- Users - libvirt List Archives

[libvirt-users] libvirt daemon and numad daemon
by Gao Yongwei 09 May '13

09 May '13

Hello all, I installed libvirt-0.10.2-18.el6.x86_64 ,is there any relationship between libvirtd and numad ? I found that when I started numad daemon , the vm can start in a shorter time, but when numad daemon stoped , vm could still start ,just with a longer start time. how does this work with the two daemons? thanks.

2 2

[libvirt-users] unable to do kerberos authentication
by Parker Schmitt 08 May '13

08 May '13

Hello, I am trying to do kerberos (sasl+gssapi) authentication for a hypervisor running libvirt. When I have valid kerberos credentials these errors end up in my logs. I have no idea what this all means. More info is in my bug report https://bugzilla.redhat.com/show_bug.cgi?id=958589 Thank you for your help. 2013-05-08 16:25:30.564+0000: 28934: error : virNetSASLSessionServerStart:533 : authentication failed: Failed to start SASL negotiation: -13 (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) 2013-05-08 16:25:30.564+0000: 28934: debug : remoteDispatchAuthSaslStart:2636 : RPC_SERVER_CLIENT_AUTH_FAIL: client=0x716391d0b0 auth=1 2013-05-08 16:25:30.564+0000: 28934: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x337e4000ba0 2013-05-08 16:25:30.564+0000: 28934: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x337e4000ba0 2013-05-08 16:25:30.564+0000: 28934: error : remoteDispatchAuthSaslStart:2651 : authentication failed: authentication failed 2013-05-08 16:25:30.564+0000: 28934: debug : virNetServerProgramSendError:151 : prog=536903814 ver=1 proc=68 type=1 serial=2 msg=0x716391e480 rerr=0x337f90d9c20 2013-05-08 16:25:30.564+0000: 28934: debug : virNetMessageEncodePayload:364 : Encode length as 180 2013-05-08 16:25:30.564+0000: 28934: debug : virNetServerClientSendMessageLocked:1287 : msg=0x716391e480 proc=68 len=180 offset=0 2013-05-08 16:25:30.564+0000: 28934: debug : virNetServerClientSendMessageLocked:1295 : RPC_SERVER_CLIENT_MSG_TX_QUEUE: client=0x716391d0b0 len=180 prog=536903814 vers=1 proc=68 type=1 status=1 serial=2 2013-05-08 16:25:30.564+0000: 28934: debug : virNetServerClientCalculateHandleMode:148 : tls=(nil) hs=-1, rx=0x71639257d0 tx=0x716391e480 2013-05-08 16:25:30.564+0000: 28934: debug : virNetServerClientCalculateHandleMode:183 : mode=3 2013-05-08 16:25:30.564+0000: 28934: debug : virEventPollUpdateHandle:147 : EVENT_POLL_UPDATE_HANDLE: watch=9 events=3 2013-05-08 16:25:30.564+0000: 28934: debug : virEventPollInterruptLocked:716 : Interrupting

1 0

[libvirt-users] migration job: unexpectedly failed
by Daniele 08 May '13

08 May '13

Hi, I am trying to run some test and analysis while performing a wide live migration of a VM between two different network location. I use libvirt and qemu-kvm as hypervisor on Linux. The live wide migration from A to B completes successfully, instead I can't achieve the reverse path, from B to A (and that is right what I am interested to). To perform the migration I run this command in virsh: *"migrate --live --verbose uno qemu+ssh://root@ip.address/system"* * * Even if dramatically slow (i guess due to some network bottleneck) the migration starts correctly, but it gets stuck at 96% and after some minute it returns this error: *"Migration: [ 96 %]error: operation failed: migration job: unexpectedly failed" *without further details. The libvirtd.log file in the source host says: *2013-05-07 11:01:18.739+0000: 9538: error : qemuMigrationUpdateJobStatus:945 : operation failed: migration job: unexpectedly failed* * * Apparently i can't find any clue of what is causing the error, do you have any idea/solution? * * (I'm not sure if this is the appropriate mailing-list, maybe it was better the devs list?) Thanks for your help Daniele

2 9

[libvirt-users] Java client error on Windows 7 64 bit for Libvirt on KVM
by george john 07 May '13

