- Users - libvirt List Archives

[libvirt-users] dropping capabilities in lxc containers
by Thierry Parmentelat 30 Jan '14

30 Jan '14

Hi there I’m not quite proficient with libvirt yet, and have been using it so far primarily to manage lxc containers I was hoping to find a means to configure the set of capabilities that guests should drop, but came across a few web pages suggesting these were set in stone in the code is this correct, or is there a means to tweak this set from the host via the xml config or a virsh command ? any hint / pointer to documentation in this respect would be most appreciated — Thierry

2 3

[libvirt-users] Libvirt-LXC + systemd + user namespace
by Jan Olszak 29 Jan '14

29 Jan '14

Hi there! I am trying to turn on user namespace by adding following lines to the config: <idmap> <uid start='0' target='0' count='100000'/> <gid start='0' target='0' count='100000'/> </idmap> As you can see the root in container is mapped to the root outside. I was expected to see no difference after adding this lines, but unfortunately there are some (see details below). Am I missing something or is there a problem with system, libvirt or kernel? Full libvirt config: <domain type='lxc'> <name>test_with_idmap</name> <memory>102400</memory> <os> <type>exe</type> <init>/usr/lib/systemd/systemd</init> </os> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <idmap> <uid start='0' target='0' count='100000'/> <gid start='0' target='0' count='100000'/> </idmap> <devices> <console type='pty'/> <filesystem type='mount'> <source dir='/guest'/> <target dir='/'/> </filesystem> </devices> </domain> root:~> uname -a Linux localhost 3.10.19-01077-g4a19d28-dirty #5 SMP PREEMPT Mon Jan 13 12:56:09 CET 2014 armv7l GNU/Linux root:~> libvirtd --version libvirtd (libvirt) 1.2.1 root:~> systemd --version systemd 204 After adding idmap to config systemd can't start many of its services, in particular: Failed to mount Debug File System. Failed to mount Configuration File System. Failed to mount FUSE Control File System. Failed to start udev Kernel Device Manager. Failed to start Remount Root and Kernel File Systems. Failed to start Journal Service. systemctl status says: ExecMount=/bin/mount debugfs /sys/kernel/debug -t debugfs (code=exited, status=32) ExecMount=/bin/mount configfs /sys/kernel/config -t configfs (code=exited, status=32) ExecMount=/bin/mount fusectl /sys/fs/fuse/connections -t fusectl (code=exited, status=32) ExecStart=/usr/lib/systemd/systemd-udevd (code=exited,status=206/OOM_ADJUST) ExecStart=/usr/lib/systemd/systemd-remount-fs (code=exited,status=1/FAILURE) ExecStart=/usr/lib/systemd/systemd-journald (code=exited, status=218/CAPABILITIES) Thanks!

3 3

Re: [libvirt-users] How to find domain os type and ip address
by Rathidevi 29 Jan '14

29 Jan '14

Hi All, I am using the libvirt-0.5.1.jar and downloaded from this link ftp://libvirt.org/libvirt/java. 1) To find the os type of domain I use this method getOSType(). But it returns the kvm or hvm instead of windows and linux. Is the any way to find the original os type of domain? 2) Please give is there any option or method available to find the ipaddress of domain? Thanks & Regards Rathidevi

2 1

[libvirt-users] Does libvirt support attach volume to linux container now?
by Du Jun 29 Jan '14

29 Jan '14

Hi all, I am playing with linux container and using libvirt to manage linux container. I find I fail to attach volume to linux container via libvirt and I got the following error message: Failed to attach volume: data-111 to VM: lxc-111; org.libvirt.LibvirtException: unsupported configuration: Can't setup disk for non-block device. My question is that does libvirt support attaching volume to linux container? If it supports, what version should I use? Thanks, DuJun

1 0

[libvirt-users] Problems with pmsuspend/wakeup
by Alex 27 Jan '14

27 Jan '14

Hi, I've migrated a Windows7 vm from F17 to F20 and it appears to be working okay. Apparently when it's left idle for some period, it automatically goes into a pmsuspend state, and I'm unable to wake it. I've figured out the virsh dompmwakeup command, which then virsh shows it's running, but the vm is still unresponsive. It doesn't respond to ping and the display is just black when accessing it through virt-manager. Is there something I need to do in the guest for it to wake up properly? How can I just prevent it from ever suspending in the first place? Thanks, Alex

