#libvirt — Public Fediverse posts

I think I've worked out what was wrong with my VMs on Fedora 44.

Looks like the firewall rules that Docker sets up do not play well with the ones libvirtd adds.

Forcing Docker to use nftables rather than iptables/firewalld appears to fix things

https://github.com/moby/moby/issues/52612

https://bugzilla.redhat.com/show_bug.cgi?id=2466836

#Fedora #Fedora44 #Docker #libvirt

I've imported a VM disk image into Fedora 44 boxes (I forgot to export the XML) and while it has got a IP address on the default network it doesn't appear to have access to the outside world (no NAT).

Anybody know how to enable it?

#Fedora44 #Fedora #libvirt

PSA for anyone using #QEMU #KVM for #SingleGPUPassthrough
Guides are all over the net suggesting hooks scripts invoking pci devices, unloading/loading kernel modules, and other unnecessary things. Here's my current hook script for starting the VM:

systemctl stop display-manager

That's it. And the reverse for teardown:

systemctl start display-manager

#IOMMU groups still apply, and you need to pass the correct PCI devices to your VM, but everything else is handled automatically.

Disclaimer that this is how it works currently for my AMD card. I did have a working setup with my NVIDIA card that did unload/load kernel modules, however it seems things have come a long way since I set that up.

#virtualization #libvirt #vfio

In my (short) dad time this morning, I've tried to install mgmt [1] to run a distributed hello world on my main machine running on Ubuntu LTS. The built-in binaries depend on augeas which was easy to fix. But also libvirt which is surprisingly old on Ubuntu compared to Debian (latest). I tried to build it myself but I couldn't install nex (the lexer). I then built the binary using Docker thanks to the quick start guide.

I first started to run mgmt in standalone mode. It's nice to see etcd embedded in the binary (at least for testing). Then I tried to deploy multi mgmt nodes with a standalone etcd using docker-compose. I've lost a lot of time trying to override the command because I didn't remember the expected syntax.

I was trying to make etcd listen to all interfaces so mgmt could connect when my daughter showed up.

[1] https://github.com/purpleidea/mgmt (@purpleidea)

#mgmt #homelab #selfhosting #etcd #docker #libvirt #ubuntu #debian

Updated: Resolve Libvirt Error Unable to Find EFI Firmware

- Fix redirect links

https://www.adamsdesk.com/posts/resolve-libvirt-error-unable-find-efi-firmware/

#blog #VirtualMachine #libvirt #QEMU #tech #technology

To those who still have a dedicated #Microsoft #Windows machine solely for configuring niche peripherals, no more need for moral anxiety, they get detected using a Windoze virtual machine with QEMU/KVM (requires at least a system with partial TPM 2.0 support): https://www.arscyni.cc/file/software.html#windoze:~:text=Microslop%20Windoze%20virtual%20machine

It takes slightly more attention to set it up than Oracle VirtualBox, but it runs ten times faster.

#Microslop #Windoze #EVGA #UnleashRGB #QEMU #KVM #libvirt

RE: https://furry.engineer/@Flaky/116059368890193901

lmao, Chris Titus Tech had an update to Looking Glass and now he can't access his Windows VM.

This is why vGPUs are important!

#VFIO #libvirt #KVM

GNOME Boxes: Schlanke Virtualisierung für den Linux-Desktop (und warum es für Admins trotzdem spannend ist)

https://andreas-moor.de/gnome-boxes-schlanke-virtualisierung-fuer-den-linux-desktop-und-warum-es-fuer-admins-trotzdem-spannend-ist/

Как я построил полностью изолированную пентест-лабораторию и почему ИИ нельзя доверять

Как я построил полностью изолированную пентест-лабораторию и почему ИИ нельзя доверять Уже месяц я изучаю создание пентест-инструментов (назовем это так, чтобы с модерацией проблем не было :-)) по книге "Black Hat Go", и до недавних пор я тестировал малварь на своём хосте, ибо в них нет ничего опасного, это простейшие утилиты по типу TCP-сканера. Значит, нужно построить свою виртуальную и изолированную лабу. В них должно быть минимум 3 машины: Windows 11 в роли жертвы, Ubuntu server lts в роли C2 сервака, и, конечно, классический Metasploitable2 опять же в роли жертвы. Читать, как я мучился последние 3 дня

https://habr.com/ru/articles/973434/

#изолированная_пентестлаборатория #malware_analysis #pfsense #виртуальная_сеть #виртуализация_KVM #libvirt #сетевой_изолятор #сетевые_правила_firewall #изоляция_трафика #информационная_безопасность

So … while this is obviously nice for virtualized gaming, what about video decode/encode acceleration?

