Differences between revisions 3 and 45 (spanning 42 versions)
Revision 3 as of 2017-10-11 20:26:53
Size: 2019
Editor: scott
Comment:
Revision 45 as of 2018-01-20 19:35:09
Size: 1712
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
== TODO == = TODO =
Line 3: Line 3:
This is all that has no yet been done or documented == Various Articles ==
Line 5: Line 5:
mailserver
configure apt sources in template
clone a virtual machine
remove the spice/vnc option from the virsh xml
firewall
list disks
monitoring diskspace
disable saving .debs af download
configure apt to remove .deb files after download /var/cache/apt/archives/
network planning
hardware description
vmx flag, i7, ram disks
firewall
keyscript should try thrice
 * https://serverfault.com/questions/122042/kvm-online-disk-resize
 * https://serverfault.com/questions/378086/how-to-extend-a-linux-pv-partition-online-after-virtual-disk-growth
 * https://eioki.eu/2013/07/02/live-resize-libvirt-disk-lvm-multipath
 * http://www.unixarena.com/2015/12/linux-kvm-how-to-addresize-virtual-disk-on-fly.html
 * apt-get install libguestfs-tools to get virt-resize
 * https://forum.proxmox.com/threads/extend-rescan-virtio-disk-in-guest-vm.7989/
 * debug io trouble: sysstat package + iosat -x 2 5 http://bencane.com/2012/08/06/troubleshooting-high-io-wait-in-linux/ do a page on debugging iostat and how to solve
 * http://thomasmullaly.com/2014/11/16/the-list-of-os-variants-in-kvm/
 * http://lists.gluster.org/pipermail/gluster-users/2015-February/020798.html
 * https://www.linux.com/news/carp-your-way-high-availability
 * https://www.server-world.info/en/note?os=Debian_9&p=mariadb&f=1
 * http://galeracluster.com/documentation-webpages/sslconfig.html
Line 20: Line 18:
Space used on vanilla
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg1-root 1,9G 791M 954M 46% /
/dev/md0 243M 53M 162M 25% /boot
== misc ==
Line 25: Line 20:

mail
we will configure this system with a mail server
this server will later be configured to forward its mails to another mail account
apt-get install postfix


create a virtual machine


#!/bin/bash

NAME="stretch-template"
RAM="1024"
LVM_SIZE="4G"
LVM_GROUP="vg2"
OS="debian9"
MEDIA="/mnt/media/debian/stretch/debian-9.1.0-amd64-netinst.iso"

if [ $# -eq 0 ]
then
        echo "${0}: domain-name"
else
        NAME=${1}
fi
LVM_NAME="kvm_${NAME}_vda"

if [ ! -e /dev/${LVM_GROUP}/${LVM_NAME} ]
then

        # create lvm partition
        lvcreate --size ${LVM_SIZE} --name ${LVM_NAME} ${LVM_GROUP}

        # create the virtual machine
        virt-install --name ${NAME} --memory ${RAM} --disk /dev/${LVM_GROUP}/${VM_NAME},bus=virtio,format=raw --os-variant ${OS} --network bridge=br0,model=vitio --cdrom ${MEDIA} --graphics spice,listen=192.168.1.33,password=${NAME} --noutoconsole --virt-type kvm
else
        echo "${0}: refusing to overwrite existing domain";
fi


on another system
apt-get install xtightvncviewer
vncviewer 192.168.1.33

apt-get install virt-viewer
remote-viewer spice://kvm02:5900

setup debian on that system

kvm guest disk setup
vda 4G
vda1 256M /boot btrfs
vda2 4G lvm
lvm-root 2G btrfs
lvm-swap swappartition

kvm guest added packages
net-tools
vim
apt sources, with src lines commented
mlocate
 * Mailserver
 * Firewall
 * Monitoring diskspace
 * Network planning
 * Keyscript should try thrice
 * NTP servers are getting the time from themselves, thats not optimal.
 * Create a page about manual DNSs updates and nsupdate
 * Spice and TLS write a ssection about spice and TLS, check this to set up the TLS certificates on kvm02 /etc/libvirt/qemu.conf
 * KVM guest types are in package osinfo-db
 * move gluster07 to dedicated hardware, so the arbiter works as expected.
 * Do some pages on optimizations, this is both network, diskio etc. BUT redundancy and stability comes first.
 * Do some pages on security, for now redundancy comes first

TODO

Various Articles

misc

  • Mailserver
  • Firewall
  • Monitoring diskspace
  • Network planning
  • Keyscript should try thrice
  • NTP servers are getting the time from themselves, thats not optimal.
  • Create a page about manual DNSs updates and nsupdate
  • Spice and TLS write a ssection about spice and TLS, check this to set up the TLS certificates on kvm02 /etc/libvirt/qemu.conf
  • KVM guest types are in package osinfo-db
  • move gluster07 to dedicated hardware, so the arbiter works as expected.
  • Do some pages on optimizations, this is both network, diskio etc. BUT redundancy and stability comes first.
  • Do some pages on security, for now redundancy comes first

None: TODO (last edited 2024-05-14 20:31:59 by Kristian Kallenberg)