1 0

[libvirt-users] Libvirt support for VEB
by Padmanabhan Krishnan 24 Jan '14

24 Jan '14

Hello, I have a setup of virtual machines and wherein my virtual switch (OVS) takes care of switching locally and it uses the network for talking to VM's outside the server (like a VEB scenario I guess). I want Netlink messages to be sent to LLDPAD. I understand that i had to modify the XML files and start the VM. But, i see from the XML that it supports only VEPA, not VEB. But, irrespective of VEB or VEPA, those VM information should be known to the upstream switch through VDP. 802.1QBG seem to support this (both VEPA and VEB) http://www.ieee802.org/1/files/private/bg-drafts/d2/802-1qbg-d2-2.pdf But, for VEB, no net link messages are sent by libvirt. Why is that? From the XML example, I see that: <interface type=’direct’> <mac address=’d0:0f:d0:0f:02:01’/> <source dev=’eth2.20’ mode=’vepa’/> <source network=’default’/> <virtualport type=’802.1Qbg’> <parameters managerid=’12’ typeid=’0x123456’ typeidversion=’1’ instanceid=’09b00c53-8b5c-4eeb-8f00-d847aa05191b’ /> </virtualport> I tried different combinations by changing the interface type to bridge and and trying Qbg as in below, I find that it doesn't send a Netlink message to LLDPAD. There's no "mode=veb". </controller> <interface type='bridge'> <mac address='00:54:00:4e:46:04'/> <source bridge='xml_br'/> <virtualport type='802.1Qbg'> <parameters managerid='12' typeid='1193046' typeidversion='1' instanceid='09b00c53-8b5c-4eeb-8f00-d847aa05191b'/> </virtualport> <target dev='tap_xml'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> How do i get this to work? Is this a limitation? Thanks, KP

1 0

Re: [libvirt-users] PCI Passthrough
by The PowerTool 24 Jan '14

24 Jan '14

Oops! I blame Microsoft. I use Hotmail and am very, very unhappy that MS bought them out which leaves me stuck with Outlook, which sucks. I've always just hit reply in the past and it's worked. Now I'm going to have to be careful to make sure my replies go where I expect them. Thank you very much for the information. I was really hoping to consolidate systems but that apparently won't happen in the near future. So that means I'll be focusing my efforts on getting my Spacewalk server updated and then upgrading from F18 to F20 or 21. Yep, I was very aware of F18 dropping and thankful for the one brief delay. I'll be taking a look at it again once I upgrade to the current Fedora. If that doesn't work I'll wait and keep an eye on posts and when things look better probably get new hardware (which will likely be the requirement). Thanks, again! Date: Thu, 23 Jan 2014 11:37:02 +0200 From: laine(a)laine.org To: thepowertool_sc(a)hotmail.com Subject: Re: [libvirt-users] PCI Passthrough On 01/21/2014 05:32 PM, The PowerTool wrote: Laine, Thank you very much for your response. I took a look at the first link you provide (archlinux). Key items that caught my attention (in order): 1. "Intel IGDs won't work"--I have Intel integrated video 2. "NOTE: THIS IS EXPERIMENTAL SO IT MIGHT NOT WORK FOR YOU" (self-explanatory) One additional note: When I received the "permission denied" error I had the same thought as you. I was unaware of the issue you outlined with libvirt needing to be configured to run as root on some versions of Fedora. Still, as root I did successfully detach my video card... at least that's how it appeared given the monitor went no-signal and then displayed a strange pattern. The system wouldn't ping and failed to respond to ssh attempts. I had to reboot to recover. I tried a second experiment where I first started a ssh session and then detached (from the host). Going back to the 2nd system the ssh session stopped responding. Actually that's probably more of an indication that your kernel just doesn't properly handle having the primary video device disappear midstream. You may have different results if you connected two video cards to a system, and tried to passthrough the secondary (it still probably wouldn't work, but it would likely fail in a different way). That leads me to believe it's not fully baked, something critically fails, and it's not going to work for me at-least at my current levels. Alex Williamson gave a talk at this year's KVM Forum (in October) about the difficulties of making VGA passthrough work, and it was truly frightening; there are just too many strange, undocumented backdoors in the devices that are required by the drivers for proper operation. In my mind this whole area just has too great of a likelihood of total failure without possibility of making it work in a reasonable time frame. To answer your question: I'm running Fedora 18. F18 was definitely one of the releases that was broken wrt PCI passthrough requiring qemu to be run as root. I don't recall if the kernel guys ever fixed it in that version or not. I pestered them about it for months, then finally gave up. BTW, you know that F18 has just gone end-of-life, right? This means no more updates of any type, even security updates. You can actually upgrade your F18 machine to F19, and F19 to F20, using the "fedup" package (I haven't tried using fedup to go directly from F18 to F20, but I suppose you could look into it). *A lot* has changed in virtualization in the last year, and as a bonus, you'll be covered for security fixes for another year. Is there a place where I can follow updates and see PCI pass-through mature so I'll know when next to try? Well, you could try the qemu-devel mailing list, but it's pretty high traffic, and very few of the messages would be on this particular topic. That *is* the place where any discussion would take place, though. Thank you, again, for your help! BTW, it's best to keep all messages on the list rather than private replies. That way someone else with better information may reply (and people very often get busy and disappear for several days/weeks at a time, so it's better to not rely on a response from a single person)

