Windows 11 guest not booting

isudoajl · January 22, 2023, 1:41pm

Hello,

I haven’t even been able to install Win 11, I don’t know what’s happening but as soon as I start the installation, the loading symbol immediately rotates and immediately stays stuck (like it hangs), after a long time it gives another slight movement, I’ve tried various types of configurations in virt-manager and I can’t solve this problem.

In one of the many attempts, after a very long period of time, I was able to load the windows 11 installer and install it, it was installed but I couldn’t load windows completely and it gave me an error.

My HOST:
Fedora 37
CPU: Hyper-threading 6 core
16GB RAM

My VM setup:
4 CPUs
8GB RAM

Among the steps I followed was for example select:

Firmware: UEFI x86_64: /usr/share/edk2/ovmf/OVMF_CODE.secboot.fd
Video: Virtio
TPM: Version 2.0

Any idea why this is happening?

isudoajl · January 22, 2023, 5:40pm

After installing win11, which also took a long time, I’m realizing that something isn’t right, I can’t even use win11 because it’s so slow, even though I’ve assigned 8Gb RAM and 6 CPUs.

Why?

td211 · January 23, 2023, 4:43am

Many factors may be at play here:

No 3D acceleration in guest.
Overcommited virtual CPUs.
Not using virtio drivers.

It could also be useful to post your device specs in details.

isudoajl · January 23, 2023, 8:59am

Thanks for you response.

