- Users - libvirt List Archives

[libvirt-users] lxc state driver is not active
by Tom Taylor 18 Feb '14

18 Feb '14

So I've followed this tutorial on a vanilla CentOS 6.5 (x64) hardware install ... http://wiki.centos.org/HowTos/LXC-on-CentOS6 (barring the name and location of the container) I'm getting the following error when trying to intialise the container ... # virt-install --connect lxc:/// --name dns --ram 512 --vcpu 1 --filesystem /srv/lxc/dns,/ --noautoconsole ERROR internal error lxc state driver is not active Does this howto miss a step somewhere? Is something in the CentOS distribution broken? # rpm -qa | egrep 'lxc|libvirt' lxc-0.9.0-2.el6.x86_64 libvirt-python-0.10.2-29.el6_5.3.x86_64 lxc-libs-0.9.0-2.el6.x86_64 libvirt-client-0.10.2-29.el6_5.3.x86_64 libvirt-0.10.2-29.el6_5.3.x86_64 lxc-templates-0.9.0-2.el6.x86_64 Thanks Tom Taylor

1 0

[libvirt-users] libvirtd ssl configuration
by Гусев Павел 17 Feb '14

17 Feb '14

Hi! I found little semantics bug: [13:53:40] root@dedicated-04:~ # LC_ALL=C libvirtd -h libvirtd: invalid option -- 'h' Usage: libvirtd [options] Options: -v | --verbose Verbose messages. -d | --daemon Run as a daemon & write PID file. -l | --listen Listen for TCP/IP connections. -t | --timeout <secs> Exit after timeout period. -f | --config <file> Configuration file. | --version Display version information. -p | --pid-file <file> Change name of PID file. libvirt management daemon: Default paths: Configuration file (unless overridden by -f): /etc/libvirt/libvirtd.conf Sockets: /var/run/libvirt/libvirt-sock /var/run/libvirt/libvirt-sock-ro TLS: CA certificate: /etc/pki/CA/caert.pem Server certificate: /etc/pki/libvirt/servercert.pem Server private key: /etc/pki/libvirt/private/serverkey.pem PID file (unless overridden by -p): /var/run/libvirtd.pid I think that caert.pem should be cacert.pem =) Tnx. С уважением, Гусев Павел Руководитель отдела системного администрирования QSOFT | Ведущий web-интегратор офис 7(495) 771-7363 #110 | моб. 7(926) 850-1108 pgusev(a)qsoft.ru Москва, Авангардная улица, 3 | qsoft.ru San Francisco, 222 Columbus Ave | qsoftus.com

2 2

[libvirt-users] tftp server inside a container ?
by Thomas Elsgaard 15 Feb '14

15 Feb '14

Hi list I am trying to understand the containers in red hat 7, and i have following questions: 1) Would it be possible to run an tftp server inside an container ? 2) Can i have containers binding to vlans on the host, so that i can have containers with overlapping IP networks, but in different vlans ? What i am trying to achieve is 10 containers with an tftp server inside, where the containers are on isolated IP networks via vlans. Thomas

