- Users - libvirt List Archives

[libvirt-users] changing pci addr of SCSI storage controller: Red Hat, Inc Virtio block device (rev 01)
by daggs 13 May '18

13 May '18

Greetings, when execute lspci inside my vm linux guest, I see this: :/# lspci | grep -i scsi 03:00.0 SCSI storage controller: Red Hat, Inc Virtio block device (rev 01) I don't see any such address in my xml file, is it possible to move that controller to another pci addr? Thanks, Dagg.

2 3

[libvirt-users] e1000 network interface takes a long time to set the link ready
by Ihar Hrachyshka 12 May '18

12 May '18

Hi, In kubevirt, we discovered [1] that whenever e1000 is used for vNIC, link on the interface becomes ready several seconds after 'ifup' is executed, which for some buggy images like cirros may slow down boot process for up to 1 minute [2]. If we switch from e1000 to virtio, the link is brought up and ready almost immediately. For the record, I am using the following versions: - L0 kernel: 4.16.5-200.fc27.x86_64 #1 SMP - libvirt: 3.7.0-4.fc27 - guest kernel: 4.4.0-28-generic #47-Ubuntu Is there something specific about e1000 that makes it initialize the link too slowly on libvirt or guest side? [1] https://github.com/kubevirt/kubevirt/issues/936 [2] https://bugs.launchpad.net/cirros/+bug/1768955 Ihar

4 6

Re: [libvirt-users] about python-libvirt
by Andrea Bolognani 10 May '18

10 May '18

[re-adding libvirt-users; please don't take replies off-list] On Thu, 2018-05-10 at 17:32 +0800, lizhuoyao wrote: > Thanks! > > But I'm not clear that what the language binding means? > What the relationship between they? Is that the code from > https://libvirt.org/sources/ can be replaced completely by > the code from https://libvirt.org/sources/python? Language bindings are the means through which libvirt, which is implemented in C, can be used from non-C languages such as Python. It's basically a bunch of glue code that allows Python code to call into C code. In order to use libvirt from Python, you need to have *both* libvirt itself *and* the Python bindings installed on the system: libvirt-python doesn't replace libvirt, and in fact can't work at all unless the C library is available as well. -- Andrea Bolognani / Red Hat / Virtualization

1 0

[libvirt-users] about python-libvirt
by lizhuoyao 10 May '18

10 May '18

hi boys： the libvirt code in ftp://libvirt.org does get the function of python-libvirt? Or the python-libvirt is another code ? -- Have a good day

3 2

[libvirt-users] Multi-threaded virsh migrate
by Shawn Q 10 May '18

10 May '18

Hi folk, we are using 10gb NICs with multithreaded compression. We're finding that the standard `virsh migrate` gets at most ~1.2gbps, similar to a single scp session. When we do a multipart upload with multiple scp connections we can squeeze as high as 9.6gbps. Is there was a way to get `virsh migrate` to perform multiple connections as well when transferring? Would be useful to be able to migrate big guests using the full capacity of the 10gb nics. Our example command to migrate: # virsh migrate --compressed --comp-methods mt --comp-mt-level 9 --comp-mt-threads 16 --comp-mt-dthreads 16 --verbose --live --copy-storage-all --undefinesource --unsafe --persistent dev-testvm790.mydomain.net qemu+tcp://myhost-10g.mydomain.net/system

2 2

Re: [libvirt-users] VF MAC not reverted to all zero MAC/domain xml MAC on VM restart
by Thirunavukarasu Sengalvarayan -X (tsengalv - HCL TECHNOLOGIES LIMITED at Cisco) 10 May '18

