Dump Guest Memory
Hi, i've recently migrate from a kvm farm to Ovirt, by the way : excellent product. But i'm stuck on a little problem. I want to be able to dump a VM memory (forensic purpose) but i does not manage to do it. With kvm i've used the commande : "virsh dump VM out.dump", but with ovirt virsh is in read only and unable to do the dump . I look vdsClient, but it does not seem able to do this job. Someone could help me please? Thank you. -- Lionel Caignec Centre Informatique National de l' Enseignement Supérieur 950 rue de Saint Priest 34097 MONTPELLIER Cedex 5 Tel : (33) 04 67 14 14 14 Fax : (33)04 67 52 37 63 http://www.cines.fr
On 23-7-2015 9:12, Lionel Caignec wrote:
Hi,
i've recently migrate from a kvm farm to Ovirt, by the way : excellent product.
But i'm stuck on a little problem. I want to be able to dump a VM memory (forensic purpose) but i does not manage to do it.
With kvm i've used the commande : "virsh dump VM out.dump", but with ovirt virsh is in read only and unable to do the dump . I look vdsClient, but it does not seem able to do this job.
Search the list. People have asked before how to get r/w access to libvirt. There is a hacky way by adding a user and password and I think there is a tool to just do that. Had a quick google: http://lists.ovirt.org/pipermail/users/2012-May/007735.html Joop
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 23/07/15 09:33, Joop wrote:
On 23-7-2015 9:12, Lionel Caignec wrote:
Hi,
i've recently migrate from a kvm farm to Ovirt, by the way : excellent product.
But i'm stuck on a little problem. I want to be able to dump a VM memory (forensic purpose) but i does not manage to do it.
With kvm i've used the commande : "virsh dump VM out.dump", but with ovirt virsh is in read only and unable to do the dump . I look vdsClient, but it does not seem able to do this job.
Search the list. People have asked before how to get r/w access to libvirt. There is a hacky way by adding a user and password and I think there is a tool to just do that. Had a quick google: http://lists.ovirt.org/pipermail/users/2012-May/007735.html
Shouldn't read access suffice for this purpose? this should be possible with "virsh -r dump" for read only mode. No authentication needed :) HTH - -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +495772 293100 F: +495772 293333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhaus en Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJVsJvGAAoJEMby9TMDAbQRLhEQAMAx9D4TPzDDp2emIbcA32EP hRAOVfkQx7fUDoRiPWZt91xN+5Rw3aKCRmpjx4Q0wfdEm/NZr1lLxWTLHdZxSyIA EEUcM6cNREoLVEDCzkVh/5PC4sd5k1l5Uu36fTyKdh3oJ7Vb0fQapDxaqPB9UJEH Sjf1fI1CeBy/GUPSFw8o5NHG4GK3qt2Z3/BBKD62i5Nv3FHBE3snZX6Mm1SwrHrl gI/2WmeKnXPXVJgFOZmkynU4RrvrlUtmnJTv7o2YnBPW6GFiqL2XKNiN6agjFefR sOM5bgLH4t1pH5IAf3OESZTn71bIY5y3GWLMydsufn+kMiB1W26noWlf9qmwEAzH dCIHg7dQUx++p02iRtdOdeQ2AU4okCwsNxC5VhQ8gOqXtwPDBJdwVC3jqKPjHrhL 1j0N6BqhUdU8kPbNFVooWVlg5x4G6rvVN1m6gMJ3ArlUC1unS2T841s3joFZDRoz dHxv5rSXK+JD9vb7kRVnpcqL76pel1GcwAvJ2zzBJwmVZpvrvx3BodpN8scEwCHh uoyELuYjIKFfHMjrox0VdY4UHuWDSAY/hGqmrZZ18z2cvu8ImWeL+NFI+vDpfbcV AlDNh7wqx1dsF6TBCopg5TuVEGrPdKRy8Eqd9ShDbahyYc5y0NDZ3bVkDH5i9WMw Kjm7O+MuJjGmwHPcq2/8 =krQV -----END PGP SIGNATURE-----
Hi, unfortunately this command is disabled in read only mode, i've already tried. -- Lionel Caignec ----- Mail original ----- De: "Sven Kieske" <s.kieske@mittwald.de> À: users@ovirt.org Envoyé: Jeudi 23 Juillet 2015 09:46:14 Objet: Re: [ovirt-users] Dump Guest Memory -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 23/07/15 09:33, Joop wrote:
On 23-7-2015 9:12, Lionel Caignec wrote:
Hi,
i've recently migrate from a kvm farm to Ovirt, by the way : excellent product.
