- Users - libvirt List Archives

[libvirt-users] kvm domain won't start with vhost-net loaded
by Raphael Bauduin 02 Jun '14

02 Jun '14

Hi, I have multiple kvm domains running fine, but to improve network performance, I wanted to try vhost-net. However, once I load the module: modprobe vhost-net I can't start the domain anymore: virsh start kvmGitInt gives the error: internal error: process exited while connecting to monitor: qemu-system-x86_64: -netdev tap,fd=25,id=hostnet0,vhost=on,vhostfd=26: vhost-net requested but could not be initialized qemu-system-x86_64: -netdev tap,fd=25,id=hostnet0,vhost=on,vhostfd=26: Device 'tap' could not be initialized This is a 3.14.4 kernel, with libvirt 1.2.1 and qemu 1.7.0. I have searched online but haven't found any indication on how to solve it in my case (The kernel is not selinux enabled,not using systemd, ...) Any suggestion on how to solve this is very welcome! Thanks in advance Raph

1 0

[libvirt-users] Libvrt Migrate an Offline VM
by Sijo Jose 30 May '14

30 May '14

Hi, Is it possible to migrate an Offline VM using libvirt API ? Regards Sijo Jose

3 2

[libvirt-users] Host OS, Storage Info
by Sijo Jose 30 May '14

30 May '14

Hi, Is there any way to get host OS information and host Storage in formations using libvirt API...? Rgds -Sijo

3 6

[libvirt-users] More than one certificate authority
by Емил Гелев 30 May '14

30 May '14

Hello. I have a question about libvirt remote access. I read carefully how to set up TLS authorization guide and I have done all the steps. Everything works, but for my virtualization infrastructure I need more flexibility. How can I configure a single host to trust more than one certificate authority. Lets say, for example, that I have 10 virtualization hosts and each of them has certificates signed by the same CA (lets say CA1) and they trust each other. But I have a client which does not have a client certificate signed by CA1, but has a certificate signed by CA2. I do not want my virtualization hosts to trust the CA2 except for just one of them. I want to provide this client with authorized access to one of my hosts. So this specific host must trust CA1 and CA2 as well, but in the '/etc/libvirt/libvirtd.conf' file I can point the certificate of only one CA. How can I set up such a configuration ? The same question is valid for the client. How can I configure a client to trust CA1 and CA2 ?

1 0

[libvirt-users] Hot memory and cpu update
by usha.basavaraju＠fluentsoft.com 30 May '14

30 May '14

Runing domain xml vv.XMLDesc(0) n ub_test1n 714dde02-76c9-7d45-25af-e50f0a54f4bcn 545792n 545792n 4n n hvmn n n n n n n destroyn restartn destroyn n /usr/bin/kvmn n n n n n n n n n n n n n n n n n n n n n n n n n n n n nn" >>> vv.info() [1, 545792L, 545792L, 1, 6320000000L] 1. >>> vv.setMemoryFlags(545794) libvir: QEMU Driver error : invalid argument: cannot set memory higher than max memory Traceback (most recent call last): File "", line 1, in File "/home/fluent/cvt/convirt-enterprise/tg2env/local/lib/python2.7/site-packages/libvirt.py", line 1781, in setMemoryFlags if ret == -1: raise libvirtError ('virDomainSetMemoryFlags() failed', dom=self) libvirt.libvirtError: invalid argument: cannot set memory higher than max memory >>> vv.setMemoryFlags(545790) 0 >>> vv.info() [1, 545792L, 545792L, 1, 6480000000L] >>> vv.setMemoryFlags(545788) 0 >>> vv.info() [1, 545792L, 545792L, 1, 6480000000L] If increase memory giving the above. if decreased memory it is running the command successfully but not changing the value 2.Vcpu update >>> vv.setVcpusFlags(2) libvir: QEMU Driver error : internal error got wrong number of vCPU pids from QEMU monitor. got 4, wanted 2 Traceback (most recent call last): File "", line 1, in File "/home/fluent/cvt/convirt-enterprise/tg2env/local/lib/python2.7/site-packages/libvirt.py", line 1884, in setVcpusFlags if ret == -1: raise libvirtError ('virDomainSetVcpusFlags() failed', dom=self) libvirt.libvirtError: internal error got wrong number of vCPU pids from QEMU monitor. got 4, wanted 2 >>> vv.setVcpusFlags(5) libvir: QEMU Driver error : invalid argument: requested vcpus is greater than max allowable vcpus for the domain: 5 > 4 Traceback (most recent call last): File "", line 1, in File "/home/fluent/cvt/convirt-enterprise/tg2env/local/lib/python2.7/site-packages/libvirt.py", line 1884, in setVcpusFlags if ret == -1: raise libvirtError ('virDomainSetVcpusFlags() failed', dom=self) libvirt.libvirtError: invalid argument: requested vcpus is greater than max allowable vcpus for the domain: 5 > 4 Cant increase or decrease vcpu. ------------------------- Message sent via Atmail Open - http://atmail.org/