07 May '13

Hi, I need some help in building a Java client on Windows 7 64 bit plaftorm to manage a KVM using the libvirt APIs. Using the instructions at http://libvirt.org/java.html, i was able to build libvirt.jar. My understanding is that libvirt.jar uses JNA to call libvirt's native windows library. I tried using the libvirt dlls in the experimental Windows installation package mentioned in http://libvirt.org/windows.html at http://libvirt.org/sources/win32_experimental/Libvirt-0.8.8-0.exe but whenever I try to connect to my remote API, I get the below Java exception : Exception in thread "main" java.lang.UnsatisfiedLinkError: %1 is not a valid Win32 application. at com.sun.jna.Native.open(Native Method) at com.sun.jna.Native.open(Native.java:1718) at com.sun.jna.NativeLibrary.loadLibrary(NativeLibrary.java:210) at com.sun.jna.NativeLibrary.getInstance(NativeLibrary.java:322) at com.sun.jna.Library$Handler.<init>(Library.java:142) at com.sun.jna.Native.loadLibrary(Native.java:387) at com.sun.jna.Native.loadLibrary(Native.java:366) at org.libvirt.jna.Libvirt.<clinit>(Unknown Source) at org.libvirt.Library.<clinit>(Unknown Source) at org.libvirt.Connect.<init>(Unknown Source) at Main.main(Main.java:8) But when I try the same client code on a Windows XP 32 bit machine (with 32 bit JVM), I don't see this problem and the connection succeeds. So it looks like the problem is that I am not using 64 bit windows libvirt dlls. Is my assumption correct? Is there a Windows installer with 64 bit Libvirt dlls ? Or are the 64 bit version of DLLs published somewhere? I tried using Matthias Bolte's msys_setup script (I tried in 2 machines) and in both machines, I get the below error when I try to run compile_libxml2.sh as per instructions https://github.com/photron/msys_setup/blob/master/readme_libvirt.txt Last few lines before the error is : >>>>>>>>>>>>>>>>> make[5]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' make[4]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' Making install in tests make[4]: Entering directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[5]: Entering directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[5]: Nothing to be done for `install-exec-am'. test -z "/share/doc/libxml2-python-2.9.0/examples" || /bin/mkdir -p "/share/doc/ libxml2-python-2.9.0/examples" /bin/install -c -m 644 build.py attribs.py tst.py tstxpath.py xpathext.py push. py pushSAX.py pushSAXhtml.py error.py serialize.py validate.py tstURI.py cutnpas te.py xpathret.py xpath.py outbuf.py inbuf.py resolver.py regexp.py reader.py re ader2.py reader3.py reader4.py reader5.py reader6.py reader7.py reader8.py reade rnext.py walker.py nsdel.py ctxterror.py readererr.py relaxng.py schema.py threa d2.py sync.py tstLastError.py indexes.py dtdvalid.py tstmem.py '/share/doc/libxm l2-python-2.9.0/examples' /bin/install -c -m 644 validDTD.py validSchemas.py validRNG.py compareNodes.py xpathns.py xpathleak.py tst.xml valid.xml invalid.xml test.dtd '/share/doc/libxm l2-python-2.9.0/examples' make[5]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[4]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python/tests' make[3]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' make[2]: Leaving directory `/src/libxml2/libxml2-2.9.0-0/python' make[1]: Leaving directory `/src/libxml2/libxml2-2.9.0-0' + cp /python/Lib/site-packages/libxml2mod.dll /python/DLLs/libxml2mod.pyd cp: cannot stat `/python/Lib/site-packages/libxml2mod.dll': No such file or dire ctory >>>>>>>>>>>>>>>>>> Do you know how this error could be resolved? All help will be greatly appreciated. Thank you.

3 7

[libvirt-users] libvirt-snmp on Ubuntu
by george john 07 May '13

07 May '13

Hi, Are there packages of "libvirt-snmp" for Ubuntu? Or instructions to compile libvirt-snmp on Ubuntu? Looks like the instructions given at http://wiki.libvirt.org/page/Libvirt-snmp are for RedHat. Thank you, George

3 4

[libvirt-users] libvirt API reference disappeared from website
by Ulrich Hochholdinger 07 May '13

07 May '13

Hi, I think the API Reference for libvirt disappeared from libvirt.org: browsing to http://libvirt.org/html/libvirt-libvirt.html delivers no content. The content is still available via google cache http://webcache.googleusercontent.com/search?q=cache:libvirt.org/html/libvi… So, is this removed on purpose? Or is this some bluff from my browser (but I checked this from different sites with different browsers ;-/ )? Cheers, Ulli -- Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us. (calvin)

3 2

[libvirt-users] hyperv connection failing with libvirt 1.0.4 virsh.
by D e e p a k 07 May '13

07 May '13

Trying to use virsh for hyperv and getting this. virsh # connect hyperv://172.168.1.111:5985/?transport=http Enter username for 172.168.1.111 [administrator]: administrator Enter administrator's password for 172.168.1.111: 2013-04-29 10:36:48.690+0000: 13991: error : hypervDebugHandler:1444 : openwsman error: NULL response error: Failed to connect to the hypervisor error: internal error Transport error during enumeration: User, password or similar was not accepted (26) Using libvirt 1.0.4 from source code. What is going wrong in this hyperv connection ? Regards, Deepak

