- Users - libvirt List Archives

[libvirt-users] Insert iptables rules with network hook
by Dieter Späth 02 Mar '16

02 Mar '16

Hi, I want to add iptables rules between existing rules and the rules created by libvirt (forward type=nat). I did try the hook /etc/libvirt/hooks/network network_name start begin - and /etc/libvirt/hooks/network network_name started begin - It seems like the libvirt iptables rules are already inserted when this hook is executed. Simply use I instead of A does not work either because the rules should be inserted between the existing one and the libvirt rules. Also the custom rules should be deleted after the hoook /etc/libvirt/hooks/network network_name stopped end - is executed. Does a hook exists which is executed after the network is started but before the libvirt rules are inserted? Is it possible the use a custom chain for the libvirt iptables rules instead of directly writing them into the INPUT chain? I think of some thing like INPUT VIRT_VIBR0 all -- * virbr0 0.0.0.0/0 0.0.0.0/0 VIRT_VIBR0 all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 and VIRT_VIBR0 ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable thanks & regards dieter

1 0

[libvirt-users] nwfilter : iptables rules not working
by jf grunt 02 Mar '16

02 Mar '16

Hi, I contact you as i have difficulties to use nwfilter with KVM host. I want to implemente flow filtering between my Linux guests. I created the following filter : cat admin-dmz-internet.xml <filter name='admin-dmz-internet'>   <filterref filter='clean-traffic' />  <rule action='accept' direction='in'> <tcp dstportstart='22'/> </rule>  <rule action='accept' direction='out'> <tcp dstipaddr='192.168.150.50' dstportstart='22' /> </rule>  <rule action='drop' direction='inout'> <all/> </rule> </filter> then i define it : irsh nwfilter-define admin-dmz-internet.xml Filtre réseau admin-dmz-internet défini depuis admin-dmz-internet.xml The filters are defined : virsh nwfilter-list UUID Nom ------------------------------------------------------------------ 4ae1f709-4767-4148-9b02-9065da3d8d8a admin-dmz-internet 7d32639b-5e6e-4dfe-b07b-e798bbd89adb allow-arp I then assigned the filter to mv VM : <interface type='network'> <mac address='52:54:00:36:7d:99'/> <source network='adm-from-net'/> <ip address='192.168.130.229' family='ipv4'/> <model type='virtio'/> <filterref filter='admin-dmz-internet'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> and restart libvirtd and start the VM systemctl restart libvirtd virsh start externeSSH Howerver the filter don"t work, i can do allow flow that i want.... :( To debug i looked at the iptables rules. We see that no packet go to the rules for the filter : Chain FI-vnet0 (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:22 ctstate ESTABLISHED ctdir REPLY 0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.150.50 tcp dpt:22 ctstate NEW,ESTABLISHED ctdir ORIGINAL 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FO-vnet0 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW,ESTABLISHED ctdir ORIGINAL 0 0 ACCEPT tcp -- * * 192.168.150.50 0.0.0.0/0 tcp spt:22 ctstate ESTABLISHED ctdir REPLY 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain HI-vnet0 (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:22 ctstate ESTABLISHED ctdir REPLY 0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.150.50 tcp dpt:22 ctstate NEW,ESTABLISHED ctdir ORIGINAL 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain libvirt-host-in (1 references) pkts bytes target prot opt in out source destination 0 0 HI-vnet0 all -- * * 0.0.0.0/0 0.0.0.0/0 [goto] PHYSDEV match --physdev-in vnet0 Chain libvirt-in (1 references) pkts bytes target prot opt in out source destination 0 0 FI-vnet0 all -- * * 0.0.0.0/0 0.0.0.0/0 [goto] PHYSDEV match --physdev-in vnet0 Chain libvirt-in-post (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-in vnet0 Chain libvirt-out (1 references) pkts bytes target prot opt in out source destination 0 0 FO-vnet0 all -- * * 0.0.0.0/0 0.0.0.0/0 [goto] PHYSDEV match --physdev-out vnet0 --physdev-is-bridged How can i make the rules work? I am under Centos 7 and the libvirtd is as is : rpm -qa | grep libvirt libvirt-daemon-kvm-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-config-network-1.2.17-13.el7_2.3.x86_64 libvirt-python-1.2.17-2.el7.x86_64 libvirt-client-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-network-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-secret-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-nodedev-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-qemu-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-storage-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-config-nwfilter-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-interface-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-lxc-1.2.17-13.el7_2.3.x86_64 libvirt-daemon-driver-nwfilter-1.2.17-13.el7_2.3.x86_64 libvirt-1.2.17-13.el7_2.3.x86_64 Thanks in advance for your help. Regards, JF

1 0

[libvirt-users] libvirt-ext transport
by Nidhi D 01 Mar '16

01 Mar '16

I cannot find any documentation regarding usage of ext mode of transport for VM Migration in libvirt. Can anyone give me ideas? Nidhi

1 0

[libvirt-users] Network speed between two guests on same host.
by Dominique Ramaekers 01 Mar '16

