1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329
|
=encoding utf8
=head1 NAME
guestfish - the libguestfs Filesystem Interactive SHell
=head1 SYNOPSIS
guestfish [--options] [commands]
guestfish
guestfish [--ro|--rw] -a disk.img
guestfish [--ro|--rw] -a disk.img -m dev[:mountpoint]
guestfish -d libvirt-domain
guestfish [--ro|--rw] -a disk.img -i
guestfish -d libvirt-domain -i
=head1 WARNING
Using guestfish in read/write mode on live virtual machines can be
dangerous, potentially causing disk corruption. Use the I<--ro>
(read-only) option to use guestfish safely if the disk image or
virtual machine might be live.
=head1 DESCRIPTION
Guestfish is a shell and command-line tool for examining and modifying
virtual machine filesystems. It uses libguestfs and exposes all of
the functionality of the guestfs API, see L<guestfs(3)>.
Guestfish gives you structured access to the libguestfs API, from
shell scripts or the command line or interactively. If you want to
rescue a broken virtual machine image, you should look at the
L<virt-rescue(1)> command.
=head1 EXAMPLES
=head2 As an interactive shell
$ guestfish
Welcome to guestfish, the libguestfs filesystem interactive shell for
editing virtual machine filesystems.
Type: 'help' for a list of commands
'man' to read the manual
'quit' to quit the shell
><fs> add-ro disk.img
><fs> run
><fs> list-filesystems
/dev/sda1: ext4
/dev/vg_guest/lv_root: ext4
/dev/vg_guest/lv_swap: swap
><fs> mount /dev/vg_guest/lv_root /
><fs> cat /etc/fstab
# /etc/fstab
# Created by anaconda
[...]
><fs> exit
=head2 From shell scripts
Create a new C</etc/motd> file in a guest or disk image:
guestfish <<_EOF_
add disk.img
run
mount /dev/vg_guest/lv_root /
write /etc/motd "Welcome, new users"
_EOF_
List the LVM logical volumes in a disk image:
guestfish -a disk.img --ro <<_EOF_
run
lvs
_EOF_
List all the filesystems in a disk image:
guestfish -a disk.img --ro <<_EOF_
run
list-filesystems
_EOF_
=head2 On one command line
Update C</etc/resolv.conf> in a guest:
guestfish \
add disk.img : run : mount /dev/vg_guest/lv_root / : \
write /etc/resolv.conf "nameserver 1.2.3.4"
Edit C</boot/grub/grub.conf> interactively:
guestfish --rw --add disk.img \
--mount /dev/vg_guest/lv_root \
--mount /dev/sda1:/boot \
edit /boot/grub/grub.conf
=head2 Mount disks automatically
Use the I<-i> option to automatically mount the
disks from a virtual machine:
guestfish --ro -a disk.img -i cat /etc/group
guestfish --ro -d libvirt-domain -i cat /etc/group
Another way to edit C</boot/grub/grub.conf> interactively is:
guestfish --rw -a disk.img -i edit /boot/grub/grub.conf
=head2 As a script interpreter
Create a 100MB disk containing an ext2-formatted partition:
#!/usr/bin/guestfish -f
sparse test1.img 100M
run
part-disk /dev/sda mbr
mkfs ext2 /dev/sda1
=head2 Start with a prepared disk
An alternate way to create a 100MB disk called C<test1.img> containing
a single ext2-formatted partition:
guestfish -N fs
To list what is available do:
guestfish -N help | less
=head2 Remote control
eval "`guestfish --listen`"
guestfish --remote add-ro disk.img
guestfish --remote run
guestfish --remote lvs
=head1 OPTIONS
=over 4
=item B<--help>
Displays general help on options.
=item B<-h>
=item B<--cmd-help>
Lists all available guestfish commands.
=item B<-h cmd>
=item B<--cmd-help cmd>
Displays detailed help on a single command C<cmd>.
=item B<-a image>
=item B<--add image>
Add a block device or virtual machine image to the shell.
The format of the disk image is auto-detected. To override this and
force a particular format use the I<--format=..> option.
Using this flag is mostly equivalent to using the C<add> command,
with C<readonly:true> if the I<--ro> flag was given, and
with C<format:...> if the I<--format=...> flag was given.
=item B<-c URI>
=item B<--connect URI>
When used in conjunction with the I<-d> option, this specifies
the libvirt URI to use. The default is to use the default libvirt
connection.
