Red Hat Bugzilla – Bug 580215
Virtual network <tftp> element does not enable tftp port
Last modified: 2015-06-21 20:07:23 EDT
Description of problem:
When creating a virtual network, libvirt starts an instance of dnsmasq. The description for defining a network via xml says that including a tftp tag within the dhcp tag will let the user point that instance of dnsmasq to a different directory for a tftp root. However, when I try to do this the instance of dnsmasq does not allow pxe booting of the ISO image I've contained in the supplied directory.
Version-Release number of selected component (if applicable):
(mcpierce@mcpierce-desktop:Podcast)$ rpm -q libvirt
Steps to Reproduce:
1. Use livecd-iso-to-pxeboot to create a tftp root directory for a LiveCD image.
2. Create a virtual interface and tell it to use the created directory as a tftp root.
3. Start a virtual machine and have it boot from the network.
The VM never PXE boots since dnsmasq never offers the LiveCD image.
The VM should PXE book the LiveCD image.
The virtual network is defined with the following XML:
<forward mode='nat' />
<bridge name='testbr5310' stp='on' forwardDelay='0' />
<ip address='192.168.210.1' netmask='255.255.255.0'>
<tftp root='/tmp/tmp.IpID1ZkCQ2' />
This seems to work with libvirt-0.7.7-4.fc13
nobody 11062 1 0 12:13 ? S 0:00 /usr/sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/default.pid --conf-file= --listen-address 192.168.122.1 --except-interface lo --dhcp-range 192.168.122.2,192.168.122.254 --dhcp-lease-max=253 --enable-tftp --tftp-root /var/lib/dnsmasq/tftp --dhcp-boot pxelinux.0
# virsh net-dumpxml default
<bridge name='virbr0' stp='on' delay='0' />
<ip address='192.168.122.1' netmask='255.255.255.0'>
<tftp root='/var/lib/dnsmasq/tftp' />
<range start='192.168.122.2' end='192.168.122.254' />
<bootp file='pxelinux.0' />
But tftp port 69 is not allowed in the iptables, like ports for dns 53 and bootp 67.
Workaround is to insert it manually, then VM PXE boot worked:
# iptables -I INPUT -i virbr0 -p udp -m udp --dport 69 -j ACCEPT
Patch posted upstream
This message is a reminder that Fedora 13 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 13. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as WONTFIX if it remains open with a Fedora
'version' of '13'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version'
to a later Fedora version prior to Fedora 13's end of life.
Bug Reporter: Thank you for reporting this issue and we are sorry that
we may not be able to fix it before Fedora 13 is end of life. If you
would still like to see this bug fixed and are able to reproduce it
against a later version of Fedora please change the 'version' of this
bug to the applicable version. If you are unable to change the version,
please add a comment here and someone will do it for you.
Although we aim to fix as many bugs as possible during every release's
lifetime, sometimes those efforts are overtaken by events. Often a
more recent Fedora release includes newer upstream software that fixes
bugs or makes them obsolete.
The process we are following is described here:
Closing as CURRENTRELEASE, since this should be fixed in F15