- Users - libvirt List Archives

[libvirt-users] assigning a single IP to the guest with "typical" hosting provider
by Tomasz Chmielewski 25 Feb '14

25 Feb '14

I have a server with a hosting company, Hetzner. The servers at this hosting company have a public IP, let's say, A.B.C.D/255.255.255.x. Additionally, one can order extra IPs like below: 1) additional subnet (let's say X.Y.Z.0 / 28) 2) single IP (let's say, E.F.G.H) With additional subnet, assigning the IP to libvirt guest is simple: - assign X.Y.Z.1 on the host - assign X.Y.Z.2 to the guest, with X.Y.Z.1 gateway - done, works fine. However, I'm having problems assigning a single IP to the guest (when there is no extra subnet on the host, but just an extra IP): - if I assign E.F.G.H/255.255.255.255 to the host, the IP is reachable from the internet - if I assign E.F.G.H to the guest (with a proper gateway), the guest is not able to communicate with the internet. Which networking mode should I use in this setup? Bridge, macvtap? I've tried both, without success (i.e. in macvtap mode, arp who-has are passed from the guest to the gateway, replies received on the host, but they are not passed to the guest). Has anyone ever set libvirt with a "typical" hosting provider, when only an extra IP, from a non-host subnet, is available for a guest? -- Tomasz Chmielewski http://wpkg.org

3 3

[libvirt-users] Rhel7 snap6 -- SR-IOV
by Murali Krishna 24 Feb '14

24 Feb '14

Hi, This is regarding SRIOV in Rhel7. I have added intel_iommu=on in grub.cfg file. When I attach Virtual Function to VM and I try to poweron the VM, I get the below error: [root@Dell-Rhel7 ~]# virsh start rhel64x64GA error: Failed to start domain rhel64x64GA error: internal error: early end of file from monitor: possible problem: qemu-kvm: -device vfio-pci,host=42:10.2,id=hostdev0,bus=pci.0,addr=0x8: vfio: failed to open /dev/vfio/vfio: Permission denied qemu-kvm: -device vfio-pci,host=42:10.2,id=hostdev0,bus=pci.0,addr=0x8: vfio: failed to setup container for group 47 qemu-kvm: -device vfio-pci,host=42:10.2,id=hostdev0,bus=pci.0,addr=0x8: vfio: failed to get group 47 qemu-kvm: -device vfio-pci,host=42:10.2,id=hostdev0,bus=pci.0,addr=0x8: Device initialization failed. qemu-kvm: -device vfio-pci,host=42:10.2,id=hostdev0,bus=pci.0,addr=0x8: Device 'vfio-pci' could not be initialized We are facing this problem with both Emulex and Intel adapters. Please help me to resolve this issue. Thanks, Murali.

2 1

Re: [libvirt-users] event-test.py cannot detects domain shutdown
by Kim Larry 21 Feb '14

21 Feb '14

2014년 2월 11일 오후 10:00에 Eric Blake <eblake(a)redhat.com> 작성: On 02/11/2014 12:20 AM, Kim Larry wrote: libvirtd version is 1.1.4 and using Xen for hypervisor. I'm not as familiar with the xen hypervisor as with qemu; it may just be the case that no one has coded the xen driver to send a shutdown event. At any rate, I can confirm that with the qemu driver, shutdown events are delivered. It is a bit weird that all except shutdown event are coded... If it is true, do I have to just wait? https://rwmj.wordpress.com/2010/11/08/want-help-dont-email-me-directly/ Or you could look into the source code and provide a patch; but discussing this on the list is a better way to get a reaction from someone familiar with the xen code. -- Eric Blake eblake redhat com +1-919-301-3266 Libvirt virtualization library http://libvirt.org Ah, I forgot to add libvirt-users in Cc... sorry. The thing I found today is that if libvirt uses xend driver, shutdown events are delivered, but if libvirt uses libxl drvier, doesn't show up anything. It seems there are bugs on shutdown event, so I did dig into the libvirt source briefly, but I couldn't find where libxl driver calls event callback. Any help will be greatly appreciated. Especially someone who is familiar with xen code.

