1 package PVE
::QemuMigrate
;
8 use Time
::HiRes
qw( usleep );
11 use PVE
::Format
qw(render_bytes);
12 use PVE
::GuestHelpers
qw(safe_boolean_ne safe_string_ne);
14 use PVE
::RPCEnvironment
;
16 use PVE
::ReplicationConfig
;
17 use PVE
::ReplicationState
;
19 use PVE
::StorageTunnel
;
24 use PVE
::QemuServer
::CPUConfig
;
25 use PVE
::QemuServer
::Drive
;
26 use PVE
::QemuServer
::Helpers
qw(min_version);
27 use PVE
::QemuServer
::Machine
;
28 use PVE
::QemuServer
::Monitor
qw(mon_cmd);
31 use PVE
::AbstractMigrate
;
32 use base
qw(PVE::AbstractMigrate);
34 # compared against remote end's minimum version
35 our $WS_TUNNEL_VERSION = 2;
38 my ($self, $ssh_forward_info) = @_;
40 my $cmd = ['/usr/sbin/qm', 'mtunnel'];
42 my ($level, $msg) = @_;
43 $self->log($level, $msg);
46 return PVE
::Tunnel
::fork_ssh_tunnel
($self->{rem_ssh
}, $cmd, $ssh_forward_info, $log);
49 sub fork_websocket_tunnel
{
50 my ($self, $storages, $bridges) = @_;
52 my $remote = $self->{opts
}->{remote
};
53 my $conn = $remote->{conn
};
56 my ($level, $msg) = @_;
57 $self->log($level, $msg);
60 my $websocket_url = "https://$conn->{host}:$conn->{port}/api2/json/nodes/$self->{node}/qemu/$remote->{vmid}/mtunnelwebsocket";
61 my $url = "/nodes/$self->{node}/qemu/$remote->{vmid}/mtunnel";
64 url
=> $websocket_url,
67 my $storage_list = join(',', keys %$storages);
68 my $bridge_list = join(',', keys %$bridges);
71 storages
=> $storage_list,
72 bridges
=> $bridge_list,
75 return PVE
::Tunnel
::fork_websocket_tunnel
($conn, $url, $req_params, $tunnel_params, $log);
79 # proto: unix (secure) or tcp (insecure/legacy compat)
80 # addr: IP or UNIX socket path
81 # port: optional TCP port
82 # unix_sockets: additional UNIX socket paths to forward
83 sub start_remote_tunnel
{
84 my ($self, $tunnel_info) = @_;
86 my $nodename = PVE
::INotify
::nodename
();
87 my $migration_type = $self->{opts
}->{migration_type
};
89 if ($migration_type eq 'secure') {
91 if ($tunnel_info->{proto
} eq 'unix') {
92 my $ssh_forward_info = [];
94 my $unix_sockets = [ keys %{$tunnel_info->{unix_sockets
}} ];
95 push @$unix_sockets, $tunnel_info->{addr
};
96 for my $sock (@$unix_sockets) {
97 push @$ssh_forward_info, "$sock:$sock";
101 $self->{tunnel
} = $self->fork_tunnel($ssh_forward_info);
103 my $unix_socket_try = 0; # wait for the socket to become ready
104 while ($unix_socket_try <= 100) {
107 foreach my $sock (@$unix_sockets) {
113 if ($available == @$unix_sockets) {
119 if ($unix_socket_try > 100) {
121 PVE
::Tunnel
::finish_tunnel
($self->{tunnel
});
122 die "Timeout, migration socket $tunnel_info->{addr} did not get ready";
124 $self->{tunnel
}->{unix_sockets
} = $unix_sockets if (@$unix_sockets);
126 } elsif ($tunnel_info->{proto
} eq 'tcp') {
127 my $ssh_forward_info = [];
128 if ($tunnel_info->{addr
} eq "localhost") {
129 # for backwards compatibility with older qemu-server versions
130 my $pfamily = PVE
::Tools
::get_host_address_family
($nodename);
131 my $lport = PVE
::Tools
::next_migrate_port
($pfamily);
132 push @$ssh_forward_info, "$lport:localhost:$tunnel_info->{port}";
135 $self->{tunnel
} = $self->fork_tunnel($ssh_forward_info);
138 die "unsupported protocol in migration URI: $tunnel_info->{proto}\n";
141 #fork tunnel for insecure migration, to send faster commands like resume
142 $self->{tunnel
} = $self->fork_tunnel();
147 my ($self, $vmid, $code, @param) = @_;
149 return PVE
::QemuConfig-
>lock_config($vmid, $code, @param);
152 sub target_storage_check_available
{
153 my ($self, $storecfg, $targetsid, $volid) = @_;
155 if (!$self->{opts
}->{remote
}) {
156 # check if storage is available on target node
157 my $target_scfg = PVE
::Storage
::storage_check_enabled
(
162 my ($vtype) = PVE
::Storage
::parse_volname
($storecfg, $volid);
163 die "$volid: content type '$vtype' is not available on storage '$targetsid'\n"
164 if !$target_scfg->{content
}->{$vtype};
169 my ($self, $vmid) = @_;
171 my $online = $self->{opts
}->{online
};
173 my $storecfg = $self->{storecfg
} = PVE
::Storage
::config
();
176 my $conf = $self->{vmconf
} = PVE
::QemuConfig-
>load_config($vmid);
178 my $version = PVE
::QemuServer
::Helpers
::get_node_pvecfg_version
($self->{node
});
179 my $cloudinit_config = $conf->{cloudinit
};
182 PVE
::QemuConfig-
>has_cloudinit($conf) && defined($cloudinit_config)
183 && scalar(keys %$cloudinit_config) > 0
184 && !PVE
::QemuServer
::Helpers
::pvecfg_min_version
($version, 7, 2, 13)
186 die "target node is too old (manager <= 7.2-13) and doesn't support new cloudinit section\n";
189 my $repl_conf = PVE
::ReplicationConfig-
>new();
190 $self->{replication_jobcfg
} = $repl_conf->find_local_replication_job($vmid, $self->{node
});
191 $self->{is_replicated
} = $repl_conf->check_for_existing_jobs($vmid, 1);
193 if ($self->{replication_jobcfg
} && defined($self->{replication_jobcfg
}->{remove_job
})) {
194 die "refusing to migrate replicated VM whose replication job is marked for removal\n";
197 PVE
::QemuConfig-
>check_lock($conf);
200 if (my $pid = PVE
::QemuServer
::check_running
($vmid)) {
201 die "can't migrate running VM without --online\n" if !$online;
204 if ($self->{is_replicated
} && !$self->{replication_jobcfg
}) {
205 if ($self->{opts
}->{force
}) {
206 $self->log('warn', "WARNING: Node '$self->{node}' is not a replication target. Existing " .
207 "replication jobs will fail after migration!\n");
209 die "Cannot live-migrate replicated VM to node '$self->{node}' - not a replication " .
210 "target. Use 'force' to override.\n";
214 $self->{forcemachine
} = PVE
::QemuServer
::Machine
::qemu_machine_pxe
($vmid, $conf);
216 # To support custom CPU types, we keep QEMU's "-cpu" parameter intact.
217 # Since the parameter itself contains no reference to a custom model,
218 # this makes migration independent of changes to "cpu-models.conf".
