- Users - libvirt List Archives

[libvirt-users] luks ecrypted storage poll - lvm - possible?
by lejeczek 21 Dec '18

21 Dec '18

hi everyone, do we get to encrypt lvm pools in/with libvirt? I'm on Centos 7.x but see mention of it, not even on the net. Or in other words - can guests(lxc I'm thinking of) run off ecrypted lvm where at least the part when dev gets luksOpened is taken care of by libvirt? many thanks, L.

3 3

[libvirt-users] Shutdown problem from virsh
by Thomas Munfort 20 Dec '18

20 Dec '18

Hi everyone, On a server running Debian 9, I have multiple KVM guests automatically started at boot by libvirtd.service and running in the background. When I shutdown this server, libvirtd.service automatically and gracefully shut them all down first. So, every thing is fine so far. Recently, I've added an additional KVM guest and this one does not respond to a shutdown command from virsh and therefore messes up the shutdown of the whole Debian 9 server. The things is, this additional KVM guest is not a regular Linux guest. It is DiskStation Manager (DSM) 6.2 from Synology (with XPEnology as the boot loader). I know this setup isn't supported by libvirt nor Synology. Nonetheless, I wonder if anyone would have idea on that matter ? Even some suggestions might help me find what needs fixing. Thank you, Best regards, Thomas M.

1 2

[libvirt-users] CfP for VHPC ‘19: HPC Virtualization Paper Registration due January 25, 2019 - 14th Virtualization in High-Performance Cloud Computing Workshop@ISC
by VHPC 19 20 Dec '18

