- Users - libvirt List Archives

[libvirt-users] Running ChromiumOS on libvirt
by Tony Arnold 03 May '18

03 May '18

Has anyone had any success running ChromiumOS as a VM under libvirt and can provide, or point me to, a set of instructions for getting it to work? I've tried and get as far as the white boot screen with the Chromium logo, but the VM just hangs there. Regards, Tony. -- Tony Arnold MBCS, CITP | Senior IT Security Analyst | Directorate of IT Services | Desk 51, Office 2, Kilburn Building | The University of Manchester | Manchester M13 9PL | T: +44 161 275 6093 | M: +44 773 330 0039

2 1

[libvirt-users] Drive-backup functions.
by Matthew Schumacher 01 May '18

01 May '18

List, Two years ago there was discussion on implementing QEMU's block-dirty-bitmap backup solution: https://www.redhat.com/archives/libvir-list/2016-June/msg00380.html https://www.redhat.com/archives/libvir-list/2016-April/msg00401.html But I haven't seen anything since, and looking through git, it doesn't look like any of these patches were included. Can someone please bring me up to speed on what is up with these patches and what the current thinking is in regards to backing up with libvirt? Currently I'm snapshotting, then syncing the quiesced base image to one I have on alternate media, but it's slow and takes up a lot of space. Thanks, schu

2 1

[libvirt-users] Server 2016 locked in paused state
by Paul O'Rorke 01 May '18

01 May '18

Hi all, I have a number of production Windows servers on KVM/DRBD and two of them are Server 2016. Both these guests have started exhibiting the same behaviour where they enter a paused state and will not resume. The behaviour is the same whether I use virsh or virt-manager. My only recourse is to force the guest off and start it again. This brings the host up temporarily where upon it pauses again. It could be minutes or hours but it always returns to being stuck in this paused state. I'm not seeing anything much in /var/log/kern.log or syslog - perhaps I'm missing the clue. Has anyone else seen this and or can you advise me where I should be looking to find the cause of this? Sincerely -- *Paul O'Rorke* *Tracker Software Products (Canada) Limited * www.tracker-software.com <http://www.tracker-software.com/> Tel: +1 (250) 324 1621 Fax: +1 (250) 324 1623 <http://www.tracker-software.com/> Support: http://www.tracker-software.com/support Download latest Releases http://www.tracker-software.com/downloads/

3 4

[libvirt-users] LibVirt "make install" after successful compilation
by Azizul Hakim 30 Apr '18

30 Apr '18

I am having some issue with LibVirt installation from source code. I downloaded the latest code from git, was able to configure and compile it. But when I try to install it using *sudo make installi, *I get the following errors. Making install in po make[1]: Entering directory '~/libvirt/po' make[2]: Entering directory '~/libvirt/po' make[2]: Nothing to be done for 'install-exec-am'. make install-data-hook make[3]: Entering directory '~/libvirt/po' make[3]: *** No rule to make target 'af.gmo', needed by 'install-data-hook'. Stop. make[3]: Leaving directory '~/libvirt/po' Makefile:2027: recipe for target 'install-data-am' failed make[2]: *** [install-data-am] Error 2 make[2]: Leaving directory '~/libvirt/po' Makefile:1981: recipe for target 'install-am' failed make[1]: *** [install-am] Error 2 make[1]: Leaving directory '~/libvirt/po' Makefile:2105: recipe for target 'install-recursive' failed make: *** [install-recursive] Error 1 As I mentioned, there is no error during compiling the source code. It would be helpful if someone could point me in a direction so I can figure out the problem. Thanks Azizul Hakim

1 0

[libvirt-users] [libvirt] ignore_value
by gaosheng cui 27 Apr '18

27 Apr '18

Hi,using ignore_value in libvirt source code to do function return value processing,but I can’t understand about it,can you give me some tips?thanks very much!

2 3

[libvirt-users] qemu crash, qemu_thread_create: Resource temporarily unavailable
by llilulu 25 Apr '18

25 Apr '18

Hi My qemu is 2.9.0, libvirt is 3.4.0. I start many guest in short time(128G pyhsical memory ,1G per guest, 90 guest), and then run memtest on guest system.memtest just occupy guest memory，so when run memtest, host will allocate memory for guest. I run memtest on all my guest, and some guest will encounter crash. qemu log has qemu_thread_create: Resource temporarily unavailable record，I ask same question before, replier suggest I change qemu.conf max_process arg, but I cat /proc/$pid/limits, I find maxprocess limit is very big, I don't think is the args restrict. I think is when I run memtest on all guest, the host pressure very highly in short time, because when I run memtest on all guest, i encounter some other program core, I use gdb debug the core, I find is dump in allocate memory. so I want known qemu crash is that reason, and how host system acceptable pressure limit. when I encounter qemu crash, what can I do avoid the promble. Thanks