01 Mar '16

Hi, I've got two hosts. Most of my guests are Windows systems. I'm using LANBench to test network performance. 1) From an physical PC to a guest (it doesn't matter on which host), I get almost 1Gb/s. They are connected through a 1Gb/s swich => very good! 2) From a guest on one host to a guest on the other host => plusminus 1Gb/s => Okay! 3) Between two guests on the same host => plusminus 230Mb/s ??? The guests have network over a bridged interface, so I tried the same test over a NAT interface => The same 230Mb/s... Is there a way to tweak connection speeds between two guest running on the same host? Thanks in advance... An piece of the xml dump of one of the guests: <domain type='kvm' id='17'> <name>PCVIRTdra</name> <uuid>925e4f9b-2c27-406d-bdd9-f3e0b44f28bb</uuid> <title>PCVIRTdra - PC voor dra</title> <description></description> <memory unit='KiB'>2097152</memory> <currentMemory unit='KiB'>2097152</currentMemory> <memoryBacking> <hugepages/> </memoryBacking> <vcpu placement='static'>8</vcpu> <resource> <partition>/machine</partition> </resource> <os> <type arch='x86_64' machine='pc-i440fx-utopic'>hvm</type> <bootmenu enable='yes'/> </os> <features> <acpi/> <apic/> <hyperv> <relaxed state='on'/> <vapic state='on'/> <spinlocks state='on' retries='8191'/> </hyperv> </features> <cpu mode='custom' match='exact'> <model fallback='allow'>cpu64-rhel6</model> <topology sockets='2' cores='2' threads='2'/> </cpu> <clock offset='localtime'> <timer name='rtc' tickpolicy='catchup'/> <timer name='pit' tickpolicy='delay'/> <timer name='hpet' present='no'/> <timer name='hypervclock' present='yes'/> </clock> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>restart</on_crash> <pm> <suspend-to-mem enabled='no'/> <suspend-to-disk enabled='no'/> </pm> <devices> .... <interface type='bridge'> <mac address='52:54:00:b1:41:b3'/> <source bridge='br0'/> <target dev='vnet4'/> <model type='virtio'/> <alias name='net0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> .....

2 1

[libvirt-users] ANNOUNCE: Oz 0.15.0 release
by Chris Lalancette 29 Feb '16

29 Feb '16

All, I'm pleased to announce release 0.15.0 of Oz. Oz is a program for doing automated installation of guest operating systems with limited input from the user. Release 0.15.0 is a bugfix and feature release for Oz. Some of the highlights between Oz 0.14.0 and 0.15.0 are: * Make sure openssh-clients is included in CentOS builds * Add support for Fedora-23 * Add customization support for Debian * Use the ssh -i option to avoid "Too many authentication failures" with many ssh keys * Support "rawhide" as a Fedora version * Add in Ubuntu 15.10 support * Add in OpenSUSE 13.2 support * Improve Oz's free port selection A tarball and zipfile of this release is available on the Github releases page: https://github.com/clalancette/oz/releases . Packages for Fedora-22, Fedora-23, and EPEL-7 have been built in Koji and will eventually make their way to stable. Instructions on how to get and use Oz are available at http://github.com/clalancette/oz/wiki . If you have questions or comments about Oz, please feel free to contact me at clalancette at gmail.com, or open up an issue on the github page: http://github.com/clalancette/oz/issues . Thanks to everyone who contributed to this release through bug reports, patches, and suggestions for improvement. Chris Lalancette

1 0

[libvirt-users] Libvirt-lxc packages deprecation
by syed muhammad 25 Feb '16

25 Feb '16

Folks, I found this thread <https://www.redhat.com/archives/libvirt-users/2015-August/msg00026.html>that talks about deprecating libvirt-lxc packages [1] [2] [3] in RHEL7.1. I am using [1] as a dependency for my application deployed on RHEL7.2 servers. For now it works fine but I am not sure about the future RHEL releases. The plan of deprecation was delayed or cancelled? Can someone please share the latest state of this announcement? [1] libvirt-daemon-driver-lxc [2] libvirt-daemon-lxc [3] libvirt-login-shell Regards, Qasim Sarfraz

3 2

[libvirt-users] High i/o-wait in guest but no i/o-wait on host
by Dennis Jacobfeuerborn 25 Feb '16

25 Feb '16

Hi, I have an issue with one of our CentOS 7 hypervisors. The system is a Dell server equipped with Samsung 840 Pro SSDs. What happens is that the guest does about 40MB/s of writes (mostly MySQL inserts) and ends up becoming almost unusable because of high i/o-wait numbers yet when I check on the host vmstat consistently shows i/o-wait being 0 the whole time. This is weird for two reasons: a) I would not expect 40MB/s to create such an extreme congestion on the SSDs. b) If that congestion is in fact real I would expect to see non-zero i/o-wait numbers on the host created by the corresponding qemu process. Right now it looks like the i/o requests get stuck in the guest even though there is no congestion on the host. Could this be a virtio bug? Has anyone an explanation for this strange behavior? Regards, Dennis

1 0

[libvirt-users] problem cloning storage pool volume
by Andrei Perietanu 24 Feb '16

