Fedora xen - Aug 2009 - Using virt-manager for managing KVM VMs running on CentOS 5

Hi Everyone,

Can I use virt-manager from a Fedora 11 box to manage KVM VMs running on
a CentOS 5.3 host?  The CentOS 5.3 machine is running KVM and related
RPMs from a third party repo
(http://www.lfarkas.org/linux/packages/centos/5/x86_64/virt/RPMS/) .

I''m using TLS for the encryption.  I followed the TLS guide on the
libvirt.org website to create and install all the necessary certs and
keys.  I have libvirtd listening on the CentOS 5 box.  When I try to
connect to libvirtd with virt-manager from my Fedora 11 desktop, I see
the following error on the server:

error : qemudClientReadBuf:1554 : gnutls_record_recv: A TLS packet with
unexpected length was received.

So, that has me wondering if I can even connect to libvirtd on the
CentOS 5 box from Fedora 11 in the first place.

Regards,

Ranbir

-- 
Kanwar Ranbir Sandhu
Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 
10:54:02 up 5 days, 9:54, 5 users, load average: 2.36, 2.38, 1.27

On Wed, 2009-08-12 at 11:28 -0400, Kanwar Ranbir Sandhu
wrote:
> So, that has me wondering if I can even connect to libvirtd on the
> CentOS 5 box from Fedora 11 in the first place.
Well, an ssh connection from virt-manager on F11 to libvirtd on CentOS 5
works (just tried it).  So, at least I know that''s good.

I still don''t know why the TLS connection is failing.

Regards,

Ranbir

-- 
Kanwar Ranbir Sandhu
Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 
15:58:07 up 5 days, 14:58, 5 users, load average: 0.60, 0.24, 0.18

On Wed, Aug 12, 2009 at 11:28:25AM -0400, Kanwar Ranbir Sandhu
wrote:
> Hi Everyone,
> 
> Can I use virt-manager from a Fedora 11 box to manage KVM VMs running on
> a CentOS 5.3 host?  The CentOS 5.3 machine is running KVM and related
> RPMs from a third party repo
> (http://www.lfarkas.org/linux/packages/centos/5/x86_64/virt/RPMS/) .
> 
> I''m using TLS for the encryption.  I followed the TLS guide on the
> libvirt.org website to create and install all the necessary certs and
> keys.  I have libvirtd listening on the CentOS 5 box.  When I try to
> connect to libvirtd with virt-manager from my Fedora 11 desktop, I see
> the following error on the server:
> 
> error : qemudClientReadBuf:1554 : gnutls_record_recv: A TLS packet with
> unexpected length was received.
This is a sign of a authentication problem - you''ll typically see that
error when the server rejects the client''s certificates, or if there is
a cert prblem in genreal.
> So, that has me wondering if I can even connect to libvirtd on the
> CentOS 5 box from Fedora 11 in the first place.
Yes, libvirt is ABI stable for its wire protocol across all releases.
You will, however, be restricted to the functionality available in the
libvirt version you have.

Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|

I hope this doesn''t break the thread. I''m sending this email
from a client
that doesn''t understand threading/mail lists.

On Thu, 13 Aug 2009 09:35:06 +0100, "Daniel P. Berrange"
<berrange@redhat.com> wrote:
> This is a sign of a authentication problem - you''ll typically see
that
> error when the server rejects the client''s certificates, or if
there is
> a cert prblem in genreal.
I followed the instructions on the libvirt.org site
(http://libvirt.org/remote.html) to the letter.  I''ve even used the
pki_check.sh script to check the certs/keys - no problems.  So, I''m not
sure where to turn next.  I''m not saying there isn''t a problem
with my
generated certs. It''s just that since I don''t have any
experience with
managing KVM hosts remotely, I''ve just followed the instructions
blindly.
Unfortunately, it be not worky! :p
>> So, that has me wondering if I can even connect to libvirtd on the
>> CentOS 5 box from Fedora 11 in the first place.
> 
> Yes, libvirt is ABI stable for its wire protocol across all releases.
> You will, however, be restricted to the functionality available in the
> libvirt version you have.
Great, that''s what I want to hear!  So, can I create a VM on the remote
KVM
host by installing from an ISO image?  I''ve tried, but virt-manager
complains it can''t find the ISO.  I''ve been specifying the ISO
location on
the remote box.

Regards,

Kanwar Ranbir Sandhu