1 0

[libvirt-users] lxc and cgroups
by arnaud gaboury 15 Feb '14

15 Feb '14

Dear list, I am bulding a VM using libvirt and lxc for linux container. I have an issue with my cgroups settings: gabx@hortensia ➤➤ ~ # virsh start dahlia error: Failed to start domain dahlia error: internal error: No valid cgroup for machine dahlia My environement: Host : Arch Linux - systemd 208-11, libvirt 1.2.1-4 guest : Arch Linux , machine name : dahlia , /etc/libvirt/lxc/dahlia.xml , mounted in /machine/dahlia My set up so far : - gabx@hortensia ➤➤ ~ % sudo virsh uri [sudo] password for root: lxc:/// - gabx@hortensia ➤➤ ~ # virsh -c lxc:/// list --all Id Name State ---------------------------------------------------- - dahlia shut off - custom kernel with user space set gabx@hortensia ➤➤ ~ % zgrep USER_NS /proc/config.gz CONFIG_USER_NS=y - /etc/libvirt/lxc/dahlia.xml $ ls -al -rw------- 1 root root 1.1K Feb 15 12:11 /etc/libvirt/lxc/dahlia.xml $ cat <domain type='lxc'> <name>dahlia</name> <uuid>a34b58db-894f-4f4a-81f0-b13d2d5d7732</uuid> <memory unit='KiB'>409600</memory> <currentMemory unit='KiB'>409600</currentMemory> <vcpu placement='static'>1</vcpu> <resource> <partition>/machine/dahlia</partition> </resource> <os> <type arch='x86_64'>exe</type> <init>/bin/init</init> </os> <idmap> <uid start='0' target='1000' count='10'/> <gid start='0' target='1000' count='10'/> </idmap> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/lib/libvirt/libvirt_lxc</emulator> <interface type='network'> <mac address='52:54:00:89:8f:1a'/> <source network='default'/> </interface> <console type='pty'> <target type='lxc' port='0'/> </console> </devices> </domain> - fstab : UUID=f69d032f-c80f-4f2e-84cd-d2328a862818 /machine/dahlia ext4 defaults,relatime,discard 0 1 $ ls -al drwxr-xr-x 17 root root 4.0K Feb 11 21:41 dahlia/ - /etc/cgconfig: group dahlia { perm { # who can manage limits admin { uid = 1000; gid = 1004; } # who can add task task { uid = 1000; gid = 1004; } } # create this group in the controllers cpu { } cpuset { } memory { } devices { } freezer { } net_cls { } blkio { } } - /etc/cgrules is deafult one, so everything is commented. Maybe shall I edit a line ?? - gabx@hortensia ➤➤ ~ # cat /proc/cgroups #subsys_name hierarchy num_cgroups enabled cpuset 3 5 1 cpu 4 4 1 cpuacct 4 4 1 memory 5 5 1 devices 6 4 1 freezer 7 5 1 net_cls 8 5 1 blkio 9 4 1 Something puzzles me. In /sys/fs/cgroup/blkio, I see two dirs: dahlia and machine.slice. Inside machine.slice, I see another dir machine-dahlia. I guess there is something wrong here !! Same for cpuset or other controllers. - gabx@hortensia ➤➤ ~ % systemctl status machine-dahlia.slice machine-dahlia.slice - dahlia VM slice Loaded: loaded (/etc/systemd/system/machine-dahlia.slice; static) Active: active since Sat 2014-02-15 11:53:01 CET; 15min ago Feb 15 11:53:01 hortensia systemd[1]: Starting dahlia VM slice. Feb 15 11:53:01 hortensia systemd[1]: Created slice dahlia VM slice. My systemd unit file machine-dahlia.slice in /etc/systemd/system Apologize for the long post, but I wanted to detail everything. Thank you for help on my cgroup set up.

1 2

[libvirt-users] libvirt crashes with Caught Segmentation violation
by Minami Katsumata 14 Feb '14