=item B<--csh>
If using the I<--listen> option and a csh-like shell, use this option.
See section L</REMOTE CONTROL AND CSH> below.
=item B<-d libvirt-domain>
=item B<--domain libvirt-domain>
Add disks from the named libvirt domain. If the I<--ro> option is
also used, then any libvirt domain can be used. However in write
mode, only libvirt domains which are shut down can be named here.
Domain UUIDs can be used instead of names.
Using this flag is mostly equivalent to using the C<add-domain> command,
with C<readonly:true> if the I<--ro> flag was given, and
with C<format:...> if the I<--format=...> flag was given.
=item B<-D>
=item B<--no-dest-paths>
Don't tab-complete paths on the guest filesystem. It is useful to be
able to hit the tab key to complete paths on the guest filesystem, but
this causes extra "hidden" guestfs calls to be made, so this option is
here to allow this feature to be disabled.
=item B<--echo-keys>
When prompting for keys and passphrases, guestfish normally turns
echoing off so you cannot see what you are typing. If you are not
worried about Tempest attacks and there is no one else in the room
you can specify this flag to see what you are typing.
=item B<-f file>
=item B<--file file>
Read commands from C<file>. To write pure guestfish
scripts, use:
#!/usr/bin/guestfish -f
=item B<--format=raw|qcow2|..>
=item B<--format>
The default for the I<-a> option is to auto-detect the format of the
disk image. Using this forces the disk format for I<-a> options which
follow on the command line. Using I<--format> with no argument
switches back to auto-detection for subsequent I<-a> options.
For example:
guestfish --format=raw -a disk.img
forces raw format (no auto-detection) for C<disk.img>.
guestfish --format=raw -a disk.img --format -a another.img
forces raw format (no auto-detection) for C<disk.img> and reverts to
auto-detection for C<another.img>.
If you have untrusted raw-format guest disk images, you should use
this option to specify the disk format. This avoids a possible
security problem with malicious guests (CVE-2010-3851). See also
L</add-drive-opts>.
=item B<-i>
=item B<--inspector>
Using L<virt-inspector(1)> code, inspect the disks looking for
an operating system and mount filesystems as they would be
mounted on the real virtual machine.
Typical usage is either:
guestfish -d myguest -i
(for an inactive libvirt domain called I<myguest>), or:
guestfish --ro -d myguest -i
(for active domains, readonly), or specify the block device directly:
guestfish --rw -a /dev/Guests/MyGuest -i
Note that the command line syntax changed slightly over older
versions of guestfish. You can still use the old syntax:
guestfish [--ro] -i disk.img
guestfish [--ro] -i libvirt-domain
Using this flag is mostly equivalent to using the C<inspect-os>
command and then using other commands to mount the filesystems that
were found.
=item B<--keys-from-stdin>
Read key or passphrase parameters from stdin. The default is
to try to read passphrases from the user by opening C</dev/tty>.
=item B<--listen>
Fork into the background and listen for remote commands. See section
L</REMOTE CONTROL GUESTFISH OVER A SOCKET> below.
=item B<--live>
Connect to a live virtual machine.
(Experimental, see L<guestfs(3)/ATTACHING TO RUNNING DAEMONS>).
=item B<-m dev[:mountpoint[:options]]>
=item B<--mount dev[:mountpoint[:options]]>
Mount the named partition or logical volume on the given mountpoint.
If the mountpoint is omitted, it defaults to C</>.
You have to mount something on C</> before most commands will work.
If any I<-m> or I<--mount> options are given, the guest is
automatically launched.
If you don't know what filesystems a disk image contains, you can
either run guestfish without this option, then list the partitions,
filesystems and LVs available (see L</list-partitions>,
L</list-filesystems> and L</lvs> commands), or you can use the
L<virt-filesystems(1)> program.
The third (and rarely used) part of the mount parameter is the list of
mount options used to mount the underlying filesystem. If this is not
given, then the mount options are either the empty string or C<ro>
(the latter if the I<--ro> flag is used). By specifying the mount
options, you override this default choice. Probably the only time you
would use this is to enable ACLs and/or extended attributes if the
filesystem can support them:
-m /dev/sda1:/:acl,user_xattr
Using this flag is equivalent to using the C<mount-options> command.
