- Users - libvirt List Archives

[libvirt-users] How allocate ip for guest in xml file
by llilulu 17 Apr '18

17 Apr '18

Hi: I encounter a promble when I use libvirt manager my virtual machine. I use dhcp allocate IP for my guest, but use dhcp manager IP source, I will ensure guest run NetworkManager auto start NIC in dhcp type get IP. But some release system no install NetworkManager, or some installed system no install NetworkManager, so when I manager those guest, I cann't allocate IP for guest via dhcp server. I want know has other way allocate ip for guest in guest xml file when create the guest, I search "libvirt domain xml format", I find use blow xml configuration in <interface/> <ip address='192.168.122.5' prefix='24'/> But I add this in my guest xml file, virsh create guest will report an error: "error: unsupported configuration: Invalid attempt to set network interface guest-side IP route and/or address info, not supported by QEMU" I want to know if I use dhcp allocate IP for guest, has some way auto start guest dhclinet when guest start(because NIC can hotplug, I cann't write NIC configure file for it). or I want configure IP for guest in guest xml file,How cant I do? my libvirt version is 3.4.0, qemu is 2.9.0. I compile libvirt and qemu myself, when compile its run ./configure script without specific args. If I want qemu or libvirt support configure IP in guest xml file, how I compile libvirt and qemu? Thanks.

2 1

[libvirt-users] Online Disk Resize with Windows Server 2016
by Andre Goree 12 Apr '18

12 Apr '18

I'm having an issue when resizing a disk (a Ceph RBD disk, though the type of disk shouldn't matter, I'd think) attached to a Windows Server 2016 guest. After I resize the disk, the newly-created disk space is _not_ recognized by the server. Even after running Action > Rescan from the Disk Management app, the new disk space does not show. However, when I perform the same resize on a Windows Server 2012 or even a Sever 2008 system, the Action > Rescan works fine and the newly-created disk space is recognized without needed to detach the drive or reboot the VM. Does anyone have an idea of what may have changed in Windows 2k16 that might be causing this? Possibly some undocumented registry change or something? -- Andre Goree -=-=-=-=-=- Email - andre at drenet.net Website - http://blog.drenet.net PGP key - http://www.drenet.net/pubkey.html -=-=-=-=-=-

1 0

[libvirt-users] kvm-vnc question
by 李卓瑶 12 Apr '18

12 Apr '18

hi: very glad writing to you,even though i don't confirm can hear from you. And my english is poor ,so.. I'm a developer on kvm from china, and i meet a question that "virsh define geneic.xml" in arm platform failded with unsupported configuration: PCI controller at index 1(0x01) has bus='0x01',but index must be larger than bus Because i add the vnc info in generic.xml. If i delete it ,virsh define would be ok. The issue only happened in arm platform. And nothing error in x86 platform. I think may be something error happened in pci.Right? I have tryed much ,but work out nothing.Could you give me a head! ----------------------- Have a good day

3 2

Re: [libvirt-users] Fail to compile libvirt with address sanitizer by clang-7
by Michal Privoznik 12 Apr '18

12 Apr '18

On 04/10/2018 05:22 AM, Han Han wrote: > Hi, > I tried to compile libvirt with address sanitizer( > https://github.com/google/sanitizers/wiki/AddressSanitizer) to discover > memory errors. But fails when make. > Code version: > $ git describe > v4.2.0-92-g3f204e4de > > Compile tools: > automake 1:1.15.1-3 all [installed] > clang-7 1:7~svn323616-1 amd64 [installed,automatic] > make 4.2.1-1 amd64 [installed,automatic] > > Compile steps: > $ ./bootstrap > $ CC=clang-7 CFLAGS="-g -O1 -fsanitize=address -fno-omit-frame-pointer > -Wno-error" LDFLAGS="-fsanitize=address" ./configure > > Configure succed. > $ make > But error appeared: > make all-am > make[3]: Entering directory '/home/hhan/Software/libvirt/src' > CCLD libvirt.la > ./.libs/libvirt_util.a(libvirt_util_la-viralloc.o): In function `virAlloc': > /home/hhan/Software/libvirt/src/util/viralloc.c:144: undefined reference to > `__asan_report_store8' Huh, I remember seeing different error when trying this (although I'm using gcc). However, I suspect '-Wl,-z -Wl,defs' arguments are problem. We add them onto linker cmd line. You can try applying this patch and see if it helps: diff --git i/configure.ac w/configure.ac index 18587270e6..e23c0e4c22 100644 --- i/configure.ac +++ w/configure.ac @@ -237,7 +237,6 @@ LIBVIRT_COMPILE_WARNINGS LIBVIRT_COMPILE_PIE LIBVIRT_LINKER_RELRO LIBVIRT_LINKER_NO_INDIRECT -LIBVIRT_LINKER_NO_UNDEFINED LIBVIRT_ARG_APPARMOR LIBVIRT_ARG_ATTR Michal

