- Users - libvirt List Archives

[libvirt-users] Updating an "interface" device has no effect on network filters
by Guido Winkelmann 10 Nov '12

10 Nov '12

Hi, I am trying to update the network filters on running guest machines (qemu backend) without having to restart the domain. Say I have a running domain "test" with this interface: <interface type='bridge'> <mac address='52:54:00:84:6d:6d'/> <source bridge='virbr1'/> <model type='virtio'/> <filterref filter='clean-traffic-with-v6'> <parameter name='IP' value='172.18.1.9'/> <parameter name='IPV6' value='fe80::5054:ff:fe84:6d6d'/> <parameter name='MAC' value='52:54:00:84:6d:6d'/> </filterref> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> Now I want that domain to be able to use an additional IP address for some reason, so I write a file uppdevice.xml with this content: <interface type='bridge'> <mac address='52:54:00:84:6d:6d'/> <source bridge='virbr1'/> <model type='virtio'/> <filterref filter='clean-traffic-with-v6'> <parameter name='IP' value='172.18.1.9'/> <parameter name='IP' value='172.18.1.10'/> <parameter name='IPV6' value='fe80::5054:ff:fe84:6d6d'/> <parameter name='MAC' value='52:54:00:84:6d:6d'/> </filterref> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> and run update-device test-cpu-restrict2 upddevice.xml in virsh. This appears to work without problems and produces no error messages (it prints "Device updated successfully"), except the ebtables script on the host machine does not get updated after that and consequently, the new IP address is not usable. Regards, Guido

1 0

[libvirt-users] Failed to access console after launching LXC through libvirt
by unicell 10 Nov '12

10 Nov '12

Hi, I'm trying to manage LXC instances through OpenStack, which use libvirt as a virtualization driver layer. After launching LXC instance, I simply could not attach to the console. virsh # list Id Name State ---------------------------------- 14366 instance-00000078 running virsh # console 14366 Connected to domain instance-00000078 Escape character is ^] And it keeps stuck here. Initially I thought it could be a cgroup device config issue, and tried to "echo ‘c 5:1 rwm' >/cgroup/devices/libvirt/lxc/instance-00000078/devices.allow“, to add /dev/console access right to the container. But it does not work, console stilll not working. Before the cgroup tweaking, devices.list are as follows [root@localhost libvirt]# cat /cgroup/devices/libvirt/lxc/instance-0000007a/devices.list c 1:3 rwm c 1:5 rwm c 1:7 rwm c 1:8 rwm c 1:9 rwm c 5:0 rwm c 5:2 rwm c 136:* rwm I'm not quite sure what kind of issue could possibly cause this console access issue. Cause I'm now using two different guest OS templates on two different host OSes. Following are some symptoms I observed. * (g) for container guest OS * (h) for host OS * NOTE: Ubuntu guest os are generated by lxc-create -t ubuntu, which is an Ubuntu 12.04 based lxc template. CentOS guest os are handcrafted by myself, taking reference of http://wiki.1tux.org/wiki/Lxc/Installation/Guest/Centos/6 1. Ubuntu (g) launched by lxc-start on Ubuntu 12.04 host, console works 2. Ubuntu (g) launched by OpenStack / libvirt on Ubuntu 12.04 host, console works 3. Ubuntu (g) launched by OpenStack / libvirt on CentOS 6.3 host, console NOT works 4. CentOS (g) launched by lxc-start on Ubuntu 12.04 host, console works 5. CentOS (g) launched by OpenStack / libvirt on Ubuntu12.04 host, console NOT works 6. CentOS (g) launched by OpenStack / libvirt on CentOS 6.3 host, console NOT works So somehow I feel it could be something related to LXC template rootfs, but Host OS do make a difference (2 vs. 3). lxc-start / libvirt also makes a difference (4 vs. 5), but that might be caused by cgroup setting. Could someone shed me some clues to further digging this issue? Thanks! -- Qiu Yu

3 8

[libvirt-users] A warning about "async message processing ."
by xuanmao_001 09 Nov '12

09 Nov '12

Hi, all: when I used virsh connect host like "virsh connect qemu+tcp://root@ip_address/system", I had a warning message about "warning: virNetClientIncomingEvent: 1660 : Something went wrong during async message processing" But I can even operated. Is there a reason can cause the warning? thanks. xuanmao_001

1 1

[libvirt-users] OpenStack+libvirt+lxc: lxcContainerGetSubtree:1199 : Failed to read /proc/mounts
by unicell 09 Nov '12

