- Users - libvirt List Archives

[libvirt-users] Live snapshots of a single block device
by Andrew Martin 03 Jun '14

03 Jun '14

Hello, I am working on a script to automatically create live snapshots of running VMs using qemu-kvm 1.4.0 and libvirt 1.0.2. If a VM has multiple disks, I'd like to back them up individually with separate calls to snapshot-create-as, so I can more easily manage the disk images. The code I have now is essentially as follows: virsh snapshot-create-as --domain "vmname" --name "snapshotname" --description "snapshot description" --disk-only --atomic --no-metadata --diskspec "vda" I run this command for each block device (e.g vda, vdb, etc). However, after running the above command (to only backup vda), I see that a snapshot has also been created for vdb. I tried running it with --print-xml, which gives this output: <domainsnapshot> <name>05-22-14_17-09-25</name> <description>05-22-14_17-09-25</description> <disks> <disk name='vda'/> </disks> </domainsnapshot> What am I doing wrong - how can I tell snapshot-create-as to create an external snapshot for a specific block device only (not all block devices)? Also, while looking at the manpage, does the --live option do anything different if used with the above command? Thanks, Andrew Martin

2 6

[libvirt-users] LIbvirt Python Snapshot -Domain Crashing
by Sijo Jose 03 Jun '14

03 Jun '14

Hi, I'm using libvirt(1.0.0) with python, for managing virtual machines.. but while taking multiple snapshot domain is crashing... Snapshot XML ------------------------- <domainsnapshot> <name>snp1</name> <creationTime></creationTime> <description>Description</description> <state></state> <domain> <uuid></uuid> </domain> <parent> <name></name> </parent> </domainsnapshot> ---------------- API Call -------------- snp1=domain1.snapshotCreateXML(snp_xml,0) here I'm passing flag value as zero.. Its created first snapshot without any error, but when I tried for second snapshot 1) Domain switched its state to pause and its not coming back I installed ubuntu12.04 OS in the domian. Rgds -Sijo

3 3

[libvirt-users] Wrong tty at autologin
by Mateusz Malicki 03 Jun '14

03 Jun '14

Hello, I am working on system that use systemd. On host user session (uid=5000) starts automatically but in container I have following error message: May 12 00:18:15 localhost user-session-launch[110]: pam_systemd(login:session): Asking logind to create session: uid=5000 pid=110 service=login type=tty class=user seat=seat0 vtnr=1 tty=tty1 display= remote=no remote_user= remote_host= May 12 00:18:16 localhost user-session-launch[110]: pam_systemd(login:session): Failed to create session: Invalid argument May 12 00:18:16 localhost user-session-launch[110]: pam_unix(login:session): session opened for user app by (uid=0) After hard coded tty=pts/0 and vtnr=0 session starts up. Is there any way to specify this values in xml config file or some other config files? Where did these values come from? Regards, Mateusz