1 0

[libvirt-users] Possible to resize a Windows guest's disk while online?
by Andre Goree 20 Apr '18

20 Apr '18

I'm looking for a way to online resize a Windows disk -- i.e., be able to resize the disk without shutting down, rebooting, or detaching the disk. Is this at all possible? Or am I just barking up the wrong tree? I'm not finding a way to do this and even Amazon has a weird workaround, in which the user must write data to the newly resized-drive in order to recognize the new size without taking the disk or the VM offline. [Obligatory] YAY Microsoft. -- Andre Goree -=-=-=-=-=- Email - andre at drenet.net Website - http://blog.drenet.net PGP key - http://www.drenet.net/pubkey.html -=-=-=-=-=-

2 2

[libvirt-users] Share ZFS zpool between host and VM's
by Steffen Sledz 19 Apr '18

19 Apr '18

Is it possible to share a ZFS zpool between the host and one or more QEMU/KVM clients?

2 2

[libvirt-users] qemu: qemu_thread_create: Resource temporarily unavailable
by llilulu 18 Apr '18

18 Apr '18

Hi: My libvirt is 3.4.0 and qemu is 2.9.0, My host has a big memory(128G), I run many guest on my host(80 guests), when I batch stop and start guests, some guest will crash, the qemu log is "qemu: qemu_thread_create: Resource temporarily unavailable". I search qemu code, I find qemu_thread_create just like pthread_create function. I search on internet, someone say that is a bug of qemu.Because my host run many guest ,so I cann't ensure whether qemu bug or my host load heavy cause my guest crash. Can someone tell me what reason cause the promble? and what can I do avoid the promble? Thanks

2 1

[libvirt-users] can't find how to solve "QEMU guest agent is not connected"
by Matt 18 Apr '18

