Re: [libvirt-users] Libvirt access control drivers

2018-05-14 Thread Daniel P . Berrangé
On Sat, May 12, 2018 at 11:36:08AM +0300, Anastasiya Ruzhanskaya wrote: > I actually didn't quite catch,why oVirt can't just pass user information > and you could check against it? This may require to create some > configuration files for libvirt about end users. > What is a advantage of

Re: [libvirt-users] Libvirt access control drivers

2018-05-09 Thread Daniel P . Berrangé
On Wed, May 09, 2018 at 09:46:28AM +0300, Anastasiya Ruzhanskaya wrote: > Hello! > According to the documentation access control drivers are not in really > "good condition". There is a polkit, but it can distinguish users only > according the pid. However, I have met some articles about more >

Re: [libvirt-users] Libvirt access control drivers

2018-05-09 Thread Daniel P . Berrangé
, SELinux with TCP adds an extra level of complexity as you now need to figure out IPSec setup to pass SELinux labels across the network from the client. Probably what we would more usefully add is a simple RBAC based module natively in libvirt. > 2018-05-09 11:27 GMT+03:00 Daniel P. Berrangé

Re: [libvirt-users] Multi-threaded virsh migrate

2018-05-09 Thread Daniel P . Berrangé
On Mon, May 07, 2018 at 11:55:14AM -0400, Shawn Q wrote: > Hi folk, we are using 10gb NICs with multithreaded compression. > > We're finding that the standard `virsh migrate` gets at most ~1.2gbps, > similar to a single scp session. Hmm, I didn't actively measure the throughput when I tested,

Re: [libvirt-users] Libvirt access control drivers

2018-05-09 Thread Daniel P . Berrangé
On Wed, May 09, 2018 at 11:13:01AM +0300, Anastasiya Ruzhanskaya wrote: > I read this page https://libvirt.org/aclpolkit.html > And it is written :"At this point in time, the only attribute provided by > libvirt to identify the user invoking the operation is the PID of the > client program. This

Re: [libvirt-users] Libvirt access control drivers

2018-05-09 Thread Daniel P . Berrangé
On Wed, May 09, 2018 at 11:21:22AM +0300, Anastasiya Ruzhanskaya wrote: > Ok, excuse me for misunderstanding, how it is possible then to set up > access control when I use remote connection to KVM ( not in UNIX domain)? > Is there any way within libvirt, maybe based on authentication or >

Re: [libvirt-users] Libvirt access control drivers

2018-05-09 Thread Daniel P . Berrangé
On Wed, May 09, 2018 at 10:00:19AM +0100, Daniel P. Berrangé wrote: > On Wed, May 09, 2018 at 11:50:33AM +0300, Anastasiya Ruzhanskaya wrote: > > Here https://libvirt.org/acl.html is stated that you designed this access > > control system as pluggable. Are there any options ( even

Re: [libvirt-users] about python-libvirt

2018-05-10 Thread Daniel P . Berrangé
On Thu, May 10, 2018 at 10:42:40AM +0800, lizhuoyao wrote: > hi boys: > the libvirt code in ftp://libvirt.org does get the function > of python-libvirt? Or the python-libvirt is another code ? The python code is separate - you can find links to all module downloads at:

Re: [libvirt-users] e1000 network interface takes a long time to set the link ready

2018-05-11 Thread Daniel P . Berrangé
On Thu, May 10, 2018 at 11:53:23AM -0700, Ihar Hrachyshka wrote: > Hi, > > In kubevirt, we discovered [1] that whenever e1000 is used for vNIC, > link on the interface becomes ready several seconds after 'ifup' is > executed, which for some buggy images like cirros may slow down boot > process

Re: [libvirt-users] Libvirt access control drivers

2018-05-11 Thread Daniel P . Berrangé
On Fri, May 11, 2018 at 05:25:25PM +0300, Anastasiya Ruzhanskaya wrote: > I see. I also know OpenStack uses libvirt, nova-compute has a driver for > communication. > I have briefly looked through these 10 thousand lines of code in overall on > github for openstack's libvirt driver and didn't

Re: [libvirt-users] Libvirt access control drivers

2018-05-11 Thread Daniel P . Berrangé
On Fri, May 11, 2018 at 04:26:36PM +0300, Anastasiya Ruzhanskaya wrote: > Excuse me for renewing this discussion, but I am curious if you would add > new module, which will be able to process users not based on unix > processes, from where do you plan to get usernames? I mean, virt-manager > could

Re: [libvirt-users] Guest's CPU frequency cannot be similar to host system

2018-05-18 Thread Daniel P . Berrangé
On Fri, May 18, 2018 at 10:08:38AM +0800, Allence wrote: > My resource: > kernel: 4.16.8 > host system: Ubuntu 16.04 > Llbvirt : 4.2 > Qemu : 2.12 > Cpu : intel@core i7 6700 > guest system: windows7 professional > > > My problem: > In my host, Cpu

Re: [libvirt-users] Virtio-net drivers immune to Nethammer?

2018-05-21 Thread Daniel P . Berrangé
On Sat, May 19, 2018 at 12:42:14AM +, procmem wrote: > Hi I'm a privacy distro maintainer investigating the implications of the > newly published nethammer attack [0] on KVM guests particularly the > virtio-net drivers. The summary of the paper is that rowhammer can be > remotely triggered by

Re: [libvirt-users] the version between 2.5.0 and 3.0.0

2018-05-21 Thread Daniel P . Berrangé
On Mon, May 21, 2018 at 03:48:40PM +0800, lizhuoyao wrote: > hi everyone: > I found that the next version of libvirt-2.5.0 is 3.0.0 in > https://gitlab.com/libvirt/libvirt/ or ftp://libvirt.org/libvirt/. > > Why? Is that the change between 2.5.0 and 3.0.0 is much?Then what is the > change?

