- Users - libvirt List Archives

[libvirt-users] Python-libvirt in a virtual environment.
by Sijo Jose 07 Mar '14

07 Mar '14

Hi, Could you guide me to install libvirt in a virtual environment..? OR How python-libvirt could be used within a virtual environment after installing it, in the system. Regards Sijo

3 4

[libvirt-users] how to disable vnet_hdr through libvirt
by Jianfeng Tang 07 Mar '14

07 Mar '14

Hi, I am using libvirt and virsh to create my VM on KVM. It works fine. However, I need to turn off vnet_hdr for virtio interface. Does anyone know how to do it through libvirt? Thanks.

3 5

[libvirt-users] Migration failure after libvirt upgradation
by Shweta Salaria 06 Mar '14

06 Mar '14

Team, I'm trying to migrate a domain offline(shutdown mode) using libvirt-python API 'migrateToURI' but it gives me an error : libvirt: QEMU Driver error : Requested operation is not valid: domain is not running When I tried the same API for live migration(running and suspend mode), it gives me an error: libvirt: QEMU Driver error : Unsafe migration: Migration may lead to data corruption if disks use cache != none Below are the versions of the virtualization softwares I am using currently : Hypervisor : KVM qemu : 1.0 qemu-kvm : 1.0 Libvirt : 1.2.1 Earlier, I had performed offline and live migration *successfully* with these versions: Hypervisor : KVM qemu : 1.0 qemu-kvm : 1.0 libvirt : 0.9.8 Also, I would like to know whether it's possible to migrate a domain having snapshots? Kindly guide me through this. Thanks in advance Regards, Shweta

1 0

[libvirt-users] How to enable mount loop device in LXC using libvirt LXC driver
by Du Jun 06 Mar '14

06 Mar '14

When I try to mount loop device in a linux container, I got the following error message: mount: Could not find any loop device. Maybe this kernel does not know about the loop device? (If so, recompile or `modprobe loop'.) I wonder how to enable mount loop device in LXC using libvirt LXC driver? -- Thanks! Du Jun

2 1

[libvirt-users] Fail to convert LXC container configuration into a domain XML fragment
by Du Jun 06 Mar '14

06 Mar '14

Hi, all, I used lxc-tools to create a linux container. I am trying to transfrom LXC container configuration into a domain XML fragment using the following command: *$ virsh -c lxc:/// domxml-from-native lxc /var/lib/lxc/my_conatiner/config* However, I get the error message, error: this function is not supported by the connection driver: virConnectDomainXMLFromNative It seems that *virConnectDomainXMLFromNative *is not supported in libvrit LXC driver. However, I find the command in the official documentation of libvirt. Besides, my libvirt's version is 1.2.2(the latest version). I wonder whether I can convert LXC container configuration into a domain XML fragment using *domxml-from-native*? If I can't, how cant I translate it? PS: I care about the rules in my LXC container configuration file, such as: *lxc.aa_profile = unconfined* *lxc.cgroup.devices.deny = a* *# Allow any mknod (but not using the node)* *lxc.cgroup.devices.allow = c *:* m* *lxc.cgroup.devices.allow = b *:* m* *lxc.cgroup.devices.allow = b 7:* rwm* I just don't know how to express the rules above using xml format. Please help! Thanks! -- Best Regards, Du Jun

2 1

[libvirt-users] Simple Networkfilter not working as expected.
by Matthias Babisch 06 Mar '14

