search for: _host_

I have some questions regarding the way that networking is handled via qemu/kvm+libvirt -- my apologies in advance if this is not the proper mailing list for such a question. I am trying to determine how exactly I can manipulate traffic from a _guest's_ NIC using iptables on the _host_. On the host, there is a bridged virtual NIC that corresponds to the guest's NIC. That interface does not have an IP setup on it on the host, however within the vm itself the IP is configured and everything works as expected. During my testing, I've seemingly determined that traffic f...

On Thu, Jan 30, 2014 at 11:50:35AM +0530, Kashyap Chamarthy wrote: > > - Single `make` job timing to compile everything: > > > > real 31m9.792s > > user 17m18.359s > > sys 13m17.868s > > For comparison, on the _host_, the same single `make` job timing: > > real 13m41.440s > user 13m5.816s > sys 1m9.911s This is timing the build only? I'm surprised it is slower in the container. Is memory or # CPUs limited? > > > > - `make -k check` is still running as I wr...

Last night I was tinkering with `systemd-nspawn` -- namespace based container for testing, I thought I'll post what I tried with libguestfs here: Prerequisite ------------ Because of an audit subsystem incompatibility bug - rhbz#966807[1], turn off auditing by booting the host w/ 'audit=0' on Kernel command line. (NOTE: There's work in progress[2] in upstream Kernel to fix

...t networking is handled via >> qemu/kvm+libvirt -- my apologies in advance if this is not the proper >> mailing list for such a question. >> >> >> I am trying to determine how exactly I can manipulate traffic from a >> _guest's_ NIC using iptables on the _host_. > > It depends on which type of networking you are using. > > 1) If your guest is using a macvtap device to connect to the outside, > then iptables processing isn't done on the traffic. I saw something > awhile back about getting that limitation removed from macvtap in the...

...ions regarding the way that networking is handled via > qemu/kvm+libvirt -- my apologies in advance if this is not the proper > mailing list for such a question. > > > I am trying to determine how exactly I can manipulate traffic from > a _guest's_ NIC using iptables on the _host_. It depends on which type of networking you are using. 1) If your guest is using a macvtap device to connect to the outside, then iptables processing isn't done on the traffic. I saw something awhile back about getting that limitation removed from macvtap in the the kernel, but don't...

...te: > On Thu, Jan 30, 2014 at 11:50:35AM +0530, Kashyap Chamarthy wrote: >>> - Single `make` job timing to compile everything: >>> >>> real 31m9.792s >>> user 17m18.359s >>> sys 13m17.868s >> >> For comparison, on the _host_, the same single `make` job timing: >> >> real 13m41.440s >> user 13m5.816s >> sys 1m9.911s > > This is timing the build only? Yes. (I wonder if Btrfs matters here.) > > I'm surprised it is slower in the container. Is memory or # C...

...rmat=flowed I have some questions regarding the way that networking is handled via qemu/kvm+libvirt -- my apologies in advance if this is not the proper mailing list for such a question. I am trying to determine how exactly I can manipulate traffic from a?_guest's_ NIC using iptables on the _host_. On the host, there is a bridged virtual NIC that corresponds to the guest's NIC. That interface does not have an IP setup on it on the host, however within the vm itself the IP is configured and everything works as expected. During my testing, I've seemingly determined that traffic from...

...cept loopback): > > $ systemd-nspawn -bD /srv/testcontainer --private-network > [. . .] > -bash-4.2# > > - Single `make` job timing to compile everything: > > real 31m9.792s > user 17m18.359s > sys 13m17.868s For comparison, on the _host_, the same single `make` job timing: real 13m41.440s user 13m5.816s sys 1m9.911s > > - `make -k check` is still running as I write this, albeit > a bit slow. This just finished (in the container): [. . .] grep -v -E '^(examples|gnulib|perl/(blib|exa...

...n, any insight ? How did you intend to use it ? --- The second question is do you guys think that QEMU/KVM/LGUEST/etc would benefit if receive filtering was done by the host OS. Here is a specific example of what I'm talking about. We can do what qemu/hw/e1000.c:receive_filter() does in the _host_ context (that function currently runs in the guest context). By looking at libvirt, typical QEMU based setup is that you have a single bridge and all the TAPs from different VMs are hooked up to that bridge. What that means is that if one VM is getting MC traffic or when the bridge sees MACADD...

...n, any insight ? How did you intend to use it ? --- The second question is do you guys think that QEMU/KVM/LGUEST/etc would benefit if receive filtering was done by the host OS. Here is a specific example of what I'm talking about. We can do what qemu/hw/e1000.c:receive_filter() does in the _host_ context (that function currently runs in the guest context). By looking at libvirt, typical QEMU based setup is that you have a single bridge and all the TAPs from different VMs are hooked up to that bridge. What that means is that if one VM is getting MC traffic or when the bridge sees MACADD...