09 Nov '12

Hi, I'm running OpenStack on CentOS 6.3 to manage lxc instances. And running into series of problem relating libvirt and lxc interaction. For example, libvirt_lxc segfault ( https://bugzilla.redhat.com/show_bug.cgi?id=874549) which has an upstream fix. And another bugs such as fail to start when SELinux disabled. Finally, I decides to adopt libvirt 0.10.2, self compiled from libvirt-0.10.2-1.fc17.src.rpm. And now coming across following message when starting lxc container. lxcContainerGetSubtree:1199 : Failed to read /proc/mounts: No such file or directory Could it be something related to my container template setting? Or host setting? Or simply just another bug? I'm not a libvirt guy, so please, do shed me some lights on how to fix it. Thanks very much. libvirtd log with LIBVIRT_DEBUG=1 -- 2012-11-08 12:41:10.106+0000: 28362: info : libvirt version: 0.10.2, package: 1.el6 (Unknown, 2012-11-08-20:20:52, localhost) 2012-11-08 12:41:10.106+0000: 28362: error : virLXCControllerRun:1418 : error receiving signal from container: Input/output error 2012-11-08 12:41:10.222+0000: 24641: error : virNetDevSetOnline:536 : Cannot get interface flags on 'veth0': No such device 2012-11-08 12:41:10.227+0000: 24641: error : virNWFilterDHCPSnoopEnd:2131 : internal error ifname "veth0" not in key map 2012-11-08 12:41:10.229+0000: 24641: error : virNetDevGetIndex:653 : Unable to get index for interface veth0: No such device 2012-11-08 12:41:10.370+0000: 24640: error : virLXCProcessStop:701 : internal error Invalid PID -1 for container 2012-11-08 12:41:10.370+0000: 24640: error : virLXCProcessStop:701 : internal error Invalid PID -1 for container 2012-11-08 12:48:26.136+0000: 30706: info : libvirt version: 0.10.2, package: 1.el6 (Unknown, 2012-11-08-20:20:52, localhost) 2012-11-08 12:48:26.136+0000: 30706: error : virDomainObjParseNode:10094 : XML error: unexpected root element <domain>, expecting <domstatus> 2012-11-08 12:48:50.878+0000: 30695: error : virNetSocketReadWire:1176 : Cannot recv data: Connection reset by peer 2012-11-08 12:48:50.977+0000: 30698: error : virLXCProcessStart:1145 : internal error guest failed to start: PATH=/bin:/sbin TERM=linux container=lxc-libvirt container_uuid=ecc871cb-58be-4ae4-b216-a8a62b894a7f LIBVIRT_LXC_UUID=ecc871cb-58be-4ae4-b216-a8a62b894a7f LIBVIRT_LXC_NAME=instance-00000077 LIBVIRT_LXC_CMDLINE=console=ttyS0 /sbin/init 2012-11-08 12:48:50.863+0000: 1: info : libvirt version: 0.10.2, package: 1.el6 (Unknown, 2012-11-08-20:20:52, localhost) 2012-11-08 12:48:50.863+0000: 1: error : lxcContainerGetSubtree:1199 : Failed to read /proc/mounts: No such file or directory 2012-11-08 12:48:50.863+0000: 31202: info : libvirt version: 0.10.2, package: 1.el6 (Unknown, 2012-11-08-20:20:52, localhost) 2012-11-08 12:48:50.863+0000: 31202: error : virLXCControllerRun:1418 : error receiving signal from container: Input/output error 2012-11-08 12:48:50.979+0000: 30698: error : virNetDevSetOnline:536 : Cannot get interface flags on 'veth0': No such device 2012-11-08 12:48:50.984+0000: 30698: error : virNWFilterDHCPSnoopEnd:2131 : internal error ifname "veth0" not in key map 2012-11-08 12:48:50.986+0000: 30698: error : virNetDevGetIndex:653 : Unable to get index for interface veth0: No such device 2012-11-08 12:48:51.127+0000: 30695: error : virLXCProcessStop:701 : internal error Invalid PID -1 for container 2012-11-08 12:48:51.128+0000: 30695: error : virLXCProcessStop:701 : internal error Invalid PID -1 for container 2012-11-08 12:48:54.709+0000: 30695: error : virNetSocketReadWire:1184 : End of file while reading data: Input/output error 2012-11-08 12:48:54.710+0000: 30695: error : virNetSocketReadWire:1184 : End of file while reading data: Input/output error lxc log -- tail -f lxc/instance-00000077.log 2012-11-08 12:48:50.723+0000: starting up PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin LIBVIRT_DEBUG=3 LIBVIRT_LOG_OUTPUTS=3:stderr /usr/libexec/libvirt_lxc --name instance-00000077 --console 21 --security=none --handshake 24 --background --veth veth1 PATH=/bin:/sbin TERM=linux container=lxc-libvirt container_uuid=ecc871cb-58be-4ae4-b216-a8a62b894a7f LIBVIRT_LXC_UUID=ecc871cb-58be-4ae4-b216-a8a62b894a7f LIBVIRT_LXC_NAME=instance-00000077 LIBVIRT_LXC_CMDLINE=console=ttyS0 /sbin/init 2012-11-08 12:48:50.863+0000: 1: info : libvirt version: 0.10.2, package: 1.el6 (Unknown, 2012-11-08-20:20:52, localhost) 2012-11-08 12:48:50.863+0000: 1: error : lxcContainerGetSubtree:1199 : Failed to read /proc/mounts: No such file or directory 2012-11-08 12:48:50.863+0000: 31202: info : libvirt version: 0.10.2, package: 1.el6 (Unknown, 2012-11-08-20:20:52, localhost) 2012-11-08 12:48:50.863+0000: 31202: error : virLXCControllerRun:1418 : error receiving signal from container: Input/output error libvirt xml -- <domain type='lxc'> <name>instance-00000077</name> <uuid>ecc871cb-58be-4ae4-b216-a8a62b894a7f</uuid> <memory unit='KiB'>524288</memory> <currentMemory unit='KiB'>524288</currentMemory> <vcpu placement='static'>2</vcpu> <os> <type arch='x86_64'>exe</type> <init>/sbin/init</init> <cmdline>console=ttyS0</cmdline> </os> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/home/stack/nova_state/instances/instance-00000077/rootfs'/> <target dir='/'/> </filesystem> <interface type='bridge'> <mac address='fa:16:3e:40:ec:11'/> <source bridge='br100'/> <filterref filter='nova-instance-instance-00000077-fa163e40ec11'> <parameter name='DHCPSERVER' value='10.48.253.1'/> <parameter name='IP' value='10.48.253.2'/> <parameter name='PROJMASK' value='255.255.255.0'/> <parameter name='PROJNET' value='10.48.253.0'/> </filterref> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> </domain> cat /proc/mounts -- [root@localhost libvirt]# cat /proc/mounts rootfs / rootfs rw 0 0 proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0 sysfs /sys sysfs rw,nosuid,nodev,noexec,relatime 0 0 devtmpfs /dev devtmpfs rw,nosuid,relatime,size=32967000k,nr_inodes=8241750,mode=755 0 0 devpts /dev/pts devpts rw,relatime,gid=5,mode=620,ptmxmode=000 0 0 tmpfs /dev/shm tmpfs rw,nosuid,nodev,relatime 0 0 /dev/sda2 / ext4 rw,relatime,barrier=1,data=ordered 0 0 /proc/bus/usb /proc/bus/usb usbfs rw,relatime 0 0 /dev/mapper/xenvg-home /home ext4 rw,relatime,barrier=1,data=ordered 0 0 none /proc/sys/fs/binfmt_misc binfmt_misc rw,relatime 0 0 sunrpc /var/lib/nfs/rpc_pipefs rpc_pipefs rw,relatime 0 0 none /noah/tmp tmpfs rw,relatime,mode=755 0 0 cgroup /cgroup/cpuset cgroup rw,relatime,cpuset 0 0 cgroup /cgroup/cpu cgroup rw,relatime,cpu 0 0 cgroup /cgroup/cpuacct cgroup rw,relatime,cpuacct 0 0 cgroup /cgroup/memory cgroup rw,relatime,memory 0 0 cgroup /cgroup/devices cgroup rw,relatime,devices 0 0 cgroup /cgroup/freezer cgroup rw,relatime,freezer 0 0 cgroup /cgroup/net_cls cgroup rw,relatime,net_cls 0 0 cgroup /cgroup/blk_io cgroup rw,relatime,blkio 0 0 cgroup /cgroup/ns cgroup rw,relatime,ns 0 0 /dev/nbd15 /home/stack/nova_state/instances/instance-00000070/rootfs ext3 rw,relatime,errors=continue,user_xattr,acl,barrier=1,data=ordered 0 0 /dev/nbd14 /home/stack/nova_state/instances/instance-00000071/rootfs ext3 rw,relatime,errors=continue,user_xattr,acl,barrier=1,data=ordered 0 0 /dev/nbd13 /home/stack/nova_state/instances/instance-00000073/rootfs ext3 rw,relatime,errors=continue,user_xattr,acl,barrier=1,data=ordered 0 0 /dev/nbd12 /home/stack/nova_state/instances/instance-00000075/rootfs ext3 rw,relatime,errors=continue,user_xattr,acl,barrier=1,data=ordered 0 0 /dev/nbd11 /home/stack/nova_state/instances/instance-00000076/rootfs ext3 rw,relatime,errors=continue,barrier=1,data=ordered 0 0 /dev/nbd10 /home/stack/nova_state/instances/instance-00000077/rootfs ext3 rw,relatime,errors=continue,user_xattr,acl,barrier=1,data=ordered 0 0 -- Qiu Yu

