Displaying 20 results from an estimated 200 matches similar to: "unable to migrate when TLS is used"
2020 Aug 17
2
couple of questions
Hey folks,
I've been experimenting with native NBD live migration w/ TLS and have
a couple of questions.
1) It appears that in some cases modified default_tls_x509_cert_dir
from qemu.conf is not respected, seems like virsh always expects a
default location and does not check default_tls_x509_cert_dir:
virsh # migrate vm1 qemu+tls://ratchet.lan/system --live --persistent
--undefinesource
2020 Aug 17
0
Re: couple of questions
On Sun, Aug 16, 2020 at 22:43:30 -0700, Vjaceslavs Klimovs wrote:
> Hey folks,
> I've been experimenting with native NBD live migration w/ TLS and have
> a couple of questions.
>
> 1) It appears that in some cases modified default_tls_x509_cert_dir
> from qemu.conf is not respected, seems like virsh always expects a
> default location and does not check
2012 Aug 29
1
Use virsh command domjobinfo but get nothing
Hi, all
I test virsh comand "domjobinfo" on x86-i386 and PPC64 host. But Both
get nothing.
# virsh version
Compiled against library: libvir 0.9.13
Using library: libvir 0.9.13
Using API: QEMU 0.9.13
Running hypervisor: QEMU 1.1.50
# virsh list
Id Name State
----------------------------------------------------
21 f16-ppc-qcow2
2016 Jun 01
2
Migration problem - takes 5 minutes to start moving the memory
Hi,
I'm facing a strange issue while doing a migration from an hypervisor to another one. The migration takes for ever to start moving the memory.
The VM had no workload what so ever, just a basic ubuntu image. The versions on the hypervisors are: libvirt 1.2.21, qemu 1.2.3
Command to launche the migration:
virsh migrate --verbose --live --abort-on-error --tunnelled --p2p --auto-converge
2016 Dec 06
1
How can openstack retrieve the CPU usage of a lxc via libvirt?
Dear all,
I want to have a view of lxc CPU usage in openstack Dashboard. According the Openstack official site , Openstack Ceilometer can poll libvirt daemon to obtain CPU usage of a virtual machine. I tried the command locally on the libvirtd host "virsh -c lxc:/// domjobinfo", I got an error "error: this function is not supported by the connection driver:
2011 Oct 01
0
qemu+ssh fails with "packet received from server too large"
I'm attempting to connect to my KVM host from a remote system, but am unable
to connect using virsh. I'm able to connect if I disable sasl on the KVM
host...
The KVM host is on CentOS 6 x86_64 with libvirt-0.8.1
Here's the command I'm using,
---------
$ virsh -c qemu+ssh://kvmhost.tld/system
error: packet received from server too large
error: failed to connect to the hypervisor
2013 Aug 16
0
RHEV hosts
Hi,
I have couple of RHEV hosts (ovpxen,RHV2, RHV10 etc) and i'm trying to connect from one of the client machine (C1). All the RHEV host have libvirt modified by vdsm. It looks like the below
## beginning of configuration section by vdsm-4.10.2
listen_addr="0.0.0.0"
unix_sock_group="kvm"
unix_sock_rw_perms="0770"
auth_unix_rw="sasl"
2023 Sep 10
2
Question about encryption and tls
(Posted few days ago on qemu group but no reactions)
Do I understand correctly that ssl shoudl be configured independently
for libvirt and each hypervisor?
I asked because I configured libvirt connection as
qemu+tls://bambus.kjonca/system?pkipath=...
(and on bambus in /etc/libvirt/libvirtd.conf) I set
key_file = ...
cert_file = ...
ca_file = ...
But after connect and lauching (on bambus) vm I
2018 Feb 08
3
pjsip trunking configuration issue
Greetings !
My goal is to get Twilio trunking working, and with TLS/SRTP.
I see this concerning message in my log:
[Feb 7 16:50:26] ERROR[20596] res_sorcery_config.c: Could not create an object of type 'endpoint' with id ?twilio' from configuration file ?pjsip.conf?
Thus, ?pjsip show endpoints? does not show the endpoint for the Twilio trunk.
Hoping for a sanity check of
2015 Dec 23
1
Calibre installation fails on C7
On Tue, Dec 22, 2015 at 09:33:17PM -0800, John R Pierce wrote:
> On 12/22/2015 7:06 PM, Fred Smith wrote:
> >Attempting to install latest Calibre on Centos-7, getting:
> >
> >2015-12-22 21:32:38 URL:https://raw.githubusercontent.com/kovidgoyal/calibre/master/setup/linux-installer.py [25887/25887] -> "-" [1]
> >Installing to /home/fredex/calibre-bin/calibre
2010 Oct 21
3
Virt-v2v
Usual prologue: we're testing on CentOS 5.5, RHEL subscriptions purchased.