2 1

[libvirt-users] Disable guest discovery in virt-manager
by Gionatan Danti 11 Apr '18

11 Apr '18

Hi all, on CentOS7 / RHEL7 launching virt-manager causes a "discovery process" of the various configured VMs. This discovery is executed by inspection and overlayed disk files and it create a very short lived guest-xxxzzzyyy virtual machine. The end result is a pretty icon to the left of the virtual machine entry (ie: CentOS icon for a CentOS VM) and the list of installad packages inside the virtual disk. That said, I would like to disable such behavior. How can I do that? Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 2

[libvirt-users] start a domain, minimal memory request.
by llilulu 11 Apr '18

11 Apr '18

Hi: I use libvirt manage virtual guest, When I start many virtual domain(my host 128G physical memory）, example, I start 100 guest, 1G per guest。sometime I will encounter "cannot allocate memory", "cannot set up guest memory \'pc.ram\'： cannot allocate memory". sometime encounter qemu process killed by system(oom), I want to know what minimal memory need when start a domain ? and how many host free memory reserve can ensure vm running steady. Thanks

3 2

[libvirt-users] unprivileged container has wrong owners inside in /proc/ and /sys
by mxs kolo 10 Apr '18

10 Apr '18

We run unprivileged lxc containers (libvirt based) with next config: ... <idmap> <uid start='0' target='65535' count='65535'/> <gid start='0' target='65535' count='65535'/> </idmap> ... <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/var/lib/libvirt/lxc/test1'/> <target dir='/'/> </filesystem> ... </devices> Before start we need mount container's LVM: mount /dev/data/test1 /var/lib/libvirt/lxc/test1 And shift uid/gid: ./uidmapshift -b /var/lib/libvirt/lxc/test1 0 65535 65535 (uidmapshift.c is simple utility, found in LXD community) As result, our FS permissions look from hardware node as: [root(a)ops-node01.infra]# ls -la /var/lib/libvirt/lxc/test1/ total 8 dr-xr-xr-x 19 65535 65535 275 Apr 9 18:55 . drwxrwxrwx 3 root root 26 Apr 9 19:32 .. -rw-r--r-- 1 65535 65535 0 Mar 30 18:20 .autorelabel lrwxrwxrwx 1 65535 65535 7 Mar 2 2017 bin -> usr/bin dr-xr-xr-x 2 65535 65535 6 Nov 5 2016 boot drwxr-xr-x 4 65535 65535 206 Mar 30 18:03 dev drwxr-xr-x 59 65535 65535 4096 Apr 9 18:57 etc drwxr-xr-x 2 65535 65535 6 Nov 5 2016 home lrwxrwxrwx 1 65535 65535 7 Mar 2 2017 lib -> usr/lib lrwxrwxrwx 1 65535 65535 9 Mar 2 2017 lib64 -> usr/lib64 drwxr-xr-x 2 65535 65535 6 Nov 5 2016 media drwxr-xr-x 2 65535 65535 6 Nov 5 2016 mnt drwxr-xr-x 2 65535 65535 6 Apr 9 18:55 .oldroot drwxr-xr-x 3 65535 65535 24 Mar 2 2017 opt dr-xr-xr-x 2 65535 65535 6 Nov 5 2016 proc dr-xr-x--- 4 65535 65535 172 Apr 9 18:57 root drwxr-xr-x 13 65535 65535 178 Mar 30 18:03 run lrwxrwxrwx 1 65535 65535 8 Mar 2 2017 sbin -> usr/sbin drwxr-xr-x 2 65535 65535 21 Mar 30 18:03 selinux drwxr-xr-x 2 65535 65535 6 Nov 5 2016 srv dr-xr-xr-x 2 65535 65535 6 Nov 5 2016 sys drwxrwxrwt 7 65535 65535 93 Apr 6 21:08 tmp drwxr-xr-x 13 65535 65535 155 Mar 2 2017 usr drwxr-xr-x 18 65535 65535 254 Mar 30 18:20 var Container running, but some FS objects inside get owner 65534.65534: [root@test1 ~]# find / -uid 65534 -ls | wc -l 40084 It's mostly /sys and /proc objects: [root@test1 ~]# ls -la / total 8 dr-xr-xr-x 19 root root 275 Apr 9 18:55 . dr-xr-xr-x 19 root root 275 Apr 9 18:55 .. -rw-r--r-- 1 root root 0 Mar 30 18:20 .autorelabel drwxr-xr-x 2 root root 6 Apr 9 18:55 .oldroot lrwxrwxrwx 1 root root 7 Mar 2 2017 bin -> usr/bin dr-xr-xr-x 2 root root 6 Nov 5 2016 boot drwxr-xr-x 6 root root 440 Apr 9 20:40 dev drwxr-xr-x 59 root root 4096 Apr 9 18:57 etc drwxr-xr-x 2 root root 6 Nov 5 2016 home lrwxrwxrwx 1 root root 7 Mar 2 2017 lib -> usr/lib lrwxrwxrwx 1 root root 9 Mar 2 2017 lib64 -> usr/lib64 drwxr-xr-x 2 root root 6 Nov 5 2016 media drwxr-xr-x 2 root root 6 Nov 5 2016 mnt drwxr-xr-x 3 root root 24 Mar 2 2017 opt dr-xr-xr-x 348 65534 65534 0 Apr 9 20:40 proc dr-xr-x--- 4 root root 172 Apr 9 18:57 root drwxrwxrwt 15 root root 360 Apr 9 20:40 run lrwxrwxrwx 1 root root 8 Mar 2 2017 sbin -> usr/sbin drwxr-xr-x 2 root root 21 Mar 30 18:03 selinux drwxr-xr-x 2 root root 6 Nov 5 2016 srv dr-xr-xr-x 13 65534 65534 0 Apr 9 20:40 sys drwxrwxrwt 7 root root 93 Apr 6 21:08 tmp drwxr-xr-x 13 root root 155 Mar 2 2017 usr drwxr-xr-x 18 root root 254 Mar 30 18:20 var [root@test1 ~]# find /sys/ -uid 65534 -ls | wc -l 36871 [root@t1 ~]# find /proc -uid 65534 -ls | wc -l 3200 [root@test1 ~]# find /dev -uid 65534 -ls 2121875 0 drwxrwxrwt 2 65534 65534 40 Apr 10 13:57 /dev/mqueue It's feature ? Look like libvirt make all this objects from real root with owner root.root You can't call virLXCControllerSetupUserns() before make this objects, right ? Because you need root permissions for some operations. After you set uid range for process 65535-131070, we can't show object with uid.gid 0 and then kernel use values from /proc/sys/kernel/overflowuid and /proc/sys/kernel/overflowgid. It's can probably affect some process in container ? As solution is shift uid/gid _after_ make all objects and _before_ enter userNS ? As workaround we can try set 0 for overflowuid and overflowgid p.s. We use type='mount' instead type='block' because in unprivileged container mount() call failed, more detailes in https://bugzilla.redhat.com/show_bug.cgi?id=1328946 b.r. Maxim Kozin

