- Users - libvirt List Archives

[libvirt-users] Libvirtd failed to start inside container: libvirt-qemu.so.0: cannot open shared object file: Permission denied
by Konstantin Danilov 07 May '14

07 May '14

Hi all. I run into trouble, while try to start libvirtd inside docker container (actually it is LXC container). During startup libvirtd can't load shared library libvirt-qemu.so.0 (and strace results looks very odd). * I run libvirtd as root. * libvirt-bin - 0.9.8-2ubuntu17 * selinux/apparmor both disabled. * No other security extension are used. * No sticky bits are set. * Required library are present in appropriate folder and have all required permissions. * I also successfully load it to other process (python). * No file locks are holds. * OS ubuntu linux 12.04 x64 ___running inside LXC container__(docker). Container is privileged (I can run vm using kvm in it) * On host system libvirtd starts ok, but stopped now # uname -a Linux 27119997ee44 3.11.0-19-generic #33-Ubuntu SMP Tue Mar 11 18:48:34 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux # dpkg -l | grep libvirt ii libvirt-bin 0.9.8-2ubuntu17 programs for the libvirt library ii libvirt0 0.9.8-2ubuntu17 library for interfacing with different virtualization systems ii python-libvirt 0.9.8-2ubuntu17 libvirt Python bindings # libvirtd libvirtd: error while loading shared libraries: libvirt-qemu.so.0: cannot open shared object file: Permission denied # whoami root # ls -l `which libvirtd` -rwxr-xr-x 1 root root 1211712 Apr 16 2012 /usr/sbin/libvirtd # ldd `which libvirtd` ...... libvirt-qemu.so.0 => /usr/lib/libvirt-qemu.so.0 (0x00007fd6ed29c000)Environment: .... # ls -l /usr/lib/libvirt-qemu.so.0 -rwxr-xr-x 1 root root 6144 May 6 21:46 /usr/lib/libvirt-qemu.so.0 # strace libvirtd execve("/usr/sbin/libvirtd", ["libvirtd"], [/* 19 vars */]) = 0 brk(0) = 0x1d74000 .... (~30 lines) open("/usr/lib/libvirt-qemu.so.0", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied) <<<< !!!! stat("/usr/lib", 0x7fffbd127840) = -1 EACCES (Permission denied)-- <<<< !!!! Before try to load /usr/lib/libvirt-qemu.so.0 libvirtd make only stat, open, access and brk system calls (no change user or other security related calls) # stat /usr/lib File: `/usr/lib' Size: 8192 Blocks: 24 IO Block: 4096 directory Device: 53h/83d Inode: 70 Links: 68 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2014-04-02 12:38:18.171617082 +0000 Modify: 2014-05-06 21:46:39.450449491 +0000 Change: 2014-05-06 21:46:39.450449491 +0000 Birth: - # selinuxenabled ; echo $? 1 # kvm-ok INFO: /dev/kvm exists KVM acceleration can be used on host system - $ docker -v Docker version 0.9.1, build 3600720 Thanks ---- Kostiantyn Danilov aka koder.ua Principal software engineer, Mirantis skype:koder.ua http://koder-ua.blogspot.com/ http://mirantis.com

1 0

[libvirt-users] Virsh Attach Volume Fails
by Vilobh Meshram 07 May '14

07 May '14

Hi, When trying to attach a created volume to an instance using the virsh utility I am running into this error :- [] $ sudo virsh attach-device instance-00000015 disk.xml error: Failed to attach device from disk.xml error: internal error unable to execute QEMU command '__com.redhat_drive_add': Device 'drive-virtio-disk21' could not be initialized For experimental purpose I have libvirt 0.10.2 and QEMU 0.12.1. The volume to be attached is on a remote storage. Any idea what I might be missing ? Thanks, Vilobh

2 2

[libvirt-users] libvirt 1.2.4 and virt-manager 0.9.0 are not incompatible
by xeon_feng 06 May '14

