- Users - libvirt List Archives

[libvirt-users] ARP entry intermittently is incorrect for guest - lose connectivity
by Trey Dockendorf 28 Mar '12

28 Mar '12

I've run into a problem on my KVM host where a single guest will be unreachable to other guests on the same host. This host has 2 bridged devices and guests assigned to each have the same issue. I've noticed that when I can't reach the problematic guest, the ARP entry for that system is incorrect. This issue seems to only be a problem about 75% of the time when making connections between the guests. I've checked the logs and haven't seen anything indicating a problem. Here's relavant information, if more is needed please let me know CentOS 6.2 x86_64 libvirt-0.9.4-23.el6_2.4 kernel-2.6.32-220.4.1.el6 # brctl show bridge name bridge id STP enabled interfaces br0 8000.001b21a1cf76 no eth3 vnet0 # Problematic host vnet1 vnet3 vnet4 vnet5 br1 8000.001b21a1ce4d no eth2 vnet6 virbr0 8000.525400a050ba yes virbr0-nic vnet2 # ARP entry when it's the correct MAC <omitted>.tamu.edu ether 52:54:00:e0:1e:6f C eth0 # ARP entry when it's wrong and ping or other connections time out <omitted>.tamu.edu ether 00:1e:c9:bb:cd:d4 C eth0 The MAC ending in cd:d4 does not exist on any system on this network. I've confirmed this with my campus IT who manages the switches and routers. # cat ifcfg-eth3 DEVICE="eth3" HWADDR="00:1B:21:A1:CF:76" NM_CONTROLLED="no" ONBOOT="yes" BRIDGE="br0" # cat ifcfg-br0 DEVICE="br0" ONBOOT="yes" TYPE=Bridge IPADDR="<omitted>" NETMASK="255.255.255.192" GATEWAY="<omitted>" DOMAIN="tamu.edu" # service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot opt source destination 13 ACCEPT tcp -- <omitted> 0.0.0.0/0 multiport dports 10050 /* 001 zabbix agent port */ 14 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 16 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67 17 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16509 19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16514 20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpts:8002:8012 21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:3493 22 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 23 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 24 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 26 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED 2 ACCEPT all -- 192.168.122.0/24 0.0.0.0/0 3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 4 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 5 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 6 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-is-bridged 7 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) num target prot opt source destination Table: mangle Chain PREROUTING (policy ACCEPT) num target prot opt source destination Chain INPUT (policy ACCEPT) num target prot opt source destination Chain FORWARD (policy ACCEPT) num target prot opt source destination Chain OUTPUT (policy ACCEPT) num target prot opt source destination Chain POSTROUTING (policy ACCEPT) num target prot opt source destination 1 CHECKSUM udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:68 CHECKSUM fill Table: nat Chain PREROUTING (policy ACCEPT) num target prot opt source destination Chain POSTROUTING (policy ACCEPT) num target prot opt source destination 1 MASQUERADE tcp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535 2 MASQUERADE udp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535 3 MASQUERADE all -- 192.168.122.0/24 !192.168.122.0/24 Chain OUTPUT (policy ACCEPT) num target prot opt source destination Thanks - Trey

1 0

[libvirt-users] VM Migration error: got unknown HTTP error code
by vipul borikar 28 Mar '12

28 Mar '12

Hi, I am trying to migrate Fedora12 VM from one RHEL 5.5 host to another RHEL 5.5 Host running Xen Hypervisor I am getting the error : error: got unknown HTTP error code -599690112 I have enabled the (xend-relocation-server yes) on the destination machine. I am able to telnet the 8002 default port from source machine but the connection drops down immediately. I have stopped the firewall on both the machines. I am attaching the Debug log of for libvirt command : virsh -c xen:/// migrate Fedora12 xen://megha/ Any Ideas??? -- Thanks Vipul Borikar "Our task must be to free ourselves...by widening our circle of compassion to embrace all living creatures and the whole of nature and its beauty."

1 0

[libvirt-users] qemu-monitor-command
by Shawn Davis 27 Mar '12

27 Mar '12

Hello Everyone, I am working on a grad school project for virtual introspection. I have a vm running (with 512mb of memory) and want to access the pmemsave function through virsh with the qemu-monitor-command. I am typing the following: virsh qemu-monitor-command --hmp Shawn 'pmemsave 0 536870912 image.dump' Shawn is the name of my vm and image.dump is the name of my output file. No matter what I do, I keep getting: Could not open 'image.dump' I have tried the above with sudo and with the absolute path of where the newly created dump file should go and I still get that error. Any help is appreciated as to how I should enter this command. If I type in virsh qemu-monitor-command --hmp Shawn 'info mem' or any other command without an output path, it works fine and brings up information about my running vm. Regards, Shawn

4 18

[libvirt-users] Cant Update libvirt on fedora 15 i686
by siddharth jain 27 Mar '12

27 Mar '12

I am running Fedora15 on a i386 machine, and using libvirt 0.8.7. I cant update libvirt to 0.9.10 as they have not released 0.9.10 for i386 or i686 machines. need help . -- Siddharth Jain Final year,B.Tech Computer Engineering M.N.I.T Jaipur

3 3

[libvirt-users] simulate "network cable unplugged"
by David Mansfield 26 Mar '12

26 Mar '12

Hi All, Using the virt-manager/libvirtd/qemu-kvm stack (centos 6), is it possible to leave a NIC "installed" but cause it to simulate that the network cable is unplugged? Preferably this could be "hot" plugged/unplugged but otherwise doing it cold. Guest os is also centos 6, in case it matters (shouldn't). Any pointers? Thanks, David Mansfield Cobite, INC.

