- Users - libvirt List Archives

[libvirt-users] Access to virtualization on a multi-user system
by sbaugh＠catern.com 08 Jul '15

08 Jul '15

Hi libvirt-users, I find myself wanting to do something that seems like it must have some obvious solution: I have multiple users (let's just assume local Unix accounts) on a Linux system, and I want them all to have access to KVM-accelerated virtualization. But, I don't want them to be able to meddle with each other's virtual machines. Is there a solution to this problem? Methods of attack that have occured to me: - Use PolicyKit to only allow a user to access qemu:///system VMs that are somehow marked as owned by that user - Run multiple libvirt qemu:///system daemons and restrict access to each on a per-user basis - Allow qemu:///session VMs to actually be KVM-accelerated (this seems like the best way to do it, but I have no idea if that's even possible) Again, the third seems like the best way, but I'm not sure of how to allow such VMs to be KVM-accelerated, and not sure if it's possible for them to use anything other than usermode networking. Hopefully I'm missing some obvious way to do it! Thanks for any assistance!

3 2

[libvirt-users] Error attaching tape drive device to KVM guest
by Jake Kugel 06 Jul '15

06 Jul '15

Hello, i'm trying to configure a host SCSI device (tape drive) so that it is available in a KVM guest VM, but am receiving an error when attempting to attach the device. My guest xml has the following scsi controller defined: <controller type='scsi' index='0' model='virtio-scsi'> <alias name='scsi0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </controller> I created tapedrive.xml with following contents: <disk type='block' device='lun' sgio='unfiltered'> <driver name='qemu' type='raw' cache='none'/> <source dev='/dev/st0'/> <target dev='st0' bus='scsi'/> <address type='drive' controller='0' bus='0' target='0' unit='0'/> </disk> I then attempt to attach using following command, and receive this error: # virsh attach-device instance-0000002d tapedrive.xml --config error: Failed to attach device from tapedrive.xml error: internal error: Invalid harddisk device name: st0 Does anyone know cause of the error? In <address> section of tape drive definition I am using type='drive', I tried type='tape' also but same error. is there a different property value I should use here, or general advice for attaching tape drive to KVM guest? Thanks, Jake

1 0

[libvirt-users] Slow network performance issues
by Alex Regan 03 Jul '15

03 Jul '15

Hi, I have a fedora21 system that's been running fine under normal network activity, but trying to perform a full backup of the 300GB filesystem is taking forever because the network speed appears to be very slow. Using rsync, the transfer speeds reach a max of like 180kB/s. Using rsync to copy files on the local filesystem is greater than 55MB/s, so I don't think it's a disk issue. What kind of network speed can I expect copying data across the network from the guest to another host on the same gigabit network? I'm using the virtio driver: # lsmod|grep virtio virtio_console 28672 0 virtio_balloon 16384 0 virtio_net 32768 0 virtio_blk 20480 4 virtio_pci 24576 0 virtio_ring 20480 5 virtio_blk,virtio_net,virtio_pci,virtio_balloon,virtio_console virtio 16384 5 virtio_blk,virtio_net,virtio_pci,virtio_balloon,virtio_console ethtool on the vnet0 interface shows the speed at only 10Mb/s. Is that normal? Or even changable? I've included the qemu command-line below. # ps ax|grep propguest 1582 ? Sl 25433:37 /usr/bin/qemu-system-x86_64 -machine accel=kvm -name propguest -S -machine pc-1.2,accel=kvm,usb=off -m 16384 -realtime mlock=off -smp 4,sockets=4,cores=1,threads=1 -uuid b67e10fe-7ef0-a1ca-cecf-3f3506d54e1a -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/propguest.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -drive file=/var/lib/libvirt/iso-images/Fedora-18-x86_64-DVD.iso,if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/var/lib/libvirt/images/propguest.img,if=none,id=drive-virtio-disk0,format=qcow2 -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -drive file=/var/lib/libvirt/images/propguest-2.img,if=none,id=drive-virtio-disk2,format=raw -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x9,drive=drive-virtio-disk2,id=virtio-disk2 -netdev tap,fd=23,id=hostnet0,vhost=on,vhostfd=24 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:11:66:5a:51,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -spice port=5900,addr=127.0.0.1,disable-ticketing,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=67108864,bus=pci.0,addr=0x2 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x8 Any ideas greatly appreciated. Thanks, Alex

3 2

[libvirt-users] qemu-img snapshots configuration
by sergio 30 Jun '15

30 Jun '15

Hello. What it the difference in external snapshot configuration with and without <domainsnapshot> ? What is the difference between vda and vdb in the following example? (From https://libvirt.org/formatsnapshot.html) <domainsnapshot> ... <memory snapshot='no'/> <disks> <disk name='vda' snapshot='external'> <driver type='qcow2'/> <source file='/path/vda-delta.qcow2'/> </disk> <disk name='vdb' snapshot='no'/> </disks> <domain> ... <devices> <disk type='file' device='disk'> <driver name='qemu' type='raw'/> <source file='/path/vda-img.qcow2'/> <target dev='vda' bus='virtio'/> </disk> <disk type='file' device='disk' snapshot='external'> <driver name='qemu' type='raw'/> <source file='/path/vdb-img.qcow2'/> <backingStore type='file'> <format type='qcow2'/> <source file='/path/vdb-delta.qcow2'/> </backingStore> <target dev='vdb' bus='virtio'/> </disk> ... </devices> </domain> </domainsnapshot> -- sergio.

