XenServer Administrator's Guide

Release 4.1.0

Table of Contents

Overview
XenServer Hosts and resource pools
Networking
Storage
Command Line Interface
How this Guide relates to other documentation
XenServer Hosts and resource pools
Requirements for creating resource pools
Creating a resource pool
Adding shared storage
Installing and managing VMs on shared storage
Removing a XenServer Host from a resource pool
Backups
Coping with machine failures
Member failures
Master failures
Pool failures
Coping with Failure due to Configuration Errors
Physical Machine failure
Storage
Overview
Storage repositories (SRs)
Virtual Disk Images (VDI)
Managing Storage
Storage Repository Types
Local Disks
Local hotplug devices
Shared Network Attached Storage using NFS
Shared iSCSI Storage
Shared LVM storage over FC or iSCSI hardware HBAs
Shared NetApp Storage
Storage configuration examples
Creating Storage Repositories
Probing an SR
Creating a local LVM SR (lvm)
Creating a local EXT3 SR (ext)
Creating a shared NFS SR (nfs)
Creating a shared LVM over iSCSI SR using the software iSCSI initiator (lvmoiscsi)
Creating a shared LVM over Fibre Channel or iSCSI HBA SR (lvmohba)
Creating a shared NetApp SR over iSCSI
Managing Storage Repositories
Destroying or forgetting a SR
Introducing a SR
Converting local Fibre Channel SRs to shared SRs
Moving Virtual Disk Images (VDIs) between SRs
Managing VDIs in a Netapp SR
Taking VDI snapshots with a Netapp SR
Adjusting the disk IO scheduler for an LVM-based SR
Managing Host Bus Adapters (HBAs)
Sample QLogic iSCSI HBA setup
Removing HBA-based FC or iSCSI device entries
Virtual disk QoS settings (Enterprise Edition only)
Networking
Networking configuration performed during Host installation
Managing networking configuration for standalone XenServer Hosts
Creating networks
Connecting Virtual Machines (VMs) to networks
Creating VLANs
Creating NIC bonds
Controlling Quality of Service (QoS)
Dedicating a NIC to storage traffic
Changing networking configuration options
Managing networking configuration for XenServer pools
Networks in resource pools
Creating NIC bonds in resource pools
Changing XenServer Host IP address configuration in resource pools
NIC/PIF ordering
Networking Troubleshooting
Diagnosing network corruption
Recovering from a bad network configuration
Command line interface
Basic xe syntax
Special characters and syntax
Command types
Parameter types
Low-level param commands
Low-level list commands
xe command reference
Bonding commands
CD commands
Console commands
Event commands
Host (XenServer Host) commands
Log commands
Network commands
Patch (update) commands
PBD commands
PIF commands
Pool commands
Storage Manager commands
SR commands
Task commands
Template commands
Update commands
User commands
VBD commands
VDI commands
VIF commands
VLAN commands
VM commands
Troubleshooting
XenServer Host logs
Sending log messages to a central server
Troubleshooting connections between XenCenter and the XenServer Host
Special debug boot options
Index

This document is an administrator's guide to XenServer™, the platform virtualization solution from Citrix™. It describes the tasks involved in configuring a XenServer deployment -- in particular, how to set up storage, networking and resource pools, and how to administer XenServer Hosts using the xe command line interface (CLI).

This section summarizes the rest of the guide so that you can find the information you need. The following topics are covered:

  • XenServer Hosts and resource pools
  • XenServer network configuration
  • XenServer storage configuration
  • XenServer command line interface

A resource pool is a connected group of up to 16 XenServer Hosts that, combined with shared storage, provides a platform on which VMs run. VMs can be started on different hosts within the resource pool, and can even be live migrated between pool hosts in order to minimize downtime.

The XenServer Hosts and resource pools chapter introduces the concept of resource pools and describes how to:

  • add and remove XenServer Hosts from pools
  • create shared storage and attach it to a pool
  • start VMs on different XenServer Hosts within a pool
  • live migrate running VMs between XenServer Hosts within a pool

The Networking chapter introduces physical and virtual network concepts, describing how to:

  • configure physical networking on XenServer Hosts and resource pools
  • create virtual network interfaces for VMs, and bridge these to physical networks
  • work with VLANs

The Storage chapter introduces physical and virtual storage concepts, describing how to:

  • create shared and local storage repositories on a variety of different substrates (including iSCSI, NFS and Fibre Channel)
  • create virtual disk images within storage repositories as part of the process of installing VMs
  • manage and administer storage repositories

The Command Line Interface chapter introduces "xe": a powerful CLI that facilitates administration of all aspects of XenServer, including host configuration, storage, networking and VMs. The CLI guide describes:

  • the syntax of xe commands
  • using xe in both on- and off-host modes on both Windows and Linux
  • using xe to query the parameters of physical and virtual objects, including hosts, networks, storage repositories, virtual disks and VMs
  • using xe to configure XenServer deployments (including host, network, storage and VM configuration)

A resource pool comprises multiple XenServer Host installations, bound together into a single managed entity which can host Virtual Machines. When combined with shared storage, a resource pool enables VMs to be started on any XenServer Host which has sufficient memory and then dynamically moved between XenServer Hosts while running with minimal downtime (XenMotion). If an individual XenServer Host suffers a hardware failure, then the administrator can restart the failed VMs on another XenServer Host in the same resource pool. Up to 16 hosts are supported per resource pool, although this restriction is not enforced.

This chapter describes how resource pools can be created through a series of examples using the xe command line interface (CLI). A simple NFS-based shared storage configuration is presented and a number of simple VM management examples are discussed. Procedures for dealing with physical node failures are also described.

A pool always has at least one physical node, known as the “master”. Other physical nodes join existing pools and are described as “members”. Only the master node exposes an administration interface (used by XenCenter and the CLI); the master will forward commands to individual members as necessary.

A resource pool is an aggregate of one or more homogeneous XenServer Hosts, up to a maximum of 16. The definition of homogeneous is:

  • each CPU is from the same vendor (in particular AMD-V and Intel VT CPUs cannot be mixed)
  • each CPU is the same model (except for stepping)
  • each CPU has the same feature flags

In addition to being homogeneous, an individual XenServer Host can only join a resource pool if:

  • it has a static IP address (either manually assigned or via DHCP);
  • it is not a member of an existing resource pool
  • it has a clock synchronized to the pool master server (for example, via NTP)
  • it has no shared storage configured
  • there are no running or suspended VMs on the XenServer Host which is joining
  • there are no active operations on the VMs in progress, such as one shutting down
  • the management NIC of the XenServer Host which is joining is not part of a NIC bond
  • the Linux Pack is either installed on all hosts in the pool, or not installed at all

XenServer Hosts in resource pools may contain different numbers of physical network interfaces. Local storage repositories may also exist, of varying size. In practice, it is often difficult to obtain multiple servers with the exact same CPUs, and so minor variations are permitted. If you are sure that it is acceptable in your environment for hosts with varying CPUs to be part of the same resource pool, then the pool joining operation can be forced.

Note

The requirement for a XenServer Host to have a static IP address to be part of a resource pool also applies to the servers providing the shared NFS or iSCSI storage.

Although not a strict technical requirement for creating a resource pool, the advantages of pools (for example, the ability to dynamically choose on which XenServer Host to run a VM and to dynamically move a VM between XenServer Hosts) are only available if the pool has one or more shared storage repositories. As a rule of thumb, you should postpone creating a pool of XenServer Hosts until shared storage is available. Once shared storage has been added, we recommend you to move existing VMs whose disks are in local storage into shared storage. This can be done using the xe vm-copy CLI command or XenCenter.

When a XenServer Host is removed (ejected) from a pool, the machine is rebooted, reinitialized, and left in a state equivalent to that after a fresh installation. It is important not to eject a XenServer Host from a pool if there is important data on the local disks.

When a member XenServer Host containing locally stored VMs is ejected from a pool, those VMs will still be present in the pool database and visible to the other XenServer Hosts. They will not start until the virtual disks associated with them have been changed to point at shared storage which can be seen by other XenServer Hosts in the pool, or simply removed. It is for this reason that you are strongly advised to move any local storage to shared storage upon joining a pool, so that individual XenServer Hosts can be ejected (or physically fail) without loss of data.

This section provides details of how to recover from various failure scenarios. All failure recovery scenarios require the use of one or more of the backup types listed in the the section called “Backups”.

Every member of a resource pool contains all the information necessary to take over the role of master if required. When a master node fails, the following sequence of events occurs:

  1. The members realize that communication has been lost and each retry for sixty seconds
  2. Each member then puts itself into emergency mode, whereby the member XenServer Hosts will now accept only the pool-emergency commands (xe pool-emergency-reset-master and xe pool-emergency-transition-to-master).

If the master comes back up at this point, it will reestablish communication with its members, they will leave emergency mode, and operation will return to normal.

If the master is really dead, though, you should choose one of the members and issue to it the command xe pool-emergency-transition-to-master. Once it has become the master, issue the command xe pool-recover-slaves and the members will now point to the new master.

If you repair or replace the server that was the original master, you can simply bring it up, install the XenServer Host software, and add it to the pool. Since the XenServer Hosts in the pool are enforced to be homogeneous, there is no real need to make the replaced server the master.

When a member XenServer Host is transitioned to being a master, you should also check that the default pool storage repository is set to an appropriate value. This can be done using the xe pool-param-list command and verifying that the default-SR parameter is pointing to a valid storage repository.

If the physical host machine has failed, use the appropriate procedure listed below to recover.

This chapter discusses the framework for storage abstractions. It describes the way physical storage hardware of various kinds is mapped to VMs, and the software objects used by the XenServer Host API to perform storage-related tasks. Detailed sections on each of the supported storage types include procedures for creating storage for VMs using the CLI, with type-specific device configuration options, and some best practices for managing storage in XenServer Host environments. Finally, the virtual disk QoS (quality of service) settings available to XenServer Host Enterprise Edition are described.

There are three basic VDI types, VHD, Logical Volume Manager (LVM) and Netapp managed LUNs. Both VHD and LVM types can exist on local dedicated storage or remote shared storage. Netapp storage types must reside on a Network Appliance filer running version 7.0 or greater of Ontap.

In working with the XenServer Host CLI, there are four object classes that are used to describe, configure, and manage storage:

This section provides descriptions of the physical storage types that XenServer supports. Device configuration options and examples of creating SRs are given for each type.

All storage repositories in XenServer are implemented as Python scripts and stored within the control domain's file system in /opt/xensource/sm. Advanced users may examine and even modify these scripts to adapt storage operations to their needs. This is considered an advanced operation, and is not supported. However, visibility and customization of low-level storage management is of considerable value to some power users.

New SR implementations can be placed in this directory and will be automatically detected by XenServer. The available SR types may be listed using the sm-list command (see the section called “Storage Manager commands”).

Creating a new SR requires the use of the sr-create command. This command creates a new SR record in the database and a corresponding PBD record. Upon successful creation of the SR, the PBD will be automatically plugged. If the SR shared=true flag is set, a PBD entry will be created for every XenServer Host in the resource pool and plugged on each XenServer Host.

The NFS filer is a ubiquitous form of storage infrastructure that is available in many environments. XenServer allows existing NFS servers that support NFS V3 over TCP/IP to be used immediately as a storage repository for virtual disks (VDIs). VDIs are stored in the Microsoft VHD format only. Moreover, as NFS SRs can be shared, VDIs stored in a shared SR allow VMs to be started on any XenServer Hosts in a resource pool and be migrated between them using XenMotion with no noticeable downtime.

Creating an NFS SR requires the hostname or IP address of the NFS server. The sr-probe command can provide a list of valid destination paths exported by the server on which the SR may be created. The NFS server must be configured to export the specified path to all XenServer Host in the pool, or the creation of the SR and the plugging of the PBD record will fail.