2 1

Re: [libvirt-users] [libvirt] Problem with Open vSwitch and dnsmasq
by Daniele Milani 26 Mar '12

26 Mar '12

Date: Thu, 22 Mar 2012 11:43:03 -0700 Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq From: aatteka(a)nicira.com To: dano1988(a)hotmail.it CC: libvir-list(a)redhat.com; roberto.sassu(a)polito.it; paolo.smiraglia(a)polito.it; dev(a)openvswitch.org On Thu, Mar 22, 2012 at 11:11 AM, Daniele Milani <dano1988(a)hotmail.it> wrote: I think I could try the first solution. Can you explain me how do I create the port used by dnsmasq? For example, is it correct to execute # ovs-vsctl add-port virbr1 port2 tag=2 to create a port for the vLan whose tag is 2 named "port2"? Try something like this: ovs-vsctl add-port virbr1 port2 tag=2 ovs-vsctl set Interface port2 type=internal ifconfig port2 10.0.0.1 ifconfig port2 up /usr/sbin/dnsmasq --strict-order --bind-interfaces --except-interface lo --listen-address 10.0.0.1 --dhcp-range 10.0.0.10,10.0.0.20 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/vlan2.leases --dhcp-lease-max=253 --dhcp-no-override Though I have not tested it... I tried the configuration you suggest; and the request is now received by dnsmasq. I executed: ifconfig port2 192.168.100.128 netmask 255.255.255.0 ifconfig port2 up /usr/sbin/dnsmasq --strict-order --bind-interfaces --except-interface lo --listen-address 192.168.100.128 --dhcp-range 192.168.100.129,192.168.100.139 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/vlan2.leases --dhcp-lease-max=11 --dhcp-no-override --log-queries --log-facilities=/path_to_my_file/my_file tailf /path_to_my_file/my_file obtaining the following output: dnsmasq-dhcp[]: DHCPDISCOVER(port2) 52:94:00:02:a7:1e dnsmasq-dhcp[]: DHCPOFFER(port2) 192.168.100.129 52:94:00:02:a7:1e ... dnsmasq-dhcp[]: DHCPDISCOVER(port2) 52:94:00:02:a7:1e dnsmasq-dhcp[]: DHCPOFFER(port2) 192.168.100.129 52:94:00:02:a7:1e ... Now I have a different problem: none DHCP Offer is sent by port2. Do someone know why does it happen and what to do about it? Thanks, Daniele Milani Daniele Milani Date: Thu, 22 Mar 2012 10:54:21 -0700 Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq From: aatteka(a)nicira.com To: dano1988(a)hotmail.it CC: libvir-list(a)redhat.com; roberto.sassu(a)polito.it On Thu, Mar 22, 2012 at 6:10 AM, Daniele Milani <dano1988(a)hotmail.it> wrote: Dear all, I have the following situation: -I replaced the standard bridge driver with the Open VSwitch one; -I started a NAT-network on Libvirt (bridge name virbr1); -I started a Virtual Machine (VM1) on Libvirt, and I tagged his interface (vnet0) with tag=2; -if I run "# ovs-vsctl show" I obtain: Bridge "virbr1" Port "vnet0" tag: 2 Interface "vnet0" Port "virbr1-nic" Interface "virb1-nic" Port "virbr1" Interface "virbr1" type: internal -the problem is that it is impossible to assign to VM1 an IP, because the dnsmasq daemon does not accept the tagged DHCP Discover frame. Does someone know if there is a way for dnsmasq to accept tagged frames through "virbr1", and send a tagged DHCP Offer packet back to VM1? I believe you would need to run dedicated dnsmasq process instance per each VLAN that you have. By default I guess dnsmasq runs on virbr1, hence it does not see the tagged traffic that comes from vnet0. You could try to: add another port to that bridge with the same VLAN as VM has. And run a separate instance of dnsmasq there; or change the tag of virb1 port, but this might lead to other issues (e.g. then non-tagged VMs will not get DHCP leases). Perhaps someone else can suggest something easier... Greetings, Daniele Milani -- libvir-list mailing list libvir-list(a)redhat.com https://www.redhat.com/mailman/listinfo/libvir-list

2 5

[libvirt-users] Where can I get curl-devel version >=7.18.0 . libvirt 0.9.10 compile error with ESX in CentOs
by li_fuqiong 26 Mar '12

26 Mar '12

To whom maybe concerned: I compile libvirt 0.9.10 in Centos. Command as follows: cd libvirt-0.9.10 ./configure --with-esx throw exception "configure: error: libcurl >= 7.18.0 is required for the ESX driver " yum install curl-devel: but the version is 7.15.5, is older than 7.18.0. Please Help: where can i get curl-devel version>-7.18.0? Thank you. Mark

2 1

[libvirt-users] 转发: Error when executing virsh command to ESX
by li_fuqiong 26 Mar '12

26 Mar '12

To Whom It May concern: I found that the following error is caused by adding a scsi disk to install the os, I remove the scsi disk and the error remove but still report 'out of memory': virsh # dumpxml win2003_122 internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # list --all Id Name State ---------------------------------- 80 win2003_122 running - winxp121 shut off virsh # nodeinfo error: failed to get node information error: out of memory virsh # dumpxml win2003_122 error: out of memory li_fuqiong 发件人： li_fuqiong 发送时间： 2012-03-21 15:24 收件人： libvirt-users 主题： Error when executing virsh command to ESX To Whom It May Concern: I use virsh windows 0.9.3 to connect an esx server 4.0 with no_verify=1. The Esx server is intel 2 x 3.19 GHZ CPU, 8G memroy and 2 TB hard disk. following is my execute commands and results. virsh -c esx://xxx.xxx.xxx.x?no_verify=1 virsh # list all Id Name State ---------------------------------- 80 win2003_122 running virsh # nodeinfo error: failed to get node information error: out of memory virsh # dumpxml win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # edit win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # destroy win2003_122 Domain win2003_122 destroyed virsh # start win2003_122 Domain win2003_122 started virsh # edit win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' question: 1.Why error when executeing dumpxml and edit command? How to fix it? 2.Why out of memory when nodeinfo. How to fix it? I have only one test vm on my esx server. Thanks in advance. Mark

3 4

Re: [libvirt-users] [libvirt] Problem with Open vSwitch and dnsmasq
by Daniele Milani 23 Mar '12