1 0

[libvirt-users] QEMU-KVM and bare metal performance impact
by nishtala 30 Jun '15

30 Jun '15

Hi, My name is Rajiv Nishtala and I am a PhD student in UPC. I am trying to investigate the performance (instructions per second (IPS)) impact of an application on QEMU-KVM and bare metal using the performance monitoring tools perfmon and perf. The performance counter used for measuring this is "instructions" and "instructions_retired" on perf and perfmon, respectively. The application is a *stress* microbenchmark that does not produce any cache misses (LLC). I account for the performance of the application on QEMU-KVM using the following procedure: A) Record the IPS of the QEMU-KVM (using its PID) on perf and perfmon when idle. B) Launch the stress benchmark and record IPS. C) the difference between *B* and *A* should give the performance of the application since the KVM does not inherently provide a technique to collect this statistic. However the performance of the application on bare metal is recorded as is using the per-thread session available in perfmon and perf. The sampling frequency to collect the statistics is 1 second. The result obtained on bare metal are in the order of magnitude of billions. On the other hand, results from KVM do not show any difference in performance when idle or when an application is running and is in the order of magnitude of 100's of thousands. IPS_KVM_IDLE LLC_KVM_IDLE IPS_KVM_STRESS LLC_KVM_STRESS IPS_bare metal_STRESS LLC_bare metal_STRESS 47902 2495 25157 600 8116556011 3805 23437 758 48762 1032 8166564000 2140 834370 9954 543690 2379 8326333629 234 25261 662 49139 997 8057453733 1399 47998 2767 23773 600 8214761042 494 542039 2299 843266 2231 8075529487 4593 47982 2781 25249 603 8327678364 443 23833 794 49138 622 8058893864 1870 832913 9978 544567 2204 8210889659 394 I also tried using perf-kvm using the following command: sudo perf kvm --guest --guestkallsyms=guest-kallsyms --guestmodules=guest-modules record -a -o perf.data but failed with the following error: *Couldn't record guest kernel [0]'s reference relocation symbol. *and no events were recorded. I describe details of QEMU and the host machine (bare metal) below. QEMU emulator version 2.0.0 in conjunction with KVM as the virtual environment and libvirt 1.2.2 The guest machine is running kernel version 3.19.0-15-generic and the host machine is running version 3.14.5-031405-generic on a x86_64 machine I setup the guest machine with Intel SandyBridge processor (model name:Intel Xeon E312xx) with the following flags: sockets=2,cores=2,threads=1 and 4mb cache. More details: cpu family : 6 model : 42 max freq : 2394.560 MHz flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc rep_good nopl eagerfpu pni pclmulqdq vmx ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx hypervisor lahf_lm vnmi ept xsaveopt The host machine is an Intel Sandy Bridge processor (Intel(R) Core(TM) i7-2760QM CPU @ 2.40GHz) with 4 cores and 6mb cache. cpu family : 6 model : 42 flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat epb xsaveopt pln pts dtherm tpr_shadow vnmi flexpriority ept vpid Thanks Rajiv Nishtala WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

1 0

[libvirt-users] qemu-img snapshots configuration
by sergio 30 Jun '15

30 Jun '15

Hello. What it the difference in external snapshot configuration with and without <domainsnapshot> ? What is the difference between vda, vdb and vdc in the following example? (From https://libvirt.org/formatsnapshot.html) <domainsnapshot> ... <memory snapshot='no'/> <disks> <disk name='vda' snapshot='external'> <driver type='qcow2'/> <source file='/path/vda-delta.qcow2'/> </disk> <disk name='vdb' snapshot='no'/> <disk name='vdc' snapshot='no'/> </disks> <domain> ... <devices> <disk type='file' device='disk'> <driver name='qemu' type='raw'/> <source file='/path/vda-img.qcow2'/> <target dev='vda' bus='virtio'/> </disk> <disk type='file' device='disk' snapshot='external'> <driver name='qemu' type='raw'/> <source file='/path/vdb-img.qcow2'/> <target dev='vdb' bus='virtio'/> </disk> <disk type='file' device='disk' snapshot='external'> <driver name='qemu' type='raw'/> <source file='/path/vdc-img.qcow2'/> <backingStore type='file'> <format type='qcow2'/> <source file='/path/vdc-delta.qcow2'/> </backingStore> <target dev='vdc' bus='virtio'/> </disk> ... </devices> </domain> </domainsnapshot> -- sergio.

