- Users - libvirt List Archives

[libvirt-users] How to tell spicy client to use SASL authentication?
by mordenkainen 14 Oct '16

14 Oct '16

I'm using libvirt in desktop environment. Single host machine, pair of users, a few guest machines. The first thought was that unix socket restricted to specific group is just enough for authentication. But virsh has the power like sudo: you could define pool on real device and write anything on it. So I decided to authenticate with password for each virsh use. I'm using SASL + saslauthd + PAM for that case. /etc/sasl2/libvirt.conf: mech_list: PLAIN pwcheck_method: saslauthd /etc/sasl2/qemu.conf: mech_list: PLAIN pwcheck_method: saslauthd /etc/pam.d/libvirt: auth requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group auth required pam_tally2.so onerr=succeed auth required pam_nologin.so auth required pam_unix.so try_first_pass likeauth nullok account requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group account required pam_nologin.so account required pam_unix.so /etc/pam.d/qemu: auth requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group auth required pam_tally2.so onerr=succeed auth required pam_nologin.so auth required pam_unix.so try_first_pass likeauth nullok account requisite pam_listfile.so item=group sense=allow file=/etc/libvirt/allow_group account required pam_nologin.so account required pam_unix.so They are two identical configs for libvirt and for qemu. The first works flawlessly. virsh prompts for user and password and then login me to the shell. But spicy fails. It prompts only for the password and fails after receiving it leaving error message in syslog: Oct 13 23:24:21 paladin spicy[9001]: GSSAPI client step 1 What are the supposed actions I should perform to get further debug informations?

1 0

[libvirt-users] Fwd: Problems connecting to the libvirtd server
by Stefano Ricci 13 Oct '16

13 Oct '16

---------- Forwarded message ---------- From: Stefano Ricci <sfn.rcc(a)gmail.com> Date: 2016-10-11 12:35 GMT+02:00 Subject: Re: [libvirt-users] Problems connecting to the libvirtd server To: Michal Privoznik <mprivozn(a)redhat.com> There is not AppArmor and SElinux is disabled. The permits of the sock are as follows: libvirt-sock-admin 0700 (rwx) root: root libvirt-sock 0700 (rwx) root: root libvirt-sock-ro 0777 (rwxrwxrwx) root: root The libvirtd process runs with the root user. Below you will find the link to the requested log: http://pastebin.com/0jtpWU0h (libvirt_client.log command LIBVIRT_DEBUG = 1 virsh -c qemu: /// system list --all) Stefano 2016-10-11 11:04 GMT+02:00 Michal Privoznik <mprivozn(a)redhat.com>: > > On 10.10.2016 18:36, Stefano Ricci wrote: > > Hello everyone > > I do not know if it is correct address this mailing lists but I can > > not use libvirt. > > I run compile libvirt version 2.2.0 into environment lfs stable with > > qemu 2.7.0 and have not had any problems. > > The program when it starts not report any errors in the log, with > > activated debug level file. > > Only when you try to connect with the following command virsh -c > > qemu:///system remains hung without reporting any error either in the > > logs that screen. > > The command virsh -c test:///default list instead concludes on a regular basis. > > I attach the file libvirt.log and libvirt.conf > > Interesting. Maybe something else is causing the problem? Is there an > AppArmor running? What are the socket perms? Can you attach client debug > logs? (well, maybe paste them somewhere to pastebin-like service) > > http://wiki.libvirt.org/page/DebugLogs > > Michal

