From mboxrd@z Thu Jan 1 00:00:00 1970 From: Soren Hansen Subject: Re: loadvm: "Error -1 while loading VM state" Date: Tue, 1 Jul 2008 22:47:05 +0200 Message-ID: <20080701204705.GK7963@ralph.linux2go.dk> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="dfmC41YZQlborXoK" To: kvm@vger.kernel.org Return-path: Received: from atlas.linux2go.dk ([88.198.22.52]:37396 "EHLO atlas.linux2go.dk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751116AbYGAUrL (ORCPT ); Tue, 1 Jul 2008 16:47:11 -0400 Received: from localhost (0107ds1-abv.0.fullrate.dk [90.185.52.147]) by atlas.linux2go.dk (Postfix) with ESMTP id 40E2540A9A7 for ; Tue, 1 Jul 2008 22:47:07 +0200 (CEST) Content-Disposition: inline In-Reply-To: Sender: kvm-owner@vger.kernel.org List-ID: --dfmC41YZQlborXoK Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 01, 2008 at 10:27:19PM +0300, Slohm Gadaburi wrote: > I can't get qemu/kvm to loadvm a saved state. This is a known issue. We applied a patch to fix a security problem in kvm that allowed guests to write outside the boundaries of the designated disk image. savevm works by writing the snapshot data at the end of qcow2 files, which is conveniently located just outside aforementioned boundary. This means that the savevm actually fails, but that error is never reported back to the user and everythings seems to be in working order. However, when you try to loadvm, you'll notice that the snapshot was never actually saved. =20 I fixed this in Ubuntu Intrepid (our upcoming release) and Debian unstable by simply allowing writes outside the disk image boundaries if the guest isn't running. I sent the updated security patch back to the original source (Dan Berrange from RedHat), but I'm not sure what happened after that. FWIW, the preferred way to save VM state (or to use KVM at all, really) in Ubuntu is through libvirt/virt-manager anyway, but this bug really should be fixed. It's on my todo-queue somewhere, but that queue is rather long, I'm afraid. You're welcome on the ubuntu-server mailing list with these questions by the way. You can see how to subscribe here: http://lists.ubuntu.com/ubuntu-server --=20 Soren Hansen |=20 Virtualisation specialist | Ubuntu Server Team Canonical Ltd. | http://www.ubuntu.com/ --dfmC41YZQlborXoK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQCVAwUBSGqXyKPjM+vgwMxsAQLRzQP9FZC8JrSQpBFFxvrQaIuA1ss1VnuEcEv5 7kAUQFZvYX6xhgQKvKJMTzxfinovUl/gC6R0tn5QDgrMqWMMcwyfJVboY4+hR7OM CLZD7hcUR16Wf7LN4H96elW9LQScNC6gNaT8d+IIzcBSGYVcA4A201C5hZR1+QSY HLF3aJoBtlE= =NhlF -----END PGP SIGNATURE----- --dfmC41YZQlborXoK--