1 0

[libvirt-users] Newbie question about network setup
by hubert depesz lubaczewski 23 Jan '14

23 Jan '14

Hi, I've read some docs, and have some ideas, but before I'll go any further, I'd like to get confirmation if I'm understanding it right. Let's assume that on my host I want to have 5 different guests, but they shouldn't be able to communicate with each other. Is the solution to it addition of 5 separate "networks" in libvirt, and then connecting each guest to its own "network"? Looks sensible, but perhaps I'm overlooking something. Best regards, depesz -- The best thing about modern society is how easy it is to avoid contact with it. http://depesz.com/

3 4

[libvirt-users] Using Java bindings to event callback
by Howie 23 Jan '14

23 Jan '14

Hi My test environment : CentOS 6.3 6.4 Ubuntu 13.10 For CentOS 6.4 libvirt-java-0.4.9-1.el6.noarch libvirt-python-0.10.2-29.el6.x86_64 libvirt-client-0.10.2-29.el6.x86_64 libvirt-0.10.2-29.el6.x86_64 I am try to use java bindings to event callback. int register = conn.domainEventRegisterAny(null, 0, cb); But always get the following error message: libvirt: Remote Driver error : adding cb to list exception caught:org.libvirt.LibvirtException: adding cb to list level:VIR_ERR_ERROR code:VIR_ERR_RPC domain:VIR_FROM_REMOTE hasConn:false hasDom:false hasNet:false message:adding cb to list str1:%s str2:adding cb to list str3:null int1:-1 int2:-1 By the way I also trace the mail list *[libvirt] [PATCH] Java bindings for domain events* (2008 Nov 07) *[libvirt] [PATCH 1/2] Java bindings for domain events**[libvirt] [PATCH 2/2] Java bindings for domain events* (2008 Nov 18) --> Reject patch*Re: [libvirt] [PATCH 1/2] Java bindings for domain events* (2008 Dec) —>No Result*[libvirt-users] Using Java bindings to event callback * (2010 Jul) —>No Result *[libvirt] [PATCH 0/2] Libvirt-java event handling (2011Jul)* —> I think most drivers don't support that. We have a custom driver for our hypervisor and it works. *[libvirt] [libvirt-java] [PATCH 00/12] event support* (2013 Jan) —> *Re: [libvirt] [libvirt-java] [PATCH 00/12] event support (2013 Mar)* --> No Result Any suggestions? Thanks, Howie

2 1

[libvirt-users] running LXC hello world example
by Jacob Everist 23 Jan '14

23 Jan '14

Hello, I am having difficulty getting any sort of LXC container running. I am trying to use the following tutorial to run the hello world example: https://www.berrange.com/posts/2011/09/27/getting-started-with-lxc-using-li… Here are the results of my running the tutorial: [root@terraria ~]# virsh list Id Name State ---------------------------------------------------- [root@terraria ~]# virsh uri lxc:/// [root@terraria ~]# cat helloworld.xml <domain type='lxc'> <name>helloworld</name> <memory>102400</memory> <os> <type>exe</type> <init>/bin/sh</init> </os> <devices> <console type='pty'/> </devices> </domain> [root@terraria ~]# virsh define helloworld.xml Domain helloworld defined from helloworld.xml [root@terraria ~]# virsh start helloworld error: Failed to start domain helloworld error: internal error guest failed to start: PATH=/bin:/sbin TERM=linux container=lxc-libvirt container_uuid=791640de-95a9-082c-7292-c55106bcdca9 LIBVIRT_LXC_UUID=791640de-95a9-082c-7292-c55106bcdca9 LIBVIRT_LXC_NAME=helloworld /bin/sh error receiving signal from container: Input/output error --- As you can see, I am getting an error. How do I go about diagnosing this error? This is a fresh install so the only thing I have been using this machine for is for LXC/libvirt testing. -- Jacob Everist cell: 310-425-9732 email: jacob.everist(a)gmail.com