2 2

[libvirt-users] Problems when filtering on icmpv6
by Guido Winkelmann 08 Nov '12

08 Nov '12

Hi, I am trying to prevent my qemu guest machines from sending IPv6 router advertisements over their network device. To that end, I have written this filter definition: <filter name='no-ipv6-router-advertisement' chain='root' priority='-690'> <rule action='drop' direction='out' priority='600'> <icmpv6 type='134'/> </rule> <rule action='drop' direction='out' priority='600'> <icmpv6 type='153'/> </rule> </filter> As soon as I try to use this filter, though, I get the following error (in virsh): error: Error while building firewall: Some rules could not be created for interface vnet0: Failure to execute command '$IPT -A libvirt-out -m physdev -- physdev-out vnet0 -g FP-vnet0' : 'ip6tables: No chain/target/match by that name.'. I am (trying to) use this filter by including it in here: <filter name='clean-traffic-with-v6' chain='root'> <filterref filter='no-mac-spoofing'/> <filterref filter='no-ip-spoofing'/> <filterref filter='no-dhcp-server'/> <rule action='accept' direction='out' priority='-650'> <mac protocolid='ipv4'/> </rule> <filterref filter='allow-incoming-ipv4'/> <filterref filter='no-ipv6-spoofing'/> <filterref filter='no-ipv6-router-advertisement'/> <filterref filter='no-dhcpv6-server'/> <rule action='accept' direction='out' priority='-600'> <mac protocolid='ipv6'/> </rule> <filterref filter='allow-incoming-ipv6'/> <filterref filter='no-arp-spoofing'/> <rule action='accept' direction='inout' priority='-500'> <mac protocolid='arp'/> </rule> <filterref filter='no-other-l2-traffic'/> <filterref filter='qemu-announce-self'/> </filter> Without the line <filterref filter='no-ipv6-router-advertisement'/> this filter works fine. When running a domain with this filter without the no-ipv6-router- advertisement filterref, my ip6tables look like this: # ip6tables-save # Generated by ip6tables-save v1.4.13 on Wed Nov 7 17:46:32 2012 *mangle :PREROUTING ACCEPT [146:12680] :INPUT ACCEPT [103:9704] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [172:14184] :POSTROUTING ACCEPT [172:14184] COMMIT # Completed on Wed Nov 7 17:46:32 2012 # Generated by ip6tables-save v1.4.13 on Wed Nov 7 17:46:32 2012 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :libvirt-host-in - [0:0] :libvirt-in - [0:0] :libvirt-in-post - [0:0] :libvirt-out - [0:0] -A INPUT -j libvirt-host-in -A FORWARD -j libvirt-in -A FORWARD -j libvirt-out -A FORWARD -j libvirt-in-post COMMIT # Completed on Wed Nov 7 17:46:32 2012 This is with libvirt 0.10.2. Does anybody have an idea what is happening here or how I could debug this further? Regards, Guido

