- Users - libvirt List Archives

[libvirt-users] Problems connecting with a remote VirtualBox server
by john Sanabria 04 Oct '12

04 Oct '12

Hi, I want to connect to my VirtualBox hypervisor using a string connection similar to this virsh -c vbox+ssh://localhost/session but it does not work however I can run virsh -c vbox:///session successfully. josanabr@leader:~$ virsh -c vbox+ssh://localhost/session error: End of file while reading data: : Input/output error error: failed to connect to the hypervisor josanabr@leader:~$ virsh -c vbox:///session Welcome to virsh, the virtualization interactive terminal. Type: 'help' for help with commands 'quit' to quit virsh # I have not modified any libvirt configuration file. I appreciate your feedback. -- John Sanabria - Profesor de la EISC Universidad del Valle

1 0

[libvirt-users] IPv4 routed virtual networks
by Gene Czarcinski 03 Oct '12

03 Oct '12

OK, either I have taken a stupid pill and am missing something basic or routed network do not work. I assume that, if they did work, it would be in more or less that same manner as a nat network as far as ping'ing, ssh'ing, etc. to another real host on the same real LAN as the virtualization host. At least that is what I believe I should expect. I have googled for info and everything says that it should work. On of the referenced documents was this: http://berrange.com/posts/2009/12/13/routed-subnets-without-nat-for-libvirt… I checked through everything and it all matches what is in the document. I can go from the guest to the host (ping, ssh, etc) but not from that guest to another real host on the same real LAN. I am patching the relevant info below: ---------------------------------- net.ipv4.conf.all.forwarding = 1 net.ipv4.conf.p32p1.forwarding = 1 net.ipv4.conf.virbr8.forwarding = 1 -------------------------------- <network> <name>routed</name> <uuid>1b2a0197-e708-165c-f266-6822e73cfbdd</uuid> <forward dev='p32p1' mode='route'> <interface dev='p32p1'/> </forward> <bridge name='virbr8' stp='on' delay='0' /> <mac address='52:54:00:B9:59:49'/> <domain name='routed'/> <ip address='192.168.123.1' netmask='255.255.255.0'> <dhcp> <range start='192.168.123.128' end='192.168.123.254' /> </dhcp> </ip> </network> ------------------------------- Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr8 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- p32p1 virbr8 0.0.0.0/0 192.168.123.0/24 0 0 ACCEPT all -- virbr8 p32p1 192.168.123.0/24 0.0.0.0/0 0 0 ACCEPT all -- virbr8 virbr8 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * virbr8 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- virbr8 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable ------------------------------ This is Fedora 17 with an updated libvirt 0.10.1-4.fc17 [another system with the same "problem" is running libvirt 0.10.2-1.fc17]. Anyone know what is going on? BTW, I searched bugzilla for the comment containing the string routed filed against packages libvirt, qemu, qemu-kvm, or kvm ...Result .. no hits! If this is really a bug rather than something I did or did not do, then nobody is using routed virtual networks. BTW, I have a real F17 systems sitting between to networks on two different NICs and it routes things nicely, thank you very much. It does work but not for the virtual networks. I would really like it to be something I am missing. Gene

2 1

[libvirt-users] libvirt Java to connect at the XEN
by Felipe Oliveira Gutierrez 02 Oct '12