06 Mar '14

Hello People. I have produced a very simple networkfilter that is not work as I would expect it. Perhaps one of you knows what I did wrong? I made this little filter: <filter name='my-test-no-ip-spoofing' priority='-700'> <rule action='drop' direction='out' priority='-999'> <all match='no' srcipaddr='$IP'/> </rule> </filter> I could attach it directly to a VM (and defined an IP-Adress in the network-interface there). Then it produced iptables rules that look like this: Chain FI-vnetnn (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * ! IP 0.0.0.0/0 (This is the rule governing the input via the virtual device into the bridge, is as expected.) Chain HI-vnetnn (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * ! IP 0.0.0.0/0 (This is the rule governing the input to the host, i would expect this too.) Chain FO-vnetnn (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 ! IP This is the rule governing the output via the virtual-device from the bridge. (i.e. Packets coming from the network.) I specifically asked to filter outgoing traffic. This one I don't unterstand. Perhaps somebody knows a hint? On the other hand this filter works as expected, no rule on "FO-vnetnn": <filter name='my-no-mac-spoofing' priority='-800'> <rule action='drop' direction='out'> <all match='no' srcmacaddr='$MAC'/> </rule> </filter> I used libvirt with qemu on Ubuntu 13.10. (Version 1.1.1-0ubuntu8.5) I am grateful for any helpful comments. Sincerely Matthias Babisch IT/Organisation *b+m Informatik AG* Rotenhofer Weg 20 24109 Melsdorf T +49 4340/404-1444 F +49 4340/404-111 M +49 160/8866426 matthias.babisch(a)bmiag.de Aktuelle Informationen unter www.bmiag.de <%5C%22http://www.bmiag.de%5C%22> Die b+m Informatik AG ist ein Unternehmen der Allgeier Gruppe <%5C%22http://www.allgeier-holding.de%5C%22> Vorsitzender des Aufsichtsrates: Dr. Marcus Goedsche Vorstand: Dipl-Ing. Frank Mielke Amtsgericht Kiel, HRB 5526

1 0

[libvirt-users] cgroup for VM - does it work properly?
by Martin Pavlásek 06 Mar '14

06 Mar '14

Hi I tried to restrict usage of some running VM by cpu.shares (i.e. set to 10 from original 1024) on loaded system and it seem doesn't work as I expected... all running processes has same CPU usage (by htop) :-/ Does anyone has same experience? Fedora 19, libvirt-1.0.5.9-1.fc19.x86_64 Thanks a lot Martin -- Martin Pavlásek <mpavlase(a)redhat.com> OpenStack QA Associate/Red Hat Czech/BRQ irc: mpavlase

4 5

[libvirt-users] IPv6 nwfilter
by Brian Rak 06 Mar '14

06 Mar '14

Are there any nwfilter rules out there for IPv6? I'm looking for something similar to clean-traffic, but that works with IPv6. I found some mailing list posts from 2012 ( https://www.redhat.com/archives/libvirt-users/2012-November/msg00039.html ), but they don't seem to actually go anywhere. The hard part here seems to be determining all the different ways IPv6 traffic can be bad.

1 0

[libvirt-users] fedora 19 + libvirt-1.0.5.9 routing problems
by Patrick Chemla 06 Mar '14

06 Mar '14

Hi, I am an experienced libvirt user on Fedora versions from F15 to F17. I have developped scripts to route trafic from outside on multiple interfaces/multiples IPs to multiple VMs, and back to affect each VM the required external IP address. I have servers with more than hundreds external IPs, and up to 4 VMs, each of them route trafic on different external IPs. I have servers with Fedora F17 which work very fine with this. Now libvirt-1.0.5.9 comes to Fedora 19 with many iptables default rules that refrain me to use my scripts. So I put in /etc/libvirt/hooks /qemu the right rules to get trafic to my VMs, but I can't set trafic back to external with the right external IP. The -j SNAT --to-source ot -j MASQUERADE dont work, are ignored, and I dont see any packet through these rules in iptables -tnat -L POSTROUTING. I used tcpdump to trace packet on the physical server on virbr0 interface and on eth0 interface. I see the packets on outgoing route. But, the ougoing packets are presented to the external interface with the internal address 10.0.0.x instead of the address specified in the -j SNAT rule. Am I the only one in this case? Somebody could help? Thanks Patrick

1 1

[libvirt-users] Flags in java api bindings
by Pasquale Dir 05 Mar '14

05 Mar '14

I am currently using Connect(String,ConnectAuth,int) constructor, as I decided to use tcp connection and I need the auth part. It works, but I still need the read/write flag which, in the Connect(String, boolean) is a boolean. I need to enable write permits. In the javadoc no flags are defined...so which is the flag for allow write? And where can I find a list?

2 1