[Spice-devel] spice ssl live migration

[David Jaša]

On St, 2014-11-26 at 15:02 +0800, yao xu wrote:
> Thanks David .
> 
> 
>    I use ovirt to manage my vms , version is about 3.1, my workmates
> added some code .
> 

So the issue you see is most likely ovirt bug. The easiest way should be
to put host into maintenance, delete spice certificates and keys
from /etc/pki/vdsm/libvirt-spice (IIRC, the exact directory may be
different) and "reinstall host" again in ovirt webadmin. During
"reinstallation", the new valid certificates should be created.

BTW why are you staying on ovirt 3.1? That version is long obsolete, two
years and 4 releases passed since then...

> 
>    In our environment , we can't migrate vm continuosly. Is libvirt or
> qemu should do some configuration ? 

ovirt should configure both for you. The migration should work with no
client disconnection no matter how many times you migrated before.

David

>    
>    my libvirt version is 1.2.8 , qemu's version is 1.7.1
> 
> 
> I do appreciate your help! guys.
>    
> 
> 
> 
> 2014-10-22 21:05 GMT+08:00 David Jaša <djasa at redhat.com>:
>         Hi,
>         
>         On St, 2014-10-22 at 12:03 +0800, yao xu wrote:
>         > Hi all!
>         >
>         >
>         > I am using spice and ovirt(a old version).
>         >
>         >
>         > when  I use remote-viewer with correct ssl certifacate to
>         connect the
>         > vm , and then live migrate the vm to another host ,
>         
>         The certificates for both hosts have to be issued by the same
>         CA.
>         
>         >
>         >
>         > remote-viewer is dead .I must reconnect the vm .
>         >
>         >
>         > Can I use remote-viewer continuous when the vm is migrating?
>         How to
>         > configure the ssl certificate ?
>         
>         Yes, you can. Configuration may be different based on the way
>         you launch
>         the VMs: e.g. when you use oVirt/RHEV, it will take care of
>         correct TLS
>         setup automatically. Libvirt can do most of the tasks for you
>         but you
>         still have to set up certificates correctly yourself and when
>         you use
>         plain qemu, you have to feed correct configuration even to
>         qemu monitor.
>         
>         So: how do you manage your VMs?
>         
>         David
>         
>         >
>         >
>         > Thank you .
>         > _______________________________________________
>         > Spice-devel mailing list
>         > Spice-devel at lists.freedesktop.org
>         > http://lists.freedesktop.org/mailman/listinfo/spice-devel
>         
>         
> 
> 
> _______________________________________________
> Spice-devel mailing list
> Spice-devel at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/spice-devel