- Users - libvirt List Archives

[libvirt-users] virt-login-shell: Security model none cannot be entered
by james＠lottspot.com 13 Jul '16

13 Jul '16

Hello! I am currently experimenting a bit with some of the LXC support under libvirt, and in trying to utilize the tool virt-login-shell, I encounter the following error: [james@lxchost ~]$ virt-login-shell libvirt: error : argument unsupported: Security model none cannot be entered Though it should be apparent from the lack of error, the domain is most definitely running. [root@lxchost ~]# virsh -c lxc:/// list Id Name State ---------------------------------------------------- 4909 james running Config information: [root@lxchost ~]# grep -vE '^(#|$)' /etc/libvirt/virt-login-shell.conf allowed_users = [ "*" ] OS information: [root@lxchost ~]# cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" Am I simply missing something here? Any tips or pointers are greatly appreciated!

3 2

[libvirt-users] nested vms and nested macvtaps
by jsl6uy js16uy 12 Jul '16

12 Jul '16

Hello all, hope all is well this maybe outside of libvirt-users.... Can you nest macvtap devices to ultimately receive a real routable ip on the nested vm? I have a nested vm up and running. Both vm and nested vm are centos 7 on arch linux host. The first vm uses a macvtap in bridge mode receives dhcp from an external dhcp server. I start the second vm and dhclient hangs and never receives an offer. I stood up a static interface on the nested vm. If I initiate a ping from within the nested vm, I can see via tcpdump that the echo request is seen on the non-nested vm and the hosting server. The reply comes back and stops/is answered on the hosting OS interface. rp_filter is off. No firewall rules in play blocking dhcp or icmp Any/all help appreciated thanks very much

2 5

[libvirt-users] lxc containers won't start in a f24 custom install - odd cgroup fs layout observed
by Thierry Parmentelat 10 Jul '16

10 Jul '16

Hi folks I use libvirt to programmatically spawn lxc containers I am facing an issue when migrating from fedora23 to fedora24 I use the stock kernel and libvirt version on both deployments, i.e.: f23: libvirt-1.2.18.3-2.fc23.x86_64 - kernel 4.5.7-202.fc23.x86_64 f24: libvirt-1.3.3.1-4.fc24.x86_64 - kernel 4.6.3-300.fc24.x86_64 First off, I need to outline that the host installation is done through some ad hoc procedure, as all this happens in the context of the centrally-managed PlanetLab global infrastructure I could not reproduce this problem on a host that is installed with the standard fedora install However I could use any clue that would point at a possible reason for this IMHO odd behaviour from libvirt, so that I can narrow down the potential flaws in my host installation procedure At first sight, it looks like the f24 deployment uses a different cgroup fs layout - see below and I suspect this could be the problem, but I am not aware of anything in my install. procedure that could cause that change, and as per this document https://libvirt.org/cgroups.html#systemdScope this change in the naming scheme looks odd - unless the doc is out of date of course So again, any clue is most welcome; many thanks in advance -- Thierry ------ All is fine with f23/libvirt-1.2.18.3-2.fc23.x86_64 However with f24/libvirt-1.3.3.1-4.fc24.x86_64 my lxc containers won't start and I am seeing this message in the libvirtd logfile 2016-07-09 11:52:33.416+0000: 3479: debug : virCgroupValidateMachineGroup:317 : Name 'lxc-3555-inrisl1.libvirt-lxc' for controller 'cpu' does not match 'inri_sl1', 'lxc-3555-inrisl1', 'inri_sl1.libvirt-lxc', '\ machine-lxc\x2dinri_sl1.scope' or 'machine-lxc\x2d3555\x2dinrisl1.scope' 2016-07-09 11:52:33.416+0000: 3479: debug : virCgroupNewDetectMachine:1501 : Failed to validate machine name for 'inri_sl1' driver 'lxc' 2016-07-09 11:52:33.416+0000: 3479: error : virLXCProcessStart:1501 : internal error: No valid cgroup for machine inri_sl1 At first it looked like the issue could be linked to the domain name having an underscore (example below uses inri_sl1 as a domain name) But trying with a regular name 'plain' without an underscore exhibits a similar issue ------------------------- Here's the set of files under /sys/fs/cgroup/memory that contains 'inri' in their name (other susbsytems have similar naming schemes in both cases) ========= f23 / libvirt-1.2.18.3-2.fc23.x86_64 (works fine) [root@vnode06 log]# cat /etc/fedora-release Fedora release 23 (Twenty Three) [root@vnode06 log]# uname -r 4.5.7-202.fc23.x86_64 [root@vnode06 log]# rpm -q libvirt libvirt-1.2.18.3-2.fc23.x86_64 [root@vnode06 log]# find /sys/fs/cgroup/memory/ -name '*inri*' /sys/fs/cgroup/memory/machine.slice/machine-lxc\x2dinri_sl1.scope ========= f24 / libvirt-1.3.3.1-4.fc24.x86_64 (container won't start) [root@vnode05 libvirt]# cat /etc/fedora-release Fedora release 24 (Twenty Four) [root@vnode05 libvirt]# uname -r 4.6.3-300.fc24.x86_64 [root@vnode05 libvirt]# rpm -q libvirt libvirt-1.3.3.1-4.fc24.x86_64 [root@vnode05 libvirt]# find /sys/fs/cgroup/memory/ -name '*inri*' /sys/fs/cgroup/memory/machine/lxc-3237-inrisl1.libvirt-lxc /sys/fs/cgroup/memory/machine/lxc-3555-inrisl1.libvirt-lxc /sys/fs/cgroup/memory/machine/lxc-2989-inrisl1.libvirt-lxc