23 Mar '12

> Date: Thu, 22 Mar 2012 15:11:44 -0400 > From: laine(a)laine.org > To: libvir-list(a)redhat.com > Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq > > On 03/22/2012 09:10 AM, Daniele Milani wrote: > > Dear all, > > I have the following situation: > > -I replaced the standard bridge driver with the Open VSwitch one; > > I'm curious what you mean by this. > > libvirt's virtual networks currently only support the standard linux > bridge device. There is no code in libvirt to use openvswitch devices > for libvirt's virtual networks. The openvswitch support in libvirt only > applies to guest devices that use <interface type='bridge'>. > > >From your message, it sounds like there is a driver that that replaces > the linux host bridge driver with something that emulates that driver, > but is actually an openvswitch bridge on the backend. I hadn't > previously heard of this. > I did it by installing Open vSwitch with kernel modules: % ./configure --with-linux=/lib/modules/`uname -r`/build after that I replaced the standard linux bridge driver by executing: % rmmod bridge % insmod datapath/linux/brcompat.ko% ovs-brcompatd --pidfile --detachyou can find all this information at: http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob_plain;f=INST… http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob_plain;f=INST… Daniele Milani > > > -I started a NAT-network on Libvirt (bridge name virbr1); > > -I started a Virtual Machine (VM1) on Libvirt, and I tagged his > > interface (vnet0) with tag=2; > > -if I run "# ovs-vsctl show" I obtain: > > > > Bridge "virbr1" > > Port "vnet0" > > tag: 2 > > Interface "vnet0" > > Port "virbr1-nic" > > Interface "virb1-nic" > > Port "virbr1" > > Interface "virbr1" > > type: internal > > > > -the problem is that it is impossible to assign to VM1 an IP, because > > the dnsmasq daemon does not accept the tagged DHCP Discover frame. > > > > Does someone know if there is a way for dnsmasq to accept tagged > > frames through "virbr1", and send a tagged DHCP Offer packet back to VM1? > > > -- > libvir-list mailing list > libvir-list(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvir-list

1 0

[libvirt-users] HDD- and NIC-stats for dom0
by inge85＠web.de 22 Mar '12

22 Mar '12

1 0

Re: [libvirt-users] [libvirt] Problem with Open vSwitch and dnsmasq
by Laine Stump 22 Mar '12

22 Mar '12

(Cc'ing to libvirt-users(a)redhat.com) On 03/22/2012 02:43 PM, Ansis Atteka wrote: > > > On Thu, Mar 22, 2012 at 11:11 AM, Daniele Milani <dano1988(a)hotmail.it > <mailto:dano1988@hotmail.it>> wrote: > > I think I could try the first solution. Can you explain me how do > I create the port used by dnsmasq? > > For example, is it correct to execute > # ovs-vsctl add-port virbr1 port2 tag=2 > to create a port for the vLan whose tag is 2 named "port2"? > > > Try something like this: > > ovs-vsctl add-port virbr1 port2 tag=2 > ovs-vsctl set Interface port2 type=internal > ifconfig port2 10.0.0.1 > ifconfig port2 up > /usr/sbin/dnsmasq --strict-order --bind-interfaces > --except-interface lo --listen-address 10.0.0.1 --dhcp-range > 10.0.0.10,10.0.0.20 > --dhcp-leasefile=/var/lib/libvirt/dnsmasq/vlan2.leases > --dhcp-lease-max=253 --dhcp-no-override > By the time you are doing this much stuff outside of libvirt, I think it would really be better to not use a libvirt virtual network at all, since libvirt is likely to do things to that network that would end up breaking the config you've done outside of libvirt. Instead, just use the host OS configuration files to create the bridge, add the tagged port, run dnsmasq, etc., then use <interface type='bridge'> in the guest rather than <interface type='network'> > Though I have not tested it... > > > Daniele Milani > > > Date: Thu, 22 Mar 2012 10:54:21 -0700 > Subject: Re: [libvirt] Problem with Open vSwitch and dnsmasq > From: aatteka(a)nicira.com <mailto:aatteka@nicira.com> > To: dano1988(a)hotmail.it <mailto:dano1988@hotmail.it> > CC: libvir-list(a)redhat.com <mailto:libvir-list@redhat.com>; > roberto.sassu(a)polito.it <mailto:roberto.sassu@polito.it> > > > > > On Thu, Mar 22, 2012 at 6:10 AM, Daniele Milani > <dano1988(a)hotmail.it <mailto:dano1988@hotmail.it>> wrote: > > Dear all, > I have the following situation: > -I replaced the standard bridge driver with the Open VSwitch one; > -I started a NAT-network on Libvirt (bridge name virbr1); > -I started a Virtual Machine (VM1) on Libvirt, and I tagged > his interface (vnet0) with tag=2; > -if I run "# ovs-vsctl show" I obtain: > > Bridge "virbr1" > Port "vnet0" > tag: 2 > Interface "vnet0" > Port "virbr1-nic" > Interface "virb1-nic" > Port "virbr1" > Interface "virbr1" > type: internal > > -the problem is that it is impossible to assign to VM1 an IP, > because the dnsmasq daemon does not accept the tagged DHCP > Discover frame. > > Does someone know if there is a way for dnsmasq to accept > tagged frames through "virbr1", and send a tagged DHCP Offer > packet back to VM1? > > I believe you would need to run dedicated dnsmasq process instance > per each VLAN that you have. By > default I guess dnsmasq runs on virbr1, hence it does not see the > tagged traffic that comes from vnet0. > > You could try to: > > 1. add another port to that bridge with the same VLAN as VM has. > And run a separate instance of dnsmasq there; or > > > > > change the tag of virb1 port, but this might lead to other issues > (e.g. then non-tagged VMs will not get DHCP leases). > Perhaps someone else can suggest something easier... > > Greetings, > Daniele Milani > > > -- > libvir-list mailing list > libvir-list(a)redhat.com <mailto:libvir-list@redhat.com> > https://www.redhat.com/mailman/listinfo/libvir-list > > > > > > -- > libvir-list mailing list > libvir-list(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvir-list

1 0

[libvirt-users] Does libvirt check MCS labels during hot-add disk image ?
by Onkar N Mahajan 22 Mar '12

