Re: [Xen-API] VNC access to HVM Windows guest

[Uli Stärk <Uli.Staerk@xxxxxxxxxxxxxx>]

Hey Dawid,

It's a security issue (open the VNC-port without authentication to the 
network). If you know what you are doing, I think socat is the way to go.

Some links that you may find interesting:
http://wiki.xenproject.org/wiki/Connecting_a_Console_to_DomU's
http://wiki.xenproject.org/wiki/Xen_Cloud_Platform:_Access_to_VM_console

Xapi offers a secure way to connect to the console. Have a look at the 
console-list RPC-call and have a look for the RFB-Protocol entries. The main 
problem for the average user is: You cannot connect your VNC client to this 
console without a proxy-script, that transports RDP via http :) A better idea 
would be to set up a VM that offers remote-management like 
https://xen-orchestra.com/.

Greeting
Uli Stärk

-----Ursprüngliche Nachricht-----
Von: xen-api-bounces@xxxxxxxxxxxxx [mailto:xen-api-bounces@xxxxxxxxxxxxx] Im 
Auftrag von Dawid Kowalski
Gesendet: Donnerstag, 10. Dezember 2015 18:02
An: Xen API mailing list <xen-api@xxxxxxxxxxxxx>
Betreff: Re: [Xen-API] VNC access to HVM Windows guest

Hi All,

Whilst I'm still looking for proper approach to the problem (getting the qemu 
or xen to listen on selected port), I've manged to get tcp connection to unix 
socket thanks to socat tool.

The example workaround looks like this run in a screen session or nohup, etc.
socat -d -d TCP4-LISTEN:5910,bind=10.99.99.1,reuseaddr,fork
unix:/var/run/nonpersistent/xenopsd/xenlight/vnc/3ae49d0d-d255-b3ef-2bf4-80214a00f2c8

If any of you have idea how to force xenapi to force qemu to open tcp socket, 
that would be great.

