Jump to content

matthope

Members
  • Posts

    76
  • Joined

  • Last visited

Posts posted by matthope

  1. 2 minutes ago, comet424 said:

    got it enabled..

     

    I checked settings of the vm  nothing there for pci    and currently watching that video

    unraidaudio4.JPG

     

    Try adding it manually. Paste this code between inside the <devices></devices> bracket.

       <hostdev mode='subsystem' type='pci' managed='yes'>
          <driver name='vfio'/>
          <source>
            <address domain='0x0000' bus='0x00' slot='0x1b' function='0x0'/>
          </source>
          <alias name='hostdev1'/>
          <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/>
        </hostdev>

     

  2. 28 minutes ago, comet424 said:

    hi I tried  the setup  of the ACS OverRide.. I set it to Both  as it didn't say which one to set it in the instructions

    but I can not get it to work  to get the Audio device to show up

    Can you send a picture with the IOMMU groups?  You cropped out this information in the last picture. Also sometimes you need to add it directly in VM XML instead of using the VM GUI, it should look like this: 

        <hostdev mode='subsystem' type='pci' managed='yes'>
          <driver name='vfio'/>
          <source>
            <address domain='0x0000' bus='0x00' slot='0x1f' function='0x3'/>
          </source>
          <alias name='hostdev1'/>
          <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/>
        </hostdev>

    Finally make sure to remove the AC power when resetting, some motherboard need to be completely shut off. 

  3. On 2/14/2019 at 3:22 AM, alexhalbi said:

    Sure,

    With not working I mean I am unable to start my VM with the Soundcard attached to it. I get following error (with and without the syslinux configuration):

    
    Execution error
    internal error: process exited while connecting to monitor: 2019-02-14T08:18:27.585203Z qemu-system-x86_64: -device vfio-pci,host=00:1f.3,id=hostdev0,bus=pci.0,addr=0x6: vfio error: 0000:00:1f.3: group 13 is not viable Please ensure all devices within the iommu_group are bound to their vfio bus driver.

    But I cannot add all devices in that IOMMU Group to the VM afaik.

    image.png.bfa2e9ee9fe55628a8b586f21c898fa8.png

     

    Right now I have a workaround running with an USB Sound Card on an USB Controller [1b21:2142] bound to my VM, but I would really like to use the onboard Audio since it is surely better. I also added this to the syslinux file and it works fine.

     

    BTW: Is it normal, that the PCI Device to add to the VM does not show up (in the selection thing in the vm options in the screenshot above) after adding the vfio-pci.ids statement to the syslinux file and rebooting? Or is that an unraid bug? After I added it manually in the xml file it is now showing up...

     

    syslinux file.txt

    vm_config.xml

     

    Well that ain't a good error. Sadly, you cannot fix this. The solution would be to continue to use a USB sound card or to add a PCI sound card. 

     

    For the USB controller, on my side, after stubbing it in the syslinux, it automatically appeared in the VM config.

    • Like 1
  4. 10 hours ago, alexhalbi said:

    I am currently also trying to remap my onboard audio to a Windows VM, but the way you described does not seem to work in my case.

    I have got an "ASRock - Z370 Professional Gaming i7" with Creative onboard Audio with an i7-8700K.

    I tried PCIe ACS Override "Downsteam" and "Both"

    My append line is:

    
    append pcie_acs_override=downstream,multifunction vfio-pci.ids=8086:a2f0 modprobe.blacklist=i2c_i801,i2c_smbus initrd=/bzroot

    And the corresponding IOMMU Group is:

    
    IOMMU group 13:	[8086:a2c9] 00:1f.0 ISA bridge: Intel Corporation Z370 Chipset LPC/eSPI Controller
    		[8086:a2a1] 00:1f.2 Memory controller: Intel Corporation 200 Series/Z370 Chipset Family Power Management Controller
    		[8086:a2f0] 00:1f.3 Audio device: Intel Corporation 200 Series PCH HD Audio
    		[8086:a2a3] 00:1f.4 SMBus: Intel Corporation 200 Series/Z370 Chipset Family SMBus Controller

    I hope anyone is able to help me with this, if it is even possible.