System:
  Kernel: 6.1.6-200.fc37.x86_64 arch: x86_64 bits: 64 compiler: gcc
    v: 2.38-25.fc37 Desktop: GNOME v: 43.2 tk: GTK v: 3.24.36 wm: gnome-shell
    dm: GDM Distro: Fedora release 37 (Thirty Seven)
Machine:
  Type: Laptop System: ASUSTeK product: ROG Strix G731GU_G731GU v: 1.0
    serial: <superuser required>
  Mobo: ASUSTeK model: G731GU v: 1.0 serial: <superuser required>
    UEFI: American Megatrends v: G731GU.312 date: 02/19/2021
Battery:
  ID-1: BAT0 charge: 11.3 Wh (58.9%) condition: 19.2/66.0 Wh (29.1%)
    volts: 15.7 min: 15.7 model: ASUSTeK ASUS Battery serial: N/A
    status: not charging
  Device-1: hidpp_battery_0 model: Logitech Wireless Mouse B330/M330/M331
    serial: <filter> charge: 55% (should be ignored) status: discharging
CPU:
  Info: 6-core model: Intel Core i7-9750H bits: 64 type: MT MCP
    arch: Coffee Lake rev: A cache: L1: 384 KiB L2: 1.5 MiB L3: 12 MiB
  Speed (MHz): avg: 1104 high: 2600 min/max: 800/4500 cores: 1: 800 2: 2600
    3: 800 4: 2600 5: 848 6: 800 7: 800 8: 800 9: 800 10: 803 11: 800 12: 800
    bogomips: 62399
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx
Graphics:
  Device-1: Intel CoffeeLake-H GT2 [UHD Graphics 630] vendor: ASUSTeK
    driver: i915 v: kernel arch: Gen-9.5 ports: active: eDP-1 empty: none
    bus-ID: 00:02.0 chip-ID: 8086:3e9b
  Device-2: NVIDIA TU116M [GeForce GTX 1660 Ti Mobile] vendor: ASUSTeK
    driver: nouveau v: kernel arch: Turing pcie: speed: 8 GT/s lanes: 8 ports:
    active: none empty: DP-1,HDMI-A-1 bus-ID: 01:00.0 chip-ID: 10de:2191
    temp: 39.0 C
  Display: wayland server: X.org v: 1.20.14 with: Xwayland v: 22.1.7
    compositor: gnome-shell driver: gpu: i915 display-ID: 0
  Monitor-1: eDP-1 model: AU Optronics 0x409d res: 1920x1080 dpi: 128
    diag: 438mm (17.3")
  API: OpenGL v: 4.6 Mesa 22.3.3 renderer: Mesa Intel UHD Graphics 630 (CFL
    GT2) direct render: Yes
Audio:
  Device-1: Intel Cannon Lake PCH cAVS vendor: ASUSTeK driver: snd_hda_intel
    v: kernel bus-ID: 00:1f.3 chip-ID: 8086:a348
  Device-2: NVIDIA TU116 High Definition Audio vendor: ASUSTeK
    driver: snd_hda_intel v: kernel pcie: speed: 8 GT/s lanes: 8 bus-ID: 01:00.1
    chip-ID: 10de:1aeb
  Sound API: ALSA v: k6.1.6-200.fc37.x86_64 running: yes
  Sound Server-1: PulseAudio v: 16.1 running: no
  Sound Server-2: PipeWire v: 0.3.64 running: yes
Network:
  Device-1: Intel Cannon Lake PCH CNVi WiFi driver: iwlwifi v: kernel
    bus-ID: 00:14.3 chip-ID: 8086:a370
  IF: wlo1 state: up mac: <filter>
  Device-2: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet
    vendor: ASUSTeK driver: r8169 v: kernel pcie: speed: 2.5 GT/s lanes: 1
    port: 3000 bus-ID: 03:00.0 chip-ID: 10ec:8168
  IF: eno2 state: down mac: <filter>
  IF-ID-1: virbr0 state: up speed: 10 Mbps duplex: unknown mac: <filter>
  IF-ID-2: vnet1 state: unknown speed: 10 Mbps duplex: full mac: <filter>
Bluetooth:
  Device-1: Intel Bluetooth 9460/9560 Jefferson Peak (JfP) type: USB
    driver: btusb v: 0.8 bus-ID: 1-14:4 chip-ID: 8087:0aaa
  Report: rfkill ID: hci0 rfk-id: 1 state: up address: see --recommends
Drives:
  Local Storage: total: 1.14 TiB used: 524.13 GiB (44.8%)
  ID-1: /dev/nvme0n1 vendor: Western Digital model: PC SN520
    SDAPNUW-256G-1002 size: 238.47 GiB speed: 15.8 Gb/s lanes: 2
    serial: <filter> temp: 28.9 C
  ID-2: /dev/sda vendor: Seagate model: ST1000LX015-1U7172 size: 931.51 GiB
    speed: 6.0 Gb/s serial: <filter> temp: 24 C
Partition:
  ID-1: / size: 69.65 GiB used: 22.99 GiB (33.0%) fs: btrfs
    dev: /dev/nvme0n1p8
  ID-2: /boot size: 973.4 MiB used: 276.5 MiB (28.4%) fs: ext4
    dev: /dev/nvme0n1p7
  ID-3: /boot/efi size: 96 MiB used: 43.2 MiB (45.0%) fs: vfat
    dev: /dev/nvme0n1p1
  ID-4: /home size: 69.65 GiB used: 22.99 GiB (33.0%) fs: btrfs
    dev: /dev/nvme0n1p8
Swap:
  ID-1: swap-1 type: zram size: 8 GiB used: 2.43 GiB (30.4%) priority: 100
    dev: /dev/zram0
Sensors:
  System Temperatures: cpu: 55.0 C pch: 46.0 C mobo: N/A gpu: nouveau
    temp: 40.0 C
  Fan Speeds (RPM): cpu: 2800 gpu: nouveau fan: 0
Info:
  Processes: 441 Uptime: 9h 57m Memory: 15.47 GiB used: 12 GiB (77.5%)
  Init: systemd v: 251 target: graphical (5) default: graphical Compilers:
  gcc: 12.2.1 Packages: pm: rpm pkgs: N/A note: see --rpm pm: flatpak pkgs: 44
  Shell: Bash v: 5.2.15 running-in: gnome-terminal inxi: 3.3.24

My host has always been at 37% free ram and my CPU has pretty much idled while I’m running the VM.

I would greatly appreciate it if you could explain to me which is the most efficient configuration.
Does Virtio also apply to my linux distros VMs?

isudoajl · January 23, 2023, 10:18am

When the loading animation appears, it makes a small movement and then it stays there as in the photo (it may make another short movement) and there it stays and the fan cooler starts to activate my laptop.

