Differences between revisions 13 and 82 (spanning 69 versions)
Revision 13 as of 2017-10-12 23:20:33
Size: 1445
Editor: shran
Comment:
Revision 82 as of 2021-12-30 18:59:33
Size: 4716
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
= Domain Console = = TODO =
Line 3: Line 3:
Once a domain is running, it is possible to connect to the domains console. This can be done using spice or vnc. Spice is preferred since it does not close the session when the KVM Guest changes screen resolution. == Various Articles ==
Line 5: Line 5:
== Spice ==
Install the client.
 * https://serverfault.com/questions/122042/kvm-online-disk-resize
 * https://serverfault.com/questions/378086/how-to-extend-a-linux-pv-partition-online-after-virtual-disk-growth
 * https://eioki.eu/2013/07/02/live-resize-libvirt-disk-lvm-multipath (tested and works, no downtime on guest)
 * http://www.unixarena.com/2015/12/linux-kvm-how-to-addresize-virtual-disk-on-fly.html
 * apt-get install libguestfs-tools to get virt-resize
 * https://forum.proxmox.com/threads/extend-rescan-virtio-disk-in-guest-vm.7989/
 * debug io trouble: sysstat package + iosat -x 2 5 http://bencane.com/2012/08/06/troubleshooting-high-io-wait-in-linux/ do a page on debugging iostat and how to solve
 * http://thomasmullaly.com/2014/11/16/the-list-of-os-variants-in-kvm/
 * http://lists.gluster.org/pipermail/gluster-users/2015-February/020798.html
 * https://www.linux.com/news/carp-your-way-high-availability
 * https://www.server-world.info/en/note?os=Debian_9&p=mariadb&f=1
 * http://galeracluster.com/documentation-webpages/sslconfig.html
 * http://galeracluster.com/documentation-webpages/sslcert.html
 * http://galeracluster.com/documentation-webpages/sslconfig.html#securing-replication-traffic
 * http://galeracluster.com/documentation-webpages/sslcert.html
Line 8: Line 21:
== misc ==
 * IOMMU enable: https://us.informatiweb.net/tutorials/it/9-bios/215--enable-iommu-or-vt-d-in-your-motherboard-bios.html
 * Mailserver
 * Firewall
 * Monitoring diskspace
 * Network planning
 * Keyscript should try thrice
 * Create a page about manual DNSs updates and nsupdate
 * Spice and TLS write a ssection about spice and TLS, check this to set up the TLS certificates on kvm02 /etc/libvirt/qemu.conf
 * KVM guest types are in package osinfo-db
 * move gluster07 to dedicated hardware, so the arbiter works as expected.
 * Do some pages on optimizations, this is both network, diskio etc. BUT redundancy and stability comes first.
 * Do some pages on security, for now redundancy comes first
 * virsh capabilities to check what the hardware can do
 * debian package, debian-goodies, contains command checkrestart
 * spice compression protocols https://libvirt.org/formatdomain.html#elementsGraphics
 * describe the use of debian command "virt-host-validate"
 * describe installing XP, floppy, and remove floppy when cloning
 * https://bugzilla.redhat.com/show_bug.cgi?id=1058526
 * describe installing win7, two cdroms, but set up as disks with device=cdrom instead of --cdrom option
 * spice protocol https://www.spice-space.org/spice-user-manual.html
 * spice clients https://virt-manager.org/download/
 * take a look at mandos to boot from encrypted root filesystem
 * perhaps we should change to powerdns at some point, since it can run a master/master setup

 * delete all crm configuration "rm /var/lib/heartbeat/crm/cib*"
 * https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.cdot-famg-nfs%2FGUID-0D282583-0A6F-4556-AF94-4B08FC5ADDE8.html
 * https://wiki.debian.org/OpenStackCephHowto
 * ceph, drbd, tahoe-lafs, moosefs, sheepdog, petasan
 * bug in virt-clone https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947150
 * https://www.dedoimedo.com/computers/kvm-bridged.html
 * https://www.dedoimedo.com/computers/kvm-intro.html --accelerate
 * syncthing on central server https://theselfhostingblog.com/posts/how-to-set-up-a-headless-syncthing-network/
 * https://wiki.libvirt.org/page/Networking
 * https://unix.stackexchange.com/questions/148794/how-to-create-kvm-guest-with-spice-graphics-but-tls-disabled-using-virt-install
 * Debian does raid resync on sundays, https://serverfault.com/questions/255544/reason-for-automatic-raid-resync
 * https://www.techspot.com/guides/287-default-router-ip-addresses/
 * https://www.youtube.com/watch?v=_yIq3GM4gjA
 * https://serverfault.com/questions/9708/what-is-a-pem-file-and-how-does-it-differ-from-other-openssl-generated-key-file

alternative bridge settings might be required
Line 9: Line 63:
# apt-get install virt-viewer # bridging eth0 as br0
auto br0
iface br0 inet dhcp
        # bridge specific settings
        #bridge_stp on
        #bridge_maxwait 0
        #bridge_fd 0
        #bridge_ports eth0
        bridge_ports eth0
        bridge_fd 9
        bridge_hello 2
        bridge_maxage 12
        bridge_stp off
        # network settings
Line 12: Line 79:
Connect to the Domain
{{{
$ remote-viewer spice://192.168.1.33:5900
}}}

== VNC ==
Install the client.

{{{
# apt-get install xtightvncviewer
}}}

Connect to the Domain
{{{
$ vncviewer 192.168.1.33
}}}

== TODO ==

This is all that has no yet been done or documented

mailserver
configure apt sources in template
remove the spice/vnc option from the virsh xml
firewall
list disks
monitoring diskspace
disable saving .debs af download
configure apt to remove .deb files after download /var/cache/apt/archives/
network planning
firewall
keyscript should try thrice

Space used on vanilla
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg1-root 1,9G 791M 954M 46% /
/dev/md0 243M 53M 162M 25% /boot

mail
we will configure this system with a mail server
this server will later be configured to forward its mails to another mail account


kvm guest added packages
net-tools
vim
apt sources, with src lines commented
mlocate

write a ssection about spice and TLS, check this to set up the TLS certificates on kvm02 /etc/libvirt/qemu.conf
 * https://fedoraproject.org/wiki/Xfce
 * https://community.volumio.org/t/raspberry-pi-zero-w-and-buildin-bluetooth-chip-not-detected/7312/8
 * https://www.youtube.com/watch?v=Ow5rhYTbT34
 * spice client for windows systems: https://virt-manager.org/download/
 * https://wiki.libvirt.org/page/VNCTLSSetup
 * https://libvirt.org/formatdomain.html

TODO

Various Articles

misc

alternative bridge settings might be required

# bridging eth0 as br0
auto br0
iface br0 inet dhcp
        # bridge specific settings
        #bridge_stp on
        #bridge_maxwait 0
        #bridge_fd 0
        #bridge_ports eth0
        bridge_ports eth0
        bridge_fd 9
        bridge_hello 2
        bridge_maxage 12
        bridge_stp off
        # network settings

None: TODO (last edited 2021-12-30 18:59:33 by Kristian Kallenberg)