(nearly works now...) |
|||
| Line 68: | Line 68: | ||
etc | etc | ||
<pre> | <pre> | ||
| + | # Allow user ssh to all VMs and retain sudo rights | ||
| + | # Should probably be done periodically somehow | ||
mkdir /data/vm_overlay/home | mkdir /data/vm_overlay/home | ||
cp -ar /home /data/vm_overlay/home | cp -ar /home /data/vm_overlay/home | ||
| + | mkdir -p /data/vm_overlay/etc/sysconfig/ | ||
ln /etc/passwd /data/vm_overlay/etc/ | ln /etc/passwd /data/vm_overlay/etc/ | ||
ln /etc/shadow /data/vm_overlay/etc/ | ln /etc/shadow /data/vm_overlay/etc/ | ||
ln /etc/group /data/vm_overlay/etc/ | ln /etc/group /data/vm_overlay/etc/ | ||
ln /etc/sudoers /data/vm_overlay/etc/ | ln /etc/sudoers /data/vm_overlay/etc/ | ||
| + | # Fix for screen/bash ctrl-arrow | ||
| + | ln /etc/inputrc /data/vm_overlay/etc/ | ||
| + | # Network proxy information | ||
| + | ln /etc/sysconfig/proxy /data/vm_overlay/etc/sysconfig/ | ||
</pre> | </pre> | ||
| + | |||
| + | (note JeOS 11.2 won't allow su - <user> or ssh when user is disabled using ! | ||
| + | in /etc/shadow. Instead use an impossible hash.) | ||
== Make VMs - per VM == | == Make VMs - per VM == | ||
| Line 107: | Line 117: | ||
IP=$2 | IP=$2 | ||
mkdir /mnt/lvm | mkdir /mnt/lvm | ||
| - | mkfs -text4 /dev/$VG/${GUEST}_root | + | echo mkfs && |
| - | mount /dev/$VG/${GUEST}_root /mnt/lvm | + | mkfs -text4 /dev/$VG/${GUEST}_root && |
| - | rsync -HAXa /data/11.2min/image-root/ /mnt/lvm/ | + | echo mounting && |
| - | echo ${GUEST}.meego.com > /mnt/lvm/etc/HOSTNAME | + | mount /dev/$VG/${GUEST}_root /mnt/lvm && |
| - | echo "IPADDR='$IP/24'" >> /mnt/lvm/etc/sysconfig/network/ifcfg-eth0 | + | echo copy rootfs && |
| - | rsync -HAXa /data/vm_overlay/ /mnt/lvm/ | + | rsync -HAXa /data/11.2min/image-root/ /mnt/lvm/ && |
| + | echo copy overlay && | ||
| + | echo ${GUEST}.meego.com > /mnt/lvm/etc/HOSTNAME && | ||
| + | echo "IPADDR='$IP/24'" >> /mnt/lvm/etc/sysconfig/network/ifcfg-eth0 && | ||
| + | rsync -HAXa /data/vm_overlay/ /mnt/lvm/ && | ||
| + | echo umount && | ||
umount /mnt/lvm | umount /mnt/lvm | ||
} | } | ||
| Line 131: | Line 146: | ||
name='${GUEST}' | name='${GUEST}' | ||
disk=['phy:/dev/$VG/${GUEST}_root,xvda2,w', 'phy:/dev/$VG/${GUEST}_swap,xvda1,w'] | disk=['phy:/dev/$VG/${GUEST}_root,xvda2,w', 'phy:/dev/$VG/${GUEST}_swap,xvda1,w'] | ||
| - | vif=['mac=$MAC | + | vif=['mac=$MAC, bridge=eth0'] |
memory='2048' | memory='2048' | ||
| Line 168: | Line 183: | ||
# