libvirt users - Mar 2013 - Virsh+QEMU, SSH issue on compiled libvirt

Hi All,

I am trying to build libvirt from source, the compilation went fine and I see
that various libvirt tools are being generated, but when I try to use the
generated virsh with qemu and ssh (example virsh qemu+ssh://uri/system) I am not
able to login and it fails with the following error:

error: failed to connect to the hypervisor
error: End of file while reading data: : Input/output error

I verified the following so far:

  *   QEMU driver is being enabled (--with-qemu, --with-qemu-user,
--with-qemu-group), other options are default
  *   Permissions and ssh logging setup are all fine (the same command with a
precompiled virsh works fine)

Any ideas? Thanks for your time.

Shantan
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://listman.redhat.com/archives/libvirt-users/attachments/20130305/d65f5d04/attachment.htm>

Hi Shantan,

 

I believe the problem may be that libvirt 1.x requires TLS by default on
connections. I saw that same problem the 1st time I replaces a running
libvirt 0.9.x with 1.0.0. I believe there may be a way to turn off this
requirement in libvirtd.conf, e.g.

 

#

# Network connectivity controls

#

 

# Flag listening for secure TLS connections on the public TCP/IP port.

# NB, must pass the --listen flag to the libvirtd process for this to

# have any effect.

#

# It is necessary to setup a CA and issue server certificates before

# using this capability.

#

# This is enabled by default, uncomment this to disable it

#listen_tls = 0

 

# Listen for unencrypted TCP connections on the public TCP/IP port.

# NB, must pass the --listen flag to the libvirtd process for this to

# have any effect.

#

# Using the TCP socket requires SASL authentication by default. Only

# SASL mechanisms which support data encryption are allowed. This is

# DIGEST_MD5 and GSSAPI (Kerberos5)

#

# This is disabled by default, uncomment this to enable it.

#listen_tcp = 1
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

 

On the two instances of libvirt 1.x I have deployed, I just configure
and use TLS. Instructions on doing this may be found here:

http://wiki.libvirt.org/page/TLSSetup

 

HTH,

Will

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://listman.redhat.com/archives/libvirt-users/attachments/20130305/a3055945/attachment.htm>

On Wed, 06 Mar 2013 10:35:08 +0100, Peter Krempa wrote:
>This is true for normal connections using TCP. SSH tunneling works in a
different way.

Hi Peter,

Can you tell me why I got the "I/O Error" message (like Shantan did)
when trying qemu+ssh method against libvirtd 1.x when it worked fine
with libvirtd 0.9.x? What changed with that method between 0.9.x and
1.x? (I am somewhat new to all things libvirt, so documentation
references are gladly accepted :)

Thanks,
Will