- Users - libvirt List Archives

[libvirt-users] Privacy Extension not working in VM
by Thomas Luening 23 Sep '19

23 Sep '19

Hello @ all With the rebuilding of my Server from Debian 9 to Debian 10, I also switch from Virtual Box to Libvirt/KVM. Due to new requirements for the VMs, now I have an actual problem, which unfortunately I can not solve. The problem has already been discussed in the German Debian-Forum ... unfortunately also without success. The facts: - ISP = Dual Stack with daily separation - Host and VM = Debian 10 - The VMs are via macvtap-device regular LAN-Clients - IPv4 = DHCP and NAT by DSL-Router - IPv6 = GUA via RA and SLAAC (2003::/3) - IPv4 works fine in the VM - IPv6 (NDP, RA, SLAAC) works basically also fine in the VM The existing problem in the VM: - MAC-Based GUA (2000::/3) is ok, both inbound and outbound - Outbound traffic via the second GUA (PE-Based) is filtered apparently, but not via packetfiltering, I don't know where. There are no error messages. On the part of the kernel in the VM and the IPv6-stack, everything looks completely ok, no error messages, except that Outbound-Traffic by the PE-Address is quietly blocked. The MAC- Based IPv6 works unchanged and without error as before. My questions: 1. Is there a special setting for the VM, to allow the use of Privacy Extensions for IPv6 unlimited? 2. Or is that possibly even a known and at the moment unsolved problem? 3. Or is this a intended limitation of virtualization? Can anyone help me with a solution or a hint? Thank you. BR, Tom

2 2

[libvirt-users] Certificate checking on TLS migrations to an IP address
by Milan Zamazal 23 Sep '19

23 Sep '19

Hi, I'm trying to add TLS migrations to oVirt, but I've hit a problem with certificate checking. oVirt uses the destination host IP address, rather than the host name, in the migration URI passed to virDomainMigrateToURI3. One reason for doing that is that a separate migration network may be used for migrations, while the host name resolves to the management network interface. But it causes a problem with certificate checking. The destination IP address is checked against the name, which is a host name, given in the destination certificate. That means there is mismatch and the migration fails. I don't think it'd be a very good idea to avoid the problem by putting IP addresses into server certificates. Is there any way to make TLS migrations working under these circumstances? For instance, SPICE remote-viewer allows the client to specify the certificate subject to expect on the host when connecting to it using an IP address. Can (or could) libvirt do something similar? Or is there any other mechanism to handle this problem? Thanks, Milan

2 7

[libvirt-users] VM cloning with memory state
by Benny Zlotnik 23 Sep '19

23 Sep '19

Hi, We are trying to implement VM cloning with snapshots for ovirt. For the most part, everything seems to work fine. However, when saved-state comes into play it gets complicated. As it seems impossible to restore a saved state file for a different VM due to a mismatch in UUID and name, I was wondering if it is possible to somehow work around this? Is it a sensible thing to do? (these are essentially the same VMs in terms of configuration and disk content) Is there a better approach to cloning a VM entirely (with snapshots and memory)? Thanks!

2 1

[libvirt-users] Live-Migration not possible: error: operation failed: guest CPU doesn't match specification
by Lentes, Bernd 18 Sep '19

18 Sep '19

Hi, i have atwo node HA-cluster with pacemaker, corosync, libvirt and KVM. Recently i configured a new VirtualDomain which runs fine, but live Migration does not succeed. This is the error: VirtualDomain(vm_snipanalysis)[14322]: 2019/09/18_16:56:54 ERROR: snipanalysis: live migration to ha-idg-2 failed: 1 Sep 18 16:56:54 [6970] ha-idg-1 lrmd: notice: operation_finished: vm_snipanalysis_migrate_to_0:14322:stderr [ error: operation failed: guest CPU doesn't match specification: missing features: fma,movbe,xsave,avx,f16c,rdrand,fsgsbase,bmi1,avx2,smep,bmi2,erms,invpcid,md-clear,xsaveopt,abm ] The two servers are from HP, they are similar, but not identical. Their CPU's are different: One is "Intel(R) Xeon(R) CPU E5-2630 v3 @ 2.40GHz", following /proc/cpuinfo, the other is "Intel(R) Xeon(R) CPU X5675 @ 3.07GHz". Which guest CPU should i choose for having the guest running smoothly on each host ? Bernd -- Bernd Lentes Systemadministration Institut für Entwicklungsgenetik Gebäude 35.34 - Raum 208 HelmholtzZentrum münchen bernd.lentes(a)helmholtz-muenchen.de phone: +49 89 3187 1241 phone: +49 89 3187 3827 fax: +49 89 3187 2294 http://www.helmholtz-muenchen.de/idg Perfekt ist wer keine Fehler macht Also sind Tote perfekt Helmholtz Zentrum Muenchen Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH) Ingolstaedter Landstr. 1 85764 Neuherberg www.helmholtz-muenchen.de Aufsichtsratsvorsitzende: MinDir'in Prof. Dr. Veronika von Messling Geschaeftsfuehrung: Prof. Dr. med. Dr. h.c. Matthias Tschoep, Kerstin Guenther Registergericht: Amtsgericht Muenchen HRB 6466 USt-IdNr: DE 129521671

2 1

[libvirt-users] About vhost-user-blk support
by Su Hua 12 Sep '19

12 Sep '19

Hi, everyone, ask a question, which version can fully support the device type of qemu hw/block/vhost-user-blk.c? If so, what should the format of the xml file look like? Regards Su

3 5

[libvirt-users] Disk backup for live and offline domains
by Tim Schumacher 10 Sep '19