2 6

[libvirt-users] Location of 64 bit libvirt dlls (Windows)?
by george john 06 May '13

06 May '13

I have written a Java client (64 bit JVM) that uses libvirt APIs on a remote KVM for KVM management. Since the JVM is 64 bit, the client needs 64 bit libvirt dlls and I could not find them (I found 32 bit libvirt dlls on http://libvirt.org/windows.html) Could someone point to where I could find 64 bit libvirt dlls? Thank you, George

2 2

[libvirt-users] virtlockd, init script and kill signals
by Franky Van Liedekerke 06 May '13

06 May '13

Hi, I've read in the documentation that virtlockd uses SIGUSR1 to dump its state and then re-execs itself. Now I tried it and this seems to fail because virtlockd is being launched without a full path (when using the init script), thus re-exec fails with the error: error : virLockDaemonPreExecRestart:1092 : Unable to restart self: No such file or directory Changing in the init script the PROCESS variable to PROCESS=/usr/sbin/virtlockd fixes this. Also, concerning the init script: - HUP seems to crash the daemon, so maybe it's better to be replaced by SIGUSR1 or removed - path to process pid file (variable PIDFILE) needed to be changed to /var/run/$SERVICE.pid - the path to the config file needed to be changed (/etc/sysconfig/virtlockd) to contain VIRTLOCKD_ARGS="-f /etc/libvirt/qemu-lockd.conf" Hope this helps someone :-) Franky

1 1

[libvirt-users] Requested operation is not valid: domain is not running but exactly vm is running
by yue 05 May '13

05 May '13

hi,all requested operation is not valid: domain is not running but exactly vm is running when call getCPUStats,interfaceStats... system: centos6.3 libvirt-0.9.10-21.el6_3.7.x86_64 libvirt-python-0.9.10-21.el6_3.7.x86_64 thanks

1 0

[libvirt-users] sanlockd, virtlock and GFS2
by Franky Van Liedekerke 03 May '13

03 May '13

Hi, I'm trying to put in place a KVM cluster (using clvm and gfs2), but I'm running into some issues with either sanlock or virtlockd. All virtual machines are handled via the cluster (in /etc/cluser/cluster.conf) but I want some kind of locking to be in place as extra security measurement. Sanlock ======= At first I tried sanlock, but it seems if one node goes down unexpectedly, sanlock sometimes blocks everything on the other node. So I can't start any VM's there, so cluster failover is not working for the VM's. The locking dir for sanlock is on a shared dir (GFS2), so this might be the problem: sanlock recommends using a shared device (doing everything yourself) and don't recommend the locking dir to be on GFS2, but libvirt config suggest using a shared dir. Redhat even suggests that GFS2 is a good solution there, So: is there a hint on how to format/mount the GFS2 partition for sanlock usage? This thread (http://web.archiveorange.com/archive/v/fZfKniEdO4ZFyIhhNbzU ) recommends against GFS2+sanlock, but maybe using the "no_lock" gfs2 option might help? Any kind of advice? Virtlockd ========= Since sanlock was not working as expected, I tried virtlockd. This seems to be working well, but: live migration fails because the file on the shared disk (used for locking) is being locked by the original server running the VM. So when trying to do live migration, this fails and leaves the VM paused on the original server. Trying to migrate a paused server then works ok, but that's of course not live migration. So: is there a hint on how to format/mount the GFS2 partition for virtlock usage? Of course: since every VM is being started/stopped via the cluster, I could just leave out locking all together and trust on the cluster software ... Any insights/tips are greatly appreciated! Franky

2 6

[libvirt-users] domain disk io throttling
by Edoardo Comar 01 May '13

01 May '13

Hi Currently <blkiotune> in domain xml allows only to set cgroups weights blkio.weight or blkio.weight_device I see from https://www.kernel.org/doc/Documentation/cgroups/blkio-controller.txt that cgroups also allows throttling policies settable via blkio.throttle.read_bps_device - blkio.throttle.write_bps_device - blkio.throttle.read_iops_device - blkio.throttle.write_iops_device these AFAIK are not the ones set via <blkdeviotune> which need to be applied to individual virtual disks. are there any plans to allow libvirt to make use of the cgroup throttling? it looks to me it could make life simpler by assigning a bandwitdh limit to a domain without having to partition it among its multiple virtual disks. Assigning a limit to the domain is useful from a host resource management perspective, while having to dictate how guests use their individual disks is not, I think. -------------------------------------------------- regards, Edoardo Comar WebSphere Application Service Platform for Networks (ASPN) ecomar(a)uk.ibm.com +44 (0)1962 81 5576 IBM UK Ltd, Hursley Park, SO21 2JN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