06 May '14

Hello everyone I encountered a problem when I completed the update of libvirt from 0.10 to 1.2.4 . The problem was that virt-manager(version 0.9.0) could not start and reported error : "ImportError: /usr/lib64/libvirt.so.0: version 'LIBVIRT_PRIVIATE_0.10.2' not found (required by /usr/lib64/python2.6/site-packages/libvirtmod.so)". I found the libvirt.so.0 link file just in the /usr/lib64/ directory , but it was linking to libvirt.so.0.1002.4 .not to the libvirt.so.0.10.2 I made libvirt.so.0 to link to libvirt.so.0.10.2 and restarted virt-manager , virt-manager started normally then restarted libvirtd failure, reporting error:l “ibvirtd: /usr/lib64/libvirt.so.0: version 'LIBVIRT_1.2.3' not found (require by libvirtd) .....” I made libvirt.so.0 to link to libvirt.so.0.1002.4 and restart libvirtd , libvirtd started normally again. Please help me to resolve the problem and give me some advise.... Thanks a lot.. Xeon.Feng

3 2

[libvirt-users] Virtualbox HOWTO?
by Dr. Boris Neubert 05 May '14

05 May '14

Hi, I have the latest libvirt from the git repo successfully compiled and up and running under CentOS 6.5. I can connect to the daemon (started with /usr/local/sbin/libvirtd -d --listen) both locally and remotely. I cannot see my virtualbox virtual machines. They run as the user "virtualbox". I connect with virsh -c vbox+tcp://virtualbox@vmserver/session and all list --all gets me is Id Name State ---------------------------------------------------- I probably miss something elementary, especially because I am not asked for a password for the virtualbox user and did not configure any machines beforehand. But I did not find how do to the trick in the documentation. Anybody out there with a working Virtualbox setup can help me out? Thanks and kind regards, Boris

1 0

[libvirt-users] newbee questions
by John Smith 04 May '14

04 May '14

Hi, Im very new to virtualization on Linux, wanting to kick the tires some, and am wondering where best to go next. Right now, ive done the 'all in one install' of ovirt 3.4 on a single fedora 19 machine. Its a desktop with a wifi network interface, and im trying to set up the kvm hypervisor in combination with macvtap. Any pointers to docs on what best to do next is appreciated. Im currently trying to make sense of this: http://www.ovirt.org/Quick_Start_Guide Also, as far as I can tell, there seems to be an issue with the detection of my wireless wifi network interface 'wlp2s0' as it doesnt seem to show up anywhere in the interface. I can attach the 'ovirtmgmt' network to my standard wired ethernet interface 'p2p2', but that device is not in use on the machine and it is disconnected from the network. Reading about linux virt and issues with bridging with wifi NIC's on the web made me, perhaps incorrectly here, assume that a wifi nic might be an issue, so thats where the idea to use macvtap came from. Manual setup of macvtap seems to work, as i can do this without issues on a root prompt on the same machine: ip link add link wlp2s0 name macvtap0 type macvtap ip link set macvtap0 address 1a:46:0b:ca:bc:7b up ip link show macvtap0 But the wifi interface 'wlp2s0' does not seem to show up in the ovirt web gui interface. Im sorry if I sound confusing here, but that may be just because im really still confused about ovirt. ;) So any pointers on what to read up on or do next is appreciated, Thanks, Regards, John Smith.

1 0

[libvirt-users] Corrupt image?
by mattias 02 May '14

02 May '14

I took a gzipped qcow2 image And do a gunzip on it But what? [root@mjw vm]# fdisk w.qcow2 -l Disk w.qcow2: 0 MB, 0 bytes 255 heads, 63 sectors/track, 0 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x00000000 [root@mjw vm]# The disc should not be 0 mb!!! The disc worked before i gzipped it

2 1

[libvirt-users] virsh update-device: need to clear network filters
by Oleg Bondarev 01 May '14

01 May '14

Hi, Can anyone please help with the following: I have a running instance with interface <interface type='bridge'> <mac address='fa:16:3e:ba:a4:67'/> <source bridge='br100/> <target dev='vnet0'/> <model type='virtio'/> <filterref filter='nova-instance-instance-00000001-fa163ebaa467'/> <alias name='net0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> what I need is to clear network interface on the instance. I tried virsh update-device with following xml: <interface type='bridge'> <mac address='fa:16:3e:ba:a4:67'/> <source bridge='br100/> <model type='virtio'/> </interface> but this results in the following error: $ sudo virsh update-device 13 xml.xml --persistent --live --config error: Failed to update device from xml.xml error: End of file while reading data: Input/output error error: Failed to reconnect to the hypervisor and libvirt is restarted. Is it possible to clear nw filter at all? Thanks, Oleg