18 Apr '18

I am trying to make Qemu agent work with libvirt thanks to https://github.com/NixOS/nixops/pull/922 with libvirt 4.1.0. I've been trying to make it work for quite some time but I still haven't the slightest idea of what is wrong, I keep seeing "Guest agent is not responding: QEMU guest agent is not connected" as the program I use (nixops) calls the libvirt python API. I apologize in advance for dropping so many details but in case someone is interested in answering this post, I thought I would provide details upfront. The failure surprises me as typically a socket is created when I start the VM with a priori the correct rights myuser:libvirtd (libvirtd is the default libvirt group on nixos, different from upstream IIRC): /var/lib/libvirt/qemu/channel/target/domain-10-nixops-3cb2c9c2-41ea/org.qemu.guest_agent.0 My domain contains ``` <channel type='unix'> <target type='virtio' name='org.qemu.guest_agent.0'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> ``` as requested per the doc (I tried with source=bind to no avail, btw the doc for `source` is not that great) my libvirtd.conf has the following setting ``` log_level = 1 # no filter for now log_filters="1:qemu.qemu_agent 1:qemu.qemu_monitor" # log_filters="3:remote 4:event 3:json 3:rpc" log_outputs="1:file:/var/log/libvirt/libvirtd.log" ``` `journalctl -b -u libvirtd.service` returns ``` avril 17 12:31:05 jedha libvirtd[22804]: 2018-04-17 03:31:05.482+0000: 22806: error : qemuDomainAgentAvailable:7755 : Guest agent is not responding: QEMU guest agent is not connected avril 17 12:31:06 jedha libvirtd[22804]: 2018-04-17 03:31:06.487+0000: 22807: error : qemuDomainAgentAvailable:7755 : Guest agent is not responding: QEMU guest agent is not connected avril 17 12:31:07 jedha libvirtd[22804]: 2018-04-17 03:31:07.493+0000: 22805: error : qemuDomainAgentAvailable:7755 : Guest agent is not responding: QEMU guest agent is not connected avril 17 12:31:08 jedha libvirtd[22804]: 2018-04-17 03:31:08.499+0000: 22809: error : qemuDomainAgentAvailable:7755 : Guest agent is not responding: QEMU guest agent is not connected avril 17 12:31:09 jedha libvirtd[22804]: 2018-04-17 03:31:09.506+0000: 22808: error : qemuDomainAgentAvailable:7755 : Guest agent is not responding: QEMU guest agent is not connected avril 17 12:31:10 jedha libvirtd[22804]: 2018-04-17 03:31:10.513+0000: 22806: error : qemuDomainAgentAvailable:7755 : Guest agent is not responding: QEMU guest agent is not connected avril 17 12:31:11 jedha libvirtd[22804]: 2018-04-17 03:31:11.512+0000: 22804: error : virNetSocketReadWire:1809 : End of file while reading data: Input/output error ``` Here is an excerpt just before the error "GUest agent is not connected" (full log of 82MB available at https://drive.google.com/file/d/1sYpyJ2WQMlyFqNKkPkvSAJ13Tm2JjpVk/view?usp=…) ``` 2018-04-17 03:56:41.982+0000: 806: debug : virEventPollMakePollFDs:401 : Prepare n=5 w=6, f=12 e=1 d=0 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollMakePollFDs:401 : Prepare n=6 w=7, f=13 e=1 d=0 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollMakePollFDs:401 : Prepare n=7 w=8, f=15 e=1 d=0 2018-04-17 03:56:41.983+0000: 807: debug : virAccessManagerCheckDomain:234 : manager=0x55fa67d0d450(name=stack) driver=QEMU domain=0x7f2c5800c040 perm=1 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollMakePollFDs:401 : Prepare n=8 w=9, f=17 e=25 d=0 2018-04-17 03:56:41.983+0000: 807: debug : virAccessManagerCheckDomain:234 : manager=0x55fa67d0d6f0(name=none) driver=QEMU domain=0x7f2c5800c040 perm=1 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollMakePollFDs:401 : Prepare n=9 w=10, f=18 e=1 d=0 2018-04-17 03:56:41.983+0000: 807: info : virObjectUnref:350 : OBJECT_UNREF: obj=0x55fa67d0d450 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollMakePollFDs:401 : Prepare n=10 w=11, f=19 e=1 d=0 2018-04-17 03:56:41.983+0000: 807: info : virObjectRef:388 : OBJECT_REF: obj=0x7f2c14026460 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollMakePollFDs:401 : Prepare n=11 w=13, f=23 e=25 d=0 2018-04-17 03:56:41.983+0000: 807: debug : qemuDomainObjBeginJobInternal:5393 : Starting job: query (vm=0x7f2c58004770 name=nixops-4f58a5c0-41f3-11e8-9858-309c233b770e-server, current job=none async=none) 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollCalculateTimeout:338 : Calculate expiry of 1 timers 2018-04-17 03:56:41.983+0000: 807: debug : qemuDomainObjBeginJobInternal:5434 : Started job: query (async=none vm=0x7f2c58004770 name=nixops-4f58a5c0-41f3-11e8-9858-309c233b770e-server) 2018-04-17 03:56:41.983+0000: 806: debug : virEventPollCalculateTimeout:371 : No timeout is pending 2018-04-17 03:56:41.983+0000: 807: info : virObjectUnref:350 : OBJECT_UNREF: obj=0x7f2c14026460 2018-04-17 03:56:41.983+0000: 806: info : virEventPollRunOnce:640 : EVENT_POLL_RUN: nhandles=12 timeout=-1 2018-04-17 03:56:41.983+0000: 807: error : qemuDomainAgentAvailable:7755 : Guest agent is not responding: QEMU guest agent is not connected ``` This is the VM log from a machine similar to the one in the previous messages (same config) ``` 2018-04-16 08:28:47.875+0000: starting up libvirt version: 4.1.0, qemu version: 2.11.1, hostname: jedha LC_ALL=C PATH=/run/libvirt/nix-emulators:/nix/store/f8hxcp939qwpiwzm6999gljdkd2kzg6v-iptables-1.6.2/bin:/nix/store/fs4p0aw14snppfcjrzmiic52sjc3z627-iproute2-4.15.0/bin:/nix/store/bbrlfy430b48fywf7rgk4x1qxrpm695j-pm-utils-1.4.1/bin:/nix/store/waj4yidjf59mknpkcd99pdp0wf1x5gs7-numad-0.5/bin:/nix/store/hz5x8d3nlqvkv63mkxajblp9pkawlwvq-numactl-2.0.11/bin:/nix/store/pj5iq5sdhc3f8v6ysyxssm039jrkxmcl-bridge-utils-1.5/bin:/nix/store/bkrl7mxmzn0whm1n29dhyhdhlgkv0m8c-dmidecode-3.1/bin:/nix/store/h6x6i584ihp1qvk19vvyk5gqjznxk6bp-dnsmasq-2.78/bin:/nix/store/xvnsxcsq2ca3cs7z4952jdjid48ql32c-ebtables-2.0.10-4/bin:/nix/store/j7x4cjlfrdhagmciqk5zc58g1icg91rb-qemu-2.11.1/bin:/nix/store/qrxs7sabhqcr3j9ai0j0cp58zfnny0jz-coreutils-8.29/bin:/nix/store/3ixa5cn578zz4pr81a0rdkbi4dal748a-findutils-4.6.0/bin:/nix/store/xd4m1v7q7kn902p8hvnfn79c2wjijlif-gnugrep-3.1/bin:/nix/store/r0wkp0vkw6wjfl0skmdpykabgj1bkyn2-gnused-4.4/bin:/nix/store/aw6jabbci1k81j6hvyskkhb3va45wws2-systemd-237/bin:/nix/store/j7x4cjlfrdhagmciqk5zc58g1icg91rb-qemu-2.11.1/sbin:/nix/store/qrxs7sabhqcr3j9ai0j0cp58zfnny0jz-coreutils-8.29/sbin:/nix/store/3ixa5cn578zz4pr81a0rdkbi4dal748a-findutils-4.6.0/sbin:/nix/store/xd4m1v7q7kn902p8hvnfn79c2wjijlif-gnugrep-3.1/sbin:/nix/store/r0wkp0vkw6wjfl0skmdpykabgj1bkyn2-gnused-4.4/sbin:/nix/store/aw6jabbci1k81j6hvyskkhb3va45wws2-systemd-237/sbin QEMU_AUDIO_DRV=none /run/libvirt/nix-emulators/qemu-kvm -name guest=nixops-0084610a-4150-11e8-aef5-309c233b770e-server,debug-threads=on -S -object secret,id=masterKey0,format=raw,file=/var/lib/libvirt/qemu/domain-7-nixops-0084610a-4150/master-key.aes -machine pc-i440fx-2.11,accel=kvm,usb=off,dump-guest-core=off -m 512 -realtime mlock=off -smp 1,sockets=1,cores=1,threads=1 -uuid ad67fc0b-d93d-455d-a6e6-5549451e08ac -display none -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-7-nixops-0084610a-4150/monitor.sock,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -no-acpi -boot strict=on -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x3 -drive file=/var/lib/libvirt/images/nixops-0084610a-4150-11e8-aef5-309c233b770e-server.qcow2,format=qcow2,if=none,id=drive-ide0-0-0 -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1 -netdev tap,fd=21,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:84:7f:ee,bus=pci.0,addr=0x2 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channel/target/domain-7-nixops-0084610a-4150/org.qemu.guest_agent.0,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=org.qemu.guest_agent.0 -device usb-kbd,id=input0,bus=usb.0,port=1 -device usb-mouse,id=input1,bus=usb.0,port=2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x4 -msg timestamp=on 2018-04-16T08:28:47.931670Z qemu-system-x86_64: -chardev pty,id=charserial0: char device redirected to /dev/pts/4 (label charserial0) 2018-04-16T08:32:04.730417Z qemu-system-x86_64: terminating on signal 15 from pid 1211 (/nix/store/ggqq9v3h5w66gnzbg3wg74s0ad7m0rjk-libvirt-4.1.0/sbin/libvirtd) 2018-04-16 08:32:04.931+0000: shutting down, reason=destroyed ``` Let me know what I can do to diagnose the error, or if any additionnal details would help. I will happily provide them. Best regards Matt