02 Oct '12

Hi people, I am new using libvirt for Java I created a class to test my conecction with XEN, but it is throwing a exception that I can't figure out how I solve this. Does anyone knoe how to configure it correctly? I cat use this class from the command line: $ javac -classpath /usr/java/jdk1.6.0_34/bin/libvirt-0.4.9.jar test.java $ java -classpath .:/usr/java/jdk1.6.0_34/bin/jna.jar:/usr/java/jdk1.6.0_34/bin/libvirt-0.4.9.jar test and it connect to the XEN. But when I put the code on my eclipse it doesn't work any more. ... conn = new Connect("xen:///", true); .... libvir: XML-RPC error : authentication failed: Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered exception caught:org.libvirt.LibvirtException: authentication failed: Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered level:VIR_ERR_ERROR code:VIR_ERR_AUTH_FAILED domain:VIR_FROM_RPC hasConn:false hasDom:false hasNet:false message:authentication failed: Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered str1:authentication failed: %s str2:Error checking for authorization org.libvirt.unix.manage: Remote Exception invoking org.freedesktop.PolicyKit1.Authority.CheckAuthorization() on /org/freedesktop/PolicyKit1/Authority at name org.freedesktop.PolicyKit1: org.freedesktop.PolicyKit1.Error.Failed: Action org.libvirt.unix.manage is not registered str3:null int1:-1 int2:-1 Exception in thread "main" java.lang.NullPointerException at TestLibVirt.main(TestLibVirt.java:88) -- *-- Felipe Oliveira Gutierrez* *-- **lipe.82(a)gmail.com* <lipe.82(a)gmail.com> *-- https://sites.google.com/site/lipe82/Home/diaadia*

1 0

[libvirt-users] Request to participate to the list
by Felipe Oliveira Gutierrez 01 Oct '12

01 Oct '12

Hi, I need to use libvirt on my eucalyptus server. Can I go into to the list? Do I have to install libvirt-0.10.2.tar.gz alone, or I need to install libvirt-java-0.4.9.tar.gz after to developing codes using java? Bets Regards, Felipe -- *-- Felipe Oliveira Gutierrez* *-- **lipe.82(a)gmail.com* <lipe.82(a)gmail.com> *-- https://sites.google.com/site/lipe82/Home/diaadia*

2 1

[libvirt-users] High availability for guests
by Renich Bon Ciric 29 Sep '12

29 Sep '12

Hello, What is the recommended way to offer high availability to Guests? For example, let host1, host2 and host3 be libvirt and KVM/Qemu enabled. If I start a guest in host1, how can I guarantee that it will stay online if host1 goes down? GlusterFS, for example, would take care of storage; but what about CPU and RAM? How can this be accomplished? Thank you for any feedback or comment in adavance. -- It's hard to be free... but I love to struggle. Love isn't asked for; it's just given. Respect isn't asked for; it's earned! Renich Bon Ciric http://www.woralelandia.com/ http://www.introbella.com/

2 3

[libvirt-users] Inconsistent iptables forwarding rules for virtual networks?
by Marwan Tanager 27 Sep '12

27 Sep '12

Hi everyone. Those are the iptables forwarding rules associated with the two virtual networks on my machine: ----------------------------------------------------------------------------------------- -A FORWARD -d 192.168.100.0/24 -o virbr1 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.100.0/24 -i virbr1 -j ACCEPT -A FORWARD -i virbr1 -o virbr1 -j ACCEPT -A FORWARD -o virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr1 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT -A FORWARD -i virbr0 -o virbr0 -j ACCEPT -A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable ----------------------------------------------------------------------------------------- Using this setup I can ping from a guest on 192.168.100.0/24 to a guest on 192.168.122.0/24, however the reverse is not possible (I get 'port unreachable' icmp messages). This is caused by the fourth rule, which rejects packets forwarded to virbr1. Moving the fourth rule to the end, obviously eliminates this problem. So, is this default setup intentional for some reason, or should the rules just be rearranged by libvirt, so that any rule on the FORWARD chain which has a REJECT target (which reject forwarding "to" some virtual interface) would go to the end of the chain, and thus, allowing the virtual networks to reach each other by default? Thanks. Marwan