24 Feb '16

I'm trying to clone a volume in a storage pool and I'm following the steps described here: http://libvirt.org/docs/libvirt-appdev-guide-python/en-US/html/libvirt_appl… My code looks like: destXML = """ <volume> <name>"""+newDiskName+""".qcow2</name> <target> <path>/jffs2/disk0/"""+poolName+'/'+newDiskName+""".qcow2</path> <format type='qcow2'/> <permissions> <owner>-1</owner> <group>-1</group> <mode>0644</mode> <label>virt_image_t</label> </permissions> </target> </volume>""" srcDisk = tmpPool.storageVolLookupByName(vDisk) newVol = sp.createXMLFrom(destXML,srcDisk, 0) According to the steps described in the link, this should be it; but I can't start any VM that are using this volume. Also comparing the volume XML files for src/dest it looks like the format is not copied over: source: <volume type='file'> <name>k.qcow2</name> <key>/jffs2/disk0/sp/vDisk.qcow2</key> <source> </source> <capacity unit='bytes'>3221225472</capacity> <allocation unit='bytes'>332075008</allocation> <target> <path>/jffs2/disk0/sp/vDisk.qcow2</path> *<format type='qcow2'/>* <permissions> <mode>0644</mode> <owner>0</owner> <group>0</group> </permissions> <timestamps> <atime>1455879195</atime> <mtime>1455879171</mtime> <ctime>1455879171</ctime> </timestamps> </target> dest: <volume type='file'> <name>newDiskName.qcow2</name> <key>/jffs2/disk0/sp/newDiskName.qcow2</key> <source> </source> <capacity unit='bytes'>3221225472</capacity> <allocation unit='bytes'>326868992</allocation> <target> <path>/jffs2/disk0/sp/newDiskName.qcow2</path> *<format type='raw'/>* <permissions> <mode>0644</mode> <owner>0</owner> <group>0</group> </permissions> <timestamps> <atime>1455878686</atime> <mtime>1455878681</mtime> <ctime>1455878681</ctime> </timestamps> </target> </volume> I this a bug in libvirt->createXMLFrom ?? Or am I missing something? Thanks, Andrei -- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you receive this in error please contact the sender and delete the material from any computer immediately. It is the policy of Klas Limited to disavow the sending of offensive material and should you consider that the material contained in the message is offensive you should contact the sender immediately and also your I.T. Manager. Klas Telecom Inc., a Virginia Corporation with offices at 1101 30th St. NW, Washington, DC 20007. Klas Limited (Company Number 163303) trading as Klas Telecom, an Irish Limited Liability Company, with its registered office at Fourth Floor, One Kilmainham Square, Inchicore Road, Kilmainham, Dublin 8, Ireland.

2 4

[libvirt-users] Virtual ethernet delivers corrupt tcpip data
by Peter Steele 24 Feb '16

24 Feb '16

We came across this article recently. Does anyone know if libvirt-lxc under CentOS 7 is impacted by this bug? It mentions that a fix for this has been ported back as far as 3.14 kernels, but CentOS 7.1 is still only at 3.10. http://linux.slashdot.org/story/16/02/22/1715202/linux-virtual-ethernet-bug…

1 0

[libvirt-users] Sluggish performance with virtio and Win10
by John Obaterspok 23 Feb '16

23 Feb '16

Hello, I'm using virt-manager on my F23 box to run a Windows 10 image but the performance is so bad it's killing me. I have "vmx" flag in /proc/cpuinfo # lsmod |grep kvm kvm_intel 167936 6 kvm 503808 1 kvm_intel virtio-win-0.1.112-1.noarch But no virtio modules loaded. Should they be loaded nowadays? The disk format used is vmdk with no caching and native mode. The io is 100% in windows task manager performing less than 1MB/s Any clues? /usr/bin/qemu-system-x86_64 -machine accel=kvm -name win10-box -S -machine pc-i440fx-2.4,accel=kvm,usb=off,vmport=off -cpu SandyBridge,+osxsave,+pcid,+pdcm,+xtpr,+tm2,+est,+smx,+vmx,+ds_cpl,+monitor,+dtes64,+pbe,+tm,+ht,+ss,+acpi,+ds,+vme,hv_time,hv_relaxed,hv_vapic,hv_spinlocks=0x1fff,kvm=off -m 4096 -realtime mlock=off -smp 4,sockets=4,cores=1,threads=1 -uuid d4a67adb-5d30-42f8-b8c6-d3c4598700f2 -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/win10-box.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet -no-shutdown -global PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1 -boot strict=on -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x6.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x6 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x6.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x6.0x2 -device ahci,id=sata0,bus=pci.0,addr=0x8 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -drive file=/usr/share/virtio-win/virtio-win.iso,if=none,id=drive-ide0-0-0,readonly=on,format=raw -device ide-cd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0 -drive if=none,id=drive-ide0-0-1,readonly=on,format=raw -device ide-cd,bus=ide.0,unit=1,drive=drive-ide0-0-1,id=ide0-0-1 -drive file=/vm/storage/win10-box.img,if=none,id=drive-virtio-disk0,format=vmdk,cache=none,aio=native -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0xa,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -netdev tap,fd=27,id=hostnet0,vhost=on,vhostfd=28 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:cc:f0:31,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -device usb-tablet,id=input0 -spice port=5900,addr=127.0.0.1,disable-ticketing,seamless-migration=on -device VGA,id=video0,vgamem_mb=16,bus=pci.0,addr=0x2 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7 -msg timestamp=on

