December 2018 - Users - libvirt List Archives

[libvirt-users] import qcow with snapshots
by Chris 10 Dec '18

10 Dec '18

All, is it possible to create a new KVM machine from an existing qcow (v3) image with snapshots? snapshot-list doesn't show them, when using virt-manager 1:1.5.1-0ubuntu1.1 to create the machine. * t-ad5.img: QEMU QCOW Image (v3), 42949672960 bytes chris@cd:/data/md0$ qemu-img snapshot -l t-ad5.img Snapshot list: ID TAG VM SIZE DATE VM CLOCK 1 pre-domain 0 2018-05-08 21:27:40 00:00:00.000 chris@cd:~$ virsh snapshot-list t-ad5 Name Creation Time State ------------------------------------------------------------ - Chris

2 1

Re: [libvirt-users] certificate pinning
by Daniel P. Berrangé 10 Dec '18

10 Dec '18

Re-adding the libvirt-users list - please don't take discussions off-list. On Mon, Dec 10, 2018 at 01:10:18PM +0300, Anastasiya Ruzhanskaya wrote: > I already found out how to set up all the certificates and tls works fine > for me. > What if I want to put a proxy between client and server in libvirt? He has > his own CA, and this is only one more CA I would like libvirt to trust to. > Is it somehow achievable? I see that libvirt takes certificates only from > predefined paths. For me doesn't work if I just incert another CA > certificate to the cacert.pem file. Do you know any approaches how it can > be made in another way? The cacert.pem file can contain multiple certificates, just concatenate all the CA pem files. > > пн, 10 дек. 2018 г. в 12:38, Daniel P. Berrangé <berrange(a)redhat.com>: > > > On Sat, Dec 08, 2018 at 11:19:40AM +0300, Anastasiya Ruzhanskaya wrote: > > > Hello! > > > Does libvirt uses certificate pinning in tls? I want to setup a > > transparent > > > proxy (mitmproxy) and can't do this even after I added mitmproxy ca > > > certificate to the trusted certificates in ubuntu. > > > > Libvirt doesn't ever use the global certificates stores, because public > > CAs are not relevant to libvirt deployments - indeed trusting the global > > cert store in the OS would lower security by opening it upto arbitrary > > CAs. See this doc for where libvirt finds CA certs > > > > https://libvirt.org/remote.html#Remote_certificates > > > > > > Regards, > > Daniel > > -- > > |: https://berrange.com -o- > > https://www.flickr.com/photos/dberrange :| > > |: https://libvirt.org -o- > > https://fstop138.berrange.com :| > > |: https://entangle-photo.org -o- > > https://www.instagram.com/dberrange :| > > Regards, Daniel -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|

2 4

[libvirt-users] certificate pinning
by Anastasiya Ruzhanskaya 10 Dec '18

10 Dec '18

Hello! Does libvirt uses certificate pinning in tls? I want to setup a transparent proxy (mitmproxy) and can't do this even after I added mitmproxy ca certificate to the trusted certificates in ubuntu.

2 2

[libvirt-users] libvirt 4.1 and later - howto configure LXC with interface macvlan type='direct' ?
by mxs kolo 08 Dec '18

08 Dec '18

Hi all After upgrade from Centos 7.5 to Centos 7.6, our test environment geted new version of libvirt 4.5.0 In which our old containers have broken config and can't start: 2018-12-05 10:38:32.634+0000: 18010: debug : virLXCControllerGetNICIndexes:368 : Getting nic indexes 2018-12-05 10:38:32.634+0000: 18010: error : virLXCControllerGetNICIndexes:400 : unsupported configuration: Unsupported net type direct Failure in libvirt_lxc startup: unsupported configuration: Unsupported net type direct We use next section for network interface: <interface type='direct'> <mac address='02:00:21:3b:eb:e1'/> <source dev='eno1.710' mode='bridge'/> </interface> It's linux macvlan solutions and it's worked at least since libvirt 1.2.7 for us. As I can see, in version 4.1.0 and later, some changes about DIRECT connect was implemented. VIR_DOMAIN_NET_TYPE_DIRECT is still fully supported in src/lxc/lxc_driver.c But in src/lxc/lxc_controller.c --- libvirt-3.9.0/src/lxc/lxc_controller.c 2017-09-28 13:15:43.322712913 +0300 +++ libvirt-4.1.0/src/lxc/lxc_controller.c 2018-02-28 16:21:05.158799006 +0300 @@ -395,8 +395,14 @@ case VIR_DOMAIN_NET_TYPE_INTERNAL: case VIR_DOMAIN_NET_TYPE_DIRECT: case VIR_DOMAIN_NET_TYPE_HOSTDEV: + virReportError(VIR_ERR_CONFIG_UNSUPPORTED, + _("Unsupported net type %s"), + virDomainNetTypeToString(ctrl->def->nets[i]->type)); + goto cleanup; + case VIR_DOMAIN_NET_TYPE_LAST: default: - break; + virReportEnumRangeError(virDomainNetType, ctrl->def->nets[i]->type); + goto cleanup; } } Since version 4.1.0 which config need be used to configure macvlan for lxc cointainers ?