2 2

[libvirt-users] How allocate ip for guest in xml file
by llilulu 17 Apr '18

17 Apr '18

Hi: I encounter a promble when I use libvirt manager my virtual machine. I use dhcp allocate IP for my guest, but use dhcp manager IP source, I will ensure guest run NetworkManager auto start NIC in dhcp type get IP. But some release system no install NetworkManager, or some installed system no install NetworkManager, so when I manager those guest, I cann't allocate IP for guest via dhcp server. I want know has other way allocate ip for guest in guest xml file when create the guest, I search "libvirt domain xml format", I find use blow xml configuration in <interface/> <ip address='192.168.122.5' prefix='24'/> But I add this in my guest xml file, virsh create guest will report an error: "error: unsupported configuration: Invalid attempt to set network interface guest-side IP route and/or address info, not supported by QEMU" I want to know if I use dhcp allocate IP for guest, has some way auto start guest dhclinet when guest start(because NIC can hotplug, I cann't write NIC configure file for it). or I want configure IP for guest in guest xml file,How cant I do? my libvirt version is 3.4.0, qemu is 2.9.0. I compile libvirt and qemu myself, when compile its run ./configure script without specific args. If I want qemu or libvirt support configure IP in guest xml file, how I compile libvirt and qemu? Thanks.

2 1

[libvirt-users] Online Disk Resize with Windows Server 2016
by Andre Goree 12 Apr '18

12 Apr '18

I'm having an issue when resizing a disk (a Ceph RBD disk, though the type of disk shouldn't matter, I'd think) attached to a Windows Server 2016 guest. After I resize the disk, the newly-created disk space is _not_ recognized by the server. Even after running Action > Rescan from the Disk Management app, the new disk space does not show. However, when I perform the same resize on a Windows Server 2012 or even a Sever 2008 system, the Action > Rescan works fine and the newly-created disk space is recognized without needed to detach the drive or reboot the VM. Does anyone have an idea of what may have changed in Windows 2k16 that might be causing this? Possibly some undocumented registry change or something? -- Andre Goree -=-=-=-=-=- Email - andre at drenet.net Website - http://blog.drenet.net PGP key - http://www.drenet.net/pubkey.html -=-=-=-=-=-