10 May '18

Hi Laine, Thanks for taking the time to respond to my question. I think I have not described my problem clearly. Let me explain my issue below with the information that you had requested. My assumption according to the information you gave me is that the admin MAC and VF MAC are the same in my case. I see a PF (GE0-0) interface but I don’t see a vfnetdev interface as you mentioned in your email. * Given this assumption, when the host is booted, the admin MAC and VF MAC are both 00:00:00:00:00:00. [root@nfvis ~]# ip link show GE0-0 3: GE0-0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 9216<tel:9216> qdisc mq master ovs-system state UP mode DEFAULT qlen 1000<tel:1000> link/ether a0:23:9f:ce:b1:f8 brd ff:ff:ff:ff:ff:ff vf 0 MAC 00:00:00:00:00:00, spoof checking on, link-state auto, trust off vf 1 MAC 00:00:00:00:00:00, spoof checking on, link-state auto, trust off [root@nfvis ~]# * the VF is assigned to a guest, so the admin MAC is set to the configured value (52:54:00:29:3c:bf) as shown below [root@nfvis ~]# ip link show GE0-0 3: GE0-0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 9216<tel:9216> qdisc mq master ovs-system state UP mode DEFAULT qlen 1000<tel:1000> link/ether a0:23:9f:ce:b1:f8 brd ff:ff:ff:ff:ff:ff vf 0 MAC 52:54:00:29:3c:bf, spoof checking on, link-state auto, trust on vf 1 MAC 00:00:00:00:00:00, spoof checking on, link-state auto, trust on [root@nfvis ~]# * Configure bond interface on the guest and added member interface to the bond On doing the above step, bond interface mac (52:54:00:29:3c:be) gets assigned to VF [root@nfvis libvirt]# ip link show GE0-0 3: GE0-0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 9216<tel:9216> qdisc mq master ovs-system state UP mode DEFAULT qlen 1000<tel:1000> link/ether a0:23:9f:ce:b1:f8 brd ff:ff:ff:ff:ff:ff vf 0 MAC 52:54:00:29:3c:be, spoof checking on, link-state auto, trust on vf 1 MAC 00:00:00:00:00:00, spoof checking on, link-state auto, trust on [root@nfvis libvirt]# * The next step would be to restart the VM from within the VM console (* we are not doing a shut down and start from the host *). At this stage, the admin MAC is not reverted to the domain xml mac(52:54:00:29:3c:bf) Instead it retains the same bond mac (52:54:00:29:3c:be) which was set before the VM was restarted from the console. [root@nfvis libvirt]# ip link show GE0-0 3: GE0-0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 9216<tel:9216> qdisc mq master ovs-system state UP mode DEFAULT qlen 1000<tel:1000> link/ether a0:23:9f:ce:b1:f8 brd ff:ff:ff:ff:ff:ff vf 0 MAC 52:54:00:29:3c:be, spoof checking on, link-state auto, trust on vf 1 MAC 00:00:00:00:00:00, spoof checking on, link-state auto, trust on So the actual problem we face here, is after the VM is restarted and after the members of bond interface are released, VF mac is not getting reverted back to domain xml mac(52:54:00:29:3c:bf). Instead the VF mac and admin mac are set to the bond mac “52:54:00:29:3c:be” and leading to a duplicate mac issue. My expectation was that after the VM is restarted from the console, libvirt should revert the VF’s MAC to the original MAC, which in our case was the domain xml MAC, which is not happening in my case. Attached is the log file as requested. Interface related contents from domain xml: <interface type='hostdev' managed='yes'> <mac address='52:54:00:29:3c:bf'/> <driver name='vfio'/> <source> <address type='pci' domain='0x0000' bus='0x02' slot='0x10' function='0x0'/> </source> <target dev='vnic1'/> <model type='virtio'/> <alias name='hostdev0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </interface> Thanks Thiru. From: sendmail <justsendmailnothingelse(a)gmail.com> On Behalf Of Laine Stump Sent: Wednesday, May 2, 2018 10:01 AM To: Thirunavukarasu Sengalvarayan -X (tsengalv - HCL TECHNOLOGIES LIMITED at Cisco) <tsengalv(a)cisco.com> Cc: Chanda Mendon (cmendon) <cmendon(a)cisco.com> Subject: Re: VF MAC not reverted to all zero MAC on VM restart On 04/27/2018 11:08 PM, Thirunavukarasu Sengalvarayan -X (tsengalv - HCL TECHNOLOGIES LIMITED at Cisco) wrote: Hi Laine Stump, We are running linux based VM on KVM based Hypervisor and facing issue with respect to VF MAC. Our Libvirt version: 3.2.0, host driver IGB version 5.2.16 and VF driver IGBVF version 2.3.7.1 Description of problem: When passing a VF to a guest, libvirt sets its MAC according to the domain xml. On shutting down the VM or power off the VM, libvirt attempts to restore its original MAC(all-zero mac). There is no issue with this scenario. When we restart the VM, there is no attempt to restore/revert its original MAC(all zero mac). This problem leads to duplicate MAC issue on the guest (if configured with portchannel). Could you please help us in resolving the issue? Questions like this should be sent to