- Users - libvirt List Archives

Re: [libvirt-users] Snapshot system: really confusing.
by NoxDaFox 23 May '12

23 May '12

Hello, thank you for your fast reply! To help in comprehension I'll explain you a bit what am I trying to realize so the picture will be more clear. Basically it's a platform for debug, what I need is to access to the memory dump image and to the FS ones; I don't need any reverting support. The common lifecycle of a domain is: a) Given a backing store disk (qcow2) I create a new disk image: my_image.qcow2 b) I start this image and play around based on a persistent domain. c) I take several pictures (snapshots, dumps) of the VE state: I need at least readable pictures of the FileSystem and the RAM. d) I shutdown the guest. e) I extract valuable information from the pictures. This is the critical phase where all my doubts on libvirt platform come from. f) I store those information. g) I wipe out everything else. h) Ready for a new test, return to point a). libvirt is a great platform! And documentation is not bad at all. The only nebulous part is the snapshot part (I guessed was on hard development anyway). Now I'll answer to your points. > > Greetings, > > Hello, > > > > > I am developing a platform for test and debug use. > > > > The typical scenario I want to realize is the following: > > > > I run a .qcow2 image via QEMU-KVM, the running OS is not relevant. > > I want to take several snapshots of both Disk and RAM status; same file, > > separate files doesn't matter. > > I just need a way to have consistent information about them (better with > > XML description) and the data as well. > > I want to store these snapshots on my storage devices to use them whenever > > and wherever I want. > > Hopefully libvirt can supply what you are interested in; and be aware > that it is a work in progress (that is, unreleased qemu 1.1 and libvirt > 0.9.12 will be adding yet more features to the picture, in the form of > live block copy). I knew the situation, I saw a RFC of yours that is really interesting as it introduces snapshots of single storage volumes: virStorageVolSnapshotPtr. Really interesting under my point of view. > > > > > > Is it possible to store a single snapshot providing both the memory and > > disks state in a file (maybe a .qcow2 file)? > > Single file: no. Single snapshot: yes. The virDomainSnapshotCreateXML > API (exposed by virsh snapshot-create[-as]) is able to create a single > XML representation that libvirt uses to track the multiple files that > make up a snapshot including both memory and disk state. This would be enough, as long as I'm able to read those information. > > > Is there any way to get a unique interface which handles my snapshots? > > > > I was used to use the virDomainSnapshotCreateXML() defining the destination > > file in the XML with <disk> fields. > > Right now, you have a choice: > > 1. Don't use the DISK_ONLY flag. That means that you can't use <disk> > in the snapshot XML. The snapshot then requires qcow2 files, the VM > state is saved (it happens to be in the first qcow2 disk), and the disk > state is saved via qcow2 internal snapshots. That's good to know, I just got yesterday, reading your mails in the dev mailing list, where snapshots were stored; I always tried to look for a new file, unsuccessfully. > > 2. Use the DISK_ONLY flag. Then you can set up external snapshot file > names (basically, another layer of qcow2 files, where your original file > name is now the snapshot backing the new layer), and you get no VM state > directly. Here is where the <disk> element of the snapshot comes into > play. If you _also_ want to save VM state, you can use 'virsh save' > (virDomainSaveFlags) to save just VM state; but then you have to > coordinate things so that the disk snapshot and the VM state correspond > to the same point in guest time by pausing the guest before taking the > disk snapshot. > > > After updating libvirt it was not working anymore, I thought was a bug but > > then I realized it was intentional. > > The function complains about the fact that the <disk> parameter is not > > accepted anymore. > > What versions of libvirt are you playing with? <disk> was unrecognized > (and ignored) prior to 0.9.5; after that point, it can only be used with > the DISK_ONLY flag, but then you have to take the VM state separately. > I guessed that the <disk> tag was just ignored, I inherited the code from a previous project and I spent the first weeks struggling with what was not working. I was using libvirt 0.8.3-5 from debian squeeze, I migrated to wheezy to be able to access to libguestfs features, now I'm running libvirt 0.9.11. > Someday, I'd like to submit more patches to allow <disk> to be mixed > with live VM state, but I'm not there yet. > > > So I started guessing how to solve reading the API documentation and I fall > > in a completely nebulous world. > > > > For what I got: > > - virDomainSnapshotCreateXML(): > > According to flags can take system checkpoints (really useful) and disks > > snapshots. > > System checkpoints: What I need but I didn't find any way to retrieve the > > storage file; I'm only able to get the snapshot pointer, quite useless as > > from its pointer I can only print the XML description. > > The storage is in internal snapshots of your qcow2 file. Try 'qemu-img > info /path/to/file' to see those internal snapshots. You can also use > > qemu-img convert -s snapname /path/to/image /path/to/output Great! This is the information I needed: how to access to those damned snapshot in a readable way. I still believe anyway that an interface provided by libvirt would be really valuable. I am trying to stay as much as I can on libvirt to work on a higher level of abstraction, this is really important for my architecture. Using directly qemu is quite annoying but if at the moment is the only solution