3 5

[libvirt-users] Problems with qemu-system-arm and isa-serial
by Niccolo Rigacci 20 Feb '14

20 Feb '14

Hi, I'm trying to use libvirt for an armel virtual machine hosted into an x86_64 box. I know the command line to start qemu-system-arm directly, but I cannot figure a proper .xml configuration file to let libvirt do this job. The main problem is that I want a serial console attached via telnet, this is the Qemu incantation: -serial telnet::4000,server,nowait,nodelay Wahtever I do in libvirt, I get this paramter added: -device isa-serial which causes Qemu to fail: qemu-system-arm -M versatileab -device isa-serial \ -kernel vmlinuz-2.6.32-5-versatile qemu-system-arm: -device isa-serial: No 'ISA' bus found for device 'isa-serial' How can I instead have -device pl011, or just have the default devices provided by qemu-system-arm, i.e. to prevent libvirt from adding the -nodefaults switch? Thank you! -- Niccolo Rigacci - http://www.rigacci.net/ Campi Bisenzio - Firenze - Italy Tel. Office: +39-055-9331021, Mobile: +39-327-5619352

3 8

[libvirt-users] libvirt_lxc namespace and umount in global namespace
by Olivier Nicaise 20 Feb '14

20 Feb '14

Hi, I am currently having an issue with the libvirt_lxc binary that is launched when starting a lxc instance using libvirt. This process seems to have its own namespace for mounts. What happens is that if I umount something in the global namespace, it stays mounted in the libvirt_lxc namespace. I'm working with drbd, and after unmounting the mount point, I want to change the state of the drbd resource as Secondary. But if fails. Indeed, libvirt_lxc has still the resource which is mounted in its namespace. Currently, I wanted to test the setns tool to enter the namespace and umount the mount point. But I am currently on Ubuntu 12.04 with a 3.2.0-59 kernel which does not have /proc/[pid]/ns/mnt I can't upgrade to 3.8 (which have the proc mnt file) as the drbd tools are not compatible. Do you have an idea of what I could try ? Here I the steps I do to reproduce the issue: - Mount a drbd file system - Start a lxc instance with libvirt - Umount the drbd file system - Set the drbd resource as secondary. => Does not work

2 2

[libvirt-users] problem with nwfilter direction='out'
by Stephan Sachse 20 Feb '14

20 Feb '14

i test the following simple filter <filter name='nwfilter-test-fedora2' chain='root'> <uuid>ccbd255f-4be5-4f0f-8835-770ea40cb2c9</uuid> <rule action='accept' direction='out' priority='500'> <tcp dstipaddr='10.1.24.0' dstipmask='24' comment='test test test'/> </rule> </filter> but i get strange results (look at the attached output of iptables-save) for me it looks like the direction='out' filters are attached to every chain for this domain. additional there are wrong conntrack, state and ctdir matches. is this a bug or my fault? /stephan -- Software is like sex, it's better when it's free!