1 0

[libvirt-users] Compiling Libvirt-snmp on VMware Vsphere ESXi
by Aleem Akhtar 28 Jun '15

28 Jun '15

How can I compile and run Libvirt-snmp on VMware Vsphere ESXi? Can somebody guide me with step by step procedure. I tried to followed steps mentioned on Libvirt Website <https://libvirt.org/compiling.html> but I guess they are for Linux distribution. Because I could not execute ./configure command. After searching on Google I found a similar question <https://communities.vmware.com/thread/514078> which tells that I need to create a VIB and than install that VIB. Now I have no idea about creating VIB. Can somebody please guide me on this. *Regards,* *Aleem Akhtar * *Lecturer Computer Science* Punjab Group of Colleges P. D. Khan Campus Email: aleem.akhtar(a)seecs.nust.edu.pk <aleem.akhtar(a)seecs.nust.edu.pk> Website: aleemakhtar.com

1 0

[libvirt-users] Snapshots vs filesystem shares
by anonym 27 Jun '15

27 Jun '15

[Please keep me Cc:ed since I'm not subscribed to the list!] Hi list, The tl;dr; is: with Libvirt/QEMU, should it be possible to mount a filesystem share (of type='mount') after restoring from a snapshot that was taken when the filesystem share wasn't mounted? It's pretty clear that Libvirt/QEMU (currently, at least) doesn't support taking snapshots of a live guest which has active filesystem shares (type='mount'). I get this error: Call to virDomainSaveFlags failed: internal error: unable to execute QEMU command 'migrate': Migration is disabled when VirtFS export path '${TARGET_PATH}' is mounted in the guest using mount_tag '$TAG' (Libvirt::Error) I have a use case where I very much would like this combination. It wouldn't be a problem if the filesystem shares would have to be temporarily unmounted while taking the snapshot, and mounted again after restoring it. However, while trying that, `mount` hangs when trying to mount a filesystem share again *after* restoring the snapshot (unmounting and remounting works perfectly before that, of course). Nothing is reported in syslog. I've also tried unloading combinations of the various 9p and virtio related modules (like 9p, 9pnet_virtio, 9pnet, virtio, etc) before taking the snapshot, and then reload them after restoring it, in hope of getting them into a sane state again (or whatever is the issue). But then I've seen errors like this in syslog: 9pnet: Installing 9P2000 support virtio-pci 0000:00:08.0: irq 42 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 43 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 42 for MSI/MSI-X virtio-pci 0000:00:08.0: irq 43 for MSI/MSI-X 9pnet_virtio: probe of virtio3 failed with error -2 FS-Cache: Loaded 9p: Installing v9fs 9p2000 file system support FS-Cache: Netfs '9p' registered for caching 9pnet_virtio: no channels available and `mount` complains that the source (tag) doesn't exist when trying to mount the filesystem share again. For the record, the mount command I always use is simply: mount -t 9p -o trans=virtio $TAG $TARGET_DIR I've tried setting `-o debug=0xfff` but I get no debug info at all. Is it expected behaviour that filesystem shares get into a broken state after restoring a snapshot? If it's of any relevance, here's some more context: * The host is running Debian Jessie with Linux 3.16.7-ckt9-3~deb8u1, Libvirt 1.2.9, QEMU 2.1. * The guest is Tails (https://tails.boum.org) which is Debian Wheezy with Linux 3.16.7-ckt9-3. I doubt it matters since I tested this ~two years ago, and got (IIRC) the exact same results. Cheers!

1 1

[libvirt-users] ANNOUNCE: Oz 0.14.0 release
by Chris Lalancette 26 Jun '15

26 Jun '15

All, I'm pleased to announce release 0.14.0 of Oz. Oz is a program for doing automated installation of guest operating systems with limited input from the user. Release 0.14.0 is a bugfix and feature release for Oz. Some of the highlights between Oz 0.13.0 and 0.14.0 are: * Fix a bug in checksum checking (this should work again) * Add a global lock around pool refresh; should get rid of a user-visible failure * Support for Debian 8 * Support for Ubuntu 15.04 * Support for Fedora 22 * Support for installing aarch64 guests * Support for installing POWER guests * Support for install arm 32-bit guests A tarball and zipfile of this release is available on the Github releases page: https://github.com/clalancette/oz/releases . Packages for Fedora-21, Fedora-22, EPEL-7, and EPEL-6 have been built in Koji and will eventually make their way to stable. Instructions on how to get and use Oz are available at http://github.com/clalancette/oz/wiki . If you have questions or comments about Oz, please feel free to contact me at clalancette at gmail.com, or open up an issue on the github page: http://github.com/clalancette/oz/issues . Thanks to everyone who contributed to this release through bug reports, patches, and suggestions for improvement. Chris Lalancette