I'll move to that. > > as a way to extract that snapshot into a file that you can use > independently (but only while your guest is not running); alas, qemu > doesn't yet provide a way to extract this information from a running > domain, nor have I yet had time to map this functionality into libvirt > API. But I have requested qemu enhancements to allow it (perhaps by > qemu 1.2), as well as have a vision of where I plan to take the libvirt > API in the next year or so to make this more useful. ATM I don't need "on the fly" extraction, everything is done after turning off the guest, what I need is a way to get its state whenever I want, reading it is another business. But indeed this is something that in a future may be greatly valuable. > > > Disk snapshot: here through the XML description I can specify a target file > > where to write the information. But I still need the memory status. > > - virDomainSaveFlags(): > > No matter how I set the flags, it halts the guest; I need it still running > > afterward and I think that reverting the domain and restarting for my > > scenarios is unaffordable. > > Yeah, that's another thing on my list, to add a flag to > virDomainSaveFlags that will keep the domain running after the save is > complete, and/or enhance virDomainSnapshotCreateXML to incorporate a > domain save to an external file alongside disk snapshots at the same > point in guest time. I'd also like to play with background migration > (right now, virDomainSaveFlags does a foreground migrate-to-file, which > pauses the guest up front; but a minimal downtime solution would use the > live migration path which results in a larger output file but much less > downtime). > > > - virDomainCoreDump(): > > Does what I need for the memory, but doesn't give any XML description and > > doesn't supply any useful interface to handle it, I just get back an int > > that represent the exit status of the routine. > > virDomainCoreDump() and virDomainSaveFlags() both do a migration to > file, it's just that the core dump version isn't designed for reverting > like domain save. And there have been proposals on list for making core > dump management better (such as allowing you to get at a core dump file > from a remote machine; right now, the core dump can only be stored on > the same machine as the guest being dumped). > I think this is bad, why not merging these functions? Under an API point of view (I'm aware of architectural difficulties on the background) this is useless and confusing. Better a virDomainSaveFlags() with several configuration than two different functions. This is a complex system-management API, so anyone who'll use it will be conscious of that; I don't think that many flags and XML files will be confusing as long as they're clearly documented. But having multiple interfaces (alias functions/methods) that basically do the same in a different way with slightly different results is really confusing. Better have a single method configurable with XML files and flags than two without. (This is a point of view of mine as a developer). > > (other functions really similar) > > > > The question is: why all this confusion? > > Different qemu capabilities ('savevm', 'migrate', > 'blockdev-snapshot-sync'), different needs at the time each feature was > first added, etc. Ultimately, virDomainSnapshotCreateXML is the most > powerful interface, and I have plans to make it be a superset of > virDomainSaveFlags(), but I'm not there yet. Indeed is a powerful interface! But again: why those functions do something similar? Isn't better (always under an API point of view) having: - Two different interfaces that handle separately disk and state; if I want to revert/migrate I need to give both the results of those interfaces. - One interface that gives revert/migrate capability and one interface that, via flags or XML, gives the separate components. - Other combinations: may still be done as long as they're clear. Here we have: virDomainSnapshotCreateXML(): Takes complete snapshots, disk snapshots, no single-memory snapshots. It does it keeping the domain alive (paused). It stores information internally if flags=A, externally if flags=B. virDomainSaveFlags(): No complete snapshots, no disk snapshots, takes memory snapshots. It does it stopping the domain. It stores information externally. Under my point of view this can be done in a more clear way. Separation of duties: many small functions that do a single thing and a global one that wraps everything giving a complete package is a good example. > > > I absolutely understand the problematic that realizing a multiplatform > > snapshots management raises; but I think that for an API purpose what is > > implemented here is completely confusing the developer. > > Is there anything I can do to help improve the documentation? I know > that's an area where a picture can speak a thousand words; and as more > features get added into the snapshot picture, it probably becomes more > important to accurately display the various APIs and the advantages for > using each. What's basically missing is data flow and representation, you don't need to realize it by scratch (data format is strongly bound to qemu) but give an idea and provide references. What makes a documentation relevant is the way the reader has to access to information, must be easy! If snapshots reliy to qemu ones just link their documentation as well, so if I don't find enough clues I can go deeper as much as needed. If help is needed I can contribute, I just need to know where to look at when I need something. The platforms I'm working on are really time-consuming but this technology is really important under my point of view as it will reduce the time to maintain them. Thanks again for answering so fast! NoxDaFox PS: I forgot to CC the libvirt-users mailing list, sorry for the spam.