As mentioned at the beginning of this chapter, VDIs stored on NFS are sparse. The image file is allocated as the VM writes data into the disk. This has the considerable benefit that VM image files take up only as much space on the NFS filer as is required. If a 100GB VDI is allocated for a new VM and an OS is installed, the VDI file will only reflect the size of the OS data that has been written to the disk rather than the entire 100GB.

VHD files may also be chained, allowing two VDIs to share common data. In cases where a NFS-based VM is cloned, the resulting VMs will share the common on-disk data at the time of cloning. Each will proceed to make its own changes in an isolated copy-on-write version of the VDI. This feature allows NFS-based VMs to be quickly cloned from templates, facilitating very fast provisioning and deployment of new VMs.

As VHD-based images involve extra metadata to provide sparseness and chaining, the format is not as high-performance as LVM-based storage. In cases where performance really matters, it is well worth forcibly allocating the sparse regions of an image file. This will improve performance at the cost of consuming additional disk space.

XenServer's NFS and VHD implementation assume that they have full control over the SR directory on the NFS server. Administrators should not modify the contents of the SR directory, as this can risk corrupting the contents of VDIs.

For NFS best practices, there are performance and access control issues to consider. Access control can specify which client IP address has access to an NFS export. Alternatively, one can allow world read/write access control. The administrator ought to make policy decisions based on the specific requirements of their installation.

XenServer has been tuned for enterprise-class filers that use non-volatile RAM to provide fast acknowledgments of write requests while maintaining a high degree of data protection from failure. For reference, XenServer has been tested extensively against Network Appliance FAS270c and FAS3020c filers, using Data OnTap 7.2.2.

In situations where XenServer is used with lower-end filers, it will err on the side of caution by waiting for all writes to be acknowledged before passing acknowledgments on to guest VMs. This will incur a noticeable performance cost, and might be remedied by setting the filer to present the SR mount point as an asynchronous mode export. Asynchronous exports acknowledge writes that are not actually on disk, and so administrators should consider the risks of failure carefully in these situations.

XenServer provides support for shared SRs on iSCSI LUNs. iSCSI is supported using the open-iSCSI software iSCSI initiator or by using a supported iSCSI Host Bus Adapter (HBA). The steps for using iSCSI HBAs are identical to those for Fibre Channel HBAs, both of which are described in the section called “Shared LVM storage over FC or iSCSI hardware HBAs ”.

Shared iSCSI support using the software iSCSI initiator is implemented based on the Linux Volume Manager (LVM) and provides the same performance benefits provided by LVM VDIs in the local disk case. Shared iSCSI SRs using the software-based host initiator are capable of supporting VM agility using XenMotion: VMs can be started on any XenServer Host in a resource pool and migrated between them with no noticeable downtime. The LVM VDIs used in software-based iSCSI SRs VDIs do not provide support for sparse provisioning or fast cloning.

iSCSI SRs utilize the entire LUN specified at creation time and may not span more than one LUN. CHAP support is provided for client authentication, during both the data path initialization and the LUN discovery phases.

All iSCSI initiators and targets must have a unique name to ensure they can be uniquely identified on the network. An initiator has an iSCSI initiator address, and a target has an iSCSI target address. Collectively these are called iSCSI Qualified Names, or IQNs.

XenServer Hosts support a single iSCSI initiator which is automatically created and configured with a random IQN during host installation. The single initiator can be used to connect to multiple iSCSI targets concurrently.

iSCSI targets commonly provide access control via iSCSI initiator IQN lists, so all iSCSI targets/LUNs to be accessed by a XenServer Host must be configured to allow access by the host's initiator IQN. Similarly, targets/LUNs to be used as shared iSCSI SRs must be configured to allow access by all host IQNs in the resource pool.

The XenServer Host IQN value can be adjusted using XenCenter, or via the CLI with the following command when using the iSCSI software initiator:

xe host-param-set uuid=<valid_host_id> other-config:iscsi_iqn=<new_initiator_iqn>

If you have access to a Network Appliance™ (NetApp) filer with sufficient disk space, running a version of Data ONTAP 7G (version 7.0 or greater), you can configure a custom NetApp storage repository for VM storage on your XenServer deployment. The XenServer driver uses the ZAPI interface to the filer to create a group of FlexVols which correspond to an SR. VDIs are created as virtual LUNs on the filer, and attached to XenServer Hosts using an iSCSI data path. There is a direct mapping between a VDI and a raw LUN without requiring any additional volume metadata. Thus, at a logical level, the NetApp SR is a managed volume and the VDIs are the LUNs within the volume. VM cloning uses the snapshotting and cloning capabilities of the filer for data efficiency and performance and to ensure compatibility with existing ONTAP filer management tools.

As with the iSCSI-based SR type, the NetApp driver also uses the built-in software initiator and its assigned server IQN, which can be modified by changing the value shown on the General tab when the storage repository is selected in XenCenter.

The simplest way to create NetApp SRs is with XenCenter. See XenCenter Help for details. They can also be created using xe CLI commands. See the section called “Creating a shared NetApp SR over iSCSI ” for an example.

FlexVols

NetApp introduces a notion of FlexVol as the basic unit of manageable data. It is important to note that there are limitations that constrain the design of NetApp-based SRs. These are:

Precise system limits vary per Filer type, however as a general guide, a FlexVol may contain up to 200 LUNs, and provides up to 255 snapshots. Since there is a one-to-one mapping of LUNs to VDIs, and often a VM will have more than one VDI, it is apparent that the resource limitations of a single FlexVol can easily be reached. Also consider that the act of taking a snapshot includes snapshotting all the LUNs within a FlexVol and that the VM clone operation indirectly relies on snapshots in the background as well as the CLI-based VDI snapshot operation for backup purposes.

There are two constraints to consider, therefore, in mapping the virtual storage objects of the XenServer Host to the filer; in to order to maintain space efficiency it makes sense to limit the number of LUNs per FlexVol, yet at the other extreme, in order to avoid resource limitations a single LUN per FlexVol provides the most flexibility. However, since there is a vendor-imposed limit of 200 or 500 FlexVols, per filer (depending on the NetApp model), this would create a limit of 200 or 500 VDIs per filer and it is therefore important to select a suitable number of FlexVols around these parameters.

Given these resource constraints, the mapping of virtual storage objects to the Ontap storage system has been designed in the following manner; LUNs are distributed evenly across FlexVols, with the expectation of using VM UUIDs to opportunistically group LUNs attached to the same VM into the same FlexVol. This is a reasonable usage model that allows a snapshot of all the VDIs in a VM at one time, maximizing the efficiency of the snapshot operation.

An optional parameter you can set is the number of FlexVols assigned to the SR. You can use between 1 and 32 FlexVols; the default is 8. The trade-off in the number of FlexVols to the SR is that, for a greater number of FlexVols, the snapshot and clone operations become more efficient, since there are statistically fewer VMs backed off the same FlexVol. The disadvantage is that more FlexVol resources are used for a single SR, where there is a typical system-wide limitation of 200 for some smaller filers.

Aggregates

When creating a NetApp driver-based SR, you select an appropriate aggregate. The driver can be probed for non-traditional type aggregates, that is, newer-style aggregates that support FlexVols, and then lists all aggregates available and the unused disk space on each.

We strongly recommend that you configure an aggregate exclusively for use by XenServer storage, since space guarantees and allocation cannot be correctly managed if other applications are also sharing the resource.

Thick or thin provisioning

When creating NetApp storage, you can also choose the type of space management used. By default, allocated space is "thickly provisioned" to ensure that VMs never run out of disk space and that all virtual allocation guarantees are fully enforced on the filer. Selecting "thick provisioning" ensures that whenever a VDI (LUN) is allocated on the filer, sufficient space is reserved to guarantee that it will never run out of space and consequently experience failed writes to disk. Due to the the nature of the Ontap FlexVol space provisioning algorithms the best practice guidelines for the filer require that at least twice the LUN space is reserved to account for background snapshot data collection and to ensure that writes to disk are never blocked. In addition to the double disk space gaurantee, Ontap also requires some additional space reservation for management of unique blocks across snapshots. The guideline on this amount is 20% above the reserved space. Therefore, the space guarantees afforded by "thick provisioning" will reserve up to 2.4 times the requested virtual disk space.

The alternative allocation strategy is thin provisioning, which allows the admin to present more storage space to the VMs connecting to the SR than is actually available on the SR. There are no space garauntees, and allocation of a LUN does not claim any data blocks in the FlexVol until the VM writes data. This would be appropriate for development and test environments where you might find it convenient to over-provision virtual disk space on the SR in the anticipation that VMs may be created and destroyed frequently without ever utilizing the full virtual allocated disk. This method should be used with extreme caution and only in non-critical environments.

A-SIS deduplication

A-SIS (Advanced Single Instance Storage) deduplication is a NetApp technology for reclaiming redundant disk space. Newly-stored data objects are divided into small blocks, each block containing a digital signature, which is compared to all other signatures in the data volume. If an exact block match exists, the duplicate block is discarded and the disk space reclaimed. A-SIS can be enabled on "thin provisioned" Netapp-based SRs and will operate according to the default filer A-SIS parameters, typically every 24 hours. It must be enabled at the point the SR is created and any custom A-SIS configuration managed directly on the filer.

Access Control

Since FlexVol operations such as volume creation and volume snapshotting require administrator privileges on the filer itself, it is recommended that the XenServer Host should be provided with suitable administrator username and password credentials at configuration time. In situations where the XenServer Host does not have full administrator rights to the filer, the filer administrator could perform an out-of-band preparation and provisioning of the filer. The SR is then introduced to the XenServer Host using the XenCenter or via the sr-introduce xe CLI command. Note however that operations such as VM cloning or snapshot generation will fail in this situation due to insufficient access priviledges.

Licenses

You need to have CIFS, NFS, FCP and iSCSI licenses on the NetApp filer.

Further information

For more information about NetApp technology, see the following links:

This section covers creating storage repository types and making them available to a XenServer Host. The examples provided pertain to storage configuration via the CLI, which provides the greatest flexibility. See the XenCenter Help for details on using the New Storage Repository wizard.

The sr-probe CLI command can be used in two ways:

In both cases sr-probe works by specifying an SR type and one or more device-config parameters for that SR type. When an incomplete set of parameters is supplied sr-probe returns an error message indicating parameters are missing and the possible options for the missing parameters. When a complete set of parameters is supplied a list of existing SRs is returned. All sr-probe output is returned as an XML list.

For example, a known iSCSI target can be probed by specifying its name or IP address, and the set of IQNs available on the server will be returned:

# xe sr-probe type=lvmoiscsi device-config:target=192.168.1.10

Error code: SR_BACKEND_FAILURE_96
Error parameters: , The request is missing or has an incorrect target IQN parameter, \
<?xml version="1.0" ?>
<iscsi-target-iqns>
    <TGT>
        <Index>
            0
        </Index>
        <IPAddress>
            192.168.1.10
        </IPAddress>
        <TargetIQN>
            iqn.192.168.1.10:filer1
        </TargetIQN>
    </TGT>
</iscsi-target-iqns>

Probing the same target again and specifying both the name/IP address and desired IQN will return the set of SCSIids (LUNs) available on the target/IQN.

# xe sr-probe type=lvmoiscsi device-config:target=192.168.1.10  \ 
device-config:targetIQN=iqn.192.168.1.10:filer1

Error code: SR_BACKEND_FAILURE_107
Error parameters: , The SCSIid parameter is missing or incorrect, \
<?xml version="1.0" ?>
<iscsi-target>
    <LUN>
        <vendor>
			IET
        </vendor>
        <LUNid>
            0
        </LUNid>
        <size>
            42949672960
        </size>
        <SCSIid>
            149455400000000000000000002000000b70200000f000000
        </SCSIid>
    </LUN>
</iscsi-target>

Probing the same target and supplying all three parameters will return a list of SRs that exist on the LUN, if any.