1 1

[libvirt-users] libvirt with lxc: internal error The 'cpuacct', 'devices' & 'memory' cgroups controllers must be mounted
by unicell 08 Nov '12

08 Nov '12

Hi, I'm running OpenStack to manage LXC instance through libvirt. The same setting runs perfectly well on Ubuntu 12.04, while on CentOS 6u3, libvirt dumped following message when starting lxc instance. virsh -c lxc:/// start instance-00000032 error: internal error The 'cpuacct', 'devices' & 'memory' cgroups controllers must be mounted Really appreciated if someone could shed some lights. Seems to some libvirt / cgroup settings related. $ cat /proc/mounts .. none /cgroup cgroup rw,relatime,net_prio,perf_event,blkio,net_cls,freezer,devices,memory,cpuacct,cpu,ns,cpuset 0 0 .. $ chkconfig --list | grep cg cgconfig 0:off 1:off 2:off 3:off 4:off 5:off 6:off cgred 0:off 1:off 2:off 3:off 4:off 5:off 6:off xml definition -- <domain type="lxc"> <uuid>252a2dc5-452c-4e9c-a593-8c386c9f47e6</uuid> <name>instance-00000032</name> <memory>524288</memory> <vcpu>2</vcpu> <os> <type>exe</type> <cmdline>console=ttyS0</cmdline> <init>/sbin/init</init> </os> <clock offset="utc"/> <devices> <filesystem type="mount"> <source dir="/home/stack/nova_state/instances/instance-00000032/rootfs"/> <target dir="/"/> </filesystem> <interface type="bridge"> <mac address="fa:16:3e:73:67:54"/> <source bridge="br100"/> <filterref filter="nova-instance-instance-00000032-fa163e736754"> <parameter name="IP" value="10.0.0.8"/> <parameter name="DHCPSERVER" value="10.0.0.1"/> <parameter name="PROJNET" value="10.0.0.0"/> <parameter name="PROJMASK" value="255.255.255.0"/> </filterref> </interface> <console type="pty"/> </devices> </domain> Log message with LIBVIRT_DEBUG=1 if that is helpful. http://pastebin.com/LjZ6Euma -- Qiu Yu

2 1

[libvirt-users] help filtering spam
by Joe Linoff 07 Nov '12

07 Nov '12

Hi Folks: I am now receiving spam email every few minutes as result of signing up for this mailing list and it is starting to become a challenge. Has anyone had any success filtering it? Regards, Joe

2 1

[libvirt-users] No driver found during virt-install / kickstart
by Joe Linoff 07 Nov '12

07 Nov '12

Hi Folks: I am getting a "No driver found" dialogue when I try to build a guest using virt-install using a kickstart file. I am stuck. I am not sure how to fix or even debug this problem. Can anyone suggest a way forward? Here are the commands that I am using: $ # ================================================================ $ # Create the volume $ # ================================================================ virsh vol-create default /tools/vm/guests/guest1-vol.xml $ # ================================================================ $ # Create a mount for the virt-install --location option. $ # ================================================================ mkdir /opt/mnt mount -o loop,ro /tools/iso/CentOS-6.3-x86_64-bin-DVD1.iso /opt/mnt $ # ================================================================ $ # Create the kickstart file (used system-config-kickstart). $ # ================================================================ $ cat /export/tools/vm/guests/guest1-ks.cfg #platform=x86, AMD64, or Intel EM64T #version=DEVEL # Firewall configuration firewall --enabled --http --ssh # Install OS instead of upgrade install # Use CDROM installation media cdrom # Root password rootpw --iscrypted $1$DAzH1SN3$6yzxoq6oRrXNw.qMkJU0H1 # System authorization information auth --useshadow --passalgo=sha512 # Use graphical install graphical firstboot --disable # System keyboard keyboard us # System language lang en_US # SELinux configuration selinux --enforcing # Installation logging level logging --level=debug # System timezone timezone America/Los_Angeles # Network information network --bootproto=static --device=eth0 --gateway=192.168.2.1 --ip=192.168.2.68 --nameserver=192.168.2.71 --netmask=255.255.255.0 --onboot=on # System bootloader configuration bootloader --location=mbr # Clear the Master Boot Record zerombr # Partition clearing information clearpart --all %packages @base @client-mgmt-tools @compat-libraries @console-internet @emacs @hardware-monitoring @network-file-system-client @network-tools @performance @postgresql @security-tools @system-admin-tools @virtualization-client %end EOF $ # ================================================================ $ # Run virt-install $ # ================================================================ virt-install \ --accelerate \ --location "/opt/mnt" \ --disk device=disk,path="/var/lib/libvirt/images/guest1.img" \ --graphics vnc \ --name "guest1" \ --os-type linux \ --os-variant rhel6 \ --ram 2048 \ --vcpus 2,maxvcpus=2 \ -v \ -w bridge:br0 \ -x 'ks=nfs:192.168.2.140:/export/tools/vm/guests/guest1-ks.cfg ksdevice=eth0 ip=192.168.2.82 netmask=255.255.255.0 dns=192.168.2.71,8.8.8.8 gateway=192.168.2.1' Regards, Joe