Re: [libvirt-users] Amazon s3 as libvirt storage pool

2018-06-11 Thread Daniel P . Berrangé
On Sun, Jun 10, 2018 at 10:52:55AM +0530, Shashwat shagun wrote: > Namaste, > i want to use Minio (open source amazon S3 compatible object storage) as > libvirt storage pool. is such thing possible? i apologize if this is a > stupid question. if not then can i write some driver for it? There's no

Re: [libvirt-users] [libvirt] virRandomBits - not very random

2018-06-01 Thread Daniel P . Berrangé
On Wed, May 30, 2018 at 10:21:54PM +0200, Martin Kletzander wrote: > On Tue, May 29, 2018 at 10:06:25AM -0400, John Ferlan wrote: > > > > > > On 05/29/2018 09:44 AM, Michal Privoznik wrote: > > > On 05/29/2018 03:38 PM, Martin Kletzander wrote: > > > > On Fri, May 25, 2018 at 09:37:44AM -0500,

Re: [libvirt-users] Make discard='unmap' the default?

2018-06-01 Thread Daniel P . Berrangé
On Thu, May 31, 2018 at 02:34:15PM -0500, Ian Pilcher wrote: > Is it possible to make discard='unmap' the default for virtio-scsi > disks? (Related, is it possible to make virtio-scsi the default disk > type, rather than virtio-blk?) This is really a question for whatever management tool you're

Re: [libvirt-users] [libvirt] virRandomBits - not very random

2018-06-01 Thread Daniel P . Berrangé
On Fri, Jun 01, 2018 at 02:01:03PM +0200, Martin Kletzander wrote: > On Fri, Jun 01, 2018 at 11:17:44AM +0100, Daniel P. Berrangé wrote: > > On Wed, May 30, 2018 at 10:21:54PM +0200, Martin Kletzander wrote: > > > On Tue, May 29, 2018 at 10:06:25AM -0400,

Re: [libvirt-users] Make discard='unmap' the default?

2018-06-01 Thread Daniel P . Berrangé
On Fri, Jun 01, 2018 at 07:54:32AM -0500, Ian Pilcher wrote: > On 06/01/2018 05:19 AM, Daniel P. Berrangé wrote: > > On Thu, May 31, 2018 at 02:34:15PM -0500, Ian Pilcher wrote: > > > Is it possible to make discard='unmap' the default for virtio-scsi > > > disks? (Rela

Re: [libvirt-users] Make discard='unmap' the default?

2018-06-01 Thread Daniel P . Berrangé
On Fri, Jun 01, 2018 at 08:37:30AM -0500, Ian Pilcher wrote: > On 06/01/2018 08:14 AM, Daniel P. Berrangé wrote: > > Yes, it inherits some defaults to libvirt and/or QEMU. If those are not > > suitable for some reason, then virt-manager needs to override it. The > > d

Re: [libvirt-users] Create qcow2 v3 volumes via libvirt

2018-05-01 Thread Daniel P . Berrangé
On Tue, Jan 30, 2018 at 01:17:21PM +0100, Gionatan Danti wrote: > Hi all, > on a fully patched CentOS 7.4 x86-64, I see the following behavior: > > - when creating a new volumes using vol-create-as, the resulting file is a > qcow2 version 2 (compat=0.10) file. Example: > > [root@gdanti-lenovo

Re: [libvirt-users] Create qcow2 v3 volumes via libvirt

2018-05-01 Thread Daniel P . Berrangé
On Mon, Apr 30, 2018 at 08:42:56PM +0200, Gionatan Danti wrote: > Another question: how reliable are qcow2 ver2/3 files nowadays? Are you > using them in production environments? qcow2 is widely used in production at large scale in general. Just not with internal snapshots - almost everything

Re: [libvirt-users] Create qcow2 v3 volumes via libvirt

2018-05-01 Thread Daniel P . Berrangé
On Tue, May 01, 2018 at 12:35:05PM +0200, Gianluca Cecchi wrote: > On Tue, May 1, 2018 at 10:45 AM, Daniel P. Berrangé <berra...@redhat.com> > wrote: > > > On Tue, Jan 30, 2018 at 01:17:21PM +0100, Gionatan Danti wrote: > > > Hi all, > > > on a fully patched

Re: [libvirt-users] Breaking a virtlockd lock?

2018-07-03 Thread Daniel P . Berrangé
On Tue, Jul 03, 2018 at 10:20:29AM -0400, Steve Gaarder wrote: > I have several Qemu/kvm servers running VMs hosted on an NFS share, and am > using virtlockd. (lock_manager = "lockd" in qemu.conf) After a power > failure, one of the VMs will not start, claiming that it is locked. How do I > get

Re: [libvirt-users] libvirt and NAT on a system that already has a DHCP server

2018-02-01 Thread Daniel P . Berrangé
On Thu, Feb 01, 2018 at 09:19:11AM -0500, Laine Stump wrote: > On 01/30/2018 07:37 PM, j...@bluemarble.net wrote: > > I'm trying to use virt-manager and qemu/kvm on Arch Linux. The box I'm > > using is also the router for my house. It runs a kea DHCP server. When I > > try to start the default NAT