1 0

[libvirt-users] kvm-vnc question
by 李卓瑶 12 Apr '18

12 Apr '18

hi: very glad writing to you,even though i don't confirm can hear from you. And my english is poor ,so.. I'm a developer on kvm from china, and i meet a question that "virsh define geneic.xml" in arm platform failded with unsupported configuration: PCI controller at index 1(0x01) has bus='0x01',but index must be larger than bus Because i add the vnc info in generic.xml. If i delete it ,virsh define would be ok. The issue only happened in arm platform. And nothing error in x86 platform. I think may be something error happened in pci.Right? I have tryed much ,but work out nothing.Could you give me a head! ----------------------- Have a good day

3 2

Re: [libvirt-users] Fail to compile libvirt with address sanitizer by clang-7
by Michal Privoznik 12 Apr '18

12 Apr '18

On 04/10/2018 05:22 AM, Han Han wrote: > Hi, > I tried to compile libvirt with address sanitizer( > https://github.com/google/sanitizers/wiki/AddressSanitizer) to discover > memory errors. But fails when make. > Code version: > $ git describe > v4.2.0-92-g3f204e4de > > Compile tools: > automake 1:1.15.1-3 all [installed] > clang-7 1:7~svn323616-1 amd64 [installed,automatic] > make 4.2.1-1 amd64 [installed,automatic] > > Compile steps: > $ ./bootstrap > $ CC=clang-7 CFLAGS="-g -O1 -fsanitize=address -fno-omit-frame-pointer > -Wno-error" LDFLAGS="-fsanitize=address" ./configure > > Configure succed. > $ make > But error appeared: > make all-am > make[3]: Entering directory '/home/hhan/Software/libvirt/src' > CCLD libvirt.la > ./.libs/libvirt_util.a(libvirt_util_la-viralloc.o): In function `virAlloc': > /home/hhan/Software/libvirt/src/util/viralloc.c:144: undefined reference to > `__asan_report_store8' Huh, I remember seeing different error when trying this (although I'm using gcc). However, I suspect '-Wl,-z -Wl,defs' arguments are problem. We add them onto linker cmd line. You can try applying this patch and see if it helps: diff --git i/configure.ac w/configure.ac index 18587270e6..e23c0e4c22 100644 --- i/configure.ac +++ w/configure.ac @@ -237,7 +237,6 @@ LIBVIRT_COMPILE_WARNINGS LIBVIRT_COMPILE_PIE LIBVIRT_LINKER_RELRO LIBVIRT_LINKER_NO_INDIRECT -LIBVIRT_LINKER_NO_UNDEFINED LIBVIRT_ARG_APPARMOR LIBVIRT_ARG_ATTR Michal

2 1

[libvirt-users] Disable guest discovery in virt-manager
by Gionatan Danti 11 Apr '18

11 Apr '18

Hi all, on CentOS7 / RHEL7 launching virt-manager causes a "discovery process" of the various configured VMs. This discovery is executed by inspection and overlayed disk files and it create a very short lived guest-xxxzzzyyy virtual machine. The end result is a pretty icon to the left of the virtual machine entry (ie: CentOS icon for a CentOS VM) and the list of installad packages inside the virtual disk. That said, I would like to disable such behavior. How can I do that? Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 2

[libvirt-users] start a domain, minimal memory request.
by llilulu 11 Apr '18

11 Apr '18

Hi: I use libvirt manage virtual guest, When I start many virtual domain(my host 128G physical memory）, example, I start 100 guest, 1G per guest。sometime I will encounter "cannot allocate memory", "cannot set up guest memory \'pc.ram\'： cannot allocate memory". sometime encounter qemu process killed by system(oom), I want to know what minimal memory need when start a domain ? and how many host free memory reserve can ensure vm running steady. Thanks

3 2

[libvirt-users] unprivileged container has wrong owners inside in /proc/ and /sys
by mxs kolo 10 Apr '18

