- Users - libvirt List Archives

[libvirt-users] IPv4 routed virtual networks
by Gene Czarcinski 04 Oct '12

04 Oct '12

OK, either I have taken a stupid pill and am missing something basic or routed network do not work. I assume that, if they did work, it would be in more or less that same manner as a nat network as far as ping'ing, ssh'ing, etc. to another real host on the same real LAN as the virtualization host. At least that is what I believe I should expect. I have googled for info and everything says that it should work. On of the referenced documents was this: http://berrange.com/posts/2009/12/13/routed-subnets-without-nat-for-libvirt… I checked through everything and it all matches what is in the document. I can go from the guest to the host (ping, ssh, etc) but not from that guest to another real host on the same real LAN. I am patching the relevant info below: ---------------------------------- net.ipv4.conf.all.forwarding = 1 net.ipv4.conf.p32p1.forwarding = 1 net.ipv4.conf.virbr8.forwarding = 1 -------------------------------- <network> <name>routed</name> <uuid>1b2a0197-e708-165c-f266-6822e73cfbdd</uuid> <forward dev='p32p1' mode='route'> <interface dev='p32p1'/> </forward> <bridge name='virbr8' stp='on' delay='0' /> <mac address='52:54:00:B9:59:49'/> <domain name='routed'/> <ip address='192.168.123.1' netmask='255.255.255.0'> <dhcp> <range start='192.168.123.128' end='192.168.123.254' /> </dhcp> </ip> </network> ------------------------------- Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- p32p1 virbr8 0.0.0.0/0 192.168.123.0/24 0 0 ACCEPT all -- virbr8 p32p1 192.168.123.0/24 0.0.0.0/0 0 0 ACCEPT all -- virbr8 virbr8 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * virbr8 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- virbr8 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable ------------------------------ This is Fedora 17 with an updated libvirt 0.10.1-4.fc17 [another system with the same "problem" is running libvirt 0.10.2-1.fc17]. Anyone know what is going on? BTW, I searched bugzilla for the comment containing the string routed filed against packages libvirt, qemu, qemu-kvm, or kvm ...Result .. no hits! If this is really a bug rather than something I did or did not do, then nobody is using routed virtual networks. BTW, I have a real F17 systems sitting between to networks on two different NICs and it routes things nicely, thank you very much. It does work but not for the virtual networks. I would really like it to be something I am missing. Gene

2 1

[libvirt-users] libvirt Java to connect at the XEN
by Felipe Oliveira Gutierrez 03 Oct '12

03 Oct '12

Hi people, I am new using libvirt for Java I created a class to test my conecction with XEN, but it is throwing a exception that I can't figure out how I solve this. Does anyone knoe how to configure it correctly? I cat use this class from the command line: $ javac -classpath /usr/java/jdk1.6.0_34/bin/libvirt-0.4.9.jar test.java $ java -classpath .:/usr/java/jdk1.6.0_34/bin/jna.jar:/usr/java/jdk1.6.0_34/bin/libvirt-0.4.9.jar test and it connect to the XEN. But when I put the code on my eclipse it doesn't work any more. ... conn = new Connect("xen:///", true); .... libvir: XML-RPC error : authentication failed: Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered exception caught:org.libvirt.LibvirtException: authentication failed: Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered level:VIR_ERR_ERROR code:VIR_ERR_AUTH_FAILED domain:VIR_FROM_RPC hasConn:false hasDom:false hasNet:false message:authentication failed: Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered str1:authentication failed: %s str2:Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered str3:null int1:-1 int2:-1 Exception in thread "main" java.lang.NullPointerException at TestLibVirt.main(TestLibVirt.java:88) -- *-- Felipe Oliveira Gutierrez* *-- **lipe.82(a)gmail.com* <lipe.82(a)gmail.com> *-- https://sites.google.com/site/lipe82/Home/diaadia*

1 0

[libvirt-users] Request to participate to the list
by Felipe Oliveira Gutierrez 02 Oct '12

02 Oct '12

Hi, I need to use libvirt on my eucalyptus server. Can I go into to the list? Do I have to install libvirt-0.10.2.tar.gz alone, or I need to install libvirt-java-0.4.9.tar.gz after to developing codes using java? Bets Regards, Felipe -- *-- Felipe Oliveira Gutierrez* *-- **lipe.82(a)gmail.com* <lipe.82(a)gmail.com> *-- https://sites.google.com/site/lipe82/Home/diaadia*