# xe sr-probe type=lvmoiscsi device-config:target=192.168.1.10  \ 
device-config:targetIQN=192.168.1.10:filer1 \
device-config:SCSIid=149455400000000000000000002000000b70200000f000000

<?xml version="1.0" ?>
<SRlist>
    <SR>
        <UUID>
            3f6e1ebd-8687-0315-f9d3-b02ab3adc4a6
        </UUID>
        <Devlist>
            /dev/disk/by-id/scsi-149455400000000000000000002000000b70200000f000000
        </Devlist>
    </SR>
</SRlist>

The following parameters can be probed for each SR type:

SR type device-config parameter, in order of dependency Can be probed?Required for sr-create?
lvmoiscsitargetNoYes
 chapuserNoNo
 chappasswordNoNo
 targetIQNYesYes
 SCSIidYesYes
lvmohbadeviceYesYes
netapptargetNoYes
 usernameNoYes
 passwordNoYes
 chapuserNoNo
 chappasswordNoNo
 aggregateNoYes
 FlexVolsNoNo
 allocationNoNo
 asisNoNo
nfsserverNoYes
 serverpathYesYes
lvmdeviceNoYes
extdeviceNoYes

SRs of type lvmohba can only be created via the xe Command Line Interface (CLI). Once created lvmohba SRs can be managed using either XenCenter or the xe CLI.

Device-config parameters for lvmohba SRs:

Parameter nameDescriptionRequired
DeviceHBA LUN global device path (e.g. /dev/disk/by-id/scsi-<SCSI ID>Yes

To create a shared lvmohba SR perform the following steps on each host in the pool:

  1. Zone in one or more LUNs to each XenServer Host in the pool. This process is highly specific to the SAN equipment in use. Please refer to the documentation for your SAN or contact your storage administrator for details.
  2. If necessary, use the HBA Command Line Interfaces (CLIs) included in the XenServer Host to configure the HBA:
    • Emulex: /usr/sbin/hbanyware
    • QLogic FC: /opt/QLogic_Corporation/SANsurferCLI
    • QLogic iSCSI: /opt/QLogic_Corporation/SANsurferiCLI
    Section 3.3.13 provides an example for configuring the QLogic iSCSI HBA. For more information on Fibre Channel and iSCSI HBAs please refer to the
    Emulex and QLogic websites.
  3. Use the sr-probe command to determine the global device path of the HBA LUN. sr-probe will force a re-scan of HBAs installed in the system to detect any new LUNs that have been zoned to the host and return a list of properties for each LUN found. Use the host-uuid parameter to ensure the probe occurs on the desired host. The global device path returned as the <path> property will be common across all hosts in the pool and therefore must be used as the value for the device-config:device parameter when creating the SR. If multiple LUNs are present use the vendor, LUN size, LUN serial number, or the SCSI ID as included in the <path> property to identify the desired LUN.
    # xe sr-probe type=lvmohba \
    host-uuid=1212c7b3-f333-4a8d-a6fb-80c5b79b5b31
    Error code: SR_BACKEND_FAILURE_90
    Error parameters: , The request is missing the device parameter, \
    <?xml version="1.0" ?>
    <Devlist>
        <BlockDevice>
            <path>
                /dev/disk/by-id/scsi-360a9800068666949673446387665336f
            </path>
            <vendor>
                HITACHI
            </vendor>
            <serial>
    			730157980002
            </serial>
            <size>
                80530636800
            </size>
            <adapter>
                4
            </adapter>
            <channel>
                0
            </channel>
            <id>
                4
            </id>
            <lun>
                2
            </lun>
            <hba>
                qla2xxx
            </hba>
        </BlockDevice>
        <Adapter>
            <host>
    			Host4
            </host>
            <name>
                qla2xxx
            </name>
            <manufacturer>
                QLogic HBA Driver
            </manufacturer>
            <id>
                4
            </id>
        </Adapter>
    </Devlist>
  4. On the master host of the pool create the SR, specifying the global device path returned in the <path> property from sr-probe. PBDs will be created and plugged for each host in the pool automatically.
xe sr-create host-uuid=<valid_UUID> content-type=user \
name-label="Example shared LVM over HBA SR" shared=true \
device-config:device=<valid_global_device_path> type=lvmohba

Note

The Repair Storage Repository function within XenCenter can be used to retry the PBD creation and plugging portions of the sr-create operation. This can be valuable in cases where the LUN zoning was incorrect for one or more member servers in a pool when the SR was created. Correct the zoning for the affected hosts and use Repair Storage Repository instead of removing and re-creating the SR.

This section covers various operations required in the ongoing management of Storage Repositories (SRs).

Previous XenServer releases supported only local (non-shared) Fibre Channel (FC) SRs. In cases where a local FC SR is actually accessible by other hosts in a pool the SR can be converted to shared, allowing VMs with VDIs on the SR to be started on and migrated between hosts within the pool.

Converting a local FC SR to a shared FC SR requires using the xe CLI and the XenCenter Repair Storage Repository feature:

  1. Upgrade all hosts in the resource pool to XenServer 4.1.
  2. Ensure all hosts in the pool have the SR's LUN zoned appropriately. See the section called “Probing an SR ” for details on using sr-probe to verify the LUN is present on each host.
  3. Convert the SR to shared:
    xe sr-param-set shared=true uuid=<local FC SR>
    						
  4. Within XenCenter the SR will be move from the host level to the pool level, indicating it is now shared. The SR will be marked with a red ! to indicate it is not currently plugged on all hosts in the pool.
  5. Select the SR and then select the Storage ... Repair Storage Repository menu option.
  6. Click Repair to create and plug a PBD for each host in the pool.

The set of VDIs associated with a VM can be copied from one SR to another to accommodate maintenance requirements or tiered storage configurations. XenCenter provides the ability to copy a VM and all of its VDIs to the same or a different SR, and a combination of XenCenter and the xe CLI can be used to copy individual VDIs.

As outlined earlier in the section called “Shared NetApp Storage”, a Netapp SR comprises a collection of FlexVols. Cloning a VDI entails generating a snapshot of the FlexVol and then creating a LUN clone backed off the snapshot. When generating a VM snapshot, an admin must snapshot each of the VMs disks in sequence. Since all the disks are expected to be located in the same FlexVol, and the FlexVol snapshot operates on all LUNs in the same FlexVol, it makes sense to re-use an existing snapshot for all subsequent LUN clones. By default, if no snapshot hint is passed into the backend driver it will generate a random ID with which to name the FlexVol snapshot. There is a CLI override however for this value, passed in as an epochhint. The first time the epochhint value or 'cookie' is received, the backend will generate a new snapshot based on the cookie name. Any subsequent snapshot requests with the same epochhint value will be backed off the existing snapshot:

xe vdi-snapshot uuid=<VALID_VDI_UUID> driver-params:epochhint=<COOKIE>

For general performance, the default disk scheduler 'noop' is applied on all new SR types that implement LVM based storage over a disk, i.e. Local LVM, LVM over iSCSI and LVM over HBA attached LUNs. The noop scheduler provides the fairest performance for competing VMs accessing the same device. In order to apply disk QoS however (the section called “Virtual disk QoS settings (Enterprise Edition only)”) it is necessary to override the default setting and assign the 'cfq' disk scheduler to any LVM-based SR type. For any LVM-based SR type the corresponding PBD must be unplugged and re-plugged in order for the scheduler parameter to take effect. The disk scheduler can be adjusted using the following CLI parameter:

xe sr-param-set other-config:scheduler={noop|cfq|anticipatory|deadline}  uuid=<VALID_SR_UUID>

This section covers various operations required to manage Fibre Channel and iSCSI HBAs.

For full details on configuring QLogic Fibre Channel and iSCSI HBAs please refer to the QLogic website.

Once the HBA is physically installed into the XenServer Host use the following steps to configure the HBA:

  1. Set the IP networking configuration for the HBA. This example assumes DHCP and HBA port 0. Specify the appropriate values if using static IP addressing or a multi-port HBA.
    /opt/QLogic_Corporation/SANsurferiCLI/iscli –ipdhcp 0
    						
  2. Add a persistent iSCSI target to port 0 of the HBA.
    /opt/QLogic_Corporation/SANsurferiCLI/iscli --pa 0 <iSCSI target IP address> \
    --INAME <iSCSI target IQN>
  3. Use the xe sr-probe command to force a rescan of the HBA controller and display available LUNs. See the section called “Probing an SR ” and the section called “Creating a shared LVM over Fibre Channel or iSCSI HBA SR (lvmohba) ” for more details.

Each HBA-based LUN has a corresponding global device path entry under /dev/disk/by-id and a standard device path under /dev. To remove the device entries for LUNs no longer in use as SRs use the following steps:

  1. Use sr-forget or sr-destroy as appropriate to remove the SR from the XenServer Host database. See the section called “Destroying or forgetting a SR ” for details.
  2. Remove the zoning configuration within the SAN for the desired LUN to the desired host.
  3. Use the sr-probe command to determine the ADAPTER, BUS, TARGET, and LUN values corresponding to the LUN to be removed. See the section called “Probing an SR ” for details.
  4. Remove the device entries with the following command:
    echo "1" > /sys/class/scsi_device/<ADAPTER>:<BUS>:<TARGET>:<LUN>/device/delete

Warning

Make absolutely sure you are certain which LUN you are removing. Accidentally removing a LUN required for host operation, such as the boot or root device, will render the host unusable.

In Enterprise Edition, virtual disks have an optional I/O priority Quality of Service (QoS) setting. This setting can be made to existing virtual disks with the CLI as described in this section.

In order to enable QoS for disk I/O the SR type underlying the VDI must be an LVM-based volume. QoS will only take effect therefore on SRs of type Local LVM, LVM over iSCSI and LVM over HBA attached LUNs. Note also that in the shared SR case i.e. where multiple hosts are accessing the same LUN, the QoS is applied to VBDs accessing the LUN from the same host, i.e. QoS is not applied across hosts in the pool. Note that QoS settings will not have any effect on VHD-based storage types.

Before configuring any QoS parameters for a VBD, ensure that the disk scheduler for the SR has been set appropriately. See the section called “Adjusting the disk IO scheduler for an LVM-based SR ” for details on how to adjust the scheduler. The scheduler parameter must be set to 'cfq' on the SR for which the QoS is desired.

Note

Don't forget to set the scheduler to 'cfq' on the SR, and make sure that the PBD has been re-plugged in order for the scheduler change to take effect.

The first parameter is qos_algorithm_type. This parameter needs to be set to the value ionice, which is the only type of QoS algorithm supported for virtual disks in this release.

The QoS parameters themselves are set with key/value pairs assigned to the qos_algorithm_type parameter. For virtual disks, qos_algorithm_type takes a sched key, and depending on the value, also requires a class key.

Possible values of qos_algorithm_type:sched are

  • sched=rt or sched=real-time sets the QoS scheduling parameter to real time priority, which requires a class parameter to set a value
  • sched=idle sets the QoS scheduling parameter to idle priority, which requires no class parameter to set any value
  • sched=<anything> sets the QoS scheduling parameter to best effort priority, which requires a class parameter to set a value

The possible values for class are

  • One of the following keywords: highest, high, normal, low, lowest
  • an integer between 0 and 7, where 0 is the highest priority and 7 is the lowest

To enable the disk QoS settings, you also need to set the other-config:scheduler to cfq and replug PBDs for the storage in question.

For example, the following CLI commands set the virtual disk's VBD to use real time priority=5:

xe vbd-param-set uuid=<vbd UUID> qos_algorithm_type=ionice
xe vbd-param-set uuid=<vbd UUID> qos_algorithm_params:sched=rt
xe vbd-param-set uuid=<vbd UUID> qos_algorithm_params:class=5
xe pbd-param-set uuid=<pbd UUID> other-config:scheduler-cfg
xe pbd-plug uuid=<pbd UUID>

This chapter discusses how physical network interface cards (NICs) in XenServer Hosts are used to enable networking within Virtual Machines (VMs). XenServer supports up to 4 physical NICs per XenServer Host and up to 7 virtual network interfaces (VIFs) per VM.