But i'm stuck on a little problem. I want to be able to dump a VM memory (forensic purpose) but i does not manage to do it.
With kvm i've used the commande : "virsh dump VM out.dump", but with ovirt virsh is in read only and unable to do the dump . I look vdsClient, but it does not seem able to do this job.
Search the list. People have asked before how to get r/w access to libvirt. There is a hacky way by adding a user and password and I think there is a tool to just do that. Had a quick google: http://lists.ovirt.org/pipermail/users/2012-May/007735.html
Shouldn't read access suffice for this purpose? this should be possible with "virsh -r dump" for read only mode. No authentication needed :) HTH - -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +495772 293100 F: +495772 293333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhaus en Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJVsJvGAAoJEMby9TMDAbQRLhEQAMAx9D4TPzDDp2emIbcA32EP hRAOVfkQx7fUDoRiPWZt91xN+5Rw3aKCRmpjx4Q0wfdEm/NZr1lLxWTLHdZxSyIA EEUcM6cNREoLVEDCzkVh/5PC4sd5k1l5Uu36fTyKdh3oJ7Vb0fQapDxaqPB9UJEH Sjf1fI1CeBy/GUPSFw8o5NHG4GK3qt2Z3/BBKD62i5Nv3FHBE3snZX6Mm1SwrHrl gI/2WmeKnXPXVJgFOZmkynU4RrvrlUtmnJTv7o2YnBPW6GFiqL2XKNiN6agjFefR sOM5bgLH4t1pH5IAf3OESZTn71bIY5y3GWLMydsufn+kMiB1W26noWlf9qmwEAzH dCIHg7dQUx++p02iRtdOdeQ2AU4okCwsNxC5VhQ8gOqXtwPDBJdwVC3jqKPjHrhL 1j0N6BqhUdU8kPbNFVooWVlg5x4G6rvVN1m6gMJ3ArlUC1unS2T841s3joFZDRoz dHxv5rSXK+JD9vb7kRVnpcqL76pel1GcwAvJ2zzBJwmVZpvrvx3BodpN8scEwCHh uoyELuYjIKFfHMjrox0VdY4UHuWDSAY/hGqmrZZ18z2cvu8ImWeL+NFI+vDpfbcV AlDNh7wqx1dsF6TBCopg5TuVEGrPdKRy8Eqd9ShDbahyYc5y0NDZ3bVkDH5i9WMw Kjm7O+MuJjGmwHPcq2/8 =krQV -----END PGP SIGNATURE----- _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Thank it does the job, i've used this commande : saslpasswd2 -a libvirt username -- Lionel ----- Mail original ----- De: "Joop" <jvdwege@xs4all.nl> À: users@ovirt.org Envoyé: Jeudi 23 Juillet 2015 09:33:34 Objet: Re: [ovirt-users] Dump Guest Memory On 23-7-2015 9:12, Lionel Caignec wrote:
Hi,
i've recently migrate from a kvm farm to Ovirt, by the way : excellent product.
But i'm stuck on a little problem. I want to be able to dump a VM memory (forensic purpose) but i does not manage to do it.
With kvm i've used the commande : "virsh dump VM out.dump", but with ovirt virsh is in read only and unable to do the dump . I look vdsClient, but it does not seem able to do this job.
Search the list. People have asked before how to get r/w access to libvirt. There is a hacky way by adding a user and password and I think there is a tool to just do that. Had a quick google: http://lists.ovirt.org/pipermail/users/2012-May/007735.html Joop _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Have you tried using "-r" ? virsh -r dump VM out.dmp I know it works to list the VMs. virsh -r list Diego On Jul 23, 2015 3:12 AM, "Lionel Caignec" <caignec@cines.fr> wrote:
Hi,
i've recently migrate from a kvm farm to Ovirt, by the way : excellent product.
But i'm stuck on a little problem. I want to be able to dump a VM memory (forensic purpose) but i does not manage to do it.
With kvm i've used the commande : "virsh dump VM out.dump", but with ovirt virsh is in read only and unable to do the dump . I look vdsClient, but it does not seem able to do this job.
Someone could help me please?
Thank you.
-- Lionel Caignec
Centre Informatique National de l' Enseignement Supérieur 950 rue de Saint Priest 34097 MONTPELLIER Cedex 5 Tel : (33) 04 67 14 14 14 Fax : (33)04 67 52 37 63 http://www.cines.fr
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (4)
-
Diego Remolina -
Joop -
Lionel Caignec -
Sven Kieske