20 Dec '18

Please accept our apologies if you receive multiple copies of this Call for Papers ==================================================================== CALL FOR PAPERS 14th Workshop on Virtualization in High-Performance Cloud Computing (VHPC '19) held in conjunction with the International Supercomputing Conference - High Performance, June 16-20, 2019, Frankfurt, Germany. (Springer LNCS Proceedings) ==================================================================== Date: June 20, 2019 Workshop URL: http://vhpc.org Abstract Submission Deadline: January 25, 2019 Springer LNCS, rolling abstract submission Abstract/Paper Submission Link: https://edas.info/newPaper.php?c=25685 Call for Papers Containers and virtualization technologies constitute key enabling factors for flexible resource management in modern data centers, and particularly in cloud environments. Cloud providers need to manage complex infrastructures in a seamless fashion to support the highly dynamic and heterogeneous workloads and hosted applications customers deploy. Similarly, HPC environments have been increasingly adopting techniques that enable flexible management of vast computing and networking resources, close to marginal provisioning cost, which is unprecedented in the history of scientific and commercial computing. Various virtualization-containerization technologies contribute to the overall picture in different ways: machine virtualization, with its capability to enable consolidation of multiple underutilized servers with heterogeneous software and operating systems (OSes), and its capability to live-migrate a fully operating virtual machine (VM) with a very short downtime, enables novel and dynamic ways to manage physical servers; OS-level virtualization (i.e., containerization), with its capability to isolate multiple user-space environments and to allow for their coexistence within the same OS kernel, promises to provide many of the advantages of machine virtualization with high levels of responsiveness and performance; lastly, unikernels provide for many virtualization benefits with a minimized OS/library surface. I/O Virtualization in turn allows physical network interfaces to take traffic from multiple VMs or containers; network virtualization, with its capability to create logical network overlays that are independent of the underlying physical topology is furthermore enabling virtualization of HPC infrastructures. Publication Accepted papers will be published in a Springer LNCS proceedings volume. Topics of Interest The VHPC program committee solicits original, high-quality submissions related to virtualization across the entire software stack with a special focus on the intersection of HPC, containers-virtualization and the cloud. Major Topics: - HPC on Containers and VMs - Containerized applications with OS-level virtualization - Lightweight applications with Unikernels - HP-as-a-Service each major topic encompassing design/architecture, management, performance management, modeling and configuration/tooling: Design / Architecture: - Containers and OS-level virtualization (LXC, Docker, rkt, Singularity, Shifter, i.a.) - Hypervisor support for heterogeneous resources (GPUs, co-processors, FPGAs, etc.) - Hypervisor extensions to mitigate side-channel attacks ([micro-]architectural timing attacks, privilege escalation) - VM & Container trust and security models - Multi-environment coupling, system software supporting in-situ analysis with HPC simulation - Cloud reliability, fault-tolerance and high-availability - Energy-efficient and power-aware virtualization - Containers inside VMs with hypervisor isolation - Virtualization support for emerging memory technologies - Lightweight/specialized operating systems in conjunction with virtual machines - Hypervisor support for heterogeneous resources (GPUs, co-processors, FPGAs, etc.) - Novel unikernels and use cases for virtualized HPC environments - ARM-based hypervisors, ARM virtualization extensions Management: - Container and VM management for HPC and cloud environments - HPC services integration, services to support HPC - Service and on-demand scheduling & resource management - Dedicated workload management with VMs or containers - Workflow coupling with VMs and containers - Unikernel, lightweight VM application management - Environments and tools for operating containerized environments (batch, orchestration) - Novel models for non-HPC workload provisioning on HPC resources Performance Measurements and Modeling: - Performance improvements for or driven by unikernels - Optimizations of virtual machine monitor platforms and hypervisors - Scalability analysis of VMs and/or containers at large scale - Performance measurement, modeling and monitoring of virtualized/cloud workloads - Virtualization in supercomputing environments, HPC clusters, HPC in the cloud Configuration / Tooling: - Tool support for unikernels: configuration/build environments, debuggers, profilers - Job scheduling/control/policy and container placement in virtualized environments - Operating MPI in containers/VMs and Unikernels - Software defined networks and network virtualization - GPU virtualization operationalization The Workshop on Virtualization in High-Performance Cloud Computing (VHPC) aims to bring together researchers and industrial practitioners facing the challenges posed by virtualization in order to foster discussion, collaboration, mutual exchange of knowledge and experience, enabling research to ultimately provide novel solutions for virtualized computing systems of tomorrow. The workshop will be one day in length, composed of 20 min paper presentations, each followed by 10 min discussion sections, plus lightning talks that are limited to 5 minutes. Presentations may be accompanied by interactive demonstrations. Important Dates January 25, 2019 - Abstract Registration deadline Apr 19th, 2019 - Paper submission deadline (Springer LNCS) May 3, 2019 - Acceptance notification June 20th, 2019 - Workshop Day July 10th, 2019 - Camera-ready version due Chair Michael Alexander (chair), University of Vienna, Austria Anastassios Nanos (co-chair), SunLight.io, UK Andrew Younge (co-chair), Sandia National Laboratories Program committee Stergios Anastasiadis, University of Ioannina, Greece Jakob Blomer, CERN, Europe Eduardo César, Universidad Autonoma de Barcelona, Spain Stephen Crago, USC ISI, USA Tommaso Cucinotta, St. Anna School of Advanced Studies, Italy Christoffer Dall, Columbia University, USA Patrick Dreher, MIT, USA Kyle Hale, Northwestern University, USA Brian Kocoloski, Washington University, USA John Lange, University of Pittsburgh, USA Giuseppe Lettieri, University of Pisa, Italy Qing Liu, Oak Ridge National Laboratory, USA Nikos Parlavantzas, IRISA, France Kevin Pedretti, Sandia National Laboratories, USA Amer Qouneh, Western New England University, USA Carlos Reaño, Queen’s University Belfast, UK Borja Sotomayor, University of Chicago, USA Joe Stubbs, Texas Advanced Computing Center, USA Anata Tiwari, San Diego Supercomputer Center, USA Kurt Tutschku, Blekinge Institute of Technology, Sweden Yasuhiro Watashiba, Osaka University, Japan Chao-Tung Yang, Tunghai University, Taiwan Na Zhang, VMware, USA Paper Submission-Publication Papers submitted to the workshop will be reviewed by at least two members of the program committee and external reviewers. Submissions should include abstract, keywords, the e-mail address of the corresponding author, and must not exceed 10 pages, including tables and figures at a main font size no smaller than 11 point. Submission of a paper should be regarded as a commitment that, should the paper be accepted, at least one of the authors will register and attend the conference to present the work. Accepted papers will be published in a Springer LNCS volume. The format must be according to the Springer LNCS Style. Initial submissions are in PDF; authors of accepted papers will be requested to provide source files. Format Guidelines: ftp://ftp.springernature.com/cs-proceeding/llncs/llncs2e.zip Abstract, Paper Submission Link: https://edas.info/newPaper.php?c=25685 Lightning Talks Lightning Talks are non-paper track, synoptical in nature and are strictly limited to 5 minutes. They can be used to gain early feedback on ongoing research, for demonstrations, to present research results, early research ideas, perspectives and positions of interest to the community. Submit abstract via the main submission link. General Information The workshop is one day in length and will be held in conjunction with the International Supercomputing Conference - High Performance (ISC) 2019, June 16-20, Frankfurt, Germany.