libvirt-users(a)redhat.com<mailto:libvirt-users@redhat.com> rather than to an individual's email address. This makes the likelyhood of getting an answer much higher, and also creates an archive of the problem and eventual solution, which may help others in the future. I'm Cc'ing this response to that list so that any further communication will happen there. Before reading any of the following, it's useful to know this - for SRIOV network devices that *properly* support SRIOV (and I consider those using the igb driver to be in this category) each VF has two MAC addresses that need to be discussed: 1) the VF netdev MAC address (which I will just call the "mac address" - this is the MAC that is known to the VF net driver, and displayed in the output of "ip link show dev $vfnetdev". 2) the MAC address that is stored in the PF driver for each VF, displayed in the "VF" lines immediately following the "ip link" info of the *PF*, and which will be used to initialize the VF's own MAC address when its driver is re-initialized (I will call this the "admin mac") Some VF drivers initialize the mac to 00:00:00:00:00:00 (e.g. the Cisco enic driver) and some initialize it to a random number (e.g. igb and all the other Intel VF net drivers). Likewise, some PF drivers initialize the admin macs to 00:00:00:00:00:00 and some to random numbers (as a matter of fact, this behavior changes between different versions of the same driver in at least one case!). Beyond this, some PF and VF drivers allow setting the mac/admin mac to 00:00:00:00:00:00, and some prohibit one or the other. (in many cases, a driver that itself initializes the mac/admin mac to 00:00:00:00:00:00 also prohibits setting it back to that same value once it has been changed!) When libvirt sets up a VF to be used by a guest (either for vfio device assignment, or for macvtap passthrough), it saves both the mac and the admin mac with the intent of restoring them later. Once these values have been saved, libvirt will set the mac (in the case of macvtap passthrough) or the admin mac (in the case of vfio device assignment), and send the device on to qemu to be used by the guest. After the guest is finished running (or the device is detached), libvirt attempts to restore the settings it had saved at the beginning. Trouble comes up in 2 ways though - 1) once the admin mac has been set for a VF (via the PF), it is no longer possible to directly set the mac (in the VF) (this is done for security reasons, to prevent the guest from changing its mac address), and 2) as said above, many drivers don't allow setting 00:00:00:00:00:00, but in many cases that was the original setting. As of libvirt 3.2.0, libvirt uses the following strategies to work around these problems: a) if setting a non-0 mac (to the VF) fails, then libvirt will try setting the *admin MAC* to that value, then detaching/re-attaching the VF net driver. This will cause the PF to reinitialize the mac in the VF driver. (NB: if we do this, then we don't bother trying to later re-set the admin MAC to its own original value; it's really not important). b) if the failure was in setting the MAC to 00:00:00:00:00:00, then libvirt will set the mac/admin mac to 02:00:00:00:00:00 (which should be a legal value for any driver, but also should not conflict with and "real" mac on the network). Okay, enough background. On to your problem. To make sure I understand your situation correctly: * When the host is booted, the admin MAC is 00:00:00:00:00:00, and VF mac is random (call it rr:rr:rr:rr:rr:rr). * the VF is assigned to a guest (with <interface type='hostdev'> I guess?), so the admin MAC is set to the configured value (let's call it gg:gg:gg:gg:gg:gg) * the guest is shutdown, which causes *both* mac and admin mac to be set to rr:rr:rr:rr:rr:rr * the next time the guest is start *its mac is not changed*? There must be something I'm not getting. Can you maybe perform this test and run "ip link show $PF; ip link show $VF" (substituting the netdev names of the PF and VF for $PF and $VF) after each step to illustrate the problem? Also, it would be helpful to add this to /etc/libvirt/libvirtd.conf: log_filters="1:util.netdev" log_outputs="1:file:/var/log/libvirt/libvirtd-netdev.log<file://var/log/libvirt/libvirtd-netdev.log>" then restart libvirtd (systemctl restart libvirtd.service), and post the contents of libvirtd-netdev.log somewhere and reference it in your next reply. (don't forget to remove those lines and restart libvirtd again after your testing is done!) Finally, you should include the contents of the <interface ...> section of your config in your next response. (BTW, since you're using libvirt-3.2.0, I assume that you are using either RHEL 7.4 or CentOS 7.4. If you are using RHEL, you should open a customer case with Red Hat so that your problem is appropriately prioritized).