Vm setup for this win11 installation:

CPUs: 4
Memory: 8GB
VrtiIO Disk1
NIC: virtio
Display Spice
Display VNC (according to a video i saw)
Video QXL
TPM v2.0: CRB Model

This is what journalctl show when start libvirtd service:

Jan 23 10:26:09 rog polkitd[1115]: Unregistered Authentication Agent for unix-process:53268:4205801 (system bus name :1.423, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C)
Jan 23 10:27:13 rog audit[53384]: USER_ACCT pid=53384 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="isudoajl" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Jan 23 10:27:13 rog audit[53384]: USER_CMD pid=53384 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/isudoajl" cmd=73797374656D63746C207374617274206C69627669727464 exe="/usr/bin/sudo" terminal=pts/1 res=success'
Jan 23 10:27:13 rog sudo[53384]: isudoajl : TTY=pts/1 ; PWD=/home/isudoajl ; USER=root ; COMMAND=/usr/bin/systemctl start libvirtd
Jan 23 10:27:13 rog audit[53384]: CRED_REFR pid=53384 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_fprintd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Jan 23 10:27:13 rog sudo[53384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Jan 23 10:27:13 rog audit[53384]: USER_START pid=53384 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Jan 23 10:27:13 rog systemd[1]: Starting libvirtd.service - Virtualization daemon...
Jan 23 10:27:13 rog systemd[1]: Stopping virtnetworkd.service - Virtualization network daemon...
Jan 23 10:27:13 rog systemd[1]: Stopping virtnodedevd.service - Virtualization nodedev daemon...
Jan 23 10:27:13 rog systemd[1]: Stopping virtqemud.service - Virtualization qemu daemon...
Jan 23 10:27:13 rog systemd[1]: Stopping virtstoraged.service - Virtualization storage daemon...
Jan 23 10:27:13 rog virtqemud[52874]: Cannot recv data: Connection reset by peer
Jan 23 10:27:13 rog virtqemud[52874]: unexpected network event deregister failure
Jan 23 10:27:13 rog virtqemud[52874]: Cannot write data: Broken pipe
Jan 23 10:27:13 rog virtqemud[52874]: unexpected storage event deregister failure
Jan 23 10:27:13 rog virtqemud[52874]: internal error: client socket is closed
Jan 23 10:27:13 rog virtqemud[52874]: unexpected storage event deregister failure
Jan 23 10:27:13 rog virtqemud[52874]: Cannot write data: Broken pipe
Jan 23 10:27:13 rog virtqemud[52874]: unexpected node device event deregister failure
Jan 23 10:27:13 rog virtqemud[52874]: internal error: client socket is closed
Jan 23 10:27:13 rog virtqemud[52874]: unexpected node device event deregister failure
Jan 23 10:27:13 rog systemd[1]: virtnetworkd.service: Deactivated successfully.
Jan 23 10:27:13 rog systemd[1]: virtnetworkd.service: Unit process 3627 (dnsmasq) remains running after unit stopped.
Jan 23 10:27:13 rog systemd[1]: virtnetworkd.service: Unit process 3628 (dnsmasq) remains running after unit stopped.
Jan 23 10:27:13 rog systemd[1]: Stopped virtnetworkd.service - Virtualization network daemon.
Jan 23 10:27:13 rog audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtnetworkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 23 10:27:13 rog systemd[1]: virtqemud.service: Deactivated successfully.
Jan 23 10:27:13 rog systemd[1]: Stopped virtqemud.service - Virtualization qemu daemon.
Jan 23 10:27:13 rog audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtqemud comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 23 10:27:13 rog systemd[1]: virtstoraged.service: Deactivated successfully.
Jan 23 10:27:13 rog systemd[1]: Stopped virtstoraged.service - Virtualization storage daemon.
Jan 23 10:27:13 rog audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtstoraged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 23 10:27:13 rog systemd[1]: virtnodedevd.service: Deactivated successfully.
Jan 23 10:27:13 rog systemd[1]: Stopped virtnodedevd.service - Virtualization nodedev daemon.
Jan 23 10:27:13 rog audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtnodedevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 23 10:27:13 rog libvirtd[53387]: libvirt version: 8.6.0, package: 5.fc37 (Fedora Project, 2022-11-20-18:43:33, )
Jan 23 10:27:13 rog libvirtd[53387]: hostname: rog
Jan 23 10:27:13 rog libvirtd[53387]: Libvirt doesn't support VirtualBox API version 7000004
Jan 23 10:27:13 rog systemd[1]: Started libvirtd.service - Virtualization daemon.
Jan 23 10:27:13 rog audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=libvirtd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 23 10:27:13 rog sudo[53384]: pam_unix(sudo:session): session closed for user root
