Firecracker VMs

Community Support
1

Hello,

I’m testing Firecracker VMs in my testing OpenNebula environment. All my server and nodes are running Debian-11.7 with OpenNebula 6.6.0.

I have added a Firecracker node, running step-by-step this procedure Firecracker Node Installation — OpenNebula 6.6.2 documentation. However, I’m getting some problems that I’m going to explain now:

  1. I can’t get a VNC connection (with Guacd). I get “CLIENT ERROR” message en the VNC tab.

  2. Firecracker VMs start correctly, but after some seconds (10 or 20), VMs shutdown automatically.

  3. During the 10 or 20 seconds VMs are running, it seems network is not working. In Sunstone it seems that each VM has assigned an IP, but I can’t ping from server to VMs and, also, in the Firecracker node the one-$VM_ID-0 devices appear with “NO-CARRIER”.

Could anybody help me?

Thanks.

2

Hi! @atodorov_storpool @cgonzalez @ahuertas,

I add reported logs:

  1. From a Guacamole connection to a KVM VM (good):
||Jun 27 09:00:59 nebulatest1 guacd[755]: Creating new client for protocol vnc|
|---|---|
||Jun 27 09:00:59 nebulatest1 opennebula-guacd[755]: guacd[755]: INFO:#011Creating new client for protocol vnc|
||Jun 27 09:00:59 nebulatest1 opennebula-guacd[755]: guacd[755]: INFO:#011Connection ID is $027a70ed-50e8-45e9-a9bc-2fa64fdf5b55|
||Jun 27 09:00:59 nebulatest1 guacd[755]: Connection ID is $027a70ed-50e8-45e9-a9bc-2fa64fdf5b55|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: Cursor rendering: local|
||Jun 27 09:00:59 nebulatest1 opennebula-guacd[1476595]: guacd[1476595]: INFO:#011Cursor rendering: local|
||Jun 27 09:00:59 nebulatest1 opennebula-guacd[1476595]: guacd[1476595]: INFO:#011User @0600b187-34a4-46dd-8c63-e924707bddc7 joined connection $027a70ed-50e8-45e9-a9bc-2fa64fdf5b55 (1 users now present)|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: User @0600b187-34a4-46dd-8c63-e924707bddc7 joined connection $027a70ed-50e8-45e9-a9bc-2fa64fdf5b55 (1 users now present)|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: VNC server supports protocol version 3.8 (viewer 3.8)|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: We have 1 security types to read|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: 0) Received security type 1|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: Selecting security type 1 (0/1 in the list)|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: Selected Security Scheme 1|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: No authentication needed|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: VNC authentication succeeded|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: Desktop name QEMU (one-4)|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: Connected to VNC server, using protocol version 3.8|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]: VNC server default format:|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]:   32 bits per pixel.|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]:   Least significant byte first in each pixel.|
||Jun 27 09:00:59 nebulatest1 guacd[1476595]:   TRUE colour: max red 255 green 255 blue 255, shift red 16 green 8 blue 0|
  1. From a Guacamole connection to a Firecracker VM (fails):
||Jun 27 09:01:04 nebulatest1 guacd[755]: Creating new client for protocol vnc|
|---|---|
||Jun 27 09:01:04 nebulatest1 guacd[755]: Connection ID is $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588|
||Jun 27 09:01:04 nebulatest1 opennebula-guacd[755]: guacd[755]: INFO:#011Creating new client for protocol vnc|
||Jun 27 09:01:04 nebulatest1 opennebula-guacd[755]: guacd[755]: INFO:#011Connection ID is $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588|
||Jun 27 09:01:04 nebulatest1 guacd[1476647]: Cursor rendering: local|
||Jun 27 09:01:04 nebulatest1 guacd[1476647]: User @26990112-f5ec-4885-ade8-d3e9ddcb53c1 joined connection $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588 (1 users now present)|
||Jun 27 09:01:04 nebulatest1 opennebula-guacd[1476647]: guacd[1476647]: INFO:#011Cursor rendering: local|
||Jun 27 09:01:04 nebulatest1 opennebula-guacd[1476647]: guacd[1476647]: INFO:#011User @26990112-f5ec-4885-ade8-d3e9ddcb53c1 joined connection $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588 (1 users now present)|
||Jun 27 09:01:04 nebulatest1 guacd[1476647]: VNC server closed connection|
||Jun 27 09:01:04 nebulatest1 guacd[1476647]: Unable to connect to VNC server.|
||Jun 27 09:01:04 nebulatest1 opennebula-guacd[1476647]: guacd[1476647]: ERROR:#011Unable to connect to VNC server.|
||Jun 27 09:01:05 nebulatest1 guacd[1476647]: User @26990112-f5ec-4885-ade8-d3e9ddcb53c1 disconnected (0 users remain)|
||Jun 27 09:01:05 nebulatest1 opennebula-guacd[1476647]: guacd[1476647]: INFO:#011User @26990112-f5ec-4885-ade8-d3e9ddcb53c1 disconnected (0 users remain)|
||Jun 27 09:01:05 nebulatest1 opennebula-guacd[1476647]: guacd[1476647]: INFO:#011Last user of connection $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588 disconnected|
||Jun 27 09:01:05 nebulatest1 guacd[1476647]: Last user of connection $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588 disconnected|
||Jun 27 09:01:05 nebulatest1 guacd[755]: Connection $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588 removed.|
||Jun 27 09:01:05 nebulatest1 opennebula-guacd[755]: guacd[755]: INFO:#011Connection $2ab9b37f-07cb-4e29-a2b4-a6f24e6bb588 removed.|

In 2., you could see message “VNC server closed connection” and “Unable to connect to VNC server” and, then, VNC tab shows “CLIENT ERROR”.

Please, help!

3

Perhaps is a problem similar to this one where the configuration is not supported. Try and look at the fifo.log.

  1. From a Guacamole connection to a Firecracker VM (fails):

The VNC server which firecracker uses is different from KVM. The output of a screen session is exported on a port in the host. If the VM is not running this will not work. In any case, you can look for the processes screen and svncterm on the hypervisor node.