3 4

[libvirt-users] LXC configuration for Systemd in the user namespace.
by Jan Olszak 23 Jan '14

23 Jan '14

Hi there! Does anyone have a config file for libvirt-LXC, that makes it possible to: 1. Use all namespaces (user namespace in particular) 2. Run systemd inside a container. Thanks! Jan

3 2

[libvirt-users] If it's possible for a third-party PCIe card to be shared by multiple containers
by WANG Cheng D 23 Jan '14

23 Jan '14

Dear all, I have a thirty-party PCIe card in my host which can work properly in native mode. I wonder if this card can be shared by multiple containers. As far as the network interface is concerned, too many efforts have been made for it. Two dedicated cgroup resource schedulers/subsystem(net_cls, net_prio) have been provided at the kernel level, and libvirt has also done a lot of work on virtual networking to enable network interface sharing between containers. As it's difficult for me to implement all these things that have been done for network interface, I should find other way to enable sharing of this card. Do you have any idea? Any comments will be high appreciated. Cheng Wang

2 6

[libvirt-users] How to change virtfs/9p/v9fs umask
by Javi Legido 23 Jan '14

23 Jan '14

Hi there. My question is regarding virtfs/9p/v9fs [1], not sure what's the appropiate name :) Basically I have a KVM + libvirt server sharing a directory with a guest in mapped mode. It works fine, but the only issue is with the file permissions of the files created by the guest inside the host: -They are 0700 for dirs and 0400 for files -The files belongs to the same user that runs the "qemu-system-x86_64" process, which is "libvirt-qemu" Questions: 1. There's a way to change the umask of this user (I'm almost sure that I already tried this and it didn't worked) or to change any setting to force the permissions to be wider? 2. It's acceptable to run the "qemu-system-x86_64" as root, and switch to "passthrough" mode? Below some details of my environment. ==== Host ==== $ uname -r 3.12-1-amd64 $ cat /etc/issue Debian GNU/Linux jessie/sid \n \l $ sudo dpkg -l | grep libvirt ii libvirt-bin 1.2.0-2 amd64 programs for the libvirt library ii libvirt0 1.2.0-2 amd64 library for interfacing with different virtualization systems ii python-libvirt 1.2.0-2 amd64 libvirt Python bindings $ ps ax | grep vm_name 23307 ? Sl 0:40 qemu-system-x86_64 -enable-kvm -name vm_name -S -machine pc-1.1,accel=kvm,usb=off -cpu core2duo,+lahf_lm,+pdcm,+xtpr,+cx16,+tm2,+est,+smx,+vmx,+ds_cpl,+dtes64,+pbe,+tm,+ht,+ss,+acpi,+ds -m 1024 -realtime mlock=off -smp 2,sockets=2,cores=1,threads=1 -uuid 2387f160-ffa2-3463-1aa3-771594779df3 -nographic -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/vm_name.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=/dev/vg/lv_vm_name,if=none,id=drive-virtio-disk0,format=raw,cache=none -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -fsdev local,security_model=mapped,id=fsdev-fs0,path=/srv/share -device virtio-9p-pci,id=fs0,fsdev=fsdev-fs0,mount_tag=virtfs_share,bus=pci.0,addr=0x3 -netdev tap,fd=28,id=hostnet0,vhost=on,vhostfd=29 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:68:90:d8,bus=pci.0,addr=0x4 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -device usb-tablet,id=input0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7 Guest XML snippet: <filesystem type='mount' accessmode='mapped'> <source dir='/srv/share/> <target dir='virtfs_share'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </filesystem> Thanks. Javier [1] http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/plain/Docume…

