How to connect QEMU guest machine to the Yggdrasil tun?

[oooo-ps]

Any example please, I want to run Yggdrasil-only OS, with restricted internet access.

[nagy]

I also have this use case and the easiest solution I found was to use vsock for this connectivity and to use my PR for this.

• Introduce VSOCK link type #1223

On the host machine, you have to listen to this socket like so:

...
Listen: [ "vsock://local:1234" ]
...

Then you can start your QEMU machine like so:

qemu-system-x86_64 ... -device vhost-vsock-pci,id=vhost-vsock-pci0,guest-cid=3

For the VM config you have to configure your outside node as a vsock peer:

...
Peers: ["vsock://local:1234"]
...

I hope this helps.

[oooo-ps]

Thanks for a tip,

I have installed your branch on both machines (host + guest) then connected vsock device:

but on guest machine I see following timeout issue:

sudo yggdrasilctl getpeers
                     URI                     	State	Dir	IP Address	Uptime	RTT	RX	TX	Down	Up	Pr	Cost	                          Last Error                            
vsock://local:1234                           	Down 	Out	          	0s    	-  	0B	0B	-   	- 	0 	0   	2s ago: dial vsock local(1):1234: connect: connection timed out

maybe I forgot to give some permission, have no idea how can I test this socket connectivity.

lsmod | grep vsock
vhost_vsock            24576  0
vhost                  69632  2 vhost_vsock,vhost_net
vsock_loopback         12288  0
vmw_vsock_virtio_transport_common    57344  2 vhost_vsock,vsock_loopback
vmw_vsock_vmci_transport    57344  0
vsock                  73728  6 vmw_vsock_virtio_transport_common,vhost_vsock,vsock_loopback,vmw_vsock_vmci_transport
vmw_vmci              118784  1 vmw_vsock_vmci_transport

UPDATE

Well, I found that it works with vsock://host:1234, which has an ID 2. This option is set on both - the host and guest machines, instead of local, which has an ID 1.

UPDATE 2

Just created this extended guide for the QEMU/Virt-manager GUI (feel free to translate)

[sdgathman]

I just run yggdrasil on the qemu VM, and there is no issue. It connects to other nodes on the LAN (or internet if routed) just fine. Qemu has a default LAN (on Fedora at least) that VMs connect to. Normally 192.168.122.0/24. This LAN is not accessible to outside internet. So yggdrasil happens automagically.

[oooo-ps]

As router got new updates above PR #1223, I found yet another alternative solution by using socat and unix://
http://[202:68d0:f0d5:b88d:1d1a:555e:2f6b:3148]/d/243-zjednannia-virtualnix-masin-yggdrasil-cerez-unix-z-socat

Imho that is not cool that completed solution with vsock could not be simply merged to upstream and get deprecated.