3 2

Re: [libvirt-users] no drm render nodes available
by Erik Skultety 06 Dec '18

06 Dec '18

On Thu, Dec 06, 2018 at 05:55:54AM -0800, Michael Taboada wrote: > Hi, > Yes. Qemu is version 3.0.0-4, and output is below: > > ls -l /dev/dri: > > total 0 > drwxr-xr-x 2 root root 60 Nov 28 16:46 by-path > crw-rw---- 1 root video 226, 0 Nov 28 16:46 card0 > > domain xml is attached. > -Michael. [Putting libvirt-users back on CC] Yep, this is a pretty serious fail on my account, the code assumes SPICE needs a DRM render node every time one isn't defined within the XML due to a missing check for presence of the <gl> element. I stripped the XML you sent me to the bare minimum to demonstrate a reproducer: ... <graphics type='spice' autoport='yes'> <listen type='address'/> <image compression='off'/> </graphics> <video> <model type='qxl' ram='65536' vram='65536' vgamem='16384' heads='1' primary='yes'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </video> ... Let me know whether you want to create a BZ/fix the bug/both otherwise I'll take care of everything and mention you in the commit message. Thanks, Erik

2 3

[libvirt-users] connecting two vm in a network
by daggs 06 Dec '18

06 Dec '18

Greetings, my router is running under a vm, I want to start another vm on that host and have to connected to the router vm in the same manner the host connects to the vm router. looking at the docs, I think that guest private network is what I need. thing is, from what I see, I need to define an ip and such. that's what the router suppose to provide so I'm not sure what exactly I need to configure and how. what is the correct config to achieve what I need? Thanks, Dagg.

1 0

[libvirt-users] no drm render nodes available
by Michael Taboada 06 Dec '18

06 Dec '18

Hi, I get this error when trying to start a vm using spice as the graphics: "error: internal error: No DRM render nodes available" I can't seem to figure out what could be going on, since it worked just a little while ago. Using arch linux, and libvirt from git (4.10.0.22.g6a6925b9b7-1). -Michael.

2 1

[libvirt-users] XML-RPC
by Xxxx Zzz 05 Dec '18

05 Dec '18

Hi all, I have 2 Centos servers running libvirtd. They are running using peacemaker cluster. After I had to reboot server 1, I can't no longer start VMs on server 2. I'm getting the following error message: error: Failed to start domain testvm error: internal error: Process exited prior to exec: libvirt: XML-RPC error : Failed to connect socket to '/var/run/libvirt/virtlockd-sock': Connection refused I can see that the deamon is listening on the port. I also couldn't find any further information in any logfile. Any idea? Thanks, Markus

1 0

[libvirt-users] console type tcp with logging
by Vasiliy Tolstov 03 Dec '18

03 Dec '18

Hi! I want to have ability to connect to guest console via libvirt api (and expose this data to xtermjs via websocket) with getty tty. And also i want to have log of tty1 (do log grub, kernel booting and errors). What i need to do in libvirt xml for such case? -- Vasiliy Tolstov, e-mail: v.tolstov(a)selfip.ru

3 8

[libvirt-users] How to get list of CPUs compatible with the host CPU and vendor?
by Milan Zamazal 03 Dec '18

03 Dec '18

Hi, I'm trying to use virConnectGetDomainCapabilities to get the list of CPUs compatible with the host CPU. I would like to further limit the list to CPUs of the same vendor as the host CPU. How can I do that? I tried to use virConnectBaselineCPU with <vendor> element and checking whether I obtain the same CPU, but that doesn't filter out CPUs without any vendor such as `kvm64' or `pentium'. Thanks, Milan

1 0