1 0

[libvirt-users] Basic Network Connections
by Slater, Joseph 01 May '13

01 May '13

Hi, If I have these fragments in a domain definition, the guest will start with "eth0" assigned by dhcp to an address on my lan. Things seem to work according to the documentation I can find. <network> <name>direct-macvtap</name> <forward mode='bridge'> <interface dev='eth0' /> </forward> </network> <devices> <interface type='direct'> <mac address='00:15:17:A6:BC:C9' /> <source dev='eth0' mode='bridge' /> <model type='virtio' /> </interface> </devices> I don't understand the <network> part here. It doesn't seem to be documented. I inherited these pieces so I do not know why they are as they are. If, instead, I have the following, the guest comes up with no network interface at all (except lo). On the host, interfaces vnet0 and virbr0 exist and virbr0 is 192.168.122.1. <devices> <interface type='network'> <source network='default'/> </interface> </devices> Adding in <model type='virtio' /> makes it start with "eth0", but no address has been assigned. I can manually do that and then I can communicate with the host but it's kind of a pain to add the address and routing manually. Oddly enough, though, ping from host to guest works normally, but ping guest to host seems to succeed once then hang (with no timeout). It is not at all obvious to me how virtio magically creates eth0. Am I doing something wrong, here? And, if anyone could advise how to use openvswitch I'd appreciate it. I've seen adding <virtualport type='openvswitch/> might be enough, presumably with an appropriate name for the source network. Joe

3 3

[libvirt-users] Libvirt and Glusterfs
by Pierre-Gilles Mialon 30 Apr '13

30 Apr '13

Hi, On a Fedora 18, I try to launch a VM with QEMU-GlusterFS native integration. I have enable fedora-virt-preview repo, and gluster-alpha3 repo. Below the list of installed package : glusterfs-3.4.0-0.3.alpha3.fc18.x86_64 glusterfs-devel-3.4.0-0.3.alpha3.fc18.x86_64 glusterfs-fuse-3.4.0-0.3.alpha3.fc18.x86_64 glusterfs-server-3.4.0-0.3.alpha3.fc18.x86_64 ipxe-roms-qemu-20130103-2.git717279a.fc18.noarch libvirt-1.0.4-1.fc18.x86_64 libvirt-client-1.0.4-1.fc18.x86_64 libvirt-daemon-1.0.4-1.fc18.x86_64 libvirt-daemon-config-network-1.0.4-1.fc18.x86_64 libvirt-daemon-config-nwfilter-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-interface-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-libxl-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-lxc-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-network-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-nodedev-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-nwfilter-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-qemu-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-secret-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-storage-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-uml-1.0.4-1.fc18.x86_64 libvirt-daemon-driver-xen-1.0.4-1.fc18.x86_64 libvirt-python-1.0.4-1.fc18.x86_64 qemu-common-1.4.1-2.fc18.x86_64 qemu-img-1.4.1-2.fc18.x86_64 qemu-kvm-1.4.1-2.fc18.x86_64 qemu-system-arm-1.4.1-2.fc18.x86_64 qemu-system-x86-1.4.1-2.fc18.x86_64 I have recompiled Qemu with –enable-glusterfs . Here the content of my /etc/glusterfs/glusterd.vol volume management type mgmt/glusterd option working-directory /var/lib/glusterd option transport-type socket option transport.socket.nodelay on option transport.socket.keepalive-time 10 option transport.socket.keepalive-interval 2 option transport.socket.read-fail-log off option rpc-auth.ports.insecure yes option rpc-auth-allow-insecure on end-volume I have defined the following line in my domain.xml <disk type='network' device='disk'> <driver name='qemu' cache='none'/> <source protocol='gluster' name='gv1/test.img'> <host name='127.0.0.1' transport='tcp' /> </source> <target dev='vda' bus='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </disk> # virsh start test LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin QEMU_AUDIO_DRV=spice /usr/bin/qemu-kvm -name test -S -M pc-i440fx-1.4 -m 1024 -smp 1,sockets=1,cores=1,threads=1 -uuid 4c8686bc-9da9-c61d-cd85-8b2865ea4124 -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/test.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -boot order=dc,menu=on -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x4 -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 -netdev tap,fd=26,id=hostnet0,vhost=on,vhostfd=27 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:cf:d2:62,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -spice port=5900,addr=127.0.0.1,disable-ticketing,seamless-migration=on -vga qxl -global qxl-vga.ram_size=67108864 -global qxl-vga.vram_size=67108864 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6 char device redirected to /dev/pts/4 (label charserial0) qemu-system-x86_64: -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none: Gluster connection failed for server=127.0.0.1 port=24007 volume=gv1 image=test.img transport=tcp qemu-system-x86_64: -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none: could not open disk image gluster://127.0.0.1:24007/gv1/test.img: No data available 2013-04-30 10:39:44.466+0000: shutting down but launching qemu with commant line work great : # qemu-system-x86_64 -name test -M pc-i440fx-1.4 -m 1024 -smp 1 -drive file=gluster:// 127.0.0.1:24007/gv1/test.img,if=none,id=drive-virtio-disk0,cache=none-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 Am I missing something ? Regards, -- Pierre-Gilles Mialon

