- Users - libvirt List Archives

[libvirt-users] Installing a VM to a virtio disk
by Brian Roberg 27 Aug '10

27 Aug '10

When provisioning new VMs, is it possible to enable virtio for the guest's storage at the time of the installation? When I try to do so, the Ubuntu installer says, "No root file system is defined" when it gets to the partitioning step. Here's the disk option I'm giving to virt-install: --disk pool=libvirt-pool,size=4,bus=virtio (I'm also using "--os-variant=ubuntulucid".) I've been able to install a new VM using the IDE storage driver first and then switch to virtio after the installation is complete, but it would simplify the process if it could start with virtio right off the bat. I'm using Ubuntu 10.04 LTS ("Lucid") host and guest, which provides libvirt 0.7.5 and kernel 2.6.32. I'm about ready to concede defeat and set up a way to automate making the change after the installation, but I thought I'd ask here first. Thanks! -- Brian

1 1

Re: [libvirt-users] [virt-tools-list] Client certificate paths?
by Cole Robinson 22 Aug '10

22 Aug '10

On 08/12/2010 10:29 AM, Lars Kellogg-Stedman wrote: > Hello all, > > I'm trying to get virsh (and virt-manager) to talk to a remote libvirt > instance. I cannot for the life of me figure out how to tell either > tool where to find client or CA certificates. Do they *really* need > to access the ones in /etc/pki? In particular, the client seems to > want to read the *server's* private key, which for obvious reasons is > only readable by root. > > I feel like I must be missing something obvious...if someone can point > me towards a solution I would really appreciate it. Thanks! > > If it's relevant, I'm running everything under Fedora 13 right now, so > that means libvirt-0.8.2-1.fc13.x86_64 and > qemu-kvm-0.12.3-8.fc13.x86_64. > This is more a libvirt question, so CC-ing libvirt-users. - Cole

3 2

[libvirt-users] Libvirt and iptables rule order
by Brian Pitts 21 Aug '10

21 Aug '10

Hi, On RHEL 5.5, I set up iptables rules for forwarding ports to some of my virtual machines. For example. iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 3380 -j DNAT --to-destination 192.168.123.2:3389 iptables -I FORWARD -d 192.168.123.2 -i eth0 -p tcp -m tcp --dport 3389 -m state --state NEW -j ACCEPT These worked fine, and I saved them with 'service iptables save'. However, upon rebooting the server the forwarding no longer works. When I inspect the configuration with 'iptables -L', I see that the rules libvirt creates were inserted before the rules from /etc/sysconfig/iptables. Since the rules from libvirt include one that rejects any new connections, the data I want forwarded is dropped. For example, target prot opt in out source destination ACCEPT all -- any virbr1 anywhere 192.168.123.0/24 state RELATED,ESTABLISHED ACCEPT all -- virbr1 any 192.168.123.0/24 anywhere ACCEPT all -- virbr1 virbr1 anywhere anywhere REJECT all -- any virbr1 anywhere anywhere reject-with icmp-port-unreachable REJECT all -- virbr1 any anywhere anywhere reject-with icmp-port-unreachable ACCEPT tcp -- eth0 any anywhere 192.168.123.2 tcp dpt:ms-wbt-server state NEW How should I configure iptables so that my rules and libvirt's play nicely? Basically I need my ACCEPTs to end up before libvirt's REJECTs. I looked through the list archives and libvirt documentation but did not see an answer to this question. -- Brian Pitts Systems Administrator | EuPathDB Bioinformatics Resource Center 706-542-1447 | bdp(a)uga.edu | http://eupathdb.org

1 0

[libvirt-users] how to Create virtual machine
by Saravanan S 20 Aug '10

20 Aug '10

Hi, I am working on a virtualization project that involves setting up virtual appliances to implement the same, which tool is required to 1) create virtual appliances 2) deploy virtual appliances 3) manage virtual appliances/virtual machines Could you please guide me with some pointers or resources to get started with the creation of virtual machines? I am little confused with libvirt with Xen and qemu. how does xen or qemu related with libvirt ? Thank you. Saravanan Sundaramoorthy Red Hat Certified Engineer http://www.google.com/profiles/dearsaravanan#about +91 99404 32545