2 3

[libvirt-users] Renaming a LVM LV (where is vol-edit??)
by Dax Kelson 23 May '12

23 May '12

Hello, I'm using a LVM storage pool. I renamed a guest and I would like to change the LV name to match to avoid future confusion. How do i do this? There is no vol-edit command (fully updated RHEL6). Thanks, Dax Kelson

2 2

[libvirt-users] Failed to mount devpts
by Marco Yuen 22 May '12

22 May '12

Hi all, I've been trying to start a LXC container using libvirt, but I keep getting `Failed to mount devpts on /vservers/quantum/fs/dev/pts: Invalid argument'. I found a similar thread on the mailing list a couple months ago (https://www.redhat.com/archives/libvirt-users/2012-January/msg00052.html) but the solution posted didn't work for me. Anyone has any ideas? Extra Info: Libvirt version Compiled against library: libvir 0.9.12 Using library: libvir 0.9.12 Using API: LXC 0.9.12 Running hypervisor: LXC 3.3.5 Host is running F16, and the domain xml can found at http://pastebin.com/yWXQviVy Best regards, Marco

1 0

Re: [libvirt-users] Python Libvirt Bindings
by Hubert Zhang 22 May '12

22 May '12

https://www.redhat.com/archives/libvirt-users/2012-May/msg00005.html When I run the sample code with the case of Python code for using qemu+tcp with SASL, I always got this SASL error: Traceback (most recent call last): File "esxList.py", line 102, in ? conn = libvirt.openAuth(uri, auth, 0) File "/usr/lib/python2.4/site-packages/libvirt.py", line 102, in openAuth if ret is None:raise libvirtError('virConnectOpenAuth() failed') libvirt.libvirtError: authentication failed: Failed to start SASL negotiation: -4 (SASL(-4): no mechanism available: I have no problem to run the C&java code with qemu+tcp with SASL. Is it possible an error of Python binding? Thanks, -Hubert

2 2

[libvirt-users] Problem with pty
by Daniele Milani 21 May '12

21 May '12

Dear all I have the following problem: -I'm running libvirt 0.9.11 on ubuntu 12.04; -when I try to create a VM with the following configuration: ... <serial type='pty'> <source path='/dev/pts/2'/> <target port='0'/> <alias name='serial0'/> </serial> <console type='pty' tty='/dev/pts/2'> <source path='/dev/pts/2'/> <target type='serial' port='0'/> <alias name='serial0'/> </console> ... I obtain this output: errore: Impossibile creare il dominio da domain_alpha_1.xml (error, impossible to create a domain from domain_alpha_1.xml) errore: errore interno Process exited while reading console log output: chardev: opening backend "pty" failed: Permission denied Does anyone know what's going wrong and ho to fix it? Thanks, Daniele Milani

2 2

[libvirt-users] F14->F16 Upgrade Results in Win2003 Server Client BSOD 0x7f
by Thomas J. Baker 21 May '12

21 May '12

Hello, I upgraded my kvm server from Fedora 14 to Fedora 16 and the only casualty was a Windows 2003 Server client that will no longer boot with and produces a BSOD. I admittedly know very little about Windows and this VM has been around - real hardware -> Parallels on a Mac -> linux kvm but it was working fine under Fedora 14. The client does boot fine under safe mode but anything higher than that (even safe mode with networking) results in the BSOD. I've tried explicitly setting the network driver to rtl8139 in virt-manager which appears to be what it was under F14 but it didn't help. Neither did just removing the NIC under Device Manager and letting it get recognized again. As you can guess given the description, this crusty old Win2003 server instance has some worth in that recreating it is very undesirable for all involved. I'd appreciate any tips on getting it working again. Thanks, tjb -- ======================================================================= | Thomas Baker email: tjb(a)unh.edu | | Systems Programmer | | Research Computing Center voice: (603) 862-4490 | | University of New Hampshire fax: (603) 862-1761 | | 332 Morse Hall | | Durham, NH 03824 USA http://wintermute.sr.unh.edu/~tjb | =======================================================================

2 2

[libvirt-users] Migration with rbd storage backend
by Andrey Korolyov 19 May '12

19 May '12

Hi, Seems that such migration is currently broken, at least for 0.9.11|0.9.12, with 0.9.8 all works fine: virsh migrate --live testvm qemu+tcp://towerbig/system ---snip--- 2012-05-17 21:22:30.250+0000: 16926: debug : qemuDriverCloseCallbackGet:605 : vm=testvm, uuid=feb7ccb6-1087-8661-9284-62e3a1e9f44a, conn=(nil) 2012-05-17 21:22:30.250+0000: 16926: debug : qemuDriverCloseCallbackGet:611 : cb=(nil) 2012-05-17 21:22:30.250+0000: 16926: error : virStorageFileIsSharedFSType:1007 : Invalid relative path 'rbd/testvm-Vwu': Invalid argument 2012-05-17 21:22:30.250+0000: 16926: debug : qemuDomainObjEndAsyncJob:955 : Stopping async job: migration out 2012-05-17 21:22:30.250+0000: 16926: debug : virDomainObjUnref:1645 : obj=0x1c00cd0 refs=3 2012-05-17 21:22:30.250+0000: 16926: debug : virDomainMigrateBegin3:6173 : xml (null) 2012-05-17 21:22:30.250+0000: 16926: debug : virDomainFree:2345 : dom=0x1d7ee30, (VM: name=testvm, uuid=feb7ccb6-1087-8661-9284-62e3a1e9f44a) 2012-05-17 21:22:30.250+0000: 16926: debug : virUnrefDomain:276 : unref domain 0x1d7ee30 testvm 1 ---snip--- Also there is a second point - libvirt doesn`t allow migration of VM until all snapshots has been deleted, which is not necessary for network filesystems, so it probably needs to be fixed. Thanks!

2 1

Re: [libvirt-users] How to use Python Binding with Lbivirt.
by Hubert Zhang 19 May '12

19 May '12

When I run the python test code I got the SASL error. But it's ok if I run the C sample code. Do you know the reason? Here is the message: libvir: RPC error : authentication failed: Failed to start SASL negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs found) Traceback (most recent call last): File "esxList.py", line 101, in ? conn = libvirt.openAuth(uri, auth, 0) File "/usr/lib/python2.4/site-packages/libvirt.py", line 102, in openAuth if ret is None:raise libvirtError('virConnectOpenAuth() failed') libvirt.libvirtError: authentication failed: Failed to start SASL negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs found) Thanks, -Hubert

