- Users - libvirt List Archives

[libvirt-users] how to setup network filter
by Jiaan Zeng 10 Sep '13

10 Sep '13

Hi All, I am new to libvirt and encounter a strange problem to set up network filter in a NAT network. I launched VMs in a single host using NAT, i.e. interface type='network'. Now I want to control the outbound traffic from VM instance - only allow the VM to asses a set of ip addresses. My network filter xml is as follows. The problem is once I change the VM xml, shutdown and start VM, VM cannot get ip address. /var/log/libvirt/libvirt.log shows " error : virNetDevGetIndex:656 : Unable to get index for interface vnet2: No such device" error. But when I remove the drop rule in the filter xml, VM can get IP address. I even tried the clean-traffic filter shipped with libvirt. VM throws the same error above. Any idea why this happens? How can I implement outbound traffic control in libvirt? Thanks a lot. <filter name='filter-test'> <rule action='accept' direction='in' priority='500'> <tcp dstportstart='22'/> </rule> <rule action='accept' direction='out' priority='500'> <ip dstipaddr='IP1'/> </rule> <rule action='accept' direction='out' priority='500'> <ip dstipaddr='IP2'/> </rule> <rule action='drop' direction='out' priority='500'> <all/> </rule> </filter> The VM network section XML looks like this <interface type='network'> <mac address='52:54:00:0d:f1:ce'/> <source network='default'/> <filterref filter='filter-test'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> -- Regards, Jiaan

2 1

[libvirt-users] Problems with user namespaces
by Jaka Hudoklin 10 Sep '13

10 Sep '13

Hello! I'm testing user namespaces and I have quite some problem getting them to work. First of all, I have user namespaces support enabled in kernel: offlinehacker:~/ $ uname -r 3.10.10 offlinehacker:~/ $ ls /proc/self/ns/ ipc@ mnt@ net@ pid@ user@ uts@ I created simple ubuntu rootfs and when I start container without idmap, so without user namespace mappings, it works just fine: Libivrt config: <domain type='lxc'> <name>helloworld</name> <memory>102400</memory> <os> <type>exe</type> <init>/bin/dash</init> </os>  <devices> <console type='pty'/> <filesystem type='mount'> <source dir='/home/offlinehacker/rootfs'/> <target dir='/'/> </filesystem> </devices> </domain> This is how my rootfs looks like: offlinehacker:~/ $ ls -la rootfs drwxr-xr-x 23 offlinehacker users 4096 sep 5 19:06 ./ drwxr-xr-x 59 offlinehacker users 4096 sep 5 19:06 ../ drwxr-xr-x 2 offlinehacker users 4096 avg 27 14:11 bin/ drwxr-xr-x 3 offlinehacker users 4096 avg 27 14:11 boot/ drwxr-xr-x 4 offlinehacker users 4096 avg 27 14:11 dev/ drwxr-xr-x 86 offlinehacker users 4096 sep 5 18:20 etc/ drwxr-xr-x 3 offlinehacker users 4096 avg 27 14:11 home/ lrwxrwxrwx 1 offlinehacker users 33 avg 27 14:10 initrd.img -> /boot/initrd.img-3.2.0-52-virtual drwxr-xr-x 18 offlinehacker users 4096 avg 27 14:10 lib/ drwxr-xr-x 2 offlinehacker users 4096 avg 27 14:10 lib64/ drwx------ 2 offlinehacker users 4096 avg 27 14:11 lost+found/ drwxr-xr-x 2 offlinehacker users 4096 avg 27 14:09 media/ drwxr-xr-x 2 offlinehacker users 4096 apr 19 2012 mnt/ drwxr-xr-x 2 offlinehacker users 4096 avg 27 14:09 opt/ -rw-r--r-- 1 offlinehacker vboxusers 231671365 avg 27 14:12 precise-server-cloudimg-amd64-root.tar.gz drwxr-xr-x 2 offlinehacker users 4096 apr 19 2012 proc/ drwx------ 2 offlinehacker users 4096 sep 3 23:47 root/ drwxr-xr-x 2 offlinehacker users 4096 avg 27 14:11 run/ drwxr-xr-x 2 offlinehacker users 4096 avg 27 14:11 sbin/ drwxr-xr-x 2 offlinehacker users 4096 mar 5 2012 selinux/ drwxr-xr-x 2 offlinehacker users 4096 avg 27 14:09 srv/ drwxr-xr-x 2 offlinehacker users 4096 apr 14 2012 sys/ drwxrwxrwt 2 offlinehacker users 4096 sep 4 01:39 tmp/ drwxr-xr-x 10 offlinehacker users 4096 avg 27 14:09 usr/ drwxr-xr-x 12 offlinehacker users 4096 sep 5 18:10 var/ lrwxrwxrwx 1 offlinehacker users 29 avg 27 14:10 vmlinuz -> boot/vmlinuz-3.2.0-52-virtual And this is who I am: offlinehacker:~/ $ id uid=499(offlinehacker) gid=67(libvirtd) groups=100(users),1(wheel),57(networkmanager),67(libvirtd) When I create the container with idmap uncommented I get the following error: offlinehacker:~/ $ virsh -c lxc:/// create helloworld.xml error: Failed to create domain from helloworld.xml error: internal error: guest failed to start: 2013-09-05 19:08:57.781+0000: 19036: debug And these are the logs: sep 05 19:08:52 laptop libvirtd[1542]: server=0x7fc8a60ddd60 client=0x7fc8a60e68d0 msg=0x7fc8a60e9380 rerr=0x7fc89a32cd40 args=0x7fc88800b4a0 ret=0x7fc88800a1c0 sep 05 19:08:52 laptop libvirtd[1542]: priv=0x7fc8a60e91f0 conn=(nil) sep 05 19:08:52 laptop libvirtd[1542]: name=lxc:/// sep 05 19:08:57 laptop libvirtd[1542]: Cannot recv data: Connection reset by peer sep 05 19:08:58 laptop libvirtd[1542]: internal error: guest failed to start: 2013-09-05 19:08:57.781+0000: 19036: debug Looks like .oldroot, dev, proc and sys gets created with mapped permissions(499:100), but container fails to start. Any help or direction how to get this working would be appriciated, Thanks, Jaka Hudoklin!