220 my $cpuconf = PVE
::JSONSchema
::parse_property_string
('pve-cpu-conf', $conf->{cpu
});
221 if ($cpuconf && PVE
::QemuServer
::CPUConfig
::is_custom_model
($cpuconf->{cputype
})) {
222 $self->{forcecpu
} = PVE
::QemuServer
::CPUConfig
::get_cpu_from_running_vm
($pid);
226 $self->{vm_was_paused
} = 1 if PVE
::QemuServer
::vm_is_paused
($vmid);
229 my ($loc_res, $mapped_res, $missing_mappings_by_node) = PVE
::QemuServer
::check_local_resources
($conf, 1);
230 my $blocking_resources = [];
231 for my $res ($loc_res->@*) {
232 if (!grep($res, $mapped_res->@*)) {
233 push $blocking_resources->@*, $res;
236 if (scalar($blocking_resources->@*)) {
237 if ($self->{running
} || !$self->{opts
}->{force
}) {
238 die "can't migrate VM which uses local devices: " . join(", ", $blocking_resources->@*) . "\n";
240 $self->log('info', "migrating VM which uses local devices");
244 if (scalar($mapped_res->@*)) {
245 my $missing_mappings = $missing_mappings_by_node->{$self->{node
}};
247 die "can't migrate running VM which uses mapped devices: " . join(", ", $mapped_res->@*) . "\n";
248 } elsif (scalar($missing_mappings->@*)) {
249 die "can't migrate to '$self->{node}': missing mapped devices " . join(", ", $missing_mappings->@*) . "\n";
251 $self->log('info', "migrating VM which uses mapped local devices");
255 my $vollist = PVE
::QemuServer
::get_vm_volumes
($conf);
258 foreach my $volid (@$vollist) {
259 my ($sid, $volname) = PVE
::Storage
::parse_volume_id
($volid, 1);
261 # check if storage is available on source node
262 my $scfg = PVE
::Storage
::storage_check_enabled
($storecfg, $sid);
264 my $targetsid = $sid;
265 # NOTE: local ignores shared mappings, remote maps them
266 if (!$scfg->{shared
} || $self->{opts
}->{remote
}) {
267 $targetsid = PVE
::JSONSchema
::map_id
($self->{opts
}->{storagemap
}, $sid);
270 $storages->{$targetsid} = 1;
272 $self->target_storage_check_available($storecfg, $targetsid, $volid);
274 if ($scfg->{shared
}) {
275 # PVE::Storage::activate_storage checks this for non-shared storages
276 my $plugin = PVE
::Storage
::Plugin-
>lookup($scfg->{type
});
277 warn "Used shared storage '$sid' is not online on source node!\n"
278 if !$plugin->check_connection($sid, $scfg);
282 if ($self->{opts
}->{remote
}) {
283 # test & establish websocket connection
284 my $bridges = map_bridges
($conf, $self->{opts
}->{bridgemap
}, 1);
285 my $tunnel = $self->fork_websocket_tunnel($storages, $bridges);
286 my $min_version = $tunnel->{version
} - $tunnel->{age
};
287 $self->log('info', "local WS tunnel version: $WS_TUNNEL_VERSION");
288 $self->log('info', "remote WS tunnel version: $tunnel->{version}");
289 $self->log('info', "minimum required WS tunnel version: $min_version");
290 die "Remote tunnel endpoint not compatible, upgrade required\n"
291 if $WS_TUNNEL_VERSION < $min_version;
292 die "Remote tunnel endpoint too old, upgrade required\n"
293 if $WS_TUNNEL_VERSION > $tunnel->{version
};
295 print "websocket tunnel started\n";
296 $self->{tunnel
} = $tunnel;
298 # test ssh connection
299 my $cmd = [ @{$self->{rem_ssh
}}, '/bin/true' ];
300 eval { $self->cmd_quiet($cmd); };
301 die "Can't connect to destination address using public key\n" if $@;
307 sub scan_local_volumes
{
308 my ($self, $vmid) = @_;
310 my $conf = $self->{vmconf
};
312 # local volumes which have been copied
313 # and their old_id => new_id pairs
314 $self->{volume_map
} = {};
315 $self->{local_volumes
} = {};
317 my $storecfg = $self->{storecfg
};
319 # found local volumes and their origin
320 my $local_volumes = $self->{local_volumes
};
321 my $local_volumes_errors = {};
322 my $other_errors = [];
324 my $path_to_volid = {};
326 my $log_error = sub {
327 my ($msg, $volid) = @_;
329 if (defined($volid)) {
330 $local_volumes_errors->{$volid} = $msg;
332 push @$other_errors, $msg;
337 my $replicatable_volumes = !$self->{replication_jobcfg
} ?
{}
338 : PVE
::QemuConfig-
>get_replicatable_volumes($storecfg, $vmid, $conf, 0, 1);
339 foreach my $volid (keys %{$replicatable_volumes}) {
340 $local_volumes->{$volid}->{replicated
} = 1;
343 my $test_volid = sub {
344 my ($volid, $attr) = @_;
346 if ($volid =~ m
|^/|) {
347 return if $attr->{shared
};
348 $local_volumes->{$volid}->{ref} = 'config';
349 die "local file/device\n";
352 my $snaprefs = $attr->{referenced_in_snapshot
};
354 if ($attr->{cdrom
}) {
355 if ($volid eq 'cdrom') {
356 my $msg = "can't migrate local cdrom drive";
357 if (defined($snaprefs) && !$attr->{is_attached
}) {
358 my $snapnames = join(', ', sort keys %$snaprefs);
359 $msg .= " (referenced in snapshot - $snapnames)";
361 &$log_error("$msg\n");
364 return if $volid eq 'none';
367 my ($sid, $volname) = PVE
::Storage
::parse_volume_id
($volid);
369 # check if storage is available on both nodes
370 my $scfg = PVE
::Storage
::storage_check_enabled
($storecfg, $sid);
372 my $targetsid = $sid;
373 # NOTE: local ignores shared mappings, remote maps them
374 if (!$scfg->{shared
} || $self->{opts
}->{remote
}) {
375 $targetsid = PVE
::JSONSchema
::map_id
($self->{opts
}->{storagemap
}, $sid);
378 $self->target_storage_check_available($storecfg, $targetsid, $volid);
379 return if $scfg->{shared
} && !$self->{opts
}->{remote
};
381 $local_volumes->{$volid}->{ref} = 'pending' if $attr->{referenced_in_pending
};
382 $local_volumes->{$volid}->{ref} = 'snapshot' if $attr->{referenced_in_snapshot
};
383 $local_volumes->{$volid}->{ref} = 'unused' if $attr->{is_unused
};
384 $local_volumes->{$volid}->{ref} = 'attached' if $attr->{is_attached
};
385 $local_volumes->{$volid}->{ref} = 'generated' if $attr->{is_tpmstate
};
387 $local_volumes->{$volid}->{bwlimit
} = $self->get_bwlimit($sid, $targetsid);
388 $local_volumes->{$volid}->{targetsid
} = $targetsid;
390 $local_volumes->{$volid}->@{qw(size format)} = PVE
::Storage
::volume_size_info
($storecfg, $volid);
392 $local_volumes->{$volid}->{is_vmstate
} = $attr->{is_vmstate
} ?
1 : 0;
394 $local_volumes->{$volid}->{drivename
} = $attr->{drivename
}
395 if $attr->{drivename
};
397 # If with_snapshots is not set for storage migrate, it tries to use
398 # a raw+size stream, but on-the-fly conversion from qcow2 to raw+size
399 # back to qcow2 is currently not possible.