2 2

[libvirt-users] minor swap issue ....
by William A. Mahaffey III 25 Sep '12

25 Sep '12

.... I have a CentOS 5.n VM running on a Fedora 14 server/host, installed using virt-manager, pretty plain vanilla. I use it to compile binaries to run under RHEL/CentOS 5.n OS. I occasionally notice that when the VM gets paged out by the server, it takes several minutes to get it back in :-/ (see below). On the host, logged in to a shell through a terminal window, this A.M.: [wam@Q6600, test, 10:09:08am] 3384 % /sbin/swapon -s ; free -m ; uname -a ; /sbin/hwclock -r ; date Filename Type Size Used Priority /dev/md2 partition 16773116 1967524 -1 total used free shared buffers cached Mem: 7993 7932 61 0 11 7176 -/+ buffers/cache: 744 7249 Swap: 16379 1921 14458 Linux Q6600 2.6.35.14-106.fc14.x86_64 #1 SMP Wed Nov 23 13:07:52 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux Tue Sep 25 10:09:11 2012 -0.890900 seconds Tue Sep 25 10:09:11 CDT 2012 [wam@Q6600, test, 10:09:11am] 3385 % /sbin/swapon -s ; free -m ; uname -a ; /sbin/hwclock -r ; date Filename Type Size Used Priority /dev/md2 partition 16773116 1415136 -1 total used free shared buffers cached Mem: 7993 7939 54 0 12 6358 -/+ buffers/cache: 1568 6425 Swap: 16379 1381 14998 Linux Q6600 2.6.35.14-106.fc14.x86_64 #1 SMP Wed Nov 23 13:07:52 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux Tue Sep 25 10:14:09 2012 -0.281487 seconds Tue Sep 25 10:14:09 CDT 2012 [wam@Q6600, test, 10:14:09am] 3385 % on the VM, logged in through a different terminal window: [wam@centos-5, CFD, 10:09:14am] 6507 % [wam@centos-5, CFD, 10:09:14am] 6507 % ( cd ../Utils/ ; make extra ) ; cd . make[1]: Entering directory `/home/wam/dev/CFD/Utils' make[2]: Entering directory `/home/wam/dev/CFD/Utils' /home/wam/dev/CFD/Utils/../lib/R4/SSE2/libutils.a up to date. make[2]: Leaving directory `/home/wam/dev/CFD/Utils' make[2]: Entering directory `/home/wam/dev/CFD/Utils' /home/wam/dev/CFD/Utils/../lib/R8/SSE2/libutils.a up to date. make[2]: Leaving directory `/home/wam/dev/CFD/Utils' make[1]: Leaving directory `/home/wam/dev/CFD/Utils' cd /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/utils; icc -c -DNDEBUG -DUNDER_SCORE_SYS -DLOSE_GAMMAL -gcc-version=340 -gcc-name=gcc34 -fabi-version=2 -I /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/include -wd138,167,186,266,279,880,1418,1419,2330,2331 -O3 -ip -opt-prefetch -parallel -opt-multi-version-aggressive -xSSE2 -DP64_BIT test.cpp cd /net/cube/home/wam/V8/Cnx/test/junk/cart/unstaggered/bfc/utils; icc -o /home/wam/bin/checkout -parallel -mkl=parallel -Wl,-s test.o -L /home/wam/dev/CFD/Utils/../lib/R4/SSE2 -Wl,--start-group -lutils -lMemIO -Wl,--end-group && \rm -f test.o Done with extra. [wam@centos-5, CFD, 10:12:36am] 6508 % i.e. it took 3+ min. to get back to the prompt for this command (usually about 5 sec.) .... This isn't a show-stopped by any means, but it is irritating. From the timestamps & data from the host & guest, apparently all of that was used up swapping the guest back in. Is there any way to either prioritize the VM to not get swapped out, or preferentially swapped back in :-) ? TIA for any pointers .... -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr.