1 0

[libvirt-users] virt-install creates a snapshot as the volume backend
by Ahmed Ossama 29 Apr '13

29 Apr '13

Greetings All, I was running libvirt-0.9.10 on CentOS 6.3 and it was working perfectly until yesterday when I decided to update to 6.4, which upgraded libvirt-0.9.10 to libvirt-0.10.2. I have a storage pool of type volume group, upon upgrading to libvirt-0.10.2, the disk image gets created as a snapshot on the volume group not as a regular volume. Now every time I create a vm using virt-install on a vg, the lv gets created as a snapshot not a regular lv, as a result I get the following error when I run dmesg: device-mapper: snapshots: Invalidating snapshot: Unable to allocate exception. Buffer I/O error on device dm-5, logical block 128251 Buffer I/O error on device dm-5, logical block 256 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 257 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 258 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 259 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 260 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 261 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 262 lost page write due to I/O error on dm-5 Buffer I/O error on device dm-5, logical block 263 lost page write due to I/O error on dm-5 lost page write due to I/O error on dm-5 and the following on the domain's log file: block I/O error in device 'drive-virtio-disk0': Input/output error (5) # virt-install --name="ns1" --vcpus="2" --check-cpu --ram=512 --os-variant="rhel6" --network "bridge=br0" --disk "pool=vdisks,size=22,cache=writeback" --vnc --hvm --vnclisten="0.0.0.0" --cdrom="/mnt/ISOs/centos/x86_64/CentOS-6.3-x86_64-bin-DVD1.iso" --hvm # lvs | grep ns ns1.img vm_volumes swi-aos-- 4.00m [ns1.img_vorigin] 0.00 When I try to create a volume using virt-manager on the volume group, it gets created as a snapshot. But when I create a volume using virsh, it gets created correctly; virsh # vol-create-as vdisks test 23622320128 # lvs | grep test test vm_volumes -wi-a---- 22.00g If anyone came across this issue or can provide an advice, I will appreciate it so much. -- Best Regards, Ahmed Ossama

2 2

[libvirt-users] No route to host
by digvijay chauhan 27 Apr '13

27 Apr '13

Hello, I tried to migrate the virtual machine using kvm,but it is giving me the error, "LIBVIRT ERROR NO ROUTE TO HOST" .How can i solve it. regards, DIgvijaySingh

1 0

[libvirt-users] How to tell if a hypervisor connection has died?
by Guido Winkelmann 26 Apr '13

26 Apr '13

Hi, What's the best way to tell if a virConnect object is not good to use anymore? (For example because the libvirtd on the other side crashed/has been stopped or because of some network failure) When I try this, the first API call I do on a broken connection yields an error with error number 38 (VIR_ERR_SYSTEM_ERROR) and all subsequent calls yield an error number 1 (VIR_ERR_INTERNAL_ERROR). Both of those are really unhelpful and could mean just about anything... Guido

3 3

[libvirt-users] how to control usb read write perm
by yue 25 Apr '13

25 Apr '13

hi,all i have 2 questions. both is related to spice usb redirect. 1. if i can control RW perm of usb device which is producted via spice ? in order to control user's rw operation in guestVM . 2.if user have several usbs, and plug them at the same time when using spice client. if i can control which usb(s) can be accessed by user in guestVM? thanks

1 0

[libvirt-users] 答复: libvirt_lxc start problem when selinux enbale
by Huang,Chaochang 25 Apr '13