2 1

[libvirt-users] High availability for guests
by Renich Bon Ciric 30 Sep '12

30 Sep '12

Hello, What is the recommended way to offer high availability to Guests? For example, let host1, host2 and host3 be libvirt and KVM/Qemu enabled. If I start a guest in host1, how can I guarantee that it will stay online if host1 goes down? GlusterFS, for example, would take care of storage; but what about CPU and RAM? How can this be accomplished? Thank you for any feedback or comment in adavance. -- It's hard to be free... but I love to struggle. Love isn't asked for; it's just given. Respect isn't asked for; it's earned! Renich Bon Ciric http://www.woralelandia.com/ http://www.introbella.com/

2 3

[libvirt-users] Inconsistent iptables forwarding rules for virtual networks?
by Marwan Tanager 27 Sep '12

27 Sep '12

Hi everyone. Those are the iptables forwarding rules associated with the two virtual networks on my machine: ----------------------------------------------------------------------------------------- -A FORWARD -d 192.168.100.0/24 -o virbr1 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.100.0/24 -i virbr1 -j ACCEPT -A FORWARD -i virbr1 -o virbr1 -j ACCEPT -A FORWARD -o virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT -A FORWARD -i virbr0 -o virbr0 -j ACCEPT -A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable ----------------------------------------------------------------------------------------- Using this setup I can ping from a guest on 192.168.100.0/24 to a guest on 192.168.122.0/24, however the reverse is not possible (I get 'port unreachable' icmp messages). This is caused by the fourth rule, which rejects packets forwarded to virbr1. Moving the fourth rule to the end, obviously eliminates this problem. So, is this default setup intentional for some reason, or should the rules just be rearranged by libvirt, so that any rule on the FORWARD chain which has a REJECT target (which reject forwarding "to" some virtual interface) would go to the end of the chain, and thus, allowing the virtual networks to reach each other by default? Thanks. Marwan

2 2

[libvirt-users] minor swap issue ....
by William A. Mahaffey III 26 Sep '12

26 Sep '12

.... I have a CentOS 5.n VM running on a Fedora 14 server/host, installed using virt-manager, pretty plain vanilla. I use it to compile binaries to run under RHEL/CentOS 5.n OS. I occasionally notice that when the VM gets paged out by the server, it takes several minutes to get it back in :-/ (see below). On the host, logged in to a shell through a terminal window, this A.M.: [wam@Q6600, test, 10:09:08am] 3384 % /sbin/swapon -s ; free -m ; uname -a ; /sbin/hwclock -r ; date Filename Type Size Used Priority /dev/md2 partition 16773116 1967524 -1 total used free shared buffers cached Mem: 7993 7932 61 0 11 7176 -/+ buffers/cache: 744 7249 Swap: 16379 1921 14458 Linux Q6600 2.6.35.14-106.fc14.x86_64 #1 SMP Wed Nov 23 13:07:52 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux Tue Sep 25 10:09:11 2012 -0.890900 seconds Tue Sep 25 10:09:11 CDT 2012 [wam@Q6600, test, 10:09:11am] 3385 % /sbin/swapon -s ; free -m ; uname -a ; /sbin/hwclock -r ; date Filename Type Size Used Priority /dev/md2 partition 16773116 1415136 -1 total used free shared buffers cached Mem: 7993 7939 54 0 12 6358 -/+ buffers/cache: 1568 6425 Swap: 16379 1381 14998 Linux Q6600 2.6.35.14-106.fc14.x86_64 #1 SMP Wed Nov 23 13:07:52 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux Tue Sep 25 10:14:09 2012 -0.281487 seconds Tue Sep 25 10:14:09 CDT 2012 [wam@Q6600, test, 10:14:09am] 3385 % on the VM, logged in through a different terminal window: [wam@centos-5, CFD, 10:09:14am] 6507 % [wam@centos-5, CFD, 10:09:14am] 6507 % ( cd ../Utils/ ; make extra ) ; cd . make[1]: Entering directory `/home/wam/dev/CFD/Utils' make[2]: Entering directory `/home/wam/dev/CFD/Utils' /home/wam/dev/CFD/Utils/../lib/R4/SSE2/libutils.a up to date. make[2]: Leaving directory `/home/wam/dev/CFD/Utils' make[2]: Entering directory `/home/wam/dev/CFD/Utils' /home/wam/dev/CFD/Utils/../lib/R8/SSE2/libutils.a up to date. make[2]: Leaving directory `/home/wam/dev/CFD/Utils' make[1]: Leaving directory `/home/wam/dev/CFD/Utils' cd /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/utils; icc -c -DNDEBUG -DUNDER_SCORE_SYS -DLOSE_GAMMAL -gcc-version=340 -gcc-name=gcc34 -fabi-version=2 -I /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/include -wd138,167,186,266,279,880,1418,1419,2330,2331 -O3 -ip -opt-prefetch -parallel -opt-multi-version-aggressive -xSSE2 -DP64_BIT test.cpp cd /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/utils; icc -o /home/wam/bin/checkout -parallel -mkl=parallel -Wl,-s test.o -L /home/wam/dev/CFD/Utils/../lib/R4/SSE2 -Wl,--start-group -lutils -lMemIO -Wl,--end-group && \rm -f test.o Done with extra. [wam@centos-5, CFD, 10:12:36am] 6508 % i.e. it took 3+ min. to get back to the prompt for this command (usually about 5 sec.) .... This isn't a show-stopped by any means, but it is irritating. From the timestamps & data from the host & guest, apparently all of that was used up swapping the guest back in. Is there any way to either prioritize the VM to not get swapped out, or preferentially swapped back in :-) ? TIA for any pointers .... -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr.