XenServer 4.1 provides automated configuration and management of NICs via the xe command line interface (CLI). As VIFs, PIFs, and networks are created and configured the XenServer Host will perform all required configuration of the physical NICs.

Note

Unlike previous XenServer versions, the host's networking configuration files should not be edited directly in most cases; where a CLI command is available, do not edit the underlying files.

Some networking options have different behaviors when used with standalone XenServer Hosts compared to resource pools. This chapter contains sections on general information that applies to both standalone hosts and pools, and additional information that applies when using pools.

The xe CLI can be used to create, destroy and modify three types of server-side objects which represent networking entities. These objects are:

Additional CLI commands allow configuration of networking options, control over which NIC is used for management operations, and creation of advanced networking features such as virtual local area networks (VLANs) and NIC bonds.

The examples in this chapter assume familiarity with the xe CLI. For more information on using the xe CLI, see Command line interface.

The networking configuration for a XenServer Host is specified during initial host installation. Options such as IP address configuration (DHCP/static), the NIC used as the management interface, and hostname are set based on the values provided during installation.

When a XenServer Host has a single NIC, the follow configuration will be present after installation:

  • a single PIF is created corresponding to the host's single NIC
  • the PIF is configured with the IP addressing options specified during installation and to enable management of the host
  • the PIF is set for use in host management operations
  • a single network, network 0, is created
  • network 0 is connected to the PIF to enable external connectivity to VMs

When a host has multiple NICs the configuration present after installation depends on which NIC is selected for management operations during installation:

  • PIFs are created for each NIC in the host
  • the PIF of the NIC selected for use as the management interface is configured with the IP addressing options specified during installation
  • a network is created for each PIF ("network 0", "network 1", etc.)
  • each network is connected to one PIF
  • the IP addressing options of all other PIFs are left unconfigured

In both cases the resulting networking configuration allows connection to the XenServer Host by XenCenter, the xe CLI, and any other management software running on separate machines via the IP address of the management interface. The configuration also provides external networking for VMs created on the host.

The PIF used for management operations is the only PIF ever configured with an IP address. External networking for VMs is achieved by bridging PIFs to VIFs via the network object which acts as a virtual Ethernet switch.

The steps required for networking features such as VLANs, NIC bonds, and dedicating a NIC to storage traffic are covered in the following sections.

NIC bonds can improve XenServer Host resiliency by using two physical NICs as if they were one. If one NIC within the bond fails the host's network traffic will automatically be routed over the second NIC. NIC bonds work in an active/passive mode, with only one physical NIC ever in use.

XenServer NIC bonds completely subsume the underlying physical devices (PIFs). In order to activate a bond the underlying PIFs must not be in use, either as the management interface for the host or by running VMs with VIFs attached to the networks associated with the PIFs.

XenServer NIC bonds are represented by additional PIFs. The bond PIF can then be connected to a XenServer network to allow VM traffic and host management functions to occur over the bonded NIC. The exact steps to use to create a NIC bond depend on the number of NICs in your host, and whether the management interface of the host is assigned to a PIF to be used in the bond.

Also see the section called “Creating NIC bonds in resource pools” for details on creating NIC bonds with resource pools.

Creating a bond on a dual-NIC host implies that the PIF/NIC currently in use as the management interface for the host will be subsumed by the bond. The additional steps required to move the management interface to the bond PIF are included.

To create a NIC bond a dual-NIC host

  1. Use XenCenter or the vm-shutdown command to shut down all VMs on the host, thereby forcing all VIFs to be unplugged from their current networks. The existing VIFs will be invalid after the bond is enabled.
    xe vm-shutdown uuid=<VM UUID>
    							
  2. Use the network-create command to create a new network for use with the bonded NIC. The UUID of the new network is returned:
    xe network-create name-label=bond0
    							
  3. Use the pif-list command to determine the UUIDs of the PIFs to use in the bond:
    xe pif-list
    
    							
  4. Use the bond-create command to create the bond by specifying the newly created network UUID and the UUIDs of the PIFs to be bonded separated by commas. The UUID for the bond is returned:
    xe bond-create network-uuid=<network UUID> pif-uuids=<PIF UUID 1>,<PIF UUID 2>
    							

    Note

    See the section called “Controlling the MAC address of the bond” for details on controlling the MAC address used for the bond PIF.

  5. Use the pif-list command to determine the UUID of the new bond PIF:
    xe pif-list device=bond0
    							
  6. Use the pif-reconfigure-ip command to configure the desired management interface IP address settings for the bond PIF. See Command line interface for more detail on the options available for the pif-reconfigure-ip command.
    xe pif-reconfigure-ip uuid=<bond PIF UUID> mode=DHCP
    							
  7. Use the host-management-reconfigure command to move the management interface from the existing physical PIF to the bond PIF. This step will activate the bond:
    xe host-management-reconfigure pif-uuid=<bond PIF UUID>
    							
  8. Use the pif-reconfigure-ip command to remove the IP address configuration from the non-bonded PIF previously used for the management interface. This step is not strictly necessary but might help reduce confusion when reviewing the host networking configuration.
    xe pif-reconfigure-ip uuid=<old mgmt PIF UUID> mode=None
    							
  9. Move existing VMs to the bond network using the vif-destroy and vif-create commands. This step can also be completed via XenCenter by editing the VM configuration and connecting the existing VIFs of a VM to the bond network.
  10. Restart the VMs shut down in step 1.

Whenever possible, create NIC bonds as part of initial resource pool creation prior to joining additional member servers to the pool or creating VMs. Doing so allows the bond configuration to be automatically replicated to member servers as they are joined to the pool and reduces the number of steps required. Adding a NIC bond to an existing pool is also a disruptive operation - all VMs in the pool must be shut down.

  1. Install the master host and use XenCenter to create the pool.
  2. Create the NIC bond on the master as follows:
    1. Use the network-create command to create a new pool-wide network for use with the bonded NICs. The UUID of the new network is returned.
      xe network-create name-label=<network name>
      									
    2. Use the host-list command to find the UUID of the master host:
      xe host-list
      									
    3. Use the pif-list command to determine the UUIDs of the PIFs to use in the bond:
       
      xe pif-list
      									
    4. Use the bond-create command to create the bond, specifying the network UUID created in step 1 and the UUIDs of the PIFs to be bonded, separated by commas. The UUID for the bond is returned:
       
      xe bond-create network-uuid=<network UUID> pif-uuids=<PIF UUID 1>,<PIF UUID 2>
      									

      Note

      See the section called “Controlling the MAC address of the bond” for details on controlling the MAC address used for the bond PIF.

    5. Use the pif-list command to determine the UUID of the new bond PIF:
       
      xe pif-list device=<network UUID>
      									
    6. Use the pif-reconfigure-ip command to configure the desired management interface IP address settings for the bond PIF. See Command line interface for more detail on the options available for the pif-reconfigure-ip command.
       
      xe pif-reconfigure-ip uuid=<bond PIF UUID> mode=DHCP
      									
    7. Use the host-management-reconfigure command to move the management interface from the existing physical PIF to the bond PIF. This step will activate the bond:
       
      xe host-management-reconfigure pif-uuid=<bond PIF UUID> 
      									
    8. Use the pif-reconfigure-ip command to remove the IP address configuration from the non-bonded PIF previously used for the management interface. This step is not strictly necessary but might help reduce confusion when reviewing the host networking configuration.
       
      xe pif-reconfigure-ip uuid=<old mgmt PIF UUID> mode=None
      									
  3. Join a member server to the pool.The network and bond information will be automatically replicated to the member server.
  4. Move the management interface on the member server to enable the bond as follows:
    1. Use the host-list command to find the UUID of the member host being configured:
      xe host-list
      									
    2. Use the pif-list command to determine the UUID of bond PIF on the new member host. Include the host-uuid parameter to list only the PIFs on the host being configured:
      xe pif-list device=<network name> host-uuid=<host UUID>
      									
    3. Use the pif-reconfigure-ip command to configure the desired management interface IP address settings for the bond PIF with the pif-reconfigure-ip command. See Command line interface for more detail on the options available for the pif-reconfigure-ip command. This command must be run directly on the member server to be affected:
      xe pif-reconfigure-ip uuid=<bond PIF UUID> mode=DHCP
      									
    4. Use the host-management-reconfigure command to move the management interface from the existing physical PIF to the bond PIF. This step will activate the bond. This command must be run directly on the member server to be affected:
      xe host-management-reconfigure pif-uuid=<bond PIF UUID>
      									
    5. Use the pif-reconfigure-ip command to remove the IP address configuration from the non-bonded PIF previously used for the management interface. This step is not strictly necessary but may help reduce confusion when reviewing the host networking configuration. This command must be run directly on the member server to be affected:
      xe pif-reconfigure-ip uuid=<old mgmt PIF UUID> mode=None
      									
  5. For each member server, join it to the pool and repeat 3 and 4 to move the management interface on the member server to enable the bond.

When adding a NIC bond to an existing pool, the bond must be manually created on each host in the pool. The steps below can be used to add NIC bonds on both the pool master and member servers with the following requirements:

To add NIC bonds to existing pool master and member hosts

  1. Use the network-create command to create a new pool-wide network for use with the bonded NICs. This step should only be performed once per pool. The UUID of the new network is returned.
    xe network-create name-label=bond0
    							
  2. Use XenCenter or the vm-shutdown command to shut down all VMs in the host pool to force all existing VIFs to be unplugged from their current networks. The existing VIFs will be invalid after the bond is enabled.
    xe vm-shutdown uuid=<VM UUID>
    							
  3. Use the host-list command to find the UUID of the host being configured:
    xe host-list
    							
  4. Use the pif-list command to determine the UUIDs of the PIFs to use in the bond. Include the host-uuid parameter to list only the PIFs on the host being configured:
    xe pif-list host-uuid=<host UUID>
    							
  5. Use the bond-create command to create the bond, specifying the network UUID created in step 1 and the UUIDs of the PIFs to be bonded, separated by commas. The UUID for the bond is returned.
    xe bond-create network-uuid=<network UUID> pif-uuids=<PIF UUID 1>,<PIF UUID 2>
    							

    Note

    See the section called “Controlling the MAC address of the bond” for details on controlling the MAC address used for the bond PIF.

  6. Use the pif-list command to determine the UUID of the new bond PIF. Include the host-uuid parameter to list only the PIFs on the host being configured:
    xe pif-list device=bond0 host-uuid=<host UUID>
    							
  7. Use the pif-reconfigure-ip command to configure the desired management interface IP address settings for the bond PIF. See Command line interface for more detail on the options available for the pif-reconfigure-ip command. This command must be run directly on the server to be affected:
    xe pif-reconfigure-ip uuid=<bond PIF UUID> mode=DHCP
    							
  8. Use the host-management-reconfigure command to move the management interface from the existing physical PIF to the bond PIF. This step will activate the bond. This command must be run directly on the member server to be affected:
    xe host-management-reconfigure pif-uuid=<bond PIF UUID>
    							
  9. Use the pif-reconfigure-ip command to remove the IP address configuration from the non-bonded PIF previously used for the management interface. This step is not strictly necessary, but might help reduce confusion when reviewing the host networking configuration. This command must be run directly on the member server to be affected:
    xe pif-reconfigure-ip uuid=<old mgmt PIF UUID> mode=None
    							
  10. Move existing VMs to the bond network using the vif-destroy and vif-create commands. This step can also be completed via XenCenter by editing the VM configuration and connecting the existing VIFs of the VM to the bond network.
  11. Repeat steps 3 - 10 for member servers.
  12. Restart the VMs previously shut down.