1 0

[libvirt-users] USB passthrough of all USB-slots to guest
by eGerlach 18 May '12

18 May '12

Hi, how can I define passthrough of all USB-slots to a guest with libvirt? With qemu it's very easy: # kvm -usb -usbdevice host:0.* -usbdevice host:1.* -usbdevice host:2.* -usbdevice host:3.* ... This configuration of the VM gets *all* 4 USB-Slots. Every time somewhat USB-device is plugged in the VM gets it. virt-install manpage offers: --host-device 001.003 USB by bus, device (via lsusb). I installed a VM with option --host-device 001.001 according to output of lsusb. The XML-file generated: <hostdev mode='subsystem' type='usb' managed='yes'> <source> <vendor id='0x1d6b'/> <product id='0x0002'/> </source> </hostdev> But no USB device is passed through automatically. I always need virsh attach-device virtualM myusb.xml with exact vendor and product ID. I want to plug in somewhat USB-Stick or other USB stuff without exploring vendor and product id before. Who can help? tia Ekkard

2 3

[libvirt-users] lxc: Add /dev/tty to lxcContainerPopulateDevices() ?
by Sukadev Bhattiprolu 17 May '12

17 May '12

Hi, src/lxc/lxc_container.c:lxcContainerPopulateDevices() has this table of devices that are automatically created when an lxc container is started. const struct { int maj; int min; mode_t mode; const char *path; } devs[] = { { LXC_DEV_MAJ_MEMORY, LXC_DEV_MIN_NULL, 0666, "/dev/null" }, { LXC_DEV_MAJ_MEMORY, LXC_DEV_MIN_ZERO, 0666, "/dev/zero" }, { LXC_DEV_MAJ_MEMORY, LXC_DEV_MIN_FULL, 0666, "/dev/full" }, { LXC_DEV_MAJ_MEMORY, LXC_DEV_MIN_RANDOM, 0666, "/dev/random" }, { LXC_DEV_MAJ_MEMORY, LXC_DEV_MIN_URANDOM, 0666, "/dev/urandom" }, }; Can we add '/dev/tty' to this list ? We were trying to run 'smbpasswd -a user' inside a container without /dev/tty and the fopen("/dev/tty", "w+") in smbpasswd made /dev/tty a regular file, breaking man(1), less(1), and ofcourse smbpasswd :-) Sure we can add /dev/tty to container's rc.local or something, but wouldn't it be in the same category as say, /dev/null or /dev/zero ? Sukadev

2 2

[libvirt-users] Using virsh to connect to ESX
by Mauro Monteiro 17 May '12

17 May '12

Hello All, I have just started studying the libvirt and I am trying to connect to ESX Server (version 4) using virsh (version 0.7.5) using the following command: virsh -c esx+ssh://root@<fully qualified hostname)> It inquires the root password and as soon as I inform the password it throws the error: error: cannot recv data: Connection reset by peer error: failed to connect to the hypervisor I can access my server using ssh. I am running it from Ubuntu 10.04 and the libvirt version 0.7.5. Can someone help me? -- []'s Mauro

2 1

[libvirt-users] Python 3.2 support for libvirt API?
by Patrick Wilbur 16 May '12

16 May '12

Hey all, I apologize if this has been asked many times already (new to the list). I'm trying to write a Python script that makes use of the libvirt API, and I'm trying my best to make the script both Python 2.x and 3.x compatible. Is the libvirt module available for Python 3.x yet, and, if so, what is the module name that I need to import? What is the package name to install on my OS (Ubuntu 11.10)? Thanks in advance, Pat Wilbur -- Patrick F. Wilbur Researcher, Consultant, Educator, Computer Science Graduate at Clarkson University patrick.wilbur(a)gmail.com wilburpf(a)clarkson.edu Check out our book: http://runningxen.com Consulting: http://pfwilbur.com My website: http://pdub.net