Is there a way to give a #Linux guest access to the host #GPU's video codec acceleration without GPU passthrough?

Just like it's possible to pass /dev/dri into a container, can I do a similar thing with a #QEMU / #KVM virtual machine?

#libvirt #virtualization #HWAccel #VideoEncoding #VirtIO #VirtIOGPU #VirGL

So … while this is obviously nice for virtualized gaming, what about video decode/encode acceleration?

Is there a way to give a #Linux guest access to the host #GPU's video codec acceleration without GPU passthrough?

Just like it's possible to pass /dev/dri into a container, can I do a similar thing with a #QEMU / #KVM virtual machine?

#libvirt #virtualization #HWAccel #VideoEncoding #VirtIO #VirtIOGPU #VirGL

So … while this is obviously nice for virtualized gaming, what about video decode/encode acceleration?

Is there a way to give a #Linux guest access to the host #GPU's video codec acceleration without GPU passthrough?

Just like it's possible to pass /dev/dri into a container, can I do a similar thing with a #QEMU / #KVM virtual machine?

#libvirt #virtualization #HWAccel #VideoEncoding #VirtIO #VirtIOGPU #VirGL

So … while this is obviously nice for virtualized gaming, what about video decode/encode acceleration?

Is there a way to give a #Linux guest access to the host #GPU's video codec acceleration without GPU passthrough?

Just like it's possible to pass /dev/dri into a container, can I do a similar thing with a #QEMU / #KVM virtual machine?

#libvirt #virtualization #HWAccel #VideoEncoding #VirtIO #VirtIOGPU #VirGL

So … while this is obviously nice for virtualized gaming, what about video decode/encode acceleration?

Is there a way to give a #Linux guest access to the host #GPU's video codec acceleration without GPU passthrough?

Just like it's possible to pass /dev/dri into a container, can I do a similar thing with a #QEMU / #KVM virtual machine?

#libvirt #virtualization #HWAccel #VideoEncoding #VirtIO #VirtIOGPU #VirGL

Thinking of #libvirt and #xml gives me itches 😨

That's why I've been baking a simpler virtual machine manager with:

- #Vm declaration in #Toml,
- And easy #network configuration,

Thanks to #rust and #nixos, things are getting increasingly smoother... 😇

In case you want to get your hands dirty with Traefik, Kubernetes and the new GatewayAPI, I got you covered.

Here is another vagrant-libvirt setup that has #k3s, #Traefik and a #Nginx deployment. Instead of using a #Kubernetes #ingress or a Traefik ingressroute, this setup uses the #GatewayAPI resources like Gateways and HTTPRoutes.

https://codeberg.org/johanneskastl/traefik_gateway-api_on_k3s_vagrant_libvirt_ansible
https://github.com/johanneskastl/traefik_gateway-api_on_k3s_vagrant_libvirt_ansible

As usual, #Ansible does the heavy lifting and deploys everything in the cluster.

Have a lot of fun.

#k8s #Kubernetes #Traefik #Ingress #GatewayAPI #DevOps #vagrant #libvirt #Nginx #HellYeah

In in the last two week I tried to get the vagrant-libvirt setup for #Artifactory up and running.

I now have a kind-of-working setup:
https://codeberg.org/johanneskastl/artifactory_vagrant_libvirt_ansible
https://github.com/johanneskastl/artifactory_vagrant_libvirt_ansible

This #vagrant setup creates a VM and installs the official Artifactory OSS version. It works kind of well in my tests. However, I deem the official systemd unit broken by design (separate toot following). So this setup installs a new unit that worked better in my tests (but not perfect, which I think is caused by the official startup scripts).

Have fun!

#DevOps #Artifactory #vagrant #libvirt #Ansible

The #okd project has released a version of #microshift based on OKD, so of course I had to try it out.

For those not familiar with it, OKD is a kubernetes distribution and is the "upstream" of RedHat's OpenShift.

