<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=koi8-r">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="RU" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Dear libguestfs developers, <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We are developing the protected enterprise system based on several Red Hat technologies (Red Hat Enterprise Virtualisation, the IdM server and so on). Our current goal is to prevent the booting of the virtual machine
in case of integrity loss. So what we are trying to do Is to intercept the event of the VM’s start (using the RHEV Manager hook scripts), mount the starting VM’s disk image with libguestfs and check the hash sums of the system files.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">When we have a local storage of disk images (manager, hypervisor and storage – all in one host), this approach works just perfect.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">But even a little bit complex network (with at least one manager, one hypervisor and one iSCSI/FC storage – three standalone physical hosts) blows our minds. RHEV Manager API provides the list of disk images which are
(in this configurations) are logical volumes on the hypervisor and appear in hypervisor’s /dev/mapper directory. But libguestfs from RHEV manager cannot access them. Examples from libguestfs and guestfish guide (for instance, over ssh) do not work. And even
more, which host should we access – a hypervisor (with a different logical volumes) or a storage (with a monolith volume group)?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Software version: RHEV 3.1, libguestfs 1.16.34, guest OS – RHEL 6.4, arch: x86_64.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">P.S. May be I had to post this message directly to the support, but I’d suggest that this topic would be useful for community.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thank you,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:RU">Виталий</span><span style="font-size:10.0pt;mso-fareast-language:RU">
</span><span style="font-size:10.0pt;mso-fareast-language:RU">Исаев</span><span lang="EN-US" style="font-size:10.0pt;mso-fareast-language:RU"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">Инженер</span><span lang="EN-US" style="font-size:10.0pt;color:gray;mso-fareast-language:RU">-</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">программист</span><span lang="EN-US" style="font-size:10.0pt;color:gray;mso-fareast-language:RU"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">Группа</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">
</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">разработки</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">
</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">и</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">
</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">внедрения</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">
</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">ПСЗИ</span><span lang="EN-US" style="font-size:10.0pt;color:gray;mso-fareast-language:RU"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">Департамент</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">
</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">информационной</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">
</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">безопасности</span><span lang="EN-US" style="font-size:10.0pt;color:gray;mso-fareast-language:RU"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">ОАО</span><span lang="EN-US" style="font-size:10.0pt;color:gray;mso-fareast-language:RU"> «</span><span style="font-size:10.0pt;color:gray;mso-fareast-language:RU">Финтех</span><span lang="EN-US" style="font-size:10.0pt;color:gray;mso-fareast-language:RU">»<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</body>
</html>