14 Feb '14

Hi, I'm having problems with libvirt crashing after a couple hours when a specific domain monitoring program is running. I have pasted below the following: 1. libvirt version 2. qemu-kvm version 3. OS version 4. Kernel version 5. libvirt status post-crash 6. libvirtd.log (info level dump around crash; too long to post everything so just the beginning and end. UTC) 7. custom.log (on what this domain monitoring program was doing around the time of the crash. JST) 8. FYI on the program being executed 9. other related server settings Please, if anyone can look through these and give some insight as to what is causing libvirt to crash, that would be greatly appreciated. 1.) libvirt version: # rpm -q libvirt libvirt-0.9.10-21.el6.x86_64 2.) qemu-kvm version: qemu-kvm-0.12.1.2-3.295.el6.10.x86_64 3.) OS version: # cat /etc/redhat-release CentOS release 6.3 (Final) 4.) Kernel version: # uname -r 2.6.32-279.22.1.el6.x86_64 5.) libvirt status after crash: # service libvirtd status libvirtd dead but pid file exists 6.) libvirtd.log 2014-02-06 10:25:05.173+0000: 1187: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58626,uid:0 2014-02-06 10:25:05.237+0000: 1184: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58636,uid:0 2014-02-06 10:25:05.271+0000: 1185: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58646,uid:0 2014-02-06 10:25:05.301+0000: 1184: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58648,uid:0 2014-02-06 10:25:05.400+0000: 1184: info : remoteDispatchAuthList:2091 : Bypass polkit auth for privileged client pid:58650,uid:0 Caught Segmentation violation dumping internal log buffer: ====== start of log ===== ^(a)05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=19 w=21, f=32 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=20 w=22, f=34 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=21 w=23, f=33 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=22 w=24, f=36 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=23 w=25, f=38 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=24 w=26, f=39 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=25 w=27, f=41 e=25 d=0 2014-02-06 10:25:05.412+00001182: debug : virEventPollMakePollFDs:383 : Prepare n=26 w=28, f=40 e=25 d=0 (cut out due to length) 2014-02-06 10:25:05.423+00001182: debug : virEventPollDispatchHandles:488 : EVENT_POLL_DISPATCH_HANDLE: watch=2791 events=2 2014-02-06 10:25:05.423+00001182: debug : virNetMessageFree:75 : msg=0x2326a20 nfds=0 cb=(nil) 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientCalculateHandleMode:137 : tls=(nil) hs=-1, rx=0x2266390 tx=(nil) 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientCalculateHandleMode:167 : mode=1 2014-02-06 10:25:05.423+00001182: debug : virEventPollUpdateHandle:151 : EVENT_POLL_UPDATE_HANDLE: watch=2791 events=1 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 1 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virEventPollDispatchHandles:474 : i=33 w=2793 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:506 : Cleanup 12 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupHandles:554 : Cleanup 34 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientClose:632 : client=0x22e6860 refs=3 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveStop:382 : RPC_KEEPALIVE_STOP: ka=0x225bf20 client=0x22e6860 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveTimeout:293 : EVENT_POLL_REMOVE_TIMEOUT: timer=8290 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 0 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveTimeout:293 : EVENT_POLL_REMOVE_TIMEOUT: timer=8289 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 0 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveFree:304 : RPC_KEEPALIVE_FREE: ka=0x225bf20 client=0x22e6860 refs=3 2014-02-06 10:25:05.423+00001182: debug : daemonRemoveAllClientStreams:493 : stream=(nil) 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveHandle:180 : EVENT_POLL_REMOVE_HANDLE: watch=2791 2014-02-06 10:25:05.423+00001182: debug : virEventPollRemoveHandle:193 : mark delete 32 50 2014-02-06 10:25:05.423+00001182: debug : virEventPollInterruptLocked:702 : Skip interrupt, 0 -1675536288 2014-02-06 10:25:05.423+00001182: debug : virNetMessageFree:75 : msg=0x2266390 nfds=0 cb=(nil) 2014-02-06 10:25:05.423+00001182: debug : virNetSocketFree:722 : RPC_SOCKET_FREE: sock=0x22e66a0 refs=2 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientFree:591 : RPC_SERVER_CLIENT_FREE: client=0x22e6860 refs=3 2014-02-06 10:25:05.423+00001182: debug : virEventRunDefaultImpl:244 : running default event implementation 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:506 : Cleanup 12 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:519 : EVENT_POLL_PURGE_TIMEOUT: timer=8289 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveFree:304 : RPC_KEEPALIVE_FREE: ka=0x225bf20 client=0x22e6860 refs=2 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupTimeouts:519 : EVENT_POLL_PURGE_TIMEOUT: timer=8290 2014-02-06 10:25:05.423+00001182: debug : virKeepAliveFree:304 : RPC_KEEPALIVE_FREE: ka=0x225bf20 client=0x22e6860 refs=1 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientFree:591 : RPC_SERVER_CLIENT_FREE: client=0x22e6860 refs=2 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupHandles:554 : Cleanup 34 2014-02-06 10:25:05.423+00001182: debug : virEventPollCleanupHandles:567 : EVENT_POLL_PURGE_HANDLE: watch=2791 2014-02-06 10:25:05.423+00001182: debug : virNetServerClientFree:591 : RPC_SERVER_CLIENT_FREE: client=0x22e6860 refs=1 2014-02-06 10:25:05.423+00001182: debug : virConnectClose:1462 : conn=0x7f1b380c4630 2014-02-06 10:25:05.423+00001182: debug : virUnrefConnect:145 : unref connection 0x7f1b380c4630 1 2014-02-06 10:25:05.423+00001182: debug : virReleaseConnect:94 : release connection 0x7f1b380c4630 ====== end of log ===== 7.) custom.log Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM Interf ace Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM vnet4 Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domiflist i-8-114-VM Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM Interf ace Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh domifstat i-8-114-VM vnet4 Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so Feb 6 19:25:05 jp7-rk90000 [authpriv.notice] sudo: zabbix : TTY=unknown ; PWD=/etc/zabbix/sender_scripts/compute ; USER=root ; COMMAND=/usr/bin/virsh list --all Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory Feb 6 19:25:05 jp7-rk90000 [authpriv.err] sudo: PAM adding faulty module: /lib64/security/pam_fprintd.so 8.) FYI on this program: This program consists of three main scripts that are run via cron. 2 run every 5 minutes, and 1 runs every minute. The two scripts that are executed every 5 minutes rely heavily on the virsh command. However, it is made so that the simultaneous number of connections to libvirt is not too large; the max number of libvirt-sock connections at any given moment does not go over 6. As it is a domain monitoring program, it only executes the following virsh commands: virsh list --all virsh dominfo virsh domblklist virsh domblkstat virsh domiflist virsh domifstat 9.) other related server settings 9-1) user resource limits [root@ ~]# ulimit -a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 773493 max locked memory (kbytes, -l) 64 max memory size (kbytes, -m) unlimited open files (-n) 1024 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) 10240 cpu time (seconds, -t) unlimited max user processes (-u) 32768 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited 9-2) libvirtd.conf The following settings have been changed: #max_clients = 20 max_clients = 250 #max_workers = 20 max_workers = 250 #max_requests = 20 max_requests = 250 Regards, Minami