2 7

[libvirt-users] problem with disk virtio driver
by Andrei Perietanu 13 Oct '16

13 Oct '16

I just ran into a problem I can't make heads or tails of, so I'm hoping to get some help here. I have a custom built Embedded Linux running qemu-kvm 1.1.2 and libvirt 1.2.20 I'm creating a domain with the following config: <domain type='kvm'> <name>myVM</name> <memory unit='KiB'>2097152</memory> <vcpu placement='static'>2</vcpu> <os> <type arch='x86_64'>hvm</type> <boot dev='hd'/> <boot dev='cdrom'/> </os> <features> <acpi/> <apic/> </features> <cpu mode='host-model'/> <clock offset='utc'> <timer name='rtc' tickpolicy='catchup'/> <timer name='pit' tickpolicy='delay'/> <timer name='hpet' present='no'/> </clock> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>restart</on_crash> <devices> <disk type='file' device='cdrom'> <driver name='qemu' type='raw'/> <target dev='hdb' bus='ide'/> <source file='custom.iso'/> <readonly/> </disk> <disk type='file' device='disk'> <driver name='qemu' type='qcow2'/> <source file='/path/to/vdisk.img'/> <target dev='vda' bus='virtio'/> </disk> <controller type='pci' model='pci-root'/> <controller type='usb'/> <controller type='ide'/> <interface type='bridge'> <source bridge='virbr0'/> <model type='virtio'/> </interface> <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> <input type='tablet' bus='usb'/> <input type='mouse' bus='ps2'/> <input type='keyboard' bus='ps2'/> <graphics type='vnc' port='-1' autoport='yes'/> <video> <model type='qxl' ram='65536' vram='65536' vgamem='16384' heads='1'/> </video> <watchdog model='i6300esb' action='reset'/> <memballoon model='none'/> </devices> </domain> Granted the OS I'm installing is again a custom Linux with some software running on top ..so It's not a well known OS...but I'm hoping that does not matter much. After installation I get all sorts of kernel panics and errors about services not being able to start. So I tried the same thing on ubuntu 14.04.2 LTS which installed qemu-kvm 2.0.0 and libvirt 1.2.2 Same config xml, but this time it worked better -I was not getting the kernel panics. The OS I'm installing does not support IDE disks, it needs a virtio disk. The obvious solution here would be to try and get a newer version of qemu, but since we're talking about a custom built Linux I'd have to add the package manually and compile from source...which cakes a long time to do. So before attempting that....just wondering....is there a better way? Anything I can try? Thanks, Andrei -- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you receive this in error please contact the sender and delete the material from any computer immediately. It is the policy of Klas Limited to disavow the sending of offensive material and should you consider that the material contained in the message is offensive you should contact the sender immediately and also your I.T. Manager. Klas Telecom Inc., a Virginia Corporation with offices at 1101 30th St. NW, Washington, DC 20007. Klas Limited (Company Number 163303) trading as Klas Telecom, an Irish Limited Liability Company, with its registered office at Fourth Floor, One Kilmainham Square, Inchicore Road, Kilmainham, Dublin 8, Ireland.

3 7

[libvirt-users] Libvirt adds extra parameters in domain XML
by Marina Danial 13 Oct '16

13 Oct '16

Hello, In my C++ code, I generate my own domain XML file and I use virDomainCreateXML or virDomainDefineXML to launch my qemu VM. However, when I get to check which commands are sent to the qemu commandline, I find that libvirt has added so many extra parameters to the ones I have already set. How can I prevent libvirt from adding any extra parameters to the ones I originally defined in the domain XML? Help will be highly appreciated. Thanks

2 1

[libvirt-users] domain schema fails to validate sysinfo element
by mordenkainen 13 Oct '16

13 Oct '16

I'm puzzled why virt-xml-checker rejects minimal config xml if it includes sysinfo element: <domain type='kvm'> <name>example</name> <sysinfo> </sysinfo> </domain> with the following error: Relax-NG validity error : Extra element sysinfo in interleave minimal.xml:3: element sysinfo: Relax-NG validity error : Element domain failed to validate content minimal.xml fails to validate I tried xmllint it gives the same output

2 1

[libvirt-users] Windows 7 guest not starting with HyperV features enabled
by Aleksei 11 Oct '16