1 0

[libvirt-users] "connect at power-on" NIC feature equivalent to that found in ESX
by Ryan, Lyle 25 Jun '15

25 Jun '15

With ESX and the vSphere Client, I can enable or disable a VM's NIC to "connect at power-on". This is very useful when cloning, since you can leave the NIC not connected, power-up the VM, connect to it's console, and modify ifcfg-eth0 etc, before bringing the VM online. Is there a virsh equivalent way of doing this. Thanks....Lyle

3 2

[libvirt-users] Libvirt
by Ivo Hora 23 Jun '15

23 Jun '15

Dear Sir, I am facing the same problem you were discussing here: https://www.redhat.com/archives/libvirt-users/2015-January/msg00070.html I am getting this error: Starting install... ERROR internal error: unable to execute QEMU command 'qom-list': The command qom-list has not been found Domain installation does not appear to have been successful. If it was, you can restart your domain by running: virsh --connect qemu:///system start myguest otherwise, please restart your installation. [root@server-topcon horai]# my virtual machine creation script is: #OS="--os-variant=winxp --disk path=/var/lib/libvirt/mages/Windows.iso,device=cdrom" OS="--os-variant=winxp --disk path=/var/lib/libvirt/images/virtio-win-0.1.96.iso" Net="--network model=virtio,bridge=virbr0" Disk="--disk /var/lib/libvirt/images/Name.qcow2,sparse=false,bus=virtio,size=8" Src="--cdrom=/var/lib/libvirt/images/Windows.iso" #Gr="--graphics none" Gr="--graphics vnc" Cpu="--vcpus=1" Ram="--ram=768" Name="myguest" virt-install $OS $Net $Disk $Src $Gr $Cpu $Ram --name=$Name I would kindly like to ask you whether you found a solution for this problem or whether you could help me fixing it. With sincerely, Ivo Hora

4 5

[libvirt-users] 9p host/guest permissions & selinux...?
by Morgan Read 21 Jun '15

21 Jun '15

Hello Folks It's with some trepidation that I venture on to such a heady newsgroup, but I'm about ready to throw myself off a bridge after getting this all set up and apparently working only to be struck down by permissions and selinux hell (either, or both). I've followed instructions here: http://wiki.qemu.org/Documentation/9psetup http://troglobit.github.io/blog/2013/07/05/file-system-pass-through-in-kvm-… http://www.linux-kvm.org/page/9p_virtio The page at the last link helpfully concludes: Note: likely to hit some issues w/ privileges since Fedora libvirt runs guests unprivileged and with SELinux confinement...careful use of chown, chmod and chcon should get it working And, that's the most useful information I've been able to find... *Set up* Host - f21 server [user@frontserver ~]$ uname -a Linux frontserver.lan 4.0.4-202.fc21.i686+PAE #1 SMP Wed May 27 22:51:47 UTC 2015 i686 i686 i386 GNU/Linux Guest - f20 (vortexbox) [root@vortexbox ~]# uname -a Linux vortexbox 3.12.5-301.fc20.i686+PAE #1 SMP Mon Dec 16 18:42:48 EST 2013 i686 i686 i386 GNU/Linux Share is at /home/vortexbox-storage and shared to /storage Output of mount, touch, ls etc on host and guest: [user@frontserver home]$ ls lost+found user vortexbox-storage [user@frontserver home]$ ls -al vortexbox-storage total 12 drwxrwxrwx. 2 qemu qemu 4096 Apr 4 09:58 . drwxr-xr-x. 5 root root 4096 Mar 24 11:23 .. -rwxrwxrwx. 1 qemu qemu 17 Apr 3 17:54 hello [user@frontserver home]$ cd vortexbox-storage [user@frontserver vortexbox-storage]$ touch hello2 [user@frontserver vortexbox-storage]$ ls -al total 12 drwxrwxrwx. 2 qemu qemu 4096 Jun 20 22:07 . drwxr-xr-x. 5 root root 4096 Mar 24 11:23 .. -rwxrwxrwx. 1 qemu qemu 17 Apr 3 17:54 hello -rw-rw-r--. 1 user user 0 Jun 20 22:07 hello2 [user@frontserver vortexbox-storage]$ echo hello2 > hello2 [user@frontserver vortexbox-storage]$ cat hello2 hello2 [user@frontserver vortexbox-storage]$ ssh root(a)192.168.122.61 root(a)192.168.122.61's password: Last login: Sat Jun 20 16:44:37 2015 [root@vortexbox /]# umount /storage [root@vortexbox /]# ls -al | grep storage drwxr-xr-x 2 root root 4096 Jun 20 12:24 storage drwxr-xr-x 5 root root 4096 Mar 24 07:31 storage-tmp [root@vortexbox /]# mount -t 9p -o trans=virtio,version=9p2000.L,rw storage /storage [root@vortexbox /]# ls -al | grep storage drwxrwxrwx 2 107 107 4096 Jun 21 14:11 storage drwxr-xr-x 5 root root 4096 Mar 24 07:31 storage-tmp [root@vortexbox /]# cd /storage [root@vortexbox storage]# ls -al ls: cannot access hello: Permission denied total 8 drwxrwxrwx 2 107 107 4096 Jun 21 14:11 . dr-xr-xr-x. 20 root root 4096 Mar 24 07:43 .. -?????????? ? ? ? ? ? hello [root@vortexbox storage]# cat hello cat: hello: Permission denied [root@vortexbox storage]# ls -al ls: cannot access hello2: Permission denied ls: cannot access hello: Permission denied total 8 drwxrwxrwx 2 107 107 4096 Jun 21 14:13 . dr-xr-xr-x. 20 root root 4096 Mar 24 07:43 .. -?????????? ? ? ? ? ? hello -?????????? ? ? ? ? ? hello2 [root@vortexbox storage]# cat hello2 cat: hello2: Permission denied [root@vortexbox storage]# When I try touch or cat the hellos selinux-troubleshoot throws a wobbly. I've logged that as a bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1234067 I figure it must be possible to give some fairly straight forward instruction (even for me) on what permissions to set where to get this working... If anyone can help, I would be very very grateful (and happy:) Thanks, M -- Morgan Read <mailto:mstuffATreadDOTorgDOTnz> Confused about DRM? Get all the info you need at: http://drm.info/