2 7

[libvirt-users] LVM Thin Volumes & Storage Pools
by Jorge Fábregas 09 Sep '13

09 Sep '13

Hi, Is it possible to create a storage pool based on an LVM thin pool? I read a recent bugzilla but the problem there was that the storage-pool became unusable AFTER creating a thinpool which is a different case. Thanks, Jorge

2 5

[libvirt-users] How to insert vcpupin in guest xml file
by Peeyush Gupta 09 Sep '13

09 Sep '13

Hi all, I am trying to add vcpupin in the guest xml file. I am working with openstack and the code I have is python bound. I investigated through the code and found that the elemets in xml file are set in get_guest_config function. Now the thing is I am not able to set vcpupin element. I mean I tried guest.cputune_vcpupin but it's not working. Help me out, please! Thanks. ~Peeyush Gupta

3 2

[libvirt-users] Cannot create a volume
by Daniele 09 Sep '13

09 Sep '13

Hi all, I'm trying to create a new volume in a netfs pool. The pool works correctly and it is active. If I try to create the volume from the virt-manager GUI nothing happens. While if I use virsh this is the result. *virsh # pool-list * *Name State Autostart * *-----------------------------------------* *routers active yes * * * *virsh # vol-create-as routers namevol 2G* *error: Failed to create vol vr1* *error: cannot create path '/var/lib/libvirt/images/routers/namevol': Invalid argument* What am I missing? Thanks for your help! Daniele

2 2

[libvirt-users] Error Attaching Seventh VirtIO-SCSI Device to Guest
by McEvoy, James 09 Sep '13

09 Sep '13

I have run into a problem attempting to attach the seventh virtio-scsi device to a RHEL 6.4 Guest from a RHEL 6.4 host running libvirt version 0.10.2-18. I have a guest that is running RHEL6.4 where I can attach disks sda(boot), sdb, sdc, sdd, sde and sdf but when I try to attach sdg the virsh attach-disk command fails with the error: error: Failed to attach disk error: internal error Unable to determine model for scsi controller I logged Bug 996327 on this issue including an attached script to repro the bug but there has been no activity on that bug so far. This is the results when attaching virtio-scsi disks in a loop. Sdf is attached but sdg fails. virsh attach-disk --domain UEM004n1 --source /dev/GuestVols/UEM004-5 --target sdf --cache none --type disk --config --wwn 1fc7058865439717 --serial c7d11fc7058865439717 --shareable Disk attached successfully Vol UEM004-6 created virsh attach-disk --domain UEM004n1 --source /dev/GuestVols/UEM004-6 --target sdg --cache none --type disk --config --wwn 4d3ddb9d15b05e7e --serial 62fd4d3ddb9d15b05e7e --shareable error: Failed to attach disk error: internal error Unable to determine model for scsi controller The script to create and attach LVM volumes using virtio-scsi is available here: https://bugzilla.redhat.com/attachment.cgi?id=785925 Has anyone else run into this... I had the understanding that each virtio-controller could support 4K devices. --jim