400 $local_volumes->{$volid}->{snapshots
} = ($local_volumes->{$volid}->{format
} =~ /^(?:qcow2|vmdk)$/);
402 if ($attr->{cdrom
}) {
403 if ($volid =~ /vm-\d+-cloudinit/) {
404 $local_volumes->{$volid}->{ref} = 'generated';
407 die "local cdrom image\n";
410 my ($path, $owner) = PVE
::Storage
::path
($storecfg, $volid);
412 die "owned by other VM (owner = VM $owner)\n"
413 if !$owner || ($owner != $vmid);
415 $path_to_volid->{$path}->{$volid} = 1;
417 return if $attr->{is_vmstate
};
419 if (defined($snaprefs)) {
420 $local_volumes->{$volid}->{snapshots
} = 1;
422 # we cannot migrate shapshots on local storage
423 # exceptions: 'zfspool' or 'qcow2' files (on directory storage)
425 die "online storage migration not possible if non-replicated snapshot exists\n"
426 if $self->{running
} && !$local_volumes->{$volid}->{replicated
};
428 die "remote migration with snapshots not supported yet\n" if $self->{opts
}->{remote
};
430 if (!($scfg->{type
} eq 'zfspool'
431 || ($scfg->{type
} eq 'btrfs' && $local_volumes->{$volid}->{format
} eq 'raw')
432 || $local_volumes->{$volid}->{format
} eq 'qcow2'
434 die "non-migratable snapshot exists\n";
438 die "referenced by linked clone(s)\n"
439 if PVE
::Storage
::volume_is_base_and_used
($storecfg, $volid);
442 PVE
::QemuServer
::foreach_volid
($conf, sub {
443 my ($volid, $attr) = @_;
444 eval { $test_volid->($volid, $attr); };
446 &$log_error($err, $volid);
450 for my $path (keys %$path_to_volid) {
451 my @volids = keys $path_to_volid->{$path}->%*;
452 die "detected not supported aliased volumes: '" . join("', '", @volids) . "'\n"
453 if (scalar(@volids) > 1);
456 foreach my $vol (sort keys %$local_volumes) {
457 my $type = $replicatable_volumes->{$vol} ?
'local, replicated' : 'local';
458 my $ref = $local_volumes->{$vol}->{ref};
459 if ($ref eq 'attached') {
460 &$log_error("can't live migrate attached local disks without with-local-disks option\n", $vol)
461 if $self->{running
} && !$self->{opts
}->{"with-local-disks"};
462 $self->log('info', "found $type disk '$vol' (attached)\n");
463 } elsif ($ref eq 'unused') {
464 $self->log('info', "found $type disk '$vol' (unused)\n");
465 } elsif ($ref eq 'snapshot') {
466 $self->log('info', "found $type disk '$vol' (referenced by snapshot(s))\n");
467 } elsif ($ref eq 'pending') {
468 $self->log('info', "found $type disk '$vol' (pending change)\n");
469 } elsif ($ref eq 'generated') {
470 $self->log('info', "found generated disk '$vol' (in current VM config)\n");
472 $self->log('info', "found $type disk '$vol'\n");
476 foreach my $vol (sort keys %$local_volumes_errors) {
477 $self->log('warn', "can't migrate local disk '$vol': $local_volumes_errors->{$vol}");
479 foreach my $err (@$other_errors) {
480 $self->log('warn', "$err");
484 die "can't migrate VM - check log\n";
487 # additional checks for local storage
488 foreach my $volid (keys %$local_volumes) {
489 my ($sid, $volname) = PVE
::Storage
::parse_volume_id
($volid);
490 my $scfg = PVE
::Storage
::storage_config
($storecfg, $sid);
492 my $migratable = $scfg->{type
} =~ /^(?:dir|btrfs|zfspool|lvmthin|lvm)$/;
494 # TODO: what is this even here for?
495 $migratable = 1 if $self->{opts
}->{remote
};
497 die "can't migrate '$volid' - storage type '$scfg->{type}' not supported\n"
500 # image is a linked clone on local storage, se we can't migrate.
501 if (my $basename = (PVE
::Storage
::parse_volname
($storecfg, $volid))[3]) {
502 die "can't migrate '$volid' as it's a clone of '$basename'";
506 foreach my $volid (sort keys %$local_volumes) {
507 my $ref = $local_volumes->{$volid}->{ref};
508 if ($self->{running
} && $ref eq 'attached') {
509 $local_volumes->{$volid}->{migration_mode
} = 'online';
510 } elsif ($self->{running
} && $ref eq 'generated') {
511 # offline migrate the cloud-init ISO and don't regenerate on VM start
513 # tpmstate will also be offline migrated first, and in case of
514 # live migration then updated by QEMU/swtpm if necessary
515 $local_volumes->{$volid}->{migration_mode
} = 'offline';
517 $local_volumes->{$volid}->{migration_mode
} = 'offline';
521 die "Problem found while scanning volumes - $@" if $@;
524 sub handle_replication
{
525 my ($self, $vmid) = @_;
527 my $conf = $self->{vmconf
};
528 my $local_volumes = $self->{local_volumes
};
530 return if !$self->{replication_jobcfg
};
532 die "can't migrate VM with replicated volumes to remote cluster/node\n"
533 if $self->{opts
}->{remote
};
535 if ($self->{running
}) {
537 my $version = PVE
::QemuServer
::kvm_user_version
();
538 if (!min_version
($version, 4, 2)) {
539 die "can't live migrate VM with replicated volumes, pve-qemu to old (< 4.2)!\n"
542 my @live_replicatable_volumes = $self->filter_local_volumes('online', 1);
543 foreach my $volid (@live_replicatable_volumes) {
544 my $drive = $local_volumes->{$volid}->{drivename
};
545 die "internal error - no drive for '$volid'\n" if !defined($drive);
547 my $bitmap = "repl_$drive";
549 # start tracking before replication to get full delta + a few duplicates
550 $self->log('info', "$drive: start tracking writes using block-dirty-bitmap '$bitmap'");
551 mon_cmd
($vmid, 'block-dirty-bitmap-add', node
=> "drive-$drive", name
=> $bitmap);
553 # other info comes from target node in phase 2
554 $self->{target_drive
}->{$drive}->{bitmap
} = $bitmap;
557 $self->log('info', "replicating disk images");
559 my $start_time = time();
560 my $logfunc = sub { $self->log('info', shift) };
561 my $actual_replicated_volumes = PVE
::Replication
::run_replication
(
562 'PVE::QemuConfig', $self->{replication_jobcfg
}, $start_time, $start_time, $logfunc);
565 my @replicated_volumes = $self->filter_local_volumes(undef, 1);
566 foreach my $volid (@replicated_volumes) {
567 die "expected volume '$volid' to get replicated, but it wasn't\n"
568 if !$actual_replicated_volumes->{$volid};
572 sub config_update_local_disksizes
{
575 my $conf = $self->{vmconf
};
576 my $local_volumes = $self->{local_volumes
};
578 PVE
::QemuConfig-
>foreach_volume($conf, sub {
579 my ($key, $drive) = @_;
580 # skip special disks, will be handled later
581 return if $key eq 'efidisk0';
582 return if $key eq 'tpmstate0';
584 my $volid = $drive->{file
};
585 return if !defined($local_volumes->{$volid}); # only update sizes for local volumes
587 my ($updated, $msg) = PVE
::QemuServer
::Drive