1 0

[libvirt-users] Failed to bind socket to '/var/run/libvirt/libvirt-sock': Permission denied
by 何鑫 06 Nov '12

06 Nov '12

Hi all, When I start self-built libvirtd by "libvirtd -d -l -f libvirtd.conf", it shows that error : virNetSocketNewListenUNIX:346 : Failed to bind socket to '/var/run/libvirt/libvirt-sock': Permission denied I have removed some requested comments in libvirtd.conf. The key settings are shown as below: listen_tcp = 1 tcp_port = "16509" listen_addr = "0.0.0.0" unix_sock_group = "root" unix_sock_rw_perms = "0770" unix_sock_ro_perms = "0777" unix_sock_dir = "/var/run/libvirt" Is there any thing wrong? Need I start libvirtd by root? Thanks a lot! Best Regards!Corey

2 1

[libvirt-users] can not create "qcow2" format volume by Java library.
by zhijun liu 06 Nov '12

06 Nov '12

hi，all, when I use Java library to create volume ,specified format "qcow2"，but when I check it use qemu-img info ,it show format is "raw".。 I think it a bug,can you fix it .. thanks very much. the java library version：0.4.8 libvirt version：0.9.8

3 2

[libvirt-users] re-create disk image file
by Joe Linoff 06 Nov '12

06 Nov '12

Hi Everybody: I am curious about how to re-create a disk image file from a running guest when the original disk image file is accidentally deleted. This came up recently during a test scenario but I couldn't figure out how to do it. Thanks, Joe

3 9

[libvirt-users] is this mailing list active? i am seeing low activity and am receiving spam
by Joe Linoff 06 Nov '12

06 Nov '12

Hi Folks: Is this mailing list active? It seems to have pretty low activity and I have received several spam messages since signing up. Regards, Joe

2 4

[libvirt-users] CPU Mode= Host passthrough
by Michael Beham 06 Nov '12

06 Nov '12

Hi, I´m doing some research on Nested Virtualization with KVM and Xen. My cpu on bare-metal system is a Opteron_G4 --> (AMD Opteron 4280). qemu-version 1.0; libvirt 0.9.12 For nesting KVM in KVM I´m adding the <cpu mode='host-passthrough'/> command to the XML-File of the VM on Layer 0. So I´m able to install KVM in KVM and create nested guests at Layer 2. L2 --> Nested VM L1 --> KVM / XEN L0 --> KVM If i try the same with installing Xen in the VM on Layer 1 Xen don´t boot and I get following error: Panic on CPU 0: GENERAL PROTECTION FAULT [error_code=0000] If I remove <cpu mode='host-passthrough'/> command from the VM´s XML Xen boot is successful and Nesting Xen in KVM works! May this problem depends on the following problem --> https://bugzilla.redhat.com/show_bug.cgi?id=804224

1 0

[libvirt-users] virsh vol-create-as failing on NFS automount for chmod (dynamic_ownership = 0)
by Joe Linoff 05 Nov '12

05 Nov '12

Hi Everyone: I am trying to create a volume using the vol-create-as command but it fails with an "Operation not permitted" error. It appears to be caused by an attempt to run chown on an NFS mounted file system but I have set dynamic_ownership to 0 in /etc/qemu.conf. Is it possible to disable the chown operation? If not, is there a guide that describes how to create storage pools on NFS filers? I have read http://libvirt.org/storage.html but there was no discussion of to work around this problem. Any help would be greatly appreciated. Here is the command and error message: $ virsh vol-create-as default webtst 10G error: Failed to create vol webtst error: cannot create path '/var/lib/libvirt/images/webtst': Operation not permitted The /var/lib/libvirt/images is linked to a common filer: /shared/vm/images. The permissions on the directory are 0777. When I looked at tail /var/log/libvirt/libvirtd.log it showed that the problem was occurring because a chown command: 2012-11-05 02:55:44.841+0000: 26384: info : libvirt version: 0.9.10, package: 21.el6_3.5 (CentOS BuildSystem <http://bugs.centos.org>, 2012-10-11-13:57:12, c6b9.bsys.dev.centos.org) 2012-11-05 02:55:44.841+0000: 26384: error : virFileOpenForceOwnerMode:796 : cannot chown '/var/lib/libvirt/images/webtst' to (0, 0): Operation not permitted 2012-11-05 02:55:44.841+0000: 26384: error : virStorageBackendCreateRaw:401 : cannot create path '/var/lib/libvirt/images/webtst': Operation not permitted Regards, Joe