3 4

[libvirt-users] Xen Paravirtualized Guest and drive order
by Cyril Peponnet 25 Sep '12

25 Sep '12

Hello, When defining a paravirtulized xen guest and use pygrub as a loader, it will seek into the first drive defined in order to fetch the kernel and boot the machine. As the boot tag is not used, and boot order seems to have no effect, I try to define the disk I want the kernel been seeked as first in my xml definition. Unfortunately, after defining the vm, the order is not kept. As I have seen, the order is made by alphabetical order. I mean if I define a disk as xvda and a cdrom as xvdc, the first drive will be the disk xvda. To be able to make the cdrom first I need to define xvda as a target for cdrom and xvdb or xvdc ... for the disk. It is not really usefull... Is there any way to keep the order of drive as defined in the xml config file ? Thanks

1 0

[libvirt-users] Quadratic function-like call delay
by Andrey Korolyov 25 Sep '12

25 Sep '12

Hi, There is a quite annoying thing, don`t sure if I can call it a bug. How to reproduce: - start a bunch of VMs, - stop libvirt, - start libvirt and immediately issue any call, say, 'virsh version', - delay until call completion may be fitted nearly as quadratic function from number of running VMs, qemu-kvm in my case (see link below). After this delay passed, any calls executed without slowdown, so problem is only a 'dead gap' after restarting service. http://xdel.ru/downloads/libvirt.png

4 6

[libvirt-users] VLANs with Open vSwitch in libvirt 0.10.1
by Scott Lowe 23 Sep '12

23 Sep '12

Hello all, I'm trying to take advantage of libvirt's VLAN and OVS support in the 0.10.1 release and consistently getting an "error: internal error corrupted profileid string" when starting a guest. I've defined a network using virsh; the configuration looks like this: <network> <name>ovs-network</name> <uuid>40c32a20-9eed-238c-895c-b9af7eaf72f1</uuid> <forward mode='bridge'/> <bridge name='ovsbr0' /> <virtualport type='openvswitch'/> <portgroup name='green' default='yes'> <virtualport> <parameters profileid='green-profile'/> </virtualport> </portgroup> <portgroup name='blue'> <vlan> <tag id='2'/> </vlan> <virtualport> <parameters profileid='blue-profile'/> </virtualport> </portgroup> </network> This network is listed when I run "virsh net-list --all" and is listed as active. In a guest, the network is defined like this: <interface type='network'> <mac address='52:54:00:a8:bf:8f'/> <source network='ovs-network'/> <virtualport type='openvswitch'> <parameters interfaceid='2913d936-6771-4983-1cdf-753c45ac24d2' profileid='green-profile'/> </virtualport> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </interface> This is running on Ubuntu 12.04.1 (and QEMU-KVM) with manually compiled libvirt 0.10.1 and OVS version 1.4.0+build0. For troubleshooting, I've undefined/re-define both the network and the guest, and restarted libvirtd in between. I've also tried different network names, different portgroup names, and different profileid's. I'm sure I'm missing something obvious but I can't seem to find it--any suggestions? Any and all help is appreciated. -- Scott

1 0

[libvirt-users] prefer_msi=on in xml file
by klak2 23 Sep '12

23 Sep '12

Hello, here is a problem with KVM passthrough of TechnoTrend S2-6400. Bug report is done. The last answer of the debian maintainer: --> Please check with lspci -vv whenever your device is MSI-capable, --> and if yes, try to add prefer_msi=on to the pci-assign device --> argument -- like, from your original report, --> --> -device pci- assign,host=08:00.0,id=hostdev0,configfd=23,bus=pci.0,addr=0xa,prefer_msi=on --> --> I don't know how to add this to libvirt however, maybe they have --> some knobs for that nowadays. and now my question: How do I add the parameter "prefer_msi=on" to the xml file? Thank and greets klak2

1 0

[libvirt-users] sharing read-only LOCAL disks among KVM guests
by Amos Shapira 23 Sep '12