::update_disksize
($drive, $local_volumes->{$volid}->{size
});
588 if (defined($updated)) {
589 $conf->{$key} = PVE
::QemuServer
::print_drive
($updated);
590 $self->log('info', "drive '$key': $msg");
594 # we want to set the efidisk size in the config to the size of the
595 # real OVMF_VARS.fd image, else we can create a too big image, which does not work
596 if (defined($conf->{efidisk0
})) {
597 PVE
::QemuServer
::update_efidisk_size
($conf);
600 # TPM state might have an irregular filesize, to avoid problems on transfer
601 # we always assume the static size of 4M to allocate on the target
602 if (defined($conf->{tpmstate0
})) {
603 PVE
::QemuServer
::update_tpmstate_size
($conf);
607 sub filter_local_volumes
{
608 my ($self, $migration_mode, $replicated) = @_;
610 my $volumes = $self->{local_volumes
};
613 foreach my $volid (sort keys %{$volumes}) {
614 next if defined($migration_mode) && safe_string_ne
($volumes->{$volid}->{migration_mode
}, $migration_mode);
615 next if defined($replicated) && safe_boolean_ne
($volumes->{$volid}->{replicated
}, $replicated);
616 push @filtered_volids, $volid;
619 return @filtered_volids;
622 sub sync_offline_local_volumes
{
625 my $local_volumes = $self->{local_volumes
};
626 my @volids = $self->filter_local_volumes('offline', 0);
628 my $storecfg = $self->{storecfg
};
629 my $opts = $self->{opts
};
631 $self->log('info', "copying local disk images") if scalar(@volids);
633 foreach my $volid (@volids) {
636 my $opts = $self->{opts
};
637 if ($opts->{remote
}) {
639 my ($level, $msg) = @_;
640 $self->log($level, $msg);
643 $new_volid = PVE
::StorageTunnel
::storage_migrate
(
648 $opts->{remote
}->{vmid
},
649 $local_volumes->{$volid},
653 my $targetsid = $local_volumes->{$volid}->{targetsid
};
655 my $bwlimit = $local_volumes->{$volid}->{bwlimit
};
656 $bwlimit = $bwlimit * 1024 if defined($bwlimit); # storage_migrate uses bps
658 my $storage_migrate_opts = {
659 'ratelimit_bps' => $bwlimit,
660 'insecure' => $opts->{migration_type
} eq 'insecure',
661 'with_snapshots' => $local_volumes->{$volid}->{snapshots
},
662 'allow_rename' => !$local_volumes->{$volid}->{is_vmstate
},
665 my $logfunc = sub { $self->log('info', $_[0]); };
667 PVE
::Storage
::storage_migrate
(
672 $storage_migrate_opts,
677 die "storage migration for '$volid' to storage '$targetsid' failed - $err\n";
681 $self->{volume_map
}->{$volid} = $new_volid;
682 $self->log('info', "volume '$volid' is '$new_volid' on the target\n");
684 eval { PVE
::Storage
::deactivate_volumes
($storecfg, [$volid]); };
686 $self->log('warn', $err);
691 sub cleanup_remotedisks
{
694 if ($self->{opts
}->{remote
}) {
695 PVE
::Tunnel
::finish_tunnel
($self->{tunnel
}, 1);
696 delete $self->{tunnel
};
700 my $local_volumes = $self->{local_volumes
};
702 foreach my $volid (values %{$self->{volume_map
}}) {
703 # don't clean up replicated disks!
704 next if $local_volumes->{$volid}->{replicated
};
706 my ($storeid, $volname) = PVE
::Storage
::parse_volume_id
($volid);
708 my $cmd = [@{$self->{rem_ssh
}}, 'pvesm', 'free', "$storeid:$volname"];
710 eval{ PVE
::Tools
::run_command
($cmd, outfunc
=> sub {}, errfunc
=> sub {}) };
712 $self->log('err', $err);
718 sub cleanup_bitmaps
{
720 foreach my $drive (keys %{$self->{target_drive
}}) {
721 my $bitmap = $self->{target_drive
}->{$drive}->{bitmap
};
723 $self->log('info', "$drive: removing block-dirty-bitmap '$bitmap'");
724 mon_cmd
($self->{vmid
}, 'block-dirty-bitmap-remove', node
=> "drive-$drive", name
=> $bitmap);
729 my ($self, $vmid) = @_;
731 $self->log('info', "starting migration of VM $vmid to node '$self->{node}' ($self->{nodeip})");
733 my $conf = $self->{vmconf
};
735 # set migrate lock in config file
736 $conf->{lock} = 'migrate';
737 PVE
::QemuConfig-
>write_config($vmid, $conf);
739 $self->scan_local_volumes($vmid);
741 # fix disk sizes to match their actual size and write changes,
742 # so that the target allocates the correct volumes
743 $self->config_update_local_disksizes();
744 PVE
::QemuConfig-
>write_config($vmid, $conf);
746 $self->handle_replication($vmid);
748 $self->sync_offline_local_volumes();
749 $self->phase1_remote($vmid) if $self->{opts
}->{remote
};
753 my ($conf, $map, $scan_only) = @_;
757 foreach my $opt (keys %$conf) {
758 next if $opt !~ m/^net\d+$/;
760 next if !$conf->{$opt};
761 my $d = PVE
::QemuServer
::parse_net
($conf->{$opt});
762 next if !$d || !$d->{bridge
};
764 my $target_bridge = PVE
::JSONSchema
::map_id
($map, $d->{bridge
});
765 $bridges->{$target_bridge}->{$opt} = $d->{bridge
};
769 $d->{bridge
} = $target_bridge;
770 $conf->{$opt} = PVE
::QemuServer
::print_net
($d);
777 my ($self, $vmid) = @_;
779 my $remote_conf = PVE
::QemuConfig-
>load_config($vmid);
780 PVE
::QemuConfig-
>update_volume_ids($remote_conf, $self->{volume_map
});
782 my $bridges = map_bridges
($remote_conf, $self->{opts
}->{bridgemap
});
783 for my $target (keys $bridges->%*) {
784 for my $nic (keys $bridges->{$target}->%*) {
785 $self->log('info', "mapped: $nic from $bridges->{$target}->{$nic} to $target");
789 my @online_local_volumes = $self->filter_local_volumes('online');
791 my $storage_map = $self->{opts
}->{storagemap
};
793 PVE
::QemuConfig-
>foreach_volume($remote_conf, sub {
794 my ($ds, $drive) = @_;
797 return if PVE
::QemuServer
::drive_is_cdrom
($drive);
799 my $volid = $drive->{file
};
802 return if !grep { $_ eq $volid} @online_local_volumes;
804 my ($storeid, $volname) = PVE
::Storage
::parse_volume_id
($volid);
805 my $scfg = PVE
::Storage
::storage_config
($self->{storecfg
}, $storeid);
806 my $source_format = PVE
::QemuServer
::qemu_img_format
($scfg, $volname);
808 # set by target cluster
809 my $oldvolid = delete $drive->{file
};
810 delete $drive->{format
};
812 my $targetsid = PVE
::JSONSchema
::map_id
($storage_map, $storeid);
815 format
=> $source_format,
816 storage
=> $targetsid,
820 $self->log('info', "Allocating volume for drive '$ds' on remote storage '$targetsid'..");
821 my $res = PVE
::Tunnel
::write_tunnel
($self->{tunnel
}, 600, 'disk', $params);
823 $self->log('info', "volume '$oldvolid' is '$res->{volid}' on the target\n");
824 $remote_conf->{$ds} = $res->{drivestr
};
825 $self->{nbd
}->{$ds} = $res;
828 my $conf_str = PVE
::QemuServer
::write_vm_config
("remote", $remote_conf);
830 # TODO expose in PVE::Firewall?
