1060
Comment:
|
5495
|
Deletions are marked like this. | Additions are marked like this. |
Line 1: | Line 1: |
== TODO == | = TODO = |
Line 3: | Line 3: |
This is all that has no yet been done or documented | == Various Articles == |
Line 5: | Line 5: |
mailserver configure apt sources in template clone a virtual machine remove the spice/vnc option from the virsh xml firewall list disks monitoring diskspace disable saving .debs af download configure apt to remove .deb files after download /var/cache/apt/archives/ network planning hardware description vmx flag, i7, ram disks firewall keyscript should try thrice |
* https://serverfault.com/questions/122042/kvm-online-disk-resize * https://serverfault.com/questions/378086/how-to-extend-a-linux-pv-partition-online-after-virtual-disk-growth * https://eioki.eu/2013/07/02/live-resize-libvirt-disk-lvm-multipath (tested and works, no downtime on guest) * http://www.unixarena.com/2015/12/linux-kvm-how-to-addresize-virtual-disk-on-fly.html * apt-get install libguestfs-tools to get virt-resize * https://forum.proxmox.com/threads/extend-rescan-virtio-disk-in-guest-vm.7989/ * debug io trouble: sysstat package + iosat -x 2 5 http://bencane.com/2012/08/06/troubleshooting-high-io-wait-in-linux/ do a page on debugging iostat and how to solve * http://thomasmullaly.com/2014/11/16/the-list-of-os-variants-in-kvm/ * http://lists.gluster.org/pipermail/gluster-users/2015-February/020798.html * https://www.linux.com/news/carp-your-way-high-availability * https://www.server-world.info/en/note?os=Debian_9&p=mariadb&f=1 * http://galeracluster.com/documentation-webpages/sslconfig.html * http://galeracluster.com/documentation-webpages/sslcert.html * http://galeracluster.com/documentation-webpages/sslconfig.html#securing-replication-traffic * http://galeracluster.com/documentation-webpages/sslcert.html |
Line 20: | Line 21: |
Space used on vanilla Filesystem Size Used Avail Use% Mounted on /dev/mapper/vg1-root 1,9G 791M 954M 46% / /dev/md0 243M 53M 162M 25% /boot |
== misc == * IOMMU enable: https://us.informatiweb.net/tutorials/it/9-bios/215--enable-iommu-or-vt-d-in-your-motherboard-bios.html * Mailserver * Firewall * Monitoring diskspace * Network planning * Keyscript should try thrice * Create a page about manual DNSs updates and nsupdate * Spice and TLS write a ssection about spice and TLS, check this to set up the TLS certificates on kvm02 /etc/libvirt/qemu.conf * KVM guest types are in package osinfo-db * move gluster07 to dedicated hardware, so the arbiter works as expected. * Do some pages on optimizations, this is both network, diskio etc. BUT redundancy and stability comes first. * Do some pages on security, for now redundancy comes first * virsh capabilities to check what the hardware can do * debian package, debian-goodies, contains command checkrestart * spice compression protocols https://libvirt.org/formatdomain.html#elementsGraphics * describe the use of debian command "virt-host-validate" * describe installing XP, floppy, and remove floppy when cloning * https://bugzilla.redhat.com/show_bug.cgi?id=1058526 * describe installing win7, two cdroms, but set up as disks with device=cdrom instead of --cdrom option * spice protocol https://www.spice-space.org/spice-user-manual.html * spice clients https://virt-manager.org/download/ * take a look at mandos to boot from encrypted root filesystem * perhaps we should change to powerdns at some point, since it can run a master/master setup |
Line 25: | Line 46: |
mail we will configure this system with a mail server this server will later be configured to forward its mails to another mail account apt-get install postfix |
* delete all crm configuration "rm /var/lib/heartbeat/crm/cib*" * https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.cdot-famg-nfs%2FGUID-0D282583-0A6F-4556-AF94-4B08FC5ADDE8.html * https://wiki.debian.org/OpenStackCephHowto * ceph, drbd, tahoe-lafs, moosefs, sheepdog, petasan * bug in virt-clone https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947150 * https://www.dedoimedo.com/computers/kvm-bridged.html * https://www.dedoimedo.com/computers/kvm-intro.html --accelerate * syncthing on central server https://theselfhostingblog.com/posts/how-to-set-up-a-headless-syncthing-network/ * https://wiki.libvirt.org/page/Networking * https://unix.stackexchange.com/questions/148794/how-to-create-kvm-guest-with-spice-graphics-but-tls-disabled-using-virt-install * Debian does raid resync on sundays, https://serverfault.com/questions/255544/reason-for-automatic-raid-resync * https://www.techspot.com/guides/287-default-router-ip-addresses/ * https://www.youtube.com/watch?v=_yIq3GM4gjA * https://serverfault.com/questions/9708/what-is-a-pem-file-and-how-does-it-differ-from-other-openssl-generated-key-file |
Line 30: | Line 61: |
on another system apt-get install xtightvncviewer vncviewer 192.168.1.33 |
alternative bridge settings might be required {{{ # bridging eth0 as br0 auto br0 iface br0 inet dhcp # bridge specific settings #bridge_stp on #bridge_maxwait 0 #bridge_fd 0 #bridge_ports eth0 bridge_ports eth0 bridge_fd 9 bridge_hello 2 bridge_maxage 12 bridge_stp off # network settings }}} |
Line 34: | Line 79: |
apt-get install virt-viewer remote-viewer spice://kvm02:5900 |
