Libvirt

DESTRUCTIVE. Define a network from raw XML or structured inputs, then start and autostart it as asked. With replace=true a differing existing network is destroyed and redefined; otherwise a differing network is left untouched and reported as drift, and an identical one is a no-op.

DESTRUCTIVE. Stop a network if active, then undefine it; use this to remove the default network. Undefining an absent network is a clean no-op.

Idempotent. Clone a golden volume or zvol in a pool to a new volume with virsh vol-clone, which uses the pool driver and so supports zfs-backed pools. A target that already exists is a no-op, never a second clone.

DESTRUCTIVE. Define a KVM domain that boots from a pool volume, usually a clone of the golden volume, from rendered XML. An existing domain is a no-op unless replace=true, which destroys and redefines it; start is optional, and the rendered XML wires a pty serial console.

DESTRUCTIVE. Start, shut down, destroy, reboot, suspend or resume a domain, idempotent toward the desired state. destroy is an immediate power-off that loses guest state, and a domain already in the target state is a no-op.

READ-ONLY. Attach to a domain's serial console under a hard timeout and store the captured text as a sensitive resource. Never blocks past timeout_s; returns the byte count and SHA-256 of the capture, never the text itself.

DESTRUCTIVE. Destroy the domain if running, then undefine it; remove_volumes also deletes the root volume recorded by define_domain (plus read-only media with remove_attached_media) after detaching every other disk, and refuses before any power-off when no recorded root is attached. Undefining an absent domain is a clean no-op.

READ-ONLY. Report network, domain and pool-volume state from virsh list/info. Writes the inventory as host_state and returns the same typed object.

READ-ONLY. Probe the host and report drift between the last recorded inventory and the live networks, domains and pool volumes.