[fedora-virt] Problems with vnc over ssl

lidumil at vsehomir.cz lidumil at vsehomir.cz
Wed Aug 17 08:13:08 UTC 2011


Hello,

I'm using the configuration of libvirt for F15 which I was using on
F14 (libvirt 0.8.8 vs 0.8.3) . Everything is working fine except the
vnc. The vnc is running, but not over ssl. Does anybody have a hint,
what have been changed in libvirt and what I need to do to enable this
option? Thanks.

This is my config:

vnc_listen = "0.0.0.0"
vnc_tls = 1
vnc_tls_x509_cert_dir = "/somepath" //all necessary files are there
user = "root"
group = "root"

This is the log of one of the quests running on the hypervizor:

2011-08-13 03:59:40.567: starting up
LC_ALL=C PATH=/sbin:/usr/sbin:/bin:/usr/bin QEMU_AUDIO_DRV=none
/usr/libexec/qemu-kvm -S -M pc-0.14 -enable-kvm -m 512 -smp
1,sockets=1,cores=1,threads=1 -name vm27
-uuid 00000000-0000-0000-0000-000000000027 -nodefconfig -nodefaults
-chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/vm27.monitor,server,nowait
-mon chardev
=charmonitor,id=monitor,mode=control -rtc base=utc -boot dc -drive
file=/somepath/someimage.img,if=none,id=drive-ide0-0-0,format=qcow2
-device ide-drive,b
us=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0 -drive
if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device
ide-drive,bus=ide.1,unit=0,drive=drive-i
de0-1-0,id=ide0-1-0 -netdev tap,fd=21,id=hostnet0 -device
rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:00:00:1b,bus=pci.0,addr=0x3
-chardev pty,id=charserial0 -devic
e isa-serial,chardev=charserial0,id=serial0 -usb -vnc
0.0.0.0:4127,password,tls,x509=/data/libvirt/certs -k en-us -vga
cirrus -device virtio-balloon-pci,id=balloon0,
bus=pci.0,addr=0x4
char device redirected to /dev/pts/11
2011-08-13 21:15:33.638: shutting down


The system is fully updated and these are all the packages which had
been installed on the minimal instalation of F15:

yum install libvirt gnutls-devel libxml2-devel qemu-kvm qemu-kvm-tools
'*guestf*' -y
yum install net-snmp ntp kernel-devel sysstat postfix perl-Net-SCP
wget make gcc gcc-c++ java mc rsync not-yet-commons-ssl -y
yum install compat-libstdc* pciutils pam pam.i686 libstdc++.i686
zlib.i686 compat-libstdc++-33.i686 -y

The restart of libvirtd in /var/log/messages writes this:

Aug 15 00:26:22 f100 libvirtd: 00:26:22.109: 14924: warning :
qemudDispatchSignalEvent:406 : Shutting down on signal 15
Aug 15 00:26:23 f100 libvirtd: Could not find keytab file:
/etc/libvirt/krb5.tab: No such file or directory
Aug 15 00:26:23 f100 libvirtd: 00:26:23.239: 17058: info : libvirt
version: 0.8.8, package: 7.fc15 (Fedora Project, 2011-07-06-15:17:26,
x86-17.phx2.fedoraproject.org)
Aug 15 00:26:23 f100 libvirtd: 00:26:23.239: 17058: error :
virGetHostname:2634 : internal error getaddrinfo failed for 'f100':
Name or service not known


More information about the virt mailing list