Here is a single-VM vagrant-libvirt setup that installs, configures and starts the Kubernetes cluster using #Ansible.

https://codeberg.org/johanneskastl/microshift_okd_vagrant_libvirt_ansible
https://github.com/johanneskastl/microshift_okd_vagrant_libvirt_ansible

Have a lot of fun!

#k8s #Kubernetes #Ansible #vagrant #libvirt #okd #microshift #microOKD #DevOps

The #okd project has released a version of #microshift based on OKD, so of course I had to try it out.

For those not familiar with it, OKD is a kubernetes distribution and is the "upstream" of RedHat's OpenShift.

Here is a single-VM vagrant-libvirt setup that installs, configures and starts the Kubernetes cluster using #Ansible.

https://codeberg.org/johanneskastl/microshift_okd_vagrant_libvirt_ansible
https://github.com/johanneskastl/microshift_okd_vagrant_libvirt_ansible

Have a lot of fun!

#k8s #Kubernetes #Ansible #vagrant #libvirt #okd #microshift #microOKD #DevOps

The #okd project has released a version of #microshift based on OKD, so of course I had to try it out.

For those not familiar with it, OKD is a kubernetes distribution and is the "upstream" of RedHat's OpenShift.

Here is a single-VM vagrant-libvirt setup that installs, configures and starts the Kubernetes cluster using #Ansible.

https://codeberg.org/johanneskastl/microshift_okd_vagrant_libvirt_ansible
https://github.com/johanneskastl/microshift_okd_vagrant_libvirt_ansible

Have a lot of fun!

#k8s #Kubernetes #Ansible #vagrant #libvirt #okd #microshift #microOKD #DevOps

The #okd project has released a version of #microshift based on OKD, so of course I had to try it out.

For those not familiar with it, OKD is a kubernetes distribution and is the "upstream" of RedHat's OpenShift.

Here is a single-VM vagrant-libvirt setup that installs, configures and starts the Kubernetes cluster using #Ansible.

https://codeberg.org/johanneskastl/microshift_okd_vagrant_libvirt_ansible
https://github.com/johanneskastl/microshift_okd_vagrant_libvirt_ansible

Have a lot of fun!

#k8s #Kubernetes #Ansible #vagrant #libvirt #okd #microshift #microOKD #DevOps

The #okd project has released a version of #microshift based on OKD, so of course I had to try it out.

For those not familiar with it, OKD is a kubernetes distribution and is the "upstream" of RedHat's OpenShift.

Here is a single-VM vagrant-libvirt setup that installs, configures and starts the Kubernetes cluster using #Ansible.

https://codeberg.org/johanneskastl/microshift_okd_vagrant_libvirt_ansible
https://github.com/johanneskastl/microshift_okd_vagrant_libvirt_ansible

Have a lot of fun!

#k8s #Kubernetes #Ansible #vagrant #libvirt #okd #microshift #microOKD #DevOps

....aaaaaand #OpenBao (the fork of #Hashicorp #Vault) is on its way to @opensuse #Tumbleweed in the latest version 2.2.1. Since 2.2.0 the webui is included in OpenBao, so this can be a full replacement for Vault!

Looking forward to doing more testing with it!

In case you want to try it out, here is a #vagrant #libvirt setup using #Ansible to prepare an OpenBao server VM and a client using a secret.
https://codeberg.org/johanneskastl/openbao_vagrant_libvirt_ansible

#secretmanagement #kms #devops

Today, the typical downwards spiral, from "just start up the devel VM":

$ vagrant up

Followed by: Why doesn't it start? 😕

Why libvirtd service won't restart? 😳

Finally ending, after a long search, at: Why /sys/fs/cgroups/ is empty??? 😱

Should I try to repopulate it, or just reboot? 🤔

Oh already that late? Reboot then.

