similar to: nwfilter - how to protect VM's

Van: Thiago Oliveira [mailto:cpv.thiago@gmail.com] Verzonden: woensdag 25 mei 2016 14:37 Aan: Dominique Ramaekers CC: libvirt-users@redhat.com Onderwerp: Re: [libvirt-users] Windows Server 2008 - KVM Hi there! I have installed a new VM with Win2k8 and the serial virtio driver works fine. I don´t know why the other VM the BSOD happen! About the performance, I had the impression that only one

Hi there! I have installed a new VM with Win2k8 and the serial virtio driver works fine. I don´t know why the other VM the BSOD happen! About the performance, I had the impression that only one core is used.....PID 8301 is a linux VM with 4 VCPU and 2 GB of RAM... ​ 2016-05-25 3:39 GMT-03:00 Dominique Ramaekers < dominique.ramaekers@cometal.be>: > > > *Van:* Thiago

Van: Thiago Oliveira [mailto:cpv.thiago@gmail.com] Verzonden: vrijdag 20 mei 2016 15:07 Aan: Dominique Ramaekers CC: libvirt-users@redhat.com Onderwerp: Re: [libvirt-users] Windows Server 2008 - KVM Hi there! Although the guest has 2GB memory, the windows guest was adjusted to support this. I guess that the LVM is the best choice! I will save all images to other disk and re-build the partition

Hi there! I will do soon the disk config, but first I will do some labs. I´m trying to install the virtio driver to comunicate using qemu-agent but when the driver is installed, the BSOD happens (win2k8 R2). I tried with virtio-drivers version 100, 110 and 117, both happens BSOD. Do you has a tip ? :) Thanks buddy! 2016-05-20 10:23 GMT-03:00 Dominique Ramaekers <

Hi Dominique, You’ll have to convert the qcow to raw, create a LVM-volume (don’t create a file system on the volume), and dd the raw tot he LVM volume… Convert the qcow to raw, Ok Create a LVM-Volume, OK Don´t create a file system on the volume ?? Is not clear why... DD the raw to the LVM? How ? I don´t understand this point.... Thanks a lot! 2016-05-20 10:23 GMT-03:00 Dominique

Hi there! Although the guest has 2GB memory, the windows guest was adjusted to support this. I guess that the LVM is the best choice! I will save all images to other disk and re-build the partition with LVM. Do you recomend to use ext4 or zfs ? - About the apparmor, I have my doubts, I will try to disable and see what will happen! - About the tablet input device, I removed! Some forums say that

On Fri, Jun 29, 2018 at 3:40 AM Thiago Oliveira <cpv.thiago@gmail.com> wrote: > Hi Ales, > > I would like to prevent the guests from different subnets start a > communication. In other words I have the subnet 192.168.1.0/24 and > 192.168.2.0/24 and the guests from 192.168.1.0/24 cannot reach/talk with > guests on 192.168.2.0/24 at the same host. Is this possible using a

Hi, Thiago Oliveira <cpv.thiago@gmail.com> writes: > I would like to know the same! Currently I am using iptables to do it. I use ebtables. -Timo

On 05/25/2016 06:36 AM, Thiago Oliveira wrote: > Hi there! > > I have installed a new VM with Win2k8 and the serial virtio driver works > fine. I don´t know why the other VM the BSOD happen! > > About the performance, I had the impression that only one core is > used.....PID 8301 is a linux VM with 4 VCPU and 2 GB of RAM... > > >> >> You’ll have to

Hi Timo, Could you please show me a rule example that you are using? Thank you. Thiago 2017-06-05 10:48 GMT-03:00 Timo Juhani Lindfors <timo.lindfors@iki.fi>: > Hi, > > Thiago Oliveira <cpv.thiago@gmail.com> writes: > > I would like to know the same! Currently I am using iptables to do it. > > I use ebtables. > > -Timo > >

Hi there! Sure......see below. # virsh version Compiled against library: libvirt 1.3.1 Using library: libvirt 1.3.1 Using API: QEMU 1.3.1 Running hypervisor: QEMU 2.5.0 # uname -a Linux 4.4.0-22-generic #40-Ubuntu 16 <domain type='kvm' id='8'> <name>W2k8</name> <uuid>a148a0b7-eefb-9a5b-8e83-8efaf19f9899</uuid>

1. It takes minutes to start the virtual machine when I add "filterref" to libvirt.xml and run command "virsh start vm1". It also takes minutes to destroy the virtual machine. <interface type="bridge"> <mac address="fa:16:3e:fa:f7:94"/> <target dev="tap69e948b0-bf"/> <source bridge="br02"/> <model

I wasn't clear. battery.runtime.low is not a counter, but a value estimated in seconds that is decreasing conforming the battery is discharging. It's mean: How much time (in seconds) will be necessary until the battery achieve the depleted status ( http://www.networkupstools.org/protocols/sec.html#Estimated_Minutes ) . If the UPS don't have a load, this value will be higher than the

On Tue, Jun 06, 2017 at 11:37:27PM -0300, Thiago Oliveira wrote: > Daniel, > > Are you talking about XML? If yes, could please show us an example? <domain> ... <devices> .... <interface type='bridge'> <mac address='00:16:3e:5d:c7:9e'/> <filterref filter='clean-traffic'/> </interface> ....

All, I'm trying to setup a network with some virtual machines, that can connect to each other and to the internet, but neither to the host nor to other VMs. Is there any preconfigured network filter or best-practice for this setup? Of course, I could setup iptables rules on the host, but I'd prefer libvirt to handle them. - Chris

On Mon, May 08, 2017 at 03:35:19PM +0100, Daniel P. Berrange wrote: >On Sat, May 06, 2017 at 08:09:49PM -0400, Dan wrote: >> On Fri, May 5, 2017 at 4:29 PM, Nicolas Bock <nicolasbock@gmail.com> wrote: >> >> > Hi, >> > >> > I am running a webserver on the libvirt host and would like to add a >> > nwfilter such that a VM can access that

On Fri, May 5, 2017 at 4:29 PM, Nicolas Bock <nicolasbock@gmail.com> wrote: > Hi, > > I am running a webserver on the libvirt host and would like to add a > nwfilter such that a VM can access that server. The corresponding iptables > rule would look like this: > > iptables --append INPUT --in-interface virbr0 --destination 192.168.122.1 > --protocol tcp --dport 80

On Sat, May 06, 2017 at 08:09:49PM -0400, Dan wrote: > On Fri, May 5, 2017 at 4:29 PM, Nicolas Bock <nicolasbock@gmail.com> wrote: > > > Hi, > > > > I am running a webserver on the libvirt host and would like to add a > > nwfilter such that a VM can access that server. The corresponding iptables > > rule would look like this: > > > > iptables

On Mon, May 08, 2017 at 11:30:46AM -0400, Nicolas Bock wrote: > On Mon, May 08, 2017 at 03:35:19PM +0100, Daniel P. Berrange wrote: > > On Sat, May 06, 2017 at 08:09:49PM -0400, Dan wrote: > > > On Fri, May 5, 2017 at 4:29 PM, Nicolas Bock <nicolasbock@gmail.com> wrote: > > > > > > > Hi, > > > > > > > > I am running a webserver

Hi guys: After a power outage, one machine network does not enter the field more. The machine is a Windows 7 Professional. I have a Samba 4 server as the PDC. Every time I try to join in the Domain this machine is a user error and password on your computer, however they are correct. I have 15 machines in the field and only this machine with this problem. Already excludes account Samba Server