831 my $vm_fw_conf_path = "/etc/pve/firewall/$vmid.fw";
833 $fw_conf_str = PVE
::Tools
::file_get_contents
($vm_fw_conf_path)
834 if -e
$vm_fw_conf_path;
837 'firewall-config' => $fw_conf_str,
840 PVE
::Tunnel
::write_tunnel
($self->{tunnel
}, 10, 'config', $params);
844 my ($self, $vmid, $err) = @_;
846 $self->log('info', "aborting phase 1 - cleanup resources");
848 my $conf = $self->{vmconf
};
849 delete $conf->{lock};
850 eval { PVE
::QemuConfig-
>write_config($vmid, $conf) };
852 $self->log('err', $err);
855 eval { $self->cleanup_remotedisks() };
857 $self->log('err', $err);
860 eval { $self->cleanup_bitmaps() };
862 $self->log('err', $err);
866 sub phase2_start_local_cluster
{
867 my ($self, $vmid, $params) = @_;
869 my $conf = $self->{vmconf
};
870 my $local_volumes = $self->{local_volumes
};
871 my @online_local_volumes = $self->filter_local_volumes('online');
873 my $start = $params->{start_params
};
874 my $migrate = $params->{migrate_opts
};
876 $self->log('info', "starting VM $vmid on remote node '$self->{node}'");
878 my $tunnel_info = {};
880 ## start on remote node
881 my $cmd = [@{$self->{rem_ssh
}}];
883 push @$cmd, 'qm', 'start', $vmid;
885 if ($start->{skiplock
}) {
886 push @$cmd, '--skiplock';
889 push @$cmd, '--migratedfrom', $migrate->{migratedfrom
};
891 push @$cmd, '--migration_type', $migrate->{type
};
893 push @$cmd, '--migration_network', $migrate->{network
}
894 if $migrate->{network
};
896 push @$cmd, '--stateuri', $start->{statefile
};
898 if ($start->{forcemachine
}) {
899 push @$cmd, '--machine', $start->{forcemachine
};
902 if ($start->{forcecpu
}) {
903 push @$cmd, '--force-cpu', $start->{forcecpu
};
906 if ($self->{storage_migration
}) {
907 push @$cmd, '--targetstorage', ($self->{opts
}->{targetstorage
} // '1');
911 my $input = "nbd_protocol_version: $migrate->{nbd_proto_version}\n";
913 my @offline_local_volumes = $self->filter_local_volumes('offline');
914 for my $volid (@offline_local_volumes) {
915 my $drivename = $local_volumes->{$volid}->{drivename
};
916 next if !$drivename || !$conf->{$drivename};
918 my $new_volid = $self->{volume_map
}->{$volid};
919 next if !$new_volid || $volid eq $new_volid;
921 # FIXME PVE 8.x only use offline_volume variant once all targets can handle it
922 if ($drivename eq 'tpmstate0') {
923 $input .= "$drivename: $new_volid\n"
925 $input .= "offline_volume: $drivename: $new_volid\n"
929 $input .= "spice_ticket: $migrate->{spice_ticket}\n" if $migrate->{spice_ticket
};
931 my @online_replicated_volumes = $self->filter_local_volumes('online', 1);
932 foreach my $volid (@online_replicated_volumes) {
933 $input .= "replicated_volume: $volid\n";
936 my $handle_storage_migration_listens = sub {
937 my ($drive_key, $drivestr, $nbd_uri) = @_;
939 $self->{stopnbd
} = 1;
940 $self->{target_drive
}->{$drive_key}->{drivestr
} = $drivestr;
941 $self->{target_drive
}->{$drive_key}->{nbd_uri
} = $nbd_uri;
943 my $source_drive = PVE
::QemuServer
::parse_drive
($drive_key, $conf->{$drive_key});
944 my $target_drive = PVE
::QemuServer
::parse_drive
($drive_key, $drivestr);
945 my $source_volid = $source_drive->{file
};
946 my $target_volid = $target_drive->{file
};
948 $self->{volume_map
}->{$source_volid} = $target_volid;
949 $self->log('info', "volume '$source_volid' is '$target_volid' on the target\n");
952 my $target_replicated_volumes = {};
954 # Note: We try to keep $spice_ticket secret (do not pass via command line parameter)
955 # instead we pipe it through STDIN
956 my $exitcode = PVE
::Tools
::run_command
($cmd, input
=> $input, outfunc
=> sub {
959 if ($line =~ m/^migration listens on (tcp):(localhost|[\d\.]+|\[[\d\.:a-fA-F]+\]):(\d+)$/) {
960 $tunnel_info->{addr
} = $2;
961 $tunnel_info->{port
} = int($3);
962 $tunnel_info->{proto
} = $1;
964 elsif ($line =~ m!^migration listens on (unix):(/run/qemu-server/(\d+)\.migrate)$!) {
965 $tunnel_info->{addr
} = $2;
966 die "Destination UNIX sockets VMID does not match source VMID" if $vmid ne $3;
967 $tunnel_info->{proto
} = $1;
969 elsif ($line =~ m/^migration listens on port (\d+)$/) {
970 $tunnel_info->{addr
} = "localhost";
971 $tunnel_info->{port
} = int($1);
972 $tunnel_info->{proto
} = "tcp";
974 elsif ($line =~ m/^spice listens on port (\d+)$/) {
975 $spice_port = int($1);
977 elsif ($line =~ m/^storage migration listens on nbd:(localhost|[\d\.]+|\[[\d\.:a-fA-F]+\]):(\d+):exportname=(\S+) volume:(\S+)$/) {
979 my $nbd_uri = "nbd:$1:$2:exportname=$3";
980 my $targetdrive = $3;
981 $targetdrive =~ s/drive-//g;
983 $handle_storage_migration_listens->($targetdrive, $drivestr, $nbd_uri);
984 } elsif ($line =~ m!^storage migration listens on nbd:unix:(/run/qemu-server/(\d+)_nbd\.migrate):exportname=(\S+) volume:(\S+)$!) {
986 die "Destination UNIX socket's VMID does not match source VMID" if $vmid ne $2;
987 my $nbd_unix_addr = $1;
988 my $nbd_uri = "nbd:unix:$nbd_unix_addr:exportname=$3";
989 my $targetdrive = $3;
990 $targetdrive =~ s/drive-//g;
992 $handle_storage_migration_listens->($targetdrive, $drivestr, $nbd_uri);
993 $tunnel_info->{unix_sockets
}->{$nbd_unix_addr} = 1;
994 } elsif ($line =~ m/^re-using replicated volume: (\S+) - (.*)$/) {
997 $target_replicated_volumes->{$volid} = $drive;
998 } elsif ($line =~ m/^QEMU: (.*)$/) {
999 $self->log('info', "[$self->{node}] $1\n");
1003 $self->log('info', "[$self->{node}] $line");
1006 die "remote command failed with exit code $exitcode\n" if $exitcode;
1008 die "unable to detect remote migration address\n" if !$tunnel_info->{addr
} || !$tunnel_info->{proto
};
1010 if (scalar(keys %$target_replicated_volumes) != scalar(@online_replicated_volumes)) {
1011 die "number of replicated disks on source and target node do not match - target node too old?\n"
1014 return ($tunnel_info, $spice_port);
1017 sub phase2_start_remote_cluster
{
1018 my ($self, $vmid, $params) = @_;
1020 die "insecure migration to remote cluster not implemented\n"
1021 if $params->{migrate_opts
}->{type
} ne 'websocket';
1023 my $remote_vmid = $self->{opts
}->{remote
}->{vmid
};
1025 # like regular start but with some overhead accounted for
1026 my $timeout = PVE
::QemuServer
::Helpers
::config_aware_timeout
($self->{vmconf
}) + 10;
1028 my $res = PVE
::Tunnel
::write_tunnel
($self->{tunnel
}, $timeout, "start", $params);
1030 foreach my $drive (keys %{$res->{drives
}}) {
1031 $self->{stopnbd
} = 1;
1032 $self->{target_drive
}->{$drive}->{drivestr
} = $res->{drives
}->{$drive}->{drivestr
};
1033 my $nbd_uri = $res->{drives
}->{$drive}->{nbd_uri
};
1034 die "unexpected NBD uri for '$drive': $nbd_uri\n"
1035 if $nbd_uri !~ s!/run/qemu-server/$remote_vmid\_!/run/qemu-server/$vmid\_!;
1037 $self->{target_drive
}->{$drive}->{nbd_uri
} = $nbd_uri;
1040 return ($res->{migrate
}, $res->{spice_port
});
1044 my ($self, $vmid) = @_;
1046 my $conf = $self->{vmconf
};
1047 my $local_volumes = $self->{local_volumes
};
1049 # version > 0 for unix socket support
1050 my $nbd_protocol_version = 1;
1053 if (PVE
::QemuServer
::vga_conf_has_spice
($conf->{vga
})) {
1054 my $res = mon_cmd
($vmid, 'query-spice');
1055 $spice_ticket = $res->{ticket
};
1058 my $migration_type = $self->{opts
}->{migration_type
};
1059 my $state_uri = $migration_type eq 'insecure' ?