Re: [libvirt-users] libvirt on Windows

2018-02-01 Thread Daniel P . Berrangé
On Thu, Feb 01, 2018 at 01:19:03PM +, Robin Stegk wrote: > Hello, > > i am interested in developing against the libvirt library. But we would > also need an actively developed version for Windows. > The links I found on the website for Windows related builds are all > pretty outdated and do

Re: [libvirt-users] libvirt on Windows

2018-02-01 Thread Daniel P . Berrangé
On Thu, Feb 01, 2018 at 09:43:49AM -0600, Eric Blake wrote: > On 02/01/2018 08:52 AM, Daniel P. Berrangé wrote: > > > > > We actively support Windows, but *only* when compiled with the mingw > > toolchain > > and we only test this for cross-compilatio

Re: [libvirt-users] How to use /dev/net/tun from libvirt-lxc with user namespacing enabled

2018-01-31 Thread Daniel P . Berrangé
On Mon, Jan 29, 2018 at 07:01:15PM -0300, Thiago Padilha wrote: > I have a container rootfs that I use to keep all work-related stuff. This > container was originally created by lxd (which creates all containers for > use with user namespacing), but now I decided to start using libvirt for >

Re: [libvirt-users] Live update network configuration

2018-02-01 Thread Daniel P . Berrangé
On Thu, Feb 01, 2018 at 12:59:59AM +0530, Shashwat shagun wrote: > Hi, i want live update the in libvirt network xml config. is > this possible? Unfortunately we have not got such an ability expose in the API for networks, only domains :-( Regards, Daniel -- |: https://berrange.com -o-

Re: [libvirt-users] Virtualization Management Platforms

2018-02-09 Thread Daniel P . Berrangé
On Fri, Feb 09, 2018 at 10:14:28AM +0530, Prasad K wrote: > On 09/02/18 9:17 AM, TomK wrote: > > Looking for something that's relatively simple to operate, install and > > lightweight but with enough maturity to provide monitoring as well as > > holistic views of the entire physical space etc. >

Re: [libvirt-users] Nested KVM: L0 guest produces kernel BUG on wakeup from managed save (while a nested VM is running)

2018-02-08 Thread Daniel P . Berrangé
On Thu, Feb 08, 2018 at 02:47:26PM +0100, David Hildenbrand wrote: > > Sure, I do understand that Red Hat (or any other vendor) is taking no > > support responsibility for this. At this point I'd just like to > > contribute to a better understanding of what's expected to definitely > > _not_ work,

Re: [libvirt-users] Possible to edit/apply nwfilter at runtime?

2018-02-16 Thread Daniel P . Berrangé
On Fri, Feb 16, 2018 at 11:59:42AM -0500, Andre Goree wrote: > I'm trying to determine if it's possible to edit/attach/apply nwfilter rules > at runtime? I.e., after a VM is already running, can I apply a nwfilter to > the VM and have it work without rebooting the machine? Thus far, I've not >

Re: [libvirt-users] LXC Memory Limits wont work

2018-08-06 Thread Daniel P . Berrangé
On Wed, Aug 01, 2018 at 12:53:58PM +0200, Markus Raps wrote: > Hello, > > iam currently trying to run LXC Containers with libvirt > but the memory limit doesn't want to work > > in the container i see the full 32GB from the Host OS > iam pretty sure that iam missing a configline in the xml > >

Re: [libvirt-users] Mount URL as cdrom/iso KVM/QEMU

2018-08-09 Thread Daniel P . Berrangé
On Thu, Aug 09, 2018 at 10:20:54AM +, Inception Hosting wrote: > Resolved this morning, > > > the issue is that the qemu-kvm-ev rpm's released by centos have not > been compiled with curl support, I rebuild it myself from source with > curl support and it works fine now. Hmm that's bad,

Re: [libvirt-users] Mount URL as cdrom/iso KVM/QEMU

2018-08-09 Thread Daniel P . Berrangé
On Thu, Aug 09, 2018 at 10:50:46AM +, Inception Hosting wrote: > Just a quick correction and apologies, the actual issue is that http > will not work, https will so I dont think this is a bug as such I > think this is by design likely for security. > > > Looking at the man page for qemu-kvm

Re: [libvirt-users] Mount URL as cdrom/iso KVM/QEMU

2018-08-09 Thread Daniel P . Berrangé
ibvirt to drop the URL for this CDROM... > > Cheers. > > > From: Daniel P. Berrangé > Sent: 09 August 2018 12:27 > To: Inception Hosting > Cc: Vasiliy Tolstov; libvirt-users@redhat.com > Subject: Re: [libvirt-users] Mount URL

Re: [libvirt-users] LIBVIRT-4.6.0 can't work with QEMU 3.0.0

2018-08-08 Thread Daniel P . Berrangé
On Wed, Aug 08, 2018 at 10:58:50AM +0200, Holger Schranz wrote: > checking for JANSSON... no This is the problem. In 4.6.0 we just switched to using JANSSOn instead of yajl for JSON parsing. Your host doesn't have the development headers installed for jansson > configure: > configure:

Re: [libvirt-users] LIBVIRT-4.6.0 can't work with QEMU 3.0.0

2018-08-08 Thread Daniel P . Berrangé
On Wed, Aug 08, 2018 at 10:07:58AM +0200, Holger Schranz wrote: > Hello, > > if I try to use Llibvirt-4.6.0 together with qemu-3.0.0-rc4. > I run into an issue. Please see the following Memo. > > Best regards > > Holger > >