1 0

[libvirt-users] win10 network speed issue
by Michael Taboada 20 Dec '18

20 Dec '18

Hi there, I'm running a windows 10 vm on an arch linux host, linux 4.19.9.arch1-1, qemu 3.1.0-1, libvirt (from git) 4.10.0.45.g34eca98522-1, and recently have been having issues with network speeds on the windows vm. It started out getting 300-400 mb down, now it's down to about 10-30. Can anyone think of anything that might have caused this? I tried switching the network type to virtio, but that didn't make much of a difference. Afaik I don't think I've changed anything config-wise in the windows vm. Also the network type is nat. -Michael.

1 0

[libvirt-users] vms doesn't coomunicate via network
by daggs 19 Dec '18

19 Dec '18

Greetings, I have two vms, one is a router and the other one is a client, for some reason, the client vm is unable get ip via dhcp from the router vm. here are outputs: vm1.xml: <interface type='bridge'> <mac address='52:54:00:54:78:be'/> <source bridge='virbr0'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x01' slot='0x00' function='0x0'/> </interface> router.xml: <interface type='bridge'> <mac address='52:54:00:f9:bd:fb'/> <source bridge='virbr0'/> <target dev='vnet1'/> <model type='virtio'/> <alias name='net1'/> <address type='pci' domain='0x0000' bus='0x0a' slot='0x00' function='0x0'/> </interface> ifconfig: $ busybox ifconfig -a dummy0 Link encap:Ethernet HWaddr CE:2E:DD:15:8A:0C BROADCAST NOARP MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:21428 errors:0 dropped:0 overruns:0 frame:0 TX packets:21428 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1039176 (1014.8 KiB) TX bytes:1039176 (1014.8 KiB) virbr0 Link encap:Ethernet HWaddr 52:54:00:7E:27:AF inet6 addr: fe80::5054:ff:fe7e:27af/64 Scope:Link inet6 addr: fdab:9802:eb52:0:5054:ff:fe7e:27af/64 Scope:Global UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:530861 errors:0 dropped:0 overruns:0 frame:0 TX packets:85 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:591914339 (564.4 MiB) TX bytes:4042 (3.9 KiB) virbr0-dummy Link encap:Ethernet HWaddr 52:54:00:7E:27:AF UP BROADCAST RUNNING NOARP MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:141357 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:32288355 (30.7 MiB) vnet0 Link encap:Ethernet HWaddr FE:54:00:8B:66:C1 inet addr:10.0.0.3 Bcast:10.0.0.255 Mask:255.255.255.0 inet6 addr: fdab:9802:eb52:0:fc54:ff:fe8b:66c1/64 Scope:Global inet6 addr: fe80::fc54:ff:fe8b:66c1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:261801 errors:0 dropped:0 overruns:0 frame:0 TX packets:438289 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:42370344 (40.4 MiB) TX bytes:895415306 (853.9 MiB) vnet1 Link encap:Ethernet HWaddr FE:54:00:F9:BD:FB inet6 addr: fe80::fc54:ff:fef9:bdfb/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:531064 errors:0 dropped:0 overruns:0 frame:0 TX packets:262 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:599366518 (571.5 MiB) TX bytes:27088 (26.4 KiB) /etc/network/interface: $ cat /etc/network/interfaces # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). source /etc/network/interfaces.d/* # The loopback network interface auto lo iface lo inet loopback # The primary network interface #allow-hotplug enx503eaa4f9dcd #iface enx503eaa4f9dcd inet dhcp #allow-hotplug enp0s31f6 #iface enp0s31f6 inet dhcp allow-hotplug vnet0 iface vnet0 inet dhcp auto virbr0-dummy iface virbr0-dummy inet manual pre-up /sbin/ip link add virbr0-dummy type dummy up /sbin/ip link set virbr0-dummy address 52:54:00:7e:27:af auto virbr0 iface virbr0 inet manual hwaddress ether 19:7c:3b:92:ec:ee bridge_ports virbr0-dummy any ideas what cen be the issue? Thanks, Dagg.