'tcp' : 'unix';
1063 statefile
=> $state_uri,
1064 forcemachine
=> $self->{forcemachine
},
1065 forcecpu
=> $self->{forcecpu
},
1069 spice_ticket
=> $spice_ticket,
1070 type
=> $migration_type,
1071 network
=> $self->{opts
}->{migration_network
},
1072 storagemap
=> $self->{opts
}->{storagemap
},
1073 migratedfrom
=> PVE
::INotify
::nodename
(),
1074 nbd_proto_version
=> $nbd_protocol_version,
1075 nbd
=> $self->{nbd
},
1079 my ($tunnel_info, $spice_port);
1081 my @online_local_volumes = $self->filter_local_volumes('online');
1082 $self->{storage_migration
} = 1 if scalar(@online_local_volumes);
1084 if (my $remote = $self->{opts
}->{remote
}) {
1085 my $remote_vmid = $remote->{vmid
};
1086 $params->{migrate_opts
}->{remote_node
} = $self->{node
};
1087 ($tunnel_info, $spice_port) = $self->phase2_start_remote_cluster($vmid, $params);
1088 die "only UNIX sockets are supported for remote migration\n"
1089 if $tunnel_info->{proto
} ne 'unix';
1091 my $remote_socket = $tunnel_info->{addr
};
1092 my $local_socket = $remote_socket;
1093 $local_socket =~ s/$remote_vmid/$vmid/g;
1094 $tunnel_info->{addr
} = $local_socket;
1096 $self->log('info', "Setting up tunnel for '$local_socket'");
1097 PVE
::Tunnel
::forward_unix_socket
($self->{tunnel
}, $local_socket, $remote_socket);
1099 foreach my $remote_socket (@{$tunnel_info->{unix_sockets
}}) {
1100 my $local_socket = $remote_socket;
1101 $local_socket =~ s/$remote_vmid/$vmid/g;
1102 next if $self->{tunnel
}->{forwarded
}->{$local_socket};
1103 $self->log('info', "Setting up tunnel for '$local_socket'");
1104 PVE
::Tunnel
::forward_unix_socket
($self->{tunnel
}, $local_socket, $remote_socket);
1107 ($tunnel_info, $spice_port) = $self->phase2_start_local_cluster($vmid, $params);
1109 $self->log('info', "start remote tunnel");
1110 $self->start_remote_tunnel($tunnel_info);
1113 my $migrate_uri = "$tunnel_info->{proto}:$tunnel_info->{addr}";
1114 $migrate_uri .= ":$tunnel_info->{port}"
1115 if defined($tunnel_info->{port
});
1117 if ($self->{storage_migration
}) {
1118 $self->{storage_migration_jobs
} = {};
1119 $self->log('info', "starting storage migration");
1121 die "The number of local disks does not match between the source and the destination.\n"
1122 if (scalar(keys %{$self->{target_drive
}}) != scalar(@online_local_volumes));
1123 foreach my $drive (keys %{$self->{target_drive
}}){
1124 my $target = $self->{target_drive
}->{$drive};
1125 my $nbd_uri = $target->{nbd_uri
};
1127 my $source_drive = PVE
::QemuServer
::parse_drive
($drive, $conf->{$drive});
1128 my $source_volid = $source_drive->{file
};
1130 my $bwlimit = $self->{local_volumes
}->{$source_volid}->{bwlimit
};
1131 my $bitmap = $target->{bitmap
};
1133 $self->log('info', "$drive: start migration to $nbd_uri");
1134 PVE
::QemuServer
::qemu_drive_mirror
($vmid, $drive, $nbd_uri, $vmid, undef, $self->{storage_migration_jobs
}, 'skip', undef, $bwlimit, $bitmap);
1138 $self->log('info', "starting online/live migration on $migrate_uri");
1139 $self->{livemigration
} = 1;
1142 my $defaults = PVE
::QemuServer
::load_defaults
();
1144 $self->log('info', "set migration capabilities");
1145 eval { PVE
::QemuServer
::set_migration_caps
($vmid) };
1148 my $qemu_migrate_params = {};
1150 # migrate speed can be set via bwlimit (datacenter.cfg and API) and via the
1151 # migrate_speed parameter in qm.conf - take the lower of the two.
1152 my $bwlimit = $self->get_bwlimit();
1154 my $migrate_speed = $conf->{migrate_speed
} // 0;
1155 $migrate_speed *= 1024; # migrate_speed is in MB/s, bwlimit in KB/s
1157 if ($bwlimit && $migrate_speed) {
1158 $migrate_speed = ($bwlimit < $migrate_speed) ?
$bwlimit : $migrate_speed;
1160 $migrate_speed ||= $bwlimit;
1162 $migrate_speed ||= ($defaults->{migrate_speed
} || 0) * 1024;
1164 if ($migrate_speed) {
1165 $migrate_speed *= 1024; # qmp takes migrate_speed in B/s.
1166 $self->log('info', "migration speed limit: ". render_bytes
($migrate_speed, 1) ."/s");
1168 # always set migrate speed as QEMU default to 128 MiBps == 1 Gbps, use 16 GiBps == 128 Gbps
1169 $migrate_speed = (16 << 30);
1171 $qemu_migrate_params->{'max-bandwidth'} = int($migrate_speed);
1173 my $migrate_downtime = $defaults->{migrate_downtime
};
1174 $migrate_downtime = $conf->{migrate_downtime
} if defined($conf->{migrate_downtime
});
1175 # migrate-set-parameters expects limit in ms
1176 $migrate_downtime *= 1000;
1177 $self->log('info', "migration downtime limit: $migrate_downtime ms");
1178 $qemu_migrate_params->{'downtime-limit'} = int($migrate_downtime);
1180 # set cachesize to 10% of the total memory
1181 my $memory = $conf->{memory
} || $defaults->{memory
};
1182 my $cachesize = int($memory * 1048576 / 10);
1183 $cachesize = round_powerof2
($cachesize);
1185 $self->log('info', "migration cachesize: " . render_bytes
($cachesize, 1));
1186 $qemu_migrate_params->{'xbzrle-cache-size'} = int($cachesize);
1188 $self->log('info', "set migration parameters");
1190 mon_cmd
($vmid, "migrate-set-parameters", %{$qemu_migrate_params});
1192 $self->log('info', "migrate-set-parameters error: $@") if $@;
1194 if (PVE
::QemuServer
::vga_conf_has_spice
($conf->{vga
}) && !$self->{opts
}->{remote
}) {
1195 my $rpcenv = PVE
::RPCEnvironment
::get
();
1196 my $authuser = $rpcenv->get_user();
1198 my (undef, $proxyticket) = PVE
::AccessControl
::assemble_spice_ticket
($authuser, $vmid, $self->{node
});
1200 my $filename = "/etc/pve/nodes/$self->{node}/pve-ssl.pem";
1201 my $subject = PVE
::AccessControl
::read_x509_subject_spice
($filename);
1203 $self->log('info', "spice client_migrate_info");
1206 mon_cmd
($vmid, "client_migrate_info", protocol
=> 'spice',
1207 hostname
=> $proxyticket, 'port' => 0, 'tls-port' => $spice_port,
1208 'cert-subject' => $subject);
1210 $self->log('info', "client_migrate_info error: $@") if $@;
1216 $self->log('info', "start migrate command to $migrate_uri");
1218 mon_cmd
($vmid, "migrate", uri
=> $migrate_uri);
1221 $self->log('info', "migrate uri => $migrate_uri failed: $merr") if $merr;
1223 my $last_mem_transferred = 0;
1224 my $usleep = 1000000;
1227 my $lastrem = undef;
1228 my $downtimecounter = 0;
1231 my $avglstat = $last_mem_transferred ?