1 1

[libvirt-users] vfio driver using libvirt
by abhishek jain 07 Jul '16

07 Jul '16

Hi Team I need to run vfio driver using qemu and I'm using below xml file for this.. <domain type='kvm' xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'> <name>instance</name> <memory unit='KiB'>4194304</memory> <currentMemory unit='KiB'>4194304</currentMemory> <vcpu placement='static'>8</vcpu> <os> <type arch='aarch64' machine='virt'>hvm</type> <kernel>/home/root/Image</kernel> <initrd>/home/root/fsl-image-minimal-ls2085ardb.ext2.gz</initrd> <cmdline>'root=/dev/ram0 rw console=ttyAMA0,115200 rootwait earlyprintk ramdisk_size=1000000'</cmdline> </os> <cpu mode='custom' match='exact'> <model fallback='allow'>host</model> </cpu> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/bin/qemu-system-aarch64</emulator> <memballoon model='none'/> </devices> <qemu:commandline> <qemu:arg value='-mem-path'/> <qemu:arg value='/hugepages'/> <qemu:arg value='-device'/> <qemu:arg value='vfio-fsl-mc,host=dprc.2'/> </qemu:commandline> </domain> I'm able to launch VM succesfully using the above xml file and it produces the below process running in the background.. *ps -ef | grep qemu* root 6767 1 34 22:11 ? 00:00:02 /usr/bin/qemu-system-aarch64 -name instance -S -machine virt,accel=kvm,usb=off -cpu host -m 4096 -realtime mlock=off -smp 8,sockets=8,cores=1,threads=1 -uuid 3b527012-c15d-46b3-862d-9a7fd3b04e01 -nographic -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/instance.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -boot strict=on -kernel /home/root/Image -initrd /home/root/fsl-image-minimal-ls2085ardb.ext2.gz -append 'root=/dev/ram0 rw console=ttyAMA0,115200 rootwait earlyprintk ramdisk_size=1000000' -usb -mem-path /hugepages *-device vfio-fsl-mc,host=dprc.2* -msg timestamp=on Although the driver appears in the above process,actually that driver is not loaded as there is no output of cat /proc/interrupts | grep dpio on the host. However when I'm using the same command as that of the above process i.e .. /usr/bin/qemu-system-aarch64 -name instance -S -machine virt,accel=kvm,usb=off -cpu host -m 4096 -realtime mlock=off -smp 8,sockets=8,cores=1,threads=1 -uuid 3b527012-c15d-46b3-862d-9a7fd3b04e01 -nographic -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/instance.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -boot strict=on -kernel /home/root/Image -initrd /home/root/fsl-image-minimal-ls2085ardb.ext2.gz -append 'root=/dev/ram0 rw console=ttyAMA0,115200 rootwait earlyprintk ramdisk_size=1000000' -usb -mem-path /hugepages *-device vfio-fsl-mc,host=dprc.2* -msg timestamp=on the driver is getting loaded and I'm able to see the output of cat /proc/interrupts | grep dpio on the host. Please help me regarding this. Thanks Abhishek Jain