1 0

[libvirt-users] error: Unable to add port vnet1 to OVS bridge ovsbr: Operation not permitted
by Radhika Niranjan 03 Nov '12

03 Nov '12

Hi, > > I am using libvirt version 0.9.13 with Ubuntu 12.10 > > When I try to start a VM with an openvswitch bridge interface I get the > error: > > error: Failed to start domain kvm113-2 > error: Unable to add port vnet1 to OVS bridge ovsbr: Operation not > permitted > > > Here is my bridge configuration: > <interface type='bridge'> > <mac address='52:54:00:c7:db:d2'/> > <source bridge='ovsbr'/> > <virtualport type='openvswitch'> > <parameters interfaceid='40e21558-217c-d8ef-c9a9-5275fa4b4a46'/> > </virtualport> > <model type='virtio'/> > <address type='pci' domain='0x0000' bus='0x00' slot='0x05' > function='0x0'/> > </interface> > > > This configuration previously worked fine. > > Request your help and insights. > > WIth best regards > Radhika >

1 1

[libvirt-users] hotplug
by Douglas Russell 03 Nov '12

03 Nov '12

Another separate thread for a slightly separate issue. For some reason, hotplugging disks does not work for me. I built my guest with ubuntu's vmbuilder. It's Precise, virtual. I have acpiphp in my /etc/modules file: $ lsmod Module Size Used by psmouse 97443 0 serio_raw 13211 0 virtio_balloon 13108 0 acpiphp 24231 0 floppy 70365 0 hotplug_pci seems to be compiled into the kernel: $ grep HOTPLUG_PCI /boot/config-3.2.0-32-virtual CONFIG_HOTPLUG_PCI_PCIE=y CONFIG_HOTPLUG_PCI=y CONFIG_HOTPLUG_PCI_FAKE=m CONFIG_HOTPLUG_PCI_ACPI=m CONFIG_HOTPLUG_PCI_ACPI_IBM=m CONFIG_HOTPLUG_PCI_CPCI=y CONFIG_HOTPLUG_PCI_CPCI_ZT5550=m CONFIG_HOTPLUG_PCI_CPCI_GENERIC=m CONFIG_HOTPLUG_PCI_SHPC=m But when I attach a disk, absolutely nothing happens in the guest. No messages in the logs, no change to /proc/partitions, no new device nodes. When I reboot, the disk appears. Any ideas? Thanks, Douglas

2 2

Re: [libvirt-users] error : virPidFileAcquirePath:345 : Failed to acquire pid file '/home/corey/.libvirt/libvirtd.pid': Resource temporarily unavailable
by Gao Yongwei 02 Nov '12

02 Nov '12

2012/11/1 何鑫 <wherethriving(a)hotmail.com> > I have checked that I removed all distro things, ran self-built virsh, > libvirtd. To make sure, I use absolute paths for running. Also I will check > process status in time. This is "ps" shown: > 2996 1 3 08:48 ? 00:00:00 /usr/local/libvirt/sbin/libvirtd -d > > Is there some thing wrong? I can't search "libvirt-sock" after runing it. > can you see any tips in libvirtd --help ? is there a default sock path in the help content? > >

3 2

[libvirt-users] build error on CentOS 5
by Ben Clay 02 Nov '12

02 Nov '12

I'm getting the following error when building libvirt 10.2 from source in CentOS 5: CC libvirt_util_la-processinfo.lo util/processinfo.c: In function 'virProcessInfoGetAffinity': util/processinfo.c:164: error: invalid operands to binary | The line in question is: 162 for (i = 0 ; i < maxcpu ; i++) 163 if (CPU_ISSET(i, &mask)) 164 VIR_USE_CPU(map, i); Where VIR_USE_CPU is defined as the following in libvirt.h: #define VIR_USE_CPU(cpumap,cpu) (cpumap[(cpu)/8] |= (1<<((cpu)%8))) I have glibc 2.5 installed, which is why CPU_ALLOC is undefined (added in 2.7). I'm also using a custom 2.6.32 kernel. I can provide configure output and any additional system details if necessary. Has anyone else seen this? Ben Clay rbclay(a)ncsu.edu