23 Sep '12

Hello, Is it possible to share a single host's Logical Volume among multiple local KVM guests which mount it read-only? I'm asking this because I have an idea to run multiple idential KVM guests (they all have exactly the same software installed on them), booting them from a shared local Logical Volume read-only root file system, or alternatively let them share the bulk of the software (/usr, /opt, /lib) from a common KVM host Logical volume. Is this possible? All my searches so far failed to turn up anything like this. Would it be possible using qcow2 instead of raw LV? If so - would it be worth the performance hit of switching from LV to qcow2? The motivation for this is two-fold: 1. Speed-up - I suspect that sharing the same disk block among all KVM agents (we currently have 14 KVM guests on each server) should lead to better cache utilisation and reduce disk access. Also the cost of maintaining the mutiple identical servers and keeping them up to date could be eating into our server's resource usage. 2. Maintenance - if I get to share the common disk image among all of them then I only need to install/update it once instead of once for each KVM guest (we already use Puppet but it doesn't mean it comes for free). Thanks, --Amos

3 7

[libvirt-users] picking a NUMA cell for pinning using virsh freecell
by Edoardo Comar 22 Sep '12

22 Sep '12

Hi I'd want to pin the vcpu of a guest to a pcpu. the docs clearly say https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/h… "Locking a guest to a particular NUMA node offers no benefit if that node does not have sufficient free memory for that guest. libvirt stores information on the free memory available on each node. Use the virsh freecell --all command to display the free memory on all NUMA nodes " I have tried to look at what freecell returns and heuristically its total across cells looks roughly the same value returned by the 'free' command but without discounting buffers and cache. While free is able to show the value when buffers/cache are taken into account, free is not able to apportion that to NUMA cells. So is it really a valid strategy to choose the NUMA cell for pinning vcpus looking at virsh freecell or ideally we'd need those values adjusted with buffers+cache ? And if so how could one do that ? -------------------------------------------------- regards, Edoardo Comar IBM SWG UK - Hursley JTC ecomar(a)uk.ibm.com Tel +44 (0)1962 81 5576 (external) 245576 (internal) IBM UK Ltd, Hursley, SO21 2JN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

1 0

[libvirt-users] virsh list not working with xen 4
by Rogério Vinhal Nunes 21 Sep '12

21 Sep '12

Hi, I'm having some trouble to get libvirt to show the correct power state of my virtual machines. I'm using Ubuntu 10.04 + Xen 4.1.1 + libvirt 0.8.8. virsh list --all only shows turned off machines registered in xend. If I turn them on, they just "disappear", and when I start machines directly from xml, they just doesn't appear at all. Libvirt is correctly connecting to xen as I can use the other commands fine, just the list option doesn't seem to work at all. What can I do to change that? # virsh version Compiled against library: libvir 0.8.8 Using library: libvir 0.8.8 Using API: Xen 3.0.1 Running hypervisor: Xen 4.1.0

2 1

[libvirt-users] Xen domains appear randomly
by Mathias Gaunard 21 Sep '12

21 Sep '12

Hi, I have a problem with libvirt or at least with virt-manager and virsh. I have created Xen domains with them, and they do exist and are running without problems, which I can attest by using Xen native tools. However, depending on how I can connect to the machine (direct xen, xen+ssh), and depending on the user I log in as, I may or may not see the domains, or I may or may not be able to configure storage. I am running Debian Wheezy and using the libvirt version from the repositories. Any idea of how I could try to troubleshoot this problem?

1 0

[libvirt-users] Network inoperable with QEMU arm example image
by Larry Brown 21 Sep '12