Re: [libvirt-users] Copy volume from one storage to another

2018-08-08 Thread Daniel P . Berrangé
On Wed, Aug 08, 2018 at 08:52:43PM +0530, Shashwat shagun wrote: > Hi, > I want to copy a volume from one to pool to another pool through > libvirt golang api but I’m unaware of any such functions. Can > anybody guide me a little bit here? The "StorageVol" interface in Go provides "Upload" and

Re: [libvirt-users] qemu guest agent

2018-08-15 Thread Daniel P . Berrangé
On Wed, Aug 15, 2018 at 10:47:20AM +0200, Cobin Bluth wrote: > Hello Libvirt-Users! > > I have a quick question about the qemu guest agent. > Is it possible to use the guest agent from inside the guest in order to > query the name of its own domain? > > For example, I use a base-image.qcow2 with

Re: [libvirt-users] Efficacy of jitterentropy RNG on qemu-kvm Guests

2018-08-16 Thread Daniel P . Berrangé
On Fri, Aug 10, 2018 at 08:33:00PM +, procmem wrote: > Hello. I'm a distro maintainer and was wondering about the efficacy of > entropy daemons like haveged and jitterentropyd in qemu-kvm. One of the > authors of haveged [0] pointed out if the hardware cycles counter is > emulated and

Re: [libvirt-users] Mount URL as cdrom/iso KVM/QEMU

2018-08-08 Thread Daniel P . Berrangé
On Wed, Aug 08, 2018 at 12:11:22PM +, Inception Hosting wrote: > Hi Folks, > > > According to the examples in > http://libvirt.org/formatdomain.html#elementsDisks it should be possible to > mount an iso /url as a cdrom, the example given is: > > > > > > > > >

Re: [libvirt-users] live migration via unix socket

2018-08-29 Thread Daniel P . Berrangé
On Tue, Aug 28, 2018 at 05:07:18PM -0400, David Vossel wrote: > Hey, > > Over in KubeVirt we're investigating a use case where we'd like to perform > a live migration within a network namespace that does not provide libvirtd > with network access. In this scenario we would like to perform a live

Re: [libvirt-users] Intel's latest L1TF vulnerability and libvirt

2018-09-05 Thread Daniel P . Berrangé
On Tue, Sep 04, 2018 at 11:11:30AM -0700, Paul O'Rorke wrote: > Hi, > > with regards Intels L1TF vulnerabilities, it seems they are somewhat > non-committal on whether turning off HyperThreading is required, suggesting > people > > > Consult with your hypervisor vendor for more guidance. >

Re: [libvirt-users] dmesg shows Intel Virt., lsmod shows kvm_intel; "Host does not [have] virt. options"

2018-07-10 Thread Daniel P . Berrangé
On Tue, Jul 10, 2018 at 07:47:49AM -0600, Quincy Wofford wrote: > Hello, > > I've tried over at IRC and it appears the solution to this problem may not > be obvious. > > I'm working with a Centos7 box on HP ProLiant 380p hardware. The BIOS is a > bit outdated, but both Intel Virtualization

Re: [libvirt-users] compile error libvirt-python 4.5.0 - error: unknown type name ?virNWFilterBindingPtr?

2018-07-09 Thread Daniel P . Berrangé
On Sat, Jul 07, 2018 at 09:34:27PM +0200, Holger Schranz wrote: > Hello, > > I have tried to upgrade libvirt / libvort-python from 4.4.0 to 4.5.0 [snip] > -I/usr/include/python2.7 -c libvirt-override.c -o > build/temp.linux-x86_64-2.7/libvirt-override.o > In file included from

Re: [libvirt-users] KVM or Qemu

2018-03-12 Thread Daniel P . Berrangé
On Mon, Mar 12, 2018 at 03:24:58PM -0400, Jamie Fargen wrote: > List- > > I know this may be slightly off topic and if so tell me to hit up the > emu-discuss mailing list, but does anyone know how to detect the difference > between a guest that is being fully emulates using qemu and a guest that

Re: [libvirt-users] QEMU guest-agent safety in hostile VM?

2018-02-28 Thread Daniel P . Berrangé
On Wed, Feb 28, 2018 at 06:11:52PM +, procmem wrote: > Hi. Is it still considered risky to use the QEMU guest agent in an > untrusted guest? A warning on these lines was written in the manual a > few years back when the feature made its debut. I wanted to know if it > was hardened since.

Re: [libvirt-users] Libvirt supported qemu-ga commands

2018-03-01 Thread Daniel P . Berrangé
On Wed, Feb 28, 2018 at 11:13:46PM +, procmem wrote: > Where can I find the full list of libvirt supported qemu-ga commands? > The docs [0] imply virDomainQemuAgentCommand bypasses libvirt and is not > recommended. > > I am looking to pass suspend/resume events from the host to the guest >

Re: [libvirt-users] Libvirt supported qemu-ga commands

2018-03-01 Thread Daniel P . Berrangé
On Thu, Mar 01, 2018 at 12:57:59PM +, procmem wrote: > > > Daniel P. Berrangé: > > On Wed, Feb 28, 2018 at 11:13:46PM +, procmem wrote: > >> Where can I find the full list of libvirt supported qemu-ga commands? > >> The docs [0] imply virDomain

Re: [libvirt-users] libvirt connect vmware workstation fail

2018-03-13 Thread Daniel P . Berrangé
On Tue, Mar 13, 2018 at 03:56:30PM +0800, 吴金灿 wrote: > bash: vmwarews+ssh://jc@127.0.0.1/session: No such file or directory > [jc@te ~]$ virsh -c vmwarews+ssh://jc@127.0.0.1/session > 错误:连接到管理程序失败 > 错误:不支持的操作:ssh 连接驱动程序不支持在没有套接字路径的情况下连接到会话实例 > [jc@te ~]$ virsh -c