3 3

[libvirt-users] Some odd quriks of libvirt and xen on fedora 20.
by Alvin Starr 01 May '14

01 May '14

for pv systems the vnc console display is on the correct port with the following call do qeum-dm libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: -domain-name libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: paravirt libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: -vnc libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: 127.0.0.1:1 but for hv systems xl is being passed libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: -domain-name libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: fullvirt libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: -vnc libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: 127.0.0.1:0 libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: -vncunused libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: -serial libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: pty libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: -videoram libxl: debug: libxl_dm.c:1213:libxl__spawn_local_dm: 8 Where would I look to correct this? -- Alvin Starr || voice: (905)513-7688 Netvel Inc. || Cell: (416)806-0133 alvin(a)netvel.net ||

1 0

[libvirt-users] About virsh console on Windows guest
by Yoann Dandine 01 May '14

01 May '14

Hello, Then everything is in the title, i would like to get the guest's serial console, the Windows one, Linux works perfectly at the moment. I don't find enough informations about that, so I'm asking myself : "Is that stupid or inconsistent ?". I know we can go trough 2 ssh access it but that's not really nice to do. My searches resulted in the use of EMS, I'm still trying this way but it seems it doesn't work. Any suggestions ? Kind regards Yoann Dandine.

1 0

[libvirt-users] [LXC] Libvirtd without root
by Jan Olszak 30 Apr '14

30 Apr '14

Hi there! Can libvirtd (lxc driver) run as a non-root user, but with the right CAPs? Thanks, Jan

2 1

[libvirt-users] How can I have more than one console/terminal windows when connecting to lxc
by WANG Cheng D 30 Apr '14

30 Apr '14

Dear all, I use virsh command to start a container and connect to it. When I use virsh -c lxc:/// console mycontainer, I only have one console. I wonder how to open multiple terminal windows for the same container. Thank you in advance Cheng Wang

2 1

Re: [libvirt-users] libvirt-users Digest, Vol 52, Issue 39
by Taimur Al Said 29 Apr '14

29 Apr '14

On Sun, Apr 27, 2014 at 5:00 PM, <libvirt-users-request(a)redhat.com> wrote: > Send libvirt-users mailing list submissions to > libvirt-users(a)redhat.com > > To subscribe or unsubscribe via the World Wide Web, visit > https://www.redhat.com/mailman/listinfo/libvirt-users > or, via email, send a message with subject or body 'help' to > libvirt-users-request(a)redhat.com > > You can reach the person managing the list at > libvirt-users-owner(a)redhat.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of libvirt-users digest..." > > > Today's Topics: > > 1. Ability of a VM to detect Libvirt events. (Taimur Al Said) > 2. Re: Ability of a VM to detect Libvirt events. (Brian Rak) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 26 Apr 2014 22:46:30 +0100 > From: Taimur Al Said <alsaidts(a)gmail.com> > To: libvirt-users(a)redhat.com > Subject: [libvirt-users] Ability of a VM to detect Libvirt events. > Message-ID: > <CACwu6qRADOyJ6EB_OD= > YZgbogNqQLQPxOJfRXshGcqosgDmPKg(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Hi there, > > Let's assume a libvirt event occurred on a VM, i.e an event like pause VM > or reboot VM or any other libvirt event. Can the VM determine that such > event was originated by libvirt? ---or in a more general term by the > hypervisor? If yes, how can this be done in theory? > > Thanks in advance, > > Regards, > Taimur > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > https://www.redhat.com/archives/libvirt-users/attachments/20140426/4699d43e… > > > > ------------------------------ > > Message: 2 > Date: Sat, 26 Apr 2014 18:46:42 -0400 > From: Brian Rak <brak(a)gameservers.com> > To: libvirt-users(a)redhat.com > Subject: Re: [libvirt-users] Ability of a VM to detect Libvirt events. > Message-ID: <535C3752.5070609(a)gameservers.com> > Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" > > How are you thinking that a VM would be paused/rebooted via something > other then the hypervisor? > > On 4/26/2014 5:46 PM, Taimur Al Said wrote: > > Hi there, > > > > Let's assume a libvirt event occurred on a VM, i.e an event like pause > > VM or reboot VM or any other libvirt event. Can the VM determine that > > such event was originated by libvirt? ---or in a more general term by > > the hypervisor? If yes, how can this be done in theory? > > > > Thanks in advance, > > > > Regards, > > Taimur > > > > > > _______________________________________________ > > libvirt-users mailing list > > libvirt-users(a)redhat.com > > https://www.redhat.com/mailman/listinfo/libvirt-users > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > https://www.redhat.com/archives/libvirt-users/attachments/20140426/d18e0d87… > > > > ------------------------------ > > _______________________________________________ > libvirt-users mailing list > libvirt-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvirt-users > > End of libvirt-users Digest, Vol 52, Issue 39 > ********************************************* > Thanks, I guess my query was clear. However, I'll make it clearer. I know that the such events are caused by the hypervisor. Either directly or using tools such as Libvirt. The question is: can such events be detectable from the VM level? In another word, can the VM tell if it was being paused/rebooted/migrated/etc? Best regards, Taimur

