 4096 Jun 21 14:11 . dr-xr-xr-x. 20 root root 4096 Mar 24 07:43 .. -?????????? ? ? ? ? ? hello [root@vortexbox storage]# cat hello cat: hello: Permission denied [root@vortexbox storage]# ls -al ls: cannot access hello2: Permission denied ls: cannot access hello: Permission denied total 8 drwxrwxrwx 2 107 107 4096 Jun 21 14:13 . dr-xr-xr-x. 20 root root 4096 Mar 24 07:43 .. -?????????? ? ? ? ? ? hello -?????????? ? ? ? ? ? hello2 [root@vortexbox storage]# cat hello2 cat: hello2: Permission denied [root@vortexbox storage]# When I try touch or cat the hellos selinux-troubleshoot throws a wobbly. I've logged that as a bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1234067 I figure it must be possible to give some fairly straight forward instruction (even for me) on what permissions to set where to get this working... If anyone can help, I would be very very grateful (and happy:) Thanks, M -- Morgan Read <mailto:mstuffATreadDOTorgDOTnz> Confused about DRM? Get all the info you need at: http://drm.info/

1 0

[libvirt-users] IOV / SR-IOV / MR-IOV for non-network hardware?
by nusrat 21 Jun '15

21 Jun '15

I've been looking for real-world examples of this for a long time -- mainly because I'm trying to decide whether to restrict my build-options to using only components which are all compatible with IOV. I'm thinking that the constraint would be worth it, if IOV could provide a significant performance benefit for non-network peripherals such as storage, video processing, etc. (compared to passthru / VT-d). http://www.storage-switzerland.com/Articles/Entries/2010/9/29_Offloading_I_… , http://www.plda.com/white-paper-why-using-single-root-io-virtualization-sr-… Almost everything I've found about this is in the abstract or inapplicable to multiple VMs in the same physical host. Examples: hypothetical use with HBAs or multiple graphics cards, http://blog.scottlowe.org/2009/12/02/what-is-sr-iov , http://lists.xen.org/archives/html/xen-users/2013-04/msg00126.html ; academic papers & theses, e.g. http://cs.uccs.edu/~gsc/pub/master/mkopps/doc/MKoppsReportRev3.pdf ; conference presentations, e.g. http://searchstorage.techtarget.com/video/I-O-virtualization-video-SR-IOV-M… ; hardware positioned between multiple hosts and a single peripheral, e.g. http://topics-cdn.dell.com/pdf/poweredge-vrtx_User's%20Guide_en-us.pdf ; and conceptual support for IOV in the spec for NVM Express. I did find actual physical products which claim IOV support, e.g. the LSI 3008 chip, which is used in some mobos and LSI HBAs. I've even found some posts re virtualization by people who discuss various aspects of having and using one of these products. But I have yet to find anyone -- certainly not anyone at or below the level of of "enthusiast", not anyone with a non-"enterprise-class" environment or budget -- who discusses even attempting IOV-based I/O other than for networking, let alone actually achieving it, let alone anyone with even subjective descriptions of performance differences. If non-networking IOV has the great potential discussed in the links above, can anyone tell me why it seems that no one is actually doing it? Kihl? Braren? zir_blazer? ScottLowe? Don Fountain? Boesch? John Howard? George Crump? Anyone? Anyone? Bueller?...

1 0

[libvirt-users] Migrating guests
by Dominique Ramaekers 20 Jun '15

20 Jun '15

Hi, I'm experimenting with the migration function of virsh. I'm doing the migrate with following commands: virsh migrate --life --persistent --copy-storage-all --verbose --abort-on-error domain qemu+ssh://root@destination/system virsh migrate-setmaxdowntime domain 20000 However sometimes at the end of the migration, the guest isn't started on the destination host. So I'm left with a machine that had an improper shutdown... If a live migration isn't reliable, I'm thinking to migrate as such: - guest is still runing - copy or rsync the disk image to the destination - shut down the guest - rsync the disk image again (to minimise the off-line period) - dumpxml of guest and copy to destination - define and start the guest on the destination With the methode of the live migration, the machine will be unresponsive for max 20s = 20000ms (or less if I chose to). The migration it self will take op to 5 hours but I guess I plan these nightly. With the other migration the guest will be really off-line for the duration of the (second) rsync. In my case with disk images from 50 to 150Gb, the rsync wil take up at least 30 minutes and every connection will be closed... Does any body has good experiences with live migrations (without shared storage)? Any tips? Any thoughts on the second method of migrating? Greetings, Dominique.

2 2

[libvirt-users] libvirt/dnsmasq integration
by Boylan, Ross 19 Jun '15

19 Jun '15

I'm struggling with getting this to work smoothly, meaning 1) from the host system I can resolve the names of the VM's and 2) from the VM's I can properly resolve the host name (I get 127.0.0.1, presumably because dnsmasq parsed /etc/hosts on the host). There was some encouraging discussion of this in 2010 (http://www.redhat.com/archives/libvir-list/2010-March/msg00005.html) but no resolution I can see. BTW, the resolvconf machinery (at least on Debian) might provide another line of attack, for systems that have it. Thanks. Ross Boylan

2 1

[libvirt-users] CPU Usage and Memory Usage for VM and Host
by Kumar R, Prashanth (Prashanth) 19 Jun '15

19 Jun '15

Hi All, I would like to know if there is a way to fetch the "CPU Usage and Memory Usage for VM " and CPU Usage and Memory Usage for a Host in the KVM environment using libvirt java sdk . I am using libvirt-0.5.1.jar. This is the maximum Information I could fetch using the libvirt java API.: ________________________________ vmname:flow-cluster1 state:VIR_DOMAIN_RUNNING ostype:hvm guest id :8f0b96e5-1e08-40ce-aea1-9985d80fcabb Max memory : 8388608 Max cpus : 4 Guest Info-cputime: 58930890000000 Guest Info-maxMem: 8388608 Guest Info-memory: 8388608 Guest Info-nrVirtCpu: 4 MemoryStatistic: 8388608 Autostart :false ________________________________ I tried looking into the libvirt java sdk but did not find any methods to fetch the exact CPU Usage percentage and Memory Usage percentage for a VM and Host. Can you please provide me with the java example if possible. Thanks, Prashanth R

1 0

[libvirt-users] Migration b/w nodes with different security models
by Andrey Korolyov 18 Jun '15

18 Jun '15

Hello, I`ve found that the currently end-user may not migrate a VM between nodes with different security_require_confined, what are reasons to forbid such a thing? The security measures are almost not applicable here - if the guest was able to poison the emulator` stack on an unsecured node, he may do the same on a secured one, though the potential consequences will be far more limited. Are there any real-world cases whose prohibition may be helpful in a terms of security measurements for migration I am currently missing? I think it would be safe to exclude total poisoning of a source node in which case libvirtd itself is owned and can try to send a malicious configuration (with changed backing files locations for example). Thanks!

1 0