#cgroups, #libvirt

Создание образа в Cloud-init

Всем привет! Это первая моя статья на Хабре, поэтому судите по всей строгости! Я рыскал по просторам интернетов и не нашел простой информации по созданию своими руками образа cloud-init, поэтому своими глазами изучал официальные маны и методом проб и ошибок теперь имею представление о том, как всё же запустить этот интересный и полезный инструмент!

https://habr.com/ru/articles/876750/

#cloud #cloudinit #linux #bash #yaml #облачные_технологии #облачные_сервисы #виртуализация #virsh #libvirt

#FediBrain moving to libvirt but still using Vagrant - only vagrant 2.4.0-1 seems to work for me - Older versions cannot download boxes, newer versions doesn't recognize libvirt. What the f... did I do wrong or is it just a mess?
#libvirt #vagrant #version #WhatAMess

#FediBrain moving to libvirt but still using Vagrant - only vagrant 2.4.0-1 seems to work for me - Older versions cannot download boxes, newer versions doesn't recognize libvirt. What the f... did I do wrong or is it just a mess?
#libvirt #vagrant #version #WhatAMess

#FediBrain moving to libvirt but still using Vagrant - only vagrant 2.4.0-1 seems to work for me - Older versions cannot download boxes, newer versions doesn't recognize libvirt. What the f... did I do wrong or is it just a mess?
#libvirt #vagrant #version #WhatAMess

#FediBrain moving to libvirt but still using Vagrant - only vagrant 2.4.0-1 seems to work for me - Older versions cannot download boxes, newer versions doesn't recognize libvirt. What the f... did I do wrong or is it just a mess?
#libvirt #vagrant #version #WhatAMess

Has anyone been able to get #Hyprland or #Niri / #NiriWM to work in an #AlpineLinux #virt-manager (#libvirt) #vm? Trying to launch Hyprland throws "failed to mkdir crash report directory".

In case this piece of knowledge is useful to someone: if you install a guest OS in #GNOMEBoxes while the host computer's network is disabled (to dodge Windows' stupid SaaS-style "online accounts as system accounts" enshittification push, for example), there is a bug where GNOME Boxes will not be able to automatically set up the virtual bridge for the guest OS to be reachable from your LAN/host via the network: https://gitlab.gnome.org/GNOME/gnome-boxes/-/issues/1122

#libvirt #virtualization #QEMU #Linux

#Virsh needs..

COLORS!!

#rust
#libvirt
#sysadmin
#docker
#linux

https://github.com/pipelight/virshle

`virshle.config.toml`

-Aggregate host info based on a connection list?

-Yes!

#libvirt
#virt
#qemu
#sysadmin
#devops

https://github.com/pipelight/virshle

Refubrishing #virsh, the #libvirt cli.
This is how I like my #vm to be displayed.

#qemu
#sysadmin
#nixos
#rust

Does anyone know a replacement for the #virsh cli before I get to deep into building one?

I am refactoring a #typescript prototype into #rust.
It mainly takes #toml machine definition instead of #xml.

#libvirt
#qemu
#virtualisation
#vm

https://github.com/pipelight/virshle

What cli do you use for guest machine #virtualisation ?
#virsh has been my go to tool ever since I begun.
Is their any other alternative!?

#kvm #qemu #libvirt #linux #vm

So... Is there no "NixOS-er" way to setup bridge networking with #libvirtd, but for the one from the wiki?

I could really use a #Nix way to setting that up instead of doing the whole write my own bridge network config and running commands manually 😅

#NixOS #NixFlake #NixFlakes #libvirt

The main problem I was facing wasn't actually related to #riscv although I experimented several times to get the right U-Boot, U-Boot environment, kernel and dtb combo. It ook my a while to figure out how to get #libvirt #LXC working. Was suspecting something missing in kernel config, but in the end it was #cgroups. Had to disable unified hiearchy to get libvirt-lxc working. Weird, but it did the trick. And I also spend quite some time debuging why my minoins can't connect to my #SaltStack master just to realize after few weeks that I changed the #IPv6 subnet on LAN and as my #DNS records are updated via Salt and as the minions can't connect, they were still pointing to the old IP. It was easilly fixed after I got my minions connected again. A little downside of IPv6 is that you easilly miss that one of those many numbers changed.

How To Fix "Cannot access storage file, Permission denied" Error in KVM Libvirt In Linux #Libvirt #Kvm #StoragePool #Virsh #Virtmanager #Vagrant #Troubleshooting #Linux
https://ostechnix.com/solved-cannot-access-storage-file-permission-denied-error-in-kvm-libvirt/

How To Change KVM Libvirt Default Storage Pool Location In Linux #Kvm #Libvirt #Storagepool #Storagevolume #Virsh #Virtmanager #Cockpit #Virtualization #Linux #Linuxhowto
https://ostechnix.com/how-to-change-kvm-libvirt-default-storage-pool-location/