Re: [libvirt-users] Resource control is not supported on this host

2018-03-13 Thread Daniel P . Berrangé
On Tue, Mar 13, 2018 at 05:13:52PM +0100, Peter Krempa wrote: > On Tue, Mar 13, 2018 at 15:34:00 +0100, Michal Privoznik wrote: > > On 03/13/2018 09:51 AM, Allence wrote: > > > Libvirt release version V4.1.0 > > > It add a element is cachetune > > > After we add this, We can use host-cpu-cache > >

Re: [libvirt-users] kvm-vnc question

2018-04-12 Thread Daniel P . Berrangé
On Thu, Apr 12, 2018 at 11:27:08AM +0800, 李卓瑶 wrote: > hi: > very glad writing to you,even though i don't confirm can hear from you. And > my english is poor ,so.. > > > I'm a developer on kvm from china, and i meet a question that "virsh define > geneic.xml" in arm platform failded with >

Re: [libvirt-users] qemu: qemu_thread_create: Resource temporarily unavailable

2018-04-18 Thread Daniel P . Berrangé
On Wed, Apr 18, 2018 at 06:27:10PM +0800, llilulu wrote: > Hi: > My libvirt is 3.4.0 and qemu is 2.9.0, My host has a big memory(128G), > I run many guest on my host(80 guests), when I batch stop and start guests, > some guest will crash, the qemu log is "qemu: qemu_thread_create: Resource >

Re: [libvirt-users] Add Virtlyst to the list of libvirt users

2018-04-20 Thread Daniel P . Berrangé
On Thu, Apr 19, 2018 at 09:21:28PM -0300, Daniel Nicoletti wrote: > Hi, > > I've just released v1.0.0 of Virtlyst[1] > > a web tool to manage VMs using Qt/C++/Cutelyst > > https://dantti.wordpress.com/2018/04/19/announcing-virtlyst-a-web-interface-toe-manage-virtual-machines/ Our website is

Re: [libvirt-users] virt-install --connect lxc:///

2018-03-28 Thread Daniel P . Berrangé
On Wed, Mar 28, 2018 at 04:16:50PM +0200, ales drtik wrote: > After reboot of the host i have different error message: > > root@blade1:~# virt-install --connect lxc:/// --name test_LXC --memory 128 > --filesystem /home/lxcuser/LXC,/ --init /bin/sh > WARNING No operating system detected, VM

Re: [libvirt-users] rtc_timeoffset libvirt patch

2018-03-19 Thread Daniel P . Berrangé
On Mon, Mar 19, 2018 at 05:32:32PM +0200, Volodymyr Matviiv wrote: > Hello, > > Could you please clarify if below patch is going to be released every with > some stable version of libvirt. Do you have any info which version? > >

Re: [libvirt-users] Persisting the libvirt guest's reason code.

2018-03-20 Thread Daniel P . Berrangé
On Tue, Mar 20, 2018 at 08:21:00AM +, Tanmoy Sinha wrote: > Hi, > > I am currently facing an issue with libvirt w.r.t a guest's state and > reason code. Precisely following are steps: > > 1. I have a running guest named *linux-test *on KVM > 2. I do a > * $> virsh save linux-test

Re: [libvirt-users] Attempt to migrate guest to the same host localhost.localdomain

2018-03-21 Thread Daniel P . Berrangé
On Wed, Mar 21, 2018 at 10:15:29AM +0800, llilulu wrote: > Hi > My libvirt version is 3.4.0, I migrate guest between two host, The two > host have same hostname( hostname cmd output same), I try find solution on > Internet, I find someone say host uuid same, But virsh sysinfo output uuid > is

Re: [libvirt-users] Attempt to define unprivileged LXC by libvirt

2018-03-23 Thread Daniel P . Berrangé
On Fri, Mar 23, 2018 at 02:09:39PM +0100, ales drtik wrote: > Hi, > i converted LXC conf to xml by: > > lxcuser@blade1:~/.local/share/lxc/test_deb$ virsh -c lxc:/// domxml-from- > native lxc-tools /home/lxcuser/.local/share/lxc/test_deb/config > > > test_deb >

Re: [libvirt-users] Attempt to define unprivileged LXC by libvirt

2018-03-23 Thread Daniel P . Berrangé
On Fri, Mar 23, 2018 at 02:28:11PM +0100, ales drtik wrote: > Thanks for info about that. > This means to use apparmor mandatory, isn't it true? If you enable user namespaces for the container that is sufficient to provide a secure config. None the less we still recommend /also/ adding MAC like

Re: [libvirt-users] Persisting the libvirt guest's reason code.

2018-03-20 Thread Daniel P . Berrangé
Re-adding the mailing list - please don't take discussions off-list in this way. On Tue, Mar 20, 2018 at 05:14:45PM +, Tanmoy Sinha wrote: > Daniel, > > Thanks for your prompt response. I have another question, as soon as I do > virsh save , the corresponding xml and pid under >

Re: [libvirt-users] East-west traffic network filter

2018-06-28 Thread Daniel P . Berrangé
On Thu, Jun 28, 2018 at 10:18:57AM +0200, Ales Musil wrote: > Hello, > > I would like to make filter that allows communication only between > specified VMs. Those VMs should be specified by their MAC address. The > filter should extend clean-traffic but I was not able to get it working > with

Re: [libvirt-users] Reintroduce "allocate entire disk" checkbox on virt-manager

2018-06-28 Thread Daniel P . Berrangé
On Thu, Jun 28, 2018 at 12:35:56PM +0200, Gionatan Danti wrote: > Il 26-06-2018 23:49 Cole Robinson ha scritto: > > I see it as another test case and larger UI surface in the common path > > for something that will save clicks for a corner case. I still don't see > > it asworth exposing in the UI.