4 9

[libvirt-users] About the vfio error when using SR-IOV
by Xiao Ma (xima2) 22 Feb '16

22 Feb '16

Hi, All I want to use the SR-IOV of intel 82576 NIC. I enabled IOMMU and VT-d and SR-IOV in BIOS. And enabled VT-d in kernel. The OS information is bellow: [root@host3 nova]# cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) [root@host3 nova]# uname -an Linux host3.localdomain 3.10.0-229.el7.x86_64 #1 SMP Fri Mar 6 11:36:42 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux [root@host3 nova]# rpm -qa|grep qemu libvirt-daemon-driver-qemu-1.2.8-16.el7.x86_64 qemu-kvm-1.5.3-86.el7.x86_64 qemu-kvm-common-1.5.3-86.el7.x86_64 ipxe-roms-qemu-20130517-6.gitc4bce43.el7.noarch qemu-img-1.5.3-86.el7.x86_64 [root@host3 nova]# rpm -qa|grep libvirt libvirt-daemon-1.2.8-16.el7.x86_64 libvirt-daemon-driver-nwfilter-1.2.8-16.el7.x86_64 libvirt-python-1.2.8-7.el7.x86_64 libvirt-daemon-driver-storage-1.2.8-16.el7.x86_64 libvirt-daemon-driver-qemu-1.2.8-16.el7.x86_64 libvirt-daemon-config-nwfilter-1.2.8-16.el7.x86_64 libvirt-daemon-driver-secret-1.2.8-16.el7.x86_64 libvirt-daemon-driver-interface-1.2.8-16.el7.x86_64 libvirt-client-1.2.8-16.el7.x86_64 libvirt-glib-0.1.7-3.el7.x86_64 libvirt-daemon-driver-network-1.2.8-16.el7.x86_64 libvirt-daemon-driver-nodedev-1.2.8-16.el7.x86_64 libvirt-daemon-kvm-1.2.8-16.el7.x86_64 And I can see the vf of the NIC after ‘ echo '7' > /sys/class/net/ens1f1/device/sriov_numvfs ' [root@host3 VTS2.1-demo]# lspci |grep -i ethernet 08:00.0 Ethernet controller: QLogic Corp. 10GbE Converged Network Adapter (TCP/IP Networking) (rev 02) 08:00.1 Ethernet controller: QLogic Corp. 10GbE Converged Network Adapter (TCP/IP Networking) (rev 02) 0f:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection (rev 01) 0f:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection (rev 01) 10:10.1 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) 10:10.3 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) 10:10.5 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) 10:10.7 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) 10:11.1 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) 10:11.3 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) 10:11.5 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) I configured the interface as bellow in XML: <interface type="hostdev" managed="yes"> <mac address="fa:16:3e:f7:57:5f"/> <source> <address type="pci" domain="0x0000" bus="0x10" slot="0x10" function="0x3"/> </source> <vlan> <tag id="1000"/> </vlan> </interface> But the error output when I boot one vm: [root@host3 VTS2.1-demo]# virsh create vtc.demo.xml error: Failed to create domain from vtc.demo.xml error: internal error: early end of file from monitor: possible problem: 2016-02-22T07:38:42.169035Z qemu-kvm: -device vfio-pci,host=10:10.3,id=hostdev0,bus=pci.0,addr=0x3: vfio: error, group 17 is not viable, please ensure all devices within the iommu_group are bound to their vfio bus driver. 2016-02-22T07:38:42.169215Z qemu-kvm: -device vfio-pci,host=10:10.3,id=hostdev0,bus=pci.0,addr=0x3: vfio: failed to get group 17 2016-02-22T07:38:42.169233Z qemu-kvm: -device vfio-pci,host=10:10.3,id=hostdev0,bus=pci.0,addr=0x3: Device initialization failed. 2016-02-22T07:38:42.169248Z qemu-kvm: -device vfio-pci,host=10:10.3,id=hostdev0,bus=pci.0,addr=0x3: Device 'vfio-pci' could not be initialized Could you please help to solve it? Looking forward for your reply. Thanks.

1 0

[libvirt-users] UserID Permissions: Virtual Machine Manager vs virsh and Python
by David Ashley 22 Feb '16

22 Feb '16

I have added a user to the libvirt group on my CentOS 7.2 server and that user can successfully access the Virtual Machine Manager without authenticating as expected. This allows the user to perform all functions in the VMS as if they were root. This is acceptable as this is a private server with no outside access so security is not a real issue. But when that same user tries to perform functions with virsh or using a Python script that uses the libvirt module, the connection is just read-only. Why are the permissions different for these environments and what must I do to give the user r/w access in virsh or the Python script? David Ashley

3 4

[libvirt-users] VIR_DOMAIN_MEMORY_STAT_ACTUAL_BALLOON meaning
by Jean-Pierre Ribeauville 18 Feb '16

18 Feb '16

Hi, I'm wondering what means the VIR_DOMAIN_MEMORY_STAT_ACTUAL_BALLOON value . On a Windows Guest , rammap tool gives me following information : Driver Locked size 6.6 Giga This value is relevant with virsh dominfo of this Guest (equal to Max memory - Used memory): Max memory: 8704000 KiB Used memory: 2097152 KiB >From libvirt API , VIR_DOMAIN_MEMORY_STAT_ACTUAL_BALLOON value is : active_balloon (2048000.000000) Could you give me some light ? Thx . Regards, J.P. Ribeauville P: +33.(0).1.47.17.20.49 . Puteaux 3 Etage 5 Bureau 4 jpribeauville(a)axway.com<mailto:jpribeauville@axway.com> http://www.axway.com<http://www.axway.com/> P Pensez à l'environnement avant d'imprimer.