2 3

[libvirt-users] internal error: unexpected migration status in setup
by Thomas Stein 08 Sep '13

08 Sep '13

Hello. Suddenly on one of my vm's i get: 2013-09-06 09:44:39.501+0000: 2277: error : qemuMonitorJSONGetMigrationStatusReply:2377 : internal error: unexpected migration status in setup This happens when i try to migrate /and/ when i try to do a "savevm". error: Failed to save domain domain to /opt/virt-backup- blockcopy/domain/domain-memory error: internal error: unexpected migration status in setup What is this migration status thing and how can i change that? thanks and best regards t.

1 0

[libvirt-users] Can I run a KVM guest with a btrfs subvolume as file system?
by Thomas Koch 07 Sep '13

07 Sep '13

Hi, I want to run a virtualized Debian stable KVM guest on a Debian stable host (to run untrusted stuff like Skype, Flash or eclipse with third-party plugins). Naturally host and guest will have many files in common and it would be nice to make us of btrfs deduplication. Now I found "direct kernel boot" but I could not find any documentation about it. Does it allow me to hand a btrfs subvolume of the host file system to the guest and the guest uses this subvolume as its own file system? I already asked this question here: http://serverfault.com/questions/536752/can-i-run-a-kvm-guest-with-a-btrfs- subvolume-as-file-system Regards, Thomas Koch

1 1

[libvirt-users] Is virsh supposed to work on Windows?
by Fernando Lozano 06 Sep '13

06 Sep '13

Hi there, Sorry for the cross-post, but I seeked help on this issue before on those lists, but nobody answered. :-( I'm trying to use virsh and virt-viewer on Windows. I'm running the latest binaries from http://spice-space.org/download.html, that is, virt-viewer-x64-0.5.7.msi on a Windows 7 64-bits computer. So far I got remote-viewer.exe to work, after some pain. But have no sucess using virt-viewer.exe and virsh.exe. Are they supposed to work, or am I loosing my time? I know the kvm host setup (a CentOS 6.3 machine) is fine, because I can connect using virsh from other CentOS and RHEL machines. I'm using TLS to secure connenctions to libvirtd, without client certs. I had a litthe trouble finding where to put certificate files on the windows machine, but using Sysinternals ProcessMonitor I found they have to be on the obvious path: C:\usr\x86_64-w64-mingw32\sys-root\mingw\etc\pki{CA,libvirt} Even then virsh can't connect: virsh # connect qemu://kvmhost/system error: Failed to connect to the hypervisor error: Unable to set close-on-exec flag: Success ProcessMonitor "strace" doesn't help me find what went wrong. I'm sure I'm using the same *.pem files that works for Linux clients. It looks like virsh is opening and reading those files ok. ProccessMonitor shows a TCP connect and a TCP Disconnect events to the correct IP and port, both resulting SUCCESS. Any ideas? What can I do to debug virsh on Windows and find why it isn't connecting to libvirt on CentOS? I tried -d and -l on Windows and Linux but can't find where the debug logs are saved. If you want, I can send ProcessMonitor captured events. For Red Hat folks out there: I need this working so I can get approval to buy subscriptions, The idea is production hosts will be RHEL. :-) If not, my boss may end up buying XenServer ;-) []s, Fernando Lozano

6 18

[libvirt-users] Compiling libvirt for Xenserver 6.2
by Faisal Ali 06 Sep '13

06 Sep '13

Hi, I am trying to compile libvirt-1.1.2 for Xenserver 6.2 using there DDK VM, however, it keeps giving error saying that it needs xenstore.h header file. However, I think Xenserver 6.2 is using older xs.h header file. Here is the excerpt of the beginning and end of the configure command ./configure . . checking for xenstore.h... no checking for xen/xen.h... yes checking for xen/version.h... yes checking for xen/dom0_ops.h... yes checking for xen/sys/privcmd.h... no checking for xen/linux/privcmd.h... no configure: error: You must install the Xen development package to compile Xen driver with -lxenstore How do compile with libvirt to look at xs.h file. Thanks

1 0