Re: [libvirt-users] KVM + libvirt + nftables without iptables?

2018-10-18 Thread Daniel P . Berrangé
On Wed, Oct 17, 2018 at 05:57:11PM +0200, Roman Vesely wrote: > Hi everyone, > > I use Debian 9.5 Stretch and NFTABLES as a firewall. > Using NFTABLES together with IPTABLES is not recommended, > but libvirt depends on IPTABLES. > > Is it safe to run libvirt + kvm + virsh without IPTABLES? > >

Re: [libvirt-users] libvirt with persistent device names

2018-10-26 Thread Daniel P . Berrangé
On Fri, Oct 26, 2018 at 01:29:02PM +0200, Jan Marquardt wrote: > Hi, > > I am trying to create a logical volume storage pool with persistent > device names for the block devices, because I can't/don't want to ensure > that /dev/sd* names are persistent through reboots. > > virsh # pool-define-as

Re: [libvirt-users] virt-install and IOThreads

2019-01-18 Thread Daniel P . Berrangé
On Thu, Jan 17, 2019 at 08:46:23PM +0100, Igor Gnatenko wrote: > On Thu, Jan 17, 2019 at 4:35 PM Cole Robinson wrote: > > > > On 01/17/2019 05:58 AM, Igor Gnatenko wrote: > > > Hello, > > > > > > is there any way of specifying iothreads via virt-install command? > > > > > > I've tried appending

Re: [libvirt-users] cpu0 unhandled rdmsr:

2019-01-16 Thread Daniel P . Berrangé
On Wed, Jan 16, 2019 at 09:42:21AM +0100, Christophe Dumont wrote: > Hello, > > Do you know what this means : > > kvm: 2918: cpu0 unhandled rdmsr: 0x345 > kvm: 2918: cpu0 unhandled rdmsr: 0x1c9 > kvm: 2918: cpu0 unhandled rdmsr: 0x1a6 > kvm: 2918: cpu0 unhandled rdmsr: 0x1a7 > kvm: 2918: cpu0

Re: [libvirt-users] assigning PCI addresses with bus > 0x09

2018-12-20 Thread Daniel P . Berrangé
On Thu, Dec 20, 2018 at 03:15:34PM +0100, Riccardo Ravaioli wrote: > Hi, > > My goal is to assign PCI addresses to a number of devices (network > interfaces, disks and PCI devices in PCI-passthrough) without delegating to > libvirt the generation of those values. This should give me more control

Re: [libvirt-users] libvirt 4.1 and later - howto configure LXC with interface macvlan type='direct' ?

2018-12-05 Thread Daniel P . Berrangé
On Wed, Dec 05, 2018 at 02:43:45PM +0300, mxs kolo wrote: > Hi all > > After upgrade from Centos 7.5 to Centos 7.6, our test environment > geted new version of libvirt 4.5.0 > In which our old containers have broken config and can't start: > 2018-12-05 10:38:32.634+: 18010: debug : >

Re: [libvirt-users] console type tcp with logging

2018-12-03 Thread Daniel P . Berrangé
On Mon, Dec 03, 2018 at 01:38:45PM +0300, Vasiliy Tolstov wrote: > пн, 3 дек. 2018 г. в 12:27, Daniel P. Berrangé : > > > > We don't have any plans to add it, but if someone's interested we'd > > accept patches. It would need to integrate with our virStream APIs > > to

Re: [libvirt-users] console type tcp with logging

2018-12-03 Thread Daniel P . Berrangé
On Sun, Dec 02, 2018 at 12:34:54AM +0300, Vasiliy Tolstov wrote: > пт, 30 нояб. 2018 г. в 12:43, Daniel P. Berrangé : > > > > On Thu, Nov 29, 2018 at 08:57:54PM +0300, Vasiliy Tolstov wrote: > > > чт, 29 нояб. 2018 г. в 18:23, Daniel P. Berrangé : > > > > > &

Re: [libvirt-users] certificate pinning

2018-12-10 Thread Daniel P . Berrangé
On Sat, Dec 08, 2018 at 11:19:40AM +0300, Anastasiya Ruzhanskaya wrote: > Hello! > Does libvirt uses certificate pinning in tls? I want to setup a transparent > proxy (mitmproxy) and can't do this even after I added mitmproxy ca > certificate to the trusted certificates in ubuntu. Libvirt doesn't

Re: [libvirt-users] certificate pinning

2018-12-10 Thread Daniel P . Berrangé
u know any approaches how it can > be made in another way? The cacert.pem file can contain multiple certificates, just concatenate all the CA pem files. > > пн, 10 дек. 2018 г. в 12:38, Daniel P. Berrangé : > > > On Sat, Dec 08, 2018 at 11:19:40AM +0300, Anastasiya Ruzhanskaya

Re: [libvirt-users] certificate pinning

2018-12-10 Thread Daniel P . Berrangé
On Mon, Dec 10, 2018 at 01:22:32PM +0300, Anastasiya Ruzhanskaya wrote: > And how libvirt checks that it trusts the CA? Just simply inspects the > cacert.pem file? Or it has some information inside about by which CA were > signed client and server certificates and then compares against stored >