1 0

[libvirt-users] IGPU passtrough with AMD APU
by David Hlacik 18 Feb '16

18 Feb '16

Guys Is it possible to passtrough iGPU from AMD A10-7870K to kvm virtual machine? If so then how please? Thank you David

1 0

[libvirt-users] Amount CPU's
by Dominique Ramaekers 18 Feb '16

18 Feb '16

Quick question. In my host, I've got two processors with each 6 cores and each core has two threads. I use iometer to do some testings on hard drive performance. I get the idea that using more cores give me better results in iometer. (if it will improve the speed of my guest is an other question...) For a Windows 2012 R2 server guest, can I just give the guest 24 cores? Just to make shure the os has all the possibilities to run as quickly as possible? Thanks in advance. Dominique.

2 2

[libvirt-users] query regarding domstats option with virsh
by Jain, Manish (HP Software) 18 Feb '16

18 Feb '16

Hi, I am looking for the information w.r.t domstats command line option of virsh tool. 1> This command line option is available with which version of libvirt. 2> How to get Guest's disk related information in case storage pool does not exist on host. Thanks and Regards, Manish

2 2

[libvirt-users] bug in Libvirt(-python)?
by Dennis Jacobfeuerborn 17 Feb '16

17 Feb '16

Hi, I've noticed that the capacity of the disk in one of my VMs is completely wrongly reported by the python api. The image was transfered using scp but the transfer was aborted and now the api show a strange value: [root@virt83 ~]# du -h /var/lib/libvirt/images/test-disk1 706M /var/lib/libvirt/images/test-disk1 [root@virt83 ~]# ls -lh /var/lib/libvirt/images/test-disk1 -rw-r--r--. 1 root root 706M 3. Nov 20:03 /var/lib/libvirt/images/test-disk1 [root@virt83 ~]# qemu-img info /var/lib/libvirt/images/test-disk1 image: /var/lib/libvirt/images/test-disk1 file format: raw virtual size: 705M (739573760 bytes) disk size: 705M Notice how that raw image is seen with a size of 705M by ls, du and qemu-img however when I get a blockinfo using libvirt-python using the blockInfo() call I get this: {'source': '/var/lib/libvirt/images/test-disk1', 'target': 'vda'} [2423276348619671841L, 739577856L, 739577856L] Obviously the first value (capacity) is way too large to be correct. Any ideas if this is a bug or if there is something else going on? This is a CentOS 7 system with the following versions: [root@virt83 ~]# cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) [root@virt83 ~]# rpm -q libvirt libvirt-1.2.8-16.el7_1.4.x86_64 [root@virt83 ~]# rpm -q libvirt-python libvirt-python-1.2.8-7.el7_1.1.x86_64 Regards, Dennis

2 1

[libvirt-users] glib2 head file error when build libvirt with wireshark support
by Han Han 17 Feb '16

17 Feb '16

I compile the latest libvirt from fedora rawhide, but failed. The version of my software: wireshark-devel-2.0.1-2.fc24.x86_64 glib2-2.47.5-2.fc24.x86_64 gcc-5.1.1-4.fc23.x86_64 binutils-2.26-10.fc24.x86_64 The error as following: # ./autogen.sh --prefix=/usr && make ..... wireshark/src/plugin.c:5:21: fatal error: gmodule.h: No such file or directory compilation terminated. Makefile:2442: recipe for target 'wireshark/src/wireshark_src_libvirt_la-plugin.lo' failed make[3]: *** [wireshark/src/wireshark_src_libvirt_la-plugin.lo] Error 1 make[3]: *** Waiting for unfinished jobs.... In file included from wireshark/src/packet-libvirt.c:27:0: /usr/include/wireshark/epan/proto.h:40:18: fatal error: glib.h: No such file or directory compilation terminated. Makefile:2435: recipe for target 'wireshark/src/wireshark_src_libvirt_la-packet-libvirt.lo' failed make[3]: *** [wireshark/src/wireshark_src_libvirt_la-packet-libvirt.lo] Error 1 make[3]: Leaving directory '/root/libvirt/tools' Makefile:2104: recipe for target 'all' failed make[2]: *** [all] Error 2 make[2]: Leaving directory '/root/libvirt/tools' Makefile:2002: recipe for target 'all-recursive' failed make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory '/root/libvirt' Makefile:1897: recipe for target 'all' failed make: *** [all] Error 2 When I disable wireshark support, make successfully. # ./configure --without-wireshark-dissector && make But the file gmodule.h and glib.h exist on my system: # locate gmodule.h /usr/include/glib-2.0/gmodule.h # locate glib.h /usr/include/glib-2.0/glib.h /usr/share/gtk-doc/html/glib/glib.html /usr/src/kernels/4.5.0-0.rc0.git1.1.fc24.x86_64/include/config/blk/dev/bsglib.h /usr/src/kernels/4.5.0-0.rc3.git3.1.fc24.x86_64/include/config/blk/dev/bsglib.h