22 Mar '12

Libvirt doesn't care about security during hot add disk images. It even accepts addition of disk images of other guest running on the host. Steps followed to create this scenario : Started two VMs with following security configurations: vm1: <seclabel type='dynamic' model='selinux' relabel='yes'> <label>system_u:system_r:svirt_t:s0:c219,c564</label> <imagelabel>system_u:object_r:svirt_image_t:s0:c219,c564</imagelabel> </seclabel> vm2 : <seclabel type='dynamic' model='selinux' relabel='yes'> <label>system_u:system_r:svirt_t:s0:c122,c658</label> <imagelabel>system_u:object_r:svirt_image_t:s0:c122,c658</imagelabel> </seclabel> # virsh list --all Id Name State ---------------------------------- 28 vm1 running 29 vm2 running # ls -lZ /var/lib/libvirt/images/ -rw-------. qemu qemu system_u:object_r:svirt_image_t:s0:c219,c564 vm1.img -rw-------. qemu qemu system_u:object_r:svirt_image_t:s0:c122,c658 vm2.img # ps auxZ | grep qemu-kvm | grep -v grep system_u:system_r:svirt_t:s0:c219,c564 qemu 15744 47.2 5.8 2757852 472224 ? Sl 11:47 0:18 /usr/libexec/qemu-kvm -S -M rhel6.2.0 -enable-kvm -m 2048 -smp 4,sockets=4,cores=1,threads=1 -name vm1 -uuid d3d3a3ee-4edf-a3d3-8dab-a77740266270 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/vm1.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -drive file=/var/lib/libvirt/images/vm1.img,if=none,id=drive-virtio-disk0,format=raw,cache=none -device virtio-blk-pci,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,fd=26,id=hostnet0,vhost=on,vhostfd=27 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:a1:29:45,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -usb -device usb-tablet,id=input0 -vnc 127.0.0.1:0 -vga cirrus -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6 system_u:system_r:svirt_t:s0:c122,c658 qemu 15780 58.4 6.5 3063496 524048 ? Sl 11:47 0:20 /usr/libexec/qemu-kvm -S -M rhel6.2.0 -enable-kvm -m 2048 -smp 4,sockets=4,cores=1,threads=1 -name vm2 -uuid b07607f8-2d03-cc1f-272b-22863667d1a4 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/vm2.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -drive file=/var/lib/libvirt/images/vm2.img,if=none,id=drive-virtio-disk0,format=raw,cache=none -device virtio-blk-pci,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,fd=28,id=hostnet0,vhost=on,vhostfd=29 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:e0:76:d1,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -usb -device usb-tablet,id=input0 -vnc 127.0.0.1:1 -vga cirrus -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6 Now, try to add vm1's disk image into vm2 - this must not be allowed - since for virtualized guest images. Only svirt_t processes with the same MCS fields can read/write these images. i.e., for vm2 to access vm1's disk image it's MCS label must be 's0:c660,c689'. Hot addition of vm1's image i.e., /var/lib/libvirt/images/vm1.img is successful ( which must not be allowed ) moreover , MCS label for vm1's image has changed to that of vm2 # ls -lZ /var/lib/libvirt/images/ -rw-------. qemu qemu system_u:object_r:svirt_image_t:s0:c122,c658 vm1.img -rw-------. qemu qemu system_u:object_r:svirt_image_t:s0:c122,c658 vm2.img Trying to read/write on vm1 will generate AVC messages Seen following message in /var/log/audit/audit.log : type=VIRT_RESOURCE msg=audit(1332310867.790:10312): user pid=5114 uid=0 auid=0 ses=3 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=attach vm="vm2" uuid=b07607f8-2d03-cc1f-272b-22863667d1a4 old-disk="?" new-disk="/var/lib/libvirt/images/vm1.img": exe=2F7573722F7362696E2F6C69627669727464202864656C6574656429 hostname=? addr=? terminal=? res=success' type=AVC msg=audit(1332310963.333:10313): avc: denied { write } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310963.333:10313): arch=c000003e syscall=18 success=no exit=-13 a0=9 a1=7fd3bc59d000 a2=1000 a3=10891b000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310963.337:10314): avc: denied { read } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310963.337:10314): arch=c000003e syscall=295 success=no exit=-13 a0=9 a1=2d24368 a2=4 a3=88664000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310963.338:10315): avc: denied { read } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310963.338:10315): arch=c000003e syscall=17 success=no exit=-13 a0=9 a1=7fd3bce4f000 a2=1000 a3=88664000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310967.954:10316): avc: denied { read } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310967.954:10316): arch=c000003e syscall=295 success=no exit=-13 a0=9 a1=2d43768 a2=3 a3=1907c8000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310967.955:10317): avc: denied { read } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310967.955:10317): arch=c000003e syscall=17 success=no exit=-13 a0=9 a1=7fd3bac95000 a2=1000 a3=1907c8000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310968.594:10318): avc: denied { write } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310968.594:10318): arch=c000003e syscall=18 success=no exit=-13 a0=9 a1=7fd3bded9000 a2=1000 a3=2c3f000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310968.594:10319): avc: denied { write } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310968.594:10319): arch=c000003e syscall=18 success=no exit=-13 a0=9 a1=7fd3b7947000 a2=1000 a3=9db2d000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310968.594:10320): avc: denied { write } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310968.594:10320): arch=c000003e syscall=296 success=no exit=-13 a0=9 a1=2d6c0f8 a2=b a3=18851e000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) type=AVC msg=audit(1332310968.598:10321): avc: denied { write } for pid=16241 comm="qemu-kvm" path="/var/lib/libvirt/images/vm1.img" dev=sda1 ino=6431944 scontext=system_u:system_r:svirt_t:s0:c219,c564 tcontext=system_u:object_r:svirt_image_t:s0:c122,c658 tclass=file type=SYSCALL msg=audit(1332310968.598:10321): arch=c000003e syscall=18 success=no exit=-13 a0=9 a1=7fd383b0f000 a2=1000 a3=18842e000 items=0 ppid=1 pid=16241 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=3 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c219,c564 key=(null) restricting vm1 read/write it's own image. Changing seclabels with virsh/virt-manager is not supported so defined a new XML with <seclabel type='dynamic' model='selinux' relabel='no'> <label>system_u:system_r:svirt_t:s0:c110,c401</label> <imagelabel>system_u:object_r:svirt_image_t:s0:c110,c401</imagelabel> </seclabel> but when I try to define it , gives me error : # virsh define vm3.xml error: Failed to define domain from vm3.xml error: unsupported configuration: dynamic label type must use resource relabeling looks like it's not possible to assign relabel='no' with dynamic labelling. libvirt/src/conf/domain_conf.c : if (def->type == VIR_DOMAIN_SECLABEL_DYNAMIC && def->norelabel) { virDomainReportError(VIR_ERR_CONFIG_UNSUPPORTED, "%s", _("dynamic label type must use resource relabeling")); goto error; } -- Onkar N Mahajan System Software Engineer, IBM Linux Technology Center, Bangalore,India