Jan 23 10:27:13 rog audit[53384]: USER_END pid=53384 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Jan 23 10:27:13 rog audit[53384]: CRED_DISP pid=53384 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_fprintd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Jan 23 10:27:13 rog audit[53425]: NETFILTER_CFG table=mangle:321 family=2 entries=1 op=nft_unregister_rule pid=53425 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53426]: NETFILTER_CFG table=nat:322 family=2 entries=1 op=nft_unregister_rule pid=53426 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53427]: NETFILTER_CFG table=nat:323 family=2 entries=1 op=nft_unregister_rule pid=53427 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53428]: NETFILTER_CFG table=nat:324 family=2 entries=1 op=nft_unregister_rule pid=53428 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53429]: NETFILTER_CFG table=nat:325 family=2 entries=1 op=nft_unregister_rule pid=53429 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53430]: NETFILTER_CFG table=nat:326 family=2 entries=1 op=nft_unregister_rule pid=53430 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53431]: NETFILTER_CFG table=filter:327 family=2 entries=1 op=nft_unregister_rule pid=53431 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53432]: NETFILTER_CFG table=filter:328 family=2 entries=1 op=nft_unregister_rule pid=53432 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53433]: NETFILTER_CFG table=filter:329 family=2 entries=1 op=nft_unregister_rule pid=53433 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53434]: NETFILTER_CFG table=filter:330 family=2 entries=1 op=nft_unregister_rule pid=53434 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53435]: NETFILTER_CFG table=filter:331 family=2 entries=1 op=nft_unregister_rule pid=53435 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53436]: NETFILTER_CFG table=filter:332 family=2 entries=1 op=nft_unregister_rule pid=53436 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53437]: NETFILTER_CFG table=filter:333 family=2 entries=1 op=nft_unregister_rule pid=53437 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53439]: NETFILTER_CFG table=filter:334 family=2 entries=1 op=nft_unregister_rule pid=53439 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53440]: NETFILTER_CFG table=filter:335 family=2 entries=1 op=nft_unregister_rule pid=53440 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:13 rog audit[53441]: NETFILTER_CFG table=filter:336 family=2 entries=1 op=nft_unregister_rule pid=53441 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53442]: NETFILTER_CFG table=filter:337 family=2 entries=1 op=nft_unregister_rule pid=53442 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53443]: NETFILTER_CFG table=filter:338 family=2 entries=1 op=nft_unregister_rule pid=53443 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53444]: NETFILTER_CFG table=filter:339 family=2 entries=1 op=nft_unregister_rule pid=53444 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53445]: NETFILTER_CFG table=filter:340 family=2 entries=1 op=nft_register_rule pid=53445 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53446]: NETFILTER_CFG table=filter:341 family=2 entries=1 op=nft_register_rule pid=53446 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53447]: NETFILTER_CFG table=filter:342 family=2 entries=1 op=nft_register_rule pid=53447 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53448]: NETFILTER_CFG table=filter:343 family=2 entries=1 op=nft_register_rule pid=53448 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53449]: NETFILTER_CFG table=filter:344 family=2 entries=1 op=nft_register_rule pid=53449 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53450]: NETFILTER_CFG table=filter:345 family=2 entries=1 op=nft_register_rule pid=53450 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53451]: NETFILTER_CFG table=filter:346 family=2 entries=1 op=nft_register_rule pid=53451 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53452]: NETFILTER_CFG table=filter:347 family=2 entries=1 op=nft_register_rule pid=53452 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53453]: NETFILTER_CFG table=filter:348 family=2 entries=1 op=nft_register_rule pid=53453 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53454]: NETFILTER_CFG table=filter:349 family=2 entries=1 op=nft_register_rule pid=53454 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53455]: NETFILTER_CFG table=filter:350 family=2 entries=1 op=nft_register_rule pid=53455 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53456]: NETFILTER_CFG table=filter:351 family=2 entries=1 op=nft_register_rule pid=53456 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53457]: NETFILTER_CFG table=filter:352 family=2 entries=1 op=nft_register_rule pid=53457 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53458]: NETFILTER_CFG table=nat:353 family=2 entries=1 op=nft_register_rule pid=53458 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53459]: NETFILTER_CFG table=nat:354 family=2 entries=1 op=nft_register_rule pid=53459 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53460]: NETFILTER_CFG table=nat:355 family=2 entries=1 op=nft_register_rule pid=53460 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53461]: NETFILTER_CFG table=nat:356 family=2 entries=1 op=nft_register_rule pid=53461 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53462]: NETFILTER_CFG table=nat:357 family=2 entries=1 op=nft_register_rule pid=53462 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog audit[53463]: NETFILTER_CFG table=mangle:358 family=2 entries=1 op=nft_register_rule pid=53463 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
Jan 23 10:27:14 rog dnsmasq[3627]: read /etc/hosts - 8 names
Jan 23 10:27:14 rog dnsmasq[3627]: read /var/lib/libvirt/dnsmasq/default.addnhosts - 0 names
Jan 23 10:27:14 rog dnsmasq-dhcp[3627]: read /var/lib/libvirt/dnsmasq/default.hostsfile