25 Apr '13

Sorry “There is avc error messages in dmesg ……” ――should be “There is no avc error……” 发件人: Huang,Chaochang 发送时间: 2013年4月25日 15:41 收件人: 'libvir-list(a)redhat.com'; 'libvirt-users(a)redhat.com' 主题: libvirt_lxc start problem when selinux enbale Hi，all： the problem came out when selinux was enforced in targeted+MCS I start lxc through virsh――“virsh -c lxc:/// start instance-00004bd6” 1. When selinux is Permissive，lxc start is ok The result of “Ps auxZ” is： system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 19218 0.0 0.0 47624 1244 ? Ss 15:26 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19219 0.3 0.0 19276 1532 ? Ss 15:26 0:00 /sbin/init system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19406 0.0 0.0 177444 1332 ? Sl 15:26 0:00 /sbin/rsyslogd -i /var/run/sysl system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19420 0.0 0.0 64120 1144 ? Ss 15:26 0:00 /usr/sbin/sshd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19427 0.0 0.0 22136 956 ? Ss 15:26 0:00 xinetd -stayalive -pidfile /var system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19434 0.0 0.0 64316 832 ? Ss 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19435 0.0 0.0 64316 600 ? S 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19450 0.0 0.0 82388 2392 ? Ss 15:26 0:00 sendmail: rejecting new message system_u:system_r:svirt_lxc_net_t:s0:c192,c392 51 19459 0.0 0.0 78116 2016 ? Ss 15:26 0:00 sendmail: Queue runner@01:00:00 system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19467 0.0 0.0 175528 3672 ? Ss 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 48 19470 0.0 0.0 175528 2204 ? S 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19475 0.0 0.0 117212 1348 ? Ss 15:26 0:00 crond system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19491 0.0 0.0 4108 600 pts/0 Ss+ 15:26 0:00 /sbin/mingetty /dev/tty1 We can get into the lxc through “ssh” 2. When selinux is Enforcing，lxc start bad Th result of “ps auxZ” is: system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 20624 0.0 0.0 47624 1244 ? Ss 15:29 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 20625 0.0 0.0 17172 1036 pts/0 Ss+ 15:29 0:00 /sbin/init Only /sbin/init process started, no else. This is the real problem There is avc error messages in dmesg、/var/log/messages、/var/log/secure, and the same with selinux is Permissive Can anybody give some hints? Here are some system information: Kernel version 3.3.4 Libvirt version 0.9.13 Lxc guest image Centos 6.3 Lxc xml info is:  <domain type='lxc'> <name>instance-00004bd6</name> <uuid>96eada0e-7ea0-4865-8271-3565811c8eb0</uuid> <memory unit='KiB'>524288</memory> <currentMemory unit='KiB'>524288</currentMemory> <vcpu placement='static'>1</vcpu> <os> <type arch='x86_64'>exe</type> <init>/sbin/init</init> <cmdline>console=ttyS0</cmdline> </os> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/home/stack/nova_state/instances/instance-00004bd6/rootfs'/> <target dir='/'/> </filesystem> <interface type='bridge'> <mac address='fa:16:3e:09:00:a2'/> <source bridge='br100'/> <filterref filter='nova-instance-instance-00004bd6-fa163e0900a2'> <parameter name='DHCPSERVER' value='10.0.0.1'/> <parameter name='IP' value='10.0.0.11'/> <parameter name='PROJMASK' value='255.255.254.0'/> <parameter name='PROJNET' value='10.0.0.0'/> </filterref> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> <seclabel type='static' model='selinux' relabel='yes'> <label>system_u:system_r:svirt_lxc_net_t:s0:c192,c392</label> </seclabel> </domain> Best Regard Huangchaochang

1 0

[libvirt-users] libvirt_lxc start problem when selinux enbale
by Huang,Chaochang 25 Apr '13

25 Apr '13

Hi，all： the problem came out when selinux was enforced in targeted+MCS I start lxc through virsh――“virsh -c lxc:/// start instance-00004bd6” 1. When selinux is Permissive，lxc start is ok The result of “Ps auxZ” is： system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 19218 0.0 0.0 47624 1244 ? Ss 15:26 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19219 0.3 0.0 19276 1532 ? Ss 15:26 0:00 /sbin/init system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19406 0.0 0.0 177444 1332 ? Sl 15:26 0:00 /sbin/rsyslogd -i /var/run/sysl system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19420 0.0 0.0 64120 1144 ? Ss 15:26 0:00 /usr/sbin/sshd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19427 0.0 0.0 22136 956 ? Ss 15:26 0:00 xinetd -stayalive -pidfile /var system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19434 0.0 0.0 64316 832 ? Ss 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19435 0.0 0.0 64316 600 ? S 15:26 0:00 /usr/sbin/saslauthd -m /var/run system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19450 0.0 0.0 82388 2392 ? Ss 15:26 0:00 sendmail: rejecting new message system_u:system_r:svirt_lxc_net_t:s0:c192,c392 51 19459 0.0 0.0 78116 2016 ? Ss 15:26 0:00 sendmail: Queue runner@01:00:00 system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19467 0.0 0.0 175528 3672 ? Ss 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 48 19470 0.0 0.0 175528 2204 ? S 15:26 0:00 /usr/sbin/httpd system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19475 0.0 0.0 117212 1348 ? Ss 15:26 0:00 crond system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 19491 0.0 0.0 4108 600 pts/0 Ss+ 15:26 0:00 /sbin/mingetty /dev/tty1 We can get into the lxc through “ssh” 2. When selinux is Enforcing，lxc start bad Th result of “ps auxZ” is: system_u:system_r:virtd_lxc_t:s0-s0:c0.c1023 root 20624 0.0 0.0 47624 1244 ? Ss 15:29 0:00 /usr/libexec/libvirt_lxc --name system_u:system_r:svirt_lxc_net_t:s0:c192,c392 root 20625 0.0 0.0 17172 1036 pts/0 Ss+ 15:29 0:00 /sbin/init Only /sbin/init process started, no else. This is the real problem There is avc error messages in dmesg、/var/log/messages、/var/log/secure, and the same with selinux is Permissive Can anybody give some hints? Here are some system information: Kernel version 3.3.4 Libvirt version 0.9.13 Lxc guest image Centos 6.3 Lxc xml info is:  <domain type='lxc'> <name>instance-00004bd6</name> <uuid>96eada0e-7ea0-4865-8271-3565811c8eb0</uuid> <memory unit='KiB'>524288</memory> <currentMemory unit='KiB'>524288</currentMemory> <vcpu placement='static'>1</vcpu> <os> <type arch='x86_64'>exe</type> <init>/sbin/init</init> <cmdline>console=ttyS0</cmdline> </os> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/home/stack/nova_state/instances/instance-00004bd6/rootfs'/> <target dir='/'/> </filesystem> <interface type='bridge'> <mac address='fa:16:3e:09:00:a2'/> <source bridge='br100'/> <filterref filter='nova-instance-instance-00004bd6-fa163e0900a2'> <parameter name='DHCPSERVER' value='10.0.0.1'/> <parameter name='IP' value='10.0.0.11'/> <parameter name='PROJMASK' value='255.255.254.0'/> <parameter name='PROJNET' value='10.0.0.0'/> </filterref> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> <seclabel type='static' model='selinux' relabel='yes'> <label>system_u:system_r:svirt_lxc_net_t:s0:c192,c392</label> </seclabel> </domain> Best Regard Huangchaochang

