Hi Everyone,
Can I use virt-manager from a Fedora 11 box to manage KVM VMs running on a CentOS 5.3 host? The CentOS 5.3 machine is running KVM and related RPMs from a third party repo (http://www.lfarkas.org/linux/packages/centos/5/x86_64/virt/RPMS/) .
I'm using TLS for the encryption. I followed the TLS guide on the libvirt.org website to create and install all the necessary certs and keys. I have libvirtd listening on the CentOS 5 box. When I try to connect to libvirtd with virt-manager from my Fedora 11 desktop, I see the following error on the server:
error : qemudClientReadBuf:1554 : gnutls_record_recv: A TLS packet with unexpected length was received.
So, that has me wondering if I can even connect to libvirtd on the CentOS 5 box from Fedora 11 in the first place.
Regards,
Ranbir
On Wed, 2009-08-12 at 11:28 -0400, Kanwar Ranbir Sandhu wrote:
So, that has me wondering if I can even connect to libvirtd on the CentOS 5 box from Fedora 11 in the first place.
Well, an ssh connection from virt-manager on F11 to libvirtd on CentOS 5 works (just tried it). So, at least I know that's good.
I still don't know why the TLS connection is failing.
Regards,
Ranbir
On Wed, Aug 12, 2009 at 11:28:25AM -0400, Kanwar Ranbir Sandhu wrote:
Hi Everyone,
Can I use virt-manager from a Fedora 11 box to manage KVM VMs running on a CentOS 5.3 host? The CentOS 5.3 machine is running KVM and related RPMs from a third party repo (http://www.lfarkas.org/linux/packages/centos/5/x86_64/virt/RPMS/) .
I'm using TLS for the encryption. I followed the TLS guide on the libvirt.org website to create and install all the necessary certs and keys. I have libvirtd listening on the CentOS 5 box. When I try to connect to libvirtd with virt-manager from my Fedora 11 desktop, I see the following error on the server:
error : qemudClientReadBuf:1554 : gnutls_record_recv: A TLS packet with unexpected length was received.
This is a sign of a authentication problem - you'll typically see that error when the server rejects the client's certificates, or if there is a cert prblem in genreal.
So, that has me wondering if I can even connect to libvirtd on the CentOS 5 box from Fedora 11 in the first place.
Yes, libvirt is ABI stable for its wire protocol across all releases. You will, however, be restricted to the functionality available in the libvirt version you have.
Daniel
I hope this doesn't break the thread. I'm sending this email from a client that doesn't understand threading/mail lists.
On Thu, 13 Aug 2009 09:35:06 +0100, "Daniel P. Berrange" berrange@redhat.com wrote:
This is a sign of a authentication problem - you'll typically see that error when the server rejects the client's certificates, or if there is a cert prblem in genreal.
I followed the instructions on the libvirt.org site (http://libvirt.org/remote.html) to the letter. I've even used the pki_check.sh script to check the certs/keys - no problems. So, I'm not sure where to turn next. I'm not saying there isn't a problem with my generated certs. It's just that since I don't have any experience with managing KVM hosts remotely, I've just followed the instructions blindly. Unfortunately, it be not worky! :p
So, that has me wondering if I can even connect to libvirtd on the CentOS 5 box from Fedora 11 in the first place.
Yes, libvirt is ABI stable for its wire protocol across all releases. You will, however, be restricted to the functionality available in the libvirt version you have.
Great, that's what I want to hear! So, can I create a VM on the remote KVM host by installing from an ISO image? I've tried, but virt-manager complains it can't find the ISO. I've been specifying the ISO location on the remote box.
Regards,
Kanwar Ranbir Sandhu
-
Daniel P. Berrange -
Ranbir