- Users - libvirt List Archives

[libvirt-users] command guest-file-open failed to open file - Permission denied
by 刘梦可 31 Oct '16

31 Oct '16

hello, I am using libvirt 1.2.17 on CentOS 7.2 - kernel 3.10.0-327.13.1.el7.x86_64. The command guest-file-open failed to open file with error "Permission denied", the detail is as below: virsh qemu-agent-command instance-00000a9c '{"execute":"guest-file-open", "arguments":{"path":"/home/centos/test","mode":"r"}}' error: internal error: unable to execute QEMU agent command 'guest-file-open': failed to open file '/home/centos/test' (mode: 'r'): Permission denied In the guest, the file '/home/centos/test' exist and the access permissions is 777 as below: -rwxrwxrwx. 1 centos centos 18 Oct 27 11:16 test How can I fix it? Thanks very much!!! -mkliu28

2 1

Re: [libvirt-users] Libvirt newer than 2.1.0 doesnt start up
by Rene Pasing 29 Oct '16

29 Oct '16

Hi all, thanks so far for your time and ideas. Please find the gdb output and also the debug-output of libvirt (as requested by Michal Privoznik and Laine Stump) here: https://paste.xinu.at/m-gPSHl/ On 10/19/2016 01:58 AM, Michal Privoznik wrote: > Those "Network is already in use by interface virbr1" error messages > worry me. Is the bridge active before you start libvirtd? If so we might > be losing netowrk state XML (or fail to parse it) and thus think network > is not started and because of autostart we try to start it again (which > fails). > [...] > Before you start libvirt, are there any files under > /var/run/libvirt/network/ ? If so, what's their content? Laine was already correct about that, this error message only appears when I manually try to restart libvirt after it already hung up. Maybe I should've made that more clear. Additionaly, no, there are no files in that directory, also I am pretty sure that I only got one instance of libvirt running According to the GDB log, the libvirt process is endlessly iterating over [1]. Any ideas what could be wrong? Thanks in advance Regards Rene [1] = https://github.com/libvirt/libvirt/blob/master/src/network/bridge_driver.c#…

2 3

[libvirt-users] Failed to launch libvirt 1.2.7
by Marina Danial 25 Oct '16

25 Oct '16

Hello, I am currently working on Redhat 6 - Kernel 2.6.32-358.el6.x86_64. It has by default libvirt 0.10.2. I wanted version 1.2.7. So I downloaded this and libvirt-1.2.7.tar.gz and I followed the following steps: 1. ./configure (with its default settings) 2. make 3. make install Currently, the installation is in: /usr/local and the source tree is in /export/home/libvirt. I stopped the previously installed daemon so that the new one takes effect. I launched the daemon from /export/home/libvirt/daemon/libvirtd -d. However every time I launch the C++ code, this message appears: libvir: XML-RPC error : Failed to connect socket to '/var/run/libvirt/libvirt-sock': No such file or directory Failed to open connection to qemu:///system My questions are: 1. How can I launch the daemon from the source tree? It does not behave as it should when it is launched from /etc/init.d 2. How can any application e.g. virt-manager look at the new paths of the newly installed libvirt? 3. How can I get libvirt to work from the source tree as if it was originally installed in Redhat? Thanks Marina

5 4

[libvirt-users] security BPC
by Michael Ströder 21 Oct '16

21 Oct '16

HI! Disclaimer: I'm a libvirt beginner using it for managing virtual machines based on qemu-kvm. Is there any documentation describing how to harden libvirt/qemu-kvm installations? Escpecially how to improve isolation of VMs: - secure time sync (with or without ntpd?) - random number generation - running VMs as different host OS users I do not need general OS hardening advice. Ciao, Michael.

