November 2013 - Libguestfs - libguestfs List Archives

[PATCH 1/3] Document ntreg_nk_record.flags
by Hilko Bengen 22 Nov '13

22 Nov '13

--- lib/hivex-internal.h | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/lib/hivex-internal.h b/lib/hivex-internal.h index f391b98..d7ce339 100644 --- a/lib/hivex-internal.h +++ b/lib/hivex-internal.h @@ -125,7 +125,19 @@ struct ntreg_hbin_block { struct ntreg_nk_record { int32_t seg_len; /* length (always -ve because used) */ char id[2]; /* "nk" */ - uint16_t flags; + uint16_t flags; /* bit 1: HiveExit + bit 2: HiveEntry == root key + bit 3: NoDelete + bit 4: SymbolicLink + bit 5: CompressedName: Name is encoded + in ASCII (actually: Latin-1) + rather than UTF-16. + bit 6: PredefinedHandle + bit 7: VirtMirrored + bit 8: VirtTarget + bit 9: VirtualStore */ + /* Information from: Peter Norris: The Internal Structure of the + Windows Registry, 2008, p.220 ff. */ int64_t timestamp; uint32_t unknown1; uint32_t parent; /* offset of owner/parent */ -- 1.8.4.3

2 4

Accessing iSCSI disc images from the RHEV Manager using libguestfs
by Исаев Виталий Анатольевич 22 Nov '13

22 Nov '13

Dear libguestfs developers, We are developing the protected enterprise system based on several Red Hat technologies (Red Hat Enterprise Virtualisation, the IdM server and so on). Our current goal is to prevent the booting of the virtual machine in case of integrity loss. So what we are trying to do Is to intercept the event of the VM's start (using the RHEV Manager hook scripts), mount the starting VM's disk image with libguestfs and check the hash sums of the system files. When we have a local storage of disk images (manager, hypervisor and storage - all in one host), this approach works just perfect. But even a little bit complex network (with at least one manager, one hypervisor and one iSCSI/FC storage - three standalone physical hosts) blows our minds. RHEV Manager API provides the list of disk images which are (in this configurations) are logical volumes on the hypervisor and appear in hypervisor's /dev/mapper directory. But libguestfs from RHEV manager cannot access them. Examples from libguestfs and guestfish guide (for instance, over ssh) do not work. And even more, which host should we access - a hypervisor (with a different logical volumes) or a storage (with a monolith volume group)? Software version: RHEV 3.1, libguestfs 1.16.34, guest OS - RHEL 6.4, arch: x86_64. P.S. May be I had to post this message directly to the support, but I'd suggest that this topic would be useful for community. Thank you, Виталий Исаев Инженер-программист Группа разработки и внедрения ПСЗИ Департамент информационной безопасности ОАО <Финтех>

4 26

libguestfs for RHEL 7.0 preview repository
by Richard W.M. Jones 20 Nov '13

20 Nov '13

RHEL 7.0 will ship libguestfs 1.22, supermin (replacing febootstrap) and hivex. Although the RHEL 7 alphas and betas are not public, to help people understand what the libguestfs package will look like I have put up a preview repository: http://oirase.annexia.org/tmp/libguestfs-RHEL-7.0/ This should work on top of RHEL 7 beta, for those able to use that. If you want to use these packages, the easiest thing to do is to copy the attached file into /etc/yum.repos.d/ and simply install or upgrade libguestfs. If you want to test libguestfs, run 'libguestfs-test-tool' and also try a few things here: http://libguestfs.org/guestfs-testing.1.html ** These packages aren't signed and aren't guaranteed to work and ** ** aren't supported by Red Hat. Use them at your own peril. ** Feedback is welcomed on this list. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-df lists disk usage of guests without needing to install any software inside the virtual machine. Supports Linux and Windows. http://people.redhat.com/~rjones/virt-df/

