Pkg xen devel - Jan 2019 - Bug#554805: xen-utils-3.2-1: ioemu routed networking on HVM guests fails

Package: xen-utils-3.2-1
Version: 3.2.1-2
Severity: normal

Under this Xen setup, (Linux) HVM guests fail to have network active
when
running with *routed* networking, as some hosting providers require (in
my
case, OVH).

In this scenario:
 * the host is a described below
 * the guest runs as HVM.
 * the guest runs exclusively with ioemu; virtual network drivers are
not
 available (vanilla lenny guest, xen-vnif.ko does not exist,
xen-netfront
 refuses to load despite the XenBus PCI device appearing)

What xen/qemu-dm did is to build two network interfaces:
        * vifN.0 was used to send packets from the host to the guest
        routing was enabled towards this interface. No virtual hardware
        drivers took care of this network link, so all packets ended up
        dropped.

        * tapM was used by the guest to deliver packets from its virtual
        eth0.  All packets were classified "martians" by the host and
        rejected.

The reason why this happened is that the scripts/qemu-dm script
*assumes*
only bridging is ever used, and the scripts/vif-routing *assumes* only
netfront is ever used. Here we have routing and ioemu, which causes the
failure described above.

        -- Cyrille

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (800, 'testing'), (600, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-xen-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages xen-utils-3.2-1 depends on:
ii  e2fslibs               1.41.9-1          ext2/ext3/ext4 file system
librari
ii  iproute                20090324-1        networking and traffic
control too
ii  libc6                  2.9-25            GNU C Library: Shared
libraries
ii  libgcrypt11            1.4.4-4           LGPL Crypto library -
runtime libr
ii  libgnutls26            2.8.4-1           the GNU TLS library -
runtime libr
ii  libncurses5            5.7+20090803-2    shared libraries for
terminal hand
ii  libsdl1.2debian        1.2.13-2          Simple DirectMedia Layer
ii  libxenstore3.0         3.4.0-2           Xenstore communications
library fo
ii  python                 2.5.4-2           An interactive high-level
object-o
ii  python-central         0.6.11            register and build utility
for Pyt
ii  udev                   146-5             /dev/ and hotplug
management daemo
ii  xen-utils-common       3.3.1-2           XEN administrative tools -
common 
ii  zlib1g                 1:1.2.3.3.dfsg-15 compression library -
runtime

Versions of packages xen-utils-3.2-1 recommends:
ii  bridge-utils                  1.4-5      Utilities for configuring
the Linu
ii  xen-hypervisor-3.2-1-amd64 [x 3.2.1-2    The Xen Hypervisor on AMD64

Versions of packages xen-utils-3.2-1 suggests:
pn  xen-docs-3.2                  <none>     (no description available)

-- no debconf information
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.alioth.debian.org/pipermail/pkg-xen-devel/attachments/20091106/fd00540c/attachment.htm>

Control: tags -1 +upstream

On Fri, 06 Nov 2009 17:53:12 +0100 Cyrille =?ISO-8859-1?Q?Ch=E9p=E9lov?=
<cyrille.chepelov at keyconsulting.fr> wrote:

Sorry that this bug slipped through the cracks.
> The reason why this happened is that the scripts/qemu-dm script
> *assumes*
> only bridging is ever used, and the scripts/vif-routing *assumes* only
> netfront is ever used. Here we have routing and ioemu, which causes the
> failure described above.
FYI this has changed somewhat in more recent Xen and vif-route is used
for both the PV and EMU interfaces.

However there are still some issues with this config as discussed in 
http://lists.xen.org/archives/html/xen-users/2015-08/msg00003.html

In your case (only EMU no PV at all) some of the gotchas described
there ought to be avoided and the suggested change may well work.

Ian.

Processing control commands:
> tags -1 +upstream
Bug #554805 [src:xen] xen-utils-3.2-1:  ioemu routed networking on HVM guests
fails
Added tag(s) upstream.

-- 
554805: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=554805
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems

Processing control commands:
> tags -1 +upstream
Bug #554805 [src:xen] xen-utils-3.2-1:  ioemu routed networking on HVM guests
fails
Ignoring request to alter tags of bug #554805 to the same tags previously set

-- 
554805: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=554805
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems

tags 554805 + moreinfo
thanks

Hi Cyrille,

This is about the bug report about networking for HVM guests that you
filed before in the Debian bug tracker, against the Xen packages.

Your bug report was targeted at a Xen package in a Debian distribution
older than the current stable (Stretch).

Can you please help us by confirming that any of the following scenarios
does apply to your situation?

* I had this problem a long time ago. It was never solved, but I found a
workaround, which is ...
* I had this problem a long time ago, and I solved it by not using Xen
any more, but by doing ...
* I still experience this problem, and I'm still using Xen
3.2/4.1/4.4/etc. I cannot upgrade to Debian Stretch or Buster because ...
* I had this problem, and since upgrading to Stretch / Buster / ? it
seems it was solved, and I forgot to report it again. Please close it,
thanks.
* Other: ...

Note that even if you found a solution, it's still very useful to report
it back to our bug tracker. There might be someone else running into the
same problem, who can be helped with your information.

Please note that unless there's a response within a month from now, we
will close the bug report. If you discover this message later, and this
case is important to you, then you can try unarchiving the bug and
replying to it, or reach out to the maintainers email list at
pkg-xen-devel at lists.alioth.debian.org (no subscription required) and
post a message.

Thanks,
Hans van Kranenburg

Processing commands for control at bugs.debian.org:
> tags 554805 + moreinfo
Bug #554805 [src:xen] xen-utils-3.2-1:  ioemu routed networking on HVM guests
fails
Added tag(s) moreinfo.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
554805: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=554805
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems

Your message dated Fri, 22 Feb 2019 16:38:36 +0100
with message-id <88fba216-89b8-252c-d09e-787063373af8 at knorrie.org>
and subject line Re: xen-utils-3.2-1: ioemu routed networking on HVM guests
fails
has caused the Debian Bug report #554805,
regarding xen-utils-3.2-1:  ioemu routed networking on HVM guests fails
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
554805: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=554805
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Cyrille =?ISO-8859-1?Q?Ch=E9p=E9lov?= <cyrille.chepelov at
keyconsulting.fr>
Subject: xen-utils-3.2-1:  ioemu routed networking on HVM guests fails
Date: Fri, 06 Nov 2009 17:53:12 +0100
Size: 12941
URL:
<http://alioth-lists.debian.net/pipermail/pkg-xen-devel/attachments/20190222/080b7148/attachment-0002.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Hans van Kranenburg <hans at knorrie.org>
Subject: Re: xen-utils-3.2-1: ioemu routed networking on HVM guests fails
Date: Fri, 22 Feb 2019 16:38:36 +0100
Size: 7498
URL:
<http://alioth-lists.debian.net/pipermail/pkg-xen-devel/attachments/20190222/080b7148/attachment-0003.mht>