3 2

[libvirt-users] Passing "migratable=no" to qemu in domain's XML
by Žilvinas Žaltiena 20 Oct '16

20 Oct '16

Hi, I want to use Invariant TSC with qemu, and to do that qemu must get the following args: "-cpu host,migratable=no,+invtsc". invtsc works only if migratable=no is passed too. The "+invtsc" part is sucessfully handled by using <feature name="invtsc"/> inside domain's XML, however I don't how/where to put the "migratable=no" there. Is there an elegant way to pass "migratable=no" to qemu via domain's XML without using <qemu:arg/> tags?

1 0

[libvirt-users] Libvirt newer than 2.1.0 doesnt start up
by Rene Pasing 19 Oct '16

19 Oct '16

Hi all, I have some problems with libvirt >2.1.0 (so 2.2.0 and 2.3.0): I have a working environment using libvirt 2.1.0 with 1 domain (called "mail") and one network (called "default6"), both are autostarted. I have no problems with this environment using libvirt 2.1.0, everything works great. But after (testwise) updating to libvirt 2.2.0 or 2.3.0, libvirt doesn't start up anymore. Some investigations showed that apparently my "default6" network is the problem. Libvirt is starting correctly after disabling all autostarts. When I then virsh' into the system daemon and type "net-start default6", then nothing happens and that command just hangs infinitely. Further information, relevant log entries and e.g. the used default6.xml configuration file can be found here, as I first thought it would be a configuration error from my side: https://bbs.archlinux.org/viewtopic.php?pid=1653221 Do you maybe have an idea what could be going on? Or do you maybe need more information, and if yes, which exactly? Thanks in advance Regards Rene

3 3

[libvirt-users] Fw: HELP
by zhunxun＠gmail.com 18 Oct '16

18 Oct '16

zhunxun(a)gmail.com From: zhunxun(a)gmail.com Date: 2016-10-18 18:46 To: berrange Subject: HELP Now I want to get qemu:commandline XML content in Libvirt,and then do my own job,but I do not know how to do it.Can you help me?? thank you ! the xml content is follows: <qemu:commandline> <qemu:arg value='-enable-kvm'/> <qemu:arg value='-drive'/> <qemu:arg value='file=/root/nvram_2.0-jin.qcow2,if=none,id=nvram0-0-0,format=qcow2'/> <qemu:arg value='-device'/> <qemu:arg value='tpm-tis,tpmdev=tpm-tpm0,id=tpm0'/> <qemu:arg value='-tpmdev'/> <qemu:arg value='libtpms,id=tpm-tpm0,nvram=nvram0-0-0,startup=clear'/> <qemu:arg value='-bios'/> <qemu:arg value='/root/xenSeabios/out/bios.bin'/> </qemu:commandline> Now I want to get third file path,how can I get it ?? thanks very much!! zhunxun(a)gmail.com

1 0

[libvirt-users] Fwd: Libvirt adds extra parameters in domain XML
by Marina Danial 18 Oct '16

18 Oct '16

I have a predetermined set of commands that I want to launch qemu with: sudo `which qemu-system-x86_64` -m 4G $(IMAGE) -enable-kvm \ -nographic \ -net nic,model=virtio,netdev=net0,macaddr=$(MAC),vlan=0 \ -netdev tap,id=net0,ifname=tap01,vhost=on,script=no,downscript=no \ -net nic,model=virtio,netdev=net1,macaddr=$(MANAGE_MAC),vlan=1 \ -netdev tap,id=net1,ifname=tap02,vhost=on,script=no,downscript=no \ I dont need any extra configuration from libvirt. is this possible? Or can anyone help with a possible xml configuration ? On Thu, Oct 13, 2016 at 1:13 PM, Martin Kletzander <mkletzan(a)redhat.com> wrote: > On Thu, Oct 13, 2016 at 11:49:44AM +0200, Marina Danial wrote: > >> Hello, >> >> In my C++ code, I generate my own domain XML file and I >> use virDomainCreateXML or virDomainDefineXML to launch my qemu VM. >> However, >> when I get to check which commands are sent to the qemu commandline, I >> find >> that libvirt has added so many extra parameters to the ones I have already >> set. How can I prevent libvirt from adding any extra parameters to the >> ones >> I originally defined in the domain XML? >> >> > What problems are you having with those? What specific ones are > problematic for you? Libvirt adds a lot of things so that the domain is > predictable, it can talk to it later on and so on. Some of them are > adding the same things you would have there without -no-defconfig and > similar. Just so we can guarantee some compatibility etc. > > Help will be highly appreciated. >> >> >> Thanks >> > > _______________________________________________ >> libvirt-users mailing list >> libvirt-users(a)redhat.com >> https://www.redhat.com/mailman/listinfo/libvirt-users >> >