10 Sep '19

Hi, I followed the instructions on the wiki https://wiki.libvirt.org/page/Live-disk-backup-with-active-blockcommit for a live disk backup. Unfortunately this is not working when the domain is offline because the active blockcommit throws error: Requested operation is not valid: domain is not running For my use case it should be possible for the domain to shut down while the backup is in progress. I'm looking for a way to shorten the backing chain after the backup finishes and the domain is offline. Is there a way to let libvirt decide wether to shorten the backing chain using blockcommit or some alternative way which works on offline domains? As I'm writing this I might as well ask about the current state of "incremental backups". It seems like dirty bitmaps can keep track of which blocks changed and just copy those to the backup. Is there some libvirt command-line frontend for that or is it planned for the future? Thanks. - Tim

3 2

[libvirt-users] Disk backup for live and offline domains
by Tim Schumacher 10 Sep '19

10 Sep '19

Hi, I followed the instructions on the wiki https://wiki.libvirt.org/page/Live-disk-backup-with-active-blockcommit for a live disk backup. Unfortunately this is not working when the domain is offline because the active blockcommit throws error: Requested operation is not valid: domain is not running For my use case it should be possible for the domain to shut down while the backup is in progress. I'm looking for a way to shorten the backing chain after the backup finishes and the domain is offline. Is there a way to let libvirt decide wether to shorten the backing chain using blockcommit or some alternative way which works on offline domains? As I'm writing this I might as well ask about the current state of "incremental backups". It seems like dirty bitmaps can keep track of which blocks changed and just copy those to the backup. Is there some libvirt command-line frontend for that or is it planned for the future? Thanks. - Tim

1 0

[libvirt-users] Reg: <operation not permitted><netlink socket><Qemu device>
by bharath paulraj 09 Sep '19

09 Sep '19

Hi Team, I am writing a new device in QEMU, which opens and reads from Netlink socket from the hypervisor. I need this Netlink socket to support migration of connection tracking entries during VM Live migration. If I am using QEMU command directly to launch the VM, then any operation on Netlink socket works fine. But, If I am using libvirt to create the VM and attaching the device, then I am getting permission denied error. As I found out that this is related to SElinux, I added the svirt_t context as permissive *"semanage permissive -a svirt_t". *With this, I am not receiving permission denied error, instead i am receiving "operation not permitted" error. I changed the user and group field in libvirtd/qemu.conf to root/root. But still, I am facing the same problem. Any suggestions to overcome this? -- Regards, Bharath

1 0

[libvirt-users] could not create snapshotxml on encryption image
by 18781374080 06 Sep '19

06 Sep '19

hi ，everyone! I am a newcomer to Libvirt, and I don't know if it's a native question, I create snapshots of virtual machines that use encrypted disk, The console gave me the following error: Traceback(most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py",line 4613, in snapshot self._dom,snapshotCreateXML(snapxml, snapFlags) File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", in line 98, in f ret = attr(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", line 130, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 2620, in snapshotCreateXML if ret is None:raise libvirtError('virDomainSnapshotCreateXML() failed', dom=self) libvirtError: internal error: unable to execute QEMU command 'transaction': Parameter 'encrypt.key-secret' is required for cipher And try adding encryption fields to domainsnapshot, as shown below <?xml version='1.0' encoding='utf-8'?> <domainsnapshot> <disks> <disk name="sda" snapshot="external" type="file"> <source file="/rhev/data-center/mnt/192.168.1.13:_exports_data/168bc099-3ff1-44e8-ba2f-face1594db63/images/eed78b32-f257-445f-8f2e-b5c969ee38e8/da869c1d-f6bb-4816-be6a-f4d1d2ae2af2" type="file" /> #enc <encryption format="luks"> <secret type="passphrase" uuid="694bdf38-214e-48d3-8c4c-9dbbcf0f5fa0" /> </encryption> </disk> </disks> <memory file="/rhev/data-center/mnt/192.168.0.91:_exports_data/168bc099-3ff1-44e8-ba2f-face1594db63/images/6236ecf4-0eb5-4879-bb6d-251ae84b55f8/f086c613-d1c2-4ab3-851e-97961173d1d6" snapshot="external" /> # notenc </domainsnapshot> But there are still the same mistakes. I don't know whether the encrypted snapshot supports this operation or whether I added encryption information in the wrong way. This problem has been bothering me for a long time. Any tips or help will be appreciated. Thank you | | 18781374080 | | 18781374080(a)163.com | 签名由网易邮箱大师定制

2 1

[libvirt-users] Recover snapshots from qcow images
by Petr Stodulka 06 Sep '19

06 Sep '19

Hi guys, I had to move to the new laptop week ago and I screw migration of my virtual machines. I recovered my virtual machines on the new laptop (virsh define) using the backed up xml files, but I am missing any file with metadata about snapshots. The original storage is cleaned so I cannot take these files anymore. Using qemu-info I can see my snapshots inside the qcow images, but libvirt doesn't know about them: ########################################### # virsh snapshot-list rhlvm Name Creation Time State ------------------------------- # qemu-img info rhlvm.qcow2 image: rhlvm.qcow2 file format: qcow2 virtual size: 25G (26843545600 bytes) disk size: 2.9G cluster_size: 65536 Snapshot list: ID TAG VM SIZE DATE VM CLOCK 1 prepared 0 2018-09-05 11:06:06 00:00:00.000 Format specific information: compat: 1.1 lazy refcounts: true refcount bits: 16 corrupt: false ########################################### Is there any nice way to regenerate snapshot metadata for libvirt from the data inside qcow images? I have bunch of VMs so if there is nice way how to recover those data, you will make me really happy :) Thanks, -- Petr Stodulka OS & Application Modernization IRC nicks: pstodulk, skytak Software Engineer Red Hat Czech s.r.o.

2 2