#arpnetworks 2013-08-29,Thu

toddf

$ qemu-system-i386 -h 2>&1 | grep -i spice
-spice [port=port][,tls-port=secured-port][,x509-dir=<dir>]
enable spice

brycec

well someday you'll get around to trying it out :p

toddf

brycec: !@#%!@#%$!@^%@!#$!@#$ ok talk to me about this html5 client. I have no infoz on how to do it yet my friend insists it works yet I have no browser that can connect to his consoles without java.

brycec

http://en.wikipedia.org/wiki/SPICE_(protocol)#spice-html5 all the info I have on it now. Oh and http://cgit.freedesktop.org/spice/spice-html5/

[09:53]

toddf

oh html5 spice client.
I thought you meant html5 vnc ssl client.

[09:53]

brycec

oh, yeah, fuck that

[09:53]

toddf

looks like there's a spice-gtk and virt-viewer that might talk spice in ports of OpenBSD.. hmm..

[09:54]

rgouveia

toddf: got it to work! :-) you saved me again

[09:55]

toddf

anybody: if you figure out how to use spice to talk to qemu and/or kvm and/or proxmox let me know in a brief note like I did above for rgouveia and proxmox + ssl vnc consoles

[09:55]

brycec

does it have to be ssl vnc?
would you acceupt unencrypted vnc?

toddf

brycec: 'qm vncproxy' speaks nothing else

brycec

http://pve.proxmox.com/wiki/Vnc_2.0 suggests that can be disabled

rgouveia

tested with ssvnc

http://pve.proxmox.com/wiki/SPICE

toddf

brycec: if you can get encription all the way to kvm/qemu why would you ever want to disable it?

[09:57]

brycec

toddf: because it blocks old clients?
toddf: SPICE has its own encryption too

[09:57]

toddf

brycec: well, theres that. I see your url suggests a way to do it w/out inetd and traditional unencrypted vnc. nice too.
brycec: i bet as a corilary you could do a 'ps awwwx' and note how to do it directly with tls and not with the proxmox unix socket thing, probably break web ui consoles, but who cares if you don't use them eh?

[09:58]

rgouveia

guys, I've just tried with args stuff in the 100.conf and it works with vncviewer

[10:04]

toddf

indeed me too

[10:05]

rgouveia

i prefer that one ;-)

[10:06]

toddf

args: -serial tcp:localhost:5000,server,nowait -vnc 192.168.2.250:300,x509,password
indeed its much more straightforward

[10:06]

rgouveia

i'm already used doing ssh -L with vncviewer

[10:06]

toddf

I have openvpn to my friend's proxmox system and ipsec to a clients so using ssh -L is not needed here ;-)
/usr/bin/kvm -id 300 -chardev socket,id=qmp,path=/var/run/qemu-server/300.qmp,server,nowait -mon chardev=qmp,mode=control -vnc unix:/var/run/qemu-server/300.vnc,x509,password -pidfile /var/run/qemu-server/300.pid -daemonize -name 4.v.freedaemon.com -smp sockets=1,cores=1 -cpu Opteron_G5 -nodefaults -boot menu=on -vga cirrus -k en-us -m 1024 -cpuunits 100 -serial tcp:localhost:5000,server,nowait -vnc 192.168.2.250:300,x509,password ...
... -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/mnt/pve/nfsToddsCrap/images/300/vm-300-disk-1.qcow2,if=none,id=drive-ide0,format=qcow2,aio=native,cache=none -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive ...
... file=/mnt/pve/nfsToddsCrap/images/300/vm-300-disk-2.qcow2,if=none,id=drive-ide1,format=qcow2,cache=unsafe,aio=native -device ide-hd,bus=ide.0,unit=1,drive=drive-ide1,id=ide1 -device lsi,id=scsihw0,bus=pci.0,addr=0x5 -drive if=none,id=drive-scsi2,media=cdrom,aio=native -device scsi-cd,bus=scsihw0.0,scsi-id=2,drive=drive-scsi2,id=scsi2 -netdev type=tap,id=net0,ifname=tap300i0,script=/var/lib/qemu-server/pve-bridge -device ...
... e1000,romfile=,mac=CA:5F:74:03:4B:46,netdev=net0,bus=pci.0,addr=0x12,id=net0
looks like having multiple -vnc args results in only the last one applying
root@proxmox:/var/run/qemu-server# netstat -an | grep 30..vnc
unix 2 [ ACC ] STREAM LISTENING 19057 /var/run/qemu-server/303.vnc
unix 2 [ ACC ] STREAM LISTENING 19344 /var/run/qemu-server/304.vnc
unix 2 [ ACC ] STREAM LISTENING 18852 /var/run/qemu-server/302.vnc
unix 2 [ ACC ] STREAM LISTENING 18638 /var/run/qemu-server/301.vnc