1 0

[libvirt-users] Problem connecting to hypervisor
by Vikas Kokare 03 Jun '14

03 Jun '14

I am trying to establish a connection (using virsh command) to a couple of hypervisor hosts, both on SLES 11.3 environments. The host from where i am making both the connections is a SLES 10.4 instance. *kvmh911351246:~ # virsh -c qemu+ssh://9.113.51.247:22/system <http://9.113.51.247:22/system>libvir: XML-RPC error : authentication requirederror: failed to connect to the hypervisor* The SSH authentication to hypervisor host 9.113.51.247 has already been established. *kvmh911351246:~ # ssh root(a)9.113.51.247 <root(a)9.113.51.247>Last login: Tue Jun 3 11:31:56 2014 from scm-kvmh2-rhel6SLES11-51-247:~ #* Hence the cause of the authentication failure is not clear. The second connection to another SLES 11.3 host looks like *virsh # connect qemu+ssh://9.121.58.19:22/system <http://9.121.58.19:22/system>bash: socat: command not foundlibvir: Remote error : socket closed unexpectedlyerror: Failed to connect to the hypervisor* where the cause of the error is entirely different. The libvirt packages available on these environments are *9.113.51.247 (SLES 11.3)* *libvirt-cim-0.5.12-0.7.16libvirt-1.0.5.1-0.7.10libvirt-python-1.0.5.1-0.7.10libvirt-client-32bit-1.0.5.1-0.7.10libvirt-lock-sanlock-1.0.5.1-0.7.10libvirt-client-1.0.5.1-0.7.10* *9.121.58.19 (SLES 11.3)* *libvirt-cim-0.5.12-0.7.16libvirt-client-1.0.5.1-0.7.10libvirt-python-1.0.5.1-0.7.10libvirt-1.0.5.1-0.7.10* *9.113.51.246 ( SLES 10.4)* *libvirt-python-0.3.3-18.22.1libvirt-devel-0.3.3-18.22.1libvirt-0.3.3-18.22.1* How can these connection failures be debugged? Is there a way to know more information about them? -Vikas

1 0

[libvirt-users] kvm domain won't start with vhost-net loaded
by Raphael Bauduin 02 Jun '14

02 Jun '14

Hi, I have multiple kvm domains running fine, but to improve network performance, I wanted to try vhost-net. However, once I load the module: modprobe vhost-net I can't start the domain anymore: virsh start kvmGitInt gives the error: internal error: process exited while connecting to monitor: qemu-system-x86_64: -netdev tap,fd=25,id=hostnet0,vhost=on,vhostfd=26: vhost-net requested but could not be initialized qemu-system-x86_64: -netdev tap,fd=25,id=hostnet0,vhost=on,vhostfd=26: Device 'tap' could not be initialized This is a 3.14.4 kernel, with libvirt 1.2.1 and qemu 1.7.0. I have searched online but haven't found any indication on how to solve it in my case (The kernel is not selinux enabled,not using systemd, ...) Any suggestion on how to solve this is very welcome! Thanks in advance Raph

1 0

[libvirt-users] Libvrt Migrate an Offline VM
by Sijo Jose 30 May '14

30 May '14

Hi, Is it possible to migrate an Offline VM using libvirt API ? Regards Sijo Jose

3 2

[libvirt-users] Host OS, Storage Info
by Sijo Jose 30 May '14

30 May '14

Hi, Is there any way to get host OS information and host Storage in formations using libvirt API...? Rgds -Sijo

3 6

[libvirt-users] More than one certificate authority
by Емил Гелев 30 May '14

30 May '14

Hello. I have a question about libvirt remote access. I read carefully how to set up TLS authorization guide and I have done all the steps. Everything works, but for my virtualization infrastructure I need more flexibility. How can I configure a single host to trust more than one certificate authority. Lets say, for example, that I have 10 virtualization hosts and each of them has certificates signed by the same CA (lets say CA1) and they trust each other. But I have a client which does not have a client certificate signed by CA1, but has a certificate signed by CA2. I do not want my virtualization hosts to trust the CA2 except for just one of them. I want to provide this client with authorized access to one of my hosts. So this specific host must trust CA1 and CA2 as well, but in the '/etc/libvirt/libvirtd.conf' file I can point the certificate of only one CA. How can I set up such a configuration ? The same question is valid for the client. How can I configure a client to trust CA1 and CA2 ?

1 0

[libvirt-users] Hot memory and cpu update
by usha.basavaraju＠fluentsoft.com 30 May '14