Re: [libvirt-users] Add trusted CA to libvirt

2018-12-10 Thread Daniel P . Berrangé
On Sat, Dec 08, 2018 at 03:02:22PM +0300, Мозолина, Надежда Викторовна wrote: > Hello! I am trying to make libvirt trust one more CA. I suppose that when > libvirt establish connection, it doesn't take into account any system > trusted CAs. And in /etc/pki/CA according to the tutorial I have only

Re: [libvirt-users] Power on and power off code using LIBVIRT

2018-12-10 Thread Daniel P . Berrangé
On Mon, Dec 10, 2018 at 02:55:12PM +0530, Chaithra Sn wrote: > Dear Team, > > Please provide the code for power on and power off the VM using Libvirt. Thre's many ways to access / interact with libvirt, so you'll need to specify what language or tool you're trying to use libvirt with. Regards,

Re: [libvirt-users] Power on and power off code using LIBVIRT

2018-12-10 Thread Daniel P . Berrangé
ned guest. The 'destroy' method will stop a running guest. > On Mon, 10 Dec 2018 at 7:10 PM, Daniel P. Berrangé > wrote: > > > On Mon, Dec 10, 2018 at 02:55:12PM +0530, Chaithra Sn wrote: > > > Dear Team, > > > > > > Please provide the code for power on and

Re: [libvirt-users] console type tcp with logging

2018-11-30 Thread Daniel P . Berrangé
On Thu, Nov 29, 2018 at 08:57:54PM +0300, Vasiliy Tolstov wrote: > чт, 29 нояб. 2018 г. в 18:23, Daniel P. Berrangé : > > > > On Thu, Nov 29, 2018 at 06:19:43PM +0300, Vasiliy Tolstov wrote: > > > Hi! I want to have ability to connect to guest console via libvirt api >

Re: [libvirt-users] console type tcp with logging

2018-11-29 Thread Daniel P . Berrangé
On Thu, Nov 29, 2018 at 06:19:43PM +0300, Vasiliy Tolstov wrote: > Hi! I want to have ability to connect to guest console via libvirt api > (and expose this data to xtermjs via websocket) with getty tty. And > also i want to have log of tty1 (do log grub, kernel booting and > errors). > What i

Re: [libvirt-users] virsh console and other language keymaps

2018-11-29 Thread Daniel P . Berrangé
On Thu, Nov 29, 2018 at 06:41:19AM -0800, Michael Taboada wrote: > Hi, > I've got a small vm server running kvm + libvirt, and I made a simple > shell script that allows users to ssh in and control their vms (power > off, etc). However, one of my users uses the french canadian keyboard > layout on

Re: [libvirt-users] Golang libvirt bindings problem

2019-01-09 Thread Daniel P . Berrangé
On Thu, Jan 03, 2019 at 01:37:51AM +, Branimir Pejakovic wrote: > Hello everybody! > > First, allow me to wish you all a Happy New year! > > I have a problem with a small app that I wrote in Go and which uses libvirt > go bindings. Actually, the problem exists only when I want to compile the

Re: [libvirt-users] LXC guest to have/make a device node (FUSE)

2019-01-22 Thread Daniel P . Berrangé
On Tue, Jan 22, 2019 at 03:25:10PM +, lejeczek wrote: > hi guys > > With lxc container under libvirt control - how can guest create device > nodes? > > I'm specifically looking for FUSE device. Is it possible somehow to get > it to the guest(passthrough?) or allow the guest to create dev

Re: [libvirt-users] SEV machines and memory pinning

2019-04-04 Thread Daniel P . Berrangé
On Wed, Apr 03, 2019 at 07:59:13PM +0200, Boris Bobrov wrote: > Hello, > > I am working on implementing SEV support in OpenStack. There are some > questions that came up in the discussion of the spec [0] > > [0] https://review.openstack.org/#/c/641994/ > > As far as i understand, the memory for

Re: [libvirt-users] How do I close a console connection?

2019-03-05 Thread Daniel P . Berrangé
On Mon, Mar 04, 2019 at 04:54:23PM -0500, Lars Kellogg-Stedman wrote: > I'm working on (re-) implementing serial console support in virtualbmc > [1], and one of the issues I'm hitting right now is that after > establishing a console connection via... > > self._stream =

Re: [libvirt-users] Obtaining the PID of a domain's QEMU process from C

2019-03-11 Thread Daniel P . Berrangé
On Mon, Mar 11, 2019 at 09:33:30AM +0100, Michal Privoznik wrote: > On 3/11/19 9:02 AM, Erik Skultety wrote: > > On Sat, Mar 09, 2019 at 04:32:00PM +0100, Michal Prívozník wrote: > > > On 3/1/19 2:31 AM, Shawn Anastasio wrote: > > > > Hello all, > > > > > > > > I'm currently writing a C program

Re: [libvirt-users] Obtaining the PID of a domain's QEMU process from C

2019-03-11 Thread Daniel P . Berrangé
On Mon, Mar 11, 2019 at 10:49:45AM +0100, Erik Skultety wrote: > On Mon, Mar 11, 2019 at 09:46:11AM +0000, Daniel P. Berrangé wrote: > > On Mon, Mar 11, 2019 at 09:33:30AM +0100, Michal Privoznik wrote: > > > On 3/11/19 9:02 AM, Erik Skultety wrote: > > > > On Sat, Ma

Re: [libvirt-users] why attach-disk can't be effective when the guest is booting

2019-03-07 Thread Daniel P . Berrangé
On Thu, Mar 07, 2019 at 05:15:49PM +0800, Jianan Gao wrote: > Hi, > When i use "virsh attach-device rhel disk.xml" when the guest is > booting,then i can't find the disk in the guest after booting.But i can > find it by "virsh domblklist rhel",and when i want to detach it from the > guest

Re: [libvirt-users] Installing libvirt and Xen on Red Hat 7.5

2019-02-06 Thread Daniel P . Berrangé
On Mon, Feb 04, 2019 at 03:57:29PM -0800, Lianjie Cao wrote: > Hi, > > I am installing OpenStack on Red Hat 7.5. For Nova compute component, I > choose libvirt and Xen. > However, I am running into some problems. It seems libvirt is unable to > communicate with Xen. [snip] > # virsh -c xen:///

Re: [libvirt-users] HELP!