21 Sep '12

Is this thing on? I posted the message below twice now with no response by anyone. Can someone tell me what I'm doing wrong or at least let me know this is not something they've ever seen so I know my posts are being viewed by those in the know? I'll try replicating the install process on another machine with hopes it will work there, but this is my desktop and I'd really like to have it run here rather than running a separate machine just to run the VM in. (That is provided it will run anywhere using these installation mechanisms) "I am running Fedora 16 64bit and installed libvirt. I have the VM running with arm emulation with this one issue I can't figure out. I used Virtual Machine Manager to manage the VM and can access its console there. The Ethernet appears to be eth1 and the guest can set an IP on it etc. However, I cannot see any traffic from the Host when dumping any of the interfaces. I've tried several combinations of network setups using the GUI and none appear to work. Optimally I'd like to bridge to my primary interface (em1) and be able to pull an address and talk directly to my network so I can download packages etc while in the VM. I tried setting up networking in that fashion with: Source Device : em1 with macvtap Device Model: Hypervisor Default Source Mode: Bridge but alas I cannot pull dhcp nor can I set a static address and ping other interfaces on the network. It also appears that every time I start the VM it creates another vnetX interface. One of the troubleshooting pages I came across listed all the tools but nothing about what to look for: 1) virsh net-list --all Name State Autostart ----------------------------------------- default active yes 2) brctl show bridge name bridge id STP enabled interfaces virbr0 8000.52540029e6c7 yes virbr0-nic vnet0 vnet1 vnet2 vnet3 vnet4 3) sysctl net.bridge.bridge-nf-call-iptables sysctl net.bridge.bridge-nf-call-iptables = 1 4) iptables -L -v -n Chain INPUT (policy ACCEPT 767K packets, 189M bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain OUTPUT (policy ACCEPT 532K packets, 79M bytes) pkts bytes target prot opt in out source destination 5) ps -ef | grep dnsmasq nobody 12382 1 0 Sep11 ? 00:00:00 /usr/sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/default.pid --conf-file= --except-interface lo --listen-address 192.168.122.1 --dhcp-range 192.168.122.2,192.168.122.254 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/default.leases --dhcp-lease-max=253 --dhcp-no-override 6) ifconfig -a em1 Link encap:Ethernet HWaddr 00:19:B9:48:2B:BA inet addr:10.45.212.46 Bcast:10.45.212.255 Mask:255.255.255.0 inet6 addr: fe80::219:b9ff:fe48:2bba/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:19048593 errors:95686 dropped:154 overruns:0 frame:98437 TX packets:10619346 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:12559170813 (11.6 GiB) TX bytes:1700214519 (1.5 GiB) Interrupt:16 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2978074 errors:0 dropped:0 overruns:0 frame:0 TX packets:2978074 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:847201395 (807.9 MiB) TX bytes:847201395 (807.9 MiB) macvtap0 Link encap:Ethernet HWaddr 52:54:00:AC:7F:0C inet6 addr: fe80::5054:ff:feac:7f0c/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:294814 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:42804350 (40.8 MiB) TX bytes:468 (468.0 b) virbr0 Link encap:Ethernet HWaddr 52:54:00:29:E6:C7 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:621 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:43217 (42.2 KiB) virbr0-nic Link encap:Ethernet HWaddr 52:54:00:29:E6:C7 BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) vnet0 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:38159 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1995337 (1.9 MiB) vnet1 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:37299 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1949439 (1.8 MiB) vnet2 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:36154 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1888745 (1.8 MiB) vnet3 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:35068 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:1832375 (1.7 MiB) vnet4 Link encap:Ethernet HWaddr FE:54:00:AC:7F:0C BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:207 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:0 (0.0 b) TX bytes:10896 (10.6 KiB) 7) cat /proc/sys/net/ipv4/ip_forward 1 Any help I can get to resolve this would be greatly appreciated. Very frustrating... Larry

1 0

[libvirt-users] Article about libvirt and audit subsystem
by Marcelo Cerri 21 Sep '12

21 Sep '12

Hi, Sometime ago I wrote an article about libvirt describing how the Linux audit subsystem can be used to track qemu guest's life-cycle. I think this is a topic that can be useful for many people here and so I'm forwarding the URL: http://www.ibm.com/developerworks/linux/library/l-kvm-libvirt-audit/index.h… Regards, Marcelo Cerri

3 3

Re: [libvirt-users] How to pass info to a guest?
by Renich Bon Ciric 20 Sep '12

20 Sep '12

On Thu, Sep 20, 2012 at 12:09 PM, Andrew Cathrow <acathrow(a)redhat.com> wrote: > So you really want to run apt commands on fedora ;-) > > ssh stuff should work fine for you. LOL, ok, you're right. Anyway, thinking it over, I need to apply these injections every time I boot. If the user updates his/her VNC password or rsa-id.pub file on the outside, I need it synced on the inside.