$last_mem_transferred / $i : 0;
1235 my $stat = eval { mon_cmd
($vmid, "query-migrate") };
1238 warn "query migrate failed: $err\n";
1239 $self->log('info', "query migrate failed: $err");
1240 if ($err_count <= 5) {
1244 die "too many query migrate failures - aborting\n";
1247 my $status = $stat->{status
};
1248 if (defined($status) && $status =~ m/^(setup)$/im) {
1253 if (!defined($status) || $status !~ m/^(active|completed|failed|cancelled)$/im) {
1255 die "unable to parse migration status '$status' - aborting\n";
1260 my $memstat = $stat->{ram
};
1262 if ($status eq 'completed') {
1263 my $delay = time() - $start;
1265 my $total = $memstat->{total
} || 0;
1266 my $avg_speed = render_bytes
($total / $delay, 1);
1267 my $downtime = $stat->{downtime
} || 0;
1268 $self->log('info', "average migration speed: $avg_speed/s - downtime $downtime ms");
1272 if ($status eq 'failed' || $status eq 'cancelled') {
1273 my $message = $stat->{'error-desc'} ?
"$status - $stat->{'error-desc'}" : $status;
1274 $self->log('info', "migration status error: $message");
1278 if ($status ne 'active') {
1279 $self->log('info', "migration status: $status");
1283 if ($memstat->{transferred
} ne $last_mem_transferred) {
1284 my $trans = $memstat->{transferred
} || 0;
1285 my $rem = $memstat->{remaining
} || 0;
1286 my $total = $memstat->{total
} || 0;
1287 my $speed = ($memstat->{'pages-per-second'} // 0) * ($memstat->{'page-size'} // 0);
1288 my $dirty_rate = ($memstat->{'dirty-pages-rate'} // 0) * ($memstat->{'page-size'} // 0);
1290 # reduce sleep if remainig memory is lower than the average transfer speed
1291 $usleep = 100_000 if $avglstat && $rem < $avglstat;
1293 # also reduce loggin if we poll more frequent
1294 my $should_log = $usleep > 100_000 ?
1 : ($i % 10) == 0;
1296 my $total_h = render_bytes
($total, 1);
1297 my $transferred_h = render_bytes
($trans, 1);
1298 my $speed_h = render_bytes
($speed, 1);
1300 my $progress = "transferred $transferred_h of $total_h VM-state, ${speed_h}/s";
1302 if ($dirty_rate > $speed) {
1303 my $dirty_rate_h = render_bytes
($dirty_rate, 1);
1304 $progress .= ", VM dirties lots of memory: $dirty_rate_h/s";
1307 $self->log('info', "migration $status, $progress") if $should_log;
1309 my $xbzrle = $stat->{"xbzrle-cache"} || {};
1310 my ($xbzrlebytes, $xbzrlepages) = $xbzrle->@{'bytes', 'pages'};
1311 if ($xbzrlebytes || $xbzrlepages) {
1312 my $bytes_h = render_bytes
($xbzrlebytes, 1);
1314 my $msg = "send updates to $xbzrlepages pages in $bytes_h encoded memory";
1316 $msg .= sprintf(", cache-miss %.2f%%", $xbzrle->{'cache-miss-rate'} * 100)
1317 if $xbzrle->{'cache-miss-rate'};
1319 $msg .= ", overflow $xbzrle->{overflow}" if $xbzrle->{overflow
};
1321 $self->log('info', "xbzrle: $msg") if $should_log;
1324 if (($lastrem && $rem > $lastrem) || ($rem == 0)) {
1329 if ($downtimecounter > 5) {
1330 $downtimecounter = 0;
1331 $migrate_downtime *= 2;
1332 $self->log('info', "auto-increased downtime to continue migration: $migrate_downtime ms");
1334 # migrate-set-parameters does not touch values not
1335 # specified, so this only changes downtime-limit
1336 mon_cmd
($vmid, "migrate-set-parameters", 'downtime-limit' => int($migrate_downtime));
1338 $self->log('info', "migrate-set-parameters error: $@") if $@;
1342 $last_mem_transferred = $memstat->{transferred
};
1345 if ($self->{storage_migration
}) {
1346 # finish block-job with block-job-cancel, to disconnect source VM from NBD
1347 # to avoid it trying to re-establish it. We are in blockjob ready state,
1348 # thus, this command changes to it to blockjob complete (see qapi docs)
1349 eval { PVE
::QemuServer
::qemu_drive_mirror_monitor
($vmid, undef, $self->{storage_migration_jobs
}, 'cancel'); };
1351 die "Failed to complete storage migration: $err\n";
1356 sub phase2_cleanup
{
1357 my ($self, $vmid, $err) = @_;
1359 return if !$self->{errors
};
1360 $self->{phase2errors
} = 1;
1362 $self->log('info', "aborting phase 2 - cleanup resources");
1364 $self->log('info', "migrate_cancel");
1366 mon_cmd
($vmid, "migrate_cancel");
1368 $self->log('info', "migrate_cancel error: $@") if $@;
1370 my $vm_status = eval {
1371 mon_cmd
($vmid, 'query-status')->{status
} or die "no 'status' in result\n";
1373 $self->log('err', "query-status error: $@") if $@;
1375 # Can end up in POSTMIGRATE state if failure occurred after convergence. Try going back to
1376 # original state. Unfortunately, direct transition from POSTMIGRATE to PAUSED is not possible.
1377 if ($vm_status && $vm_status eq 'postmigrate') {
1378 if (!$self->{vm_was_paused
}) {
1379 eval { mon_cmd
($vmid, 'cont'); };
1380 $self->log('err', "resuming VM failed: $@") if $@;
1382 $self->log('err', "VM was paused, but ended in postmigrate state");
1386 my $conf = $self->{vmconf
};
1387 delete $conf->{lock};
1388 eval { PVE
::QemuConfig-
>write_config($vmid, $conf) };
1390 $self->log('err', $err);
1393 # cleanup ressources on target host
1394 if ($self->{storage_migration
}) {
1395 eval { PVE
::QemuServer
::qemu_blockjobs_cancel
($vmid, $self->{storage_migration_jobs
}) };
1397 $self->log('err', $err);
1401 eval { $self->cleanup_bitmaps() };
1403 $self->log('err', $err);
1406 my $nodename = PVE
::INotify
::nodename
();
1408 if ($self->{tunnel
} && $self->{tunnel
}->{version
} >= 2) {
1409 PVE
::Tunnel
::write_tunnel
($self->{tunnel
}, 10, 'stop');
1411 my $cmd = [@{$self->{rem_ssh
}}, 'qm', 'stop', $vmid, '--skiplock', '--migratedfrom', $nodename];
1412 eval{ PVE
::Tools
::run_command
($cmd, outfunc
=> sub {}, errfunc
=> sub {}) };
1414 $self->log('err', $err);
1415 $self->{errors
} = 1;
1419 # cleanup after stopping, otherwise disks might be in-use by target VM!