2 1

[libvirt-users] MIPS emulation ....
by William A. Mahaffey III 21 Mar '12

21 Mar '12

.... When I query my qemu-mips under FC14 64-bit, libvirt.x86_64 0.8.3-10.fc14, qemu 2:0.13.0-1.fc14, I see the following: [root@Q6600:/etc, Wed Mar 21, 03:24 PM] 1022 # qemu-mips -cpu ? MIPS '4Kc' MIPS '4Km' MIPS '4KEcR1' MIPS '4KEmR1' MIPS '4KEc' MIPS '4KEm' MIPS '24Kc' MIPS '24Kf' MIPS '34Kf' [root@Q6600:/etc, Wed Mar 21, 03:24 PM] 1023 # I don't recognize any of these, I was hoping for either IPnn or R10k/12k/14k, etc. I would like to try to set up an SGI guest to run IRIX 5.3 or 6.5.nn to have availability of their compilers. Are these older CPUs supported under qemu-mips emulation ? Is there some crossover info on the above listed CPUs (i.e. one of these might in fact be what I need) ? Has anyone on-list done this ? How did it work out :-) ? TIA for any pointers .... -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr.

1 0

[libvirt-users] Number of same HDD-Images
by BrnPnk 21 Mar '12

21 Mar '12

Hey, I set up a new kvm host. (Ubuntu 10.04 x64, up-to-date) I created a new vm with virt-manager and three hdd-images (raw-format): - 30 GB (System, virtio) - 1,7 TB (System, virtio) - 1,7 TB (System, virtio) The VM (whatever linux or windows) detects only two of them. When I change all to IDE -> same problem. But when change one to IDE and the others to virtio it works. Apparently only max two images of the same type are detected. What can I do to use three virtio-devices? Thanking in anticipation

1 0

[libvirt-users] XML syntax for "dir" attribute when making Host directory available to Windows guest
by Cameron Smith 21 Mar '12

21 Mar '12

Hi, I have the following setup: Host: Ubuntu 10.04 Guest: Windows 2008 R2 Kernel: 2.6.32-40-generic virt-inst: 0.500.1-2ubuntu6.2 qemu-kvm: 0.12.3+noroms-0ubuntu9.18 All is working, however I would now like to share a given directory on the host with the guest. Using the "virsh edit" command I have prepared the following XML configuration snippet: <filesystem type='mount'> <source dir='/home/cameron/zip/hla'/> <target dir='/mnt/hla'/> </filesystem> My problem is the "target" element - what value should I use in the "dir" attribute, given that Windows drive paths do not follow Unix format (e.g. "F:\" versus "/mnt/hla"). Can any help? regards, cameron

2 3

[libvirt-users] Error when executing virsh command to ESX
by li_fuqiong 21 Mar '12

21 Mar '12

To Whom It May Concern: I use virsh windows 0.9.3 to connect an esx server 4.0 with no_verify=1. The Esx server is intel 2 x 3.19 GHZ CPU, 8G memroy and 2 TB hard disk. following is my execute commands and results. virsh -c esx://xxx.xxx.xxx.x?no_verify=1 virsh # list all Id Name State ---------------------------------- 80 win2003_122 running virsh # nodeinfo error: failed to get node information error: out of memory virsh # dumpxml win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # edit win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' virsh # destroy win2003_122 Domain win2003_122 destroyed virsh # start win2003_122 Domain win2003_122 started virsh # edit win2003_122 error: internal error Invalid or not yet handled value '/vmfs/devices/genscsi/mp x.vmhba0:C0:T1:L0' for VMX entry 'scsi0:1.fileName' question: 1.Why error when executeing dumpxml and edit command? How to fix it? 2.Why out of memory when nodeinfo. How to fix it? I have only one test vm on my esx server. Thanks in advance. Mark

1 0

[libvirt-users] error starting virtual machine manager
by Su Zhang 20 Mar '12

20 Mar '12

Hi Community, I encountered an error while launching the virtual machine manger. I believe that all services have been started including libvirtd, xend, xencommons, etc. But not sure the reason about this error. Here is the error information: Error starting Virtual Machine Manager: Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See http://projects.gnome.org/gconf/ for information. (Details - 1: Failed to get connection to session: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.) Traceback (most recent call last): File "/usr/share/virt-manager/virt-manager.py", line 383, in <module> main() File "/usr/share/virt-manager/virt-manager.py", line 315, in main config = virtManager.config.vmmConfig(appname, appversion, glade_dir) File "/usr/share/virt-manager/virtManager/config.py", line 96, in __init__ self.conf.add_dir(self.conf_dir, gconf.CLIENT_PRELOAD_NONE) GError: Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See http://projects.gnome.org/gconf/ for information. (Details - 1: Failed to get connection to session: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.) Does anyone have any ideas on this error? Thanks in advance, -- Su Zhang Ph.D Candidate Computing and Information Sciences Kansas State University

1 0

[libvirt-users] libvirt and SNMP agent
by Ricardo Hillbrecht 20 Mar '12

20 Mar '12

Hi all I'm working in a MIB to manage virtual machines using SNMP regardless of VMM manufacturer. To demonstrate this MIB, I plan to insert libvirt functions inside an SNMP agent (NET-SNMP agent). Does anyone know if there is some work using net-snmp and libvirt together, or can give advice about this ? Thanks Hillbrecht

3 2

[libvirt-users] Can libvirt set or change the IP address of guest machine
by Harold Fei 19 Mar '12

19 Mar '12

To Whom It May Concern: I use libvirt over one month, I need a function to set the ip address of the guest machine. One can change the guest ip address will be a great appreciation. However, I did not find such a feature in the process of learning libvirt. The purpose of this mail is to ask the experts whether libvirt provide such a feature. If there is no, how can I implement such functionality. Additionally, I already know NAT based network and Routed network can use DHCP, but I want to use an existing host bridge. Best Wishes Harold

3 2

[libvirt-users] manage VM without root access?
by Jun Koi 19 Mar '12

19 Mar '12

hi, with libvirt, is it possible to manage VMs (using virsh, for e.g) without root access? if that is possible, how can i do that? many thanks, Jun