1 0

[libvirt-users] How to pass info to a guest?
by Renich Bon Ciric 20 Sep '12

20 Sep '12

Hello, I would love to be able to pass information to a Guest. For example: - I'd love to sync the root password with the VNC/Spice one - I'd like to be able to inject stuff to /root/.ssh/authorized_keys All of these at boot time. How would I do it? I'd make these files/strings available in the BIOS or something; maybe some kind of storage local to the host and guest as well. Then, I'd create a systemd script that checks these and syncs stuff @ reboot time. I don't know how to make this local storage available or if it is doable to insert this info into some BIOS string; obtainable with dmidecode or something. It would be awesome if this could be dynamic as well. Any feedback is appreciated! -- It's hard to be free... but I love to struggle. Love isn't asked for; it's just given. Respect isn't asked for; it's earned! Renich Bon Ciric http://www.woralelandia.com/ http://www.introbella.com/

3 2

[libvirt-users] How to migrate over TCP without certs
by Renich Bon Ciric 20 Sep '12

20 Sep '12

Hey guys, I have a private network and I trust it! /me hides behind trees... So, in order to exercise my trust, I wanna migrate guests over TCP; with and without shared storage. This is: - I want to migrate from host1 to host2; which have shared storage; over TCP without certs - I want to migrate from host1 to host99, which don't have shared storage, over TCP without certs I am asking because, every time I try anythng, it complains: error: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory If I need to setup this cacert, no problem; point me to it! Anyway, thank you for taking the time to read this email. Fedora 17 x86_64 libvirt-0.9.11.5-3.fc17.x86_64 qemu-kvm-1.0.1-1.fc17.x86_64 private network on vlan2, Dual 10 Gbps bonded (20, perhaps?) -- It's hard to be free... but I love to struggle. Love isn't asked for; it's just given. Respect isn't asked for; it's earned! Renich Bon Ciric http://www.woralelandia.com/ http://www.introbella.com/

4 7

[libvirt-users] libvirt network without dns ?
by Scott Moser 20 Sep '12

20 Sep '12

Hey, I've opened a bug against ubuntu at [1]. I realize this is probably not a high priority, but I was just curious if it is possible to have libvirt configure a network and *not* run a DNS server on it (dnsmasq). Perhaps I could convince libvirt to run dnsmasq with '--port 0'? For my explicit use case i was hoping/expecting to run my own dns and dhcp servers, possibly a specific server bound only to that interface (as dnsmasq does). I just wanted libvirt to create the bridge and setup NAT (and automatically bring the network and any configured guests on it up on boot). Heres what I did. $ BRIDGE="mybr0"; IP="192.168.123.1"; $ cat > $BRIDGE.xml <<EOF <network> <name>$BRIDGE</name> <forward mode='nat'/> <bridge name='$BRIDGE' stp='off' delay='0' /> <ip address='$IP' netmask='255.255.255.0'> </ip> </network> EOF $ sudo virsh -c qemu:///system net-define $BRIDGE.xml $ sudo virsh -c qemu:///system net-start $BRIDGE ## See, after 'start' dnsmasq is running and usable on that interface. $ ps axw | grep dnsm | grep $BRIDGE.pid 9888 ? S 0:00 /usr/sbin/dnsmasq -u libvirt-dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/mybr0.pid --conf-file= --except-interface lo --listen-address 192.168.123.1 $ dig +short @$IP www.ubuntu.com 91.189.90.41 -- [1] https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1053408