2 1

[libvirt-users] libvirt, lxc, "/dev/log" ENOENT
by dennis jenkins 15 May '12

15 May '12

Hello. I am experimenting with LXC via libvirt on my Gentoo development system. I can start the LXC domain and connect to its console. However, I am unable to login as root. I've used "chroot" and "passwd" from the host system to explicitly set the root password. Still no luck. So I began debugging.... I ran "strace" on the container's "login" process (after agetty exec'd login). I noticed that it was unable to open "/dev/log". Sure enough the unix domain socket did not exist inside the container (as seen from outside the container). So I tweaked my host's syslog-ng.conf file to create this socket. My hope was to monitor the log events generated by the login process. So the log device certainly exists (and it tests ok with the 'logger' command): The LXC file-system was created with the "lxc-gentoo" script ( http://lxc-gentoo.sourceforge.net/) The only changes that I've made to the container's file system is to change roots' password ($rootfs/etc/shadow) and configure syslog-ng to create a logging socket at $rootfs/dev/log. I've even edit "$rootfs/etc/shadow" and completely removed root's password hash. I still can't log into the account from "virsh console". I thought that maybe I was unable to authenticate because the "login" process cannot log success/failure to /dev/log. However, I know from experience that on other Gentoo systems I can login as root even when syslog-ng is kaput, and /dev/log does not exist. "/etc/pam.d" inside the container is byte-for-byte the same as my host system, and I can authenticate as root from the physical console. I have a few main questions: 1) Is my domain configured correctly? 2) Why is the container unable to write to the "/dev/log" provided from outside the container? 3) Why am I unable to authenticate as the "root" user? Thank you for your time. ostara ~ # virsh -c lxc:/// start dwj-lnx-dev Domain dwj-lnx-dev started ostara ~ # virsh -c lxc:/// console dwj-lnx-dev Connected to domain dwj-lnx-dev Escape character is ^] INIT: version 2.88 booting Gentoo Linux; http://www.gentoo.org/ Copyright 1999-2009 Gentoo Foundation; Distributed under the GPLv2 Press I to enter interactive boot mode * Skipping mount of /proc as it's already mounted * Skipping mount of /sys as it's already mounted * Using existing device nodes in /dev ... [ ok ] * Skipping mount of /dev/pts as it's already mounted * Remounting root filesystem read-only ... mount: / is busy [ !! ] * Skipping root filesystem check (fstab's passno == 0) ... [ ok ] * Checking all filesystems ... [ ok ] * Mounting local filesystems ... mount: mount point /dev/shm does not exist * Some local filesystem failed to mount [ !! ] * Mounting USB device filesystem (usbfs) ... [ ok ] * Activating (possible) swap ... [ ok ] * Setting system clock using the hardware clock [UTC] ... [ ok ] * Configuring kernel parameters ... error: "Read-only file system" setting key "net.ipv4.conf.default.rp_filter" error: "Read-only file system" setting key "net.ipv4.conf.all.rp_filter" [ ok ] * Cleaning /var/lock, /var/run ... [ ok ] * Wiping /tmp directory ... [ ok ] * Starting lo * Bringing up lo * 127.0.0.1/8 [ ok ] * Adding routes * 127.0.0.0/8 ... [ ok ] INIT: Entering runlevel: 3 * Starting eth0 * Bringing up eth0 * 192.168.2.199 [ ok ] * Adding routes * default via 192.168.2.1 ... [ ok ] * Mounting network filesystems ... [ ok ] /lib64/rcscripts/sh/rc-services.sh: line 412: /etc/init.d/udev-postmount: Permission denied * Starting local ... [ ok ] This is ostara.unknown_domain (Linux x86_64 3.2.12-gentoo) 23:06:09 ostara login: ostara ~ # virsh -c lxc:/// version Compiled against library: libvir 0.9.11 Using library: libvir 0.9.11 Using API: LXC 0.9.11 Running hypervisor: LXC 3.2.12 ostara ~ # ls -l /vm/lxc/dwj-lnx-dev/dev/log srw-rw-rw- 1 root root 0 May 14 17:31 /vm/lxc/dwj-lnx-dev/dev/log ostara ~ # logger -s /vm/lxc/dwj-lnx-dev/dev/log "CAPYBARA" djenkins: /vm/lxc/dwj-lnx-dev/dev/log CAPYBARA ostara ~ # tail -n 100 /var/log/messages | grep CAPYBARA May 14 17:58:57 localhost djenkins: /vm/lxc/dwj-lnx-dev/dev/log CAPYBARA (lots of strace setup omitted): Buried about 60% down in the strace output is the attempt by "login" inside the container to access "/dev/log", which failed (ENOENT). open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3 lseek(3, 0, SEEK_CUR) = 0 fstat(3, {st_mode=S_IFREG|0644, st_size=720, ...}) = 0 mmap(NULL, 720, PROT_READ, MAP_SHARED, 3, 0) = 0x7fc6ccb66000 lseek(3, 720, SEEK_SET) = 720 munmap(0x7fc6ccb66000, 720) = 0 close(3) = 0 time([1337035715]) = 1337035715 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory) close(3) = 0 fstat(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc6ccb66000 write(1, "\n", 1) = 1 write(1, "Login incorrect\n", 16) = 16 time(NULL) = 1337035715 This is my domain config: ostara ~ # virsh -c lxc:/// dumpxml dwj-lnx-dev <domain type='lxc'> <name>dwj-lnx-dev</name> <uuid>fbcd8c3a-9939-12b4-727d-5d3526bc448f</uuid> <memory unit='KiB'>500000</memory> <currentMemory unit='KiB'>500000</currentMemory> <vcpu>2</vcpu> <os> <type arch='x86_64'>exe</type> <init>/sbin/init</init> </os> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/vm/lxc/dwj-lnx-dev'/> <target dir='/'/> </filesystem> <interface type='bridge'> <mac address='52:54:00:3e:d9:7c'/> <source bridge='br0'/> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> </domain>

1 0

[libvirt-users] Script execution at Boot
by vipul borikar 14 May '12

14 May '12

I am using KVM on RHEL 6.1. When i try to run a RHEL 5.5 Guest using virt-manager the a shell script put under rc.local runs properly. But when i try to run Guest using cmd line the script doesn't run. I mean it gives error code as 1 . The commands like echo works but executing another shell script under rc.local file doesn't run and gives return code as 1. I know its weird question .. but just was curious is there any parameter in xml file which affects the environment of the boot sequence ??? I can give the both the xml file if needed. -- Thanks Vipul Borikar "Our task must be to free ourselves...by widening our circle of compassion to embrace all living creatures and the whole of nature and its beauty."