1 0

[libvirt-users] PCI Passthrough
by The PowerTool 21 Jan '14

21 Jan '14

I'm trying to pass-through my VGA card to a guest session. I found: http://www.linux-kvm.org/page/How_to_assign_devices_with_VT-d_in_KVM - which is very frustrating because there's no date on the documentation. I suspect it's old. It does clearly say that you must have VT-d support for pci pass-through. It then goes on to say "Some work towards allowing this ["software pass-through"] were done, but the code never made it into KVM". If this is old is there now support for PCI pass-through on hardware that doesn't support VT-d? I have a HP p7-1456c which has: Intel Core i5-3330 Processor (VT-x=yes, VT-d=yes) http://ark.intel.com/products/65509/Intel-Core-i5-3330-Processor-6M-Cache-u… on a MB: H-Joshua-H61-UATX (with specs that say *nothing* about virtualization) http://h10025.www1.hp.com/ewfrf/wc/document?cc=us&lc=en&docname=c03135925#N… and the H-Joshua-H61-UATX uses the Intel H61 Express Chipset (VT-d=No) http://ark.intel.com/products/52806/Intel-BD82H61-PCH?q=intel%20h61%20expre… On the KVM how to assign devices page it provides a way to verify IOMMU support on Intel: ]# dmesg | grep -e DMAR -e IOMMU [ 0.000000] ACPI: DMAR 00000000d8d29460 000B0 (v01 HPQOEM SLIC-CPC 00000001 INTL 00000001) [ 0.023074] dmar: IOMMU 0: reg_base_addr fed90000 ver 1:0 cap c0000020e60262 ecap f0101a [ 0.023078] dmar: IOMMU 1: reg_base_addr fed91000 ver 1:0 cap c9008020660262 ecap f0105a [ 0.023151] IOAPIC id 2 under DRHD base 0xfed91000 IOMMU 1 Does this mean I do have VT-d/IOMMU support??? I attempted to follow the basic instructions to pass through my VGA card: ]$ lspci -nn | grep VGA 00:02.0 VGA compatible controller [0300]: Intel Corporation Xeon E3-1200 v2/3rd Gen Core processor Graphics Controller [8086:0152] (rev 09) Then added to my domain definition: <hostdev mode='subsystem' type='pci' managed='yes'> <source> <address domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </source> <address type='pci' domain='0x0000' bus='0x00' slot='0x08' function='0x0'/> </hostdev> With that added code I consistently get "Connection to guest failed" messages and the guest fails to start. /var/log/libvirt/qemu is empty. No log. So my 1st question is can I do this given my hardware? If the answer is "yes" then this is where I'm stuck. Additionally, I tried: ]$ virsh nodedev-detach pci_0000_00_02_0 error: Failed to detach device pci_0000_00_02_0 error: Failed to add PCI device ID '8086 0152' to pci-stub: Permission denied My thinking was simply to verify if I could manually detach the device. I couldn't find a reference searching for this error. Any help would be greatly appreciated! Thank you!

2 1

[libvirt-users] Will virsh command setvcpus/vcpupin be supported by lxc driver in the future?
by WANG Cheng D 21 Jan '14

21 Jan '14

Dear member of libvirt team, I hope the lxc could be dynamically reconfigured, such as the number of vcpu or vcpu pinning. According to http://libvirt.org/hvsupport.html , at present, setvcpus(virDomainSetVcpus) and vcpupin (virDomainGetVcpuPinInfo) are not supported by lxc driver. I wonder if these commands will be supported by libvirt in the future? Best wishes, Cheng Wang

1 0

[libvirt-users] Yet another disk I/O performance issue
by Matteo Lanati 21 Jan '14

21 Jan '14

Hi all, I'm running a VM using libvirt+KVM and I have a disk performance issue. The host is the following: 4 cores Intel Xeon 5140(a)2.33 GHz, 16 GB of RAM, SATA HDD, OS Debian Wheezy, libvirt 0.9.12-11, QEMU-KVM 1.1.2+dfsg-2. The guest: 1 CPU, 2 GB RAM running Debian 7.0, image in compressed qcow2 format. When I try do run "dd if=/dev/zero of=io.test bs=32768k count=40" I get around 500 MB/s on bare metal, while only around 30 MB/s inside the VM. I'm trying to get something more out of the virtualization layer, I hope that there's room for improvement. I'm using virtio, I aready set cache='none' and io='native' in the domain definition. Both host and guest are using deadline as I/O scheduler. The VM uses an ext4 filesystem, while the image is saved on an ext3 disk. I mounted the host and guest filesystems specifying nodiratime and noatime options. Even if I convert the image to raw format nothing changes. I didn't mess with iotune nor blockio. Is there something that I overlooked or any other suggestion? Thanks in advance for your help. Matteo -- A refund for defective software might be nice, except it would bankrupt the entire software industry in the first year. Andrew S. Tanenbaum, Computer Networks, 2003, Introduction, page 14 Linux registered user #463400