rmyorston · January 23, 2023, 11:19am

This sounds like a known problem with KVM in the 6.1 kernel.

It was discussed on the KVM list here.

I’m not aware of a solution yet. You could try booting your host with a 6.0 kernel. That isn’t affected. (By this issue, there are other, different ones.)

computersavvy · January 23, 2023, 12:14pm

You have exactly the same physical hardware I have.
I note that you have not installed the nvidia drivers from rpmfusion and are relying on the nouveau driver for the dGPU, as well as using wayland.

One disadvantage that yields is that you have no hardware acceleration for the GPU and that you cannot use the dGPU for display on the laptop screen easily.

I just installed win11 in a VM on my system to see if mine does the same, but I do have the nvidia drivers installed, and am using the nvidia as primary on my laptop.

The install and full setup took about half an hour. I shutdown and restarted the system several times and have so far seen no issues with booting or hangs.

Another note: I always use bridged networking and attach to the default virbr0 device that libvirtd creates when it is launched. It seems you must be using NAT from the info above. That should not be an issue but just a note that does affect connecting between the VM guest, the host, and other machines.

As noted above I have the nvidia drivers installed from rpmfusion, I have secure boot enabled with the drivers signed as instructed by the file /usr/share/doc/akmods/README.secureboot and at
https://rpmfusion.org/Howto/Secure%20Boot?highlight=(\bCategoryHowto\b)
To sign the drivers you must first install the akmods package and create the key as shown before installing the drivers from rpmfusion.

I also have the nvidia dGPU configured as primary as shown here. I added the option into both stanzas of the nvidia.conf file and am using only xorg (not wayland) for the display.

EDIT: I also have tried it with both the 6.1.6 and the 6.1.7 kernels.

isudoajl · January 23, 2023, 2:40pm

Yes Jeff, we have the same laptop .

I just installed the nvidia drivers and configured the secure boot, how can I make the MOK prompt appear again when I reboot the system? I got out because I didn’t know what to do but I already saw what I should select, now when I restart it doesn’t come out anymore.