3 2

[libvirt-users] libvirt support spice protocol
by Songwen Liao 20 Aug '10

20 Aug '10

Hi,everyone, there is a problem with libvirt support spice protocol. i use the following patch file,but it seems not success.anyone have an idea about that? thanks. patch file: This adds an element <graphics type='spice' port='5903' tlsPort='5904' listen='127.0.0.1'/> This is the bare minimum that should be exposed in the guest config for SPICE. Other parameters are better handled as per host level configuration tunables * docs/schemas/domain.rng: Define the SPICE <graphics> schema * src/domain_conf.h, src/domain_conf.c: Add parsing and formatting for SPICE graphics config * src/qemu_conf.c: Complain about unsupported graphics types --- docs/schemas/domain.rng | 30 +++++++++++++++++++++ src/conf/domain_conf.c | 65 ++++++++++++++++++++++++++++++++++++++++++++++- src/conf/domain_conf.h | 8 ++++++ src/qemu/qemu_conf.c | 9 ++++++ 4 files changed, 111 insertions(+), 1 deletions(-) diff --git a/docs/schemas/domain.rng b/docs/schemas/domain.rng index f9d6d7e..8aa2079 100644 --- a/docs/schemas/domain.rng +++ b/docs/schemas/domain.rng @@ -746,6 +746,36 @@ </group> <group> <attribute name="type"> + <value>spice</value> + </attribute> + <optional> + <attribute name="port"> + <ref name="PortNumber"/> + </attribute> + </optional> + <optional> + <attribute name="tlsPort"> + <ref name="PortNumber"/> + </attribute> + </optional> + <optional> + <attribute name="listen"> + <ref name="addrIP"/> + </attribute> + </optional> + <optional> + <attribute name="passwd"> + <text/> + </attribute> + </optional> + <optional> + <attribute name="keymap"> + <text/> + </attribute> + </optional> + </group> + <group> + <attribute name="type"> <value>rdp</value> </attribute> <optional> diff --git a/src/conf/domain_conf.c b/src/conf/domain_conf.c index 4930c38..ca5dfc3 100644 --- a/src/conf/domain_conf.c +++ b/src/conf/domain_conf.c @@ -165,7 +165,8 @@ VIR_ENUM_IMPL(virDomainGraphics, VIR_DOMAIN_GRAPHICS_TYPE_LAST, "sdl", "vnc", "rdp", - "desktop") + "desktop", + "spice") VIR_ENUM_IMPL(virDomainHostdevMode, VIR_DOMAIN_HOSTDEV_MODE_LAST, "subsystem", @@ -267,6 +268,12 @@ void virDomainGraphicsDefFree(virDomainGraphicsDefPtr def) case VIR_DOMAIN_GRAPHICS_TYPE_DESKTOP: VIR_FREE(def->data.desktop.display); break; + + case VIR_DOMAIN_GRAPHICS_TYPE_SPICE: + VIR_FREE(def->data.spice.listenAddr); + VIR_FREE(def->data.spice.keymap); + VIR_FREE(def->data.spice.passwd); + break; } VIR_FREE(def); @@ -1692,6 +1699,38 @@ virDomainGraphicsDefParseXML(virConnectPtr conn, def->data.desktop.fullscreen = 0; def->data.desktop.display = virXMLPropString(node, "display"); + } else if (def->type == VIR_DOMAIN_GRAPHICS_TYPE_SPICE) { + char *port = virXMLPropString(node, "port"); + char *tlsPort; + + if (port) { + if (virStrToLong_i(port, NULL, 10, &def->data.spice.port) < 0) { + virDomainReportError(conn, VIR_ERR_INTERNAL_ERROR, + _("cannot