4 3

Re: [libvirt-users] no connection driver available for No connection for URI xen:///
by Su Zhang 17 Mar '12

17 Mar '12

Here it is: # ll /usr/lib64/libvirt.so.0 lrwxrwxrwx. 1 root root 16 Mar 12 21:19 /usr/lib64/libvirt.so.0 -> libvirt.so.0.9.4 So you meant that I used a wrong libvirt.so? How can I correct this? On Thu, Mar 15, 2012 at 10:52 PM, Alex Jia <ajia(a)redhat.com> wrote: > ** > On 03/16/2012 11:41 AM, Su Zhang wrote: > > > > On Thu, Mar 15, 2012 at 10:20 PM, Alex Jia <ajia(a)redhat.com> wrote: > >> On 03/16/2012 11:02 AM, Su Zhang wrote: >> >> >> >> On Thu, Mar 15, 2012 at 9:45 PM, Alex Jia <ajia(a)redhat.com> wrote: >> >>> On 03/16/2012 05:33 AM, Su Zhang wrote: >>> >>> >>> >>> On Thu, Mar 15, 2012 at 4:20 PM, Eric Blake <eblake(a)redhat.com> wrote: >>> >>>> On 03/15/2012 02:57 PM, Su Zhang wrote: >>>> > Hi all, >>>> > >>>> > I am trying to use virt-install to install domU image. However, I >>>> > encountered the following issue. It seems that a connection driver is >>>> > needed for Xen. >>>> > I am new to both libvirt and Xen. Anyone have any ideas on what's >>>> wrong >>>> > with the following error ? >>>> > >>>> > >>>> > >>>> > # virt-install --connect=xen:/// -p -d >>>> > Thu, 15 Mar 2012 10:17:55 DEBUG Launched with command line: >>>> > /usr/bin/virt-install --connect=xen:/// -p -d >>>> > Thu, 15 Mar 2012 10:17:55 DEBUG Requesting libvirt URI xen:/// >>>> > Thu, 15 Mar 2012 10:17:55 ERROR no connection driver available for >>>> No >>>> > connection for URI xen:/// >>>> >>>> This probably means that your copy of libvirt.so and libvirtd was built >>>> without xen support. What does >>>> >>>> virsh --version=long >>>> >>>> say? Also, are you sure libvirtd is running? >>>> >>> In addition, I want to know your libvirt.so, libvirtd, xend location, >>> for example, >>> # which libvirtd >>> # which xend >>> # locate libvirt.so >>> >>> Please also make sure xend service is running: >>> # service xend status >>> >>> >>>> -- >>>> Eric Blake eblake(a)redhat.com +1-919-301-3266 >>>> Libvirt virtualization library http://libvirt.org >>>> >>>> >>> Eric, >>> >>> Here is the output: >>> # virsh --version=long >>> Virsh command line tool of libvirt 0.9.10 >>> See web site at http://libvirt.org/ >>> >>> Compiled with support for: >>> Hypervisors: Xen QEmu/KVM UML OpenVZ VirtualBox LXC Test >>> Networking: Remote Daemon Network Bridging Nwfilter VirtualPort >>> Storage: Dir Filesystem SCSI Multipath iSCSI LVM >>> Miscellaneous: SELinux Secrets Debug >>> >>> It seems that it does support Xen. >>> >>> Yeah, Xen indeed appears in Hypervisors line. >>> >>> >>> I am not sure if libvirtd is running so I use the following command to >>> start it: >>> >>> [root@XenTester srv]# /etc/rc.d/init.d/libvirtd start >>> >>> Right, you may also use service libvirtd start, and check it by service >>> libvirtd status or ps -ef|grep libvirtd. >>> >>> >>> But the same error is still there. >>> >>> Am I using the right way to start libvirtd service? Are there any other >>> possible reasons of this error? >>> >>> >>> Thanks, >>> >>> -- >>> Su Zhang >>> Ph.D Candidate >>> Computing and Information Sciences >>> Kansas State University >>> >>> >>> _______________________________________________ >>> libvirt-users mailing listlibvirt-users@redhat.comhttps://www.redhat.com/mailman/listinfo/libvirt-users >>> >>> >>> Alex, >> >> Here is some information: >> >> # /etc/init.d/xencommons start >> Starting xenstored... >> Setting domain 0 name... >> Starting xenconsoled... >> [root@XenTester su]# /etc/init.d/xend start >> [root@XenTester su]# which libvirtd >> /usr/local/sbin/libvirtd >> [root@XenTester su]# which xend >> /usr/sbin/xend >> [root@XenTester su]# locate libvirt.so >> /usr/lib64/libvirt.so.0 >> /usr/lib64/libvirt.so.0.9.4 >> /usr/local/lib/libvirt.so >> /usr/local/lib/libvirt.so.0 >> /usr/local/lib/libvirt.so.0.9.10 >> >> You have 2 different libvirt versions 0.9.4 and 0.9.10, and your 0.9.10 >> is put under the >> /usr/local/lib directory, so I guess you haven't used ./configure with >> --prefix=/usr option >> or directly use ./autogen.sh --system when you configure and compile >> libvirt. >> >> And also please yum install strace -y if you haven't installed strace >> rpm, then run the following operation: >> >> # strace -o strace.txt virt-install --connect=xen:/// -p >> >> Then attach strace.txt as a attachment. >> >> Thanks, >> Alex >> >> > Alex, > > Thanks. I have run ./autogen.sh --system. And "make" and "make install" > the libvirt once again. > I encountered one type of errors while running "make install", it seems > that the installer is looking for a bunch of HTML files under > /usr/bin/install. here is the error info: > > /usr/bin/install: cannot stat `./api.html': No such file or directory > /usr/bin/install: cannot stat `./api_extension.html': No such file or > directory > /usr/bin/install: cannot stat `./apps.html': No such file or directory > /usr/bin/install: cannot stat `./archdomain.html': No such file or > directory > /usr/bin/install: cannot stat `./architecture.html': No such file or > directory > /usr/bin/install: cannot stat `./archnetwork.html': No such file or > directory > /usr/bin/install: cannot stat `./archnode.html': No such file or directory > (there are still tens of HTML files missing) > .... > > It's not important for our issues. > > > Do you think this type of errors will affect the functionality of libvirt? > Also, I checked and it seems that I've the latest strace package > installed. So I run "strace -o strace.txt virt-install --connect=xen:/// > -p". > Please find strace.txt attached. > > I saw virt-install is opening /usr/lib64/libvirt.so.0 in strace.txt: > > open("/usr/lib64/libvirt.so.0", O_RDONLY) = 7 > > > I want to confirm whether you're using compiling libvirt 0.9.10, > ll /usr/lib64/libvirt.so.0 say what? > > Thanks, > Alex > > > Thanks, > >> [root@XenTester su]# service xend status >> [root@XenTester su]# ps -ef|grep libvirtd >> root 2242 1 0 21:52 ? 00:00:00 libvirtd --daemon >> root 3295 3112 0 21:59 pts/0 00:00:00 grep libvirtd >> >> Can you see if it is normal here? >> >> Thanks, >> >> >> -- >> Su Zhang >> Ph.D Candidate >> Computing and Information Sciences >> Kansas State University >> >> >> > > > -- > Su Zhang > Ph.D Candidate > Computing and Information Sciences > Kansas State University > > > -- Su Zhang Ph.D Candidate Computing and Information Sciences Kansas State University