1 0

[libvirt-users] Permanently change default virsh editor
by J Travis Lindsey 07 Jul '16

07 Jul '16

Hello, I found in the docs that I can change the editor I use on a per vm bases with the following: *EDITOR=$your-favorite-editor virsh edit $your-vm-name* But how do I change it permanently so when I run: *virsh edit $your-vm-name* It defaults to my favorite editor (vim)? Ref: http://wiki.libvirt.org/page/FAQ

4 4

[libvirt-users] Backups failing due to snapshot already exists
by Phill Edwards 06 Jul '16

06 Jul '16

My VMs are raw disk images as logical volumes. My backup script takes a snapshot of a VM's volume, copies it off to another machine and then deletes the snapshot. For some reason I have a snapshot that didn't delete which is now preventing the backups from proceeding: ... Friday 1 July 02:10:01 AEST 2016: Taking snapshot of /dev/vms-lvm/MBE3-MythUbu-14.04-64bit.raw... ERR: The specified snapshot volume /dev/vms-lvm/MBE3-MythUbu-14.04-64bit.snap already exists. Operation canceled. ... But if I try to remove the snapshot volume I get an error that it's in use: $ sudo lvremove /dev/vms-lvm/MBE3-MythUbu-14.04-64bit.snap Logical volume vms-lvm/MBE3-MythUbu-14.04-64bit.snap in use. Can anyone please advise on how I find out what's using the snapshot, then kill that process so I can remove the snapshot so my backups can work again?

1 0

[libvirt-users] Virtual machine in state "in shutdown"
by Roland Everaert 06 Jul '16

06 Jul '16

Hello, We are currently facing a strange situation. One of our VM is shown by 'virsh list' as in state "in shutdown" but there is no more a qemu-kvm process linked to it. So we have a few questions: 1. What does means the state in shutdown (I have not found much information about it)? 2. How to cleanly "shutdown" the vm, or more correctly, clean the status in virsh/libvirt? Regards, Roland Everaert.

2 4

[libvirt-users] Problem in bridged networking
by Aditya Gupta 06 Jul '16

06 Jul '16

Hello, I am facing some problems in bridged networking. I have successfully created a bridge br0 and added a virtual machine to it. Now the address of virtual machine is 10.1.3.31. I am able to connect to this virtual machine by another computer on same network. The virtual machine is hosting a simple python http server on port 8000, while some other service is running on port 80 When I try his on my main server : # curl 10.1.3.31:80 Response I get is this : * Rebuilt URL to: 10.1.3.31:80/ * Hostname was NOT found in DNS cache * Trying 10.1.3.31... * Connected to 10.1.3.31 (10.1.3.31) port 80 (#0) > GET / HTTP/1.1 > User-Agent: curl/7.35.0 > Host: 10.1.3.31 > Accept: */* > * Recv failure: Connection reset by peer * Closing connection 0 curl: (56) Recv failure: Connection reset by peer But when I try this on any other port # curl 10.1.3.31:8000 Response I get is this: * Rebuilt URL to: 10.1.3.31:8000/ * Hostname was NOT found in DNS cache * Trying 10.1.3.31... * connect to 10.1.3.31 port 8000 failed: Connection timed out * Failed to connect to 10.1.3.31 port 8000: Connection timed out * Closing connection 0 curl: (7) Failed to connect to 10.1.3.31 port 8000: Connection timed out Output of iptables -L: Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:8000 ACCEPT tcp -- anywhere anywhere tcp dpt:1022 Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere 10.0.0.0/16 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere 10.0.2.4 tcp dpt:http-alt ACCEPT tcp -- anywhere 10.0.2.4 tcp dpt:1883 ACCEPT tcp -- anywhere 10.0.2.4 tcp dpt:1883 TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU Chain OUTPUT (policy ACCEPT) target prot opt source destination Output of ifconfig: br0 Link encap:Ethernet HWaddr 00:1a:64:c1:31:2e inet addr:10.1.3.33 Bcast:10.1.3.255 Mask:255.255.255.0 inet6 addr: fe80::21a:64ff:fec1:312e/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1578351 errors:0 dropped:15619 overruns:0 frame:0 TX packets:1327458 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:198829729 (198.8 MB) TX bytes:346380435 (346.3 MB) eth1 Link encap:Ethernet HWaddr 00:1a:64:c1:31:2e UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7429105 errors:0 dropped:31238 overruns:0 frame:0 TX packets:7684361 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:782334104 (782.3 MB) TX bytes:2221485458 (2.2 GB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:87278 errors:0 dropped:0 overruns:0 frame:0 TX packets:87278 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:12350508 (12.3 MB) TX bytes:12350508 (12.3 MB) vnet0 Link encap:Ethernet HWaddr fe:54:00:14:0e:98 inet6 addr: fe80::fc54:ff:fe14:e98/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:6411332 errors:0 dropped:0 overruns:0 frame:0 TX packets:6277721 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:1909595770 (1.9 GB) TX bytes:656284846 (656.2 MB) Output of cat /etc/network/interfaces : auto lo iface lo inet loopback auto eth1 iface eth1 inet static address 10.1.3.33 netmask 255.255.255.0 gateway 10.1.3.1 dns-nameservers 192.168.2.11 192.168.2.12 auto br0 iface br0 inet static address 10.1.3.33 netmask 255.255.255.0 gateway 10.1.3.1 dns-nameservers 192.168.2.11 192.168.2.12 bridge_ports eth1 bridge_stp off bridge_maxwait 5 dns-nameservers 192.168.2.11 192.168.2.12