2019-02-15 Thread Daniel P . Berrangé
On Fri, Feb 15, 2019 at 04:20:34PM +0100, Martin Kletzander wrote: > Please consider writing more descriptive subjects. No need to shout, too. > > On Fri, Feb 15, 2019 at 08:43:36PM +0530, Shashwat shagun wrote: > > [...] > > > func (d *DomService) Connect() error { > >var err error >

Re: [libvirt-users] Keyboard problems with VNC access

2019-01-30 Thread Daniel P . Berrangé
On Fri, Jan 25, 2019 at 04:35:12PM +, Nick Howitt wrote: > Hi, > I am pretty new to libvirt, but have succeeded in setting up two VM's, > Windows 10 and ClearOS (a Centos derivative) and they both have the same > issue. I have installed both of them with a UK English keyboard, but the > host

Re: [libvirt-users] Hook problem

2019-01-30 Thread Daniel P . Berrangé
On Wed, Jan 30, 2019 at 04:42:47PM +, David Gilmour wrote: > I am trying to use /etc/libvirt/hooks/qemu to control the startup of > several guests with interdependencies. The goal is to delay the start > of guest B until the DNS server on guest A is running. To accomplish > this, I wrote a

Re: [libvirt-users] [libvirt] Why virsh domxml-to-native qemu-argv changes PCI slot number

2019-04-18 Thread Daniel P . Berrangé
On Thu, Apr 18, 2019 at 04:23:05PM +0200, Andrea Bolognani wrote: > Moving to libvirt-users where it belongs. > > On Thu, 2019-04-18 at 06:47 +, Tal Attaly wrote: > > Hi, > > I have bridge type interface defined with slot 3 - > > > > but after running virsh domxml-to-native qemu-argv I get

Re: [libvirt-users] [libvirt] Why virsh domxml-to-native qemu-argv changes PCI slot number

2019-04-18 Thread Daniel P . Berrangé
On Thu, Apr 18, 2019 at 05:39:59PM +0200, Andrea Bolognani wrote: > On Thu, 2019-04-18 at 15:29 +0100, Daniel P. Berrangé wrote: > > On Thu, Apr 18, 2019 at 04:23:05PM +0200, Andrea Bolognani wrote: > > > qemuDomainAssignAddresses() is supposed to make sure that any addres

Re: [libvirt-users] [libvirt] JVM crashes during GC

2019-04-18 Thread Daniel P . Berrangé
On Thu, Apr 18, 2019 at 05:51:06PM +0200, Michal Prívozník wrote: > On 4/17/19 10:24 AM, Sachin Soman wrote: > > Hi, > > > > Could you tell me if the following is some known issue? > > > > While performing the following simple test, I see my JVM crashing > > (consistently): > > 1. Open a

Re: [libvirt-users] [libvirt] JVM crashes during GC

2019-04-18 Thread Daniel P . Berrangé
> System.*out*.println("gc'ing"); > > System.*gc*(); > > System.*out*.println("gc'd"); > > *int* tCounter = 0; > > *while*(tCounter++ < 20) { > > System.*out*.println("waiting.. " + tCounter); > > Thread.*sleep*(1000); > &g

Re: [libvirt-users] Development of Libvirt PHP

2019-03-08 Thread Daniel P . Berrangé
On Thu, Mar 07, 2019 at 11:55:33PM +0100, Maximilian Schieder wrote: > Hey, > I want to ask if LibVirt PHP will be develop further or if it is deprecated. Any of the language bindings are really dependent on having interested developers with the motivation to work on them. The Python, Perl and Go

Re: [libvirt-users] lxc - pass filesystem off host's automounts

2019-06-10 Thread Daniel P . Berrangé
On Mon, Jun 10, 2019 at 12:28:02PM +0100, lejeczek wrote: > hi guys > > in my qutest I have this: > > ... > >     >   >   >     > > ... > > and on the host /home/* are user home dirs which are automounted off a > glusterfs volume. > > The guest starts okey, I can see dirs under

Re: [libvirt-users] domains paused without any obvious reason

2019-05-14 Thread Daniel P . Berrangé
On Mon, May 13, 2019 at 06:19:05PM +0200, Lentes, Bernd wrote: > > > - On May 13, 2019, at 3:34 PM, Bernd Lentes > bernd.len...@helmholtz-muenchen.de wrote: > > > Hi, > > > > i have a two node HA-Cluster with several domains as resources. > > Currently it's running in test mode. > > Some

Re: [libvirt-users] Running libvirtd out of source directory connection reset error

2019-05-10 Thread Daniel P . Berrangé
On Thu, May 09, 2019 at 01:33:51PM -0400, Peter P. wrote: > Hi all, > > I'm getting started with hacking around with libvirt and am trying to > familiarize myself with launching and running an instance of libvirtd > I built from source on Centos 7.6. > > Following the instructions from

  1   2   3   4   >