XenServer Hosts in resource pools have a single management IP address used for management and communication to and from other hosts in the pool. The steps required to change the IP address of a host's management interface are different for master and member hosts.

To change the IP address of a pool member host:

  1. Use the pif-reconfigure-ip CLI command to set the IP address as desired. See Command line interface for details on the parameters of the pif-reconfigure-ip command:
    xe pif-reconfigure-ip uuid=<PIF UUID> mode=DHCP
    						
  2. Use the host-list CLI command to confirm that the member host has successfully reconnected to the master host by checking that all the other XenServer Hosts in the pool are visible:
    xe host-list
    						

Changing the IP address of the master XenServer Host requires additional steps because each of the member hosts uses the master's advertised IP address for communication and will not know how to contact the master when its IP address changes.

Whenever possible, use a dedicated IP address that is not likely to change for the lifetime of the pool for pool masters.

To change the IP address of a pool master host

  1. Use the pif-reconfigure-ip CLI command to set the IP address as desired. See Command line interface for details on the parameters of the pif-reconfigure-ip command:
    xe pif-reconfigure-ip uuid=<PIF UUID> mode=DHCP
    						
  2. When the IP address of the pool master host is changed, all member hosts will enter into an emergency mode when they fail to contact the master host.
  3. On the master XenServer Host, use the pool-recover-slaves command to force the master to contact each of the member servers and inform them of the master's new IP address:
    xe pool-recover-slaves
    						

Refer to the the section called “Master failures” for more information on emergency mode.

It is possible for physical NIC devices to be discovered in different orders on different servers even though the servers contain the same hardware. Verifying NIC ordering is recommended before using the pooling features of XenServer.

It is not possible to directly rename a PIF, although you can use the pif-forget and pif-introduce commands to achieve the same effect with the following restrictions:

For the example configuration shown above use the following steps to change the NIC ordering so that eth0 corresponds to the device with a MAC address of 00:19:bb:2d:7e:7a:

If you are having problems with configuring networking, first ensure that you have not directly modified any of the control domain ifcfg-* files directly. These files are directly managed by the control domain host agent, and changes will be overwritten.

This chapter describes the XenServer command line interface (CLI). The xe CLI enables the writing of scripts for automating system administration tasks and allows integration of XenServer into an existing IT infrastructure.

The xe command line interface is installed by default on XenServer Hosts and is included with XenCenter. A stand-alone remote CLI is also available for Linux.

On Windows, the xe.exe CLI executable is installed along with XenCenter.

To use it, open a Windows Command Prompt and change directories to the directory where the file resides (typically C:\Program Files\XenSource\XenCenter), or add its installation location to your system path.

On Linux, you can install the stand-alone xe CLI executable from the RPM named xe-cli-4.1.0-7843c.i386.rpm on the Linux Pack CD, as follows:

rpm -ivh xe-cli-4.1.0-7843c.i386.rpm

Basic help is available for CLI commands on-host by typing:

xe help command

A list of the most commonly-used xe commands is displayed if you type:

xe help

or a list of all xe commands is displayed if you type:

xe help --all

The basic syntax of all XenServer xe CLI commands is:

xe command-name argument=value argument=value ...

Each specific command contains its own set of arguments that are of the form argument=value. Some commands have required arguments, and most have some set of optional arguments. Typically a command will assume default values for some of the optional arguments when invoked without them.

If the xe command is executed remotely, additional connection and authentication arguments are used. These arguments also take the form argument=argument_value.

The server argument is used to specify the hostname or IP address. The username and password arguments are used to specify credentials. A password-file argument can be specified instead of the password directly. In this case an attempt is made to read the password from the specified file (stripping CRs and LFs off the end of the file if necessary), and use that to connect. This is more secure than specifying the password directly at the command line.

The optional port argument can be used to specify the agent port on the remote XenServer Host (defaults to 443).

Example: On the local XenServer Host:

xe vm-list

Shorthand syntax is also available for remote connection arguments:

Arguments are also taken from the environment variable XE_EXTRA_ARGS, in the form of comma-separated key/value pairs. For example, in order to enter commands on one XenServer Host that are run on a remote XenServer Host, you could do the following:

export XE_EXTRA_ARGS="server=jeffbeck,port=443,username=root,password=pass"
			

and thereafter you would not need to specify the remote XenServer Host parameters in each xe command you execute.

Using the XE_EXTRA_ARGS environment variable also enables tab completion of xe commands when issued against a remote XenServer Host, which is disabled by default.

Broadly speaking, the CLI commands can be split in two halves: Low-level commands concerned with listing and parameter manipulation of API objects, and higher level commands for interacting with VMs or hosts in a more abstract level. The low-level commands are:

  • class-list
  • class-param-get
  • class-param-set
  • class-param-list
  • class-param-add
  • class-param-remove
  • class-param-clear

where class is one of:

  • bond
  • console
  • host
  • host-crashdump
  • host-cpu
  • network
  • patch
  • pbd
  • pif
  • pool
  • sm
  • sr
  • task
  • template
  • vbd
  • vdi
  • vif
  • vlan
  • vm

Note that not every value of class has the full set of class-param- commands; some have just a subset.

The objects that are addressed with the xe commands have sets of parameters that identify them and define their states.

Most parameters take a single value. For example, the name-label parameter of a VM contains a single string value. In the output from parameter list commands such as xe vm-param-list, such parameters have an indication in parentheses that defines whether they can be read and written to, or are read-only. For example, the output of xe vm-param-list on a specified VM might have the lines

                  user-version ( RW): 1
             is-control-domain ( RO): false
				

The first parameter, user-version, is writeable and has the value 1. The second, is-control-domain, is read-only and has a value of false.

The two other types of parameters are multi-valued. A set parameter contains a list of values. A map parameter is a set of key/value pairs. As an example, look at the following excerpt of some sample output of the xe vm-param-list on a specified VM:

                      platform (MRW): acpi: true; apic: true; pae: true; nx: false
            allowed-operations (SRO): pause; clean_shutdown; clean_reboot; \
			hard_shutdown; hard_reboot; suspend
				

The platform parameter has a list of items that represent key/value pairs. The key names are followed by a colon character (:). Each key/value pair is separated from the next by a semicolon character (;). The M preceding the RW indicates that this is a map parameter and is readable and writeable. The allowed-operations parameter has a list that makes up a set of items. The S preceding the RO indicates that this is a set parameter and is readable but not writeable.

In xe commands where you want to filter on a map parameter, or set a map parameter, use the separator : (colon) between the map parameter name and the key/value pair. For example, to set the value of the foo key of the other-config parameter of a VM to baa, the command would be

xe vm-param-set uuid=VM uuid other-config:foo=baa

Note

In previous releases the separator - (dash) was used in specifying map parameters. This syntax still works but is deprecated.

The class-list command lists the objects of type class. By default it will list all objects, printing a subset of the parameters. This behavior can be modified in two ways: it can filter the objects so that it only outputs a subset, and the parameters that are printed can be modified.

To change the parameters that are printed, the argument params should be specified as a comma-separated list of the required parameters, e.g.:

 xe vm-list params=name-label,other-config
				

Alternatively, to list all of the parameters, use the syntax:

 xe vm-list params=all
				

Note that some parameters that are expensive to calculate will not be shown by the list command. These will be shown as e.g.:

  allowed-VBD-devices (SRO): <expensive field>
				

In order to obtain these fields, use either the command class-param-list or class-param-get

To filter the list, the CLI will match parameter values with those specified on the command-line, only printing object that match all of the specified constraints. For example:

 xe vm-list HVM-boot-policy="BIOS order" power-state=halted
				

will only list those VMs for which both the field [power-state] has the value halted, and for which the field [HVM-boot-policy] has the value BIOS order.

It is also possible to filter the list based on the value of keys in maps, or on the existence of values in a set. The syntax for the first of these is map-name:key=value, and the second is set-name:contains=value

For scripting, a useful technique is passing [--minimal] on the command line, causing xe to print only the first field in a comma-separated list. For example, the command xe vm-list --minimal on a XenServer Host with three VMs installed gives the three UUIDs of the VMs, for example:

a85d6717-7264-d00e-069b-3b1d19d56ad9,aaa3eec5-9499-bcf3-4c03-af10baea96b7, \
42c044de-df69-4b30-89d9-2c199564581d
				

This section provides a reference to the xe commands. They are grouped by objects that the commands address, and listed alphabetically.

Commands for working with network bonds, for resilience with physical interface failover. See the section called “Creating NIC bonds” for details.

The bond object is a reference object which glues together master and member PIFs. The master PIF is the bonding interface which must be used as the overall PIF to refer to the bond. The member PIFs are a set of 2 or more physical interfaces which have been combined into the high-level bonded interface.

Bond parameters

Bonds have the following parameters:

Parameter NameDescriptionType
uuidunique identifier/object reference for the bondread only
masterUUID for the master bond PIFread only
membersset of UUIDs for the underlying bonded PIFsread only set parameter

Commands for working with physical CD/DVD drives on XenServer Hosts.

CD parameters

CDs have the following parameters:

Parameter NameDescriptionType
uuidunique identifier/object reference for the CDread only
name-labelName for the CDread/write
name-descriptionDescription text for the CDread/write
allowed-operationsA list of the operations that can be performed on this CDread only set parameter
current-operationsA list of the operations that are currently in progress on this CDread only set parameter
sr-uuidThe unique identifier/object reference for the SR this CD is part ofread only
sr-name-labelThe name for the SR this CD is part ofread only
vbd-uuidsA list of the unique identifiers for the VBDs on VMs that connect to this CDread only set parameter
crashdump-uuidsNot used on CDs since crashdumps cannot be written to themread only set parameter
virtual-sizeSize of the CD as it appears to VMs (in bytes)read only
physical-utilisationamount of physical space that the CD image is currently taking up on the SR (in bytes)read only
typeSet to User for CDsread only
sharableWhether or not the storage is sharable. Always true for CDs.read only
read-onlyWhether the CD is read-only, if false, the device is writeable. Always true for CDs.read only
storage-locktrue if this disk is locked at the storage levelread only
parentReference to the parent disk, if this CD is part of a chainread only
missingtrue if SR scan operation reported this CD as not present on diskread only
other-configA list of key/value pairs that specify additional configuration parameters for the CDread/write map parameter
location The path on which the device is mounted read only
managed true if the device is managed read only
xenstore-data Data to be inserted into the xenstore tree read only map parameter
sm-config names and descriptions of storage manager device config keys read only map parameter

Commands for interacting with XenServer Hosts.

XenServer Hosts are the physical servers running XenServer software. They have VMs running on them under the control of a special privileged Virtual Machine, known as the control domain or domain 0.

The XenServer Host objects can be listed with the standard object listing command ( xe host-list, xe host-cpu-list, and xe host-crashdump-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

Host selectors

Several of the commands listed here have a common mechanism for selecting one or more XenServer Hosts on which to perform the operation. The simplest is by supplying the argument host=<UUID or name-label>. XenServer Hosts can also be specified by filtering the full list of hosts on the values of fields. For example, specifying enabled=true will select all XenServer Hosts whose enabled field is equal to true. Where multiple XenServer Hosts are matching, and the operation can be performed on multiple XenServer Hosts, the option --multiple must be specified to perform the operation. The full list of parameters that can be matched is described at the beginning of this section, and can be obtained by the command xe host-list params=all. If no parameters to select XenServer Hosts are given, the operation will be performed on all XenServer Hosts.