10 Apr '18

We run unprivileged lxc containers (libvirt based) with next config: ... <idmap> <uid start='0' target='65535' count='65535'/> <gid start='0' target='65535' count='65535'/> </idmap> ... <devices> <emulator>/usr/libexec/libvirt_lxc</emulator> <filesystem type='mount' accessmode='passthrough'> <source dir='/var/lib/libvirt/lxc/test1'/> <target dir='/'/> </filesystem> ... </devices> Before start we need mount container's LVM: mount /dev/data/test1 /var/lib/libvirt/lxc/test1 And shift uid/gid: ./uidmapshift -b /var/lib/libvirt/lxc/test1 0 65535 65535 (uidmapshift.c is simple utility, found in LXD community) As result, our FS permissions look from hardware node as: [root(a)ops-node01.infra]# ls -la /var/lib/libvirt/lxc/test1/ total 8 dr-xr-xr-x 19 65535 65535 275 Apr 9 18:55 . drwxrwxrwx 3 root root 26 Apr 9 19:32 .. -rw-r--r-- 1 65535 65535 0 Mar 30 18:20 .autorelabel lrwxrwxrwx 1 65535 65535 7 Mar 2 2017 bin -> usr/bin dr-xr-xr-x 2 65535 65535 6 Nov 5 2016 boot drwxr-xr-x 4 65535 65535 206 Mar 30 18:03 dev drwxr-xr-x 59 65535 65535 4096 Apr 9 18:57 etc drwxr-xr-x 2 65535 65535 6 Nov 5 2016 home lrwxrwxrwx 1 65535 65535 7 Mar 2 2017 lib -> usr/lib lrwxrwxrwx 1 65535 65535 9 Mar 2 2017 lib64 -> usr/lib64 drwxr-xr-x 2 65535 65535 6 Nov 5 2016 media drwxr-xr-x 2 65535 65535 6 Nov 5 2016 mnt drwxr-xr-x 2 65535 65535 6 Apr 9 18:55 .oldroot drwxr-xr-x 3 65535 65535 24 Mar 2 2017 opt dr-xr-xr-x 2 65535 65535 6 Nov 5 2016 proc dr-xr-x--- 4 65535 65535 172 Apr 9 18:57 root drwxr-xr-x 13 65535 65535 178 Mar 30 18:03 run lrwxrwxrwx 1 65535 65535 8 Mar 2 2017 sbin -> usr/sbin drwxr-xr-x 2 65535 65535 21 Mar 30 18:03 selinux drwxr-xr-x 2 65535 65535 6 Nov 5 2016 srv dr-xr-xr-x 2 65535 65535 6 Nov 5 2016 sys drwxrwxrwt 7 65535 65535 93 Apr 6 21:08 tmp drwxr-xr-x 13 65535 65535 155 Mar 2 2017 usr drwxr-xr-x 18 65535 65535 254 Mar 30 18:20 var Container running, but some FS objects inside get owner 65534.65534: [root@test1 ~]# find / -uid 65534 -ls | wc -l 40084 It's mostly /sys and /proc objects: [root@test1 ~]# ls -la / total 8 dr-xr-xr-x 19 root root 275 Apr 9 18:55 . dr-xr-xr-x 19 root root 275 Apr 9 18:55 .. -rw-r--r-- 1 root root 0 Mar 30 18:20 .autorelabel drwxr-xr-x 2 root root 6 Apr 9 18:55 .oldroot lrwxrwxrwx 1 root root 7 Mar 2 2017 bin -> usr/bin dr-xr-xr-x 2 root root 6 Nov 5 2016 boot drwxr-xr-x 6 root root 440 Apr 9 20:40 dev drwxr-xr-x 59 root root 4096 Apr 9 18:57 etc drwxr-xr-x 2 root root 6 Nov 5 2016 home lrwxrwxrwx 1 root root 7 Mar 2 2017 lib -> usr/lib lrwxrwxrwx 1 root root 9 Mar 2 2017 lib64 -> usr/lib64 drwxr-xr-x 2 root root 6 Nov 5 2016 media drwxr-xr-x 2 root root 6 Nov 5 2016 mnt drwxr-xr-x 3 root root 24 Mar 2 2017 opt dr-xr-xr-x 348 65534 65534 0 Apr 9 20:40 proc dr-xr-x--- 4 root root 172 Apr 9 18:57 root drwxrwxrwt 15 root root 360 Apr 9 20:40 run lrwxrwxrwx 1 root root 8 Mar 2 2017 sbin -> usr/sbin drwxr-xr-x 2 root root 21 Mar 30 18:03 selinux drwxr-xr-x 2 root root 6 Nov 5 2016 srv dr-xr-xr-x 13 65534 65534 0 Apr 9 20:40 sys drwxrwxrwt 7 root root 93 Apr 6 21:08 tmp drwxr-xr-x 13 root root 155 Mar 2 2017 usr drwxr-xr-x 18 root root 254 Mar 30 18:20 var [root@test1 ~]# find /sys/ -uid 65534 -ls | wc -l 36871 [root@t1 ~]# find /proc -uid 65534 -ls | wc -l 3200 [root@test1 ~]# find /dev -uid 65534 -ls 2121875 0 drwxrwxrwt 2 65534 65534 40 Apr 10 13:57 /dev/mqueue It's feature ? Look like libvirt make all this objects from real root with owner root.root You can't call virLXCControllerSetupUserns() before make this objects, right ? Because you need root permissions for some operations. After you set uid range for process 65535-131070, we can't show object with uid.gid 0 and then kernel use values from /proc/sys/kernel/overflowuid and /proc/sys/kernel/overflowgid. It's can probably affect some process in container ? As solution is shift uid/gid _after_ make all objects and _before_ enter userNS ? As workaround we can try set 0 for overflowuid and overflowgid p.s. We use type='mount' instead type='block' because in unprivileged container mount() call failed, more detailes in https://bugzilla.redhat.com/show_bug.cgi?id=1328946 b.r. Maxim Kozin