4 5

[libvirt-users] [issue] Accessing SMBIOSTable in FreeBSD Kernel
by sundareswaram pv 16 Feb '16

16 Feb '16

1 0

[libvirt-users] Configure QCow2 L2 Cache through virt domain XML
by Stefano Bonicatti 15 Feb '16

15 Feb '16

Hello, i was wondering if it is possible to configure the l2 cache of a qcow2 image through the domain xml. I cannot find any documentation about it... the only thing i've found is that i can pass custom options to qemu command line through the <qemu:commandline> tag, but, to my understanding, that would mean entirely remove the <disk> tag for the image and rewrite it as a list of args for the command line. Isn't there an easier way? An example of what i'm speaking about is: file=hd.qcow2,l2-cache-size=4194304,refcount-cache-size=262144

1 0

[libvirt-users] Getting "unknown device type" when attaching NPIV (vHBA) to vm
by Vaknin, Rami 13 Feb '16

13 Feb '16

Hi, I'm trying to attach a host FC HBA to VM (NPIV). Running ovirt 3.5 on CentOS 6.7, libvirt-0.10.2-46.el6_6.6.x86_64, I created vHBA using nodedev-create command - see below HBA and vHBA. I wrote a vdsm hook which appends the vHBA xml stanza to the devices xml element but the vm start starts without the vHBA device. Also, when trying to attach the device manually as a live device - I get: 2016-02-01 21:30:24.216+0000: 129764: debug : qemuDomainObjBeginJobInternal:847 : Starting job: modify (async=none) 2016-02-01 21:30:24.216+0000: 129764: error : virDomainDeviceDefParse:8136 : XML error: unknown device type Could you please help? virsh # nodedev-dumpxml scsi_host6 <device> <name>scsi_host6</name> <parent>pci_0000_08_00_0</parent> <capability type='scsi_host'> <host>6</host> <capability type='fc_host'> <wwnn>20000024ff57d848</wwnn> <wwpn>21000024ff57d848</wwpn> <fabric_wwn>20018c604f101321</fabric_wwn> </capability> <capability type='vport_ops' /> </capability> </device> virsh # nodedev-dumpxml scsi_host15 <device> <name>scsi_host15</name> <parent>scsi_host6</parent> <capability type='scsi_host'> <host>15</host> <capability type='fc_host'> <wwnn>5001a4a84992572a</wwnn> <wwpn>5001a4a76965d7b8</wwpn> <fabric_wwn>20018c604f101321</fabric_wwn> </capability> </capability> </device> The xml I appends: <devices> ... <device> <name>scsi_host16</name> <parent>scsi_host7</parent> <capability type="scsi_host"> <host>16</host> <capability type="fc_host"> <wwnn>5001a4a8cd978a73</wwnn> <wwpn>5001a4afa86a7378</wwpn> <fabric_wwn>20018c604f101411</fabric_wwn> </capability> </capability> </device> <device> <name>scsi_host15</name> <parent>scsi_host6</parent> <capability type="scsi_host"> <host>15</host> <capability type="fc_host"> <wwnn>5001a4a84992572a</wwnn> <wwpn>5001a4a76965d7b8</wwpn> <fabric_wwn>20018c604f101321</fabric_wwn> </capability> </capability> </device> </devices> Thanks, Rami.

3 4

[libvirt-users] Domain cannot talk to itself unless virbr0 is in promiscuous mode
by David Raison 12 Feb '16

