driver[+transport]://[username@][hostname][:port]/[path][?extraparameters]
|
Component
|
Description
|
|---|---|
|
driver
|
The name of the libvirt hypervisor driver to connect to. This is the same as that used in a local URI. Some examples are
xen, qemu, lxc, openvz, and test. As a special case, the psuedo driver name remote can be used, which will cause the remote daemon to probe for an active hypervisor and pick one to use. As a general rule if the application knows what hypervisor it wants, it should always specify the explicit driver name and not rely on automatic probing.
|
|
transport
|
The name of one of the data transports described earlier in this section. Possible values include
tls, tcp, unix, ssh and ext. If omitted, it will default to tls if a hostname is provided, or unix if no hostname is provided.
|
|
username
|
When using the SSH data transport this allows choice of a username that differs from the client's current login name.
|
|
hostname
|
The fully qualified hostname of the remote machine. If using TLS with x509 certificates, or SASL with the GSSAPI/Keberos plug-in, it is critical that this hostname match the hostname used in the server's x509 certificates / Kerberos principle. Mis-matched hostnames will guarantee authentication failures.
|
|
port
|
Rarely needed, unless SSH or libvirtd has been configured to run on a non-standard TCP port. Defaults to
22 for the SSH data transport, 16509 for the TCP data transport and 16514 for the TLS data transport.
|
|
path
|
The path should be the same path used for the hypervisor driver's local URIs. For Xen, this is always just
/, while for QEMU this would be /system.
|
|
extraparameters
|
The URI query parameters provide the mean to fine tune some aspects of the remote connection, and are discussed in depth in the next section.
|
Connect to a remote Xen hypervisor on hostnode.example.comusing ssh tunneled data transport and ssh usernameroot:xen+ssh://root@node.example.com/Connect to a remote QEMU hypervisor on hostnode.example.comusing TLS with x509 certificates:qemu://node.example.com/systemConnect to a remote Xen hypervisor on hostnode.example.comusing TLS, skipping verification of the server's x509 certificate (NB: this is compromising your security):xen://node.example.com/?no_verify=1Connect to the local QEMU instances over a non-standard Unix socket (the full path to the Unix socket is supplied explicitly in this case):qemu+unix:///system?socket=/opt/libvirt/run/libvirt/libvirt-sockConnect to a libvirtd daemon offering unencrypted TCP/IP connections on an alternative TCP port 5000 and use the test driver with default configuration:test+tcp://node.example.com:5000/default
|
Name
|
Transports
|
Description
|
|---|---|---|
name
|
any transport
|
The local hypervisor URI passed to the remote virConnectOpen function. This URI is normally formed by removing transport, hostname, port number, username and extra parameters from the remote URI, but in certain very complex cases it may be necessary to supply the name explicitly. Example:
name=qemu:///system
|
command
|
ssh, ext
|
The external command. For ext transport this is required. For ssh the default is ssh. The PATH is searched for the command. Example:
command=/opt/openssh/bin/ssh
|
|
socket
|
unix, ssh
|
The external command. For ext transport this is required. For ssh the default is
ssh. The PATH is searched for the command. Example: socket=/opt/libvirt/run/libvirt/libvirt-sock
|
|
netcat
|
ssh
|
The name of the netcat command on the remote machine. The default is nc. For ssh transport, libvirt constructs an ssh command which looks like:
command -p port [-l username] hostname netcat -U socketWhere port, username, hostname can be specified as part of the remote URI, and command, netcat and socket come from extra parameters (or sensible defaults). Example: netcat=/opt/netcat/bin/nc
|
|
no_verify
|
tls
|
Client checks of the server's certificate are disable if a non-zero value is set. Note that to disable server checks of the client's certificate or IP address you must change the libvirtd configuration . Example:
no_verify=1
|
|
no_tty
|
ssh
|
If set to a non-zero value, this stops ssh from asking for a password if it cannot log in to the remote machine automatically (For example, when using a ssh-agent). Use this when you don't have access to a terminal - for example in graphical programs which use libvirt. Example:
no_tty=1
|