11 Oct '16

Hi, I have a Windows 7 SP1 Pro 64-bit VM which works fine on libvirt 2.3.0 and Qemu 2.7.0. If I enable HyperV features (https://libvirt.org/formatdomain.html#elementsFeatures) like "relaxed", "spinlocks" etc - VM doesn't boot. "Starting Windows" text appears for ~2 seconds (no flying dots, no logo) and then it just goes to black screen. If I switch HyperV features back off, it boots normally again. Running VM with debuggging enabled (virsh --log win7_hyperv.log --debug 1 start win7) doesn't produce any errors in the log. There are no logs for that attempted boot in the guest either - apparently it doesn't get to the point when Windows starts logging. Attaching VM xml definition (with HyperV features enabled). -- /--Regards, Aleksei/

2 1

[libvirt-users] Problems connecting to the libvirtd server
by Stefano Ricci 11 Oct '16

11 Oct '16

Hello everyone I do not know if it is correct address this mailing lists but I can not use libvirt. I run compile libvirt version 2.2.0 into environment lfs stable with qemu 2.7.0 and have not had any problems. The program when it starts not report any errors in the log, with activated debug level file. Only when you try to connect with the following command virsh -c qemu:///system remains hung without reporting any error either in the logs that screen. The command virsh -c test:///default list instead concludes on a regular basis. I attach the file libvirt.log and libvirt.conf Thank you Stefano Ricci

2 1

[libvirt-users] Dealing with swappiness on host systems
by Dennis Jacobfeuerborn 10 Oct '16

10 Oct '16

Hi, I'm looking for a way to prevent qemu processes on a libvirt host to use swap unless there is no physical memory free but apparently this is not as easy as I'd hoped it would be. This is on a CentOS 7 system. At first I tried setting /proc/sys/vm/swappiness to 1 (apparently setting it to 0 now means even the OOM killer takes precedence over swapping: https://www.percona.com/blog/2014/04/28/oom-relation-vm-swappiness0-new-ker… ). After doing this I could still see the used swap increase for a guest even though there were 28G of memory used only as page-cache on the host. Taking another look at it I notices that swappiness can now apparently be controlled on a per-process basis as well by means of using the files under /sys/fs/cgroup/memory/machine.slice however I found no good documentation describing which of the values takes precedence and whether these values can be modified on the fly the same way the files under /proc can. Has anyone pointers to documentation that explains how all of this works? More specifically: Which of these paths take precedence for a running process: /proc/sys/vm/swappiness /sys/fs/cgroup/memory/machine.slice/memory.swappiness /sys/fs/cgroup/memory/machine.slice/<guest-id>/memory.swappiness Can any/all of these values be modified on the fly and if not is there another way to tell qemu to prefer physical memory to swap and only use swap when no physical memory is available? Regards, Dennis

1 0

[libvirt-users] Permission denied for volume create in raw format
by Maciej Nabożny 07 Oct '16

07 Oct '16

Hi, I'm facing similar problem to described here: https://www.redhat.com/archives/libvirt-users/2016-February/msg00033.html I got Libvirt pool mounted over netfs and I'm trying to create new volume, with pool.createXML. When format is qcow2, everything works fine. Unfortunately, for raw images libvirt raises error Permission denied. Whole pool is owned by root. Libvirt starts as root user too. I've tried to change pool's permissions to 777 on filesystem, but i get the same error, only for RAW images. Volume's xml looks like: <volume> <name>{{user.id}}_{{image.id}}</name> <source> </source> <capacity unit='bytes'>{{image.size}}</capacity> <target> <format type='{{ image.format }}'/> <permissions> <mode>660</mode> </permissions> </target> </volume> I've tried to create it without defining permissions, but it's the same. Problem exists in Ubuntu Server 16.04 (libvirt from repo) and Raspbian (libvirt in version 1.2.9). Do you know if it is possible solve this problem with this version of libvirt? -- Maciej Nabożny cloudover.io

2 2

[libvirt-users] Differentiating Disk access from different VMs
by Affan Syed 05 Oct '16

05 Oct '16

All, I have a specific use case where I want to be ale look at vfs or blk_io requests on the host machine and differentiate which VMs the access is originating from. I am assuming a Disk backend, and looking for virsh command or libvirt API that can help me do so. I have tried quite a bit to Google-fu this problem; no such luck. Would love to know if there is some cute trick to do so. Thanks. Affan

2 1