parse spice port %s"), port); + VIR_FREE(port); + goto error; + } + VIR_FREE(port); + } else { + def->data.spice.port = 5900; + } + + tlsPort = virXMLPropString(node, "tlsPort"); + if (tlsPort) { + if (virStrToLong_i(tlsPort, NULL, 10, &def->data.spice.tlsPort) < 0) { + virDomainReportError(conn, VIR_ERR_INTERNAL_ERROR, + _("cannot parse spice tlsPort %s"), tlsPort); + VIR_FREE(tlsPort); + goto error; + } + VIR_FREE(tlsPort); + } else { + def->data.spice.tlsPort = 0; + } + + def->data.spice.listenAddr = virXMLPropString(node, "listen"); + def->data.spice.passwd = virXMLPropString(node, "passwd"); + def->data.spice.keymap = virXMLPropString(node, "keymap"); } cleanup: @@ -4100,6 +4139,30 @@ virDomainGraphicsDefFormat(virConnectPtr conn, break; + case VIR_DOMAIN_GRAPHICS_TYPE_SPICE: + if (def->data.spice.port) + virBufferVSprintf(buf, " port='%d'", + def->data.spice.port); + + if (def->data.spice.tlsPort) + virBufferVSprintf(buf, " tlsPort='%d'", + def->data.spice.tlsPort); + + if (def->data.spice.listenAddr) + virBufferVSprintf(buf, " listen='%s'", + def->data.spice.listenAddr); + + if (def->data.spice.keymap) + virBufferEscapeString(buf, " keymap='%s'", + def->data.spice.keymap); + + if (def->data.spice.passwd && + (flags & VIR_DOMAIN_XML_SECURE)) + virBufferEscapeString(buf, " passwd='%s'", + def->data.spice.passwd); + + break; + } virBufferAddLit(buf, "/>\n"); diff --git a/src/conf/domain_conf.h b/src/conf/domain_conf.h index 7ea1152..4cb10d3 100644 --- a/src/conf/domain_conf.h +++ b/src/conf/domain_conf.h @@ -334,6 +334,7 @@ enum virDomainGraphicsType { VIR_DOMAIN_GRAPHICS_TYPE_VNC, VIR_DOMAIN_GRAPHICS_TYPE_RDP, VIR_DOMAIN_GRAPHICS_TYPE_DESKTOP, + VIR_DOMAIN_GRAPHICS_TYPE_SPICE, VIR_DOMAIN_GRAPHICS_TYPE_LAST, }; @@ -366,6 +367,13 @@ struct _virDomainGraphicsDef { char *display; int fullscreen : 1; } desktop; + struct { + int port; + int tlsPort; + char *listenAddr; + char *keymap; + char *passwd; + } spice; } data; }; diff --git a/src/qemu/qemu_conf.c b/src/qemu/qemu_conf.c index 7ba0ac2..ae171bc 100644 --- a/src/qemu/qemu_conf.c +++ b/src/qemu/qemu_conf.c @@ -2067,6 +2067,12 @@ int qemudBuildCommandLine(virConnectPtr conn, } } + if (def->ngraphics > 1) { + qemudReportError(conn, NULL, NULL, VIR_ERR_INTERNAL_ERROR, + "%s", _("only one graphics output is currently supported")); + goto error; + } + if ((def->ngraphics == 1) && def->graphics[0]->type == VIR_DOMAIN_GRAPHICS_TYPE_VNC) { virBuffer opt = VIR_BUFFER_INITIALIZER; @@ -2155,6 +2161,9 @@ int qemudBuildCommandLine(virConnectPtr conn, */ ADD_ENV_COPY("QEMU_AUDIO_DRV"); ADD_ENV_COPY("SDL_AUDIODRIVER"); + } else if (def->ngraphics) { + qemudReportError(conn, NULL, NULL, VIR_ERR_INTERNAL_ERROR, + "%s", _("unsupported graphics output requested")); } if (def->nvideos) { -- -- Name: Ben ------------------------------------------ Msn: liaosongwen(a)live.cn