2 10

Re: [libvirt-users] virsh create error : monitor socket did not (Alex Jia)
by Josir Cardoso Gomes 16 Mar '12

16 Mar '12

Hi Alex, when I got this error, it was a vnc listener problem. Is there other actives vms on this server? try to change the port number to see if the problem was solved. <graphics type='vnc' listen='0.0.0.0' port='5909'/> Good Luck. Josir Gomes Date: Thu, 15 Mar 2012 18:07:07 +0800 > From: Alex Jia <ajia(a)redhat.com> > To: ??? <zhanggp(a)neusoft.com> > Cc: "libvirt-users(a)redhat.com" <libvirt-users(a)redhat.com> > Subject: Re: [libvirt-users] ??: ??: virsh create error : monitor > socket did not > Message-ID: <4F61BF4B.2030103(a)redhat.com> > Content-Type: text/plain; charset="gb2312" > > On 03/15/2012 05:39 PM, ??? wrote: > > sorry , i send an error template , our template like this: > It probably is a bug on libvirt 0.8.7, and I haven't met this issue > using your XML template on > rhel6.2 with libvirt-0.9.10-5.el6.x86_64, I'm not sure whether this > issue is fixed on 0.8.7-18.el6_1.4, > maybe, you may upgrade your libvirt and then try it again. > > For libvirtd log, yeah, it will be very big if you set a low debugger > level such as level 1, but > as usual, we need also some debugger information except for error, > maybe, you can filter > some important information or set debugger level to higher level to > avoid a big size log file. > in addition, if you're run virt-manager please close it, otherwise, > libvirt will record many > debugger information into libvirtd.log. > > BTW, if you don't want log file eat your the whole disk space, please > remember to change > libvirtd.conf debugger level then remove libvirtd.log and restart > libvirtd service. > > Regards, > Alex > > <domain type='kvm' > > xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'> > > <name>one-9</name> > > <vcpu>1</vcpu> > > <memory>524288</memory> > > <os> > > <type arch='x86_64'>hvm</type> > > <boot dev='hd'/> > > </os> > > <devices> > > <emulator>/usr/bin/kvm</emulator> > > <disk type='file' device='disk'> > > <source file='/one_images/9/images/disk.0'/> > > <target dev='hda'/> > > <driver name='qemu' type='raw' cache='default'/> > > </disk> > > <disk type='file' device='cdrom'> > > <source file='/one_images/9/images/disk.1'/> > > <target dev='hdc'/> > > <readonly/> > > <driver name='qemu' type='raw'/> > > </disk> > > <interface type='bridge'> > > <source bridge='kvmbr0'/> > > <mac address='02:00:0b:01:01:03'/> > > </interface> > > <graphics type='vnc' listen='0.0.0.0' port='5909'/> > > </devices> > > <features> > > <acpi/> > > </features> > > </domain> > > ------------------------------------------------------------------------ > > ??? > > *????* ??? <mailto:zhanggp@neusoft.com> > > *?????* 2012-03-15 17:25 > > *????* Alex Jia <mailto:ajia@redhat.com> > > *???* ??: Re: [libvirt-users] virsh create error : monitor socket > > did not > > Hi? > > my libvirt version is 0.8.7 and qemu-kvm-0.12.1.2 on redhat6.1. > > I don't set libvirt log, so thank you for reminding me. > > I think my template is right ,because my code generate automatically. > > But i would like to share with you and find the problem. > > By the way , i configured the libvirt log, and i find this file kept > > getting bigger. If this file becomes large enough , i don't think it's > > a good thing , so, you must have some advise to handle it ,right? > > Thanks. > > ------------------------------------------------------------------------ > > ??? > > *????* Alex Jia <mailto:ajia@redhat.com> > > *?????* 2012-03-15 16:56 > > *????* ??? <mailto:zhanggp@neusoft.com> > > *???* libvirt-users <mailto:libvirt-users@redhat.com> > > *???* Re: [libvirt-users] virsh create error : monitor socket did not > > On 03/15/2012 11:31 AM, ??? wrote: > >> Hi, > >> Occasionally I run into this situation , i created a vm-template and > >> i use "virsh create vm-template " to start a vm .After a pause , i > >> got this error : > >> virsh create error : monitor socket did not ; > > Could you provide your libvirt & qemu-kvm version ? what's your > > platform? fedora or others? > >> Then i try again with the same template and the same command , my vm > >> created successfully. > >> I try to find something in the file of > >> /var/log/libvrit/qemu/vm-template.log, but i cannot find useful > >> things except some parameters. > > However, it's helpful if you may attach the above log as a attachment. > > in addition, you may add the following lines into > > /etc/libvirt/libvirtd.conf and restart libvirtd service then repeat > > 'virsh create vm-template' again: > > > > log_filters="3:remote 3:event 1:qemu 1:libvirt 1:conf" > > log_outputs="1:file:/var/log/libvirt/libvirtd.log" > > > > Could you attach /var/log/libvirt/libvirtd.log as a attachment in here? > >> So , i wonder whether my host running vms too much ? I make sure that > >> my template is right, and this error occasionally appear a few times. > > But if you can attach your guest XML template as a attachment, maybe, > > I can exclude other reason. > > > > Regards, > > Alex > >> Can someone teach me ? > >> Thanks. > >> Best regards. > >> ------------------------------------------------------------------------ > >> ??? > >> tel: 13718913184 > >> mail: zhanggp(a)neusoft.com <mailto:zhanggp@neusoft.com> > >> ???????? > >> ?????????? > >> http://www.neusoft.com > >> > --------------------------------------------------------------------------------------------------- > >> Confidentiality Notice: The information contained in this e-mail and > >> any accompanying attachment(s) > >> is intended only for the use of the intended recipient and may be > >> confidential and/or privileged of > >> Neusoft Corporation, its subsidiaries and/or its affiliates. If any > >> reader of this communication is > >> not the intended recipient, unauthorized use, forwarding, printing, > >> storing, disclosure or copying > >> is strictly prohibited, and may be unlawful.If you have received this > >> communication in error,please > >> immediately notify the sender by return e-mail, and delete the > >> original message and all copies from > >> your system. Thank you. > >> > --------------------------------------------------------------------------------------------------- > >> > >> > >> > >> _______________________________________________ > >> libvirt-users mailing list > >> libvirt-users(a)redhat.com > >> https://www.redhat.com/mailman/listinfo/libvirt-users > > > > > --------------------------------------------------------------------------------------------------- > > Confidentiality Notice: The information contained in this e-mail and > > any accompanying attachment(s) > > is intended only for the use of the intended recipient and may be > > confidential and/or privileged of > > Neusoft Corporation, its subsidiaries and/or its affiliates. If any > > reader of this communication is > > not the intended recipient, unauthorized use, forwarding, printing, > > storing, disclosure or copying > > is strictly prohibited, and may be unlawful.If you have received this > > communication in error,please > > immediately notify the sender by return e-mail, and delete the > > original message and all copies from > > your system. Thank you. > > > --------------------------------------------------------------------------------------------------- > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > https://www.redhat.com/archives/libvirt-users/attachments/20120315/d9139b5d… > > > -------------- next part -------------- > A non-text attachment was scrubbed... > Name: not available > Type: image/jpeg > Size: 11635 bytes > Desc: not available > URL: < > https://www.redhat.com/archives/libvirt-users/attachments/20120315/d9139b5d… > > > > ------------------------------ > > _______________________________________________ > libvirt-users mailing list > libvirt-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvirt-users > > End of libvirt-users Digest, Vol 27, Issue 27 > ********************************************* >