1 0

[libvirt-users] nwfilter usage
by Matt LaPlante 28 May '14

28 May '14

I'm trying to accomplish what I had hoped would be a fairly simple filtering of traffic to my VMs, but I'm hitting a snag. The VMs are allowing traffic when I wouldn't expect them to. Host and Guest are both running the same platform: Ubuntu 12.04.4 LTS 0.9.8-2ubuntu17.19 I have a basic bridge enabled on the host: brctl addbr brdg brctl addif brdg eth1 ip link set brdg up The host has iptables support: root@host:~# lsmod | grep filt ip6table_filter 12815 0 ip6_tables 27864 2 ip6table_filter,xt_TPROXY iptable_filter 12810 1 ip_tables 27473 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter x_tables 29891 52 ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AUDIT,ipt_LOG,xt_tcpudp,xt_state,iptable_nat,iptable_mangle,iptable_filter,ip_tables Guest network using bridge: <interface type='bridge'> <mac address='00:11:22:33:44:55'/> <source bridge='brdg'/> <model type='virtio'/> <filterref filter='outbound-only'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <filter name='outbound-only' chain='root'> <uuid>0c834381-402c-faf3-019f-eb5a40ea6b61</uuid> <filterref filter='allow-arp'/> <filterref filter='allow-dhcp'/> <filterref filter='qemu-announce-self'/> <filterref filter='no-other-l2-traffic'/> </filter> My goal is to allow the guest to reach the internet, but not allow the internet or other guests to reach this guest. I realize this config is not sufficient for that, but I can't get any farther until I understand the current behavior. From the look of the config, this should essentially not be allowing anything except arp and dhcp. And yet, the host has full connectivity. I can run apt-get update on the VM, I can ping the VM from other nodes in my network, etc. It's basically wide-open. So either one of the included rules is not working as advertised, or I'm misunderstanding some feature of the filtering process. Any pointers would be appreciated. Thanks

4 5

[libvirt-users] vnet device not appearing
by Liam MacKenzie 28 May '14

28 May '14

Hello I have a virtual server with 3 existing VMs running on it without issue. The host has 4 NICs installed; em1 for the host, em2 and em3 already in use by other VMs. I would like to dedicate em4 to my new VM however when I create the bridge like I did for the others I do not get a vnet3 device show up in the list as shown below. I tried using the GUI and virsh to create the bridge. I ended up with this config: [root@cbcvm network-scripts]# cat ifcfg-em4 DEVICE=em4 HWADDR=d4:ae:52:a1:53:a7 ONBOOT=yes BRIDGE=www_br0 [root@cbcvm network-scripts]# cat ifcfg-www_br0 DEVICE=www_br0 ONBOOT=yes TYPE=Bridge STP=on DELAY=0 [root@cbcvm network-scripts]# virsh iface-list Name State MAC Address -------------------------------------------- em1 active d4:ae:52:a1:53:a4 lo active 00:00:00:00:00:00 mon_br0 active d4:ae:52:a1:53:a6 sbs_br0 active d4:ae:52:a1:53:a5 www_br0 active d4:ae:52:a1:53:a7 How to I make the expected vnet3 device become available to my VM? Thanks! [image: Inline image 1] sdds

2 1

[libvirt-users] problem with bond/team network interfaces
by Nerijus Baliunas 28 May '14

28 May '14

Hello, I have VM attached to bridge br0. VM can see the network (ping works) when the bridge has ethernet interfaces. But when I create bond or team device and attach it to a bridge instead of eth interface, VM does not ping anymore. Any ideas why? Thanks, Nerijus

2 1

[libvirt-users] How to build and install python-libvirt
by Qiang Guan 28 May '14

28 May '14

ubuntu@host-192-168-0-7:~/github$ git clone git://libvirt.org/libvirt-python.git ubuntu@host-192-168-0-7:~/github$ cd libvirt-python/ ubuntu@host-192-168-0-7:~/github/libvirt-python$ python setup.py build Package libvirt was not found in the pkg-config search path. Perhaps you should add the directory containing `libvirt.pc' to the PKG_CONFIG_PATH environment variable No package 'libvirt' found Package libvirt was not found in the pkg-config search path. Perhaps you should add the directory containing `libvirt.pc' to the PKG_CONFIG_PATH environment variable No package 'libvirt' found running build /usr/bin/pkg-config --print-errors --atleast-version=0.9.11 libvirt Package libvirt was not found in the pkg-config search path. Perhaps you should add the directory containing `libvirt.pc' to the PKG_CONFIG_PATH environment variable No package 'libvirt' found error: command '/usr/bin/pkg-config' failed with exit status 1 What's the problem? -- ------------ Jackie Best Regards

2 2

[libvirt-users] How to open virtual machine console using python libvirt.
by deepak＠fluentsoft.com 26 May '14

26 May '14

Hi, How to open virtual machine console using python libvirt. I tried openConsole function,it returning integer 0 and not opening any console. code ==== import libvirt conn = libvirt.open('qemu+ssh://root@192.168.1.6/system') vm=conn.lookupByName("vm1-1") stream=onn.newStream(libvirt.VIR_STREAM_NONBLOCK) vm.openConsole(None,stream, 0) Regards, Deepak S ------------------------- Message sent via Atmail Open - http://atmail.org/

1 0