3 3

[libvirt-users] How to tell spicy client to use SASL authentication?
by mordenkainen 14 Oct '16

14 Oct '16

I'm using libvirt in desktop environment. Single host machine, pair of users, a few guest machines. The first thought was that unix socket restricted to specific group is just enough for authentication. But virsh has the power like sudo: you could define pool on real device and write anything on it. So I decided to authenticate with password for each virsh use. I'm using SASL + saslauthd + PAM for that case. /etc/sasl2/libvirt.conf: mech_list: PLAIN pwcheck_method: saslauthd /etc/sasl2/qemu.conf: mech_list: PLAIN pwcheck_method: saslauthd /etc/pam.d/libvirt: auth requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group auth required pam_tally2.so onerr=succeed auth required pam_nologin.so auth required pam_unix.so try_first_pass likeauth nullok account requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group account required pam_nologin.so account required pam_unix.so /etc/pam.d/qemu: auth requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group auth required pam_tally2.so onerr=succeed auth required pam_nologin.so auth required pam_unix.so try_first_pass likeauth nullok account requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group account required pam_nologin.so account required pam_unix.so They are two identical configs for libvirt and for qemu. The first works flawlessly. virsh prompts for user and password and then login me to the shell. But spicy fails. It prompts only for the password and fails after receiving it leaving error message in syslog: Oct 13 23:24:21 paladin spicy[9001]: GSSAPI client step 1 What are the supposed actions I should perform to get further debug informations?

1 0

[libvirt-users] Fwd: Problems connecting to the libvirtd server
by Stefano Ricci 13 Oct '16

13 Oct '16

---------- Forwarded message ---------- From: Stefano Ricci <sfn.rcc(a)gmail.com> Date: 2016-10-11 12:35 GMT+02:00 Subject: Re: [libvirt-users] Problems connecting to the libvirtd server To: Michal Privoznik <mprivozn(a)redhat.com> There is not AppArmor and SElinux is disabled. The permits of the sock are as follows: libvirt-sock-admin 0700 (rwx) root: root libvirt-sock 0700 (rwx) root: root libvirt-sock-ro 0777 (rwxrwxrwx) root: root The libvirtd process runs with the root user. Below you will find the link to the requested log: http://pastebin.com/0jtpWU0h (libvirt_client.log command LIBVIRT_DEBUG = 1 virsh -c qemu: /// system list --all) Stefano 2016-10-11 11:04 GMT+02:00 Michal Privoznik <mprivozn(a)redhat.com>: > > On 10.10.2016 18:36, Stefano Ricci wrote: > > Hello everyone > > I do not know if it is correct address this mailing lists but I can > > not use libvirt. > > I run compile libvirt version 2.2.0 into environment lfs stable with > > qemu 2.7.0 and have not had any problems. > > The program when it starts not report any errors in the log, with > > activated debug level file. > > Only when you try to connect with the following command virsh -c > > qemu:///system remains hung without reporting any error either in the > > logs that screen. > > The command virsh -c test:///default list instead concludes on a regular basis. > > I attach the file libvirt.log and libvirt.conf > > Interesting. Maybe something else is causing the problem? Is there an > AppArmor running? What are the socket perms? Can you attach client debug > logs? (well, maybe paste them somewhere to pastebin-like service) > > http://wiki.libvirt.org/page/DebugLogs > > Michal

2 7