2 2

[libvirt-users] "virsh list --all" is intermittently causing a shutdown client to boot?
by Peter Kukla 14 Dec '18

14 Dec '18

Hello, I have a CentOS 7 client running on a CentOS 7 server. "virsh --version" reports that 3.9.0 is being used. I'm issuing a "virsh shutdown" command to shutdown the client. I then confirm that the client has actually shutdown using "virsh list --all". Lately I've been seeing instances where I shutdown the client, turn away to work on something else, and then turn back to find that the client has booted again. Initially I thought I was mistaken, and that I somehow hadn't properly shutdown the client, but further experimentation shows that's definitely not the case. I've been able to reproduce this repeatedly using the following steps. 1. Run "virsh shutdown CLIENT"2. Wait ~30-60 seconds3. Run "virsh list --all; virsh console CLIENT" If I run "virsh console CLIENT" on its own when the client is in a shutdown state, I get the expected "error: The domain is not running" message. If I omit step #2 and run step #3 immediately after shutting down the client, virsh also complains that the client's not started and refuses to open a console. However, if I add a pause -- step 2, above -- between the shutdown and the "list --all" commands, then "list --all" shows that the client is running, and a console is opened to the VM. I have confirmed that the client boot is definitely being started by the "list --all" command (and not being started by something else while I'm not looking) by combining the "list --all" and "console" commands in step 3. This is ensuring that the console is started as soon as the "list --all" is complete, and the resulting screen output shows the BIOS boot options quickly followed by the kernel boot messages being dumped to the console. I can watch the entire boot process from start to finish. That pause between the shutdown and the "list --all" is critical. I've shutdown the client and then immediately followed it up with the command: watch virsh list --all ...which will run the "list --all" command every 2 seconds. This will run indefinitely without triggering the boot, which eliminates the possibility of the boot occurring due to the amount of time since the shutdown. It may be that other virsh commands are also causing the client to boot, but thus far I've only reproduced it using the list --all command. Can anyone tell me why this is happening? A bug? Something in my config? Something else? Thanks in advance, -peter .

4 6

[libvirt-users] Libvirt api for esx
by ROHIT SINGH 13 Dec '18

13 Dec '18

Hi, I am doing poc for using libvirt api for implementation of esx in python. I tried researching through module but did not find a way how it works for esx. Any help on how to proceed specifically for esx would be of great help. Please let me know as soon as possible, lagging on deliverables. Thanks for help!! Regards Rohit Singh

2 11

[libvirt-users] Usable and non-usable CPU models in nested virtualization
by Milan Zamazal 12 Dec '18

12 Dec '18

Hi, some custom CPU models are reported from virConnectGetDomainCapabilities as usable='yes' on a physical machine while as usable='no' inside a VM running on the same machine. That's not completely surprising. But what surprises me is that those models are still reported from virConnectCompareCPU as supported (VIR_CPU_COMPARE_SUPERSET) in the nested environment and VMs can be started happily with them. For instance, virConnectGetDomainCapabilities reports <model usable='no'>Skylake-Client</model> but when I try to use that model anyway, the VM starts fine with it: <cpu mode='custom' match='exact' check='full'> <model fallback='forbid'>Skylake-Client</model> <topology sockets='16' cores='1' threads='1'/> <feature policy='require' name='hypervisor'/> <feature policy='disable' name='invpcid'/> <numa> <cell id='0' cpus='0' memory='524288' unit='KiB'/> </numa> </cpu> That's actually good news, but unexpected. Do I miss something? Thanks, Milan

