Re: unable to migrate non shared storage in tunneled mode

2020-08-17 Thread Vjaceslavs Klimovs
On Mon, Aug 17, 2020 at 3:24 AM Peter Krempa wrote: > > On Sat, Aug 15, 2020 at 15:38:19 -0700, Vjaceslavs Klimovs wrote: > > Hey all, > > With libvirt 6.5.0 and qemu 5.1.0 migration of non shared disks in > > tunneled mode does not work for me: > > > > virsh # migrate alpinelinux3.8 qemu+tls://ra

Re: ipv6 NAT; accept_ra errors and about network choice

2020-08-17 Thread Ian Wienand
On Tue, Aug 18, 2020 at 01:32:06AM +0200, Stefano Brivio wrote: > The check comes from commit 00d28a78b5d1 ("network: check accept_ra > before enabling ipv6 forwarding"), and it's there because the accept_ra > flag works like this (from Documentation/networking/ip-sysctl.txt): > > 0

Re: Post-firewall hook to insert custom rules?

2020-08-17 Thread Gunnar Niels
On 8/17/20 10:44 AM, Laine Stump wrote: The same script will be called before the network is started, after it's shut down, and whenever a guest interface is attached or detached from the network -  the details are in the web page linked above. Hey Laine, thanks for the quick response. I think

Re: multiple vms with same PCI passthrough

2020-08-17 Thread Daniel Black
Thanks Laine, Mea Culpa, Couldn't reproduce, or found the multiple duplicate entries in the guest pci domain/bus/slot/function space which got resolved easily. [root@grit tmp]# virsh list Id Name State [root@grit tmp]# virsh list --all Id Name State

Re: multiple vms with same PCI passthrough

2020-08-17 Thread Laine Stump
On 8/8/20 11:53 PM, Daniel Black wrote: In attempting to isolate vfio-pci problems between two different guest instances, the creation of a second guest (with existing guest shutdown) resulted in:. Aug 09 12:43:23 grit libvirtd[6716]: internal error: Device :01:00.3 is already in use Au

Re: Post-firewall hook to insert custom rules?

2020-08-17 Thread Laine Stump
On 8/17/20 5:15 AM, Gunnar Niels wrote: Hello, I have a set of iptables rules that I need to insert *after* libvirt has set up all of its firewall rules. Is there a hook that I can tap into in order to run something like a custom script to make sure this happens? Any ideas? -GN You should

multiple vms with same PCI passthrough

2020-08-17 Thread Daniel Black
In attempting to isolate vfio-pci problems between two different guest instances, the creation of a second guest (with existing guest shutdown) resulted in:. Aug 09 12:43:23 grit libvirtd[6716]: internal error: Device :01:00.3 is already in use Aug 09 12:43:23 grit libvirtd[6716]: internal err

Re: couple of questions

2020-08-17 Thread Peter Krempa
On Sun, Aug 16, 2020 at 22:43:30 -0700, Vjaceslavs Klimovs wrote: > Hey folks, > I've been experimenting with native NBD live migration w/ TLS and have > a couple of questions. > > 1) It appears that in some cases modified default_tls_x509_cert_dir > from qemu.conf is not respected, seems like vir

Re: unable to migrate non shared storage in tunneled mode

2020-08-17 Thread Peter Krempa
On Sat, Aug 15, 2020 at 15:38:19 -0700, Vjaceslavs Klimovs wrote: > Hey all, > With libvirt 6.5.0 and qemu 5.1.0 migration of non shared disks in > tunneled mode does not work for me: > > virsh # migrate alpinelinux3.8 qemu+tls://ratchet.lan/system --live > --persistent --undefinesource --copy-sto

Re: Way to skip check for 'libvirt-qemu' group and user while installing guest

2020-08-17 Thread john doe
Bottom-posting. On 8/3/2020 11:56 AM, john doe wrote: Hi, Debian Buster here, I'm trying to install a guest on a sshfs mount, Libvirt is checking for the user and group 'libvirt-qemu'. Is there a way to avoid that check or has anyone a way to use a mount used by sshfs with Libvirt? The SSH ser

Post-firewall hook to insert custom rules?

2020-08-17 Thread Gunnar Niels
Hello, I have a set of iptables rules that I need to insert *after* libvirt has set up all of its firewall rules. Is there a hook that I can tap into in order to run something like a custom script to make sure this happens? Any ideas? -GN