    Thanks to everyone who can help me.

    IOMMU.txt

     

    Can you be more specific about your issue ? Telling me it doesn't work isn't really useful 😆 

     

    Also, your append line seems to be correct, however, it might be misplaced inside your syslinux configuration. Can you send your syslinux file ?

     

    • Like 1
  5. 37 minutes ago, xgotgot said:

    With ACSovveride enable :

     

     

    But i have 2 choices in VM:

    Intel cannon Lake PCH cAVS (00:1f:3) or NVIDIA GP104 HD Audio Controller (01:00.1)

    But i need to bring out the sound by the motherboard and not by the graphics card.

    You want to select the [8086:a348] 00:1f.3 Audio device: Intel Corporation Cannon Lake PCH cAVS (rev 10) device.

  6. On 7/30/2018 at 5:40 AM, steve1977 said:

    What about the "cannot reset device"? I thought this poses an issue? If not, anything I need to do to make my VM "see" the audio card?

     

    Like I said that's normal. 

     

    There is actually no reset mecanism for this device, so when the VM start the peripheral must be already in a appropriate state. That's why you need to blacklist the i2c bus and that a power cycle could resolve this issue (sadly not in your case). You could do a lsmod to see if a i2c driver is loaded, after that your only chance are the redhat mail chain.

  7. On 7/28/2018 at 8:03 PM, steve1977 said:

     

    There is some more in the log this time. Please see the full one below. Thanks for any thoughts you may have to trouble-shoot?

     

    2018-07-28 12:40:32.264+0000: Domain id=1 is tainted: high-privileges
    2018-07-28 12:40:32.264+0000: Domain id=1 is tainted: custom-argv
    2018-07-28 12:40:32.264+0000: Domain id=1 is tainted: host-cpu
    2018-07-28T12:40:32.303473Z qemu-system-x86_64: -chardev pty,id=charserial0: char device redirected to /dev/pts/0 (label charserial0)
    2018-07-28T12:40:32.970282Z qemu-system-x86_64: vfio: Cannot reset device 0000:00:1f.3, no available reset mechanism.
    2018-07-28T12:40:32.974277Z qemu-system-x86_64: vfio: Cannot reset device 0000:00:1f.3, no available reset mechanism.
    usb_desc_get_descriptor: 2 unknown type 33 (len 10)
    usb_desc_get_descriptor: 1 unknown type 33 (len 10)
    usb_desc_get_descriptor: 1 unknown type 33 (len 10)

     

    I don't know for the usb_desc, but the others are normal.

  8. On 7/24/2018 at 7:10 AM, mrbilky said:

    This may be a stupid question but I can see and set my onboard audio in the VM setup and the VM will launch but when I get all the drivers up and running I don't get any audio, so for the purpose of making this work do I need speakers connected to the unRAID box in order for the system to work, I'm logging in from my MacBook and pc but no sound?

     

    I'm not sure of what you are trying to do. You want to have audio from a remote computer? If this is the case, I suggest you to open a new thread since this is off topic. However, if you are trying to have sound from a bare metal VM, you would need speaker to make it work.

     

  9. 22 hours ago, blewstar said:

    ***Update***

     

    Adding the SB Audigy Rx sound card and then loading drivers off the site I now have sound. 

     

    Good ! 

     

    Sorry I didn't have the time to answer you in the first place. However, I never tested it with your hardware setup and I don't see any apparent mistake.

     

    Have you tried to remove AC plug from the computer ? In some case (like mine) motherboard seems to keep the control of the audio chip even with the i2c blacklist. A power off won't work, you will need to completely remove power from your server.  

     

    If you want to retry someday, I will be happy to help. 

  10.  

