Scroll to navigation

virt-get-kernel(1) Virtualization Support virt-get-kernel(1)


virt-get-kernel - Extract kernel and ramdisk from guests


 virt-get-kernel [--options] -d domname
 virt-get-kernel [--options] -a disk.img


This program extracts the kernel and initramfs from a guest.

The format of the disk image is automatically detected unless you specify it by using the --format option.

In the case where the guest contains multiple kernels, the one with the highest version number is chosen. To extract arbitrary kernels from the disk image, see guestfish(1). To extract the entire "/boot" directory of a guest, see virt-copy-out(1).


仮想マシンからディスクイメージの file を追加します。

ディスクイメージの形式は自動的に検出されます。強制的に特定の形式を使用するには --format オプションを使用します。

Add a remote disk. The URI format is compatible with guestfish. See "ADDING REMOTE STORAGE" in guestfish(1).
This parameter sets the sector size of the disk image added with -a option and is ignored for libvirt guest added with -d option. See also "guestfs_add_drive_opts" in guestfs(3).
Use ANSI colour sequences to colourize messages. This is the default when the output is a tty. If the output of the program is redirected to a file, ANSI colour sequences are disabled unless you use this option.
libvirt を使用していると、指定された URI に接続します。 省略すると、デフォルトの libvirt ハイパーバイザーに接続します。

ゲストのブロックデバイスを直接指定していると((-a))、libvirt は何も使用されません。

名前付きの libvirt 仮想マシンからすべてのディスクを追加します。 名前の代わりに仮想マシンの UUID を使用できます。
When prompting for keys and passphrases, virt-get-kernel normally turns echoing off so you cannot see what you are typing. If you are not worried about Tempest attacks and there is no one else in the room you can specify this flag to see what you are typing.
The default for the -a option is to auto-detect the format of the disk image. Using this forces the disk format for the -a option on the command line.

仮想マシンのディスクイメージが信頼できない raw 形式である場合、 ディスク形式を指定するためにこのオプションを使用すべきです。 これにより、悪意のある仮想マシンにより起こり得る セキュリティ問題を回避できます (CVE-2010-3851)。

Specify a key for LUKS, to automatically open a LUKS device when using the inspection.
"NAME" is the libguestfs device name (eg. "/dev/sda1"). "UUID" is the device UUID. "all" means try the key against any encrypted device.

Use the specified "KEY_STRING" as passphrase.

Read the passphrase from FILENAME.
Attempt passphrase-less unlocking for the device with Clevis, over the network. Please refer to "ENCRYPTED DISKS" in guestfs(3) for more information on network-bound disk encryption (NBDE).

Note that if any such option is present on the command line, QEMU user networking will be automatically enabled for the libguestfs appliance.

Read key or passphrase parameters from stdin. The default is to try to read passphrases from the user by opening /dev/tty.

If there are multiple encrypted devices then you may need to supply multiple keys on stdin, one per line.

このオプションは、他のプログラムにより解析されるときに、よりマシンに易しい出力を作成するために使用されます。以下の "マシン可読な出力" 参照。
This option specifies the output directory where kernel and initramfs from the guest are written.

If not specified, the default output is the current directory.

This option specifies a prefix for the extracted files.

If a prefix is specified, then there will be a dash ("-") after the prefix and before the rest of the file name; for example, a kernel in the guest like "vmlinuz-3.19.0-20-generic" is saved as "mydistro-vmlinuz-3.19.0-20-generic" when the prefix is "mydistro".

See also --unversioned-names.

Don’t print ordinary progress messages.
This option affects the destination file name of extracted files.

If enabled, files will be saved locally just with the base name; for example, kernel and ramdisk in the guest like "vmlinuz-3.19.0-20-generic" and "initrd.img-3.19.0-20-generic" are saved respectively as "vmlinuz" and "initrd.img".

See also --prefix.

Wrap error, warning, and informative messages. This is the default when the output is a tty. If the output of the program is redirected to a file, wrapping is disabled unless you use this option.
libguestfs API 呼び出しのトレースを有効にします。


The --machine-readable option can be used to make the output more machine friendly, which is useful when calling virt-get-kernel from other programs, GUIs etc.

Use the option on its own to query the capabilities of the virt-get-kernel binary. Typical output looks like this:

 $ virt-get-kernel --machine-readable

A list of features is printed, one per line, and the program exits with status 0.

It is possible to specify a format string for controlling the output; see "ADVANCED MACHINE READABLE OUTPUT" in guestfs(3).


For other environment variables which affect all libguestfs programs, see "ENVIRONMENT VARIABLES" in guestfs(3).


このプログラムは、成功すると 0 を、エラーがあると 0 以外を返します。


guestfs(3), guestfish(1), guestmount(1), virt-copy-out(1), virt-drivers(1),


Richard W.M. Jones


Copyright (C) 2013-2023 Red Hat Inc.



To get a list of bugs against libguestfs, use this link:

To report a new bug against libguestfs, use this link:

When reporting a bug, please supply:

  • The version of libguestfs.
  • Where you got libguestfs (eg. which Linux distro, compiled from source, etc)
  • Describe the bug accurately and give a way to reproduce it.
  • Run libguestfs-test-tool(1) and paste the complete, unedited output into the bug report.
2024-01-04 guestfs-tools-1.52.0