2 1

[libvirt-users] virsh channel
by Tadas 04 Jul '16

04 Jul '16

Hello, Is there any command to list all available channels for specific machine? For example, i have a additional spice serial device: <channel type='unix'> <source mode='bind'/> <target type='virtio' name='com.redhat.kvm-vdi.0'/> <address type='virtio-serial' controller='0' bus='0' port='2'/> </channel> Is there any way to get full path to this socket on hypervisor side?

3 4

[libvirt-users] problem with dnsmasq and dhclient - loosing IP address after a while
by Patrick Pichon 01 Jul '16

01 Jul '16

Hello, I have a problem which is that some of my VMs are loosing there IP addresses from time to time. What I saw in the log is when this VM loose its IP address there are DHCPREQUEST send from the VM by dhclient and the server responded only 50 minutes later ! Any help, advise on how to debug would be welcome. Thanks in advance Patrick Here after is an extract from the log July 1st 2016, 05:08:46.156 zen.pipiche.net <http://zen.pipiche.net/> dnsmasq-dhcp DHCPREQUEST(virbr1) 10.10.0.10 52:54:10:7d:3a:3f 10.10.0.10 July 1st 2016, 05:08:46.156 zen.pipiche.net <http://zen.pipiche.net/> dnsmasq-dhcp DHCPACK(virbr1) 10.10.0.10 52:54:10:7d:3a:3f mail 10.10.0.10 July 1st 2016, 05:08:32.003 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:08:18.274 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:08:03.793 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:07:54.504 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:07:40.642 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:07:22.978 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:07:04.180 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:06:45.233 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:06:30.417 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:06:15.304 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:06:02.203 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:05:55.780 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:05:38.227 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:05:27.970 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:05:15.183 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:05:04.425 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:04:56.008 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:04:39.227 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:04:24.531 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:04:10.306 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:03:56.149 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:03:45.917 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:03:34.480 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:03:24.189 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:03:07.038 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:02:51.557 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:02:40.088 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:02:29.963 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:02:11.446 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:01:53.245 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:01:32.646 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:01:23.725 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:01:12.691 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:00:53.537 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:00:32.797 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:00:18.520 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 05:00:11.831 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:59:53.649 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:59:45.510 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:59:38.236 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:59:18.089 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:58:59.930 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:58:52.521 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:58:37.193 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:58:18.742 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:58:05.088 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:57:53.879 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:57:36.308 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:57:16.716 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:57:07.594 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:56:54.607 