1 0

[libvirt-users] nm-bridge & nm-team and no connection.
by lejeczek 09 Apr '18

09 Apr '18

hi guys I have a kvm quest & two nodes. a kvm guest on nodeA and IPaddr2 on nodeB(at this time) nodeA & nodeB comprise a HA cluster now... - nodeA can ping IPaddr2 IP - nodeB can ping kvm guest IP - kvm guest can get to nodeB's IP but* Only a bit non-common bit in my setup is: - both nodeA & nodeB be interfaces which are relevant to the subnet on which it operates are NetworkManger bridges put on top of NM team devices, like: ifaceSlaveA + ifaceSlaveB = teamInt = bridgeInt But maybe it's common, maybe many do that(?) And it seems that that "bridge ontop of nm-team" is doing something not... well, not doing something(?) *but - If I do not nmcli c d & nmcli c u on that nm-bridge before I start kvm guest then all nodes, except for the host to the guest, cannot get to kvm-guest's IP which is on the hosts' bridge network. I did that and then... I reboot kvm guest and.. again cannot ping between kvm guest and other nodes. bit tricky, how would you trouble shoot it? Where to start? many thanks, L.

1 0

[libvirt-users] Permissions and ownership on /dev/kvm keep reverting after starting a vm
by TomK 07 Apr '18

07 Apr '18

Hey guys, /dev/kvm permissions and ownership keeps reverting after starting a vm. The ownership and permissions keep going back to crw-rw—— root root .... After starting a vm. I have to revert the perms and ownership to: crw-crw-crw root kvm .... To start any vm but it goes back to the first set of permissions as soon as I start another vm. Wondering what could be doing this? Cheers, Tom Sent from my iPhone

1 0

[libvirt-users] error : virHashForEach:597 : Hash operation not allowed during iteration
by Vincent Bernat 06 Apr '18

06 Apr '18

Hey! On many of our servers, we often have the following error: error : virHashForEach:597 : Hash operation not allowed during iteration When querying the list of domains, this means libvirt will silently return 0 domain (most uses of virHashForEach don't handle the return code). We are using a hook, but the hook doesn't query libvirt back, so it should be safe from this point of view. However, we have several sources querying libvirt at regular interval (once every 5 seconds from two different sources). I am unable to reproduce the problem with just running "virsh list" in parallel. We are using libvirt 3.6. Is it an expected constraint to not be able to reliably query libvirt from several sources? Have fixes for this problem been pushed since 3.6? -- A kind of Batman of contemporary letters. -- Philip Larkin on Anthony Burgess

2 12

[libvirt-users] Adjusting vram for windows/photoshop
by Alex 05 Apr '18

05 Apr '18

Hi, I have a fedora27 system with a win10 guest trying to use photoshop 2015. I've adjusted the vram parameter for the guest to 512M with QXL, but photoshop still reports "3D features and some filters require 512MB vRAM and photoshop has detected less than that on your system." What is the proper way to adjust the vram value to provide at least 512MB vram? I've included my xml config below. I'm connecting to the guest using VNC. I believe I have the server side configured properly for spice, but do I need a windows client to use it to connect to the guest? <domain type='kvm'> <name>win10</name> <uuid>337f9410-3286-4ef5-a3e8-8271e38ea1e5</uuid> <memory unit='KiB'>6320128</memory> <currentMemory unit='KiB'>6320128</currentMemory> <vcpu placement='static'>4</vcpu> <os> <type arch='x86_64' machine='pc-i440fx-2.4'>hvm</type> </os> <features> <acpi/> <apic/> <hyperv> <relaxed state='on'/> <vapic state='on'/> <spinlocks state='on' retries='8191'/> </hyperv> <vmport state='off'/> </features> <cpu mode='host-model' check='partial'> <model fallback='allow'/> </cpu> <clock offset='localtime'> <timer name='rtc' tickpolicy='catchup'/> <timer name='pit' tickpolicy='delay'/> <timer name='hpet' present='no'/> <timer name='hypervclock' present='yes'/> </clock> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>restart</on_crash> <pm> <suspend-to-mem enabled='no'/> <suspend-to-disk enabled='no'/> </pm> <devices> <emulator>/usr/bin/qemu-kvm</emulator> <disk type='file' device='disk'> <driver name='qemu' type='qcow2'/> <source file='/var/lib/libvirt/images/win10.qcow2'/> <target dev='vda' bus='virtio'/> <boot order='2'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x07' function='0x0'/> </disk> <disk type='file' device='cdrom'> <driver name='qemu' type='raw'/> <target dev='hdb' bus='ide'/> <readonly/> <boot order='1'/> <address type='drive' controller='0' bus='0' target='0' unit='1'/> </disk> <disk type='file' device='cdrom'> <driver name='qemu' type='raw'/> <target dev='hdc' bus='ide'/> <readonly/> <address type='drive' controller='0' bus='1' target='0' unit='0'/> </disk> <controller type='usb' index='0' model='ich9-ehci1'> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x7'/> </controller> <controller type='usb' index='0' model='ich9-uhci1'> <master startport='0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0' multifunction='on'/> </controller> <controller type='usb' index='0' model='ich9-uhci2'> <master startport='2'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x1'/> </controller> <controller type='usb' index='0' model='ich9-uhci3'> <master startport='4'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x2'/> </controller> <controller type='pci' index='0' model='pci-root'/> <controller type='ide' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/> </controller> <controller type='virtio-serial' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </controller> <controller type='scsi' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x09' function='0x0'/> </controller> <interface type='bridge'> <mac address='52:54:00:52:6b:61'/> <source bridge='br0'/> <model type='rtl8139'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> <channel type='spicevmc'> <target type='virtio' name='com.redhat.spice.0'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> <input type='tablet' bus='usb'> <address type='usb' bus='0' port='1'/> </input> <input type='mouse' bus='ps2'/> <input type='keyboard' bus='ps2'/> <graphics type='spice' autoport='yes'> <listen type='address'/> <image compression='off'/> </graphics> <sound model='ich6'> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </sound> <video> <model type='qxl' ram='65536' vram='65536' vgamem='524288' heads='1' primary='yes'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </video> <redirdev bus='usb' type='spicevmc'> <address type='usb' bus='0' port='2'/> </redirdev> <redirdev bus='usb' type='spicevmc'> <address type='usb' bus='0' port='3'/> </redirdev> <memballoon model='virtio'> <address type='pci' domain='0x0000' bus='0x00' slot='0x08' function='0x0'/> </memballoon> </devices> </domain>