1 0

[libvirt-users] IOV / SR-IOV / MR-IOV for non-network hardware?
by nusrat 21 Jun '15

21 Jun '15

I've been looking for real-world examples of this for a long time -- mainly because I'm trying to decide whether to restrict my build-options to using only components which are all compatible with IOV. I'm thinking that the constraint would be worth it, if IOV could provide a significant performance benefit for non-network peripherals such as storage, video processing, etc. (compared to passthru / VT-d). http://www.storage-switzerland.com/Articles/Entries/2010/9/29_Offloading_I_… , http://www.plda.com/white-paper-why-using-single-root-io-virtualization-sr-… Almost everything I've found about this is in the abstract or inapplicable to multiple VMs in the same physical host. Examples: hypothetical use with HBAs or multiple graphics cards, http://blog.scottlowe.org/2009/12/02/what-is-sr-iov , http://lists.xen.org/archives/html/xen-users/2013-04/msg00126.html ; academic papers & theses, e.g. http://cs.uccs.edu/~gsc/pub/master/mkopps/doc/MKoppsReportRev3.pdf ; conference presentations, e.g. http://searchstorage.techtarget.com/video/I-O-virtualization-video-SR-IOV-M… ; hardware positioned between multiple hosts and a single peripheral, e.g. http://topics-cdn.dell.com/pdf/poweredge-vrtx_User's%20Guide_en-us.pdf ; and conceptual support for IOV in the spec for NVM Express. I did find actual physical products which claim IOV support, e.g. the LSI 3008 chip, which is used in some mobos and LSI HBAs. I've even found some posts re virtualization by people who discuss various aspects of having and using one of these products. But I have yet to find anyone -- certainly not anyone at or below the level of of "enthusiast", not anyone with a non-"enterprise-class" environment or budget -- who discusses even attempting IOV-based I/O other than for networking, let alone actually achieving it, let alone anyone with even subjective descriptions of performance differences. If non-networking IOV has the great potential discussed in the links above, can anyone tell me why it seems that no one is actually doing it? Kihl? Braren? zir_blazer? ScottLowe? Don Fountain? Boesch? John Howard? George Crump? Anyone? Anyone? Bueller?...

1 0

[libvirt-users] Migrating guests
by Dominique Ramaekers 20 Jun '15

20 Jun '15

Hi, I'm experimenting with the migration function of virsh. I'm doing the migrate with following commands: virsh migrate --life --persistent --copy-storage-all --verbose --abort-on-error domain qemu+ssh://root@destination/system virsh migrate-setmaxdowntime domain 20000 However sometimes at the end of the migration, the guest isn't started on the destination host. So I'm left with a machine that had an improper shutdown... If a live migration isn't reliable, I'm thinking to migrate as such: - guest is still runing - copy or rsync the disk image to the destination - shut down the guest - rsync the disk image again (to minimise the off-line period) - dumpxml of guest and copy to destination - define and start the guest on the destination With the methode of the live migration, the machine will be unresponsive for max 20s = 20000ms (or less if I chose to). The migration it self will take op to 5 hours but I guess I plan these nightly. With the other migration the guest will be really off-line for the duration of the (second) rsync. In my case with disk images from 50 to 150Gb, the rsync wil take up at least 30 minutes and every connection will be closed... Does any body has good experiences with live migrations (without shared storage)? Any tips? Any thoughts on the second method of migrating? Greetings, Dominique.