[10:07]

rgouveia

gotta go, thanks toddf and brycec again! ttyl

[10:09]

toddf

so I guess if you wanna use the web ui with java and also hit it w/out the inetd approach will let you choose, otherwise, there's the args: method that forces it to only listen on a tcp socket

[10:10]

........ (idle for 36mn)

***

first2know has quit IRC (Remote host closed the connection)

[10:46]

..... (idle for 24mn)

up_the_irons

brycec | you could use the html5 client
brycec: what html5 client? :)
oh, html5 spice...

[11:10]

toddf: so kvm supports the x509 option for "-vnc" arg..? nice
toddf: what is the default arg they use for it to listen on <something> to connect to the web ui?
just wondering...

[11:17]

..... (idle for 21mn)

brycec

up_the_irons: by default it listens on a socket that the web ui taps somehow (via netcat)
-vnc unix:/var/run/qemu-server/101.vnc,x509,password
is the arg to qemu
and the "qm vncproxy" command is a perl script that opens the socket and listens on a port
it's apparently called whenever I click "console"

[11:40]

toddf

and the 'secure' reality is .. it listens on port 5900 long enough to establish a connection or times out; too many people hitting 'console' at the same moment doesn't exactly bode well for my tastes
up_the_irons: if your kvm instances support the x509 option, I'd be willing to submit a support request to ask that that be tweaked for my vm's .. then I wouldn't have to ssh tunnel to get to them securely anymore

[11:56]

brycec

Hey I figured out how I can replicate VirtualBox's savestate! I just run the entire proxbox instance in a VirtualBox VM of its own. VMs inside a VM, nothing can go wrong! (But it can go slowly :P)

[11:59]

toddf

savestate?
is that similar to kvm/qemu's 'stop' then 'savevm' ?
(which requires qcow2 though but anyway)

[11:59]

brycec

toddf: more like a hibernate, but from the outside of the machine

[12:02]

toddf

this is exactly what I described

[12:03]

brycec

(Saves all state, ram, etc to disk and freezes the VM)
I thought stop was equivalent to a hard poweroff?
brycec is new to KVM

[12:03]

toddf

'stop' halts the virtual hardware cold, 'savevm' preserves state, you can 'quit' then 'kvm/qemu -loadvm' upon bootup and resume after rebooting the host

[12:03]

brycec

So I can savevm after I've stopped?

[12:04]

toddf

I am confuzeled as to how multiple vm images can be saved, and if the state of the disk is consistent if you run multiple vm's in sequence, but you can do that too and explore what the ramifications are
yes
if you don't give savevm a name it will choose one for you
it saves ram and hardware state (presuming your disk image is capable of storing it)
aka raw is not eligible

[12:04]

brycec

sure, I get that
I was under the impression that "stop" would kill the process and once killed, that state information would no longer be available (like unplugging a computer)
But hey, TIL

[12:04]

toddf

(qemu) or (kvm) prompt 'stop' literally turns the cpu utilization to 0 for that instance on the host os

[12:06]

brycec

Ah, so probably not the same as the Stop button in proxmox. (I'd have to pull up the "monitor" tab to issue commands to qemu itself)

[12:06]

***

N3RG4L has quit IRC (Ping timeout: 248 seconds)
N3RG4L has joined #arpnetworks

[12:20]

toddf

correct
proxmox stop = cmdline quit
cmdline stop = 'pause all emulation for this guest'

[12:25]

***

first2know has joined #arpnetworks

[12:27]

brycec

thanks for the clarification toddf

[12:31]

up_the_irons

brycec: toddf: ah ok
toddf: i see the x509 option in the man page, but i think my libvirt is too old

[12:41]

...... (idle for 29mn)

toddf

ah so your libvirt can't do it. feel free to either a) close my support request or b) keep it around as a pet until newer libvirt can handle it

[13:11]

brycec

Or what about migrate toddf to the new boxes (>=KVR19 i think?) that have the newer stuff?