    Hi @CiaoCiao

     

    Replace this line of your syslinux : 

    append vfo-pci.ids=1912:0014 initrd=/bzroot

     

    with this one :

    append vfio-pci.ids=YOURDEVICEADDRESS modprobe.blacklist=i2c_i801,i2c_smbus initrd=/bzroot

    If this doesnt work, can you make a screenshot of your IOMMU group ( Tools -> System Devices ) ? It should look like this :

     

    image.thumb.png.82a9238c30993881894e6d39cd00d383.png

     

    Also what is your hardware configuration (CPU,GPU, MOBO, etc) ?

     

    • Like 1
  11. On 13/03/2018 at 6:13 PM, dabl said:

    None of the people reporting this problem earlier in the thread have weighed in with results from a recent 6.5.0-rc 

     

    I see only one report of success with 6.5.0-rc1 from cferrero

     

    Djoss, Jeronyson, vanes, megagator, ffiarpg, Leliil, matthope?

     

     

    I'd rather wait for the 6.5 stable before upgrading the OS. The memory leak is quite slow on my side, about 2Go per week. It's more an annoyance than a serious issue for me.

     

    EDIT1: I'm trying the 6.5 stable at the moment, I will keep you updated.

     

    EDIT2: Not an issue anymore. 6.5 seems to fix it.

  12. 1 hour ago, IndianaJoe1216 said:

     This is exactly the same error I am currently getting. I have made the swap to verify over port 80 but the issue is that my ISP blocks inbound 80 traffic for some reason. Is there another way to verify this so I can get external access back up and running?

     

    If your provider block the port 80, the only other way at the moment is the dns challenge, I suggest you to read the forum from this post. However, it require you to use a dns provider with an API, such as cloudflare, and 2 scripts specific to your dns provider.

     

     

     

     

     

  13. On 19/01/2018 at 9:15 AM, aptalca said:

     

    Would you be willing to test that branch? It is currently untested. I can provide instructions, let me know

     

    Yup, just tell me how. 

     

    However, If you want me to try the dns branch on github, I almost certain it won't work, since you cannot use the parameters --non-interactive and --manual together with certbot. I suggest you to use thoses three parameters instead of --non-interactive : --agree-tos --manual-public-ip-logging-ok --no-eff-email. Also the parameter --preferred-challenges=http should be --preferred-challenges=dns instead.

     

    Github: 50-config

    [line 147] certbot certonly --non-interactive --renew-by-default --manual --preferred-challenges=http --manual-auth-hook /config/authenticator.sh --manual-cleanup-hook /config/cleanup.sh --rsa-key-size 4096 $EMAILPARAM --agree-tos $URLS

     

  14. On 13/01/2018 at 4:40 AM, ebnerjoh said:

    Ok, it is not working with the temporary workaround. 

     

    I am getting: 

     

    
    Error output from authenticator.sh:
    
    Traceback (most recent call last):
    File "<string>", line 1, in <module>
    TypeError: 'NoneType' object has no attribute '__getitem__'
    Traceback (most recent call last):
    File "<string>", line 1, in <module>
    TypeError: 'NoneType' object has no attribute '__getitem__'

     

     

    I had this issue me too, but i've slightly modified the script and it's now working for me. The issue is happening when you try to create the txt file for the top domain. 

     

    authenticator.sh

    #!/bin/bash
    
    # Get your API key from https://www.cloudflare.com/a/account/my-account
    API_KEY="SOMETHING"
    EMAIL="SOMETHING"
    
    echo "Currently creating a txt entry for $CERTBOT_DOMAIN."
    