12 Feb '16

Hi We have the following situation: A hypervisor using KVM-Qemu/libvirt with a single VM. The VM has the internal IP 192.168.122.151 on the default network pool using virbr0 on the hypervisor. We've set up netfilter rules to DNAT requests on one IP of the hypervisor to the VM. So, first of all, forwarding to the internal IP range is allowed: > $IPTABLES -I FORWARD -m state -d 192.168.122.0/24 --state > NEW,RELATED,ESTABLISHED -j ACCEPT Then we're forwarding a few ports from the hypervisor's public IP to the VM, imaps being one of them: > Chain PREROUTING (policy ACCEPT 2606 packets, 169K bytes) pkts bytes > target prot opt in out source destination 142 8048 DNAT tcp -- * * > 0.0.0.0/0 a.b.c.145 tcp dpt:993 to:192.168.122.151 Since the VM is also doing SMTP, we need it to send out mail via a dedicated IPv4, which we achieve through the following SNAT rule: > Chain POSTROUTING (policy ACCEPT 1121 packets, 77556 bytes) pkts > bytes target prot opt in out source destination 81 6262 SNAT all -- * > * 192.168.122.151 0.0.0.0/0 to:a.b.c.145 Now, on this mailserver, we're also running a roundcube instance. For authentication, roundcube connects to the imaps port of the local dovecot instance. In order for the SSL certificate check to succeed, it needs to do so using the actual domain name, and cannot use "localhost" or the loopback IP address. The problem is that, given the above iptables rules, connecting from inside the VM to itself via the hypervisor's external interface doesn't work. The connection simply times out, logging reveals they're not getting forwarded. We've added logging to iptables and testing in promisc mode vs. not-promisc: This is what gets logged when virbr0 is not in promisc mode: > Feb 11 19:12:31 hyper kernel: [199815.004207] prerouting imaps: > IN=virbr0 OUT= PHYSIN=vnet0 > MAC=fe:54:00:17:c8:2a:52:54:00:17:c8:2a:08:00 SRC=192.168.122.151 > DST=a.b.c.d.145 LEN=60 TOS=0x10 PREC=0x00 TTL=64 ID=40689 DF > PROTO=TCP SPT=43460 DPT=993 WINDOW=29200 RES=0x00 SYN URGP=0 And this when the device is in promisc mode: > Feb 11 19:14:33 hyper kernel: [199937.674189] prerouting imaps: > IN=virbr0 OUT= PHYSIN=vnet0 > MAC=fe:54:00:17:c8:2a:52:54:00:17:c8:2a:08:00 SRC=192.168.122.151 > DST=a.b.c.d.145 LEN=60 TOS=0x10 PREC=0x00 TTL=64 ID=2244 DF PROTO=TCP > SPT=43461 DPT=993 WINDOW=29200 RES=0x00 SYN URGP=0 > Feb 11 19:14:33 hyper kernel: [199937.674221] forwarded imaps: IN=virbr0 > OUT=virbr0 PHYSIN=vnet0 MAC=52:54:00:17:c8:2a:52:54:00:17:c8:2a:08:00 > SRC=192.168.122.151 DST=192.168.122.151 LEN=60 TOS=0x10 PREC=0x00 TTL=63 > ID=2244 DF PROTO=TCP SPT=43461 DPT=993 WINDOW=29200 RES=0x00 SYN URGP=0 > Feb 11 19:14:33 hyper kernel: [199937.674766] forwarded imaps: IN=virbr0 > OUT=virbr0 PHYSIN=vnet0 MAC=52:54:00:17:c8:2a:52:54:00:17:c8:2a:08:00 > SRC=192.168.122.151 DST=192.168.122.151 LEN=52 TOS=0x10 PREC=0x00 TTL=63 > ID=2245 DF PROTO=TCP SPT=43461 DPT=993 WINDOW=229 RES=0x00 ACK URGP=0 Another workaround we found is to disable iptables on the bridge interface. > root@hyper:~# echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables But I do not consider this a solution, merely a workaround. I do not understand why the forward rule mentioned above does not apply to the situation where IN and OUT are both virbr0? Thank you for any advice, David -- TenTwentyFour S.à r.l. W: www.tentwentyfour.lu T: +352 20 211 1024 F: +352 20 211 1023 9, avenue des Hauts-Fourneaux L-4362 Esch/Alzette

1 0

[libvirt-users] Unable to create raw volume on netfs storage (Operation not permitted)
by Benjamin Weik 11 Feb '16

11 Feb '16

Hello, we are trying to create a new setup with a centralized storage server. Currently we are running multiple "All-in-One" hosts using raw volumes stored on the local disk of the server. I tried it first with samba but it did not work so currently I have configured it as NFS. This is my current setup: For Storage: OS: Ubuntu 16.04 beta (to match vHost version), IP: 123.123.123.2 NFS: v1.2.8 Samba: v4.3.3 For vHost: OS: Ubuntu 16.04 beta (as the Package in Ubuntu 14.04 has still a bug that prevents mounting of samba shares) IP: 123.123.123.3 Libvirt: v2.21 Qemu: 2.5 Both are simply connected via switched network for testing. So on the Storage server I created a user and a group called vstorage (uid:1000,gid:500) Then created a folder /pool owned by this user, permission 777 And exported it via nfs in /etc/exports: /pool 123.123.123.3(rw,async,no_subtree_check,all_squash,anonuid=1000,anongid=500) On the vHost I defined the pool via XML: <pool type='netfs'> <name>pool</name> <source> <host name='123.123.123.2'/> <dir path='pool'/> <format type='nfs'/> </source> <target> <path>/var/lib/virt/images</path> </target> </pool> When I try to define a volume in the pool, it will always fail if raw format (default) is used. virsh vol-create-as --pool pool --name test --capacity 512M error: Failed to create vol test error: Failed to create file '/var/lib/virt/images/test': Operation not permitted In /var/log/syslog I can find the following libvirtd[889]: cannot chown '/var/lib/virt/images/test' to (0, 0): Operation not permitted libvirtd[889]: Failed to create file '/var/lib/virt/images/test': Operation not permitted When I try it with a different format, like qcow2 it is working fine: virsh vol-create-as --pool pool --name test --capacity 512M --format qcow2 Vol test created I am unable to find the reason for this problem, it also took me quite a while find out that this is a format issue as the error message is actually not really helpful. I found a small guide on setting up KVM from IBM and they are using NFS with raw images, so I'm not sure where the error is https://www.ibm.com/developerworks/library/l-using-kvm/ Maybe someone could shed some light on this? The same error message happens btw. with Samba. Best regards, Benjamin Weik