3 5

[libvirt-users] Unable to detach disk using 'virsh detach-disk'
by Andre Goree 09 May '18

09 May '18

I'm unable to detach a disk from a Windows guest using the 'virsh detach-disk' command. Even though 'domblklist' shows the disk attached, and on the FIRST iteration, it says the command "completed successfully," 'domblklist will still show the disk attached and subsequent 'detach-disk' commands fail with 'no disk found whose source path or target is ${location}' ~ # virsh domblklist 31907-1063435 Target Source ------------------------------------------------ vda ${concatenated}/31907-1063435/2018-04-28-190529 vdb ${concatenated}/31907-67863/2018-03-21-033216.2018-04-28-190529 ~ # virsh detach-disk --domain 31907-1063435 /var/lib/libvirt/images/instances/31907-67863/2018-03-21-033216.2018-04-28-190529 --persistent error: No disk found whose source path or target is /var/lib/libvirt/images/instances/31907-67863/2018-03-21-033216.2018-04-28-190529 Any ideas as to why this happens? -- Andre Goree -=-=-=-=-=- Email - andre at drenet.net Website - http://blog.drenet.net PGP key - http://www.drenet.net/pubkey.html -=-=-=-=-=-

2 1

[libvirt-users] How to determine if my guest is loaded
by Stallard, Adam 08 May '18

08 May '18

Hi, I am having trouble determining if my VM is up or not. Using virsh leads me to believe that the guest OS is not being loaded: virsh domblkstat guestvm rd_req 0 rd_bytes 0 wr_req 0 wr_bytes 0 flush_operations 0 rd_total_times 0 wr_total_times 0 flush_total_times 0 The VM state is running when outputting list -all. I think the guest OS is just not booted properly. Trying to bring up a console with virsh console guestvm prints: Connected to domain guestvm Escape character is ^] But then I cannot type anything to the screen or see any more output. In my /var/log/libvirt/qemu/domain**/guestvm.log I see no errors. Only the qemu start up command, and a note about redirecting output to console /dev/pts/0. The VM is a custom built image that has a file system mounted on /dev/vg/guestvm. We have a custom kernel at /var/lib/qemu/bzImage. Running a startup command directly with qemu-system-x86_64 allows me to boot the machine properly and bring up a console using netcat. The guest does not use grub. I am not sure if something special is needed in my domain configuration to boot the guest inside the VM. Here is my config: <domain type='qemu'> <name>guestvm</name> <uuid>1878670e-ee57-4059-8d60-243a1559c2d3</uuid> <memory>219200</memory> <currentMemory>219200</currentMemory> <vcpu>2</vcpu> <os> <type arch='i686' machine='pc'>hvm</type> <kernel>/var/lib/qemu/bzImage<kernel/> <boot dev='hd'/> </os> <devices> <emulator>/usr/bin/qemu-system-x86_64</emulator> <disk type='block' device='disk'> <source dev='/dev/vg/guestvm'/> <target dev='sda'/> <readonly/> </disk> <interface type='network'> <source network='default'/> </interface> <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> </devices> <features> <acpi/> </features> </domain> Any ideas what could be happening? Adam

1 0

[libvirt-users] SELinux (sVirt) with libvirt
by Anastasiya Ruzhanskaya 07 May '18

07 May '18

Hello! Where I can get maybe a tutorial or smth like this about how to use SELinux with libvirt?

1 0

[libvirt-users] User name / session idin logs
by Anastasiya Ruzhanskaya 07 May '18

07 May '18

Hello everyone, I have a question about logging. I need to find out whether it is possible to see user id/session id inside logs or somewhere else. It is not passed in structured across the network, so where should I look to find out, which user (which session) is currently performing the actions?

2 3