1 0

[libvirt-users] libvirt and lxc and puppet
by erkan yanar 20 Sep '12

20 Sep '12

Hoi, Im running some hosts with a lot of lxc-containers (lxc-execute). Now Im going to have a look into libvirt. So I wonder: Are there some docs about what lxc@libvirt is supporting? Imho you have a subset of the lxc-capabilities with libvirt. Anyone doing by any chance the same and using puppet to deploy (application)containers? So I could get a recommendation which module to use, instead of writing ma own. Regards Erkan -- über den grenzen muß die freiheit wohl wolkenlos sein

1 0

[libvirt-users] libvirt 0.10 and cephx
by Andrey Korolyov 19 Sep '12

19 Sep '12

Hello, Current version adding 'auth_supported=none' at the end of disk path and failing to do an authentication with specified cephx key: <source protocol='rbd' name='rbd/vmxxxxxxxxx:id=qemukvm:key=[cut]==:auth_supported=cephx'> <host name='10.0.0.13' port='6789'/> <host name='10.0.0.10' port='6789'/> <host name='10.0.0.17' port='6789'/> </source> results to: 0.10.1 -drive file=rbd:rbd/vmxxxxxxxxx-YSG:id=qemukvm:key=[cut]:auth_supported=cephx:auth_supported=none:mon_host=10.0.0.13\:6789\;10.0.0.10\:6789\;10.0.0.17\:6789,if=none,id=drive-virtio-disk0,format=raw,bps_rd=80000000,bps_wr=40000000,iops_rd=400,iops_wr=200 0.9.13 -drive file=rbd:rbd/vmxxxxxxxxx-YSG:id=qemukvm:key=[cut]:auth_supported=cephx:mon_host=10.0.0.13\:6789\;10.0.0.10\:6789\;10.0.0.17\:6789,if=none,id=drive-virtio-disk0,format=raw,bps_rd=80000000,bps_wr=40000000,iops_rd=400,iops_wr=200 In ceph-devel I have mentioned incorrectly that both strings are the same due to incorrect grep statement, so all that needs to be fixed is an wrong parameter at the end. Thanks!

2 1

[libvirt-users] start failure with lxc
by Eric J Nelson 19 Sep '12

19 Sep '12

Hello, I think I've done something to my machine, but I can't seem to figure out what. I have now set up a very simple lxc setup to try and test this. Here is the XML: ~> cat vm1GPU.xml <domain type='lxc'> <name>vm1GPU</name> <memory>1020400</memory> <os> <type>exe</type> <init>/bin/sh</init> </os> <vcpu>1</vcpu> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <interface type='bridge'> <source bridge='br0' /> </interface> <filesystem type='mount'> <source dir='/export/vm1gpu/root' /> <target dir='/' /> </filesystem> <console type='pty'/> </devices> </domain> Here is what I get when I try to start it. >sudo virsh --connect lxc:// start vm1GPU error: Failed to start domain vm1GPU error: internal error guest failed to start: 2012-09-19 21:26:48.673+0000: 12702: info : libvirt version: 0.9.10, package: 21.el6_3.4 (CentOS BuildSystem <http://bugs.centos.org>, 2012-08-23-18:28:26, c6b9.bsys.dev.centos.org) 2012-09-19 21:26:48.673+0000: 12702: error : lxcControllerRun:1484 : Failed to query file context on /export/vm1gpu/root: No data available Now if change the target directory to something other than the root it starts right up. Any help would be much appreciated. Thanks! Eric

1 0

[libvirt-users] top output from kvm guest VM
by Harish Patil 19 Sep '12

19 Sep '12

Hello, How can I get 'top' output if the guest VM is stuck spinning and taking 100% cpu. Any other means to debug would be of help. Thanks in adv.

2 1