* https://fedoraproject.org/wiki/Xfce * https://community.volumio.org/t/raspberry-pi-zero-w-and-buildin-bluetooth-chip-not-detected/7312/8 * https://www.youtube.com/watch?v=Ow5rhYTbT34 * spice client for windows systems: https://virt-manager.org/download/ * https://wiki.libvirt.org/page/VNCTLSSetup * https://libvirt.org/formatdomain.html * https://unix.stackexchange.com/questions/344756/is-there-anything-similar-to-rsync-to-syncing-block-devices |
Line 37: | Line 87: |
setup debian on that system | {{{ run that readlink on remote host first |
Line 39: | Line 90: |
kvm guest added packages net-tools vim apt sources, with src lines commented mlocate |
rsync --progress --verbose -I --copy-devices --write-devices --no-whole-file --inplace "$(readlink -f "/dev/vg_storage/kvm_saphira_vda")" kvm01:"$(readlink -f "/dev/vg_storage/kvm_saphira_vda")" }}} usage example that works {{{ #!/bin/sh DISK="/dev/vg_storage/kvm_saphira_vda" SOURCE=$(readlink -f ${DISK}) DESTINATION=$(ssh kvm01 "readlink -f ${DISK}") echo rsync --progress --verbose -I --copy-devices --write-devices --no-whole-file --inplace ${SOURCE} kvm01:${DESTINATION} rsync --progress --verbose -I --copy-devices --write-devices --no-whole-file --inplace ${SOURCE} kvm01:${DESTINATION} }}} |
TODO
Various Articles
https://serverfault.com/questions/122042/kvm-online-disk-resize
https://eioki.eu/2013/07/02/live-resize-libvirt-disk-lvm-multipath (tested and works, no downtime on guest)
http://www.unixarena.com/2015/12/linux-kvm-how-to-addresize-virtual-disk-on-fly.html
- apt-get install libguestfs-tools to get virt-resize
https://forum.proxmox.com/threads/extend-rescan-virtio-disk-in-guest-vm.7989/
debug io trouble: sysstat package + iosat -x 2 5 http://bencane.com/2012/08/06/troubleshooting-high-io-wait-in-linux/ do a page on debugging iostat and how to solve
http://thomasmullaly.com/2014/11/16/the-list-of-os-variants-in-kvm/
http://lists.gluster.org/pipermail/gluster-users/2015-February/020798.html
https://www.server-world.info/en/note?os=Debian_9&p=mariadb&f=1
http://galeracluster.com/documentation-webpages/sslconfig.html
http://galeracluster.com/documentation-webpages/sslcert.html
http://galeracluster.com/documentation-webpages/sslconfig.html#securing-replication-traffic
http://galeracluster.com/documentation-webpages/sslcert.html
misc
IOMMU enable: https://us.informatiweb.net/tutorials/it/9-bios/215--enable-iommu-or-vt-d-in-your-motherboard-bios.html
- Mailserver
- Firewall
- Monitoring diskspace
- Network planning
- Keyscript should try thrice
- Create a page about manual DNSs updates and nsupdate
- Spice and TLS write a ssection about spice and TLS, check this to set up the TLS certificates on kvm02 /etc/libvirt/qemu.conf
- KVM guest types are in package osinfo-db
- move gluster07 to dedicated hardware, so the arbiter works as expected.
- Do some pages on optimizations, this is both network, diskio etc. BUT redundancy and stability comes first.
- Do some pages on security, for now redundancy comes first
- virsh capabilities to check what the hardware can do
- debian package, debian-goodies, contains command checkrestart
spice compression protocols https://libvirt.org/formatdomain.html#elementsGraphics
- describe the use of debian command "virt-host-validate"
- describe installing XP, floppy, and remove floppy when cloning
- describe installing win7, two cdroms, but set up as disks with device=cdrom instead of --cdrom option
spice protocol https://www.spice-space.org/spice-user-manual.html
spice clients https://virt-manager.org/download/
- take a look at mandos to boot from encrypted root filesystem
- perhaps we should change to powerdns at some point, since it can run a master/master setup
- delete all crm configuration "rm /var/lib/heartbeat/crm/cib*"
- ceph, drbd, tahoe-lafs, moosefs, sheepdog, petasan
bug in virt-clone https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947150
https://www.dedoimedo.com/computers/kvm-intro.html --accelerate
syncthing on central server https://theselfhostingblog.com/posts/how-to-set-up-a-headless-syncthing-network/
Debian does raid resync on sundays, https://serverfault.com/questions/255544/reason-for-automatic-raid-resync
https://www.techspot.com/guides/287-default-router-ip-addresses/
alternative bridge settings might be required
# bridging eth0 as br0 auto br0 iface br0 inet dhcp # bridge specific settings #bridge_stp on #bridge_maxwait 0 #bridge_fd 0 #bridge_ports eth0 bridge_ports eth0 bridge_fd 9 bridge_hello 2 bridge_maxage 12 bridge_stp off # network settings
https://community.volumio.org/t/raspberry-pi-zero-w-and-buildin-bluetooth-chip-not-detected/7312/8
spice client for windows systems: https://virt-manager.org/download/
run that readlink on remote host first rsync --progress --verbose -I --copy-devices --write-devices --no-whole-file --inplace "$(readlink -f "/dev/vg_storage/kvm_saphira_vda")" kvm01:"$(readlink -f "/dev/vg_storage/kvm_saphira_vda")"
usage example that works
DISK="/dev/vg_storage/kvm_saphira_vda" SOURCE=$(readlink -f ${DISK}) DESTINATION=$(ssh kvm01 "readlink -f ${DISK}") echo rsync --progress --verbose -I --copy-devices --write-devices --no-whole-file --inplace ${SOURCE} kvm01:${DESTINATION} rsync --progress --verbose -I --copy-devices --write-devices --no-whole-file --inplace ${SOURCE} kvm01:${DESTINATION}