2 1

[libvirt-users] Networking with qemu/kvm+libvirt
by Andre Goree 10 Feb '16

10 Feb '16

I have some questions regarding the way that networking is handled via qemu/kvm+libvirt -- my apologies in advance if this is not the proper mailing list for such a question. I am trying to determine how exactly I can manipulate traffic from a _guest's_ NIC using iptables on the _host_. On the host, there is a bridged virtual NIC that corresponds to the guest's NIC. That interface does not have an IP setup on it on the host, however within the vm itself the IP is configured and everything works as expected. During my testing, I've seemingly determined that traffic from the vm does NOT traverse iptables on the host, but I _can_ in fact see the traffic via tcpdump on the host. This seems odd to me, unless the traffic is passed on during interaction with the kernel, and thus never actually reaches iptables. I've gone as far as trying to log via iptables any and all traffic traversing the guest's interface on the host, but to no avail (iptables does not see any traffic from the guest's NIC on the host). Is this the way it's supposed to work? And if so, is there any way I can do IP/port redirection silently on the _host_? Thanks in advance for any insight that anyone can share :) -- Andre Goree -=-=-=-=-=- Email - andre at drenet.net Website - http://www.drenet.net PGP key - http://www.drenet.net/pubkey.txt -=-=-=-=-=-

2 5

[libvirt-users] GPU passthrough - MSI R9 380 4GB, works only ONCE
by David Hlacik 09 Feb '16

09 Feb '16

Hello guys, I have a problem when using my MSI R9 380 4G graphic card as GPU passthrough with KVM. At the first linux boot (Fedora 23) I am able to successfully start virtual machine and it works! However if i will shut down virtual machine and start it again - the screen will stay blank! So far I have been able to find on the internet that some graphic cards just can not reinitialize itself when there is no power off/on, which could be the case of mine as well. Also I am very much surprised that this graphic card has no UEFI rom! Any help would be appreciated [root@brutus-coreos ~]# virsh start winos1 Domain winos1 started dmesg output after second boot of the virtual machine winos1 [ 338.346776] input: Microsoft Microsoft® Nano Transceiver v2.0 as /devices/pci0000:00/0000:00:14.0/usb1/1-10/1-10:1.0/0003:045E:0800.0007/input/input23 [ 338.397715] hid-generic 0003:045E:0800.0007: input,hidraw0: USB HID v1.11 Keyboard [Microsoft Microsoft® Nano Transceiver v2.0] on usb-0000:00:14.0-10/input0 [ 338.402847] input: Microsoft Microsoft® Nano Transceiver v2.0 as /devices/pci0000:00/0000:00:14.0/usb1/1-10/1-10:1.1/0003:045E:0800.0008/input/input24 [ 338.403605] hid-generic 0003:045E:0800.0008: input,hidraw1: USB HID v1.11 Mouse [Microsoft Microsoft® Nano Transceiver v2.0] on usb-0000:00:14.0-10/input1 [ 338.419310] input: Microsoft Microsoft® Nano Transceiver v2.0 as /devices/pci0000:00/0000:00:14.0/usb1/1-10/1-10:1.2/0003:045E:0800.0009/input/input25 [ 338.470855] hid-generic 0003:045E:0800.0009: input,hiddev0,hidraw2: USB HID v1.11 Device [Microsoft Microsoft® Nano Transceiver v2.0] on usb-0000:00:14.0-10/input2 [ 754.055255] vgaarb: device changed decodes: PCI:0000:01:00.0,olddecodes=io+mem,decodes=io+mem:owns=none [ 754.087966] xhci_hcd 0000:00:14.0: remove, state 4 [ 754.087982] usb usb2: USB disconnect, device number 1 [ 754.090201] xhci_hcd 0000:00:14.0: USB bus 2 deregistered [ 754.090399] xhci_hcd 0000:00:14.0: remove, state 1 [ 754.090409] usb usb1: USB disconnect, device number 1 [ 754.090413] usb 1-2: USB disconnect, device number 2 [ 754.090964] usb 1-8: USB disconnect, device number 3 [ 754.091904] usb 1-10: USB disconnect, device number 4 [ 754.222281] xhci_hcd 0000:00:14.0: USB bus 1 deregistered [ 755.359725] vfio_ecap_init: 0000:01:00.0 hiding ecap 0x19@0x270 [ 755.359733] vfio_ecap_init: 0000:01:00.0 hiding ecap 0x1b@0x2d0 [ 755.384598] vfio-pci 0000:03:00.0: enabling device (0000 -> 0002) [ 755.485743] vfio_ecap_init: 0000:03:00.0 hiding ecap 0x1e@0x154 screen is blank - I have to reboot my Linux machine in order to be able to start this virtual machine once again David Hlacik +420-777-307-745 | david(a)hlacik.cz [image: View David Hlacik's profile on LinkedIn] <http://cz.linkedin.com/in/hlacik>

2 2