=item B<-n>
=item B<--no-sync>
Disable autosync. This is enabled by default. See the discussion
of autosync in the L<guestfs(3)> manpage.
=item B<-N type>
=item B<--new type>
=item B<-N help>
Prepare a fresh disk image formatted as "type". This is an
alternative to the I<-a> option: whereas I<-a> adds an existing disk,
I<-N> creates a preformatted disk with a filesystem and adds it.
See L</PREPARED DISK IMAGES> below.
=item B<--pipe-error>
If writes fail to pipe commands (see L</PIPES> below), then the
command returns an error.
The default (also for historical reasons) is to ignore such errors so
that:
><fs> command_with_lots_of_output | head
doesn't give an error.
=item B<--progress-bars>
Enable progress bars, even when guestfish is used non-interactively.
Progress bars are enabled by default when guestfish is used as an
interactive shell.
=item B<--no-progress-bars>
Disable progress bars.
=item B<--remote[=pid]>
Send remote commands to C<$GUESTFISH_PID> or C<pid>. See section
L</REMOTE CONTROL GUESTFISH OVER A SOCKET> below.
=item B<-r>
=item B<--ro>
This changes the I<-a>, I<-d> and I<-m> options so that disks are
added and mounts are done read-only.
The option must always be used if the disk image or virtual machine
might be running, and is generally recommended in cases where you
don't need write access to the disk.
Note that prepared disk images created with I<-N> are not affected by
this option. Also commands like C<add> are not affected - you have to
specify the C<readonly:true> option explicitly if you need it.
See also L</OPENING DISKS FOR READ AND WRITE> below.
=item B<--selinux>
Enable SELinux support for the guest. See L<guestfs(3)/SELINUX>.
=item B<-v>
=item B<--verbose>
Enable very verbose messages. This is particularly useful if you find
a bug.
=item B<-V>
=item B<--version>
Display the guestfish / libguestfs version number and exit.
=item B<-w>
=item B<--rw>
This changes the I<-a>, I<-d> and I<-m> options so that disks are
added and mounts are done read-write.
See L</OPENING DISKS FOR READ AND WRITE> below.
=item B<-x>
Echo each command before executing it.
=back
=head1 COMMANDS ON COMMAND LINE
Any additional (non-option) arguments are treated as commands to
execute.
Commands to execute should be separated by a colon (C<:>), where the
colon is a separate parameter. Thus:
guestfish cmd [args...] : cmd [args...] : cmd [args...] ...
If there are no additional arguments, then we enter a shell, either an
interactive shell with a prompt (if the input is a terminal) or a
non-interactive shell.
In either command line mode or non-interactive shell, the first
command that gives an error causes the whole shell to exit. In
interactive mode (with a prompt) if a command fails, you can continue
to enter commands.
=head1 USING launch (OR run)
As with L<guestfs(3)>, you must first configure your guest by adding
disks, then launch it, then mount any disks you need, and finally
issue actions/commands. So the general order of the day is:
=over 4
=item *
add or -a/--add
=item *
launch (aka run)
=item *
mount or -m/--mount
=item *
any other commands
=back
C<run> is a synonym for C<launch>. You must C<launch> (or C<run>)
your guest before mounting or performing any other commands.
The only exception is that if any of the I<-i>, I<-m>, I<--mount>,
I<-N> or I<--new> options were given then C<run> is done
automatically, simply because guestfish can't perform the action you
asked for without doing this.
=head1 OPENING DISKS FOR READ AND WRITE
The guestfish, L<guestmount(1)> and L<virt-rescue(1)> options I<--ro>
and I<--rw> affect whether the other command line options I<-a>,
I<-c>, I<-d>, I<-i> and I<-m> open disk images read-only or for
writing.
In libguestfs E<le> 1.10, guestfish, guestmount and virt-rescue
defaulted to opening disk images supplied on the command line for
write. To open a disk image read-only you have to do I<-a image --ro>.
This matters: If you accidentally open a live VM disk image writable
then you will cause irreversible disk corruption.
In a future libguestfs we intend to change the default the other way.
Disk images will be opened read-only. You will have to either specify
I<guestfish --rw>, I<guestmount --rw>, I<virt-rescue --rw>, or change
the configuration file C</etc/libguestfs-tools.conf> in order to get
write access for disk images specified by those other command line
options.