2 4

Re: [libvirt-users] Power on and power off code using LIBVIRT
by Daniel P. Berrangé 11 Dec '18

11 Dec '18

Re-adding libvirt-users - please don't remove mailing list addresses when replying. On Mon, Dec 10, 2018 at 09:42:29PM +0530, Chaithra Sn wrote: > Thanks Daniel for the reply. > > I want code in python langange. The 'create' method on the Domain object will start an existing defined guest. The 'destroy' method will stop a running guest. > On Mon, 10 Dec 2018 at 7:10 PM, Daniel P. Berrangé <berrange(a)redhat.com> > wrote: > > > On Mon, Dec 10, 2018 at 02:55:12PM +0530, Chaithra Sn wrote: > > > Dear Team, > > > > > > Please provide the code for power on and power off the VM using Libvirt. > > > > Thre's many ways to access / interact with libvirt, so you'll need to > > specify what language or tool you're trying to use libvirt with. > > > > Regards, > > Daniel > > -- > > |: https://berrange.com -o- > > https://www.flickr.com/photos/dberrange :| > > |: https://libvirt.org -o- > > https://fstop138.berrange.com :| > > |: https://entangle-photo.org -o- > > https://www.instagram.com/dberrange :| > > Regards, Daniel -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|

2 1

[libvirt-users] unable to add pci network to existing vm
by daggs 11 Dec '18

11 Dec '18

Greetings, I'm trying to add a virtual nic to an existing and active vm and I'm getting this error: error: internal error: No more available PCI slots the cmd I'm trying to run is: virsh -c qemu:///system attach-interface --domain router --type bridge --source virbr0 --model virtio --config --live the lspci output within the vm is this: # lspci 00:00.0 Host bridge: Intel Corporation 82G33/G31/P35/P31 Express DRAM Controller 00:01.0 PCI bridge: Intel Corporation 7500/5520/5500/X58 I/O Hub PCI Express Root Port 0 (rev 02) 00:01.1 PCI bridge: Intel Corporation 7500/5520/5500/X58 I/O Hub PCI Express Root Port 0 (rev 02) 00:01.2 PCI bridge: Intel Corporation 7500/5520/5500/X58 I/O Hub PCI Express Root Port 0 (rev 02) 00:01.3 PCI bridge: Intel Corporation 7500/5520/5500/X58 I/O Hub PCI Express Root Port 0 (rev 02) 00:01.4 PCI bridge: Intel Corporation 7500/5520/5500/X58 I/O Hub PCI Express Root Port 0 (rev 02) 00:01.5 PCI bridge: Intel Corporation 7500/5520/5500/X58 I/O Hub PCI Express Root Port 0 (rev 02) 00:01.6 PCI bridge: Intel Corporation 7500/5520/5500/X58 I/O Hub PCI Express Root Port 0 (rev 02) 00:1d.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #1 (rev 03) 00:1d.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #2 (rev 03) 00:1d.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #3 (rev 03) 00:1d.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #1 (rev 03) 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev 92) 00:1f.0 ISA bridge: Intel Corporation 82801IB (ICH9) LPC Interface Controller (rev 02) 00:1f.2 SATA controller: Intel Corporation 82801IR/IO/IH (ICH9R/DO/DH) 6 port SATA Controller [AHCI mode] (rev 02) 00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev 02) 00:1f.6 Ethernet controller: Intel Corporation Ethernet Connection (2) I219-V (rev 31) 01:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 06) 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 06) 03:00.0 SCSI storage controller: Red Hat, Inc. Virtio block device (rev 01) 04:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 06) 05:00.0 Unclassified device [00ff]: Red Hat, Inc. Virtio memory balloon (rev 01) 06:00.0 Ethernet controller: Red Hat, Inc. Virtio network device (rev 01) 07:00.0 Unclassified device [0002]: Red Hat, Inc. Virtio filesystem (rev 01) 08:00.0 PCI bridge: Red Hat, Inc. QEMU PCI-PCI bridge how can I add additional pci entry? I don't mind if I need to edit the xml file and restart the vm, I just don't want to cause the vm not to start due to bad xml or something. Thanks, Dagg.