2 1

[libvirt-users] Fwd: [s3-bug-review] [RHEL7] [Virtual disks] Met error messages while the guest OS booting up on a nbd device.
by Chenli Hu 29 Apr '14

29 Apr '14

Hi, all We met an issue while doing the nbd related test, will you please help to review if this issue is a bug? Thank you! ================================================= Subject: [s3-bug-review] [RHEL7] [Virtual disks] Met error messages while the guest OS booting up on a nbd device. Description: Start a guest with only one nbd device and with a linux OS installed on the nbd device, "virsh create" return successfully, but meet error messages while the guest OS booting up. Version: libvirt-client-1.1.1-29.el7.x86_64 qemu-kvm-1.5.3-60.el7.x86_64 kernel-3.10.0-121.el7.x86_64 How reproducible: 100% Steps to Reproduce: 1. start nbd server on the server host. #nbd-server 10809 /var/lib/libvirt/images/r7g-qcow2.img 2. create a domain with xml as bellow. # virsh create r7g-nbd.xml Domain r7g-qcow2 created from r7g-nbd.xml # virsh dumpxml r7g-qcow2| grep disk -A 7 <disk type='network' device='disk'> <driver name='qemu' type='qcow2'/> <source protocol='nbd'> <host name='10.66.106.34' port='10809'/> </source> <target dev='sda' bus='scsi'/> <alias name='scsi0-0-0-0'/> <address type='drive' controller='0' bus='0' target='0' unit='0'/> </disk> # ps -ef| grep qemu-kvm| grep nbd qemu 15724 1 99 09:58 ? 00:00:47 /usr/libexec/qemu-kvm -name r7g-qcow2 ...... -drive file=nbd:10.66.106.34:10809,if=none,id=drive-scsi0-0-0-0,format=qcow2 -device scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0,bootindex=1 ...... 3. login to the guest, the console output error messages and fail to booting up. Actual results： As described. Expected results: The guest can boot up successfully. Additional info: Attached screen-shot and log files. Regards, chhu

2 1

[libvirt-users] Forwarding incoming connections from an secondary external interface with dhcp
by Bhima Pandava 28 Apr '14

28 Apr '14

Hi everyone, I have a server (ubuntu 14.04 lts) running KVM with a few guests (each with static IP addresses) which I manage using libvirt. This machine has a wired interface (br0 / p2p1) connecting to my internal network and a wireless interface using dhcp (ppp0) as a secondary direct connection to the internet. My goal is route all administration traffic for both the host and guests through the wired interface (br0); while routing the service traffic, and _only_ this traffic, through the ppp0 interface. For example: One vm is a webserver and I wish to route all traffic on ports 80 & 443 from ppp0 to that vm. Another vm is a mailserver and I wish to route all the imap & pop traffic from ppp0 to that vm. At the same time, I wish to be able to ssh in through the wired interface (p2p1) and route all system maintenance traffic through the wired interface as well. Additionally I wish to drop/reject incoming traffic on ppp0 which is not on these specified ports. Reading the libvirt documentation, I have found a section which very nearly describes my needs: http://wiki.libvirt.org/page/Networking#Forwarding_Incoming_Connections Unfortunately, I am unsure how to correcting modify the given examples to meet my specific needs. To begin with, the examples assume a static external IP, while mine is dynamic. I think I would like to refer to interface by name (ppp0) or perhaps create a secondary bridge (br1) with a static IP, the ppp0 included with "bridge_prts ppp0" command, and then refer to the static IP of the new bridge (br1). Next, I don't see the correct mechanism which I could configure such that all traffic coming in ppp0 which was not on the specified ports is rejected/dropped and all administrative traffic, originating from both the host and guests, is routed through the wired interface. I am assuming that this also should be done through libvirt/virsh and not directly through iptables. If it matters, the wired interface connects to a router running shorewall (and thus the server is in the "dmz" zone). The server itself is not running shorewall or any other similar things. The router is managing the primary connection to internet, which is distinct from the secondary wireless interface on the server, it is connecting to a different ISP. If anyone could give me some advice or point me to some additional or more relevant documentation/examples I would really, really appreciate it. Thanks!