This version of guestfish, guestmount and virt-rescue has a I<--rw>
option which does nothing (it is already the default). However it is
highly recommended that you use this option to indicate that you need
write access, and prepare your scripts for the day when this option
will be required for write access.
B<Note:> This does I<not> affect commands like L</add> and L</mount>,
or any other libguestfs program apart from guestfish and guestmount.
=head1 QUOTING
You can quote ordinary parameters using either single or double
quotes. For example:
add "file with a space.img"
rm '/file name'
rm '/"'
A few commands require a list of strings to be passed. For these, use
a whitespace-separated list, enclosed in quotes. Strings containing whitespace
to be passed through must be enclosed in single quotes. A literal single quote
must be escaped with a backslash.
vgcreate VG "/dev/sda1 /dev/sdb1"
command "/bin/echo 'foo bar'"
command "/bin/echo \'foo\'"
=head2 ESCAPE SEQUENCES IN DOUBLE QUOTED ARGUMENTS
In double-quoted arguments (only) use backslash to insert special
characters:
=over 4
=item C<\a>
Alert (bell) character.
=item C<\b>
Backspace character.
=item C<\f>
Form feed character.
=item C<\n>
Newline character.
=item C<\r>
Carriage return character.
=item C<\t>
Horizontal tab character.
=item C<\v>
Vertical tab character.
=item C<\">
A literal double quote character.
=item C<\ooo>
A character with octal value I<ooo>. There must be precisely 3 octal
digits (unlike C).
=item C<\xhh>
A character with hex value I<hh>. There must be precisely 2 hex
digits.
In the current implementation C<\000> and C<\x00> cannot be used
in strings.
=item C<\\>
A literal backslash character.
=back
=head1 OPTIONAL ARGUMENTS
Some commands take optional arguments. These arguments appear in this
documentation as C<[argname:..]>. You can use them as in these
examples:
add-drive-opts filename
add-drive-opts filename readonly:true
add-drive-opts filename format:qcow2 readonly:false
Each optional argument can appear at most once. All optional
arguments must appear after the required ones.
=head1 NUMBERS
This section applies to all commands which can take integers
as parameters.
=head2 SIZE SUFFIX
When the command takes a parameter measured in bytes, you can use one
of the following suffixes to specify kilobytes, megabytes and larger
sizes:
=over 4
=item B<k> or B<K> or B<KiB>
The size in kilobytes (multiplied by 1024).
=item B<KB>
The size in SI 1000 byte units.
=item B<M> or B<MiB>
The size in megabytes (multiplied by 1048576).
=item B<MB>
The size in SI 1000000 byte units.
=item B<G> or B<GiB>
The size in gigabytes (multiplied by 2**30).
=item B<GB>
The size in SI 10**9 byte units.
=item B<T> or B<TiB>
The size in terabytes (multiplied by 2**40).
=item B<TB>
The size in SI 10**12 byte units.
=item B<P> or B<PiB>
The size in petabytes (multiplied by 2**50).
=item B<PB>
The size in SI 10**15 byte units.
=item B<E> or B<EiB>
The size in exabytes (multiplied by 2**60).
=item B<EB>
The size in SI 10**18 byte units.
=item B<Z> or B<ZiB>
The size in zettabytes (multiplied by 2**70).
=item B<ZB>
The size in SI 10**21 byte units.
=item B<Y> or B<YiB>
The size in yottabytes (multiplied by 2**80).
=item B<YB>
The size in SI 10**24 byte units.
=back
For example:
truncate-size /file 1G
would truncate the file to 1 gigabyte.
Be careful because a few commands take sizes in kilobytes or megabytes
(eg. the parameter to L</memsize> is specified in megabytes already).
Adding a suffix will probably not do what you expect.
=head2 OCTAL AND HEXADECIMAL NUMBERS
For specifying the radix (base) use the C convention: C<0> to prefix
an octal number or C<0x> to prefix a hexadecimal number. For example:
1234 decimal number 1234
02322 octal number, equivalent to decimal 1234
0x4d2 hexadecimal number, equivalent to decimal 1234
When using the C<chmod> command, you almost always want to specify an
octal number for the mode, and you must prefix it with C<0> (unlike
the Unix L<chmod(1)> program):
chmod 0777 /public # OK
chmod 777 /public # WRONG! This is mode 777 decimal = 01411 octal.