2 2

[libvirt-users] Power on and power off code using LIBVIRT
by Chaithra Sn 10 Dec '18

10 Dec '18

Dear Team, Please provide the code for power on and power off the VM using Libvirt. Last week also I sent some query, but I dint get any response. Please help me in finding the same. Thanks & regards, Chaithra

2 1

[libvirt-users] Add trusted CA to libvirt
by Мозолина, Надежда Викторовна 10 Dec '18

10 Dec '18

Hello! I am trying to make libvirt trust one more CA. I suppose that when libvirt establish connection, it doesn't take into account any system trusted CAs. And in /etc/pki/CA according to the tutorial I have only one CA installed. How can I add one more trusted CA for libvirt? Best regards, Nadezhda Mozolina

2 1

[libvirt-users] import qcow with snapshots
by Chris 10 Dec '18

10 Dec '18

All, is it possible to create a new KVM machine from an existing qcow (v3) image with snapshots? snapshot-list doesn't show them, when using virt-manager 1:1.5.1-0ubuntu1.1 to create the machine. * t-ad5.img: QEMU QCOW Image (v3), 42949672960 bytes chris@cd:/data/md0$ qemu-img snapshot -l t-ad5.img Snapshot list: ID TAG VM SIZE DATE VM CLOCK 1 pre-domain 0 2018-05-08 21:27:40 00:00:00.000 chris@cd:~$ virsh snapshot-list t-ad5 Name Creation Time State ------------------------------------------------------------ - Chris

2 1

Re: [libvirt-users] certificate pinning
by Daniel P. Berrangé 10 Dec '18

10 Dec '18

Re-adding the libvirt-users list - please don't take discussions off-list. On Mon, Dec 10, 2018 at 01:10:18PM +0300, Anastasiya Ruzhanskaya wrote: > I already found out how to set up all the certificates and tls works fine > for me. > What if I want to put a proxy between client and server in libvirt? He has > his own CA, and this is only one more CA I would like libvirt to trust to. > Is it somehow achievable? I see that libvirt takes certificates only from > predefined paths. For me doesn't work if I just incert another CA > certificate to the cacert.pem file. Do you know any approaches how it can > be made in another way? The cacert.pem file can contain multiple certificates, just concatenate all the CA pem files. > > пн, 10 дек. 2018 г. в 12:38, Daniel P. Berrangé <berrange(a)redhat.com>: > > > On Sat, Dec 08, 2018 at 11:19:40AM +0300, Anastasiya Ruzhanskaya wrote: > > > Hello! > > > Does libvirt uses certificate pinning in tls? I want to setup a > > transparent > > > proxy (mitmproxy) and can't do this even after I added mitmproxy ca > > > certificate to the trusted certificates in ubuntu. > > > > Libvirt doesn't ever use the global certificates stores, because public > > CAs are not relevant to libvirt deployments - indeed trusting the global > > cert store in the OS would lower security by opening it upto arbitrary > > CAs. See this doc for where libvirt finds CA certs > > > > https://libvirt.org/remote.html#Remote_certificates > > > > > > Regards, > > Daniel > > -- > > |: https://berrange.com -o- > > https://www.flickr.com/photos/dberrange :| > > |: https://libvirt.org -o- > > https://fstop138.berrange.com :| > > |: https://entangle-photo.org -o- > > https://www.instagram.com/dberrange :| > > Regards, Daniel -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|

2 4

[libvirt-users] certificate pinning
by Anastasiya Ruzhanskaya 10 Dec '18

10 Dec '18

Hello! Does libvirt uses certificate pinning in tls? I want to setup a transparent proxy (mitmproxy) and can't do this even after I added mitmproxy ca certificate to the trusted certificates in ubuntu.