3 4

[libvirt-users] Xen Paravirtualized Guest and drive order
by Cyril Peponnet 25 Sep '12

25 Sep '12

Hello, When defining a paravirtulized xen guest and use pygrub as a loader, it will seek into the first drive defined in order to fetch the kernel and boot the machine. As the boot tag is not used, and boot order seems to have no effect, I try to define the disk I want the kernel been seeked as first in my xml definition. Unfortunately, after defining the vm, the order is not kept. As I have seen, the order is made by alphabetical order. I mean if I define a disk as xvda and a cdrom as xvdc, the first drive will be the disk xvda. To be able to make the cdrom first I need to define xvda as a target for cdrom and xvdb or xvdc ... for the disk. It is not really usefull... Is there any way to keep the order of drive as defined in the xml config file ? Thanks

1 0

[libvirt-users] Quadratic function-like call delay
by Andrey Korolyov 25 Sep '12

25 Sep '12

Hi, There is a quite annoying thing, don`t sure if I can call it a bug. How to reproduce: - start a bunch of VMs, - stop libvirt, - start libvirt and immediately issue any call, say, 'virsh version', - delay until call completion may be fitted nearly as quadratic function from number of running VMs, qemu-kvm in my case (see link below). After this delay passed, any calls executed without slowdown, so problem is only a 'dead gap' after restarting service. http://xdel.ru/downloads/libvirt.png

4 6

[libvirt-users] VLANs with Open vSwitch in libvirt 0.10.1
by Scott Lowe 24 Sep '12

24 Sep '12

Hello all, I'm trying to take advantage of libvirt's VLAN and OVS support in the 0.10.1 release and consistently getting an "error: internal error corrupted profileid string" when starting a guest. I've defined a network using virsh; the configuration looks like this: <network> <name>ovs-network</name> <uuid>40c32a20-9eed-238c-895c-b9af7eaf72f1</uuid> <forward mode='bridge'/> <bridge name='ovsbr0' /> <virtualport type='openvswitch'/> <portgroup name='green' default='yes'> <virtualport> <parameters profileid='green-profile'/> </virtualport> </portgroup> <portgroup name='blue'> <vlan> <tag id='2'/> </vlan> <virtualport> <parameters profileid='blue-profile'/> </virtualport> </portgroup> </network> This network is listed when I run "virsh net-list --all" and is listed as active. In a guest, the network is defined like this: <interface type='network'> <mac address='52:54:00:a8:bf:8f'/> <source network='ovs-network'/> <virtualport type='openvswitch'> <parameters interfaceid='2913d936-6771-4983-1cdf-753c45ac24d2' profileid='green-profile'/> </virtualport> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </interface> This is running on Ubuntu 12.04.1 (and QEMU-KVM) with manually compiled libvirt 0.10.1 and OVS version 1.4.0+build0. For troubleshooting, I've undefined/re-define both the network and the guest, and restarted libvirtd in between. I've also tried different network names, different portgroup names, and different profileid's. I'm sure I'm missing something obvious but I can't seem to find it--any suggestions? Any and all help is appreciated. -- Scott

1 0

[libvirt-users] prefer_msi=on in xml file
by klak2 24 Sep '12

24 Sep '12

Hello, here is a problem with KVM passthrough of TechnoTrend S2-6400. Bug report is done. The last answer of the debian maintainer: --> Please check with lspci -vv whenever your device is MSI-capable, --> and if yes, try to add prefer_msi=on to the pci-assign device --> argument -- like, from your original report, --> --> -device pci- assign,host=08:00.0,id=hostdev0,configfd=23,bus=pci.0,addr=0xa,prefer_msi=on --> --> I don't know how to add this to libvirt however, maybe they have --> some knobs for that nowadays. and now my question: How do I add the parameter "prefer_msi=on" to the xml file? Thank and greets klak2

1 0