Commands that return numbers usually print them in decimal, but
some commands print numbers in other radices (eg. C<umask> prints
the mode in octal, preceded by C<0>).
=head1 WILDCARDS AND GLOBBING
Neither guestfish nor the underlying guestfs API performs
wildcard expansion (globbing) by default. So for example the
following will not do what you expect:
rm-rf /home/*
Assuming you don't have a directory called literally C</home/*>
then the above command will return an error.
To perform wildcard expansion, use the C<glob> command.
glob rm-rf /home/*
runs C<rm-rf> on each path that matches (ie. potentially running
the command many times), equivalent to:
rm-rf /home/jim
rm-rf /home/joe
rm-rf /home/mary
C<glob> only works on simple guest paths and not on device names.
If you have several parameters, each containing a wildcard, then glob
will perform a Cartesian product.
=head1 COMMENTS
Any line which starts with a I<#> character is treated as a comment
and ignored. The I<#> can optionally be preceded by whitespace,
but B<not> by a command. For example:
# this is a comment
# this is a comment
foo # NOT a comment
Blank lines are also ignored.
=head1 RUNNING COMMANDS LOCALLY
Any line which starts with a I<!> character is treated as a command
sent to the local shell (C</bin/sh> or whatever L<system(3)> uses).
For example:
!mkdir local
tgz-out /remote local/remote-data.tar.gz
will create a directory C<local> on the host, and then export
the contents of C</remote> on the mounted filesystem to
C<local/remote-data.tar.gz>. (See C<tgz-out>).
To change the local directory, use the C<lcd> command. C<!cd> will
have no effect, due to the way that subprocesses work in Unix.
=head2 LOCAL COMMANDS WITH INLINE EXECUTION
If a line starts with I<E<lt>!> then the shell command is executed (as
for I<!>), but subsequently any output (stdout) of the shell command
is parsed and executed as guestfish commands.
Thus you can use shell script to construct arbitrary guestfish
commands which are then parsed by guestfish.
For example it is tedious to create a sequence of files
(eg. C</foo.1> through C</foo.100>) using guestfish commands
alone. However this is simple if we use a shell script to
create the guestfish commands for us:
<! for n in `seq 1 100`; do echo write /foo.$n $n; done
or with names like C</foo.001>:
<! for n in `seq 1 100`; do printf "write /foo.%03d %d\n" $n $n; done
When using guestfish interactively it can be helpful to just run the
shell script first (ie. remove the initial C<E<lt>> character so it is
just an ordinary I<!> local command), see what guestfish commands it
would run, and when you are happy with those prepend the C<E<lt>>
character to run the guestfish commands for real.
=head1 PIPES
Use C<command E<lt>spaceE<gt> | command> to pipe the output of the
first command (a guestfish command) to the second command (any host
command). For example:
cat /etc/passwd | awk -F: '$3 == 0 { print }'
(where C<cat> is the guestfish cat command, but C<awk> is the host awk
program). The above command would list all accounts in the guest
filesystem which have UID 0, ie. root accounts including backdoors.
Other examples:
hexdump /bin/ls | head
list-devices | tail -1
tgz-out / - | tar ztf -
The space before the pipe symbol is required, any space after the pipe
symbol is optional. Everything after the pipe symbol is just passed
straight to the host shell, so it can contain redirections, globs and
anything else that makes sense on the host side.
To use a literal argument which begins with a pipe symbol, you have
to quote it, eg:
echo "|"
=head1 HOME DIRECTORIES
If a parameter starts with the character C<~> then the tilde may be
expanded as a home directory path (either C<~> for the current user's
home directory, or C<~user> for another user).
Note that home directory expansion happens for users known I<on the
host>, not in the guest filesystem.
To use a literal argument which begins with a tilde, you have to quote
it, eg:
echo "~"
=head1 ENCRYPTED DISKS
Libguestfs has some support for Linux guests encrypted according to
the Linux Unified Key Setup (LUKS) standard, which includes nearly all
whole disk encryption systems used by modern Linux guests. Currently
only LVM-on-LUKS is supported.
Identify encrypted block devices and partitions using L</vfs-type>:
><fs> vfs-type /dev/sda2
crypto_LUKS
Then open those devices using L</luks-open>. This creates a
device-mapper device called C</dev/mapper/luksdev>.