2 2

[libvirt-users] libvirt 4.1 and later - howto configure LXC with interface macvlan type='direct' ?
by mxs kolo 08 Dec '18

08 Dec '18

Hi all After upgrade from Centos 7.5 to Centos 7.6, our test environment geted new version of libvirt 4.5.0 In which our old containers have broken config and can't start: 2018-12-05 10:38:32.634+0000: 18010: debug : virLXCControllerGetNICIndexes:368 : Getting nic indexes 2018-12-05 10:38:32.634+0000: 18010: error : virLXCControllerGetNICIndexes:400 : unsupported configuration: Unsupported net type direct Failure in libvirt_lxc startup: unsupported configuration: Unsupported net type direct We use next section for network interface: <interface type='direct'> <mac address='02:00:21:3b:eb:e1'/> <source dev='eno1.710' mode='bridge'/> </interface> It's linux macvlan solutions and it's worked at least since libvirt 1.2.7 for us. As I can see, in version 4.1.0 and later, some changes about DIRECT connect was implemented. VIR_DOMAIN_NET_TYPE_DIRECT is still fully supported in src/lxc/lxc_driver.c But in src/lxc/lxc_controller.c --- libvirt-3.9.0/src/lxc/lxc_controller.c 2017-09-28 13:15:43.322712913 +0300 +++ libvirt-4.1.0/src/lxc/lxc_controller.c 2018-02-28 16:21:05.158799006 +0300 @@ -395,8 +395,14 @@ case VIR_DOMAIN_NET_TYPE_INTERNAL: case VIR_DOMAIN_NET_TYPE_DIRECT: case VIR_DOMAIN_NET_TYPE_HOSTDEV: + virReportError(VIR_ERR_CONFIG_UNSUPPORTED, + _("Unsupported net type %s"), + virDomainNetTypeToString(ctrl->def->nets[i]->type)); + goto cleanup; + case VIR_DOMAIN_NET_TYPE_LAST: default: - break; + virReportEnumRangeError(virDomainNetType, ctrl->def->nets[i]->type); + goto cleanup; } } Since version 4.1.0 which config need be used to configure macvlan for lxc cointainers ?

3 2

Re: [libvirt-users] no drm render nodes available
by Erik Skultety 06 Dec '18

06 Dec '18

On Thu, Dec 06, 2018 at 05:55:54AM -0800, Michael Taboada wrote: > Hi, > Yes. Qemu is version 3.0.0-4, and output is below: > > ls -l /dev/dri: > > total 0 > drwxr-xr-x 2 root root 60 Nov 28 16:46 by-path > crw-rw---- 1 root video 226, 0 Nov 28 16:46 card0 > > domain xml is attached. > -Michael. [Putting libvirt-users back on CC] Yep, this is a pretty serious fail on my account, the code assumes SPICE needs a DRM render node every time one isn't defined within the XML due to a missing check for presence of the <gl> element. I stripped the XML you sent me to the bare minimum to demonstrate a reproducer: ... <graphics type='spice' autoport='yes'> <listen type='address'/> <image compression='off'/> </graphics> <video> <model type='qxl' ram='65536' vram='65536' vgamem='16384' heads='1' primary='yes'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </video> ... Let me know whether you want to create a BZ/fix the bug/both otherwise I'll take care of everything and mention you in the commit message. Thanks, Erik

2 3

[libvirt-users] connecting two vm in a network
by daggs 06 Dec '18

06 Dec '18

Greetings, my router is running under a vm, I want to start another vm on that host and have to connected to the router vm in the same manner the host connects to the vm router. looking at the docs, I think that guest private network is what I need. thing is, from what I see, I need to define an ip and such. that's what the router suppose to provide so I'm not sure what exactly I need to configure and how. what is the correct config to achieve what I need? Thanks, Dagg.

1 0

[libvirt-users] no drm render nodes available
by Michael Taboada 06 Dec '18

06 Dec '18

Hi, I get this error when trying to start a vm using spice as the graphics: "error: internal error: No DRM render nodes available" I can't seem to figure out what could be going on, since it worked just a little while ago. Using arch linux, and libvirt from git (4.10.0.22.g6a6925b9b7-1). -Michael.