In mokutils --help I see many options but I am not sure which one to use so that the MOK prompt comes out again when restarting.

computersavvy · January 23, 2023, 2:44pm

The MOK prompt (BIOS screen) only appears once on the first boot after running the mokutil --import <key path> command. If you did not complete the import of the key then you will need to repeat the mokutil import command in fedora then reboot again to activate it. If you did complete the import of the key then the screen is not needed again.

Don’t feel bad. I messed up the import the first time I created a key myself. It happens to the best of us as we are learning to use the tools.

The good thing is that if you ran the keygenca command successfully before installing the nvidia driver then the module should be already signed and once the key is imported into the bios the modules should be able to load.

I suggest that you install the nvidia drivers and the cuda driver.
Both can be installed at the same time with dnf install akmod-nvidia xorg-x11-drv-nvidia-cuda

td211 · January 23, 2023, 2:50pm

You use 2 displays? I use only Spice.
If you are interested you can passthrough your GPU to the windows guest, it would get near native performance.

computersavvy · January 23, 2023, 3:06pm

That could work, but likely would only be needed if running games on the windows VM. Otherwise the virtual GPU screen would be plenty.

isudoajl · January 23, 2023, 3:46pm

Unfortunately I didn’t do it in that order , by the way, I disabled secure boot from UEFI to load nvidia drivers just to test and the Win VM installation with virt-manager no longer stays frozen, it immediately enters the windows installer ( ).

sudo mokutil --import /etc/pki/akmods/certs/public_key.der
SKIP: /etc/pki/akmods/certs/public_key.der is already enrolled

I just did it.

td211 · January 23, 2023, 3:53pm

How is the key enrolled but secure boot isn’t working?

Anyways try deleting it then importing it again:
sudo mokutil --delete /etc/pki/akmods/certs/public_key.der
Reboot then import it again.

Yeah but the 2D QXL driver isn’t exactly smooth (in my experience) and virgl doesn’t support windows.

isudoajl · January 23, 2023, 4:08pm

I saw it in a video, it also seemed strange to me but I was trying one thing and another and nothing resolved. But following the recommendations of @computersavvy the problem was:

isudoajl · January 23, 2023, 4:15pm

Thanks. work!

td211 · January 23, 2023, 4:16pm

I think @computersavvy meant the lack of the nvidia driver on your host, not related to pci passthrough I mentioned. Anyways if you don’t need it don’t use it.

computersavvy · January 23, 2023, 4:42pm

That tells me the driver was installed before the key was generated, so the modules are likely not signed. It is though a fairly simple fix.
sudo dnf remove '*nvidia*' --exclude=nvidia-gpu-firmware
then after the removal is done reinstall the drivers.
sudo dnf install akmod-nvidia xorg-x11-drv-nvidia-cuda
wait about 5 minutes for the new modules to be built and signed then reboot. During the reboot you should be able to enable secure boot again and the modules should now work with secure boot enabled.

computersavvy · January 23, 2023, 4:50pm

I used this when I installed win11 on the vm and it worked with no lag or delays that I saw

The host is F37, 6.1.7, nvidia 525.78.01, using libvirt/QEMU/VMM and win11 on the VM.

isudoajl · January 23, 2023, 4:57pm

I did this, rebooted and everything worked perfectly.

Thank you for helping me to solve the problem, I did several tests just to see how fast windows loads the installer and it is fast.

If it’s not too much abuse on my part to take more time with this case, I would like you to clarify what is the most efficient configuration for my VM’s, this is the idea I have:

Linux Distros:
I have seen that here there is not much configuration to do in virt-manager.

Windows 10:
Here I have seen that it is recommended to use virtio

Windows 11:
The same as windows 10 added to that configure TPM

Is it recommendable to use virtio for Linux Distros?
If it is or not, I would like to know why?

Thanks!

computersavvy · January 23, 2023, 5:27pm

It seems one may use either virtio or qxl for windows (virtio only in 2d mode). I tried both.

I have one Fedora 37 and one Rawhide VM both with virtio (2d) and another Ubuntu 22.04 LTS with QXL. I don’t really note any difference in using either for the linux distros I have tried. In fact I just switched the rawhide VM to QXL and it seems exactly the same as with virtio. I think it may be personal choice.