    # Strip only the top domain to get the zone id
    DOMAIN=$(expr match "$CERTBOT_DOMAIN" '.*\.\(.*\..*\)')
    
    # If $CERTBOT_DOMAIN is already the top domain
    if [ -z "$DOMAIN" ]; then
    	DOMAIN="$CERTBOT_DOMAIN"
    fi
    
    # Get the Cloudflare zone id
    ZONE_EXTRA_PARAMS="status=active&page=1&per_page=20&order=status&direction=desc&match=all"
    ZONE_ID=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones?name=$DOMAIN&$ZONE_EXTRA_PARAMS" \
         -H     "X-Auth-Email: $EMAIL" \
         -H     "X-Auth-Key: $API_KEY" \
         -H     "Content-Type: application/json" | python -c "import sys,json;print(json.load(sys.stdin)['result'][0]['id'])")
    
    # Create TXT record
    CREATE_DOMAIN="_acme-challenge.$CERTBOT_DOMAIN"
    RECORD_ID=$(curl -s -X POST "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records" \
         -H     "X-Auth-Email: $EMAIL" \
         -H     "X-Auth-Key: $API_KEY" \
         -H     "Content-Type: application/json" \
         --data '{"type":"TXT","name":"'"$CREATE_DOMAIN"'","content":"'"$CERTBOT_VALIDATION"'","ttl":120}' \
                 | python -c "import sys,json;print(json.load(sys.stdin)['result']['id'])")
    
    # Save info for cleanup
    if [ ! -d /tmp/CERTBOT_$CERTBOT_DOMAIN ];then
            mkdir -m 0700 /tmp/CERTBOT_$CERTBOT_DOMAIN
    fi
    echo $ZONE_ID > /tmp/CERTBOT_$CERTBOT_DOMAIN/ZONE_ID
    echo $RECORD_ID > /tmp/CERTBOT_$CERTBOT_DOMAIN/RECORD_ID
    
    # Sleep to make sure the change has time to propagate over to DNS
    sleep 15

     

  15. 19 hours ago, aptalca said:

     

    acme.sh is a 3rd party client. Its dev created a bunch of dns update scripts himself. We don't use that.

     

    We use the official letsencrypt client, certbot. With that, you have to supply your own authenticator.sh and cleanup.sh scripts for your dns provider. 

     

    Here's a dns validation mock up where it requires you to supply your own script: https://github.com/linuxserver/docker-letsencrypt/tree/dns

     

    We haven't yet decided whether we will publish it or not

     

    +1

     

    Right now we must go through the docker bash to add/edit the scripts, which is quite painful. Also the modification made to the 50-config script will be deleted whenever the container is updated. 

     

    I would use this features for sure if it's added.

  16. In my case, my internet provider block the port 80 so the HTTPVAL fix wont work.

     

    Since TLS-SNI challenge is deactivated and I can't use HTTP challenge, I'm obligated to use the DNS-01 challenge. I've found a way to use it with this docker and cloudflare. You will need those 2 scripts ( here ) and you will need to modify the script /etc/cont-init/50-config inside the docker. 

    docker exec -it [DOCKERNAME] /bin/bash
    vi /etc/cont-init.d/50-config

    In the file comment this line :

    certbot certonly --non-interactive --renew-by-default --standalone --preferred-challenges $PREFCHAL --rsa-key-size 4096 $EMAILPARAM --agree-tos $URLS

    And add this one :

    certbot certonly --agree-tos --manual --manual-public-ip-logging-ok --preferred-challenges=dns --manual-auth-hook /app/authenticator.sh --manual-cleanup-hook /app/cleanup.sh --rsa-key-size 4096 $EMAILPARAM --no-eff-email $URLS

     

    However, this is a one time fix since any modification to the docker is reverted when restarted. 

     

    @aptalca It would be nice if the DNS-01 challenge could be added definitively to this docker.

     

  17. On 22/12/2017 at 6:46 AM, jonathanm said:

    Not quite sure what you mean by user management. By design, only root can access the web management or console, and only non-root can access share assets.

     

    Can you outline what exactly you want to allow other users access to in the web management?

     

    Well, root can access eveything and modify everything and that's ok. At the moment, I have 3 VM working on my server (mac, linux & windows) and they are used by more than one user. We are programmers and sometimes we crash the OS that need to rebooted from the webGUI. I would like to give access to only VM management to certains users instead of giving them root access. This could be extended to about every tab in the webGUI.

    • Like 2
    • Upvote 1
×
×
  • Create New...