2 1

[libvirt-users] XML-RPC
by Xxxx Zzz 05 Dec '18

05 Dec '18

Hi all, I have 2 Centos servers running libvirtd. They are running using peacemaker cluster. After I had to reboot server 1, I can't no longer start VMs on server 2. I'm getting the following error message: error: Failed to start domain testvm error: internal error: Process exited prior to exec: libvirt: XML-RPC error : Failed to connect socket to '/var/run/libvirt/virtlockd-sock': Connection refused I can see that the deamon is listening on the port. I also couldn't find any further information in any logfile. Any idea? Thanks, Markus

1 0

[libvirt-users] console type tcp with logging
by Vasiliy Tolstov 03 Dec '18

03 Dec '18

Hi! I want to have ability to connect to guest console via libvirt api (and expose this data to xtermjs via websocket) with getty tty. And also i want to have log of tty1 (do log grub, kernel booting and errors). What i need to do in libvirt xml for such case? -- Vasiliy Tolstov, e-mail: v.tolstov(a)selfip.ru

3 8

[libvirt-users] How to get list of CPUs compatible with the host CPU and vendor?
by Milan Zamazal 03 Dec '18

03 Dec '18

Hi, I'm trying to use virConnectGetDomainCapabilities to get the list of CPUs compatible with the host CPU. I would like to further limit the list to CPUs of the same vendor as the host CPU. How can I do that? I tried to use virConnectBaselineCPU with <vendor> element and checking whether I obtain the same CPU, but that doesn't filter out CPUs without any vendor such as `kvm64' or `pentium'. Thanks, Milan

1 0

[libvirt-users] virsh console and other language keymaps
by Michael Taboada 29 Nov '18

29 Nov '18

Hi, I've got a small vm server running kvm + libvirt, and I made a simple shell script that allows users to ssh in and control their vms (power off, etc). However, one of my users uses the french canadian keyboard layout on her home computer, and upon being told "escape character is ^]" expected to need to press ctrl+right-alt_] (] being in the same location it is on a US keyboard). This is because on a french canadian layout, the right bracket key is in the same spot at on US layout, but needs to press right alt with it or it is the c-cedilla key. However, upon pressing ctrl+right-alt+c-cedilla, nothing happens (even this is ctrl+right bracket on a canadian keyboard). Instead, pressing ctrl+c-cedilla on her canadian french keyboard exits the console as if it were using a US layout. My question: how to make it so pressing ctrl+(canadian ]) works? Is this something that has to be done on the vm side, or on the host side, or maybe on the client ssh side? I'd prefer it be something thast can be different based on who is using the virsh console command since me, as the admin, may need to help with the console at some points, and my keyboard is US, so I have no c-cedilla or canadian right bracket key, but she does. Thanks, -Michael.

3 2

[libvirt-users] Unable to configure libxl's memory management parameters
by Mathieu Tarral 28 Nov '18

28 Nov '18

Hi ! I'm trying to get a working installation of Xen 4.11 from source, with Libvirt. I managed to compile, install and boot on Xen so far. But when I start the libvirt daemon, it fails with the following error: info : libvirt version: 4.1.0, package: 5.fc28 (Fedora Project, 2018-08-23-19:00:58, buildvm-19 error : libxlDriverConfigNew:1644 : Unable to configure libxl's memory management parameters error : virStateInitialize:775 : Initialization of LIBXL state driver failed: no error error : daemonRunStateInit:837 : Driver state initialization failed So there are 2 things here: - why libvirt is unable to configure Libxl ? where should i look for any clues ? - "Initialization of LIBXL state driver failed: no error" it looks like a bug in Libvirt, if it fails, an error message should be reported Thank you. -- Mathieu Tarral Sent with ProtonMail Secure Email.

2 1

[libvirt-users] Sasl+tls setup
by Anastasiya Ruzhanskaya 28 Nov '18

28 Nov '18

Hello everyone, I am trying to set up sasl authentication in virt-manager. I read in one existing bug, that it is better to use tls for encryption and sasl for authentication, but not use sasl for both. I configured tls, it was fine. Then I created a user "u" on server and modified libvirtd.conf. I set auth_tls = "sasl" there and mech_list: scram-sha-1 in sasl2 config for libvirt. The output of sasl: u@ubuntu2:~$ sudo sasldblistusers2 -f /etc/libvirt/passwd.db u@ubuntu: userPassword Then I connect to server using tls and entering as the user u. Then I have the following message: Unable to connect to libvirt qemu+tls://u@192.168.246.135/system. authentication failed: authentication failed What are the correct steps to set up everything right. I just followed this: set up tls, set up user, modify config file, relaunch and connect.

1 0