1 0

[libvirt-users] Permission issue with cgroups
by Antonio Carlos Salzvedel Furtado Junior 12 May '12

12 May '12

Hello libvirt users, I'm using the cgroup with QEMU guests. At /etc/libvirt/qemu.conf, I have the following parameter: cgroup_controllers = [ "cpu" ] This controller is successfully mounted and libvirt is able to create subgroups for each VM, it's really great the cgroups support in libvirt. The problem is that I can only set the parameters of a given cgroup under the cpu controller if I'm logged in as root. I want another user to have that permission as well. I tried to modify the file /etc/cgconfig.conf to change the permissions. The file is exactly this: group libvirt { perm { admin { uid = opennebula; gid = opennebula; } task { uid = root; gid = root; } } cpu { cpu.shares=512; } } This configuration above does not seem to modify any of the administration permissions. Only the root can edit the parameters under libvirt. The cpu entry was added just to check whether this configuration was read by cgroups at all. The 'cpu.shares' does change in group libvirt. I was careful to start libvirt only after the service cgconfig was restarted. Thanks in advance, Antonio Carlos Furtado

2 4

[libvirt-users] libvirtd fails to start on f16 64bit
by Chad Roberts 11 May '12

11 May '12

Hello, For quite some time, my libvirtd was working great. I came back today to fire-up a VM, but noticed that libvirtd was not running. When I try to start it, I get the following error... libvirtd: symbol lookup error: libvirtd: undefined symbol: avahi_client_new Can anyone shed some light on what my problem may be? Thanks, Chad

1 0

[libvirt-users] segfault with libvirt-0.9.11.3-1
by ovirt＠qip.ru 11 May '12

11 May '12

Hi, ALL On fedora16 hosts with vdsm-4.9.6 after libvirtd daemon started in messages there are too many errors even if no one VM's running, and vdsmd not started May 11 14:44:59 kvm02 kernel: [ 6670.207465] virsh[11015]: segfault at 38 ip 00007f047a52c535 sp 00007fffe3cb0e50 error 4 in libvirt.so.0.9.11[7f047a4bb000+2fd000] May 11 14:44:59 kvm02 kernel: [ 6670.227244] virsh[11018]: segfault at 38 ip 00007f7afe3e6535 sp 00007fff41983d00 error 4 in libvirt.so.0.9.11[7f7afe375000+2fd000] May 11 14:45:09 kvm02 kernel: [ 6680.662175] virsh[11201]: segfault at 38 ip 00007ffe6c129535 sp 00007fffa82c5720 error 4 in libvirt.so.0.9.11[7ffe6c0b8000+2fd000] May 11 14:45:09 kvm02 kernel: [ 6680.679462] virsh[11204]: segfault at 38 ip 00007f9f3c596535 sp 00007fff7cc6c580 error 4 in libvirt.so.0.9.11[7f9f3c525000+2fd000] May 11 14:45:09 kvm02 kernel: [ 6680.696003] virsh[11207]: segfault at 38 ip 00007fa06fb01535 sp 00007fff23cb2260 error 4 in libvirt.so.0.9.11[7fa06fa90000+2fd000] May 11 14:45:09 kvm02 kernel: [ 6680.720678] virsh[11213]: segfault at 38 ip 00007fe557d0b535 sp 00007fff15262720 error 4 in libvirt.so.0.9.11[7fe557c9a000+2fd000] May 11 14:45:09 kvm02 kernel: [ 6680.740552] virsh[11216]: segfault at 38 ip 00007f9dc1507535 sp 00007fff71795540 error 4 in libvirt.so.0.9.11[7f9dc1496000+2fd000] May 11 14:45:20 kvm02 kernel: [ 6691.200793] virsh[11431]: segfault at 38 ip 00007f595f11e535 sp 00007fffc620f660 error 4 in libvirt.so.0.9.11[7f595f0ad000+2fd000] May 11 14:45:20 kvm02 kernel: [ 6691.220691] virsh[11434]: segfault at 38 ip 00007fa843d8c535 sp 00007fff611a4d60 error 4 in libvirt.so.0.9.11[7fa843d1b000+2fd000] May 11 14:45:20 kvm02 kernel: [ 6691.237276] virsh[11437]: segfault at 38 ip 00007f7ece215535 sp 00007fffe0d9ff60 error 4 in libvirt.so.0.9.11[7f7ece1a4000+2fd000] May 11 14:45:20 kvm02 kernel: [ 6691.258537] virsh[11443]: segfault at 38 ip 00007f6bc89f2535 sp 00007fff95244620 error 4 in libvirt.so.0.9.11[7f6bc8981000+2fd000] May 11 14:45:20 kvm02 kernel: [ 6691.278057] virsh[11446]: segfault at 38 ip 00007f4c16f36535 sp 00007fff35394480 error 4 in libvirt.so.0.9.11[7f4c16ec5000+2fd000] May 11 14:45:31 kvm02 kernel: [ 6701.766999] virsh[11660]: segfault at 38 ip 00007f8b64ce7535 sp 00007fffac3014c0 error 4 in libvirt.so.0.9.11[7f8b64c76000+2fd000] May 11 14:45:31 kvm02 kernel: [ 6701.786796] virsh[11663]: segfault at 38 ip 00007f6184ead535 sp 00007fff790ccd50 error 4 in libvirt.so.0.9.11[7f6184e3c000+2fd000] May 11 14:45:31 kvm02 kernel: [ 6701.806817] virsh[11666]: segfault at 38 ip 00007f5aa114f535 sp 00007fffb3d06d60 error 4 in libvirt.so.0.9.11[7f5aa10de000+2fd000] May 11 14:45:31 kvm02 kernel: [ 6701.831577] virsh[11672]: segfault at 38 ip 00007f2d6d123535 sp 00007fff3f45e820 error 4 in libvirt.so.0.9.11[7f2d6d0b2000+2fd000] May 11 14:45:31 kvm02 kernel: [ 6701.851596] virsh[11675]: segfault at 38 ip 00007f8160f16535 sp 00007ffff211d210 error 4 in libvirt.so.0.9.11[7f8160ea5000+2fd000] During compilation I saw this error PASS: start PASS: undefine PASS: vcpupin TEST: virsh-all ........................................ 40 ........................................ 80 .../virsh-all: line 34: 14498 Segmentation fault $abs_top_builddir/tools/virsh -c $test_url $i < /dev/null > /dev/null 2>&1 ...................................... 120 ........................................ 160 ............................ 188 OK PASS: virsh-all PASS: virsh-optparse PASS: virsh-schedinfo but compilation finished and all rpms were created environment: [root@kvm02 ~]# uname -a Linux kvm02 3.3.4-3.fc16.x86_64 #1 SMP Thu May 3 14:46:44 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux [root@kvm02 ~]# rpm -q qemu-kvm qemu-kvm-0.15.1-4.fc16.x86_64 [root@kvm02 ~]# rpm -q libvirt libvirt-0.9.11.3-1.fc16.x86_64 [root@kvm02 ~]# rpm -q vdsm vdsm-4.9.6-0.163.git0633cd2.fc16.x86_64 How is it possible to correct this? --