1 0

[libvirt-users] nm-bridge & nm-team and no connection.
by lejeczek 09 Apr '18

09 Apr '18

hi guys I have a kvm quest & two nodes. a kvm guest on nodeA and IPaddr2 on nodeB(at this time) nodeA & nodeB comprise a HA cluster now... - nodeA can ping IPaddr2 IP - nodeB can ping kvm guest IP - kvm guest can get to nodeB's IP but* Only a bit non-common bit in my setup is: - both nodeA & nodeB be interfaces which are relevant to the subnet on which it operates are NetworkManger bridges put on top of NM team devices, like: ifaceSlaveA + ifaceSlaveB = teamInt = bridgeInt But maybe it's common, maybe many do that(?) And it seems that that "bridge ontop of nm-team" is doing something not... well, not doing something(?) *but - If I do not nmcli c d & nmcli c u on that nm-bridge before I start kvm guest then all nodes, except for the host to the guest, cannot get to kvm-guest's IP which is on the hosts' bridge network. I did that and then... I reboot kvm guest and.. again cannot ping between kvm guest and other nodes. bit tricky, how would you trouble shoot it? Where to start? many thanks, L.

1 0

[libvirt-users] Permissions and ownership on /dev/kvm keep reverting after starting a vm
by TomK 07 Apr '18

07 Apr '18

Hey guys, /dev/kvm permissions and ownership keeps reverting after starting a vm. The ownership and permissions keep going back to crw-rw—— root root .... After starting a vm. I have to revert the perms and ownership to: crw-crw-crw root kvm .... To start any vm but it goes back to the first set of permissions as soon as I start another vm. Wondering what could be doing this? Cheers, Tom Sent from my iPhone

1 0

[libvirt-users] error : virHashForEach:597 : Hash operation not allowed during iteration
by Vincent Bernat 06 Apr '18

06 Apr '18

Hey! On many of our servers, we often have the following error: error : virHashForEach:597 : Hash operation not allowed during iteration When querying the list of domains, this means libvirt will silently return 0 domain (most uses of virHashForEach don't handle the return code). We are using a hook, but the hook doesn't query libvirt back, so it should be safe from this point of view. However, we have several sources querying libvirt at regular interval (once every 5 seconds from two different sources). I am unable to reproduce the problem with just running "virsh list" in parallel. We are using libvirt 3.6. Is it an expected constraint to not be able to reliably query libvirt from several sources? Have fixes for this problem been pushed since 3.6? -- A kind of Batman of contemporary letters. -- Philip Larkin on Anthony Burgess

2 12