[libvirt] ceph rbd key

2015-03-30 Thread Raymond Durand
Is there a way that qemu takes the key of ceph rbd from a file rather than reading it from the file cinder.conf? Going from something like rbd_secret_uuid=UUID key to something like rbd_secret_uuid=/path/to/key (to restrict the access rights to the file and avoid the secret_uuid to be readable fro

Re: [libvirt] direct device assignment

2015-03-05 Thread Raymond Durand
/page out with its own page file, this is not a problem, right? Regards, 2015-03-04 16:57 GMT+01:00 Laine Stump : > On 03/04/2015 10:27 AM, Raymond Durand wrote: > > I read this in the context of direct device assignment: "All of the > > guest's memory must kept perma

Re: [libvirt] memory ballooning and nova

2015-03-05 Thread Raymond Durand
Ok thanks. Regards, 2015-03-05 20:45 GMT+01:00 Daniel P. Berrange : > On Wed, Feb 25, 2015 at 11:38:46AM +0100, Raymond Durand wrote: > > Thanks. > > > > Is it possible to enable/disable which parameters are triggered by Nova > on > > Libvirt? ie. > > -devic

[libvirt] direct device assignment

2015-03-04 Thread Raymond Durand
I read this in the context of direct device assignment: "All of the guest's memory must kept permanently in memory. This is because the guest may program the device with any address in its address space and the hypervisor has no way of handling a DMA page fault" is it still true? Thanks, Regards,

Re: [libvirt] memory ballooning and nova

2015-02-25 Thread Raymond Durand
Thanks. Is it possible to enable/disable which parameters are triggered by Nova on Libvirt? ie. -device virtio-balloon -pci-device isa-serial Regards, 2015-02-25 11:30 GMT+01:00 Daniel P. Berrange : > On Wed, Feb 25, 2015 at 11:27:23AM +0100, Raymond Durand wrote: > > Is Libvi

[libvirt] memory ballooning and nova

2015-02-25 Thread Raymond Durand
Is Libvirt memory ballooning managed by nova in OpenStack Juno? Is Libvirt memory ballooning independent from the OpenStack "RAM allocation ratio"? and allow a VM to expand (page out) even though the overall RAM allocation ratio is already at his maximum? Thanks, Regards, -- libvir-list mailing

Re: [libvirt] libseccomp and KVM

2014-12-12 Thread Raymond Durand
Thanks. 2014-12-12 16:32 GMT+01:00 Daniel P. Berrange : > > On Fri, Dec 12, 2014 at 04:24:55PM +0100, Raymond Durand wrote: > > Thanks. > > > > How are the rules managed so as to fit the VM system calls? > > Is tuning possible? recommended? > > QEMU has a

Re: [libvirt] libseccomp and KVM

2014-12-12 Thread Raymond Durand
Thanks. 2014-12-12 17:06 GMT+01:00 Stefan Berger : > > On 12/12/2014 10:32 AM, Daniel P. Berrange wrote: > >> On Fri, Dec 12, 2014 at 04:24:55PM +0100, Raymond Durand wrote: >> >>> Thanks. >>> >>> How are the rules managed so as to fit the VM s

[libvirt] exec-shield and KVM

2014-12-12 Thread Raymond Durand
Is exec-shield protection on the KVM host relevant for VM memory protection? Regards, -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list

Re: [libvirt] libseccomp and KVM

2014-12-12 Thread Raymond Durand
Thanks. How are the rules managed so as to fit the VM system calls? Is tuning possible? recommended? Regards, 2014-12-09 17:32 GMT+01:00 Michal Privoznik : > > On 09.12.2014 15:24, Raymond Durand wrote: > >> How is libseccomp used/enabled/configured with KVM/QEMU Hypervisor? >

[libvirt] libseccomp and KVM

2014-12-09 Thread Raymond Durand
How is libseccomp used/enabled/configured with KVM/QEMU Hypervisor? Does it need a system call profiling per VMs? Regards, -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list