1 0

[libvirt-users] Ability of a VM to detect Libvirt events.
by Taimur Al Said 27 Apr '14

27 Apr '14

Hi there, Let's assume a libvirt event occurred on a VM, i.e an event like pause VM or reboot VM or any other libvirt event. Can the VM determine that such event was originated by libvirt? ---or in a more general term by the hypervisor? If yes, how can this be done in theory? Thanks in advance, Regards, Taimur

2 1

[libvirt-users] Deriving VMs from a reference image via scripts
by Philip Prindeville 26 Apr '14

26 Apr '14

Hi. I have a reference .vmdk (and .xml) reference VM. I need to instantiate multiple new VM’s from this, but changing various parameters: name, MAC address, network connections, cores, memory size, disk size and backing store, etc. and then start these new VM’s… all via ‘virsh’ et al from a script. What are the steps to do this? I was looking at the command help and some tutorials but apparently not the right ones. Thanks, -Philip

2 1

[libvirt-users] Using IVSHMEM with Libvirt
by Qasim Maqbool 24 Apr '14

24 Apr '14

Hi, I am trying to create a VM with the IVSHMEM feature, and I specify the device using qemu command line argument in my XML by using the pass through tag as follows: <qemu:commandline> <qemu:arg value='-device ivshmem,size=2048M,shm=fd:/mnt/huge/map_1:0x0:0x40000000:/dev/zero:0x0:0x3fffc000:/var/run/.ivshmem_metadata_config_2:0x0:0x4000'/> </qemu:commandline> This seemingly does not work as I get this error: Internal error process exited while connecting to monitor: qemu-system-x86_64: -device ivshmem,size=2048M,shm=fd:/mnt/huge/map_1:0x0:0x40000000:/dev/zero:0x0:0x3fffc000:/var/run/.ivshmem_metadata_config_2:0x0:0x4000: invalid option Can anyone point out what I am doing wrong here? Thanks. Qasim

2 1

[libvirt-users] Libvirt qemu permission denied error
by Asadullah Hussain 23 Apr '14

23 Apr '14

Hello, I am trying run a simple VM (qemu1.4.2) on RHEL 6.5 through libvirt (0.10). virsh create throws the error: *error: Failed to create domain from vm1.xml* *error: internal error process exited while connecting to monitor:* The libvirt log for VM shows: *libvir: error : cannot execute binary /usr/bin/qemu-system-x86_64: Permission denied* I am running VM as root and all disk images/ISOs required for VM are read/write/executable. -- Asadullah Hussain

2 3

[libvirt-users] TLS and intermediate CA
by Nathaniel Cook 23 Apr '14

23 Apr '14

I have been trying to get set of libvirtd system up and running. My PKI infrastructure involves a root CA and several intermediate CAs. I am trying to get the machines to trust each other across the different intermediate CAs. This is what I have so far: Libvirtd is starting and listening on tls port 16514 I have configured client/server certs/keys and it seems to be using all of these correctly. I have also configured the cacert.pem file (which has two certs in the chain). I have confirmed (recompiling with various debug statements) that the gnutls libraries are successfully loading both certs from the cacert.pem file. When I try to connect with openssl s_client -connect <host>:16514 I get something similar to this: --- Certificate chain 0 s:/CN=kvm999.example.com i:/C=US/ST=Utah/O=Qualtrics/OU=SRE/CN=intca1.example.com --- Server certificate -----BEGIN CERTIFICATE----- ... omitted for brevity -----END CERTIFICATE----- subject=/CN=kvm999.example.com issuer=/C=US/ST=Utah/O=Qualtrics/OU=SRE/CN=intca1.example.com --- Acceptable client certificate CA names /C=US/ST=Utah/O=Qualtrics/OU=SRE/CN=intca1.example.com /C=US/ST=Utah/O=Qualtrics/OU=SRE/CN=rootca.example.com --- The "Server certificate" and "Acceptable client certificate CA names" look right. The problem is that the certificate chain is just the single server cert and does not include the intermediate cert or root cert. As a result clients from other intermediate CAs fail to verify the libvirtd process. I have tried libvirtd 0.10.2 and 1.2.1 both on CentOS 6. Thanks. -- -Nathaniel Cook