1 0

libguestfs for RHEL 6.5 preview repository
by Richard W.M. Jones 20 Nov '13

20 Nov '13

In RHEL 6.5 we are probably going to rebase libguestfs, febootstrap and virt-v2v. As usual when this happens, I've put up a preview repository: http://oirase.annexia.org/tmp/libguestfs-RHEL-6.5/ If you want to use these packages, the easiest thing to do is to copy the attached file into /etc/yum.repos.d/ and simply install or upgrade libguestfs. If you want to test libguestfs, obviously run 'libguestfs-test-tool' and also try a few things here: http://libguestfs.org/guestfs-testing.1.html ** These packages aren't signed and aren't guaranteed to work and ** ** aren't supported by Red Hat. Use them at your own peril. ** Feedback is welcomed on this list. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming blog: http://rwmj.wordpress.com Fedora now supports 80 OCaml packages (the OPEN alternative to F#)

1 1

RHSrvAny: Fix failure on Windows 2003
by Matthew Booth 18 Nov '13

18 Nov '13

The newly rebuilt RHSrvAny worked on Windows XP, Windows 2003 R2, and Windows Vista+, but segfaulted on Windows 2003. After much investigation, the issue seems to have been with inconsistent use of Unicode. This series fixes compilation on Microsoft Visual C++ 2010 (the most recent version which runs on Windows 2003), fixes all compiler warnings, and enabled warnings during the build. The resulting executable now works on Windows 2003 both when built by MSVC 2010 and mingw32 on F19. Matt

2 7

Virtio: 32bit CentOS 6.4 on VirtualBox to oVirt on Fedora 19 64bit via virt-v2v
by Owen Williams 15 Nov '13

15 Nov '13

Hello, I've trying to move a 32bit CentOS 6.4 on VirtualBox to oVirt on Fedora 19 64bit via virt-v2v. The command I'm currently using is: virt-v2v -i libvirtxml -of qcow2 -oa sparse -o rhev -osd xxx.xxx.xxx.xxx:/usr/local/ovirt/exports --network ovirtmgmt /usr1/home/williams/Downloads/OpenAthens/VMs/OpenAthensLARuntime2.2.xml The exciting bit of the XML is: <devices> <emulator>/usr/bin/qemu-kvm</emulator> <disk type='file' device='disk' snapshot='no'> <source file='/usr1/home/williams/Downloads/OpenAthens/VMs/OpenAthens_LA_Runtime_2.2.img'/> <target dev='vda' bus='virtio'/> <alias name='virtio-disk0'/> </disk> </devices> The image is a RAW (taken from the working VirtualBox install) but I have tried the original image with the same result: virtio configured, but no virtio kernel found at /usr/share/perl5/vendor_perl/Sys/VirtConvert/Converter/RedHat.pm I have looked at the code: /usr/share/perl5/vendor_perl/Sys/VirtConvert/Converter/RedHat.pm:~490 creating this and dumped the contents of the grub look up: Sys::VirtConvert::GuestfsHandle=HASH(0x433da98)< >/dev/VolGroup/lv_root< $VAR1 = bless( { 'onclose' => [ sub { "DUMMY" } ], 'g' => bless( { '_g' => 70645888, '_flags' => 0 }, 'Sys::Guestfs' ) }, 'Sys::VirtConvert::GuestfsHandle' ); If I tell the code to skip the section that calls 'die' the result becomes: virt-v2v: Failed to find a kernel_pkg.i686 package to install Any ideas on how to solve this or what the solution might, please? Best regards, Owen.