Host parameters

XenServer Hosts have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the XenServer Hostread only
name-labelThe name of the XenServer Hostread/write
name-descriptionThe description string of the XenServer Hostread only
enabledfalse if disabled which prevents any new VMs from starting on them, which prepares the XenServer Hosts to be shut down or rebooted; true if the host is currently enabledread only
API-version-majormajor version numberread only
API-version-minorminor version numberread only
API-version-vendor read only
API-version-vendor-implementationdetails of vendor implementationread only map parameter
logginglogging configurationread/write map parameter
suspend-image-sr-uuidthe unique identifier/object reference for the SR where suspended images are putread/write
crash-dump-sr-uuidthe unique identifier/object reference for the SR where crash dumps are putread/write
software-versionlist of versioning parameters and their valuesread only map parameter
capabilitieslist of Xen versions that the XenServer Host can runread only set parameter
other-configA list of key/value pairs that specify additional configuration parameters for the XenServer Hostread/write map parameter
hostnameXenServer Host hostnameread only
addressXenServer Host IP addressread only
supported-bootloaderslist of bootloaders that the XenServer Host supports, for example, pygrub, eliloaderread only set parameter
memory-totaltotal amount of physical RAM on the XenServer Host, in bytesread only
memory-freetotal amount of physical RAM remaining that can be allocated to VMs, in bytesread only
host-metrics-last-updatedTimestamp of the date and time that the metrics for a XenServer Host were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only
host-metrics-livetrue if the host is operationalread only
loggingThe syslog_destination key can be set to the hostname of a remote listening syslog service.read/write map parameter
allowed-operations list of the operations allowed in this state. This list is advisory only and the server state may have changed by the time this field is read by a client. read only set parameter
current-operations links each of the running tasks using this object (by reference) to a current_operation enum which describes the nature of the task. read only set parameter
patches Set of host patches read only set parameter

XenServer Hosts contain some other objects that also have parameter lists.

CPUs on XenServer Hosts have the following parameters:

Crash dumps on XenServer Hosts have the following parameters:

Download a backup of the control domain of the specified XenServer Host to the machine that the command is invoked from, and saving it there as a file with the name file-name.

The host(s) on which this operation should be performed are selected via the standard selection mechanism (see host selectors above). Optional arguments can be any number of the host selectors listed at the beginning of this section.

Caution

While the xe host-backup command will work if executed on the local host (that is, without a specific hostname specified), do not use it this way. Doing so would fill up the control domain partition with the backup file, which would be a bad thing. The command should only be used from a remote off-host machine where you have space to hold the backup file.

Generate a fresh bug report (via xen-bugtool, with all optional files included) and upload to Citrix Support ftp site or other location.

The host(s) on which this operation should be performed are selected via the standard selection mechanism (see host selectors above). Optional arguments can be any number of the host selectors listed at the beginning of this section.

Optional parameters are http-proxy: use specified http proxy, and url: upload to this destination url. If optional parameters are not used, no proxy server is identified and the destination will be the default Citrix Support ftp site.

Download system status information into the specified file. The optional parameter entries is a comma-separated list of system status entries, taken from the capabilities XML fragment returned by the host-get-system-status-capabilities command. See the section called “host-get-system-status-capabilities” for details. If not specified, all system status information is saved in the file. The parameter output may be tar.bz2 (the default) or zip; if this parameter is not specified, the file is saved in tar.bz2 form.

The host(s) on which this operation should be performed are selected via the standard selection mechanism (see host selectors above).

Get system status capabilities for the specified host(s). The capabilities are returned as an XML fragment that looks something like this:

						<?xml version="1.0" ?>
	<system-status-capabilities>
 		<capability content-type="text/plain" default-checked="yes" key="xenserver-logs"  \
           max-size="150425200" max-time="-1" min-size="150425200" min-time="-1" \
		   pii="maybe"/>
 		<capability content-type="text/plain" default-checked="yes" \
		   key="xenserver-install" max-size="51200" max-time="-1" min-size="10240" \
		   min-time="-1" pii="maybe"/>
 		...
</system-status-capabilities>
					

Each capability entity has a number of attributes.

AttributeDescription 
keyA unique identifier for the capability. 
content-typeCan be either text/plain or application/data. Indicates whether a UI can render the entries for human consumption. 
default-checkedCan be either yes or no. Indicates whether a UI should select this entry by default. 
min-size, max-sizeIndicates an approximate range for the size, in bytes, of this entry. -1 indicates that the size is unimportant. 
min-time, max-timeIndicate an approximate range for the time, in seconds, taken to collect this entry. -1 indicates the time is unimportant. 
piiPersonally identifiable information. Indicates whether the entry would have information that would identify the system owner, or details of their network topology. This is one of:
  • no – no PII will be in these entries
  • yes – PII will likely or certainly be in these entries
  • maybe – you might wish to audit these entries for PII
  • if_customized – if the files are unmodified, then they will contain no PII, but since we encourage editing of these files, PII may have been introduced by such customizations. This is used in particular for the networking scripts in the control domain.

Passwords are never to be included in any bug report, regardless of any PII declaration.

 

The host(s) on which this operation should be performed are selected via the standard selection mechanism (see host selectors above).

Download a copy of the logs of the specified XenServer Hosts. The copy is saved by default in a timestamped file named hostname-yyyy-mm-dd T hh:mm:ssZ.tar.gz. You can specify a different filename using the optional parameter file-name.

The host(s) on which this operation should be performed are selected via the standard selection mechanism (see host selectors above). Optional arguments can be any number of the host selectors listed at the beginning of this section.

Caution

While the xe host-logs-download command will work if executed on the local host (that is, without a specific hostname specified), do not use it this way. Doing so will clutter the control domain partition with the copy of the logs, which would be a bad thing. The command should only be used from a remote off-host machine where you have space to hold the copy of the logs.

Reboot the specified XenServer Hosts. The specified XenServer Hosts must be disabled first using the xe host-disable command, otherwise a "HOST_IN_USE" error message is displayed.

The host(s) on which this operation should be performed are selected via the standard selection mechanism (see host selectors above). Optional arguments can be any number of the host selectors listed at the beginning of this section.

If the specified XenServer Hosts are members of a pool, the loss of connectivity on shutdown will be handled and the pool will recover when the XenServer Hosts returns. If you shut down a pool member, other members and the master will continue to function. If you shut down the master, the pool will be out of action until the master is rebooted and back on line, at which point the members will reconnect and synchronize with the master, or until you make one of the members into the master.

Shut down the specified XenServer Hosts. The specified XenServer Hosts must be disabled first using the xe host-disable command, otherwise a "HOST_IN_USE" error message is displayed.

The host(s) on which this operation should be performed are selected via the standard selection mechanism (see host selectors above). Optional arguments can be any number of the host selectors listed at the beginning of this section.

If the specified XenServer Hosts are members of a pool, the loss of connectivity on shutdown will be handled and the pool will recover when the XenServer Hosts returns. If you shut down a pool member, other members and the master will continue to function. If you shut down the master, the pool will be out of action until the master is rebooted and back on line, at which point the members will reconnect and synchronize with the master, or until you make one of the members into the master.

Commands for working with XenServer host patches (updates). These are for the standard non-OEM editions of XenServer for commands relating to updating the OEM edition of XenServer, see the section called “Update commands” for details.

The patch objects can be listed with the standard object listing command (xe patch-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

Patch parameters

Patches have the following parameters:

Commands for working with PBDs (Physical Block Devices). These are the software objects through which the XenServer Host accesses storage repositories (SRs).

The PBD objects can be listed with the standard object listing command (xe pbd-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

PBD parameters

PBDs have the following parameters:

Commands for working with PIFs (objects representing the physical network interfaces).

The PIF objects can be listed with the standard object listing command (xe pif-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

PIF parameters

PIFs have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the PIFread only
devicemachine-readable name of the interface (for example, eth0)read only
MACthe MAC address of the PIFread only
physicalIf true, the PIF points to an actual physical network interfaceread only
currently-attachedIs the PIF currently attached on this host? true or falseread only
MTUMaximum Transmission Unit of the PIF in bytes.read only
VLANVLAN tag for all traffic passing through this interface; -1 indicates no VLAN tag is assignedread only
bond-master-ofThe UUID of the bond this PIF is the master of (if any)read only
bond-slave-ofThe UUID of the bond this PIF is the slave of (if any)read only
management Is this PIF designated to be a management interface for the control domainread only
network-uuidthe unique identifier/object reference of the virtual network to which this PIF is connectedread only
network-name-labelthe name of the of the virtual network to which this PIF is connectedread only
host-uuidthe unique identifier/object reference of the XenServer Host to which this PIF is connectedread only
host-name-labelthe name of the XenServer Host to which this PIF is connectedread only
IP-configuration-modeType of network address configuration used; DHCP or staticread only
IPIP address of the PIF, defined here if IP-configuration-mode is static; undefined if DHCPread only
netmask Netmask of the PIF, defined here if IP-configuration-mode is static; undefined if supplied by DHCPread only
gatewayGateway address of the PIF, defined here if IP-configuration-mode is static; undefined if supplied by DHCPread only
DNSDNS address of the PIF, defined here if IP-configuration-mode is static; undefined if supplied by DHCPread only
io_read_kbsaverage read rate in kB/s for the deviceread only
io_write_kbsaverage write rate in kB/s for the deviceread only
carrierlink state for this deviceread only
vendor-idthe ID assigned to NIC's vendorread only
vendor-namethe NIC vendor's nameread only
device-idthe ID assigned by the vendor to this NIC modelread only
device-namethe name assigned by the vendor to this NIC modelread only
speedData transfer rate of the NICread only
duplexDuplexing mode of the NIC; full or halfread only
pci-bus-path read only
pif-metrics-last-updatedTimestamp of the date and time that the metrics for this PIF were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only
other-config additional configuration read/write map parameter

Commands for working with pools. A pool is a aggregate of one or more XenServer Hosts. A pool uses one or more shared storage repositories so that the VMs running on one XenServer Host in the pool can be migrated in near-real time (while still running, without needing to be shut down and brought back up) to another XenServer Host in the pool. Each XenServer Host is really a pool consisting of a single member by default. When a XenServer Host is joined to a pool, it is designated as a member, and the pool it has joined becomes the master for the pool.

The singleton pool object can be listed with the standard object listing command (xe pool-list), and its parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

Pool parameters

Pools have the following parameters:

Commands for controlling SRs (storage repositories).

The SR objects can be listed with the standard object listing command (xe sr-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

SR parameters

SRs have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the SRread only
name-labelThe name of the SRread/write
name-descriptionThe description string of the SRread/write
allowed-operationslist of the operations allowed on the SR in this stateread only set parameter
current-operationsA list of the operations that are currently in progress on this SRread only set parameter
VDIsunique identifier/object reference for the virtual disks in this SRread only set parameter
PBDsunique identifier/object reference for the PBDs attached to this SRread only set parameter
physical-utilisationphysical space currently utilized on this SR, in bytes. Note that for sparse disk formats, physical utilisation may be less than virtual allocationread only
physical-sizetotal physical size of the SR, in bytesread only
typetype of the SR, used to specify the SR backend driver to useread only
content-typethe type of the SR’s content. Currently used only to distinguish ISO libraries from other SRs. For storage repositories that store a library of ISOs, the content-type must be set to iso. In other cases, it is recommended that this be set either to empty, or the string 'user'.read only
sharedtrue if this SR is capable of being shared between multiple XenServer Hosts; false otherwiseread/write
other-configA list of key/value pairs that specify additional configuration parameters for the SR .read/write map parameter
host The storage repository host name read only
virtual-allocation sum of virtual_sizes of all VDIs in this storage repository (in bytes) read only
sm-config SM dependent data read only map parameter

Commands for working with long-running asynchronous tasks. These are tasks such as starting, stopping, and suspending a Virtual Machine, which are typically made up of a set of other atomic subtasks that together accomplish the requested operation.

The task objects can be listed with the standard object listing command (xe task-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

Task parameters

Tasks have the following parameters:

Commands for working with VM templates.

Templates are essentially VMs with the is-a-template parameter set to true. A template is a "gold image" that contains all the various configuration settings to instantiate a specific VM. XenServer ships with a base set of templates, which range from generic "raw" VMs that can boot an OS vendor installation CD (RHEL, CentOS, SLES, Windows) to complete pre-configured OS instances (Debian Etch and Sarge). With XenServer you can create VMs, configure them in standard forms for your particular needs, and save a copy of them as templates for future use in VM deployment.