><fs> luks-open /dev/sda2 luksdev
Enter key or passphrase ("key"): <enter the passphrase>
Finally you have to tell LVM to scan for volume groups on
the newly created mapper device:
vgscan
vg-activate-all true
The logical volume(s) can now be mounted in the usual way.
Before closing a LUKS device you must unmount any logical volumes on
it and deactivate the volume groups by calling C<vg-activate false VG>
on each one. Then you can close the mapper device:
vg-activate false /dev/VG
luks-close /dev/mapper/luksdev
=head1 WINDOWS PATHS
If a path is prefixed with C<win:> then you can use Windows-style
drive letters and paths (with some limitations). The following
commands are equivalent:
file /WINDOWS/system32/config/system.LOG
file win:\windows\system32\config\system.log
file WIN:C:\Windows\SYSTEM32\CONFIG\SYSTEM.LOG
The parameter is rewritten "behind the scenes" by looking up the
position where the drive is mounted, prepending that to the path,
changing all backslash characters to forward slash, then resolving the
result using L</case-sensitive-path>. For example if the E: drive
was mounted on C</e> then the parameter might be rewritten like this:
win:e:\foo\bar => /e/FOO/bar
This only works in argument positions that expect a path.
=head1 UPLOADING AND DOWNLOADING FILES
For commands such as C<upload>, C<download>, C<tar-in>, C<tar-out> and
others which upload from or download to a local file, you can use the
special filename C<-> to mean "from stdin" or "to stdout". For example:
upload - /foo
reads stdin and creates from that a file C</foo> in the disk image,
and:
tar-out /etc - | tar tf -
writes the tarball to stdout and then pipes that into the external
"tar" command (see L</PIPES>).
When using C<-> to read from stdin, the input is read up to the end of
stdin. You can also use a special "heredoc"-like syntax to read up to
some arbitrary end marker:
upload -<<END /foo
input line 1
input line 2
input line 3
END
Any string of characters can be used instead of C<END>. The end
marker must appear on a line of its own, without any preceding or
following characters (not even spaces).
Note that the C<-E<lt>E<lt>> syntax only applies to parameters used to
upload local files (so-called "FileIn" parameters in the generator).
=head1 EXIT ON ERROR BEHAVIOUR
By default, guestfish will ignore any errors when in interactive mode
(ie. taking commands from a human over a tty), and will exit on the
first error in non-interactive mode (scripts, commands given on the
command line).
If you prefix a command with a I<-> character, then that command will
not cause guestfish to exit, even if that (one) command returns an
error.
=head1 REMOTE CONTROL GUESTFISH OVER A SOCKET
Guestfish can be remote-controlled over a socket. This is useful
particularly in shell scripts where you want to make several different
changes to a filesystem, but you don't want the overhead of starting
up a guestfish process each time.
Start a guestfish server process using:
eval "`guestfish --listen`"
and then send it commands by doing:
guestfish --remote cmd [...]
To cause the server to exit, send it the exit command:
guestfish --remote exit
Note that the server will normally exit if there is an error in a
command. You can change this in the usual way. See section
L</EXIT ON ERROR BEHAVIOUR>.
=head2 CONTROLLING MULTIPLE GUESTFISH PROCESSES
The C<eval> statement sets the environment variable C<$GUESTFISH_PID>,
which is how the I<--remote> option knows where to send the commands.
You can have several guestfish listener processes running using:
eval "`guestfish --listen`"
pid1=$GUESTFISH_PID
eval "`guestfish --listen`"
pid2=$GUESTFISH_PID
...
guestfish --remote=$pid1 cmd
guestfish --remote=$pid2 cmd
=head2 REMOTE CONTROL AND CSH
When using csh-like shells (csh, tcsh etc) you have to add the
I<--csh> option:
eval "`guestfish --listen --csh`"
=head2 REMOTE CONTROL DETAILS
Remote control happens over a Unix domain socket called
C</tmp/.guestfish-$UID/socket-$PID>, where C<$UID> is the effective
user ID of the process, and C<$PID> is the process ID of the server.
Guestfish client and server versions must match exactly.
