Ubuntu 12.04 安装KVM

5. 安装配置KVM虚拟化Host主机

首先增加源配置：deb http://cloudstack.apt-get.eu/ubuntu precise 4.3

5.1 安装配置Agent
$ sudo apt-get install cloud-agent

5.2 安装配置libvirt
$ sudo vim /etc/libvirt/libvirtd.conf
修改以下配置

view source

print ?

1	listen_tls = 0

2	listen_tcp = 1

3	tcp_port = "16059"

4	auth_tcp = "none"

5	mdns_adv = 0

查看配置
$ cat /etc/libvirt/libvirtd.conf | grep -v '#' | grep -v "^$"

view source

print ?

1	listen_tls = 0

2	listen_tcp = 1

3	tcp_port = "16509"

4	mdns_adv = 0

5	unix_sock_group = "libvirtd"

6	unix_sock_rw_perms = "0770"

7	auth_unix_ro = "none"

8	auth_unix_rw = "none"

9	auth_tcp = "none"

$ sudo vim /etc/init/libvirt-bin.conf
修改以下参数

view source

print ?

1	env libvirtd_opts="-d -l"

# sudo vim /etc/libvirt/qemu.conf
修改以下参数

view source

print ?

1	vnc_listen = "0.0.0.0"

重启服务
$ sudo service libvirt-bin restart

5.3 配置安全策略
$ sudo dpkg --list "apparmor"

view source

print ?

1	Desired=Unknown/Install/Remove/Purge/Hold

2	| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend

3	|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)

4	||/ Name                                Version                             Description

5	+++-===================================-===================================-======================================================================================

6	ii  apparmor

7	2.7.102-0ubuntu3.1                  User-space parser utilityfor AppArmor

$ sudo ln -s /etc/apparmor.d/usr.sbin.libvirtd /etc/apparmor.d/disable/
$ sudo ln -s /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper /etc/apparmor.d/disable/
$ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.libvirtd
$ sudo apparmor_parser -R /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper

5.4 配置网桥
需要注意的是，官方文档给出的配置参数会导致网络不可用。
正确的配置是将物理网卡设置为manual，然后在虚拟网卡上设置IP并桥接到物理网卡上。
$ sudo vim /etc/network/interfaces

view source

print ?

01	# This file describes the network interfaces available on your system

02	# and how to activate them. For more information, see interfaces(5).

03

04	# The loopback network interface

05

auto lo

06	iface lo inet loopback

07

08	# The primary network interface

09

auto eth0

10	iface eth0 inet manual

11

12	# Public network

13	auto cloudbr0

14	iface cloudbr0 inet static

15	address 10.6.203.10

16	netmask 255.255.0.0

17	gateway 10.6.255.1

18	bridge_ports eth0

19	bridge_fd 5

20	bridge_stp off

21	bridge_maxwait 1

22	dns-nameservers 10.6.255.253 61.139.2.69

23

24	# Private network

25	auto cloudbr1

26	iface cloudbr1 inet manual

27	bridge_ports eth0

28	bridge_fd 5

29	bridge_stp off

30	bridge_maxwait 1

$ sudo /etc/init.d/networking restart
$ sudo /etc/init.d/networking start

5.5 配置防火墙
$ sudo ufw allow proto tcp from any to any port 22
$ sudo ufw allow proto tcp from any to any port 80
$ sudo ufw allow proto tcp from any to any port 1798
$ sudo ufw allow proto tcp from any to any port 16509
$ sudo ufw allow proto tcp from any to any port 5900:6100
$ sudo ufw allow proto tcp from any to any port 49152:49216