3 3

[libvirt-users] Retry reboots in xmls files for libvirt
by Fernando Porro 21 Jan '14

21 Jan '14

Hi, I have a virtual machine defined by xml that start from pxe (network boot), my problem is that sometimes the dhcp server is not ready when the virtual machine try to boot. I need that the virtual machine keep asking for dhcp (network reboot) many times, until dhcp is ready and can start the virtual machine with a valid ip. How can I configure that in the xml file? BR //Fernando

2 3

[libvirt-users] Should domain be undefined after migration, or not?
by Brian Candler 21 Jan '14

21 Jan '14

I have been running a lab using libvirt under Debian Wheezy (libvirt 0.9.12.3-1, qemu-kvm 1.1.2+dfsg-6, virt-manager 0.9.1-4). There are a number of machines as front-end servers and an nbd shared storage backend. When I live-migrate a domain from one machine to another, normally I observe that afterwards the domain remains on the source host (but in "shutdown" state), as well as on the target host (in "running" state). But occasionally I have observed the domain being removed from the source host. The trouble with the domain remaining on the source host is that it is all too easy to double-click on the shutdown domain in virt-manager and start it there accidentally, in addition to the copy on the target host - resulting in disaster. (I know this can be prevented using the sanlock plugin) Furthermore, there could be stale copies of the XML lying around on some machines where the domain had been running at some point in the past. My question is, what is the expected behaviour? Is not removing the domain definition from the source host a bug? Has this been changed in a newer version of libvirt? Thanks, Brian.

3 3

[libvirt-users] jumbo frame
by Anton Gorlov 20 Jan '14

20 Jan '14

I would like to use jumbo frame for local interfaces, but I am not sure in which order to set it up. Should it be set on the physical interface first, then on the bridge and on the guest, or in another way? On some servers there are configurations with vlan on the bridge

2 1

[libvirt-users] How to configure MacVtap passthrough mode to SR-IOV VF?
by opendaylight 20 Jan '14