2 4

[libvirt-users] Live snapshot merging (qemu 2.0)
by Thomas Stein 22 Apr '14

22 Apr '14

Hello. The Changelog of qemu-2.0.0 mentioned "Live snapshot merging". Someone has an idea what could be ment by this? I'm asking because i'm still struggling with finding a reliable backup solution for running kvm machines. Blockcopy is my current solution. best regards Thomas

2 2

[libvirt-users] "virt-install" source location boot disk
by Jay Vyas 22 Apr '14

22 Apr '14

Hi virt, im stumped... any help would be appreciated. I normally create my VMs like this: base="http://mirror.pnl.gov/fedora/linux/releases/20/Fedora/x86_64/os/" sudo virt-install --hvm --name $vm_name$i --ram 4000 \ --disk path=/VirtualMachines/$vm_name$i,size=30 \ --location $base -x "ks=http://xxx.os21.ks$kx" HOWEVER... I'm finding that my VMs dont boot after i restart the Host. My question is: Where is virt-install writing the boot disk to? I get a error message that the "boot failed" because the hard disk, is not a bootable disk. But I can't imagine where else to boot from ? Because I point my --location of the original boot to the source code repo itself.... ANY help would be appreciated thanks!

2 5

[libvirt-users] routed subnet problem
by Patric Buskas 22 Apr '14

22 Apr '14

Hi, I'm new to libvirt so please bear with me. I am trying to set up a routed subnet on my laptop with libvirt, hoping it to be able to communicate with all servers in my nw. My laptop is on a subnet, 192.168.2.0/24, with a static ip, 192.168.2.27. I have "more or less" followed this guide for routed networks, https://www.berrange.com/posts/2009/12/13/routed-subnets-without-nat-for-li… The "more or less" part is that I have a Asus RT-N56U router with the static route set as in the guide and I'm not running wifi. With this setup I can reach, within the 192.168.200.0/24, all guests within 192.168.200.0/24, internet and the laptop but I can not reach any server on the laptop subnet. traceroute from guests to servers in the laptop subnet is only giving "stars" infinitely nmap from guests to services in the laptop subnet is saying "filtered" Obviously I've done something wrong but I can't find out what. I also may have misunderstood the meaning of routed network within libvirt. Please give me some advise to solve this problem. Some facts: The laptop is running Ubuntu 13.04 The net-dumpxml https://gist.github.com/kakbit/11103807 Routing on laptop https://gist.github.com/kakbit/11103832 iptables on laptop https://gist.github.com/kakbit/11103947

2 1

[libvirt-users] Guest Virtual Bios in XEN
by Mui Le Van 21 Apr '14

21 Apr '14

Hi, I am using Libvirt with XEN hypervisor to manage the VM. I see there are 3 kinds of Virtual BIOS for XEN Guest VM, they are ROMBIOS,SEABIOS, OVMF ( is disabled by default as XEN Supporters said ). But I don't know how to pass the BIOS options to the Guest from XML file. Could you please suggest how to change the Virtual BIOS for the Guest from XML file in Libvirt or give some clues to do that? Below is the link that I asked XEN support: http://osdir.com/ml/general/2014-04/msg32102.html Thank for your time! Mui Le,

1 0

[libvirt-users] (no subject)
by Mui Le Van 21 Apr '14

21 Apr '14

Hi, I am using Libvirt with XEN hypervisor to manage the VM. I see there are 3 kinds of Virtual BIOS for XEN Guest VM, they are ROMBIOS,SEABIOS, OVMF ( is disabled by default as XEN Supporters said ). But I don't know how to pass the BIOS options to the Guest from XML file. Could you please suggest how to change the Virtual BIOS for the Guest from XML file in Libvirt or give some clues to do that? Below is the link that I asked XEN support: http://osdir.com/ml/general/2014-04/msg32102.html Thank for your time!