2 2

[libvirt-users] numa topology within domain XML
by Geert Geurts 02 Nov '12

02 Nov '12

Hello all, I'm trying to setup a NUMA topology identical as the machine which hosts the qemu-kvm VirtualMachine. numactl -H on the host: available: 8 nodes (0-7) node 0 cpus: 0 1 2 3 4 5 node 0 size: 8189 MB node 0 free: 7581 MB node 1 cpus: 6 7 8 9 10 11 node 1 size: 8192 MB node 1 free: 7061 MB node 2 cpus: 12 13 14 15 16 17 node 2 size: 8192 MB node 2 free: 6644 MB node 3 cpus: 18 19 20 21 22 23 node 3 size: 8192 MB node 3 free: 7747 MB node 4 cpus: 24 25 26 27 28 29 node 4 size: 8192 MB node 4 free: 7388 MB node 5 cpus: 30 31 32 33 34 35 node 5 size: 8192 MB node 5 free: 7593 MB node 6 cpus: 36 37 38 39 40 41 node 6 size: 8192 MB node 6 free: 3848 MB node 7 cpus: 42 43 44 45 46 47 node 7 size: 8192 MB node 7 free: 7502 MB node distances: node 0 1 2 3 4 5 6 7 0: 10 16 16 22 16 22 16 22 1: 16 10 22 16 22 16 22 16 2: 16 22 10 16 16 22 16 22 3: 22 16 16 10 22 16 22 16 4: 16 22 16 22 10 16 16 22 5: 22 16 22 16 16 10 22 16 6: 16 22 16 22 16 22 10 16 7: 22 16 22 16 22 16 16 10 I would like to use 2 numanodes for one VM but somehow the virsh edit DOMAIN command doesn't apply the changes I make... I tried specifying the numa topology within the <topology> sub-section of the <cpu> section as in: <cpu mode='custom' match='exact'> <model fallback='allow'>Opteron_G4</model> <vendor>AMD</vendor> <topology sockets='1' cores='6' threads='2'> <cells num='2'> <cell id='0'> <cpus num='6'> <cpu id='0'/> <cpu id='1'/> <cpu id='2'/> <cpu id='3'/> <cpu id='4'/> <cpu id='5'/> </cpus> </cell> <cell id='1'> <cpus num='6'> <cpu id='6'/> <cpu id='7'/> <cpu id='8'/> <cpu id='9'/> <cpu id='10'/> <cpu id='11'/> </cpus> </cell> </cells> </topology> <feature policy='require' name='nodeid_msr'/> <feature policy='require' name='wdt'/> <feature policy='require' name='skinit'/> <feature policy='require' name='ibs'/> <feature policy='require' name='osvw'/> <feature policy='require' name='cr8legacy'/> <feature policy='require' name='extapic'/> <feature policy='require' name='cmp_legacy'/> <feature policy='require' name='fxsr_opt'/> <feature policy='require' name='mmxext'/> <feature policy='require' name='osxsave'/> <feature policy='require' name='monitor'/> <feature policy='require' name='ht'/> <feature policy='require' name='vme'/> </cpu> I tried specifying each numa cell using a <numa></numa> section as in: <numa> <cell cpus='0-5' memory='7596032'/> <cell cpus='6-11' memory='7596032'/> </numa> In both situation virsh says it successfully applied the edit, but when I edit it again right after that the changes have been removed and the numa topology in the VM is one node with all cores. Could someone please tell me what I'm doing wrong here? Oooh, by the way, I'm using libvirt 0.10.2-0rc2 and qemu-kvm-0.12.1.2-2.295.el6_3.2 on a Scientific linux 6.2 machine. Thanks! Best regards, Geert Geurts

1 0

Re: [libvirt-users] libvirt-users Digest, Vol 34, Issue 35
by Gao Yongwei 01 Nov '12

01 Nov '12

2012/10/31 Chandana De Silva <chandana(a)desilva.id.au> > You _can_ do NAT. > > Set up a different libvirt network on each machine, like this; > 10.128.80.65 will have a libvirt network 192.168.65.0/24 > 10.128.80.66 will have a libvirt network 192.168.66.0/24 > > Set up each of these networks as routed networks. > > Now set up routing/iptables rules on each host to send traffic to each > other, and NAT into the internal routed network > > On 31/10/12 01:46, libvirt-users-request(a)redhat.**com<libvirt-users-request(a)redhat.com>wrote: > >> Message: 1 >> Date: Tue, 30 Oct 2012 07:10:55 +0000 >> From: ??<zhang_zhang(a)live.com> >> To:<libvirt-users(a)redhat.com> >> Subject: [libvirt-users] Can VMs on different machines communicate >> with each other without IP? >> Message-ID:<BLU172-**W4666B32A6C9C8E75734C67FC620(a)**phx.gbl> >> Content-Type: text/plain; charset="gb2312" >> >> >> Dear all, >> I confront a somehow strange situation: >> I have two machines configured with ip 10.128.80.65 and >> 10.128.80.66 respectively. Each has several VMs running on it. The problem >> is that I have no more ip ( such as 10.128.80.67...) to allocate to VMs, >> but VMs need to communicate with each other even when they are on different >> machines. >> Two network options exist: NAT and bridge. >> 1) NAT >> But VMs on different machine cannot communicate with each other. >> 2)bridge >> But there is no more ip for vm to be bridged to host machine. >> Is there any other way to work around this problem? >> >> >> many thanks! >> > > you can custom your iptable rules to solve it,i've noticed that you've got a method which from my blog,good luck!