1 0

[libvirt-users] libvirt and Bridging
by Face 20 Aug '10

20 Aug '10

Hello all, Basically my problem is how can i access a virtual machine from local network. I am able to do so from the host PC put not from other PC's on the same network. here is my what i did so far (http://wiki.libvirt.org/page/Networking#NAT_forwarding_.28aka_.22virtual_ne…) cat '/etc/libvirt/qemu/networks/default.xml' <network> <name>default</name> <uuid>1bad08f7-0bc3-bfde-f87d-f323ab1c95eb</uuid> <forward mode='nat'/> <bridge name='virbr0' stp='on' delay='0' /> <ip address='10.0.2.1' netmask='255.255.255.240'> <dhcp> <range start='10.0.2.2' end='10.0.2.14' /> </dhcp> </ip> </network> cat '/etc/sysctl.conf' # Disable packet forwarding #net.ipv4.ip_forward=0 net.ipv4.ip_forward=1 # disable netfilter on the bridge: net.bridge.bridge-nf-call-ip6tables = 0 net.bridge.bridge-nf-call-iptables = 0 net.bridge.bridge-nf-call-arptables = 0 ifconfig -a br0 Link encap:Ethernet HWaddr 00:1C:C0:38:AF:BA inet addr:10.0.1.5 Bcast:10.0.1.15 Mask:255.255.255.240 inet6 addr: fe80::21c:c0ff:fe38:afba/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:580 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:29435 (28.7 Kb) TX bytes:468 (468.0 b) eth0 Link encap:Ethernet HWaddr 00:C0:DF:13:AF:87 inet addr:10.0.1.4 Bcast:10.0.1.15 Mask:255.255.255.240 inet6 addr: fe80::2c0:dfff:fe13:af87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:476362 errors:0 dropped:0 overruns:0 frame:0 TX packets:684752 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:57147388 (54.4 Mb) TX bytes:707797829 (675.0 Mb) Interrupt:22 Base address:0x800 eth1 Link encap:Ethernet HWaddr 00:1C:C0:38:AF:BA inet6 addr: fe80::21c:c0ff:fe38:afba/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1142 errors:0 dropped:0 overruns:0 frame:0 TX packets:43 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:90530 (88.4 Kb) TX bytes:2632 (2.5 Kb) Memory:e3200000-e3220000 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:118356 errors:0 dropped:0 overruns:0 frame:0 TX packets:118356 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:14239239 (13.5 Mb) TX bytes:14239239 (13.5 Mb) virbr0 Link encap:Ethernet HWaddr FE:54:00:45:A7:31 inet addr:10.0.2.1 Bcast:10.0.2.15 Mask:255.255.255.240 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:180 errors:0 dropped:0 overruns:0 frame:0 TX packets:128 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:16657 (16.2 Kb) TX bytes:50599 (49.4 Kb) vnet0 Link encap:Ethernet HWaddr FE:54:00:45:A7:31 inet6 addr: fe80::fc54:ff:fe45:a731/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:14 errors:0 dropped:0 overruns:0 frame:0 TX packets:357 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:1404 (1.3 Kb) TX bytes:19248 (18.7 Kb) brctl show bridge name bridge id STP enabled interfaces br0 8000.001cc038afba no eth1 virbr0 8000.fe540045a731 yes vnet0 route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.0.1.0 0.0.0.0 255.255.255.240 U 0 0 0 eth0 10.0.1.0 0.0.0.0 255.255.255.240 U 0 0 0 br0 10.0.2.0 0.0.0.0 255.255.255.240 U 0 0 0 virbr0 0.0.0.0 10.0.1.1 0.0.0.0 UG 0 0 0 eth0 iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:bootps Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere 10.0.2.0/28 state RELATED,ESTABLISHED ACCEPT all -- 10.0.2.0/28 anywhere ACCEPT all -- anywhere anywhere REJECT all -- anywhere anywhere reject-with icmp-port-unreachable REJECT all -- anywhere anywhere reject-with icmp-port-unreachable ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-is-bridged ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere ACCEPT tcp -- anywhere 10.0.2.5 tcp dpt:smakynet ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere ACCEPT tcp -- anywhere 10.0.2.5 tcp dpt:smakynet ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere ACCEPT tcp -- anywhere 10.0.2.5 tcp dpt:smakynet Chain OUTPUT (policy ACCEPT) target prot opt source destination the IP Address for the virtual machine i am trying to access is 10.0.2.5 (vnet0). I am able only to access it from the host PC only, therefore, how i can i access it from other PC's on the network ? Any help would be much appreciated. -- Sincerely,