=head2 USING REMOTE CONTROL ROBUSTLY FROM SHELL SCRIPTS
From Bash, you can use the following code which creates a guestfish
instance, correctly quotes the command line, handles failure to start,
and cleans up guestfish when the script exits:
#!/bin/bash -
set -e
guestfish[0]="guestfish"
guestfish[1]="--listen"
guestfish[2]="--ro"
guestfish[3]="-a"
guestfish[4]="disk.img"
GUESTFISH_PID=
eval $("${guestfish[@]}")
if [ -z "$GUESTFISH_PID" ]; then
echo "error: guestfish didn't start up, see error messages above"
exit 1
fi
cleanup_guestfish ()
{
guestfish --remote -- exit >/dev/null 2>&1 ||:
}
trap cleanup_guestfish EXIT ERR
guestfish --remote -- run
# ...
=head2 REMOTE CONTROL RUN COMMAND HANGING
Using the C<run> (or C<launch>) command remotely in a command
substitution context hangs, ie. don't do (note the backquotes):
a=`guestfish --remote run`
Since the C<run> command produces no output on stdout, this is not
useful anyway. For further information see
L<https://bugzilla.redhat.com/show_bug.cgi?id=592910>.
=head1 PREPARED DISK IMAGES
Use the I<-N type> or I<--new type> parameter to select one of a set
of preformatted disk images that guestfish can make for you to save
typing. This is particularly useful for testing purposes. This
option is used instead of the I<-a> option, and like I<-a> can appear
multiple times (and can be mixed with I<-a>).
The new disk is called C<test1.img> for the first I<-N>, C<test2.img>
for the second and so on. Existing files in the current directory are
I<overwritten>.
The type briefly describes how the disk should be sized, partitioned,
how filesystem(s) should be created, and how content should be added.
Optionally the type can be followed by extra parameters, separated by
C<:> (colon) characters. For example, I<-N fs> creates a default
100MB, sparsely-allocated disk, containing a single partition, with
the partition formatted as ext2. I<-N fs:ext4:1G> is the same, but
for an ext4 filesystem on a 1GB disk instead.
To list the available types and any extra parameters they take, run:
guestfish -N help | less
Note that the prepared filesystem is not mounted. You would usually
have to use the C<mount /dev/sda1 /> command or add the
I<-m /dev/sda1> option.
If any I<-N> or I<--new> options are given, the guest is automatically
launched.
=head2 EXAMPLES
Create a 100MB disk with an ext4-formatted partition:
guestfish -N fs:ext4
Create a 32MB disk with a VFAT-formatted partition, and mount it:
guestfish -N fs:vfat:32M -m /dev/sda1
Create a blank 200MB disk:
guestfish -N disk:200M
=head1 PROGRESS BARS
Some (not all) long-running commands send progress notification
messages as they are running. Guestfish turns these messages into
progress bars.
When a command that supports progress bars takes longer than two
seconds to run, and if progress bars are enabled, then you will see
one appearing below the command:
><fs> copy-size /large-file /another-file 2048M
/ 10% [#####-----------------------------------------] 00:30
The spinner on the left hand side moves round once for every progress
notification received from the backend. This is a (reasonably) golden
assurance that the command is "doing something" even if the progress
bar is not moving, because the command is able to send the progress
notifications. When the bar reaches 100% and the command finishes,
the spinner disappears.
Progress bars are enabled by default when guestfish is used
interactively. You can enable them even for non-interactive modes
using I<--progress-bars>, and you can disable them completely using
I<--no-progress-bars>.
=head1 GUESTFISH COMMANDS
The commands in this section are guestfish convenience commands, in
other words, they are not part of the L<guestfs(3)> API.
=head2 help
help
help cmd
Without any parameter, this provides general help.
With a C<cmd> parameter, this displays detailed help for that command.
=head2 quit | exit
This exits guestfish. You can also use C<^D> key.
@FISH_COMMANDS@
=head1 COMMANDS
@ACTIONS@
=head1 EXIT STATUS
guestfish returns 0 if the commands completed without error, or
1 if there was an error.
=head1 ENVIRONMENT VARIABLES
=over 4
=item EDITOR
The C<edit> command uses C<$EDITOR> as the editor. If not
set, it uses C<vi>.
=item FEBOOTSTRAP_KERNEL
=item FEBOOTSTRAP_MODULES
These two environment variables allow the kernel that libguestfs uses
in the appliance to be selected. If C<$FEBOOTSTRAP_KERNEL> is not
set, then the most recent host kernel is chosen. For more information
about kernel selection, see L<febootstrap-supermin-helper(8)>. This
feature is only available in febootstrap E<ge> 3.8.
