- Users - libvirt List Archives

[libvirt-users] libvirt-sandbox question.
by Christopher Stone 29 Jan '14

29 Jan '14

I hope this question isn't considered too off topic for this list, I am trying to reach the libvirt-sandbox developers, but I could not find a libvirt-sandbox specific mailing list, and it seemed to me that libvirt-sandbox was a part of libvirt itself. I am trying to port libvirt-sandbox to run on a CentOS 6.5 system. This wasn't too hard but, I had to do the following: I have used the CentOS repo addon ElRepo to upgrade the kernel to 3.10.28. CentOS normally runs a 2.6.32 kernel. I upgraded glib2 from 2.36 to 2.38.2. I did this by building 2.38.2 from source and installing it into /usr/local. Thus, the 2.36 version still exists in /lib64 and the normal CentOS applications use this version. I built libvirt 1.2.1 from source and installed it into /usr/local. I used: ./configure --with-lxc --with-selinux --with-secdriver-selinux --prefix=/usr/local I built libvirt-glib 0.1.7 from source and installed it into /usr/local. I used: PKG_CONFIG_PATH=/usr/local/lib/pkgconfig ./configure --prefix=/usr/local I build libvirt-sandbox 0.5.1 from source and installed it into /usr/local. I used: PKG_CONFIG_PATH=/usr/local/lib/pkgconfig ./configure As a test, I am able to run the libvirt lxc helloworld example: [root@scwnet1 lxc_helloworld]# virsh -c lxc:/// define helloworld.xml Domain helloworld defined from helloworld.xml [root@scwnet1 lxc_helloworld]# virsh -c lxc:/// start helloworld Domain helloworld started [root@scwnet1 lxc_helloworld]# virsh -c lxc:/// list Id Name State ---------------------------------------------------- 9819 helloworld running [root@scwnet1 lxc_helloworld]# virsh -c lxc:/// console helloworld Connected to domain helloworld Escape character is ^] sh-4.1# exit exit Next, I try to use libvirt-sandbox, and I get the following error: [root@scwnet1 tests]# /usr/local/bin/virt-sandbox -c lxc:/// /bin/sh Unable to start sandbox: Failed to create domain: unsupported configuration: Unable to find security driver for label selinux My libvirt config.log shows the SELinux security driver as yes: configure:71172: Configuration summary configure:71174: ===================== configure:71176: configure:71178: Drivers configure:71180: configure:71182: Xen: no configure:71184: QEMU: yes configure:71186: UML: yes configure:71188: OpenVZ: yes configure:71190: VMware: yes configure:71192: VBox: yes configure:71194: XenAPI: no configure:71196: xenlight: no configure:71198: LXC: yes configure:71200: PHYP: no configure:71202: ESX: yes configure:71204: Hyper-V: no configure:71206: Parallels: yes configure:71208: Test: yes configure:71210: Remote: yes configure:71212: Network: yes configure:71214: Libvirtd: yes configure:71216: Interface: yes configure:71218: macvtap: yes configure:71220: virtport: yes configure:71222: configure:71224: Storage Drivers configure:71226: configure:71228: Dir: yes configure:71230: FS: yes configure:71232: NetFS: yes configure:71234: LVM: yes configure:71236: iSCSI: yes configure:71238: SCSI: yes configure:71240: mpath: yes configure:71242: Disk: yes configure:71244: RBD: no configure:71246: Sheepdog: no configure:71248: Gluster: no configure:71250: configure:71252: Security Drivers configure:71254: configure:71256: SELinux: yes (/sys/fs/selinux) configure:71258: AppArmor: no (install profiles: no) configure:71260: configure:71262: Driver Loadable Modules configure:71264: configure:71267: dlopen: -ldl configure:71273: configure:71275: Libraries configure:71277: configure:71296: apparmor: no configure:71326: attr: yes (CFLAGS='' LIBS='-lattr') configure:71356: audit: yes (CFLAGS='' LIBS='-laudit') configure:71386: avahi: yes (CFLAGS='-D_REENTRANT ' LIBS='-lavahi-common -lavahi-client ') configure:71416: blkid: yes (CFLAGS='-I/usr/include/blkid -I/usr/include/uuid ' LIBS='-lblkid ') configure:71446: capng: yes (CFLAGS='' LIBS='-lcap-ng') configure:71476: curl: yes (CFLAGS='-DCURL_DISABLE_TYPECHECK ' LIBS='-lcurl ') configure:71506: dbus: no configure:71536: fuse: no configure:71566: glusterfs: no configure:71596: hal: no configure:71626: netcf: yes (CFLAGS=' ' LIBS='-lnetcf ') configure:71656: numactl: yes (CFLAGS='' LIBS='-lnuma') configure:71686: openwsman: no configure:71716: pciaccess: yes (CFLAGS=' ' LIBS='-lpciaccess ') configure:71746: readline: yes (CFLAGS='' LIBS='-lreadline') configure:71776: sanlock: yes (CFLAGS='' LIBS='-lsanlock_client') configure:71806: sasl: yes (CFLAGS='' LIBS='-lsasl2') configure:71836: selinux: yes (CFLAGS='' LIBS='-lselinux') configure:71866: ssh2: no configure:71897: udev: yes (CFLAGS=' ' LIBS='-ludev ') configure:71927: yajl: yes (CFLAGS='' LIBS='-lyajl') configure:71940: libxml: -I/usr/include/libxml2 -lxml2 configure:71942: dlopen: -ldl configure:71948: openwsman: no configure:71952: gnutls: -DGCRYPT_NO_DEPRECATED -lgnutls -lgcrypt configure:71958: firewalld: no configure:71965: polkit: /usr/bin/pkcheck (version 1) configure:71976: xen: no configure:71983: xenapi: no configure:71990: xenlight: no configure:71994: pcap: -lpcap configure:72001: nl: -lnl configure:72011: mscom: no configure:72015: xdr: configure:72025: rbd: no configure:72029: configure:72031: Test suite configure:72033: configure:72035: Coverage: no configure:72037: Alloc OOM: no configure:72039: configure:72041: Miscellaneous configure:72043: configure:72045: Debug: yes configure:72047: Use -Werror: no My libvirt capabilites shows this: [root@scwnet1 tests]# virsh -c lxc:/// capabilities <capabilities> <host> <uuid>20b4e77c-3fb8-dc11-968d-c8600070189e</uuid> <cpu> <arch>x86_64</arch> </cpu> <power_management> <suspend_mem/> <suspend_disk/> </power_management> <topology> <cells num='1'> <cell id='0'> <memory unit='KiB'>8334880</memory> <cpus num='4'> <cpu id='0' socket_id='0' core_id='0' siblings='0-1'/> <cpu id='1' socket_id='0' core_id='1' siblings='0-1'/> <cpu id='2' socket_id='0' core_id='2' siblings='2-3'/> <cpu id='3' socket_id='0' core_id='3' siblings='2-3'/> </cpus> </cell> </cells> </topology> <secmodel> <model>none</model> <doi>0</doi> </secmodel> </host> <guest> <os_type>exe</os_type> <arch name='x86_64'> <wordsize>64</wordsize> <emulator>/usr/local/libexec/libvirt_lxc</emulator> <domain type='lxc'> </domain> </arch> </guest> <guest> <os_type>exe</os_type> <arch name='i686'> <wordsize>32</wordsize> <emulator>/usr/local/libexec/libvirt_lxc</emulator> <domain type='lxc'> </domain> </arch> </guest> </capabilities> I am not sure if secmodel none is the problem. Can someone give me some direction on how to fix this? Cheers, Chris.