Thanks,
Dawid

On 2015-12-10 13:33, Dawid Kowalski wrote:
> Hi All,
>
> Would you please be so kind and advise how to properly set parameters 
> for Windows 7 HVM?
> Seems like i can start it, however can't get access to console via VNC.
>
> All docs available online use different toolstack and I'm not sure how 
> to properly translate it to xapi settings.
>
>
> Starting VM brings up qemu with following parameters
> /usr/bin/qemu-system-i386 -xen-domid 33 -chardev 
> socket,id=libxl-cmd,path=/var/run/xen/qmp-libxl-33,server,nowait -mon 
> chardev=libxl-cmd,mode=control -nodefaults -name video -vnc
> unix:/var/run/nonpersistent/xenopsd/xenlight/vnc/3ae49d0d-d255-b3ef-2b
> f4-80214a00f2c8,to=99 -display none -k en-us -serial pty -device 
> cirrus-vga -global
> vga.vram_size_mb=16 -boot order=dc -usb -usbdevice tablet -device
> rtl8139,id=nic0,netdev=net0,mac=bb:bb:bb:81:bd:33 -netdev 
> type=tap,id=net0,ifname=vif33.0-emu,script=no,downscript=no -machine 
> xenfv -m 16368 -drive 
> file=/dev/xen/blktap-2/tapdev5,if=ide,index=0,media=disk,format=raw,ca
> che=writeback
> -drive
> file=/dev/sm/backend/0e141376-6525-ff18-ffee-862446f5a617/0902f522-0e1
> 0-42c1-a438-fa5e7a17ba4c,if=ide,index=1,readonly=on,media=cdrom,format
> =raw,cache=writeback,id=ide-832
>
> The important part is probably
> video -vnc
> unix:/var/run/nonpersistent/xenopsd/xenlight/vnc/3ae49d0d-d255-b3ef-2b
> f4-80214a00f2c8,to=99
> -display none
>
> And platform settings are showing VNC:
> platform (MRW): timeoffset: 0; sdl: 0; vnc: 1; videoram: 16; vga: std;
> nx: true; acpi: 1; apic: true; pae: true; viridian: true; device_id: 
> 0002
>
> Yet, I can't find system listening on any port.
>
> The question is how to enable VNC on a specific port or next available 
> port as it is by default for PVMs?
>
> uuid ( RO)                          : 
> 3ae49d0d-d255-b3ef-2bf4-80214a00f2c8
>                     name-label ( RW): video
>               name-description ( RW): Installed via xe CLI
>                   user-version ( RW): 1
>                  is-a-template ( RW): false
>                  is-a-snapshot ( RO): false
>                    snapshot-of ( RO): <not in database>
>                      snapshots ( RO):
>                  snapshot-time ( RO): 19700101T00:00:00Z
>                  snapshot-info ( RO):
>                         parent ( RO): <not in database>
>                       children ( RO):
>              is-control-domain ( RO): false
>                    power-state ( RO): halted
>                  memory-actual ( RO): 8151224320
>                  memory-target ( RO): 0
>                memory-overhead ( RO): 137363456
>              memory-static-max ( RW): 17179869184
>             memory-dynamic-max ( RW): 17179869184
>             memory-dynamic-min ( RW): 268435456
>              memory-static-min ( RW): 134217728
>               suspend-VDI-uuid ( RW): <not in database>
>                suspend-SR-uuid ( RW): 
> 467d7c1a-fa33-0f44-4421-a8f261099153
>                   VCPUs-params (MRW):
>                      VCPUs-max ( RW): 1
>               VCPUs-at-startup ( RW): 1
>         actions-after-shutdown ( RW): Destroy
>           actions-after-reboot ( RW): Restart
>            actions-after-crash ( RW): Restart
>                  console-uuids (SRO):
>                       platform (MRW): timeoffset: 0; sdl: 0; vnc: 1;
> videoram: 16; vga: std; nx: true; acpi: 1; apic: true; pae: true;
> viridian: true; device_id: 0002
>             allowed-operations (SRO): changing_dynamic_range; 
> changing_shadow_memory; changing_static_range; make_into_template; 
> destroy; export; start_on; start; clone; copy; snapshot
>             current-operations (SRO):
>             blocked-operations (MRW):
>            allowed-VBD-devices (SRO): 0; 2; 3
>            allowed-VIF-devices (SRO): 1; 2; 3
>                 possible-hosts ( RO): 
> 0d83e699-df0b-40db-9934-b5cbc9e5eafe
>                HVM-boot-policy ( RW): BIOS order
>                HVM-boot-params (MRW): order: dc
>          HVM-shadow-multiplier ( RW): 1.000
>                      PV-kernel ( RW):
>                     PV-ramdisk ( RW):
>                        PV-args ( RW):
>                 PV-legacy-args ( RW):
>                  PV-bootloader ( RW):
>             PV-bootloader-args ( RW):
>            last-boot-CPU-flags ( RO): vendor: GenuineIntel; features: 
> 00000000-00000000-00000000-00000000
>               last-boot-record ( RO): '('struct' ('uuid' 
> '3ae49d0d-d255-b3ef-2bf4-80214a00f2c8') ('allowed_operations' 
> ('array')) ('current_operations' ('struct' 
> ('OpaqueRef:d2ae69ab-771c-eeeb-ab57-2c620729e0b4' 'start'))) 
> ('power_state' 'Halted') ('name_label' 'video') ('name_description'
> 'Installed via xe CLI') ('user_version' '1') ('is_a_template' 
> ('boolean' '0')) ('suspend_VDI' 'OpaqueRef:NULL') ('resident_on' 
> 'OpaqueRef:NULL') ('affinity' 'OpaqueRef:NULL') ('memory_overhead' 
> '137363456') ('memory_target' '0') ('memory_static_max' '17179869184') 
> ('memory_dynamic_max' '17179869184') ('memory_dynamic_min'
> '268435456') ('memory_static_min' '134217728') ('VCPUs_params' 