Now trying to use virt-v2v to transfer Win2008 Server guest from ESXi host to KVM host.
Have enabled SSH on ESXi host, and can connect using esx+ssh://esxhost, but procedure fails because nc isn't found on ESXi. Fair enough. BTW, ESXi looks like a radically cut down RH system (/etc/sysconfig being the give-away)?
2015 Dec 23
2
Calibre installation fails on C7
On Wed, December 23, 2015 00:33, John R Pierce wrote:
>
> prefixing this with, I have no idea what Calibre is...
>
Calibre is an open source e-reader that handles mobi files along with
many other e-reader formats. See: http://calibre-ebook.com/
The last version supported on CentOS6 is v1.48. The latest version is
v2.47.0.
On Tue, December 22, 2015 22:06, Fred Smith wrote:
>
2015 Dec 23
4
Calibre installation fails on C7
Attempting to install latest Calibre on Centos-7, getting:
2015-12-22 21:32:38 URL:https://raw.githubusercontent.com/kovidgoyal/calibre/master/setup/linux-installer.py [25887/25887] -> "-" [1]
Installing to /home/fredex/calibre-bin/calibre
Downloading tarball signature securely...
Traceback (most recent call last):
File "<string>", line 1, in <module>
File
virsh connect to xen:///system fails: "error: internal error: Unexpected driver type 'Xen' opened" ?
2020 May 04
2
virsh connect to xen:///system fails: "error: internal error: Unexpected driver type 'Xen' opened" ?
I'm setting up for libvirt remote access on a xend host.
On the host,
xl info | egrep "release|xen_version"
release : 5.6.10-24.gde48f93-default
xen_version : 4.13.0_12-lp151.700
systemctl --version
systemd 234
I've installed
rpm -qa libvirt-daemon-xen
libvirt-daemon-xen-6.2.0-lp151.890.1.x86_64
libvirtd --version
libvirtd (libvirt)
2016 Feb 17
2
Call for testing: OpenSSH 7.2
On Wed, 17 Feb 2016, Hisashi T Fujinaka wrote:
> And in another "oh duh" moment, I think this dumped core on two different
> machines and I sent you the bt from the wrong machine. Here's the one
> from NetBSD-7.
>
> #0 0x00007f7ff630e55a in _lwp_kill () from /usr/lib/libc.so.12
> (gdb) bt
> #0 0x00007f7ff630e55a in _lwp_kill () from /usr/lib/libc.so.12
>
2015 Dec 23
0
Calibre installation fails on C7
On Wed, Dec 23, 2015 at 09:53:38AM -0500, James B. Byrne wrote:
>
> On Wed, December 23, 2015 00:33, John R Pierce wrote:
>
> >
> > prefixing this with, I have no idea what Calibre is...
> >
>
> Calibre is an open source e-reader that handles mobi files along with
> many other e-reader formats. See: http://calibre-ebook.com/
>
> The last version
2018 May 29
2
[PATCH] Don't use deprecated API with openssl 1.1+
OpenSSL 1.1.0 has deprecated SSL_load_error_strings and
SSL_library_init. Initialization is done automatically, so they're not
needed with icecast. Fixes issue #2318
Signed-off-by: Eneas U de Queiroz <cote2004-github at yahoo.com>
---
src/tls.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/tls.c b/src/tls.c
index 36edd86..6bd1aee 100644
--- a/src/tls.c
+++ b/src/tls.c
@@
2018 May 29
1
[PATCH v2 1/1] Don't use deprecated API with openssl 1.1+
OpenSSL 1.1.0 has deprecated SSL_load_error_strings and
SSL_library_init. Initialization is done automatically, so they're not
needed with icecast. Fixes issue #2318
Signed-off-by: Eneas U de Queiroz <cote2004-github at yahoo.com>
---
src/tls.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/src/tls.c b/src/tls.c
index 36edd86..e4688c5 100644
--- a/src/tls.c
+++ b/src/tls.c
2023 May 03
1
Using pki/ssl/tls connection.
I am thinking of using tls connection between my client and server
instead of current ssh.
I found
https://libvirt.org/kbase/tlscerts.html and I want to know if it is
possible to customise some setting (e.g. use my own cert names, or
locations)
but I was not able to.
Moreover
https://github.com/libvirt/libvirt/blob/44520f6e01580d6bada88b47e5b77e6bee023ac6/src/rpc/virnettlscontext.c
suggests that
2023 Sep 11
2
Question about encryption and tls
On Sun, Sep 10, 2023 at 01:00:21PM +0200, Kamil Jo?ca wrote:
>(Posted few days ago on qemu group but no reactions)
>
>Do I understand correctly that ssl shoudl be configured independently
>for libvirt and each hypervisor?
It depends what you are asking about. There are various connections,
each of you can configure separately.
>I asked because I configured libvirt connection as