1 0

[libvirt-users] LXC + USB passthrough = Operation not permitted
by Filip Maj 19 Apr '14

19 Apr '14

Hi! First post, kind of a noobie. I've been working with LXC and libvirt for a few months now. Trying to do some interesting things with containers and Android devices :D I'm running ubuntu 13.10 with LXC 1.0.1 and tried both libvirt 1.1.1 and 1.2.2 (backported from ubuntu-trusty), but with either version of libvirt am getting issues as soon as I try to get access to USB devices inside the container. Relevant versions of stuff: $ dpkg -l | grep -i lxc ii liblxc1 1.0.1-0ubuntu1~ubuntu13.10.1~ppa1 i386 Linux Containers userspace tools (library) ii lxc 1.0.1-0ubuntu1~ubuntu13.10.1~ppa1 i386 Linux Containers userspace tools ii lxc-templates 1.0.1-0ubuntu1~ubuntu13.10.1~ppa1 i386 Linux Containers userspace tools (templates) ii python3-lxc 1.0.1-0ubuntu1~ubuntu13.10.1~ppa1 i386 Linux Containers userspace tools (Python 3.x bindings) $ dpkg -l | grep libvirt ii libvirt-bin 1.2.2-0ubuntu12 i386 programs for the libvirt library ii libvirt0 1.2.2-0ubuntu12 i386 library for interfacing with different virtualization systems ii python-libvirt 1.2.2-0ubuntu1 i386 libvirt Python bindings Here's my entire domain definition: <domain type='lxc'> <name>oshi32134</name> <uuid>xxxxx</uuid> <memory unit='KiB'>3145728</memory> <currentMemory unit='KiB'>3145728</currentMemory> <vcpu placement='static'>1</vcpu> <resource> <partition>/machine</partition> </resource> <os> <type arch='i686'>exe</type> <init>/sbin/init</init> </os> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/lib/libvirt/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/some/valid/filesystem/location'/> <target dir='/'/> </filesystem> <filesystem type='mount' accessmode='passthrough'> <source dir='/another/valid/filesystem/location'/> <target dir='/mnt/android'/> </filesystem> <interface type='bridge'> <mac address='xx:xx:xx:xx:xx:xx'/> <source bridge='br1'/> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> <hostdev mode='capabilities' type='misc'> <source> <char>/dev/kvm</char> </source> </hostdev> <hostdev mode='subsystem' type='usb' managed='yes'> <source> <vendor id='0x04e8'/> <product id='0x6860'/> </source> </hostdev> </devices> </domain> Everything worked fine until I added the USB <hostdev> element. I'm essentially trying to get access to a physical Android device connected to the host from inside a container. When I go to start the container, I get an error about Operation not permitted. Here's the relevant bits from /var/log/libvirt/lxc/machine.log: 2014-04-11 22:46:40.491+0000: starting up PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin LIBVIRT_DEBUG=3 LIBVIRT_LOG_OUTPUTS=3:stderr /usr/lib/libvirt/libvirt_lxc --name oshi32134 --console 24 --security=none --handshake 27 --background --veth vnet1 2014-04-11 22:46:40.597+0000: 685: info : libvirt version: 1.2.2 2014-04-11 22:46:40.597+0000: 685: error : virLXCControllerSetupHostdevSubsysUSB:1390 : Unable to create device //var/run/libvirt/lxc/oshi32134.dev/bus/usb//002//003: Operation not permitted Unable to create device //var/run/libvirt/lxc/oshi32134.dev/bus/usb//002//003: Operation not permitted I get the same output above when I use libvirt 1.1.1. Tracing down through the libvirt code it looks like it fails when calling `mknod`. It's clear that libvirt converts the product/vendor ids I specified in the domain definition file to the appropriate USB bus (/dev/bus/usb/002/003, verified by comparing against output of `usb-devices`). In a parallel effort, a colleague of mine set up a vanilla LXContainer on a new install of the same version of ubuntu, and successfully was able to communicate with the Android device from a container. The only configuration tweaks he made was make sure to whitelist the cgroup with the appropriate major/minor device number (associated with the Android device) inside the LXC configuration file. From there the container was able to appropriately create the device file as you attach/detach the Android device. Hopefully someone can shed some light, and appreciate your patience with me as I am learning a lot of this stuff as I go :) Thanks in advance for any help! Fil

2 7