10:16 a.m.
Software in use:
*Source hypervisor:* *Qemu:* stable-2.12 branch *Libvirt*: v3.2-maint
branch *OS*: CentOS 6
*Destination hypervisor: **Qemu:* stable-2.12 branch *Libvirt*: v4.9-maint
branch *OS*: CentOS 7
I'm experiencing an intermittent live migration hang of a virtual machine
(KVM) with a ceph RBD volume attached.
At the high level what I see is that when this does happen, the virtual
machine is left in a paused state (per virsh list) on both source and
destination hypervisors indefinitely.
Here's the virsh command I am running on the source (where 10.30.76.66 is
the destination hypervisor):
virsh migrate --live --copy-storage-all --verbose --xml
/root/live_migration.cfg test_vm qemu+ssh://10.30.76.66/system
tcp://
10.30.76.66
Here it is in "ps faux" while its in the hung state:
root 10997 0.3 0.0 380632 6156 ? Sl 12:24 0:26
\_ virsh migrate --live --copy-storage-all --verbose --xml
/root/live_migration.cfg test_vm qemu+ssh://10.30.76.66/sys
root 10999 0.0 0.0 60024 4044 ? S 12:24 0:00
\_ ssh 10.30.76.66 sh -c 'if 'nc' -q 2>&1 | grep "requires an
argument"
>/dev/null 2>&1; then ARG=-q0;else ARG=;fi;'nc' $ARG -U
The only reason i'm using the `--xml` arg is so the auth information can be
updated for the new hypervisor (I setup a cephx user for each hypervisor).
Below is a diff between my normal xml config and the one I passed in --xml
arg to illustrate:
60,61c60,61
< <auth username="source">
< <secret type="ceph"
uuid="d4a47178-ab90-404e-8f25-058148da8446"/>
---
> <auth username="destination">
> <secret type="ceph"
uuid="72e9373d-7101-4a93-a7d2-6cce5ec1e6f1"/>
The libvirt secret as shown above is properly setup with good credentials
on both source and destination hypervisors.
When this happens, I don't see anything logged on the destination
hypervisor in the libvirt log. However in the source hypervisors log, I do
see this:
2019-06-21 12:38:21.004+0000: 28400: warning :
qemuDomainObjEnterMonitorInternal:3764 : This thread seems to be the
async
job owner; entering monitor without asking for a nested job is dangerous
But nothing else logged in the libvirt log on either source or destination.
The actual `virsh migrate --live` command pasted above still runs while
stuck in this state, and it just outputs "Migration: [100 %]" over and
over. If I strace the qemu process on the source, I see this over and over:
ppoll([{fd=9, events=POLLIN}, {fd=8, events=POLLIN}, {fd=4, events=POLLIN},
{fd=6, events=POLLIN}, {fd=15, events=POLLIN}, {fd=18,
events=POLLIN},
{fd=19, events=POLLIN}, {fd=35, events=0}, {fd=35, events=POLLIN}], 9, {0,
14960491}, NULL, 8) = 0 (Timeout)
Here's those fds:
[root@source ~]# ll /proc/31804/fd/{8,4,6,15,18,19,35}
lrwx------ 1 qemu qemu 64 Jun 21 13:18 /proc/31804/fd/15 ->
socket:[931291]
lrwx------ 1 qemu qemu 64 Jun 21 13:18 /proc/31804/fd/18 -> socket:[931295]
lrwx------ 1 qemu qemu 64 Jun 21 13:18 /proc/31804/fd/19 -> socket:[931297]
lrwx------ 1 qemu qemu 64 Jun 21 13:18 /proc/31804/fd/35 -> socket:[931306]
lrwx------ 1 qemu qemu 64 Jun 21 13:18 /proc/31804/fd/4 -> [signalfd]
lrwx------ 1 qemu qemu 64 Jun 21 13:18 /proc/31804/fd/6 -> [eventfd]
lrwx------ 1 qemu qemu 64 Jun 21 13:18 /proc/31804/fd/8 -> [eventfd]
[root@source ~]#
[root@source ~]# grep -E '(931291|931295|931297|931306)' /proc/net/tcp
3: 00000000:170C 00000000:0000 0A 00000000:00000000 00:00000000
00000000 107 0 931295 1 ffff88043a27f840 99 0 0 10 -1
4: 00000000:170D 00000000:0000 0A 00000000:00000000 00:00000000
00000000 107 0 931297 1 ffff88043a27f140 99 0 0 10 -1
[root@source ~]#
Further, on the source, if I query the blockjobs status, it says no
blockjob is running:
[root@source ~]# virsh list
Id Name State
----------------------------------------------------
11 test_vm paused
[root@source ~]# virsh blockjob 11 vda
No current block job for vda
[root@source ~]#
and that nc/ssh connection is still ok in the hung state:
[root@source~]# netstat -tuapn|grep \.66
tcp 0 0 10.30.76.48:48876 10.30.76.66:22
ESTABLISHED 10999/ssh
[root@source ~]#
root 10999 0.0 0.0 60024 4044 ? S 12:24 0:00
\_ ssh 10.30.76.66 sh -c 'if 'nc' -q 2>&1 | grep "requires an
argument"
>/dev/null 2>&1; then ARG=-q0;else ARG=;fi;'nc' $ARG -U
/var/run/libvirt/libvirt-sock'
Here's the state of the migration on source while its stuck like this:
[root@source ~]# virsh qemu-monitor-command 11
'{"execute":"query-migrate"}'
{"return":{"status":"completed","setup-time":2,"downtime":2451,"total-time":3753,"ram":{"total":2114785280,"postcopy-requests":0,"dirty-sync-count":3,"page-size":4096,"remaining":0,"mbps":898.199209,"transferred":421345514,"duplicate":414940,"dirty-pages-rate":0,"skipped":0,"normal-bytes":416796672,"normal":101757}},"id":"libvirt-317"}
[root@source ~]#
I'm unable the run the above command on the destination while its in this
state however, and get a lock error (which could be expected perhaps, since
it never cutover to the source yet):
[root@destination ~]# virsh list
Id Name State
-----------------------
4 test_vm paused
[root@destination ~]# virsh qemu-monitor-command 4
'{"execute":"query-migrate"}'
error: Timed out during operation: cannot acquire state change lock (held
by monitor=remoteDispatchDomainMigratePrepare3Params)
[root@destination ~]#
Does anyone have any pointers of other things I should check? Or if this
was/is a known bug in perhaps the old stable-3.2?
I haven't seen this when migrating on a host with libvirt 4.9 on both
source and destinations. However the ones I have with the older 3.2 are
centos 6 based, and aren't as easily upgraded to 4.9. Or, if anyone has
ideas of patches I could potentially look to port to 3.2 to mitigate this,
that would also be welcome. Would also be interested in forcing the cutover
in this state if possible, though I suspect that isn't safe since the
block-job isnt running while in this bad state.
Thanks in advance