2 2

[libvirt-users] libvirt/dnsmasq integration
by Boylan, Ross 19 Jun '15

19 Jun '15

I'm struggling with getting this to work smoothly, meaning 1) from the host system I can resolve the names of the VM's and 2) from the VM's I can properly resolve the host name (I get 127.0.0.1, presumably because dnsmasq parsed /etc/hosts on the host). There was some encouraging discussion of this in 2010 (http://www.redhat.com/archives/libvir-list/2010-March/msg00005.html) but no resolution I can see. BTW, the resolvconf machinery (at least on Debian) might provide another line of attack, for systems that have it. Thanks. Ross Boylan

2 1

[libvirt-users] CPU Usage and Memory Usage for VM and Host
by Kumar R, Prashanth (Prashanth) 19 Jun '15

19 Jun '15

Hi All, I would like to know if there is a way to fetch the "CPU Usage and Memory Usage for VM " and CPU Usage and Memory Usage for a Host in the KVM environment using libvirt java sdk . I am using libvirt-0.5.1.jar. This is the maximum Information I could fetch using the libvirt java API.: ________________________________ vmname:flow-cluster1 state:VIR_DOMAIN_RUNNING ostype:hvm guest id :8f0b96e5-1e08-40ce-aea1-9985d80fcabb Max memory : 8388608 Max cpus : 4 Guest Info-cputime: 58930890000000 Guest Info-maxMem: 8388608 Guest Info-memory: 8388608 Guest Info-nrVirtCpu: 4 MemoryStatistic: 8388608 Autostart :false ________________________________ I tried looking into the libvirt java sdk but did not find any methods to fetch the exact CPU Usage percentage and Memory Usage percentage for a VM and Host. Can you please provide me with the java example if possible. Thanks, Prashanth R

1 0

[libvirt-users] Migration b/w nodes with different security models
by Andrey Korolyov 18 Jun '15

18 Jun '15

Hello, I`ve found that the currently end-user may not migrate a VM between nodes with different security_require_confined, what are reasons to forbid such a thing? The security measures are almost not applicable here - if the guest was able to poison the emulator` stack on an unsecured node, he may do the same on a secured one, though the potential consequences will be far more limited. Are there any real-world cases whose prohibition may be helpful in a terms of security measurements for migration I am currently missing? I think it would be safe to exclude total poisoning of a source node in which case libvirtd itself is owned and can try to send a malicious configuration (with changed backing files locations for example). Thanks!

1 0

[libvirt-users] Use virtio channel send data to vm fail
by 2020human 18 Jun '15

18 Jun '15

1. I created a virtual machine and add channel: <channel type='unix'> <source mode='bind' path='/var/lib/libvirt/qemu/r-22-VM.agent'/> <target type='virtio' name='r-22-VM.vport'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> 2. Use scripts,run this scripts is no error output #!/usr/bin/python import socket s=socket.socket(socket.AF_UNIX,socket.SOCK_STREAM) s.connect("/var/lib/libvirt/qemu/r-22-VM.agent") s.send("test\n") s.close 3. But i not read date in vm device /dev/vport0p1 (vm is run) My version, libvirt: 1.2.13.1 qmeu: 2.3.0 system: centos 6.5 This test in libvirt 1.0.5.7 qemu 1.5.3 is success. Please help , thanks

1 0

[libvirt-users] Libvirt LXC hostname
by Anu Mercian 15 Jun '15

15 Jun '15

Hello, I am trying to bring up an lxc with Centos 6.6 using libvirt command: "virsh -c lxc:/// create vm.xml" When I do the above, the new VM created gets the hostname of the host where libvirt is installed. When I looked up help on the past mail-lists. It seems like this was a problem back in 2013 and it was mentioned that host name cannot be provided. I was wondering if this has been resolved and the host name can be provided in the URI. Link to the similar issue back in 2013: https://www.redhat.com/archives/libvirt-users/2013-November/msg00080.html Any help is much appreciated. Thank you, Anu

2 1

[libvirt-users] Recommended change for the networking page in wiki
by BJ 12 Jun '15