1 0

[libvirt-users] how to control usb read write perm
by yue 24 Apr '13

24 Apr '13

hi,all i have 2 questions. both is related to spice usb redirect. 1. if i can control RW perm of usb device which is producted via spice ? in order to control user's rw operation in guestVM . 2.if user have several usbs, and plug them at the same time when using spice client. if i can control which usb(s) can be accessed by user in guestVM? thanks

1 0

[libvirt-users] dnsmasq does not start
by Alexey Kardashevskiy 24 Apr '13

24 Apr '13

Hi! I am trying to run tap networking with libvirtd. My test system is Fedora18/ppc64, libvirt 1.0.4 (compiled from git and installed). On another system with Fedora17/ppc64 with the same settings, dnsmasq is running. All configs in /etc/libvirt/ are default and not changed, the only exception is /etc/libvirt/qemu/networks/default.xml which I copied from Fedora17/ppc64 setup. What does exactly force libvirtd to start dnsmasq? Some debug info: [root@vpl2 ~]# ps ax | egrep $dnsmasq\|libvirt$ 9021 ? Ssl 0:00 /usr/sbin/libvirtd 9271 pts/0 S+ 0:00 egrep --color=auto (dnsmasq|libvirt) [root@vpl2 ~]# [root@vpl2 ~]# cat /etc/libvirt/qemu/networks/default.xml <network> <name>default</name> <bridge name="virbr%d" /> <forward/> <ip address="192.168.122.1" netmask="255.255.255.0"> <dhcp> <range start="192.168.122.2" end="192.168.122.254" /> </dhcp> </ip> </network> [root@vpl2 ~]# [root@vpl2 ~]# service libvirtd restart Redirecting to /bin/systemctl restart libvirtd.service [root@vpl2 ~]# [root@vpl2 ~]# [root@vpl2 ~]# ps ax | egrep $dnsmasq\|libvirt$ 9365 ? Ssl 0:00 /usr/sbin/libvirtd 9507 pts/0 S+ 0:00 egrep --color=auto (dnsmasq|libvirt) [root@vpl2 ~]# [root@vpl2 ~]# ls -laR /var/log/libvirt/ /var/log/libvirt/: total 20 drwx------. 5 root root 4096 Apr 9 16:51 . drwxr-xr-x. 18 root root 4096 Apr 24 13:48 .. drwx------. 2 root root 4096 Apr 9 16:51 lxc drwx------. 2 root root 4096 Apr 24 17:22 qemu drwx------. 2 root root 4096 Apr 9 16:51 uml /var/log/libvirt/lxc: total 8 drwx------. 2 root root 4096 Apr 9 16:51 . drwx------. 5 root root 4096 Apr 9 16:51 .. /var/log/libvirt/qemu: total 8 drwx------. 2 root root 4096 Apr 24 17:22 . drwx------. 5 root root 4096 Apr 9 16:51 .. /var/log/libvirt/uml: total 8 drwx------. 2 root root 4096 Apr 9 16:51 . drwx------. 5 root root 4096 Apr 9 16:51 .. [root@vpl2 ~]# -- Alexey

