2

使用命令建立KVM小鸡

 3 years ago
source link: https://www.taterli.com/8108/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

使用命令建立KVM小鸡

由于母鸡管理很麻烦,什么都要IPMI的话太费劲,又由于母鸡只有一个IP,一开始想过网上各种面板开小鸡,但是无奈有些要求内核版本,要求这个那个,由于只有我自己一个用户,还是选择命令方式开.

先给母鸡装系统,比如我比较偏爱Debian 10,由于用的是标准的virt工具,所以系统无所谓,选自己熟悉的就行.

装完系统就安装虚拟机管理工具.

apt install bridge-utils qemu-kvm virtinst virt-top libvirt-daemon-system libvirt-clients
adduser root libvirt

默认管理工具的VNC是不监听外网的,这样我们没法链接,所以改成外网监听.

sed -i 's/#vnc_listen = "0.0.0.0"/vnc_listen = "0.0.0.0"/g' /etc/libvirt/qemu.conf
systemctl restart libvirtd

当然还要改一下网卡配置,不然没法做桥接,由于我只有一个IP,所以我还要做NAT转发,IPv6通过隧道分配了一组,链接隧道后续备用.

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

allow-hotplug enp2s0
 iface enp2s0 inet static
  address 192.3.185.***/30
  gateway 192.3.185.***
  # dns-* options are implemented by the resolvconf package, if installed
  dns-nameservers 8.8.8.8
  dns-search colocrossing.com

auto tun0
 iface tun0 inet6 v4tunnel
  address 2001:470:1f06:***::2
  netmask 64
  endpoint 209.51.161.14
  local 192.3.185.***
  ttl 255
  gateway 2001:470:1f06:***::1

auto vmbr0
 iface vmbr0 inet static
  address 192.168.0.1
  netmask 255.255.255.0
  bridge_ports none
  bridge_stp off
  bridge_fd 0
  post-up echo 1 > /proc/sys/net/ipv4/ip_forward
  post-up iptables -t nat -A POSTROUTING -s '192.168.0.0/24' -o enp2s0 -j MASQUERADE
  post-down iptables -t nat -D POSTROUTING -s '192.168.0.0/24' -o enp2s0 -j MASQUERADE
 iface vmbr0 inet6 static
  address 2001:470:****::1/48
  netmask 48
  bridge_ports tun0
  bridge_stp off
  bridge_fd 0

配置DHCPv4 / DHCPv6 + SLAAC,需要先安装工具.

apt install isc-dhcp-server radvd

DHCP服务于V4和V6,文件是/etc/default/isc-dhcp-server.

INTERFACESv4="vmbr0"
INTERFACESv6="vmbr0"

DHCPv4就配置我自己划分的内网段,文件是/etc/dhcp/dhcpd.conf.

default-lease-time 600;
max-lease-time 7200;
ddns-update-style none;
subnet 192.168.0.0 netmask 255.255.255.0 {
        option routers 192.168.0.1;
        option subnet-mask 255.255.255.0;
        option domain-name-servers 8.8.8.8;
        range 192.168.0.2 192.168.0.100;
}

DHCPv6就配置我自己下发的前缀,文件是/etc/dhcp/dhcpd6.conf.

default-lease-time 2592000;
preferred-lifetime 604800;
option dhcp-renewal-time 3600;
option dhcp-rebinding-time 7200;
allow leasequery;
option dhcp6.info-refresh-time 21600;
subnet6 2001:470:****::/48 {
       range6 2001:470:****::2 2001:470:****:ffff:ffff:ffff:ffff:ffff;
}

对于V6,光有IP是不行的,V6也没网关概念,我用SLAAC下发其他配置,文件是/etc/radvd.conf.

interface vmbr0
{
        AdvSendAdvert on;
        MinRtrAdvInterval 30;
        MaxRtrAdvInterval 100;
        prefix 2001:470:****::/48
        {
                AdvOnLink on;
                AdvAutonomous on;
                AdvRouterAddr on;
        };
};

把刚才配置的这些服务全部设置成开机自启,然后重启服务器.

systemctl enable isc-dhcp-server
systemctl enable radvd

拉一个镜像或者直接从ISO中安装.

cd /var/lib/libvirt/boot
wget https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-10.10.0-amd64-netinst.iso

创建一个机,参数具体应该一看就懂.

virt-install \
--virt-type=kvm \
--name=debian10 \
--vcpus=1 \
--ram=2048 \
--network bridge=vmbr0,model=virtio \
--cdrom /var/lib/libvirt/boot/debian-10.10.0-amd64-netinst.iso \
--disk path=/var/lib/libvirt/images/debian10.qcow2,size=10,bus=virtio,cache=writeback,format=qcow2 \
--graphics=vnc,password=xxoo

之后可以用virsh愉快管理了,当然也可以找设置好的qcow镜像直接启动,就相当于模板一样.

尽量还是不要在母鸡上干活,毕竟权限越大责任越大危险越高.


report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK