Virtual machines can't reach internet

So, i think i broke something here, before (will list below) i made some changes to try to install windows 11 in virt-manager/qemu i was able to access the internet from my vm’s now they just don’t

What i did:
I installed ovmf-git from AUR and swtpm from extra

What i’ve done to try to resolve the issues:

  • Downgraded lib-virt from 1:8.0.0-1 to 1:7.10.0-2
  • Restarted my machine
  • Reinstalled a fresh vm
  • Attempted to roll-back ovmf from aut to manjaro’s repo version
  • Revonfigured DNS/IP Settings in the VM’s Manually
  • ran the following commands
sudo pacman -Syuu
sudo pacman -Syu
sudo iptables -I FORWARD -d 192.168.122.129 - ACCEPT
sudo systemctl restart libvirtd

nothing has worked
here is some outputs

ifconfig
docker0   Link encap:Ethernet  HWaddr 02:42:f6:7b:af:ea  
          inet addr:172.17.0.1  Bcast:172.17.255.255  Mask:255.255.0.0
          UP BROADCAST MULTICAST  MTU:1500
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eno1      Link encap:Ethernet  HWaddr e0:d5:5e:29:64:fe  
          UP BROADCAST MULTICAST  MTU:1500
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:16 Memory:ef400000-ef420000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536
          RX packets:48 errors:0 dropped:0 overruns:0 frame:0
          TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:4444 (4.3 KiB)  TX bytes:4444 (4.3 KiB)

virbr0    Link encap:Ethernet  HWaddr 52:54:00:38:34:9f  
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500
          RX packets:1851 errors:0 dropped:0 overruns:0 frame:0
          TX packets:195 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:483365 (472.0 KiB)  TX bytes:23169 (22.6 KiB)

wlp8s0    Link encap:Ethernet  HWaddr f8:34:41:a4:a2:4a  
          inet addr:10.0.0.115  Bcast:10.0.0.255  Mask:255.255.255.0
          inet6 addr: fe80::5661:12d1:94e3:bcf4/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500
          RX packets:138942 errors:0 dropped:0 overruns:0 frame:0
          TX packets:35692 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:176397640 (168.2 MiB)  TX bytes:6483405 (6.1 MiB)

iptables -L
# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
LIBVIRT_INP  all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
           all  --  anywhere             192.168.122.15      
           all  --  anywhere             shadow-z370aorusgaming5 
           all  --  anywhere             192.168.122.129     
ACCEPT     all  --  anywhere             shadow-z370aorusgaming5 
ACCEPT     all  --  anywhere             192.168.122.129     
LIBVIRT_FWX  all  --  anywhere             anywhere            
LIBVIRT_FWI  all  --  anywhere             anywhere            
LIBVIRT_FWO  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
LIBVIRT_OUT  all  --  anywhere             anywhere            

Chain LIBVIRT_FWI (1 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             192.168.122.0/24     ctstate RELATED,ESTABLISHED
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain LIBVIRT_FWO (1 references)
target     prot opt source               destination         
ACCEPT     all  --  192.168.122.0/24     anywhere            
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain LIBVIRT_FWX (1 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            

Chain LIBVIRT_INP (1 references)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere             udp dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:bootps

Chain LIBVIRT_OUT (1 references)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere             udp dpt:bootpc
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:bootpc

and

iptables -t nat -L
# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
LIBVIRT_PRT  all  --  anywhere             anywhere            

Chain LIBVIRT_PRT (1 references)
target     prot opt source               destination         
RETURN     all  --  192.168.122.0/24     base-address.mcast.net/24 
RETURN     all  --  192.168.122.0/24     255.255.255.255     
MASQUERADE  tcp  --  192.168.122.0/24    !192.168.122.0/24     masq ports: 1024-65535
MASQUERADE  udp  --  192.168.122.0/24    !192.168.122.0/24     masq ports: 1024-65535
MASQUERADE  all  --  192.168.122.0/24    !192.168.122.0/24    

Any ideas? any more info needed?

Problem Solved, Kernel was unsupported, rolling back kernel to latest LTS -Stable fixed it

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.