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:56:34.286 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:56:24.307 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:56:10.593 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:55:56.460 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:55:37.165 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:55:28.171 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:55:18.719 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:55:01.360 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:54:44.150 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:54:37.490 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:54:26.746 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:54:12.103 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:53:54.381 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:53:42.322 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:53:30.937 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:53:14.144 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:52:55.999 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:52:47.948 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:52:39.143 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:52:28.188 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:52:07.857 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:51:53.381 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:51:39.750 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:51:27.260 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:51:06.864 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:50:53.216 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:50:36.366 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:50:27.696 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:50:07.898 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:49:46.721 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:49:37.941 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:49:27.940 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:49:17.156 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:18:02.398 mail.pipiche.net <http://mail.pipiche.net/> dhclient bound to 10.10.0.10 -- renewal in 1614 seconds. 10.10.0.10 July 1st 2016, 04:18:02.260 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPACK from 10.10.0.1 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 04:18:02.260 zen.pipiche.net <http://zen.pipiche.net/> dnsmasq-dhcp DHCPACK(virbr1) 10.10.0.10 52:54:10:7d:3a:3f mail 10.10.0.10 July 1st 2016, 03:55:03.644 mail.pipiche.net <http://mail.pipiche.net/> dhclient bound to 10.10.0.10 -- renewal in 1379 seconds. 10.10.0.10 July 1st 2016, 03:55:02.777 zen.pipiche.net <http://zen.pipiche.net/> dnsmasq-dhcp DHCPREQUEST(virbr1) 10.10.0.10 52:54:10:7d:3a:3f 10.10.0.10 July 1st 2016, 03:55:02.777 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPACK from 10.10.0.1 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 03:55:02.777 zen.pipiche.net <http://zen.pipiche.net/> dnsmasq-dhcp DHCPACK(virbr1) 10.10.0.10 52:54:10:7d:3a:3f mail 10.10.0.10 July 1st 2016, 03:55:02.776 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 03:31:20.065 mail.pipiche.net <http://mail.pipiche.net/> dhclient bound to 10.10.0.10 -- renewal in 1422 seconds. 10.10.0.10 July 1st 2016, 03:31:16.303 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPACK from 10.10.0.1 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 03:31:16.225 zen.pipiche.net <http://zen.pipiche.net/> dnsmasq-dhcp DHCPREQUEST(virbr1) 10.10.0.10 52:54:10:7d:3a:3f 10.10.0.10 July 1st 2016, 03:31:16.225 mail.pipiche.net <http://mail.pipiche.net/> dhclient DHCPREQUEST on eth0 to 10.10.0.1 port 67 (xid=0x3d60085a) 10.10.0.1 July 1st 2016, 03:31:16.225 zen.pipiche.net <http://zen.pipiche.net/> dnsmasq-dhcp DHCPACK(virbr1) 10.10.0.10 52:54:10:7d:3a:3f mail 10.10.0.10 My setup is as followed - Fedora 24 / Kernel 4.5.7 libvirt-daemon-driver-qemu-1.3.3.1-4.fc24.x86_64 libvirt-daemon-driver-nodedev-1.3.3.1-4.fc24.x86_64 libvirt-daemon-driver-secret-1.3.3.1-4.fc24.x86_64 libvirt-daemon-1.3.3.1-4.fc24.x86_64 libvirt-daemon-driver-storage-1.3.3.1-4.fc24.x86_64 libvirt-daemon-kvm-1.3.3.1-4.fc24.x86_64 libvirt-client-1.3.3.1-4.fc24.x86_64 libvirt-daemon-driver-interface-1.3.3.1-4.fc24.x86_64 libvirt-daemon-driver-nwfilter-1.3.3.1-4.fc24.x86_64 libvirt-daemon-config-network-1.3.3.1-4.fc24.x86_64 