- Users - libvirt List Archives

[libvirt-users] libvirt-lxc Cannot SSH into container
by Shweta Shinde 02 Apr '12

02 Apr '12

Hi, I am trying to run containers on rhel 6.2 using libvirt-lxc. I want to migrate my containers from sf.net lxc to libvirt-lxc. So, I am using the same root file system for libvirt-lxc, which I used for sf.netlxc. After starting the container, and getting console for it, I can see the boot log for the container, it shows all the services started successfully. I get ping reply from the IP assigned to this container, but cannot ssh into the container. After entering the password for ssh, connection closed error comes up. I tried chroot to the root filesystem, and checked sshd service status. It shows that sshd is stopped. Also the /proc of container is empty. Am I missing out something in configuration? This is my xml file for container <domain type='lxc'> <name>test01</name> <memory>332768</memory> <os> <type>exe</type> <init>/sbin/init</init> </os> <vcpu>1</vcpu> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <filesystem type='mount'> <source dir='/srv/lxc/test01'/> <target dir='/'/> </filesystem> <interface type='network'> <source network='default'/> </interface> <console type='pty' /> </devices> </domain> Thanks, Shweta

1 0

[libvirt-users] virsh - specifying openvz vm sample in domain creation xml
by Jamshaid 31 Mar '12

31 Mar '12

Hello I need to specify the "vm sample name" in domain creation xml. This is the option which is provided to vzctl wtih --config parameter, I can see that in openvz_driver.c there is below code ..... if ((vmdef->profile && *(vmdef->profile))) { ADD_ARG_LIT("--config"); ADD_ARG_LIT(vmdef->profile); } But i am not sure what to put in "domain creation xml" to avail that option ? I cant find anything about it in documentation or around google. Regards James

1 0

[libvirt-users] Libvirt source code cannot built with libnettle.
by Chatsiri Ratana 31 Mar '12

31 Mar '12

Hello All, I try to build dependency library name is gnutls which require by libvirt, but show error us below. $./configure checking for shared library run path origin... done checking whether to use nettle... yes checking for libnettle... no configure: error: *** *** Libnettle 2.4 was not found. I specify macros are LD_LIBRARY_PATH=$LD_LIBRARY_PATH/path_of_nettle_2.4/lib and "PATH:path_of_nettle_2.4/bin/:$PATH" on ~/.bashrc . Why show an errors for requiring libnettle version 2.4? VIM command line for show data in config.log. it's show as below. 739 | #define __EXTENSIONS__ 1 740 | #define _ALL_SOURCE 1 741 | #define _DARWIN_C_SOURCE 1 742 | #define _GNU_SOURCE 1 743 | #define _POSIX_PTHREAD_SEMANTICS 1 744 | #define _TANDEM_SOURCE 1 745 | #define HAVE_FSEEKO 1 746 | #define STDC_HEADERS 1 747 | /* end confdefs.h. */ 748 | #include <nettle/ripemd160.h> 749 | int 750 | main () 751 | { 752 | ripemd160_init (0) 753 | ; 754 | return 0; 755 | } 756 configure:8887: result: no 757 configure:8913: error: 758 *** 759 *** Libnettle 2.4 was not found. Best Regards, Chatsiri Rattana. -- :-------------------------------------------------------- http://about.me/chatsiri.ratana

3 2

[libvirt-users] vzctl 3.1 not supported in virsh ?
by Jamshaid 31 Mar '12

31 Mar '12

Hello If i use virsh with vzctl 3.1 i get below error virsh -c openvz:///system error: /Could not extract vzctl version It works ok with vzctl 3.0.x Is there any way i can use virsh with vzctl 3.1 ? ---------------------------------------------------------------- [root@test ~]# /usr/bin/virsh --version=long Virsh command line tool of libvirt 0.9.11 See web site at http://libvirt.org/ Compiled with support for: Hypervisors: QEmu/KVM UML OpenVZ VirtualBox Test Networking: Remote Daemon Network Bridging Nwfilter Storage: Dir Filesystem SCSI Multipath iSCSI LVM Miscellaneous: Secrets Debug -------------------------------------------------------- [root@test ~]# vzctl --version vzctl version 3.1 -------------------------------------------------------- Regards James /

2 2

[libvirt-users] virsh create failed: cannot set CPU affinity on process 0
by 杨镭 30 Mar '12

30 Mar '12

Hello Everyone: We can't create vm on a physical server with 64 CPU(as reported by /proc/cpuinfo). The error message is: "cannot set CPU affinity on process 0" The following is the capabilities detected by libvirt: <arch>x86_64</arch> <model>Westmere</model> <vendor>Intel</vendor> <topology sockets='4' cores='10' threads='2'/> I wonder if libvirt uses incorrect CPU topology information to set process affinity which lead to the error above.