2 1

[libvirt-users] how to limit each spice-client can only see its own usb device.
by yue 24 Apr '13

24 Apr '13

hi,all i use thin client to visit guestVM(throught spice), if i attach usb device to thin client, how to assure that this usb can be only accessed by the guestVM corresponding to thin client? thanks

2 1

[libvirt-users] Lack of ebtables rules when using nwfilters
by Maciej Gałkiewicz 23 Apr '13

23 Apr '13

Hi I am using libvirt (0.9.12) with openstack and xen. It looks like libvirt is not creating ebtables rules against arp spoofing etc. Here are my configs: VM definition: <domain type='xen'> <uuid>d49b777f-32f1-4093-ae47-a12efd0efd2c</uuid> <name>instance-00000168</name> <memory>2097152</memory> <os> <type>linux</type> <root>/dev/xvda</root> <kernel>/var/lib/nova/instances/instance-00000168/kernel</kernel> <cmdline>ro</cmdline> <initrd>/var/lib/nova/instances/instance-00000168/ramdisk</initrd> </os> <features> <acpi/> </features> <vcpu>2</vcpu> <devices> <disk type='file' device='disk'> <driver type='raw' cache='none'/> <source file='/var/lib/nova/instances/instance-00000168/disk'/> <target dev='sda' bus='scsi'/> </disk> <disk type='file'> <driver type='raw' cache='none'/> <source file='/var/lib/nova/instances/instance-00000168/disk.swap'/> <target dev='sdb' bus='scsi'/> </disk> <interface type='bridge'> <source bridge='br0'/> <mac address='fa:16:3e:1e:70:87'/> <filterref filter="nova-instance-instance-00000168-fa163e1e7087"> <parameter name="IP" value="10.255.0.114" /> <parameter name="DHCPSERVER" value="10.255.0.3" /> </filterref> </interface> <console type='pty'/> <graphics type='vnc' port='-1' autoport='yes' keymap='en-us' listen='127.0.0.1'/> </devices> </domain> # virsh nwfilter-dumpxml nova-instance-instance-00000168-fa163e1e7087 <filter name='nova-instance-instance-00000168-fa163e1e7087' chain='root'> <uuid>b6475525-5901-aeab-4ed0-dc0d7b545aea</uuid> <filterref filter='nova-base'/> </filter> # virsh nwfilter-dumpxml nova-base <filter name='nova-base' chain='root'> <uuid>197b7f7a-389c-bd6d-6b77-07b88d3d9138</uuid> <filterref filter='no-mac-spoofing'/> <filterref filter='no-ip-spoofing'/> <filterref filter='no-arp-spoofing'/> </filter> # ebtables -t nat -L Bridge table: nat Bridge chain: PREROUTING, entries: 0, policy: ACCEPT Bridge chain: OUTPUT, entries: 0, policy: ACCEPT Bridge chain: POSTROUTING, entries: 0, policy: ACCEPT # ebtables -L Bridge table: filter Bridge chain: INPUT, entries: 0, policy: ACCEPT Bridge chain: FORWARD, entries: 0, policy: ACCEPT Bridge chain: OUTPUT, entries: 0, policy: ACCEPT logs: 2013-04-23 10:47:37.438+0000: 30155: debug : virNWFilterDefineXML:16099 : conn=0x1331ff0, xmlDesc=<filter name='nova-instance-instance-00000167-fa163e4faae5' chain='roo t'><filterref filter='nova-base'/></filter> 2013-04-23 10:47:37.544+0000: 30155: debug : virNWFilterFree:15971 : nwfilter=0x7f18400bc2b0 2013-04-23 10:47:37.544+0000: 30155: debug : virUnrefNWFilter:1262 : unref nwfilter 0x7f18400bc2b0 nova-instance-instance-00000167-fa163e4faae5 1 2013-04-23 10:47:37.544+0000: 30155: debug : virReleaseNWFilter:1222 : release nwfilter 0x7f18400bc2b0 nova-instance-instance-00000167-fa163e4faae5 875ff1e5-fc4d-2fca-9 da2-f163f273ad6a 2013-04-23 10:47:37.544+0000: 30155: debug : virReleaseNWFilter:1229 : unref connection 0x1331ff0 2 regards Maciej Gałkiewicz

2 1

[libvirt-users] Create image from running domain
by Hongbin Lu 23 Apr '13

23 Apr '13

Hi. A short question. I want to know what is the proper steps to create an image from a running domain and use it as base image of another domains. The domain is with Qemu Hypervisor, persistent, and created based on Ubuntu Cloud image. Thank in advance Hongbin

3 2