Tag Info

Hot answers tagged

2

Possible Solutions Offline: Strictly SSH Access It is not feasible to inject a binary into a running Xen virtual machine to have it create an SSH server and access the filesystem. If you strictly need an emergency SSH session opened, you will have to destroy the virtual machine then attach its disks to a separate general read-only rescue image that has a ...


1

Quick short answer more to encourage research but give you the idea: exclude.txt /boot /proc /sys /tmp /dev /var/lock /etc/fstab /etc/mdadm.conf /etc/mtab /etc/resolv.conf /etc/conf.d/net /etc/network/interfaces /etc/networks /etc/sysconfig/network* /etc/sysconfig/hwconf /etc/sysconfig/ip6tables-config /etc/sysconfig/kernel /etc/hostname /etc/HOSTNAME ...


1

Install lldpd on the Xen Dom0 and DomUs. Then lldpctl will tell you which network bridge and the hostname of the bridge (i.e. the name of the Dom0). On the Dom0 you will also see the upstream switches if they have LLDP enabled, which can also be useful. This works for PV, PVHVM, etc. In fact, it should work for any virtualisation platform that can run LLDP ...


1

A somewhat hacky solution could be to dynamically create an ssh account with the authorized_keys containing the VM owner's public key. The shell would be set to xm console <servername> && <command to remove the user again>. You'd need to think through the security implications of the user breaking out of the xm session of course.



Only top voted, non community-wiki answers of a minimum length are eligible