> ('struct')) ('VCPUs_max' '1') ('VCPUs_at_startup' '1') 
> ('actions_after_shutdown' 'destroy') ('actions_after_reboot'
> 'restart') ('actions_after_crash' 'restart') ('consoles' ('array')) 
> ('VIFs' ('array' 'OpaqueRef:c560f5b6-898f-bd04-185d-7dcd84df84f8'))
> ('VBDs' ('array' 'OpaqueRef:c4bf94b4-aae2-c460-aca9-d9ac626e89eb' 
> 'OpaqueRef:1ae68818-38ed-f2f1-803c-ced439a41f8b')) ('crash_dumps' 
> ('array')) ('VTPMs' ('array')) ('PV_bootloader' '') ('PV_kernel' '') 
> ('PV_ramdisk' '') ('PV_args' '') ('PV_bootloader_args' '') 
> ('PV_legacy_args' '') ('HVM_boot_policy' 'BIOS order') 
> ('HVM_boot_params' ('struct' ('order' 'dc'))) ('HVM_shadow_multiplier'
> ('double' '1')) ('platform' ('struct' ('sdl' '0') ('vnc' '1') 
> ('videoram' '16') ('timeoffset' '0') ('vga' 'std') ('nx' 'true') 
> ('acpi' '1') ('apic' 'true') ('pae' 'true') ('viridian' 'true') 
> ('device_id' '0002'))) ('PCI_bus' '') ('other_config' ('struct'
> ('vgpu_pci' '') ('base_template_name' 'Windows 7 (64-bit)') 
> ('mac_seed' '4bcfee66-be47-72c7-c9b4-4a15b478e0d6') ('install-methods'
> 'cdrom'))) ('domid' '-1') ('domarch' '') ('last_boot_CPU_flags' 
> ('struct' ('vendor' 'GenuineIntel') ('features' 
> '00000000-00000000-00000000-00000000'))) ('is_control_domain' 
> ('boolean' '0')) ('metrics' 
> 'OpaqueRef:5cab581a-3cae-61d9-0f5c-be0c240d7e3c') ('guest_metrics' 
> 'OpaqueRef:NULL') ('last_booted_record' '') ('recommendations' 
> '<restrictions><restriction field=\"memory-static-max\" 
> max=\"137438953472\" /><restriction field=\"vcpus-max\" max=\"16\" 
> /><restriction property=\"number-of-vbds\" max=\"7\" /><restriction 
> property=\"number-of-vifs\" max=\"7\" /></restrictions>') 
> ('xenstore_data' ('struct' ('vm-data' '') ('vm-data/dm' 'mypn.eu') 
> ('vm-data/ns' '1.1.1.1') ('vm-data/nm' '255.255.255.0') ('vm-data/gw'
> '10.99.99.1') ('vm-data/ip' '10.99.99.9'))) ('ha_always_run' 
> ('boolean' '0')) ('ha_restart_priority' '') ('is_a_snapshot' 
> ('boolean' '0')) ('snapshot_of' 'OpaqueRef:NULL') ('snapshots' 
> ('array')) ('snapshot_time' ('dateTime.iso8601' '19700101T00:00:00Z')) 
> ('transportable_snapshot_id' '') ('blobs' ('struct')) ('tags'
> ('array')) ('blocked_operations' ('struct')) ('snapshot_info' 
> ('struct')) ('snapshot_metadata' '') ('parent' 'OpaqueRef:NULL') 
> ('children' ('array')) ('bios_strings' ('struct')) 
> ('protection_policy' 'OpaqueRef:NULL') ('is_snapshot_from_vmpp'
> ('boolean' '0')) ('appliance' 'OpaqueRef:NULL') ('start_delay' '0') 
> ('shutdown_delay' '0') ('order' '0') ('VGPUs' ('array')) 
> ('attached_PCIs' ('array')) ('suspend_SR'
> 'OpaqueRef:5a8661f9-9111-23bb-c163-addc3ef7427c') ('version' '0') 
> ('generation_id' '8412189938873372947:7481581773609000478'))'
>                    resident-on ( RO): <not in database>
>                       affinity ( RW): <not in database>
>                   other-config (MRW): vgpu_pci: ; base_template_name: 
> Windows 7 (64-bit); mac_seed: 4bcfee66-be47-72c7-c9b4-4a15b478e0d6;
> install-methods: cdrom
>                         dom-id ( RO): -1
>                recommendations ( RO): <restrictions><restriction 
> field="memory-static-max" max="137438953472" /><restriction 
> field="vcpus-max" max="16" /><restriction property="number-of-vbds"
> max="7" /><restriction property="number-of-vifs" max="7" 
> /></restrictions>
>                  xenstore-data (MRW): vm-data: ; vm-data/dm: mypn.eu;
> vm-data/ns: 1.1.1.1; vm-data/nm: 255.255.255.0; vm-data/gw: 
> 10.99.99.1; vm-data/ip: 10.99.99.9
>     ha-always-run ( RW) [DEPRECATED]: false
>            ha-restart-priority ( RW):
>                          blobs ( RO):
>                     start-time ( RO): 19700101T00:00:00Z
>                   install-time ( RO): 20151209T23:29:15Z
>                   VCPUs-number ( RO): 0
>              VCPUs-utilisation (MRO):
>                     os-version (MRO): <not in database>
>             PV-drivers-version (MRO): <not in database>
>          PV-drivers-up-to-date ( RO): <not in database>
>                         memory (MRO): <not in database>
>                          disks (MRO): <not in database>
>                       networks (MRO): <not in database>
>                          other (MRO): <not in database>
>                           live ( RO): <not in database>
>     guest-metrics-last-updated ( RO): <not in database>
>       cooperative ( RO) [DEPRECATED]: true
>                           tags (SRW):
>                      appliance ( RW): <not in database>
>                    start-delay ( RW): 0
>                 shutdown-delay ( RW): 0
>                          order ( RW): 0
>                        version ( RO): 0
>                  generation-id ( RO): 
> 8412189938873372947:7481581773609000478
>
>
> Thanks in advance,
> Dawid
>


_______________________________________________
Xen-api mailing list
Xen-api@xxxxxxxxxxxxx
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api

_______________________________________________
Xen-api mailing list
Xen-api@xxxxxxxxxxxxx
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api