2 1

[libvirt-users] dropping capabilities in lxc containers
by Thierry Parmentelat 29 Jan '14

29 Jan '14

Hi there I’m not quite proficient with libvirt yet, and have been using it so far primarily to manage lxc containers I was hoping to find a means to configure the set of capabilities that guests should drop, but came across a few web pages suggesting these were set in stone in the code is this correct, or is there a means to tweak this set from the host via the xml config or a virsh command ? any hint / pointer to documentation in this respect would be most appreciated — Thierry

2 3

[libvirt-users] Libvirt-LXC + systemd + user namespace
by Jan Olszak 29 Jan '14

29 Jan '14

Hi there! I am trying to turn on user namespace by adding following lines to the config: <idmap> <uid start='0' target='0' count='100000'/> <gid start='0' target='0' count='100000'/> </idmap> As you can see the root in container is mapped to the root outside. I was expected to see no difference after adding this lines, but unfortunately there are some (see details below). Am I missing something or is there a problem with system, libvirt or kernel? Full libvirt config: <domain type='lxc'> <name>test_with_idmap</name> <memory>102400</memory> <os> <type>exe</type> <init>/usr/lib/systemd/systemd</init> </os> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <idmap> <uid start='0' target='0' count='100000'/> <gid start='0' target='0' count='100000'/> </idmap> <devices> <console type='pty'/> <filesystem type='mount'> <source dir='/guest'/> <target dir='/'/> </filesystem> </devices> </domain> root:~> uname -a Linux localhost 3.10.19-01077-g4a19d28-dirty #5 SMP PREEMPT Mon Jan 13 12:56:09 CET 2014 armv7l GNU/Linux root:~> libvirtd --version libvirtd (libvirt) 1.2.1 root:~> systemd --version systemd 204 After adding idmap to config systemd can't start many of its services, in particular: Failed to mount Debug File System. Failed to mount Configuration File System. Failed to mount FUSE Control File System. Failed to start udev Kernel Device Manager. Failed to start Remount Root and Kernel File Systems. Failed to start Journal Service. systemctl status says: ExecMount=/bin/mount debugfs /sys/kernel/debug -t debugfs (code=exited, status=32) ExecMount=/bin/mount configfs /sys/kernel/config -t configfs (code=exited, status=32) ExecMount=/bin/mount fusectl /sys/fs/fuse/connections -t fusectl (code=exited, status=32) ExecStart=/usr/lib/systemd/systemd-udevd (code=exited,status=206/OOM_ADJUST) ExecStart=/usr/lib/systemd/systemd-remount-fs (code=exited,status=1/FAILURE) ExecStart=/usr/lib/systemd/systemd-journald (code=exited, status=218/CAPABILITIES) Thanks!

3 3

Re: [libvirt-users] How to find domain os type and ip address
by Rathidevi 29 Jan '14

29 Jan '14

Hi All, I am using the libvirt-0.5.1.jar and downloaded from this link ftp://libvirt.org/libvirt/java. 1) To find the os type of domain I use this method getOSType(). But it returns the kvm or hvm instead of windows and linux. Is the any way to find the original os type of domain? 2) Please give is there any option or method available to find the ipaddress of domain? Thanks & Regards Rathidevi

2 1

[libvirt-users] Does libvirt support attach volume to linux container now?
by Du Jun 29 Jan '14

29 Jan '14

Hi all, I am playing with linux container and using libvirt to manage linux container. I find I fail to attach volume to linux container via libvirt and I got the following error message: Failed to attach volume: data-111 to VM: lxc-111; org.libvirt.LibvirtException: unsupported configuration: Can't setup disk for non-block device. My question is that does libvirt support attaching volume to linux container? If it supports, what version should I use? Thanks, DuJun

1 0

[libvirt-users] Problems with pmsuspend/wakeup
by Alex 26 Jan '14

26 Jan '14

Hi, I've migrated a Windows7 vm from F17 to F20 and it appears to be working okay. Apparently when it's left idle for some period, it automatically goes into a pmsuspend state, and I'm unable to wake it. I've figured out the virsh dompmwakeup command, which then virsh shows it's running, but the vm is still unresponsive. It doesn't respond to ping and the display is just black when accessing it through virt-manager. Is there something I need to do in the guest for it to wake up properly? How can I just prevent it from ever suspending in the first place? Thanks, Alex