1 0

[libvirt-users] listing active and defined vs inactive and defined domains
by John Wayne 11 May '12

11 May '12

i am trying to list active + defined and inactive + defined domains using libvirt 0.9.4 i can get active domains using: def s_activedomains(conn): #get active domain ids numofdomains=libvirt.virConnect.numOfDomains(conn) activedomains=libvirt.virConnect.listDomainsID(conn) return activedomains i am stuck on how to get inactive domains the example listed here http://libvirt.org/guide/html/Application_Development_Guide-Guest_Domains-L… under example 4.4 and example 4.5 seems to be outdated looking at /usr/lib64/python2.6/site-packages/libvirt.py, line 2337 says that "Note that this won't work for inactive domains which have an ID of -1" i think example 4.5 is wrong because if inactive domains have an id of -1, then i can't call virDomainLookupBy{Name,ID}

2 1

[libvirt-users] Forward port 4444 to a static-IP VM
by Sean Abbott 11 May '12

11 May '12

I'm attempting to set up a selenium grid on virtual machines. The default NAT is good enough for almost everything, but I need to be able to send my hub VM requests on port 4444. I've attempted to get this going by adding the following to my iptables firewall: -t nat -A PREROUTING -p tcp --dport 4444 -j DNAT --to-destination 192.168.122.107:4444 -t filter -A FORWARD -m state -d 192.168.122.107 --state NEW,RELATED,ESTABLISHED -j ACCEPT And...it's not working. I can hit the port and make requests from the host. Help, please? Thanks! sean

1 0

[libvirt-users] serial console
by John Wayne 10 May '12

10 May '12

hi, when creating a domain using libvirt python api, how would i tell libvirt to use a unique serial port number for domains? in the libvirt.virConnect.defineXML(conn,domainxml) call when i create the domainxml object, i need to ensure that the part below has a unique # for target port <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> currently the domains running on hypervisors have target port numbers such as 1,2,3 and so on. thanks

3 2

[libvirt-users] virsh console logging and pty usage
by Doug Goldstein 10 May '12

10 May '12

Is it possible to both log the serial console and to actually use it? A few of the VMs I've got are configured as follows: <serial type='file'> <source path='/var/log/libvirt/qemu/serial/bb-2.6.18-128.el5-x86_64.log'/> <target port='0'/> </serial> <console type='file'> <source path='/var/log/libvirt/qemu/serial/bb-2.6.18-128.el5-x86_64.log'/> <target type='serial' port='0'/> </console> Because people are hoping to capture the logs after the fact to see if there was any console output which could help them debug an issue. However, if you need to connect to the console of the VM its impossible (e.g. it needs the root password for a fsck). Any suggestions to allow logging but allow it to be usable via "virsh console" as well? Thanks. -- Doug Goldstein

3 3

[libvirt-users] release open_disk error
by Frido Roose 10 May '12

10 May '12

Hello, I wonder what the "open error -1" / "release open_disk error" messages in sanlock.log actually mean. I saw these messages in the log on a KVM host that rebooted, and after running "/usr/sbin/virt-sanlock-cleanup" on that host. The resources where disks from 2 guests running on another KVM host. So in fact the disks are still in use, bot got cleaned up by the other KVM host because it thought they were not longer in use... Several questions: 1. Could this indicate a problem with the lease of these resources on the server that host these guests? 2. Is there a way to reregister these resources, because they are still in use (but not for sanlock it seems)? 3. Overall, is it a bad idea to run virt-sanlock-cleanup? Some entries from the log file: 538 s1:r35 resource __LIBVIRT__DISKS__:e133401bfdff6979f76d9544ec8a5529:/var/lib/libvirt/sanlock/e133401bfdff6979f76d9544ec8a5529:0 for 1,9,4218 539 open error -1 /var/lib/libvirt/sanlock/e133401bfdff6979f76d9544ec8a5529 539 r35 release open_disk error /var/lib/libvirt/sanlock/e133401bfdff6979f76d9544ec8a5529 598 s1:r40 resource __LIBVIRT__DISKS__:fc82f9999b5afddb8aee9955db9b3477:/var/lib/libvirt/sanlock/fc82f9999b5afddb8aee9955db9b3477:0 for 2,12,4230 598 open error -1 /var/lib/libvirt/sanlock/fc82f9999b5afddb8aee9955db9b3477 598 r40 release open_disk error /var/lib/libvirt/sanlock/fc82f9999b5afddb8aee9955db9b3477 598 s1:r42 resource __LIBVIRT__DISKS__:ff9b82672a4dd869f9c9b38a6cbe3900:/var/lib/libvirt/sanlock/ff9b82672a4dd869f9c9b38a6cbe3900:0 for 2,12,4232 598 open error -1 /var/lib/libvirt/sanlock/ff9b82672a4dd869f9c9b38a6cbe3900 598 r42 release open_disk error /var/lib/libvirt/sanlock/ff9b82672a4dd869f9c9b38a6cbe3900 -- Frido Roose