20 Jan '14

Hi guys. These days I'm doing research on SR-IOV & Live migration. As we all know there is big problem that SR-IOV & Live migration can not exist at the same time. I heard that KVM + SRIOV + MacVtap can solve this problem. So I want to try. My environment: Host: Dell R610, OS: RHEL 6.4 ( kernel 2.6.32) NIC: intel 82599 I follow a document from intel guy, it said that I should write xml like below: ============================ <network> <name>macvtap_passthrough’</name> <forward mode=’passthrough> <interface dev=’vf0’ /> <interface dev=’vf1’ /> .. .. </forward> </network> ============================ I guess here the vf0 & vf1 should be the VFs of Intel 82599. What make me confused is that we know we can not see the vf 0 & vf 1 directly from the host server with "ifconfig", that is to say, vf 0 & vf1 are not a real physical interface. I try #: virsh net-define macvtap_passthrough.xml #: virsh net-start macvtap_passthrough When I try to configure macvtap_passthrough for a VNIC of a VM, the virt-manager told : "Can't get vf 0, no such a device". When I try from virt-manager: add hardware--->network--->host device (macvtap_passthrough:pass_through network), I got error like : "Error adding device: xmlParseDoc() failed". I guess I can not write like this " <interface dev=’vf0’ />" in the xml. I try to change as below, but the result is same. ============================ <network> <name>macvtap_passthrough’</name> <forward mode=’passthrough> <pf dev=’p2p1’ /> // p2p1 is intel sriov physical nic </forward> </network> ============================ I don't know how to write correctly. Please help me. You can refer to intel document as below. Many thanks. ==========document from intel======================== Linux/KVM VM Live Migration (SRIOV And MacVtap) By Waseem Ahmad (waseem.ahmad(a)intel.com In this scenario we are using 3 machines:  Server 1: DNS/NFS – nfs.vtt.priv  Server 2: Hv1  Server3: Hv2 HV1 and HV2 are Linux/KVM machines. We will get to them in a minute however we first must address kvm and nfs. NFS:  Create a storage area, where both HV1, and HV2 can access it. There are several methods available for this (FCOE/ISCSI/NFS). For this write-up use nfs. Configure NFS:  Create a directory on nfs.vtt.priv where you want your storage to be. In this case used /home/vmstorage  Edit /etc/exports and add the following /home/vmstorage 172.0.0.0/1(rw,no_root_squash,sync)  Now to /etc/sysconfig/nfs Uncomment RPCNFSDARGS=”-N 4” This will disable nfs v4. If you don’t do this you will have issues with not being able to access the share from within VirtManager.  Add all three machines ip addresses to each machines /hosts file. MIGRATION WILL NOT WORK WITHOUT FULLY QUALIFIED DOMAIN NAMES. KVM: On both HV1, and HV2 servers:  Edit /etc/selinux/config SELINUX=disabled  Edit /etc/libvirt/qemu.conf Change security_driver=none  On HV1 and HV2 start Virtual Machine Manager  Double click on localhost(QEMU)  Then click on the storage tab at the top of the window that pops up  Down in the left hand corner is a box with a + sign in it, click on that. A new window will appear entitled Add a New Storage Pool  In the name box type vmstorage, then click on the type box and select netfs: Network Exported Directory, now click next.  You will see the last step of the network Storage Pool Dialog. The first option is the target path. This is the path where we will mount our storage on the local server. I have chosen to leave this alone.  The next option is format, leave this set on auto: Host name: nfs.vtt.priv Source path: /home/vmstorage  Click on finish  Repeat the above steps on HV2 server Create vms  On HV1 server go back to the connection details screen, (this is the one that showed up when you double clicked on localhost (qemu), and click on the storage tab again.  Click on vmstorage then click on new volume at the bottom.  A new dialog will appear entitled add a storage volume.  In the Name box type vm1  In the Max Capacity box type 20000  And do the same in the allocation box then click finish.  Now you can close the connection details box by click on the x in the corner.  Now click on the terminal in the corner, right underneath file, and type the name of our vm in the box that is entitled Name, vm1 choose how your installation media, probably local install media, and click forward. Click on use cdrom or dvd, and place a rh6.2 dvd in the dvd player on HV1. Select Linux, for the OS type, and Red Hat Enterprise Linux 6 for the version. Memory I chose to leave this at its default of 1024, and assigned 1 cpu to the guest. Click forward, select “select managed or other existing storage” and click the browse button. Click on vmstoarge, and select vm1.img then click forward. Then click on finish.  We will configure network after we make sure migration between the two servers works properly.  Now go ahead and install the operating system as you would normally. Create networks Create a file that looks like the following < there is no support for adding a macvtap interface from the gui as of yet, this is the only manual step in the process. Create a file named macvtap_passthrough.xml with the following contents. <network> <name>macvtap_passthrough’</name> <forward mode=’passthrough> <interface dev=’vf0’ /> <interface dev=’vf1’ /> .. .. </forward> </network> <network> <name>’macvtap_bridge’</name> <forward mode=’bridge’> <interface dev=’p3p1’/> </forward> </network> Save it and run the following commands:  virsh net-define macvtap_passthrough.xml  virsh net-start macvtap_passthrough Make sure all of your virtual interfaces that you used in the xml file are up. for i in $(ifconfig –a | awk ‘/eth/ {print $1}’); do ifconfig $i up; done Then double click on your vm and click on the big blue i On the next screen click on add hardware, then on network, then select Virtual network “macvtap_passthrough” Then click on finish. Start your vm and make sure that the macvtap was created on the host by doing ip link | grep ‘macvtap’ In the vm configure the ip information for the virtio adapter. In the virtual machine manager click on file, add connection. Then check the connect to remote host fill in the username and hostname, then click on connect Right click on your VM and select Migrate, select the host you want to migrate the machine to, then click on advanced options, check the address box, and type the ip address of the machine you want to migrate to, and click the migrate button.

2 1

[libvirt-users] How to update filterref of a vm on the fly?
by Gao Yongwei 18 Jan '14

18 Jan '14

Hello, I defined a vm with filterref like: <filterref filter='clean-traffic'> <parameter name='IP' value='192.168.1.161'/> </filterref> and now I need to add another IP parameter for this vm,is there any way to achieve this? thanks.