[13:18]

up_the_irons

i still think the newer boxes libvirt can't do it

[13:29]

mercutio

debian old packages again? :)

[13:29]

up_the_irons

no we're on Ubuntu

[13:30]

mercutio

ahh
ubuntu has old xen
but i have no idea what it's doing with qemu
looks like 1.0 in precise
looks like even old libvirt had some bugs with x509 so must have had some support

[13:30]

***

N3RG4L has quit IRC (Ping timeout: 248 seconds)
N3RG4L has joined #arpnetworks
FreeSpencer has quit IRC (Excess Flood)

[13:39]

FreeSpencer has joined #arpnetworks
FreeSpencer has quit IRC (Changing host)
FreeSpencer has joined #arpnetworks

[13:46]

FreeSpencer is now known as alphajeus40

[13:51]

..... (idle for 20mn)

alphajeus40 is now known as FreeSpencer
lteo has quit IRC (Changing host)
lteo has joined #arpnetworks

[14:11]

...................................... (idle for 3h9mn)

Hien has quit IRC (Quit: leaving)
Hien has joined #arpnetworks

[17:22]

....... (idle for 33mn)

N3RG4L has quit IRC (Ping timeout: 248 seconds)
N3RG4L has joined #arpnetworks

[17:59]

...... (idle for 28mn)

brycec

so it turns out that using SPICE in Proxmox is *insanely* easy

Pretty much, set the gfx card to SPICE, you'll then have a SPICE button beside Console - click to download a config and run remote-viewer $file (or setup your browser to run it)
no more Java!

[18:30]

...... (idle for 27mn)

Pro-tip: Be sure you're clicking the correct Shutdown button.
brycec just shutdown the host, not the VM

[18:58]

jpalmer

Test

brycec

Test?

jpalmer

Yep

brycec

Guess it works then.

jpalmer

Testing my irssi proxy from tablet irc client

brycec

nice
It's handy

jpalmer

Yea

brycec

but eventually I switched to znc

jpalmer

OK, back to work!
Why znc?

brycec

Gosh, I dunno... I guess because I saw other respected users on devio.us using it, so I gave it a shot and it feels good, solid, and mature
Real light too
irssi-proxy was fine, ubt I wanted a bouncer to get some backlog when I'd connect from my tablet

[19:04]

jpalmer

Ahh

[19:06]

m0unds

i just use screen and irssi
m0unds isn't hip

[19:06]

jpalmer

Same, screen and irssi. Just setup irssi-proxy
Just need to find a decent irc client for android now

[19:08]

m0unds

when i used android, i used andirc
dunno if it still exists, but it was alright

[19:08]

brycec

that sound familiar, think I used that
the lack of tab-completion was annoying

[19:09]

m0unds

i think it was the defacto android irc client for a long time

[19:09]

brycec

I know I tried a half dozen

[19:09]

m0unds

i found a pretty nice free ssh client for my ipad - server manager or something like that
supports ctrl + alt onscreen keys and stuff - i just use that to resume my screen session for irc from that particular device
http://www.spin.com/articles/chris-friedrich-caspian-bassist-dead/ <- bummer

[19:10]

gizmoguy

can I go home yet?

[19:17]

m0unds

gizmoguy: you have my permission

[19:18]

gizmoguy

m0unds: you should be my boss
I've just got back from a large work lunch that I organised
help finished off a couple jugs of ber
beer*
not like I'm gonna be much use
I'm glad it's read-only friday

[19:20]

m0unds

hahahaha
i want beer

[19:23]

brycec

fwiw toddf once I disabled the pve-enterprise apt repo, the web gui stopped bitching about a license key.

[19:36]

.............. (idle for 1h8mn)

up_the_irons

I'm enjoying weechat-android
brycec: so spice runs in your browser or how does that work?