30 May '14

Runing domain xml vv.XMLDesc(0) n ub_test1n 714dde02-76c9-7d45-25af-e50f0a54f4bcn 545792n 545792n 4n n hvmn n n n n n n destroyn restartn destroyn n /usr/bin/kvmn n n n n n n n n n n n n n n n n n n n n n n n n n n n n nn" >>> vv.info() [1, 545792L, 545792L, 1, 6320000000L] 1. >>> vv.setMemoryFlags(545794) libvir: QEMU Driver error : invalid argument: cannot set memory higher than max memory Traceback (most recent call last): File "", line 1, in File "/home/fluent/cvt/convirt-enterprise/tg2env/local/lib/python2.7/site-packages/libvirt.py", line 1781, in setMemoryFlags if ret == -1: raise libvirtError ('virDomainSetMemoryFlags() failed', dom=self) libvirt.libvirtError: invalid argument: cannot set memory higher than max memory >>> vv.setMemoryFlags(545790) 0 >>> vv.info() [1, 545792L, 545792L, 1, 6480000000L] >>> vv.setMemoryFlags(545788) 0 >>> vv.info() [1, 545792L, 545792L, 1, 6480000000L] If increase memory giving the above. if decreased memory it is running the command successfully but not changing the value 2.Vcpu update >>> vv.setVcpusFlags(2) libvir: QEMU Driver error : internal error got wrong number of vCPU pids from QEMU monitor. got 4, wanted 2 Traceback (most recent call last): File "", line 1, in File "/home/fluent/cvt/convirt-enterprise/tg2env/local/lib/python2.7/site-packages/libvirt.py", line 1884, in setVcpusFlags if ret == -1: raise libvirtError ('virDomainSetVcpusFlags() failed', dom=self) libvirt.libvirtError: internal error got wrong number of vCPU pids from QEMU monitor. got 4, wanted 2 >>> vv.setVcpusFlags(5) libvir: QEMU Driver error : invalid argument: requested vcpus is greater than max allowable vcpus for the domain: 5 > 4 Traceback (most recent call last): File "", line 1, in File "/home/fluent/cvt/convirt-enterprise/tg2env/local/lib/python2.7/site-packages/libvirt.py", line 1884, in setVcpusFlags if ret == -1: raise libvirtError ('virDomainSetVcpusFlags() failed', dom=self) libvirt.libvirtError: invalid argument: requested vcpus is greater than max allowable vcpus for the domain: 5 > 4 Cant increase or decrease vcpu. ------------------------- Message sent via Atmail Open - http://atmail.org/

1 0

[libvirt-users] nwfilter usage
by Matt LaPlante 28 May '14

28 May '14

I'm trying to accomplish what I had hoped would be a fairly simple filtering of traffic to my VMs, but I'm hitting a snag. The VMs are allowing traffic when I wouldn't expect them to. Host and Guest are both running the same platform: Ubuntu 12.04.4 LTS 0.9.8-2ubuntu17.19 I have a basic bridge enabled on the host: brctl addbr brdg brctl addif brdg eth1 ip link set brdg up The host has iptables support: root@host:~# lsmod | grep filt ip6table_filter 12815 0 ip6_tables 27864 2 ip6table_filter,xt_TPROXY iptable_filter 12810 1 ip_tables 27473 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter x_tables 29891 52 ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AUDIT,ipt_LOG,xt_tcpudp,xt_state,iptable_nat,iptable_mangle,iptable_filter,ip_tables Guest network using bridge: <interface type='bridge'> <mac address='00:11:22:33:44:55'/> <source bridge='brdg'/> <model type='virtio'/> <filterref filter='outbound-only'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <filter name='outbound-only' chain='root'> <uuid>0c834381-402c-faf3-019f-eb5a40ea6b61</uuid> <filterref filter='allow-arp'/> <filterref filter='allow-dhcp'/> <filterref filter='qemu-announce-self'/> <filterref filter='no-other-l2-traffic'/> </filter> My goal is to allow the guest to reach the internet, but not allow the internet or other guests to reach this guest. I realize this config is not sufficient for that, but I can't get any farther until I understand the current behavior. From the look of the config, this should essentially not be allowing anything except arp and dhcp. And yet, the host has full connectivity. I can run apt-get update on the VM, I can ping the VM from other nodes in my network, etc. It's basically wide-open. So either one of the included rules is not working as advertised, or I'm misunderstanding some feature of the filtering process. Any pointers would be appreciated. Thanks

4 5