Table of Contents
Libvirt checkpoint swiss army knife.
vircpt can be used to manage libvirt virtual domain checkpoints, as in:
- create checkpoints
- delete checkpoints
- list checkpoints
- export checkpoints using the internal QEMU NBD server
Check the Use Cases for more examples why this may be useful to you.
Create an checkpoint named "foo":
# vircpt -d vm1 create --name foo
INFO lib common - printVersion: Version: 0.1 Arguments: ./vircpt -d vm1 create --name foo
INFO root vircpt - main: Libvirt library version: [9000000]
INFO root disktype - Optical: Skipping attached [cdrom] device: [sdb].
INFO root disktype - Optical: Skipping attached [floppy] device: [fda].
WARNING fs fs - freeze: Guest agent is not responding: QEMU guest agent is not connected
INFO root vircpt - main: Finished successfully
In order to view existing checkpoints, use:
# vircpt -d vm1 list
INFO lib common - printVersion: Version: 0.1 Arguments: ./vircpt -d vm1 list
INFO root vircpt - main: Libvirt library version: [9000000]
INFO root disktype - Optical: Skipping attached [cdrom] device: [sdb].
INFO root disktype - Optical: Skipping attached [floppy] device: [fda].
INFO root vircpt - main: List of existing checkpoints:
INFO root checkpoint - show: + foo
INFO root vircpt - main: Finished successfully
To access the virtual machine disk image and checkpoint data, use the export parameter:
# vircpt -d vm1 export --name foo
INFO lib common - printVersion: Version: 0.1 Arguments: ./vircpt -d vm1 export --name foo
INFO root vircpt - main: Libvirt library version: [9000000]
INFO root disktype - Optical: Skipping attached [cdrom] device: [sdb].
INFO root disktype - Optical: Skipping attached [floppy] device: [fda].
INFO root vircpt - main: Socket for exported checkpoint: [/var/tmp/vircpt.vm1]
INFO root vircpt - main: -----------------------------------
INFO root vircpt - main: Useful commands:
INFO root vircpt - main: -----------------------------------
INFO root vircpt - main: [nbdinfo 'nbd+unix:https:///?socket=/var/tmp/vircpt.vm1' --list]
INFO root vircpt - main: Disk: sda
INFO root vircpt - showcmd: [qemu-img create -F raw -b nbd+unix:https:///sda?socket=/var/tmp/vircpt.vm1 -f qcow2 /tmp/image_sda.qcow2]
INFO root vircpt - showcmd: [qemu-nbd -c /dev/nbd0 /tmp/image_sda.qcow2] && [virsh attach-disk tgtvm --source /dev/nbd0 --target vdX]
INFO root vircpt - showcmd: [qemu-nbd -c /dev/nbd0 'nbd+unix:https:///sda?socket=/var/tmp/vircpt.vm1' -r] && [fdisk -l /dev/nbd0]
INFO root vircpt - showcmd: [nbdcopy 'nbd+unix:https:///sda?socket=/var/tmp/vircpt.vm1' -p backup-sda.img]
INFO root vircpt - showcmd: [qemu-img create -f qcow2 backup-sda.qcow2 1048576B && nbdcopy -p 'nbd+unix:https:///sda?socket=/var/tmp/vircpt.vm1' -- [ qemu-nbd -f qcow2 backup-sda.qcow2 ]]
INFO root vircpt - main: -----------------------------------
INFO root vircpt - main: Finished successfully
The output will create some useful commands for operating on the created NBD socket endpoint, such as:
- Query info about exported devices using nbdinfo.
- Create an overlay image with NBD socket backend (for direct boot)
- Setup and NBD Device for the overlay image, which can then be attached to another virtual machine
Its also possible to show detailed information about the NBD export
via --showinfo option.
# vircpt -d vm4 nbdinfo
INFO lib common - printVersion: Version: 0.1 Arguments: ./vircpt -d vm4 nbdinfo
INFO root vircpt - main: Libvirt library version: [9000000]
WARNING root disktype - Raw: Excluding unsupported raw disk [sdb].
{
"protocol": "newstyle-fixed",
"TLS": false,
"structured": true,
"exports": [
{ x
"export-name": "sda",
"uri": "nbd+unix:https:///sda?socket=/var/tmp/vircpt.vm4.TEST",
[..]
In order to show the bitmap block mappings use:
# vircpt -d vm4 nbdmap
INFO lib common - printVersion: Version: 0.1 Arguments: ./vircpt -d vm4 nbdmap
INFO root vircpt - main: Libvirt library version: [9000000]
WARNING root disktype - Raw: Excluding unsupported raw disk [sdb].
INFO root vircpt - main: Checkpoint/bitmap mapping:
INFO root vircpt - main: Disk: [sda]:[/tmp/tmp.ReIIt657Nw/vm4-sda.qcow2]
[
{
"offset": 0,
"length": 1048576,
"type": 0,
"description": "clean"
}
]
To release an export:
# vircpt -d vm1 release
Remove checkpoints via:
# vircpt -d vm1 delete --name foo
If reachable, vircpt will attempt to freeze the domains file systems via Qemu
agent during checkpoint creation for file system consistency.
In combination with other tools vircpt can be used to create backups.
- create a new checkpoint:
# vircpt -d vm4 create --name backupcheckpoint
- export the checkpoint via NBD:
# vircpt -d vm4 export --name backupcheckpoint
[..]
INFO root vircpt - showcmd: Socket for exported checkpoint: [/var/tmp/vircpt.vm4]
[..]
- create an full backup using the nbdcopy option:
# vircpt -d vm4 nbdcopy
[..]
# ls -alrht backup*
-rw-r--r-- 1 abi abi 448K Oct 17 23:01 backup-sda.qcow2
-rw-r--r-- 1 abi abi 704K Oct 17 23:01 backup-vdf.qcow2
An exported checkpoint can also be booted, this is useful for things like:
- Examining the virtual machine at a given state
- Testing system updates without having to clone the complete virtual machine
- Restoring files
Using an overlay image with the read only NBD backend, this will consume way less disk space than a complete virtual machine clone.
- Create an export for a created checkpoint (
bootme):
# vircpt -d vm4 export --name bootme
[..]
INFO root vircpt - showcmd: Socket for exported checkpoint: [/var/tmp/vircpt.vm4.bootme]
[..]
- Map the checkpoint to an qcow overlay image:
# vircpt -d vm4 overlay
INFO lib common - printVersion: Version: 0.1 Arguments: ./vircpt -d vm4 overlay
INFO root vircpt - main: Libvirt library version: [9000000]
WARNING root disktype - Raw: Excluding unsupported raw disk [sdb].
INFO root vircpt - main: Create overlay images
INFO root vircpt - main: Disk: [sda]: [overlay_sda.qcow2]
INFO root vircpt - main: Finished successfully
- Boot the image using qemu (or as alternative, create a new libvirt virtual machine config and attach the created overlay image):
# qemu-system-<arch> -hda overlay_sda.qcow2 -m 2500 --enable-kvm
You can attach or mount the created NBD export and execute anti virus engines without having to install the engine in the virtual machine itself.
- libvirt / qemu versions with checkpoint support
- virtual machine must have qcow v3 versioned images with persistent bitmap support.
- libnbd executables (nbdinfo, nbdcopy)
- python modules: python3-rich, python3-lxml
Add "hotadd" option which allows to attach the data from the NBD export to other virtual machines, for:
- backup operations
- antivirus scan via clamav?