12 Jun '15

Hello all, I was told on IRC that I should come here to discuss a recommended change on the networking page in the wiki. If you take a look at the "Basic Script" shown here: http://wiki.libvirt.org/page/Networking#Forwarding_Incoming_Connections It does two things: 1) Create a DNAT rule in the NAT table of IPTABLES 2) Create a FORWARD rule in the FILTER table of IPTABLES The FORWARD rule is set up as it ought to be, however, the DNAT rule has some unintended consequences. I set up a DNAT on port 80, and suddenly, I couldn't access out on port 80 anymore from my guest machine. However, if I changed the destination address from "anywhere" to the IP of the host machine, the problem resolved. So I change the script to as follows. (Changes are highlighted. For some reason the original script didn't work using /bin/sh, but it did with /bin/bash, so I changed that too). *#!/bin/bash* # used some from advanced script to have multiple ports: use an equal number of guest and host ports Guest_name=xxxxxxx Guest_ipaddr=xxx.xxx.xxx.xx *Host_ipaddr=xxx.xxx.xxx.xx* Host_port=( '80' '443' ) Guest_port=( '80' '443' ) length=$(( ${#Host_port[@]} - 1 )) if [ "${1}" = "${Guest_name}" ]; then if [ "${2}" = "stopped" -o "${2}" = "reconnect" ]; then for i in `seq 0 $length`; do iptables -t nat -D PREROUTING *-d ${Host_ipaddr}* -p tcp --dport ${Host_port[$i]} -j DNAT --to ${Guest_ipaddr}:${Guest_port[$i]} iptables -D FORWARD -d ${Guest_ipaddr}/32 -p tcp -m state --state NEW -m tcp --dport ${Guest_port[$i]} -j ACCEPT done fi if [ "${2}" = "start" -o "${2}" = "reconnect" ]; then for i in `seq 0 $length`; do iptables -t nat -A PREROUTING *-d ${Host_ipaddr}* -p tcp --dport ${Host_port[$i]} -j DNAT --to ${Guest_ipaddr}:${Guest_port[$i]} iptables -I FORWARD 4 -d ${Guest_ipaddr}/32 -p tcp -m state --state NEW -m tcp --dport ${Guest_port[$i]} -j ACCEPT done fi fi Lastly, I should note that I am using Ubuntu 14.04, both for the host and guest. I'm also curious as to why this is considered a hack method. It states in the wiki that "This method is a hack", but it doesn't express why. Many VM Servers have similar features. I know Virtual Box does, I use the same feature there. It may not be how I would set up a production server, but doesn't make it a hack. Thanks, BJ

3 6

[libvirt-users] <vcpu placement='static' current='N'>M</vcpu>
by Thomas Stein 12 Jun '15

12 Jun '15

Hello. I seem to be to stupid to configure vcpu hotplugging on one of my machines. Whenever i set: <vcpu placement='static' current='4'>4</vcpu> and save this setting, this setting is undone by libvirt. It jumps back to: <vcpu placement='static'>4</vcpu> I'm confused now. Someone has an idea what's going on here? Any hints are really appreciated. cheers t.

2 2

Re: [libvirt-users] <vcpu placement='static' current='N'>M</vcpu>
by Thomas Stein 12 Jun '15

12 Jun '15

Am 12.06.15 um 11:43 schrieb Dominique Ramaekers: > Did you shutdown the guest before making this change? Yes. I even can't set this setting while the machine is powered off. Here ist the machines xml. <domain type='kvm'> <name>changed</name> <uuid>c71f66b3-2fd1-42f0-b8be-42999857eb95</uuid> <memory unit='KiB'>4194304</memory> <currentMemory unit='KiB'>2097152</currentMemory> <vcpu placement='static'>4</vcpu> <resource> <partition>/machine</partition> </resource> <os> <type arch='x86_64' machine='pc-0.14'>hvm</type> <boot dev='hd'/> </os> <features> <acpi/> <apic/> <pae/> </features> <cpu mode='host-model'> <model fallback='allow'/> </cpu> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>restart</on_crash> <devices> <emulator>/usr/bin/qemu-system-x86_64</emulator> <disk type='file' device='disk'> <driver name='qemu' type='qcow2' cache='writeback' io='threads'/> <source file='/var/lib/libvirt/images/1.qcow2'/> <target dev='vda' bus='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </disk> <disk type='file' device='disk'> <driver name='qemu' type='qcow2' cache='writethrough' io='threads'/> <source file='/var/lib/libvirt/images/nfs.qcow2'/> <target dev='vdb' bus='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/> </disk> <controller type='virtio-serial' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/> </controller> <controller type='usb' index='0'> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x2'/> </controller> <controller type='pci' index='0' model='pci-root'/> <interface type='network'> <mac address='52:54:00:18:75:ef'/> <source network='routed'/> <model type='virtio'/> <filterref filter='filter-changed'> <parameter name='IP' value='changed'/> </filterref> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <serial type='pty'> <target port='0'/> </serial> <console type='pty'> <target type='serial' port='0'/> </console> <channel type='unix'> <source mode='bind' path='/var/lib/libvirt/qemu/f16x86_64.agent'/> <target type='virtio' name='org.qemu.guest_agent.0'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> <input type='mouse' bus='ps2'/> <input type='keyboard' bus='ps2'/> <graphics type='vnc' port='-1' autoport='yes' listen='127.0.0.1'> <listen type='address' address='127.0.0.1'/> </graphics> <video> <model type='cirrus' vram='16384' heads='1'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/> </video> <memballoon model='virtio'> <address type='pci' domain='0x0000' bus='0x00' slot='0x07' function='0x0'/> </memballoon> </devices> <seclabel type='none' model='none'/> </domain> cheers t. > -----Oorspronkelijk bericht----- > Van: Thomas Stein [mailto:himbeere@meine-oma.de] > Verzonden: vrijdag 12 juni 2015 11:32 > Aan: libvirt-users(a)redhat.com > Onderwerp: [libvirt-users] <vcpu placement='static' current='N'>M</vcpu> > > Hello. > > I seem to be to stupid to configure vcpu hotplugging on one of my machines. Whenever i set: > > <vcpu placement='static' current='4'>4</vcpu> > > and save this setting, this setting is undone by libvirt. It jumps back to: > > <vcpu placement='static'>4</vcpu> > > I'm confused now. Someone has an idea what's going on here? Any hints are really appreciated. > > cheers > t. > > _______________________________________________ > libvirt-users mailing list > libvirt-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/libvirt-users >

