kvm虚拟机服务器安装

1.检查主机处理器是否支持虚拟化，有输出结果为支持

[root@bogon ~]# egrep -o 'vmx | svm' /proc/cpuinfo | wc -l

96

[root@bogon ~]#

2.关闭selinux

[root@bogon ~]# vim /etc/sysconfig/selinux

[root@bogon ~]# setenforce 0

[root@bogon ~]# getenforce

Disabled

[root@bogon ~]#

3.安装常用软件

[root@bogon ~]# yum -y install  qemu-kvm libvirt libvirt-python libguestfs-tools virt-install virt-clone virt-v2v virt-manager virt-viewer

4.检查kvm模块挂载情况：

[root@bogon ~]# lsmod |grep kvm_intel

kvm_intel             183621  22

kvm                   586948  1 kvm_intel

[root@bogon ~]#

5.启动kvm并加入开机自启,查看状态

[root@bogon ~]# systemctl start libvirtd

[root@bogon ~]# systemctl enable libvirtd

[root@bogon ~]# systemctl status libvirtd

6.配置桥接网卡

[root@bogon ~]# cd /etc/sysconfig/network-scripts

[root@bogon network-scripts]# cp ifcfg-eno3 ifcfg-eno3.bak #备份网卡

[root@bogon network-scripts]# cat ifcfg-eno3

ifcfg-eno3      ifcfg-eno3.bak  

[root@bogon network-scripts]# cat ifcfg-eno3 #修改网卡

TYPE=Ethernet

#PROXY_METHOD=none

#BROWSER_ONLY=no

BOOTPROTO=static

#DEFROUTE=yes

#IPV4_FAILURE_FATAL=no

#IPV6INIT=yes

#IPV6_AUTOCONF=yes

#IPV6_DEFROUTE=yes

#IPV6_FAILURE_FATAL=no

#IPV6_ADDR_GEN_MODE=stable-privacy

NAME=eno3

#UUID=545e8ea6-e43a-44de-b5a7-4aa12ef5e831

DEVICE=eno3

ONBOOT=yes

BRIDGE=br0

[root@bogon network-scripts]# cat ifcfg-br0 #创建br0网卡

DEVICE=br0

NM_CONTROLLED=yes

ONBOOT=yes

TYPE=Bridge

IPADDR=192.168.100.132

PREFEX=24

GATEWAY=192.168.100.1

DNS1=202.106.0.20

DNS2=114.114.114.114

[root@bogon network-scripts]#  systemctl restart network ; sleep 5s ; systemctl restart libvirtd  #重启网卡和服务

[root@bogon iso]# brctl show  #查看网桥

bridge name bridge id STP enabled interfaces

br0 8000.8c2a8e48a2ad no eno3

virbr0 8000.525400436d9b yes virbr0-nic

7.创建一个存放虚拟机系统的卷

[root@bogon ]# mkdir /srv/{iso,qcow2} -pv

[root@bogon iso]# ls  #centos7.6版本

CentOS-7.6-x86_64-DVD-1810.iso

[root@bogon ]# qemu-img create -f qcow2 /srv/qcow2/Centos7.6-x86_qzx_gzt.qcow2 300G

[root@bogon ]# virt-install --name qzx_gzt1 --boot network,hd,cdrom,menu=on --ram 16384 --vcpus=4 --os-variant=rhel6 --accelerate --cdrom=/srv/iso/CentOS-7.6-x86_64-DVD-1810.iso --disk path=/srv/qcow2/Centos7.6-x86_qzx_gzt.qcow2,size=300,bus=virtio --bridge=br0,model=virtio --bridge=br0,model=virtio --autostart --vnc --vncport=5926 --vnclisten=0.0.0.0

[root@bogon ~]# virsh list --all

 Id    Name                           State

----------------------------------------------------

 4     qzx_gzt1                       running

9.扩容磁盘

qemu-img info /srv/qcow2/Centos7.6-x86_qzx_gzt.qcow2  #查看磁盘空间

virsh blockresize qzx_gzt1 /srv/qcow2/Centos7.6-x86_qzx_gzt.qcow2 500G  #扩容磁盘到500G

10.优化虚拟机

1关闭selinux

关闭防火墙

vi /etc/selinux/config

setenforce 0

systemctl stop firewalld

systemctl disable firewalld

2ssh端口

Gss认证关闭

DNS反向解析关闭

vi /etc/ssh/sshd_config

3sudo提权

/etc/sudoers

4网卡配置

vi /etc/sysconfig/network-scripts/ifcfg-eth0   #配置网卡IP时ping一下通是不能用的，不通能用。

5句柄数优化

cd /etc/security/limits.conf

echo '* - nofile 65535' >> /etc/security/limits.conf