=item GUESTFISH_DISPLAY_IMAGE
The C<display> command uses C<$GUESTFISH_DISPLAY_IMAGE> to
display images. If not set, it uses L<display(1)>.
=item GUESTFISH_PID
Used with the I<--remote> option to specify the remote guestfish
process to control. See section
L</REMOTE CONTROL GUESTFISH OVER A SOCKET>.
=item HEXEDITOR
The L</hexedit> command uses C<$HEXEDITOR> as the external hex
editor. If not specified, the external L<hexedit(1)> program
is used.
=item HOME
If compiled with GNU readline support, various files in the
home directory can be used. See L</FILES>.
=item LIBGUESTFS_APPEND
Pass additional options to the guest kernel.
=item LIBGUESTFS_DEBUG
Set C<LIBGUESTFS_DEBUG=1> to enable verbose messages. This has the
same effect as using the B<-v> option.
=item LIBGUESTFS_MEMSIZE
Set the memory allocated to the qemu process, in megabytes. For
example:
LIBGUESTFS_MEMSIZE=700
=item LIBGUESTFS_PATH
Set the path that guestfish uses to search for kernel and initrd.img.
See the discussion of paths in L<guestfs(3)>.
=item LIBGUESTFS_QEMU
Set the default qemu binary that libguestfs uses. If not set, then
the qemu which was found at compile time by the configure script is
used.
=item LIBGUESTFS_TRACE
Set C<LIBGUESTFS_TRACE=1> to enable command traces.
=item PAGER
The C<more> command uses C<$PAGER> as the pager. If not
set, it uses C<more>.
=item TMPDIR
Location of temporary directory, defaults to C</tmp> except for the
cached supermin appliance which defaults to C</var/tmp>.
If libguestfs was compiled to use the supermin appliance then the
real appliance is cached in this directory, shared between all
handles belonging to the same EUID. You can use C<$TMPDIR> to
configure another directory to use in case C</var/tmp> is not large
enough.
=back
=head1 FILES
=over 4
=item $HOME/.libguestfs-tools.rc
=item /etc/libguestfs-tools.conf
This configuration file controls the default read-only or read-write
mode (I<--ro> or I<--rw>).
See L</OPENING DISKS FOR READ AND WRITE>.
=item $HOME/.guestfish
If compiled with GNU readline support, then the command history
is saved in this file.
=item $HOME/.inputrc
=item /etc/inputrc
If compiled with GNU readline support, then these files can be used to
configure readline. For further information, please see
L<readline(3)/INITIALIZATION FILE>.
To write rules which only apply to guestfish, use:
$if guestfish
...
$endif
Variables that you can set in inputrc that change the behaviour
of guestfish in useful ways include:
=over 4
=item completion-ignore-case (default: on)
By default, guestfish will ignore case when tab-completing
paths on the disk. Use:
set completion-ignore-case off
to make guestfish case sensitive.
=back
=item test1.img
=item test2.img (etc)
When using the I<-N> or I<--new> option, the prepared disk or
filesystem will be created in the file C<test1.img> in the current
directory. The second use of I<-N> will use C<test2.img> and so on.
Any existing file with the same name will be overwritten.
=back
=head1 SEE ALSO
L<guestfs(3)>,
L<http://libguestfs.org/>,
L<virt-alignment-scan(1)>,
L<virt-cat(1)>,
L<virt-copy-in(1)>,
L<virt-copy-out(1)>,
L<virt-df(1)>,
L<virt-edit(1)>,
L<virt-filesystems(1)>,
L<virt-inspector(1)>,
L<virt-list-filesystems(1)>,
L<virt-list-partitions(1)>,
L<virt-ls(1)>,
L<virt-make-fs(1)>,
L<virt-rescue(1)>,
L<virt-resize(1)>,
L<virt-sparsify(1)>,
L<virt-sysprep(1)>,
L<virt-tar(1)>,
L<virt-tar-in(1)>,
L<virt-tar-out(1)>,
L<virt-win-reg(1)>,
L<display(1)>,
L<hexedit(1)>,
L<febootstrap-supermin-helper(8)>.
=head1 AUTHORS
Richard W.M. Jones (C<rjones at redhat dot com>)
=head1 COPYRIGHT
Copyright (C) 2009-2012 Red Hat Inc.
L<http://libguestfs.org/>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|