4 4

[libvirt-users] blockcopy, userspace iSCSI support?
by Scott Sullivan 18 Jan '14

18 Jan '14

Right now, on a virsh blockcopy, I know you can do something like this: # Connect DEST target iscsiadm -m node -p ${DESTINATION}:3260 -T ${VOLNAME} -o new iscsiadm -m node -p ${DESTINATION}:3260 -T ${VOLNAME} --login # Copy to connected iSCSI target virsh blockcopy ${DOMAIN} vda /dev/sdc --raw --bandwidth 300 However I have libiscsi compiled into my QEMU. So I can do this with the monitor directly (and avoid the need to call out to external iscsiadm): virsh qemu-monitor-command ${DOMAIN} '{"execute":"drive-mirror", "arguments": { "device": "drive-virtio-disk0", "target": "iscsi://${TARGET_IP}:3260/${DOMAIN}/1", "mode": "existing", "sync": "full", "on-source-error": "stop", "on-target-error": "stop" } }' Is there a way to use the libiscsi compiled into my QEMU with virsh blockcopy command? I haven't been able to find any examples of using blockcopy with iSCSI compiled into QEMU.

1 0

[libvirt-users] Ceph RBD locking for libvirt-managed LXC (someday) live migrations
by Joshua Dotson 17 Jan '14

17 Jan '14

Hi, I'm trying to build an active/active virtualization cluster using a Ceph RBD as backing for each libvirt-managed LXC. I know live migration for LXC isn't yet possible, but I'd like to build my infrastructure as if it were. That is, I would like to be sure proper locking is in place for live migrations to someday take place. In other words, I'm building things as if I were using KVM and live migration via libvirt. I've been looking at corosync, pacemaker, virtlock, sanlock, gfs2, ocfs2, glusterfs, cephfs, ceph RBD and other solutions. I admit that I'm quite confused. If oVirt, with its embedded GlusterFS and its planned self-hosted engine option, supported LXC, I'd use that. However the stars have not yet aligned for that. It seems that the most elegant and scalable approach may be to utilize Ceph's RBD with its native locking mechanism plus corosync and pacemaker for fencing, for a number of reasons out of scope for this email. *My question now is in regards to proper locking. Please see the following links. The libvirt hook looks good, but is there any expectation that this arrangement will become a patch to libvirt itself, as is suggested by the second link?* http://www.wogri.at/en/linux/ceph-libvirt-locking/ http://lists.ceph.com/pipermail/ceph-users-ceph.com/2013-August/003887.html Can anyone guide me on how to theoretically build a very "lock" safe 5-node active-active KVM cluster atop Ceph RBD? Must I use sanlock with its NFS or GFS2 with its performance bottlenecks? Does your answer work for LXC (sans the current state of live migration)? Thanks, Joshua -- Joshua Dotson Founder, Wrale Ltd

2 2

[libvirt-users] Live migration finish threshold
by Joaquim Barrera 17 Jan '14

17 Jan '14

Hello everyone, Can somebody point where I can find the code where libvirt makes the decision to complete a live migration? I mean, at some point syncronising the VM state, it has to decide that the delta left to be migrate is low enough to achieve downtime 0, so libvirt finishes the migration. This "low enough" must be defined somewhere in the code, but I am unable to find it. Thank you very much.

2 1

[libvirt-users] vnc port/listen address ignored when setting machine?
by hubert depesz lubaczewski 17 Jan '14

17 Jan '14

Hi, First of all, I hope it's not a big problem - I'm running on Debian, not Redhat. To my problem: I'm starting to learn virtualization, libvirt, and decided to create some test machine. I did it with: virt-install --name debian-test \ --os-type=linux \ --os-variant=debianwheezy \ --cdrom /media/media/software/iso/debian-testing-amd64-netinst-2014-01-16.iso \ --graphics vnc,listen=0.0.0.0,port=20001 \ --disk pool=default,format=raw,size=20 \ --ram 2048 \ --vcpus=2 \ --network bridge=virbr0 \ --hvm \ --virt-type=kvm Machine starts, but domdisplay shows: =# virsh domdisplay debian-test vnc://localhost:14101 When I tried setting it with --grpahics=vnc,...port=40001, I got it to listen on port 34101 (which is weird anyway, but at least I can change it). But whatever I do - I can't make it to listen on 0.0.0.0. I know I can use ssh port forwarding to get to this VNC, but I would very much prefer to be able to set VNC listen to 0.0.0.0 for at least some of my test domains. What am I doing wrong? Best regards, depesz -- The best thing about modern society is how easy it is to avoid contact with it. http://depesz.com/

2 3