[20:44]

read only Friday LOL

[20:52]

............ (idle for 57mn)

brycec

up_the_irons: I'm running virt-viewer http://virt-manager.org/
er http://spice-space.org/download.html
not sure which is "right" since I used a package
Apparently there is an HTML5 client though

[21:49]

up_the_irons

brycec: ah ok

[21:55]

brycec

Why I'm pissed off at Chunkhost: http://brycesawesomeapp.com/BryceBot/WhyBryceBotIsNowRetarded.png

[22:00]

up_the_irons

brycec: doesn't Chunkhost put like 100 VMs on a box? ;)

[22:01]

brycec

Wouldn't surprise me
They moved me a few weeks ago, and it went to shit
as you can see
(Also, there is a disappointing lack of IPv6 among all y'all that clicked that.)

[22:01]

gizmoguy

brycec: I'm not the one letting the team down

brycec

gizmoguy: you're in .nz eh?

gizmoguy

I'm 2001:df0
yup

brycec

sadly you're the only ipv6 hit

gizmoguy

the rest of you should be ashamed

up_the_irons

brycec: lol
brycec: yeah i don't have ipv6 at home

brycec

lame. At least tunnel that

gizmoguy

I can finally turn my v6 on again at home

brycec

tunnel through ARP even

gizmoguy

brycec: I was tunneling at home, but it killed my youtube performance

up_the_irons

i've tried it the past, performance was bad and i don't know why

brycec

well congrats on native v6 gizmoguy

up_the_irons

gizmoguy: same

gizmoguy

however I see google as of 2 days ago have finally rolled out v6 to all the GGC nodes in NZ
so I might finally get decent youtube performance on v6

brycec

brycec gets full perf with HE

gizmoguy

brycec: just hit you from the other machine on my desk
on 2001:bd00 I think

brycec

so you did dead:beef

gizmoguy

brycec

2400:bd00:dead:beef::

gizmoguy

dead:beef ftw

brycec

brycec loves those peaks - over 1 second wait on a single IO operation
brycec goes-a-stabbin
Chunkhost didn't used to be so bad...
Oh well, they drove me to ARP
And ARP is much better (though I have yet to migrate all my services, obviously)

[22:09]

.... (idle for 19mn)

up_the_irons

there is a corollary somewhere... all services start out good
otherwise they would not have survived to become bad

[22:28]

....... (idle for 31mn)

brachiation

does anyone here use arch much?

brycec

brycec

brachiation

i'm debating on whether to give it another try

brycec

not on a VM, but I do.

brachiation

just for general purpose desktop use.

brycec

Exactly what I use it for
And I'm quite happy with it

[23:01]

brachiation

i'm mostly used to debian stable and testing.

[23:01]

brycec

heh, well get used to Sid :p
That said, my desktops rarely break

[23:01]

brachiation

my only concer with sid is there would be months of updates downtime when testing freezes.

[23:02]

brycec

I wasn't suggesting Sid, only comparing Arch to Sid
i.e. rolling-release, bleeding edge

[23:02]

brachiation

i may give is a shot then. i havent used it in about 8 months or so.
and not for very long.

[23:03]

brycec

well now you get systemd, have fun

[23:03]

brachiation

brachiation is very excited to switch distros.

[23:04]

brycec

lol
probably smart to try it in a VM first
Learn any idiosyncrasies etc to minimize downtime when you do switch

[23:04]

brachiation

i'll just put all my dotfiles and keys on another machine while i switch over.
i don't keep much on my desktop pc.
and i need to repartition anyway. i think 30 gigs is too much for a system partition.

[23:05]

brycec

10 seemed safe... but I bump into that sometimes, so I'd rec 15
Android sdks take up an inordinate amount of space

[23:07]

brachiation

and i do want to mess with android sdk eventually :)

[23:07]

brycec

So do I. Then I sit down to do a Hello World or similar, but alas it's still in Java and I loathe and detest Java.
Android Studio is nice, but you still have to write Java :(

[23:08]

brachiation

bah, java.
i love how the windows java has you install crapware.

[23:11]

brycec

oh, you mean java itself? :p

[23:11]

brachiation

makes me kind of weary of oracle.
lol

[23:11]

brycec

(you can un-check the crapware during install/update)
How is Ask.com even a thing still?

brachiation

yeah i know about unchecking it, but i love how it is checked by default.

brycec

Well for now, I stick to web-based stuff. The web is so insanely cross-platform, it's glorious

brachiation

and Flash for windows has you install McAfee by default.