1 0

[libvirt-users] how to load different bios into qemu
by Martin Kraus 17 Aug '10

17 Aug '10

Hello. I'm using debian squeeze with libvirt and kvm and I need to load a newer version of seabios into qemu. I'd like to do it without overwriting seabios in the debian package because that might be overwritten on the next update. I hopend that the <loader> directive in the config would work but it doesn't. thanks for any ideas. mk

5 5

[libvirt-users] building libvirt-0.8.3 for windows ( with dlls )
by Gal Gafni 16 Aug '10

16 Aug '10

Hi, I'm trying to compile the latest libvirt (0.8.3 ) on windows and the configure fails to find XDR lib. I installed the xdr-4.0-mingw2 and configure complains the XDR library doesn't exist. Should I get another XDR lib? The command I run: $ ./configure --with-esx --without-sasl --without-avahi --without-polkit --without-python --without-xen --without-qemu --without-lxc --without-o penvz --without-libvirtd the last 10 lines of configure: checking for mntent.h... no checking net/ethernet.h usability... no checking net/ethernet.h presence... no checking for net/ethernet.h... no checking linux/magic.h usability... no checking linux/magic.h presence... no checking for linux/magic.h... no checking for xdrmem_create in -lportablexdr... no checking for library containing xdrmem_create... no configure: error: Cannot find a XDR library is there a a guide somewhere in the list for compiling the windows version on mingw? Thanks, Gal Gafni Chen CSL-WAVE Developer

2 1

[libvirt-users] F13-x86_64 - New version of qemu in raw virt repo breaks virsh and virt-manager?
by Mike Hinz 16 Aug '10

16 Aug '10

Without actually thoroughly thinking about it, I updated my system yesterday with the latest qemu-kvm. rpm -qa shows qemu-kvm-0.13.0-0.5.20100809git25fdf4a.fc13.x86_64 See also: virsh # version Compiled against library: libvir 0.8.2 Using library: libvir 0.8.2 Using API: QEMU 0.8.2 Running hypervisor: QEMU 0.13.50 Now when I attempt to start a domain that was working perfectly well prior to this update, I get the following: virsh # start winxp1 error: Failed to start domain winxp1 error: internal error Process exited while reading console log output: Supported machines are: pc Standard PC (alias of pc-0.13) pc-0.13 Standard PC (default) pc-0.12 Standard PC pc-0.11 Standard PC, qemu 0.11 pc-0.10 Standard PC, qemu 0.10 isapc ISA-only PC Virt-Manager throws the same error when attempt to start an existing domain. I'm assuming that there's now some sort of compatibility issue between the current versions of libvirt/virt-manager and qemu-kvm? Is there a way to get around this and somehow use my existing domains with this updated version of qemu-kvm? Interestingly, just out of curiosity, I've started a new installation of a WinXP vm. This seems to be going perfectly well so far, so I assume that the issue is only with domains previously created with the older version of qemu?? Any assistance in being able to run my existing domains would be greatly appreciated! -- Regards, Mike Hinz President YR20 1718 Fry Road Suite 440 Houston, TX 77084 mike.hinz(a)yr20.com 832-225-1293 (o) 713-594-3095 (m) 832-550-2657 (f)

2 2

[libvirt-users] cpuTimes and qemu-kvm on F13
by Matthew Farrellee 15 Aug '10

15 Aug '10

http://libvirt.org/html/libvirt-libvirt.html#virDomainInfo http://libvirt.org/html/libvirt-libvirt.html#virVcpuInfo Both virDomainInfo and virVcpuInfo have a nanosecond cpuTime field. How do the two related to one another? With some experiementing, it appears the virDomainInfo::cpuTime is equal to the host CPU time used by the qemu-kvm process for the domain. It also appears that the sum(virVcpuInfo::cpuTime) for a domain is not equal to the virDomainInfo::cpuTime. Is the virVcpuInfo::cpuTime how much host CPU time was spent simulating the vCPU? Making the difference between the sum and the virDomainInfo::cpuTime the overhead of qemu-kvm? Does the relationship hold for other hypervisors? Best, matt

2 1