2 1

[libvirt-users] Specifying the KVM binary to use with libvirt
by Alexander Lyakas 30 Mar '12

30 Mar '12

Greetings everybody, I am running stock ubuntu-natty with kernel 2.6.38-8, KVM 0.14.0 and libvirt 0.8.8. I am spawning virtual machines with libvirt. I would like to test a new KVM version built aside without installing it over existing KVM. Is there a way to tell libvirt which KVM binary to pick up? I've been searching and saw that QEMU driver looks in /usr/bin for KVM executable. Is there a way to adjust that? Thanks, Alex.

2 2

[libvirt-users] Constantly changing USB product ID
by Jaap Winius 29 Mar '12

29 Mar '12

Hi folks, Recently I learned how to configure libvirt with USB pass-though functionality. In my case I configured my guest domain with this block of code: <hostdev mode='subsystem' type='usb' managed='yes'> <source> <vendor id='0x0c93'/> <product id='0x1772'/> <address bus='1' device='4'/> </source> </hostdev> At first this worked fine, but then later the guest domain refused to start because the USB device was absent. When I checked, I found that its product ID had mysteriously changed to 1771. Later it was back at 1772. Now it appears that the USB device I am dealing with has a product ID that changes back and forth between 1771 and 1772 at random. Apparently, the Windows program running on the guest domain is designed to deal with this nonsense, but the question is, Can the guest domain be configured to deal with it? Something like <product id='0x177?'/> would be useful, but that doesn't work, nor does omitting the product tag. Any ideas would be much appreciated. Thanks, Jaap

1 2

[libvirt-users] Problems with nwfilters/iptables
by Nicolai Stange 29 Mar '12

29 Mar '12

Hi all, I've got a problem with nwfilters/iptables. For one of my guest's interfaces, I have established the following filter: --8<---------------cut here---------------start------------->8--- <filter name='p-mgmt' chain='root'> <uuid>94fdd15b-b380-ba8c-6685-91206829adc7</uuid> <filterref filter='clean-traffic'/> <rule action='accept' direction='in' priority='500'> <tcp dstportstart='22'/> </rule> <rule action='drop' direction='inout' priority='1000'> <all/> </rule> </filter> </filter>--8<---------------cut here---------------end--------------->8--- The intent is to allow incoming ssh only. However, ssh from my host to my guest does not work. This is the relevant iptables excerpt with the filter given as above: --8<---------------cut here---------------start------------->8--- root:~# iptables -L HI-vnet5 Chain HI-vnet5 (1 references) target prot opt source destination RETURN tcp -- anywhere anywhere tcp spt:ssh state ESTABLISHED ctdir ORIGINAL DROP all -- anywhere anywhere root:~# --8<---------------cut here---------------end--------------->8--- The chain relations are: INPUT -> libvirt-host-in -> HI-vnet5. The interesting thing is: If I insert the same rule again, but with ctdir reversed, everything works just fine: --8<---------------cut here---------------start------------->8--- root:~# iptables -I HI-vnet5 1 -p tcp --sport 22 -m state --state ESTABLISHED -m conntrack --ctdir REPLY -j RETURN root:~# iptables -L HI-vnet5 Chain HI-vnet5 (1 references) target prot opt source destination RETURN tcp -- anywhere anywhere tcp spt:ssh state ESTABLISHED ctdir REPLY RETURN tcp -- anywhere anywhere tcp spt:ssh state ESTABLISHED ctdir ORIGINAL DROP all -- anywhere anywhere root:~# --8<---------------cut here---------------end--------------->8--- I am not an iptables expert, but if my guest's ssh daemon replies to my host's requests (and thus the packets are traversing my host's INPUT chain), I would guess that the direction is "REPLY" rather than "ORIGINAL". I'm really stuck with this and it would be really great if someone could clarify things to me! I'm running Ubuntu 12.04 (kernel 3.2.0-20-generic) coming with libvirt 0.9.8-2ubuntu1. Best, Nicolai