1 0

[libvirt-users] no connection driver available for No connection for URI xen:///
by Su Zhang 16 Mar '12

16 Mar '12

Hi all, I am trying to use virt-install to install domU image. However, I encountered the following issue. It seems that a connection driver is needed for Xen. I am new to both libvirt and Xen. Anyone have any ideas on what's wrong with the following error ? # virt-install --connect=xen:/// -p -d Thu, 15 Mar 2012 10:17:55 DEBUG Launched with command line: /usr/bin/virt-install --connect=xen:/// -p -d Thu, 15 Mar 2012 10:17:55 DEBUG Requesting libvirt URI xen:/// Thu, 15 Mar 2012 10:17:55 ERROR no connection driver available for No connection for URI xen:/// Thu, 15 Mar 2012 10:17:55 DEBUG Traceback (most recent call last): File "/usr/bin/virt-install", line 1004, in <module> sys.exit(main()) File "/usr/bin/virt-install", line 984, in main conn = cli.getConnection(options. connect) File "/usr/lib/python2.6/site-packages/virtinst/cli.py", line 327, in getConnection conn = open_connection(uri) File "/usr/lib/python2.6/site-packages/virtinst/cli.py", line 342, in open_connection open_flags) File "/usr/lib64/python2.6/site-packages/libvirt.py", line 102, in openAuth if ret is None:raise libvirtError('virConnectOpenAuth() failed') libvirtError: no connection driver available for No connection for URI xen:/// By the way, Xen is installed successfully as both "xm list" and "xm info" can output appropriately. Thanks, -- Su Zhang Ph.D Candidate Computing and Information Sciences Kansas State University

3 5

[libvirt-users] Prevent starting a guest concurrently on multiple hosts when using shared storage
by Andreas Ntaflos 16 Mar '12

16 Mar '12

Hi list, Scenario: Libvirt managing KVM-based guests on multiple physical virtualisation hosts. These hosts are attached to some kind of shared storage, be it NFS, GFS2 or whatever. Guest images live on the shared storage so that VMs can be migrated (live or not) between the physical hosts. Basically all Libvirt hosts have definitions of all guests. How can I prevent the same guest from being started on different hosts concurrently, either by accident or intentionally? As far as I can see there is no locking or similar mechanism that would indicate to the Libvirt daemon that a guest (and its VM image) is already running on/in use by another host. This might be a very basic question but I can't seem to find a satisfying answer. Is it even possible? Or does using a shared storage mean that one has to be really, really careful what to start, and where? Is this even something for which Libvirt should be responsible? Any insight is appreciated. Thanks, Andreas

3 2

[libvirt-users] Host does not support virtualization type 'xen'
by Su Zhang 15 Mar '12

15 Mar '12

Hello Community, I successfully installed and run xen (xm list and xm info (but virt_caps only has hvm) can output appropriately). However, while I was installing domU image by using virt-install -p at domU OS. I encountered an error information" Host does not support virtualization type 'xen' ". I built xen from source. Some of my friends have the same issue, but if they use pre-build xen, the issue will go away. However, I want to insist in using my version of xen (build from source). Does anyone can give any hint about this error? I asked the same question at xen community and they said this is not a issue from xen but libvirt. Meanwhile they told me I need to rebuild libvirt to adapt my current version of Xen. However, after I re-build xen (download, decompress, ./configure, make, make install), the error is still there. Can anyone let me know if I built the libvirt correctly? Do I need to do anything specific to my current version (4.1.2) of Xen? I'll appreciate if any suggestions can be given, Thanks, -- Su Zhang Ph.D Candidate Computing and Information Sciences Kansas State University

3 11