1 1

Re: [libvirt-users] [ovirt-users] Bug in Snapshot Removing
by Soeren Malchow 11 Jun '15

11 Jun '15

Small addition again: This error shows up in the log while removing snapshots WITHOUT rendering the Vms unresponsive — Jun 01 01:33:45 mc-dc3ham-compute-02-live.mc.mcon.net libvirtd[1657]: Timed out during operation: cannot acquire state change lock Jun 01 01:33:45 mc-dc3ham-compute-02-live.mc.mcon.net vdsm[6839]: vdsm vm.Vm ERROR vmId=`56848f4a-cd73-4eda-bf79-7eb80ae569a9`::Error getting block job info Traceback (most recent call last): File "/usr/share/vdsm/virt/vm.py", line 5759, in queryBlockJobs… — From: Soeren Malchow <soeren.malchow(a)mcon.net<mailto:soeren.malchow@mcon.net>> Date: Monday 1 June 2015 00:56 To: "libvirt-users(a)redhat.com<mailto:libvirt-users@redhat.com>" <libvirt-users(a)redhat.com<mailto:libvirt-users@redhat.com>>, users <users(a)ovirt.org<mailto:users@ovirt.org>> Subject: [ovirt-users] Bug in Snapshot Removing Dear all I am not sure if the mail just did not get any attention between all the mails and this time it is also going to the libvirt mailing list. I am experiencing a problem with VM becoming unresponsive when removing Snapshots (Live Merge) and i think there is a serious problem. Here are the previous mails, http://lists.ovirt.org/pipermail/users/2015-May/033083.html The problem is on a system with everything on the latest version, CentOS 7.1 and ovirt 3.5.2.1 all upgrades applied. This Problem did NOT exist before upgrading to CentOS 7.1 with an environment running ovirt 3.5.0 and 3.5.1 and Fedora 20 with the libvirt-preview repo activated. I think this is a bug in libvirt, not ovirt itself, but i am not sure. The actual file throwing the exception is in VDSM (/usr/share/vdsm/virt/vm.py, line 697). We are very willing to help, test and supply log files in anyway we can. Regards Soeren

3 12

[libvirt-users] SSH into LXC and install files via JAVA API
by Anu Mercian 10 Jun '15

10 Jun '15

Hello everyone, I am trying to use libvirt's JAVA API to ssh into a domain and install some files, for example, dhcpd. Using virsh, its pretty straight forward using the command line: virsh -c lxc:/// create myguest.xml virsh -c lxc:/// console myguest virsh -c lxc:/// lxc-enter-namespace myguest -- sudo yum install dhcpd But in order to incorporate the above functionality in a JAVA API, I am not really sure what to do. The following command helps me ssh into a system, but I am not sure how to send remote commands. conn = Connect("lxc+ssh:///") Please can someone help me out with this? Thank you, Anu

1 0

[libvirt-users] how do I use the same secret with the same ID on all libvrit/qemu/kvm hosts?
by Jelle de Jong 09 Jun '15

09 Jun '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everybody, Every time I use [virsh secret-define --file secret.xml] I get an unique id back and I use this id in my vm guests xml configs, but this is preventing me from live migrating between kvm host. Maybe im using the wrong methods, but i normaly dumpxml the config and define it in the other kvm hosts (scripted) but now this other host has an other unique id and the kvm guests fails so I'm guessing I need to use the same secret id betwen all my kvm hosts but how do i do this? Kind regards, Jelle de Jong -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iJwEAQECAAYFAlV3Pa0ACgkQ1WclBW9j5HmSsAP/ZqG0kqf+pQPD1Jng+qIA1Ih8 qEabjpZyBAz5AITP6RpeopP+ZAyXIlex4xmSGPBNZPT2OEC9J4jA0AcC65MiG44f 1ma2C7VckoPoONO0D9q8JLwqG8fFVqAFZBTszBz5sj7qzEPiIC5/g6b0czf8QUno b9LwvViwGCPgfETBkXU= =zT/0 -----END PGP SIGNATURE-----

1 1