1 1

[libvirt-users] creating a domain
by John Wayne 10 May '12

10 May '12

hi, i am a bit confused on how to start an inactive domain using the python bindings, any help would be appreciated. (inactive as in the domain was created with virConnect.defineXML sometime in the past) looks like i have to use virDomain.create, however virDomain.create needs a defined domain xmldesc as a parameter and i am not sure on how to get that i guess if virConnect.create was happening right after virConnect.defineXML i could get the return value of virConnect.defineXML and pass that onto virDomain.create. however, since the domain was created sometime in the past, i am not sure on how to get the domain ptr which virDomain.create needs thanks

5 4

[libvirt-users] Libvirt java binding crash Tomcat
by Hubert Zhang 09 May '12

09 May '12

Running on linux and libvirt 0.9.11. Using libvirt java 0.4.7. Notice that the Tomcat server crashes and shows the dump like this: *** glibc detected *** jsvc.exec: double free or corruption (out): 0x086f14a8 *** ======= Backtrace: ========= /lib/libc.so.6[0xc03745] /lib/libc.so.6(cfree+0x59)[0xc03b89] /tmp/jna/jna486823639517928939.tmp(Java_com_sun_jna_Native_free+0x1d)[0x430c4c] [0xb46de240] [0xb46d218d] [0xb46d218d] [0xb46d218d] [0xb46cf3e6] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x13bdb21] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x15b3478] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x13bd94f] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x13f0ef7] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x13d4aee] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/libjava.so(Java_java_lang_ref_Finalizer_invokeFinalizeMethod+0x6e)[0x11cb3e] [0xb46de240] [0xb46d218d] [0xb46d218d] [0xb46d218d] [0xb46cf3e6] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x13bdb21] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x15b3478] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x13bd395] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x13bd458] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x143fbe7] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x16b404f] /usr/lib/jvm/sun-java-6u24/jre/lib/i386/server/libjvm.so[0x15b4a6e] /lib/libpthread.so.0[0x8fa842] /lib/libc.so.6(clone+0x5e)[0xc6c4ce] ======= Memory map: ======== 00110000-00133000 r-xp 00000000 08:01 106948 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/libjava.so 00133000-00135000 rw-p 00023000 08:01 106948 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/libjava.so 00135000-00148000 r-xp 00000000 08:01 74629 /lib/libnsl-2.5.so 00148000-00149000 r--p 00012000 08:01 74629 /lib/libnsl-2.5.so 00149000-0014a000 rw-p 00013000 08:01 74629 /lib/libnsl-2.5.so 0014a000-0014c000 rw-p 00000000 00:00 0 0014c000-0014f000 ---p 00000000 00:00 0 0014f000-0019d000 rwxp 00000000 00:00 0 0019d000-001d7000 r-xp 00000000 08:01 106944 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/libjdwp.so 001d7000-001d8000 rw-p 00039000 08:01 106944 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/libjdwp.so 001d8000-001d9000 ---p 00000000 00:00 0 001d9000-00259000 rwxp 00000000 00:00 0 00259000-0026d000 r-xp 00000000 08:01 106885 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/libnet.so 0026d000-0026e000 rw-p 00013000 08:01 106885 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/libnet.so 0026e000-00273000 r-xp 00000000 08:01 106769 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/headless/libmawt.so 00273000-00274000 rw-p 00004000 08:01 106769 /usr/lib/jvm/sun-java-6u24/jre/lib/i386/headless/libmawt.so 00276000-00290000 r-xp 00000000 08:01 74651 /lib/ld-2.5.so 00290000-00291000 r--p 00019000 08:01 74651 /lib/ld-2.5.so 00291000-00292000 rw-p 0001a000 08:01 74651 /lib/ld-2.5.so 00292000-00295000 ---p 00000000 00:00 0 00295000-002e3000 rwxp 00000000 00:00 0 002e3000-002e8000 r-xp 00000000 08:01 212038 /usr/lib/libwsman_curl_client_transport.so.1.0.0 002e8000-002e9000 rw-p 00004000 08:01 212038 /usr/lib/libwsman_curl_client_transport.so.1.0.0 ...................................... Sometimes I see "invalid pointer" as well. It seems a bug to the libvirt java API. Has anyone seen this error before? Thanks.

1 0

[libvirt-users] SSH connection timeout
by Ananth 09 May '12

09 May '12

Hi, I am trying to connect to libvirt on KVM host from a remote python client, using the connection string "qemu+ssh://<IP Address>/system" If I setup password less SSH (Public key) between the machines, I am able to proceed with the connection. But If I have not setup the public key authentication, my code hangs trying to connect to libvirt, and there is a prompt for entering password in the shell where the code is running. Is there any way to catch this in an exception and throw an error that public key not setup or password not available? Or is it possible to timeout and abort the request to connect to the host? Whatever timeout variables available online seem to work only for an already active SSH session to timeout. Any pointers ? -- Regards Ananth

2 2