Consoles, graphics, and the QEMU guest agent

Serial consoles, graphical consoles, and the guest agent solve different problems. Configure at least one recovery path that does not depend on guest networking.

Serial console

virsh console guest01
virsh ttyconsole guest01

The guest kernel and init system must also expose a serial terminal, commonly ttyS0.

Graphics endpoint

virsh domdisplay guest01
virsh vncdisplay guest01

Bind graphical listeners conservatively. A wildcard VNC listener without transport protection exposes a sensitive console boundary.

Guest agent evidence

virsh qemu-agent-command guest01 '{"execute":"guest-ping"}'
virsh domifaddr guest01 --source agent
virsh domfsinfo guest01

The agent enables better shutdown, address discovery, filesystem quiescing, and introspection. It does not replace host-side monitoring.