1 0

[libvirt-users] Libvirt support for VEB
by Padmanabhan Krishnan 24 Jan '14

24 Jan '14

Hello, I have a setup of virtual machines and wherein my virtual switch (OVS) takes care of switching locally and it uses the network for talking to VM's outside the server (like a VEB scenario I guess). I want Netlink messages to be sent to LLDPAD. I understand that i had to modify the XML files and start the VM. But, i see from the XML that it supports only VEPA, not VEB. But, irrespective of VEB or VEPA, those VM information should be known to the upstream switch through VDP. 802.1QBG seem to support this (both VEPA and VEB) http://www.ieee802.org/1/files/private/bg-drafts/d2/802-1qbg-d2-2.pdf But, for VEB, no net link messages are sent by libvirt. Why is that? From the XML example, I see that: <interface type=’direct’> <mac address=’d0:0f:d0:0f:02:01’/> <source dev=’eth2.20’ mode=’vepa’/> <source network=’default’/> <virtualport type=’802.1Qbg’> <parameters managerid=’12’ typeid=’0x123456’ typeidversion=’1’ instanceid=’09b00c53-8b5c-4eeb-8f00-d847aa05191b’ /> </virtualport> I tried different combinations by changing the interface type to bridge and and trying Qbg as in below, I find that it doesn't send a Netlink message to LLDPAD. There's no "mode=veb". </controller> <interface type='bridge'> <mac address='00:54:00:4e:46:04'/> <source bridge='xml_br'/> <virtualport type='802.1Qbg'> <parameters managerid='12' typeid='1193046' typeidversion='1' instanceid='09b00c53-8b5c-4eeb-8f00-d847aa05191b'/> </virtualport> <target dev='tap_xml'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> How do i get this to work? Is this a limitation? Thanks, KP

1 0

Re: [libvirt-users] PCI Passthrough
by The PowerTool 23 Jan '14

23 Jan '14

Oops! I blame Microsoft. I use Hotmail and am very, very unhappy that MS bought them out which leaves me stuck with Outlook, which sucks. I've always just hit reply in the past and it's worked. Now I'm going to have to be careful to make sure my replies go where I expect them. Thank you very much for the information. I was really hoping to consolidate systems but that apparently won't happen in the near future. So that means I'll be focusing my efforts on getting my Spacewalk server updated and then upgrading from F18 to F20 or 21. Yep, I was very aware of F18 dropping and thankful for the one brief delay. I'll be taking a look at it again once I upgrade to the current Fedora. If that doesn't work I'll wait and keep an eye on posts and when things look better probably get new hardware (which will likely be the requirement). Thanks, again! Date: Thu, 23 Jan 2014 11:37:02 +0200 From: laine(a)laine.org To: thepowertool_sc(a)hotmail.com Subject: Re: [libvirt-users] PCI Passthrough On 01/21/2014 05:32 PM, The PowerTool wrote: Laine, Thank you very much for your response. I took a look at the first link you provide (archlinux). Key items that caught my attention (in order): 1. "Intel IGDs won't work"--I have Intel integrated video 2. "NOTE: THIS IS EXPERIMENTAL SO IT MIGHT NOT WORK FOR YOU" (self-explanatory) One additional note: When I received the "permission denied" error I had the same thought as you. I was unaware of the issue you outlined with libvirt needing to be configured to run as root on some versions of Fedora. Still, as root I did successfully detach my video card... at least that's how it appeared given the monitor went no-signal and then displayed a strange pattern. The system wouldn't ping and failed to respond to ssh attempts. I had to reboot to recover. I tried a second experiment where I first started a ssh session and then detached (from the host). Going back to the 2nd system the ssh session stopped responding. Actually that's probably more of an indication that your kernel just doesn't properly handle having the primary video device disappear midstream. You may have different results if you connected two video cards to a system, and tried to passthrough the secondary (it still probably wouldn't work, but it would likely fail in a different way). That leads me to believe it's not fully baked, something critically fails, and it's not going to work for me at-least at my current levels. Alex Williamson gave a talk at this year's KVM Forum (in October) about the difficulties of making VGA passthrough work, and it was truly frightening; there are just too many strange, undocumented backdoors in the devices that are required by the drivers for proper operation. In my mind this whole area just has too great of a likelihood of total failure without possibility of making it work in a reasonable time frame. To answer your question: I'm running Fedora 18. F18 was definitely one of the releases that was broken wrt PCI passthrough requiring qemu to be run as root. I don't recall if the kernel guys ever fixed it in that version or not. I pestered them about it for months, then finally gave up. BTW, you know that F18 has just gone end-of-life, right? This means no more updates of any type, even security updates. You can actually upgrade your F18 machine to F19, and F19 to F20, using the "fedup" package (I haven't tried using fedup to go directly from F18 to F20, but I suppose you could look into it). *A lot* has changed in virtualization in the last year, and as a bonus, you'll be covered for security fixes for another year. Is there a place where I can follow updates and see PCI pass-through mature so I'll know when next to try? Well, you could try the qemu-devel mailing list, but it's pretty high traffic, and very few of the messages would be on this particular topic. That *is* the place where any discussion would take place, though. Thank you, again, for your help! BTW, it's best to keep all messages on the list rather than private replies. That way someone else with better information may reply (and people very often get busy and disappear for several days/weeks at a time, so it's better to not rely on a response from a single person)