...e guest, we have created lvm PV on /dev/vdb (using the whole disk - no partitions) and created a volume group. The guest's hostname is "argo" and the vg is called "vg_argo_bkup". When I reboot the host, it does a vgscan and finds the volume group and activates it in the _host_, which I need to prevent (I think??). I have successfully done this by filtering "/dev/sdb" in /etc/lvm/lvm.conf (which does NOT work as advertised BTW), but referencing the extremely volatile SCSI "sd*" names seems a terrible way to do this. If I fiddle around in the HW ra...

...hel btw) chrooted environment. First of all I created simple directory with only the libs for 'bash' and 'id' tools: ---- # chroot testcase/ bash-3.1# id uid=0 gid=0 groups=0,1,2,3,4,6,10 ---- Yes, I even do not have /etc/ directory inside testcase/ , but id shows groups from the _host_ root account. I tried to create full chroot with all the libs and tools based on debian testing, but the same result: # id uid=0 gid=0 groups=0,1,2,3,4,6,10 but if I do # ls /etc/shadow /etc/passwd /etc/group /etc/group /etc/passwd /etc/shadow then # id uid=0(root) gid=0(root) groups=0(root...

...d >>> via qemu/kvm+libvirt -- my apologies in advance if this is not the >>> proper mailing list for such a question. >>> >>> >>> I am trying to determine how exactly I can manipulate traffic from a >>> _guest's_ NIC using iptables on the _host_. >> >> It depends on which type of networking you are using. >> >> 1) If your guest is using a macvtap device to connect to the outside, >> then iptables processing isn't done on the traffic. I saw something >> awhile back about getting that limitation remove...

# HG changeset patch # User Ian Campbell <ian.campbell@citrix.com> # Date 1322233890 0 # Node ID b4c07fbe3557ae501fc2d8a21b41f1b1cd5198cb # Parent 31e71820ce93b72b0223882f6c2e1f461920bda9 docs: xlexample.hvm: mention the viridian setting. Turning this on for Windows guests is recommended. Signed-off-by: Ian Campbell <ian.campbell@citrix.com> diff -r 31e71820ce93 -r b4c07fbe3557

...474m53.630s > >> user 325m54.254s > >> sys 205m58.032s > >> > >> -bash-4.2# git log | head -1 > >> commit c841d08d7084db69e81614d54423686cf0566ad6 > >> > >> > >> Again, for comparison, `make -k check` on _host_: > >> > >> real 63m1.078s > >> user 54m39.393s > >> sys 12m8.130s > > > > Is KVM available in the container? I've never tried that actually .. > > No it isn't (as Dan noted in his next thread) > > ========...

Goodmornin, Since I am running ubuntu I did " nm -D /usr/lib64/libaugeas.so.0 | grep AUGEAS " and I didn't find "AUGEAS_0.16.0" , but I got this instead : 0000000000000000 A AUGEAS_0.1.0 0000000000000000 A AUGEAS_0.10.0 0000000000000000 A AUGEAS_0.11.0 0000000000000000 A AUGEAS_0.12.0 0000000000000000 A AUGEAS_0.14.0 0000000000000000 A AUGEAS_0.15.0 0000000000000000 A

...te operations, so OpenSolaris seems to run perfectly well on this (bare metal) with even less than 1GB under "no load", but I haven''t even tried to populate with data -- how much to even idle on a 5TB RAID-Z? - This mobo clocks down RAM if using more than 2 slots. [1] Why XP as _host_? - Will sometimes run XP on bare metal for performance -- I can then simply pause the VM. - Running my pre-installed XP under VirtualBox looks like a nightmare, judging from some googling - Stability? If XP crashes, I don''t need to access my media files until XP is up and running again. W...

Hello, I''m using Red Hat AS 5 with Xen 3.0, and sometimes ''xm console'' does not work, the most of times when I''m trying to connect one full-virt machine with different arch from server, for example: [root@xen-5 ~]# xm list Name ID Mem(MiB) VCPUs State Time(s) Domain-0 0 1933 8

...tion_ssh_hostkeys.ml @@ -20,11 +20,15 @@ open Sysprep_operation module G = Guestfs -let ssh_hostkeys_perform g root = +let ssh_hostkeys_perform g root show_log = let typ = g#inspect_get_type root in if typ <> "windows" then ( let files = g#glob_expand "/etc/ssh/*_host_*" in - Array.iter g#rm files; + Array.iter ( + fun file -> + g#rm file + logging show_log "Deleted %s\n" file + ) files; [] ) else [] diff --git a/sysprep/sysprep_operation_udev_persistent_net.ml b/sysprep/sysprep_operation_udev_persistent_net.ml...

...module G = Guestfs > > -let ssh_hostkeys_perform g root side_effects = > +let ssh_hostkeys_perform (g : Guestfs.guestfs) root side_effects = > let typ = g#inspect_get_type root in > if typ <> "windows" then ( > let files = g#glob_expand "/etc/ssh/*_host_*" in > diff --git a/sysprep/sysprep_operation_ssh_userdir.ml b/sysprep/sysprep_operation_ssh_userdir.ml > index 19f8890..2ff9581 100644 > --- a/sysprep/sysprep_operation_ssh_userdir.ml > +++ b/sysprep/sysprep_operation_ssh_userdir.ml > @@ -21,7 +21,7 @@ open Common_gettext.Gette...