1 1

[libvirt-users] Networkfilters in Routed setup
by h0rst 19 Feb '14

19 Feb '14

Hello! Since i could not find any information on the internet about this subject, i'm going to try my luck on this list. I'm trying to setup network-filter on a routed setup. I have a root-server at Hetzner, a german hosting provider. Along with my server i ordered a (/28) subnet to be able to setup dedicated IPs for my virtual machines (KVM). My Server is running Ubuntu 12.04 with libvirt 0.9.8 . Since Hetzner does not allow any bridged traffic, i had to setup a routed network. Currently my (via libvirt) defined network looks like this: (lets assume my subnet is 1.2.3.64/28): <network> <name>hetzner-subnet-v4</name> <forward dev='eth0' mode='route'> <interface dev='eth0'/> </forward> <bridge name='route-br0' stp='off' delay='0' /> <mac address='52:54:00:F0:D0:AA'/> <ip address='1.2.3.65' netmask='255.255.255.240'></ip> </network> The network definition for all running VMs looks like this: <interface type='network'> <mac address='52:54:00:00:00:##'/> <source network='hetzner-subnet-v4'/> </interface> Without using Network-Filters, this setup is running as expected. All traffic is correctly forwarded to my virtual machines connected to "route-br0" and the following iptables-rules are created in the FORWARD Chain: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) target prot opt in out source destination ACCEPT all -- eth0 route-br0 0.0.0.0/0 1.2.3.64/28 ACCEPT all -- route-br0 eth0 1.2.3.64/28 0.0.0.0/0 ACCEPT all -- route-br0 route-br0 0.0.0.0/0 0.0.0.0/0 REJECT all -- * route-br0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- route-br0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable When i try to setup a network-filter for a VM (a modified version of http://libvirt.org/formatnwfilter.html last example): <filter name='server-x' chain='root'> <filterref filter='clean-traffic'/> <rule action='accept' direction='in' priority='500'> <all state='ESTABLISHED'/> </rule> <rule action='accept' direction='out' priority='500'> <all state='ESTABLISHED,RELATED'/> </rule> <rule action='accept' direction='in' priority='500'> <tcp state='NEW' dstportstart='22'/> </rule> <rule action='accept' direction='out' priority='500'> <all state='NEW'/> </rule> <rule action='drop' direction='inout' priority='500'> <all/> </rule> </filter> and adding the filter to my interface-definition of a VM using the following syntax: <filterref filter='server-x'> <parameter name='IP' value='1.2.3.70'/> </filterref> additional iptable-rules are getting created. The problematic rule seems to be the following: -A libvirt-out -m physdev --physdev-out vnetX -g FO-vnetX which should trigger the following rules: -A FO-vnetX -p all -m state --state ESTABLISHED -j ACCEPT -A FO-vnetX -p tcp --dport 22 -m state --state NEW -j ACCEPT But this actually never happens. The FO-vnetX Chain never sees any packets and my syslog says: xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore Am i doing something wrong? I hope i did not write too much useless stuff here. I'm tried to figure it all out by myself, but im currently stuck. Lets hope some wise guys can help me out here. Maybe there is some documentation i have missed? Thanks! kind regards, Sebastian

3 6

[libvirt-users] Errors with ESX driver & floppy0.filename
by Phil Mayers 19 Feb '14

19 Feb '14

We're getting the following error with one or two ESX VMs using libvirt; I'm only trying to read the domain config here, not make changes: libvir: error : internal error Invalid or not yet handled value 'Floppy drive 1' for VMX entry 'floppy0.fileName' Is there a way I can tell it to ignore unknown stuff?

1 0

[libvirt-users] Right way to do SAN-based shared storage?
by urgrue 19 Feb '14

19 Feb '14

I'm trying to set up SAN-based shared storage in KVM, key word being "shared" across multiple KVM servers for a) live migration and b) clustering purposes. But it's surprisingly sparsely documented. For starters, what type of pool should I be using?

3 3

[libvirt-users] Error when building from source
by arnaud gaboury 19 Feb '14

19 Feb '14

Hi all, I can not build from source since a few days. Make left me with this error: Making install in tools/wireshark make[1]: Entering directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[2]: Entering directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[3]: Entering directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[3]: Nothing to be done for 'install-exec-am'. make[3]: Nothing to be done for 'install-data-am'. make[3]: Leaving directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[2]: Leaving directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' make[1]: Leaving directory '/developement/aur/libvirt-git/src/libvirt/tools/wireshark' mv: cannot stat ‘/developement/aur/libvirt-git/pkg/libvirt-git/lib/*’: No such file or directory I am on Arch linux and use the AUR mechanism package to build/install packages from source. Here is the build part of the PKGBUILD file : build() { cd "$srcdir/libvirt" export LDFLAGS=-lX11 export RADVD=/usr/bin/radvd ./autogen.sh #./configure --prefix=/usr --libexec=/usr/lib/"$pkgname" --sbindir=/usr/bin \ ./configure --prefix=/usr --libexec=/usr/lib/"${pkgname/-git/}" --sbindir=/usr/bin \ --with-storage-lvm --without-xen --with-udev --without-hal --disable-static \ --with-init-script=systemd --with-audit \ --with-qemu-user=nobody --with-qemu-group=nobody \ --without-netcf --with-interface Thank you for help.

2 1