1 0

[libvirt-users] Newbie question about network setup
by hubert depesz lubaczewski 23 Jan '14

23 Jan '14

Hi, I've read some docs, and have some ideas, but before I'll go any further, I'd like to get confirmation if I'm understanding it right. Let's assume that on my host I want to have 5 different guests, but they shouldn't be able to communicate with each other. Is the solution to it addition of 5 separate "networks" in libvirt, and then connecting each guest to its own "network"? Looks sensible, but perhaps I'm overlooking something. Best regards, depesz -- The best thing about modern society is how easy it is to avoid contact with it. http://depesz.com/

3 4

[libvirt-users] Using Java bindings to event callback
by Howie 23 Jan '14

23 Jan '14

Hi My test environment : CentOS 6.3 6.4 Ubuntu 13.10 For CentOS 6.4 libvirt-java-0.4.9-1.el6.noarch libvirt-python-0.10.2-29.el6.x86_64 libvirt-client-0.10.2-29.el6.x86_64 libvirt-0.10.2-29.el6.x86_64 I am try to use java bindings to event callback. int register = conn.domainEventRegisterAny(null, 0, cb); But always get the following error message: libvirt: Remote Driver error : adding cb to list exception caught:org.libvirt.LibvirtException: adding cb to list level:VIR_ERR_ERROR code:VIR_ERR_RPC domain:VIR_FROM_REMOTE hasConn:false hasDom:false hasNet:false message:adding cb to list str1:%s str2:adding cb to list str3:null int1:-1 int2:-1 By the way I also trace the mail list *[libvirt] [PATCH] Java bindings for domain events* (2008 Nov 07) *[libvirt] [PATCH 1/2] Java bindings for domain events**[libvirt] [PATCH 2/2] Java bindings for domain events* (2008 Nov 18) --> Reject patch*Re: [libvirt] [PATCH 1/2] Java bindings for domain events* (2008 Dec) —>No Result*[libvirt-users] Using Java bindings to event callback * (2010 Jul) —>No Result *[libvirt] [PATCH 0/2] Libvirt-java event handling (2011Jul)* —> I think most drivers don't support that. We have a custom driver for our hypervisor and it works. *[libvirt] [libvirt-java] [PATCH 00/12] event support* (2013 Jan) —> *Re: [libvirt] [libvirt-java] [PATCH 00/12] event support (2013 Mar)* --> No Result Any suggestions? Thanks, Howie

2 1