libvirt-daemon-driver-network-1.3.3.1-4.fc24.x86_64 libvirt-daemon-config-nwfilter-1.3.3.1-4.fc24.x86_64 - dnsmasq / 2.75-4 - Setup Network - hypervisor side. There is a bridge configuration, as I have one VM listening to the Internet as well. ifconfig br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 9000 net my ip address netmask 255.255.255.0 broadcast my ip address inet6 fe80::d6ae:52ff:fec7:6694 prefixlen 64 scopeid 0x20<link> ether d4:ae:52:c7:66:94 txqueuelen 1000 (Ethernet) RX packets 1395299 bytes 291328394 (277.8 MiB) RX errors 0 dropped 66 overruns 0 frame 0 TX packets 629001 bytes 777811458 (741.7 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 9000 inet6 fe80::d6ae:52ff:fec7:6694 prefixlen 64 scopeid 0x20<link> ether d4:ae:52:c7:66:94 txqueuelen 1000 (Ethernet) RX packets 7254272 bytes 2658859144 (2.4 GiB) RX errors 0 dropped 4923 overruns 0 frame 0 TX packets 7302074 bytes 6556766298 (6.1 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 sudo iptables-save [sudo] password for support: # Generated by iptables-save v1.4.21 on Fri Jul 1 10:50:45 2016 *mangle :PREROUTING ACCEPT [313661:46683942] :INPUT ACCEPT [312868:46455263] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [204754:109339610] :POSTROUTING ACCEPT [204754:109339610] -A POSTROUTING -o virbr1 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill COMMIT # Completed on Fri Jul 1 10:50:45 2016 # Generated by iptables-save v1.4.21 on Fri Jul 1 10:50:45 2016 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [204361:109206834] -A INPUT -i virbr1 -p udp -m udp --dport 53 -j ACCEPT -A INPUT -i virbr1 -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -i virbr1 -p udp -m udp --dport 67 -j ACCEPT -A INPUT -i virbr1 -p tcp -m tcp --dport 67 -j ACCEPT -A INPUT -i br0 -m set --match-set banned src -j DROP -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i br0 -p tcp -m state --state NEW -m tcp --dport 23 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -i virbr1 -o virbr1 -j ACCEPT -A FORWARD -o virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A FORWARD -m set --match-set banned src -j DROP -A FORWARD -j REJECT --reject-with icmp-host-prohibited -A OUTPUT -o virbr1 -p udp -m udp --dport 68 -j ACCEPT COMMIT # Completed on Fri Jul 1 10:50:45 2016 <network> <name>prd-private-lan</name> <uuid>255083f4-05a1-4a24-bc66-d3a3a9ab0724</uuid> <bridge name='virbr1' stp='off' delay='0'/> <mac address='52:54:00:08:1e:d8'/> <domain name='prd.pipiche.net <http://prd.pipiche.net/>'/> <dns> <forwarder addr='8.8.4.4'/> <forwarder addr='8.8.8.8'/> </dns> <ip address='10.10.0.1' netmask='255.255.255.0'> <dhcp> <range start='10.10.0.128' end='10.10.0.254'/> <host mac='52:54:10:b6:35:ca' name='svc.prd.pipiche.net <http://svc.prd.pipiche.net/>' ip='10.10.0.3'/> <host mac='52:54:10:32:88:ac' name='admin.prd.pipiche.net <http://admin.prd.pipiche.net/>' ip='10.10.0.5'/> <host mac='52:54:10:5f:92:05' name='frontend.prd.pipiche.net <http://frontend.prd.pipiche.net/>' ip='10.10.0.7'/> <host mac='52:54:10:7d:3a:3f' name='mail.prd.pipiche.net <http://mail.prd.pipiche.net/>' ip='10.10.0.10'/> <host mac='52:54:10:30:93:56' name='blog.prd.pipiche.net <http://blog.prd.pipiche.net/>' ip='10.10.0.21'/> <host mac='52:54:10:78:c1:c2' name='cloud.prd.pipiche.net <http://cloud.prd.pipiche.net/>' ip='10.10.0.22'/> <host mac='52:54:10:64:00:21' name='web.prd.pipiche.net <http://web.prd.pipiche.net/>' ip='10.10.0.25'/> <host mac='52:54:10:5a:5f:63' name='dcroche.prd.pipiche.net <http://dcroche.prd.pipiche.net/>' ip='10.10.0.26'/> <host mac='52:54:10:4c:b2:61' name='trac.prd.pipiche.net <http://trac.prd.pipiche.net/>' ip='10.10.0.27'/> <host mac='52:54:10:62:de:5f' name='git.prd.pipiche.net <http://git.prd.pipiche.net/>' ip='10.10.0.62'/> </dhcp> </ip> </network> On the VM side, I’m using NetworkManager ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.10.0.10 netmask 255.255.255.0 broadcast 10.10.0.255 inet6 fe80::5054:10ff:fe7d:3a3f prefixlen 64 scopeid 0x20<link> ether 52:54:10:7d:3a:3f txqueuelen 1000 (Ethernet) RX packets 1368559 bytes 304901897 (290.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1219893 bytes 2157040102 (2.0 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 sudo cat /etc/sysconfig/network-scripts/ifcfg-eth0 # Generated by dracut initrd HWADDR="52:54:10:7d:3a:3f" DEVICE="eth0" NAME="eth0" ONBOOT=yes NETBOOT=yes IPV6INIT=no BOOTPROTO=dhcp TYPE=Ethernet DNS1=10.10.0.1 DNS2=8.8.8.8 DNS3=8.8.4.4

1 0