The template objects can be listed with the standard object listing command (xe template-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

Template parameters

Templates have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the templateread only
name-labelThe name of the templateread/write
name-descriptionThe description string of the templateread/write
user-versionstring for creators of VMs and templates to put version informationread/write
is-a-templatetrue if this is a template. Template VMs can never be started, they are used only for cloning other VMs

Note that setting is-a-template using the CLI is not supported.

read/write
is-control-domaintrue if this is a control domain (domain 0 or a driver domain)read only
power-stateCurrent power state; always halted for a templateread only
power-stateCurrent power state; always halted for a templateread only
memory-dynamic-maxdynamic maximum memory in bytes. Currently unused, but if changed the following constraint must be obeyed: memory_static_max >= memory_dynamic_max >= memory_dynamic_min >= memory_static_min.read/write
memory-dynamic-mindynamic minimum memory in bytes. Currently unused, but if changed the same constraints for memory-dynamic-max must be obeyed.read/write
memory-static-maxstatically-set (absolute) maximum memory in bytes. This is the main value used to determine the amount of memory assigned to a VM.read/write
memory-static-minstatically-set (absolute) minimum memory in bytes. This represents the absolute minimum memory, and memory-static-min must be less than memory-static-max. This value is currently unused in normal operation, but the previous constraint must be obeyed.read/write
suspend-VDI-uuidThe VDI that a suspend image is stored on (has no meaning for a template)read only
VCPUs-paramsconfiguration parameters for the selected VCPU policy.

You can tune a VCPU's pinning with

xe vm-param-set uuid=<VM UUID> VCPUs-params:mask=1,2,3
									

A VM created from this template will then run on physical CPUs 1, 2, and 3 only.

You can also tune the VCPU priority (xen scheduling) with the cap and weight parameters; for example

xe vm-param-set uuid=<VM UUID> VCPUs-params:weight=512
xe vm-param-set uuid=<VM UUID> VCPUs-params:cap=100
									

A VM based on this template with a weight of 512 will get twice as much CPU as a domain with a weight of 256 on a contended XenServer Host. Legal weights range from 1 to 65535 and the default is 256.

The cap optionally fixes the maximum amount of CPU a VM based on this template will be able to consume, even if the XenServer Host has idle CPU cycles. The cap is expressed in percentage of one physical CPU: 100 is 1 physical CPU, 50 is half a CPU, 400 is 4 CPUs, etc. The default, 0, means there is no upper cap.

read/write map parameter
VCPUs-maxMaximum number of VCPUsread/write
VCPUs-at-startupBoot number of VCPUsread/write
actions-after-crashaction to take if a VM based on this template crashesread/write
console-uuidsvirtual console devicesread only set parameter
platformplatform-specific configurationread/write map parameter
allowed-operationslist of the operations allowed in this stateread only set parameter
current-operationsA list of the operations that are currently in progress on this templateread only set parameter
allowed-VBD-deviceslist of VBD identifiers available for use, represented by integers of the range 0-15. This list is informational only, and other devices may be used (but may not work).read only set parameter
allowed-VIF-deviceslist of VIF identifiers available for use, represented by integers of the range 0-15. This list is informational only, and other devices may be used (but may not work).read only set parameter
HVM-boot-policy read/write
HVM-boot-paramsThe order key controls the HVM guest boot order, represented as a string where each character is a boot method: "d" for the CD/DVD, "c" for the root disk, and "n" for network PXE boot. The default is "dc".read/write map parameter
PV-kernelpath to the kernelread/write
PV-ramdiskpath to the initrdread/write
PV-argsstring of kernel command line argumentsread/write
PV-legacy-argsstring of arguments to make legacy VMs based on this template bootread/write
PV-bootloadername of or path to bootloaderread/write
PV-bootloader-argsstring of miscellaneous arguments for the bootloaderread/write
last-boot-CPU-flagsdescribes the CPU flags on which a VM based on this template was last booted; not populated for a templateread only
resident-onthe XenServer Host on which a VM based on this template is currently resident; appears as <not in database> for a templateread only
affinitya XenServer Host which a VM based on this template has preference for running on; used by the xe vm-start command to decide where to run the VMread/write
other-configA list of key/value pairs that specify additional configuration parameters for the templateread/write map parameter
start-timeTimestamp of the date and time that the metrics for a VM based on this template were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT); set to 1 Jan 1970 Z (beginning of Unix/POSIX epoch) for a templateread only
install-timeTimestamp of the date and time that the metrics for a VM based on this template were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT); set to 1 Jan 1970 Z (beginning of Unix/POSIX epoch) for a templateread only
memory-actualThe actual memory being used by a VM based on this template; 0 for a templateread only
VCPUs-numberThe number of virtual CPUs assigned to a VM based on this template; 0 for a templateread only
VCPUs-utilisationA list of virtual CPUs and their weightread only map parameter
vm-metrics-last-updatedTimestamp of the date and time that the metrics for a VM based on this template were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT); set to 1 Jan 1970 Z (beginning of Unix/POSIX epoch) for a templateread only
os-versionthe version of the operating system for a VM based on this template; appears as <not in database> for a templateread only map parameter
PV-drivers-versionthe versions of the paravirtualized drivers for a VM based on this template; appears as <not in database> for a templateread only map parameter
PV-drivers-up-to-dateflag for latest version of the paravirtualized drivers for a VM based on this template; appears as <not in database> for a templateread only
memorymemory metrics reported by the agent on a VM based on this template; appears as <not in database> for a templateread only map parameter
disksdisk metrics reported by the agent on a VM based on this template; appears as <not in database> for a templateread only map parameter
networksnetwork metrics reported by the agent on a VM based on this template; appears as <not in database> for a templateread only map parameter
otherother metrics reported by the agent on a VM based on this template; appears as <not in database> for a templateread only map parameter
guest-metrics-last-updatedtimestamp when the last write to these fields was performed by the in-guest agent, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only
actions-after-shutdownaction to take after the VM has shutdownread/write
actions-after-reboot action to take after the VM has rebooted read/write
possible-hosts list of hosts that could potentially host the VM read only
HVM-shadow-multiplier multiplier applied to the amount of shadow that will be made available to the guest read/write
dom-id domain ID (if available, -1 otherwise) read only
recommendations An XML specification of recommended values and ranges for properties of this VM read only
xenstore-data data to be inserted into the xenstore tree (/local/domain/<domid>/vm-data) after the VM is created. read/write map parameter

Commands for working with VBDs (Virtual Block Devices).

A VBD is a software object that connects a VM to the VDI, which represents the contents of the virtual disk. The VBD has the attributes which tie the VDI to the VM (is it bootable, its read/write metrics, and so on), while the VDI has the information on the physical attributes of the virtual disk (which type of SR, whether the disk is shareable, whether the media is read/write or read only, and so on).

The VBD objects can be listed with the standard object listing command (xe vbd-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

VBD parameters

VBDs have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the VBDread only
vm-uuidThe unique identifier/object reference for the VM this VBD is attached toread only
vm-name-labelThe name of the VM this VBD is attached toread only
vdi-uuidThe unique identifier/object reference for the VDI this VBD is mapped toread only
vdi-name-labelThe name of the VDI this VBD is mapped toread only
emptyif true, this represents an empty driveread only
devicethe device seen by the guest, for example hda1read only
userdeviceuser-friendly device nameread/write
bootabletrue if this VBD is bootableread/write
modethe mode the VBD should be mounted withread/write
typehow the VBD appears to the VM, for example disk or CDread/write
currently-attachedIs the VBD currently attached on this host? true or falseread only
storage-locktrue if a storage-level lock was acquiredread only
status-codeerror/success code associated with the last attach operationread only
status-detailerror/success information associated with the last attach operation statusread only
qos_algorithm_typethe QoS algorithm to useread/write
qos_algorithm_paramsparameters for the chosen QoS algorithmread/write map parameter
qos_supported_algorithmssupported QoS algorithms for this VBDread only set parameter
io_read_kbsaverage read rate in kB/s for this VBDread only
io_write_kbsaverage write rate in kB/s for this VBDread only
vbd-metrics-last-updatedTimestamp of the date and time that the metrics for a VM based on this template were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only
allowed-operations list of the operations allowed in this state. This list is advisory only and the server state may have changed by the time this field is read by a client. read only set parameter
current-operations links each of the running tasks using this object (by reference) to a current_operation enum which describes the nature of the task. read only set parameter
unpluggable true if this VBD will support hot-unplug read/write
attachable true if the device can be attached read only
other-config additional configuration read/write map parameter

Commands for working with VDIs (Virtual Disk Images).

A VDI is a software object that represents the contents of the virtual disk seen by a VM, as opposed to the VBD, which is a connector object that ties a VM to the VDI. The VDI has the information on the physical attributes of the virtual disk (which type of SR, whether the disk is shareable, whether the media is read/write or read only, and so on), while the VBD has the attributes which tie the VDI to the VM (is it bootable, its read/write metrics, and so on).

The VDI objects can be listed with the standard object listing command (xe vdi-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

VDI parameters

VDIs have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the VDIread only
name-labelThe name of the VDIread/write
name-descriptionThe description string of the VDIread/write
allowed-operationsa list of the operations allowed in this stateread only set parameter
current-operationsa list of the operations that are currently in progress on this VDIread only set parameter
sr-uuidSR in which the VDI residesread only
vbd-uuidsa list of VBDs that refer to this VDIread only set parameter
crashdump-uuidslist of crash dumps that refer to this VDIread only set parameter
virtual-sizesize of disk as presented to the VM, in bytes. Note that, depending on storage backend type, the size may not be respected exactlyread only
physical-utilisationamount of physical space that the VDI is currently taking up on the SR, in bytesread only
typetype of VDI, for example, System or Userread only
sharabletrue if this VDI may be sharedread only
read-onlytrue if this VDI can only be mounted read-onlyread only
storage-locktrue if this VDI is locked at the storage levelread only
parentReferences the parent VDI, if this VDI is part of a chainread only
missingtrue if SR scan operation reported this VDI as not presentread only
other-configadditional configuration information for this VDIread/write map parameter
sr-name-label name of the containing storage repository read only
location location information read only
managed true if the CDI is managed read only
xenstore-data data to be inserted into the xenstore tree (/local/domain/0/backend/vbd/<domid>/<device-id>/sm-data) after the VDI is attached. This is generally set by the SM backends on vdi_attach. read only map parameter
sm-config SM dependent data read only map parameter

Commands for working with VIFs (Virtual network interfaces).

The VIF objects can be listed with the standard object listing command (xe vif-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

VIF parameters

VIFs have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the VIFread only
vm-uuidThe unique identifier/object reference for the VM that this VIF resides onread only
vm-name-labelThe name of the VM that this VIF resides onread only
allowed-operationsa list of the operations allowed in this stateread only set parameter
current-operationsa list of the operations that are currently in progress on this VIFread only set parameter
deviceinteger label of this VIF, indicating the order in which VIF backends were createdread only
MACMAC address of VIF, as exposed to the VMread only
MTUMaximum Transmission Unit of the VIF in bytes. This parameter is read-only, but you can override the MTU setting with the mtu key via the other-config map parameter. For example, to reset the MTU on a virtual NIC to use jumbo frames:
xe vif-param-set uuid=<VIF UUID> \
other-config:mtu=9000
read only
currently-attachedtrue if the device is currently attachedread only
qos_algorithm_typeQoS algorithm to useread/write
qos_algorithm_paramsparameters for the chosen QoS algorithmread/write map parameter
qos_supported_algorithmssupported QoS algorithms for this VIFread only set parameter
other-configA list of key/value pairs that specify additional configuration parameters for this VIF.read/write map parameter
network-uuidThe unique identifier/object reference of the virtual network to which this VIF is connectedread only
network-name-labelThe descriptive name of the virtual network to which this VIF is connectedread only
io_read_kbsaverage read rate in kB/s for this VIFread only
io_write_kbsaverage write rate in kB/s for this VIFread only
vif-metrics-last-updatedTimestamp of the date and time that the metrics for the VIF were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only

Commands for controlling VMs and their attributes.