2 3

Re: [Libguestfs] [libguestfs] make_random_password(): avoid modulo bias, and do not deplete system entropy (#9)
by Richard W.M. Jones 14 Nov '13

14 Nov '13

On Thu, Nov 14, 2013 at 01:48:17AM -0800, edwintorok wrote: > Following the link to builder.ml from your blogpost I noticed the make_random_password () function, and I have some suggestions, well nitpicks really. See the 2 commits from this pull request. > > 1. Using Ocaml's buffered I/O means that one make_random_password() call reads 64k bytes from /dev/urandom which drops the system's entropy to minimum ~128 bits. The fix is to use unbuffered I/O from the Unix module. > > 2. There is a modulo bias when generating the random password: [0,256) mod 60 won't give you uniformly distributed bytes. In this particular case it probably doesn't matter, but you never know when someone copy+pastes your code into their project thinking this is a proper way to generate random passwords, so IMHO its best to avoid the modulo bias. > See here for more details: http://eternallyconfuzzled.com/arts/jsw_art_rand.aspx > And see arc4random_uniform's implementation: http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/crypt/arc4random.c?rev=1… > > 3. The generated password needs ~2^107 brute-force attempts (16 * log2(60) + log2(default_rounds=5000)), which is more than enough of course, but usually 128-bit strength is used for keys. A password length of 20 characters would achieve that. My pull request doesn't include this change, its up to you. > You can merge this Pull Request by running: > > git pull https://github.com/edwintorok/libguestfs make_random_password-fixes > > Or you can view, comment on it, or merge it online at: > > https://github.com/libguestfs/libguestfs/pull/9 > > -- Commit Summary -- > > * Do not use buffered reads on /dev/urandom > * Avoid modulo bias in random password generation > > -- File Changes -- > > M builder/builder.ml (22) > > -- Patch Links -- > > https://github.com/libguestfs/libguestfs/pull/9.patch > https://github.com/libguestfs/libguestfs/pull/9.diff I'm posting this patch to the list for review. Please follow up there as we don't use github pull requests. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones libguestfs lets you edit virtual machines. Supports shell scripting, bindings from many languages. http://libguestfs.org

1 1

Re: [Libguestfs] [libguestfs] reserved identifier violation (#6)
by Richard W.M. Jones 11 Nov '13

11 Nov '13

[I'm continuing this on the mailing list only] On Mon, Nov 11, 2013 at 06:14:18AM -0800, Markus Elfring wrote: > How do you think about to replace the prefix "guestfs__" by "guestfs_i"? No, we can't do that because such a symbol could be mistaken for public API (although on platforms which support it, we also use a linker script to avoid exporting symbols which are not in the public API). We could probably do something with _guestfs_... which AIUI is permitted. Unless this actually affects a real C++ compiler, it's pretty low on my list. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming blog: http://rwmj.wordpress.com Fedora now supports 80 OCaml packages (the OPEN alternative to F#)

1 0

Fwd: [libguestfs] debian-7 virt-builder image contains proxy configuration in apt.conf (#8)
by Richard W.M. Jones 11 Nov '13

11 Nov '13

I've just realized that these github "notifications" are not going to the mailing list. Please don't send messages via github. Rich. ---------------------------------------------------------------------- From: Daniel Miranda <notifications(a)github.com> I just created a debian-7 image with virt-builder and the generated image contained 'cache.home.annexia.org' declared as a proxy in /etc/apt/apt.conf, which breaks apt completely. It is an easy fix, and it would probably not have even showed up if it wasn't a testing machine since I manage apt configuration through Puppet, but it would be nice to know there is a procedure to avoid such customizations ending up in virt-builder images in the future. From: Richard Jones https://github.com/libguestfs/libguestfs/commit/4b2e9c9264dcebd3c5945050b7f… I'm uploading the fixed images to the website now. I also checked the Ubuntu images, but they don't appear to be affected. ----- End forwarded messages ----- -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-p2v converts physical machines to virtual machines. Boot with a live CD or over the network (PXE) and turn machines into KVM guests. http://libguestfs.org/virt-v2v

1 0

Re: [Libguestfs] [libguestfs] Add ability to set a command for firstboot and not only a script (#7)
by Richard W.M. Jones 07 Nov '13

07 Nov '13

Attaching the patch to this email. Note we don't do github pull requests: http://libguestfs.org/guestfs-faq.1.html#where-do-i-send-patches Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://people.redhat.com/~rjones/virt-top

1 1