1 0

[libvirt-users] Problem using virt-manager to create a VM remotely
by Dale Amon 28 Mar '12

28 Mar '12

Well, not that remote. I'm trying to get it working from my laptop to an ancient workstation behind me I use for testing. I appear to get the connection okay. virt-manager --connect qemu+ssh://root@<host_ip>/system I can click on the entry on the panel that comes up and see facts about the remote machine. I then tried the "Create a new virtual machine" item on the tool bar. Fine so far. I get a nice looking panel for New VM and since this is just an experiment, I call it "test". The correct Connection is showing, ie the host ip (QEMU). I accept the default "Local install media (ISO or CDROM)" and go to the next panel. I take the "Use ISO Image" and then give it the full directory path and name of the iso on the remote machine <host_ip>. I have tried leaving OS Type and version Generic; I have also tried setting them to match the iso (an 11.10 i386 server). When I attempt to go forward, it gives me an error panel, "Error Setting install media location. Checking installer location failed: Could not find media '/KdevArchive1/ubuntu-11.10-server-i386.iso' On the off chance that it was trying to mount the iso from my laptop instead of the test machine, I have also tried pointing to the path of the same iso there as well with no joy. I am finding very little documentation on the GUI mode and none of it seems to give me any indication of what is going wrong. Ideas?

2 2

[libvirt-users] ARP entry intermittently is incorrect for guest - lose connectivity
by Trey Dockendorf 28 Mar '12

28 Mar '12

I've run into a problem on my KVM host where a single guest will be unreachable to other guests on the same host. This host has 2 bridged devices and guests assigned to each have the same issue. I've noticed that when I can't reach the problematic guest, the ARP entry for that system is incorrect. This issue seems to only be a problem about 75% of the time when making connections between the guests. I've checked the logs and haven't seen anything indicating a problem. Here's relavant information, if more is needed please let me know CentOS 6.2 x86_64 libvirt-0.9.4-23.el6_2.4 kernel-2.6.32-220.4.1.el6 # brctl show bridge name bridge id STP enabled interfaces br0 8000.001b21a1cf76 no eth3 vnet0 # Problematic host vnet1 vnet3 vnet4 vnet5 br1 8000.001b21a1ce4d no eth2 vnet6 virbr0 8000.525400a050ba yes virbr0-nic vnet2 # ARP entry when it's the correct MAC <omitted>.tamu.edu ether 52:54:00:e0:1e:6f C eth0 # ARP entry when it's wrong and ping or other connections time out <omitted>.tamu.edu ether 00:1e:c9:bb:cd:d4 C eth0 The MAC ending in cd:d4 does not exist on any system on this network. I've confirmed this with my campus IT who manages the switches and routers. # cat ifcfg-eth3 DEVICE="eth3" HWADDR="00:1B:21:A1:CF:76" NM_CONTROLLED="no" ONBOOT="yes" BRIDGE="br0" # cat ifcfg-br0 DEVICE="br0" ONBOOT="yes" TYPE=Bridge IPADDR="<omitted>" NETMASK="255.255.255.192" GATEWAY="<omitted>" DOMAIN="tamu.edu" # service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot opt source destination 13 ACCEPT tcp -- <omitted> 0.0.0.0/0 multiport dports 10050 /* 001 zabbix agent port */ 14 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 16 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67 17 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16509 19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16514 20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpts:8002:8012 21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:3493 22 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 23 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 24 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 26 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED 2 ACCEPT all -- 192.168.122.0/24 0.0.0.0/0 3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 4 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 5 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 6 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-is-bridged 7 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) num target prot opt source destination Table: mangle Chain PREROUTING (policy ACCEPT) num target prot opt source destination Chain INPUT (policy ACCEPT) num target prot opt source destination Chain FORWARD (policy ACCEPT) num target prot opt source destination Chain OUTPUT (policy ACCEPT) num target prot opt source destination Chain POSTROUTING (policy ACCEPT) num target prot opt source destination 1 CHECKSUM udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:68 CHECKSUM fill Table: nat Chain PREROUTING (policy ACCEPT) num target prot opt source destination Chain POSTROUTING (policy ACCEPT) num target prot opt source destination 1 MASQUERADE tcp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535 2 MASQUERADE udp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535 3 MASQUERADE all -- 192.168.122.0/24 !192.168.122.0/24 Chain OUTPUT (policy ACCEPT) num target prot opt source destination Thanks - Trey

1 0