VM selectors

Several of the commands listed here have a common mechanism for selecting one or more VMs on which to perform the operation. The simplest way is by supplying the argument vm=name or uuid . VMs can also be specified by filtering the full list of VMs on the values of fields. For example, specifying power-state=halted will select all VMs whose power-state parameter is equal to halted. Where multiple VMs are matching, the option --multiple must be specified to perform the operation. The full list of parameters that can be matched is described at the beginning of this section, and can be obtained by the command xe vm-list params=all. If no parameters to select VMs are given, the operation will be performed on all VMs.

The VM objects can be listed with the standard object listing command (xe vm-list), and the parameters manipulated with the standard parameter commands. See the section called “Low-level param commands” for details.

VM parameters

VMs have the following parameters:

Parameter NameDescriptionType
uuidThe unique identifier/object reference for the VMread only
name-labelThe name of the VMread/write
name-descriptionThe description string of the VMread/write
user-versionstring for creators of VMs and templates to put version informationread/write
is-a-templatefalse unless this is a template; template VMs can never be started, they are used only for cloning other VMs

Note that setting is-a-template using the CLI is not supported.

read/write
is-control-domaintrue if this is a control domain (domain 0 or a driver domain)read only
power-stateCurrent power stateread only
memory-dynamic-maxdynamic maximum in bytesread/write
memory-dynamic-mindynamic minimum in bytesread/write
memory-static-maxstatically-set (absolute) maximum in bytes.

If you want to change this value, the VM must be shut down.

read/write
memory-static-minstatically-set (absolute) minimum in bytes

If you want to change this value, the VM must be shut down.

read/write
suspend-VDI-uuidThe VDI that a suspend image is stored onread only
VCPUs-paramsconfiguration parameters for the selected VCPU policy.

You can tune a VCPU's pinning with

xe vm-param-set uuid=<VM UUID> VCPUs-params:mask=1,2,3
									

The selected VM will then run on physical CPUs 1, 2, and 3 only.

You can also tune the VCPU priority (xen scheduling) with the cap and weight parameters; for example

xe vm-param-set uuid=<template UUID> \
VCPUs-params:weight=512
xe vm-param-set uuid=<template UUID> \
VCPUs-params:cap=100
									

A VM with a weight of 512 will get twice as much CPU as a domain with a weight of 256 on a contended XenServer Host. Legal weights range from 1 to 65535 and the default is 256.

The cap optionally fixes the maximum amount of CPU a VM will be able to consume, even if the XenServer Host has idle CPU cycles. The cap is expressed in percentage of one physical CPU: 100 is 1 physical CPU, 50 is half a CPU, 400 is 4 CPUs, etc. The default, 0, means there is no upper cap.

read/write map parameter
VCPUs-maxMaximum number of virtual CPUs.read/write
VCPUs-at-startupBoot number of virtual CPUsread/write
actions-after-crashaction to take if the VM crashes. For PV guests, valid parameters are: preserve (for analysis only), coredump_and_restart (record a coredump and reboot VM), coredump_and_destroy (record a coredump and leave VM halted), restart (no coredump and restart VM), and destroy (no coredump and leave VM halted).read/write
console-uuidsvirtual console devicesread only set parameter
platformplatform-specific configurationread/write map parameter
allowed-operationslist of the operations allowed in this stateread only set parameter
current-operationsA list of the operations that are currently in progress on the VMread only set parameter
allowed-VBD-deviceslist of VBD identifiers available for use, represented by integers of the range 0-15. This list is informational only, and other devices may be used (but may not work).read only set parameter
allowed-VIF-deviceslist of VIF identifiers available for use, represented by integers of the range 0-15. This list is informational only, and other devices may be used (but may not work).read only set parameter
HVM-boot-policy read/write
HVM-boot-params read/write map parameter
HVM-shadow-multiplierFloating point value which controls the amount of shadow memory overhead to grant the VM. Defaults to 1.0 (the minimum value), and should only be changed by advanced users.read/write
PV-kernelpath to the kernelread/write
PV-ramdiskpath to the initrdread/write
PV-argsstring of kernel command line argumentsread/write
PV-legacy-argsstring of arguments to make legacy VMs bootread/write
PV-bootloadername of or path to bootloaderread/write
PV-bootloader-argsstring of miscellaneous arguments for the bootloaderread/write
last-boot-CPU-flagsdescribes the CPU flags on which the VM was last bootedread only
resident-onthe XenServer Host on which a VM is currently residentread only
affinitya XenServer Host which the VM has preference for running on; used by the xe vm-start command to decide where to run the VMread/write
other-configA list of key/value pairs that specify additional configuration parameters for the VM

For example, a VM will be started automatically after host boot if the other-config parameter includes the key/value pair auto_poweron: true

read/write map parameter
start-timeTimestamp of the date and time that the metrics for the VM were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only
install-timeTimestamp of the date and time that the metrics for the VM were read, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only
memory-actualThe actual memory being used by a VMread only
VCPUs-numberThe number of virtual CPUs assigned to the VM

For a paravirtualized Linux VM, this number can differ from VCPUS-max and can be changed without rebooting the VM via the vm-vcpu-hotplug command. See the section called “vm-vcpu-hotplug”. Windows VMs always run with the number of vCPUs set to VCPUs-max and must be rebooted to change this value.

Note that performance will drop sharply if you set VCPUs-number to a value greater than the number of physical CPUs on the XenServer Host.

read only
VCPUs-utilisationA list of virtual CPUs and their weightread only map parameter
os-versionthe version of the operating system for the VMread only map parameter
PV-drivers-versionthe versions of the paravirtualized drivers for the VMread only map parameter
PV-drivers-up-to-dateflag for latest version of the paravirtualized drivers for the VMread only
memorymemory metrics reported by the agent on the VMread only map parameter
disksdisk metrics reported by the agent on the VMread only map parameter
networksnetwork metrics reported by the agent on the VMread only map parameter
otherother metrics reported by the agent on the VMread only map parameter
guest-metrics-last-updatedtimestamp when the last write to these fields was performed by the in-guest agent, in the form yyyymmddThh:mm:ss z, where z is the single-letter military timezone indicator, for example, Z for UTC (GMT)read only
actions-after-shutdown action to take after the VM has shutdown read/write
actions-after-reboot action to take after the VM has rebooted read/write
possible-hosts potential hosts of this VM read only
dom-id domain ID (if available, -1 otherwise) read only
recommendations An XML specification of recommended values and ranges for properties of this VM read only
xenstore-data data to be inserted into the xenstore tree (/local/domain/<domid>/vm-data) after the VM is created read/write map parameter
vm-metrics-last-updated time when VM metrics were last updated read only

Import a VM from a previously-exported file. If preserve is set to [true], the MAC address of the original VM will be preserved. The sr-uuid determines the destination SR to import the VM into, and is the default SR if not specified.

The filename parameter can also point to an XVA-format VM, which is the legacy export format from XenServer 3.2 and is used by some third-party vendors to provide virtual appliances. This format uses a directory to store the VM data, so set filename to the root directory of the XVA export and not an actual file. Subsequent exports of the imported legacy guest will automatically be upgraded to the new filename-based format, which stores much more data about the configuration of the VM.

If the metadata is [true], then a previously exported set of metadata can be imported without their associated disk blocks. Metadata-only import will fail if any VDIs cannot be found (named by SR and VDI.location) unless the --force option is specified, in which case the import will proceed regardless. If disks can be mirrored/moved out-of-band then metadata import/export represents a fast way of moving VMs between disjoint pools (e.g. as part of a disaster recovery plan).

Reboot the specified VMs.

The VM or VMs on which this operation should be performed are selected via the standard selection mechanism (see VM selectors). Optional arguments can be any number of the VM parameters listed at the beginning of this section.

Use the force argument to cause an ungraceful shutdown, akin to pulling the plug on a physical server.

The VM or VMs on which this operation should be performed are selected via the standard selection mechanism (see VM selectors). Optional arguments can be any number of the VM parameters listed at the beginning of this section.

This is an advanced command only to be used when a member host in a pool goes down. You can use this command to force the pool master to reset the power-state of the VMs to be "halted". Essentially this forces the lock on the VM and its disks so it can be subsequently started on another pool host. This call requires the force flag to be specified, and fails if it is not on the command-line.

Resume the specified VMs.

The VM or VMs on which this operation should be performed are selected via the standard selection mechanism (see VM selectors). Optional arguments can be any number of the VM parameters listed at the beginning of this section.

If the VM is on a shared SR in a pool of hosts, use the on argument to specify which host in the pool on which to start it. By default the system will determine an appropriate host, which might be any of the members of the pool.

Shut down the specified VM.

The VM or VMs on which this operation should be performed are selected via the standard selection mechanism (see VM selectors). Optional arguments can be any number of the VM parameters listed at the beginning of this section.

Use the force argument to cause an ungraceful shutdown, akin to pulling the plug on a physical server.

Start the specified VMs.

The VM or VMs on which this operation should be performed are selected via the standard selection mechanism (see VM selectors). Optional arguments can be any number of the VM parameters listed at the beginning of this section.

If the VMs are on a shared SR in a pool of hosts, use the on argument to specify which host in the pool on which to start the VMs. By default the system will determine an appropriate host, which might be any of the members of the pool.

Lists the VIFs from the specified VMs.

The VM or VMs on which this operation should be performed are selected via the standard selection mechanism (see VM selectors). Note that the selectors operate on the VM records when filtering, and not on the VIF values. Optional arguments can be any number of the VM parameters listed at the beginning of this section.

If you experience odd behavior, application crashes, or have other issues with a XenServer Host, this chapter is meant to help you solve the problem if possible and, failing that, describes where the application logs are located and other information that can help your Citrix Solution Provider and Citrix track and resolve the issue.

Troubleshooting of installation issues is covered in the XenServer Installation Guide. Troubleshooting of Virtual Machine issues is covered in the XenServer Virtual Machine Installation Guide.

Important

We recommend that you follow the troubleshooting information in this chapter solely under the guidance of your Citrix Solution Provider or Citrix Support.

Citrix provides two forms of support: you can receive free self-help support via the Support site, or you may purchase our Support Services and directly submit requests by filing an online Support Case. Our free web-based resources include product documentation, a Knowledge Base, and discussion forums.

The XenCenter can be used to gather XenServer Host information. Click on Get Server Status Report... in the Tools menu to open the Server Status Report wizard. You can select from a list of different types of information (various logs, crash dumps, etc.). The information is compiled and downloaded to the machine that XenCenter is running on. For details, see the XenCenter Help.

Additionally, the XenServer Host has several CLI commands to make it simple to collate the output of logs and various other bits of system information using the utility xen-bugtool. Use the xe command host-bugreport-upload to collect the appropriate log files and system information and upload them to the Citrix Support ftp site. Please refer to the section called “host-bugreport-upload” for a full description of this command and its optional parameters. If you are requested to send a crashdump to Citrix Support, use the xe command host-crashdump-upload. Please refer to the section called “host-crashdump-upload” for a full description of this command and its optional parameters.

Caution

It is possible that sensitive information might be written into the XenServer Host logs.

By default, the server logs report only errors and warnings. If you need to see more detailed information, you can enable more verbose logging. To do so, use the host-loglevel-set command:

host-loglevel-set log-level=level

where level can be 0, 1, 2, 3, or 4, where 0 is the most verbose and 4 is the least verbose.

Log files greater than 5 MB are rotated, keeping 4 revisions. The logrotate command is run hourly.