1420 eval { PVE
::QemuMigrate
::cleanup_remotedisks
($self) };
1422 $self->log('err', $err);
1426 if ($self->{tunnel
}) {
1427 eval { PVE
::Tunnel
::finish_tunnel
($self->{tunnel
}); };
1429 $self->log('err', $err);
1430 $self->{errors
} = 1;
1436 my ($self, $vmid) = @_;
1441 sub phase3_cleanup
{
1442 my ($self, $vmid, $err) = @_;
1444 my $conf = $self->{vmconf
};
1445 return if $self->{phase2errors
};
1447 my $tunnel = $self->{tunnel
};
1449 if ($self->{volume_map
} && !$self->{opts
}->{remote
}) {
1450 my $target_drives = $self->{target_drive
};
1452 # FIXME: for NBD storage migration we now only update the volid, and
1453 # not the full drivestr from the target node. Workaround that until we
1454 # got some real rescan, to avoid things like wrong format in the drive
1455 delete $conf->{$_} for keys %$target_drives;
1456 PVE
::QemuConfig-
>update_volume_ids($conf, $self->{volume_map
});
1458 for my $drive (keys %$target_drives) {
1459 $conf->{$drive} = $target_drives->{$drive}->{drivestr
};
1461 PVE
::QemuConfig-
>write_config($vmid, $conf);
1464 # transfer replication state before move config
1465 if (!$self->{opts
}->{remote
}) {
1466 $self->transfer_replication_state() if $self->{is_replicated
};
1467 PVE
::QemuConfig-
>move_config_to_node($vmid, $self->{node
});
1468 $self->switch_replication_job_target() if $self->{is_replicated
};
1471 if ($self->{livemigration
}) {
1472 if ($self->{stopnbd
}) {
1473 $self->log('info', "stopping NBD storage migration server on target.");
1474 # stop nbd server on remote vm - requirement for resume since 2.9
1475 if ($tunnel && $tunnel->{version
} && $tunnel->{version
} >= 2) {
1476 PVE
::Tunnel
::write_tunnel
($tunnel, 30, 'nbdstop');
1478 my $cmd = [@{$self->{rem_ssh
}}, 'qm', 'nbdstop', $vmid];
1480 eval{ PVE
::Tools
::run_command
($cmd, outfunc
=> sub {}, errfunc
=> sub {}) };
1482 $self->log('err', $err);
1483 $self->{errors
} = 1;
1488 # deletes local FDB entries if learning is disabled, they'll be re-added on target on resume
1489 PVE
::QemuServer
::del_nets_bridge_fdb
($conf, $vmid);
1491 if (!$self->{vm_was_paused
}) {
1492 # config moved and nbd server stopped - now we can resume vm on target
1493 if ($tunnel && $tunnel->{version
} && $tunnel->{version
} >= 1) {
1494 my $cmd = $tunnel->{version
} == 1 ?
"resume $vmid" : "resume";
1496 PVE
::Tunnel
::write_tunnel
($tunnel, 30, $cmd);
1499 $self->log('err', $err);
1500 $self->{errors
} = 1;
1503 # nocheck in case target node hasn't processed the config move/rename yet
1504 my $cmd = [@{$self->{rem_ssh
}}, 'qm', 'resume', $vmid, '--skiplock', '--nocheck'];
1507 $self->log('err', $line);
1509 eval { PVE
::Tools
::run_command
($cmd, outfunc
=> sub {}, errfunc
=> $logf); };
1511 $self->log('err', $err);
1512 $self->{errors
} = 1;
1518 $self->{storage_migration
}
1519 && PVE
::QemuServer
::parse_guest_agent
($conf)->{fstrim_cloned_disks
}
1522 if (!$self->{vm_was_paused
}) {
1523 $self->log('info', "issuing guest fstrim");
1524 if ($self->{opts
}->{remote
}) {
1525 PVE
::Tunnel
::write_tunnel
($self->{tunnel
}, 600, 'fstrim');
1527 my $cmd = [@{$self->{rem_ssh
}}, 'qm', 'guest', 'cmd', $vmid, 'fstrim'];
1528 eval{ PVE
::Tools
::run_command
($cmd, outfunc
=> sub {}, errfunc
=> sub {}) };
1530 $self->log('err', "fstrim failed - $err");
1531 $self->{errors
} = 1;
1535 $self->log('info', "skipping guest fstrim, because VM is paused");
1540 # close tunnel on successful migration, on error phase2_cleanup closed it
1541 if ($tunnel && $tunnel->{version
} == 1) {
1542 eval { PVE
::Tunnel
::finish_tunnel
($tunnel); };
1544 $self->log('err', $err);
1545 $self->{errors
} = 1;
1548 delete $self->{tunnel
};
1553 if (PVE
::QemuServer
::vga_conf_has_spice
($conf->{vga
}) && $self->{running
}) {
1554 $self->log('info', "Waiting for spice server migration");
1556 my $res = mon_cmd
($vmid, 'query-spice');
1557 last if int($res->{'migrated'}) == 1;
1558 last if $timer > 50;
1565 # always stop local VM with nocheck, since config is moved already
1566 eval { PVE
::QemuServer
::vm_stop
($self->{storecfg
}, $vmid, 1, 1); };
1568 $self->log('err', "stopping vm failed - $err");
1569 $self->{errors
} = 1;
1572 # always deactivate volumes - avoid lvm LVs to be active on several nodes
1574 my $vollist = PVE
::QemuServer
::get_vm_volumes
($conf);
1575 PVE
::Storage
::deactivate_volumes
($self->{storecfg
}, $vollist);
1578 $self->log('err', $err);
1579 $self->{errors
} = 1;
1582 my @not_replicated_volumes = $self->filter_local_volumes(undef, 0);
1584 # destroy local copies
1585 foreach my $volid (@not_replicated_volumes) {
1586 # remote is cleaned up below
1587 next if $self->{opts
}->{remote
};
1589 eval { PVE
::Storage
::vdisk_free
($self->{storecfg
}, $volid); };
1591 $self->log('err', "removing local copy of '$volid' failed - $err");
1592 $self->{errors
} = 1;
1593 last if $err =~ /^interrupted by signal$/;
1597 # clear migrate lock
1598 if ($tunnel && $tunnel->{version
} >= 2) {
1599 PVE
::Tunnel
::write_tunnel
($tunnel, 10, "unlock");
1601 PVE
::Tunnel
::finish_tunnel
($tunnel);
1603 my $cmd = [ @{$self->{rem_ssh
}}, 'qm', 'unlock', $vmid ];
1604 $self->cmd_logerr($cmd, errmsg
=> "failed to clear migrate lock");
1607 if ($self->{opts
}->{remote
} && $self->{opts
}->{delete}) {
1608 eval { PVE
::QemuServer
::destroy_vm
($self->{storecfg
}, $vmid, 1, undef, 0) };
1609 warn "Failed to remove source VM - $@\n" if $@;
1614 my ($self, $vmid) = @_;
1619 sub round_powerof2
{
1620 return 1 if $_[0] < 2;
1621 return 2 << int(log($_[0]-1)/log(2));