2 1

[libvirt-users] Virsh Domain - Serial port; what does the attribute “port” of the serial node's child “target” do?
by thilo.cestonaro＠ts.fujitsu.com 05 Apr '18

05 Apr '18

Hi all! I want to assign a real serialport to my kvm virtual machine via virsh. When I add the following XML snippet to the domain xml, it gets successfully attached but not as I expected it to happen. <serial type='dev'> <source path='/dev/ttyS3'/> <target type='isa-serial' port='2'> <model name='isa-serial'/> </target> <alias name='ua-Serial3'/> </serial> I expected, that given the target port 2 it will be connected to /dev/ttyS2 in the VM. But the target port gets totaly ignored and it will always be connected to ttyS0. Unless I define another serial before this, then it is connected to ttyS1, which is just the order of the serial devices in the xml then, still ignoring the target port. So, do I understand the target port absolutely wrong or is this a bug virsh? Cheers Thilo

1 1

[libvirt-users] IP pool x bridge
by Thiago Oliveira 03 Apr '18

03 Apr '18

Hi there! I have a question about IP Pool. I have one physical server with a ip pool with /28 and I would like to use those IP's into the guests. I have tried the below: 1-) Use bridge on physical server, create bridge in network configurations and configure the IP into the guest. Ok, works, but someone can change the IP, for example, change from 104.34.45.23/28 to 104.34.45.24/28. This is not good. How can I prevent this change by the user using bridge mode? 2-) Create a subnet pool with /29, but the system returns the error because the pool is at the same subnet of the bridge. Thanks. Thiago

1 0

[libvirt-users] Possible to edit/apply nwfilter at runtime?
by Andre Goree 02 Apr '18

02 Apr '18

I'm trying to determine if it's possible to edit/attach/apply nwfilter rules at runtime? I.e., after a VM is already running, can I apply a nwfilter to the VM and have it work without rebooting the machine? Thus far, I've not come across a way to do so, but I thought I'd ask here before I chase my tail around Google. Thanks! -- Andre Goree -=-=-=-=-=- Email - andre at drenet.net Website - http://blog.drenet.net PGP key - http://www.drenet.net/pubkey.html -=-=-=-=-=-

3 6

[libvirt-users] Using alias under disk in XML
by Andre Goree 31 Mar '18

31 Mar '18

I've been trying to follow the information found here [1] in order to provide an alias for RBD disks I'm defining, however it does not appear to be working and I wanted to see if I was doing something wrong. I define the alias like so (using 'virsh edit'): <disk type='file' device='disk'> <driver name='qemu' type='qcow2' cache='writeback' error_policy='stop' discard='unmap'/> ...truncated... <alias name='ua-test'/> </disk> However, when I then 'virsh dumpxml {guest}', the alias is not there. There is no error given after my edits are made and saved. It just seems that libvirt is completely ignoring or removing my changes, without reason. Can anyone give any insight on why this might be happening, and/or help me with the proper way of defining the alias? 1 - https://libvirt.org/formatdomain.html -- Andre Goree -=-=-=-=-=- Email - andre at drenet.net Website - http://blog.drenet.net PGP key - http://www.drenet.net/pubkey.html -=-=-=-=-=-

2 2