2 2

[libvirt-users] F20 Virt-Manager with MacVTap not working
by John Obaterspok 13 Feb '14

13 Feb '14

Hello, I've setup a VM with default networking (NAT) and this works fine but hosts on my LAN can't get to the VM since it uses NAT. When I try to set network to use MacVTap with either default or bridged I get no networking for the VM. Any hints around this? I would like to have the VM's on the same LAN as my host and other machines. I don't care if the VM host can't reach the guests. It did work find in F19 but there I believe I had more MacVtap devices to choose from. -- john

2 4

[libvirt-users] Help? Running into problems with migrateToURI2() and virDomainDefCheckABIStability()
by Chris Friesen 13 Feb '14

13 Feb '14

Hi, We've run into a problem with libvirt 1.1.2 and are looking for some comments on whether this is a bug or design intent. We're trying to use migrateToURI() but we're using a few things (numatune, vcpu mask, etc.) that may need adjustment during the migration. We found that migrateToURI2() mostly works if we use XML created by copying the domain XML from the running instance and modifying the appropriate sections. The problem that we're seeing is that the serial console checking in libvirt/src/conf/domain_conf.c::virDomainDefCheckABIStability() is failing even though we haven't touched the serial console XML: 2014-02-10 19:41:07.196 1264 ERROR nova.virt.libvirt.driver [-] [instance: 42a841a8-034f-4565-937e-adb396a2ec48] Live Migration failure: unsupported configuration: Target domain console count 1 does not match source 0 On occasion it passes if the devices/serial/source element happens to be the same after migration, but this seems to be a fluke. If we remove the devices/serial/source element in the XML it seems to make the serial console check work on the first migration, but upon doing subsequent migration it fails with a console count error: 2014-02-07 16:11:32.459 28759 ERROR nova.virt.libvirt.driver [-] [instance: 1d7c470d-4337-450a-8a40-d0fb375ca2c1] Live Migration failure: unsupported configuration: Target domain console count 0 does not match source 1 Are we doing something wrong? Is there an issue with the console check code? Is there a better way to do what we're trying to do? Any help would be appreciated... Thanks, Chris

3 4

[libvirt-users] Can you verify currently defined libvirt secret provides valid Cephx auth?
by Scott Sullivan 12 Feb '14

12 Feb '14

As the subject suggests, I am wondering if its possible to verify if the currently defined libvirt secret provides valid authentication via Cephx to a Ceph cluster? I ask because ideally I would like to verify that the given cephx credentials in my libvirt secret are valid before I even attempt the virsh attach-device on the domain. I tried searching for a solution to this, but I can't seem to find a way to _just_ check if the currently defined libvirt secret provides valid authentication to the Ceph cluster or not. Is this possible?

2 2

[libvirt-users] LXC container driver
by arnaud gaboury 12 Feb '14

12 Feb '14

Dear all, I am slowly building a Arch Linux VM guest on my Arch Linux host. The guest machine is now built and is recognized as shown by this command : gabx@hortensia ➤➤ ~ % machinectl list MACHINE CONTAINER SERVICE dahlia container nspawn 1 machines listed. I an following the libvirt.org documentation. Now, according this page[1] about lxc driver, i am dealing with namespace requirements. This sentence, in bold, puzzles me: A suitably configured UID/GID mapping is a pre-requisite to making containers secure, in the absence of sVirt confinement. If I understand what a namespace is, I have no idea how to make sure my UIG/GID mapping is well configured. I would appreciate having any hints abut this part of the settings. Another question : is there any advantage/disadvantage using the lxc Userspace tools[2] instead of libvirt to manage these namespaces ? Thank you for help. [1]http://libvirt.org/drvlxc.html [2]http://linuxcontainers.org/

2 5

[libvirt-users] Connection from host to lxc container dbus
by Piotr Bartosiewicz 12 Feb '14

12 Feb '14

Hi, I am unsuccessfully trying to connect from host to containers dbus. Inside container dbus socket file is visible as /run/dbus/system_bus_socket. The problem is that /run is mounted as tmpfs in container (by systemd on container) and thus the directory content is not visible outside the container. Is there any way to make this file visible also outside the container? Regards, Piotrek

2 2