1 0

[libvirt-users] libvirt python api error
by 宣铭艺 01 Nov '12

01 Nov '12

I use the code below: import libvirt auth = [[libvirt.VIR_CRED_AUTHNAME,libvirt.VIR_CRED_NOECHOPROMPT],'root',None] conn = libvirt.openAuth("qemu:///system",auth,0) with open("/root/cflinux.xml") as f: xml=f.read() domain = conn.defineXML(xml) domain.createWithFlags(0) and report the error: libvir: Security Labeling error : internal error cannot load AppArmor profile 'libvirt-f0655289-318d-4aa7-b87a-6ce7cdead4ee' Traceback (most recent call last): File "a.py", line 7, in <module> domain.createWithFlags(0) File "/usr/lib/python2.7/dist-packages/libvirt.py", line 581, in createWithFlags if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', dom=self) libvirt.libvirtError: internal error cannot load AppArmor profile 'libvirt-f0655289-318d-4aa7-b87a-6ce7cdead4ee' who can help me fix the error?What may cause the error? Thanks. -- 樱宝宝: http://www.xuanmingyi.com

3 2

[libvirt-users] SCSI/IDE Devices in Guest
by Douglas Russell 01 Nov '12

01 Nov '12

I'm experimenting with how to attach storage to a guest virtual machine (I sent another message to th elist about that as it's slightly different) Looking in the XML files for my virtual machine, I see this: <disk type='file' device='disk'> <driver name='qemu' type='qcow2'/> <source file='/vm/myvm/tmpeuiVc9.qcow2'/> <target dev='hda' bus='ide'/> <address type='drive' controller='0' bus='0' unit='0'/> </disk> However, /dev/hda is not a device in the guest. It is /dev/sda. It's not really a problem in it's own right, but it's one of several connected things which don't make sense. Is there some explanation for this? I believe this is linked to some weirdness when I attach some extra storage like so: virsh attach-disk myvm /dev/lvm-group1/mystorage sdb --driver qemu --persistent This adds the following stanza: <disk type='block' device='disk'> <driver name='qemu' type='raw'/> <source dev='/dev/lvm-group1/mystorage'/> <target dev='sdb' bus='scsi'/> <address type='drive' controller='0' bus='0' unit='1'/> </disk> Looks about right. In the guest though, it pushes /dev/sda (root and swap are here on sda1 and sda2) upto /dev/sdb (sdb1 and sdb2). Somehow it still boots correctly despite fstab referrencing /dev/sda1 and /dev/sda2 for / and swap. The new /dev/sda is this storage I tried to add as sdb. What could be causing this? Thanks, Douglas

2 2

Re: [libvirt-users] error : virPidFileAcquirePath:345 : Failed to acquire pid file '/home/corey/.libvirt/libvirtd.pid': Resource temporarily unavailable
by 何鑫 01 Nov '12

01 Nov '12

I have checked that I removed all distro things, ran self-built virsh, libvirtd. To make sure, I use absolute paths for running. Also I will check process status in time. This is "ps" shown: 2996 1 3 08:48 ? 00:00:00 /usr/local/libvirt/sbin/libvirtd -d Is there some thing wrong? I can't search "libvirt-sock" after runing it. Sorry for top-posting. Thanks a lot! > Date: Wed, 31 Oct 2012 10:25:37 -0600 > From: eblake(a)redhat.com > To: wherethriving(a)hotmail.com > Subject: Re: [libvirt-users] error : virPidFileAcquirePath:345 : Failed to acquire pid file '/home/corey/.libvirt/libvirtd.pid': Resource temporarily unavailable > > On 10/31/2012 10:00 AM, 何鑫 wrote: > > Actually I make sure that I build libvirt, using "./configure --prefix="/usr/local/libvrt"". I have checked that all related files are under the directory-"/usr/local/libvirt", additionally, libvirtd's path is "/usr/local/libvirt/sbin/libvirtd". I am confused why I can't search libvirt-sock in my disk after starting libvirtd. > > Could you please give me some advises? > > Thanks a lot! > > Note that '--prefix=/usr/local/libvrt' is a typo. Are you sure you are > installing things where you think you are? Also note that > /usr/local/libvirt is NOT where your distro installed things, so if you > are using your distro's virsh, it won't connect to your self-built > libvirtd. And have you double-checked that you are running your > self-built libvirtd? > > Finally, you are STILL top-posting, and STILL sending mail to just me > instead of the list. It's making it hard to help you when you can't > follow our requests, and for others that might be following this thread > in the archives in the future to learn whatever ends up being your final > solution. > > -- > Eric Blake eblake(a)redhat.com +1-919-301-3266 > Libvirt virtualization library http://libvirt.org >

1 0

[libvirt-users] Multicast with KVM NAT networking
by james pedia 01 Nov '12

01 Nov '12

I used omping to test multicast between 2 KVM VMs under same physical host, and it is not working in terms of multicast (normal pings/ssh works between these 2 VMs). How to enable multicast for KVM guests running under NAT networking mode under the same physical host? Per some doc from RedHat, it would be very slow using NAT with multicast for KVM. I have to use virbr0/NAT mode since I am using wireless. So although it would be slow, it should still work, but this is not the case for me.

1 0

[libvirt-users] Attaching storage to a virtual machine
by Douglas Russell 01 Nov '12

01 Nov '12

I am slightly lost trying to attach some storage to a functioning virtual machine. If this where a real machine, I would simply be trying to mount a LVM volume. I have found a lot of documentation about adding storage pools, but I'm unsure if that is actually what I should be doing. Is that just for storage of the virtual machines themselves? Once I'd added my LVM volume group to virsh I could see no way of then assigning one volume of that to be offered as a logical volume to one particular virtual machine. I've also seen this: http://docs.fedoraproject.org/en-US/Fedora/13/html/Virtualization_Guide/sec… Looks like I could use that to assign one of the LVM volumes in my LVM volume group to the VM. If anyone could explain the different function of these two techniques and which sounds applicable I would be most grateful. Thanks, Douglas

2 3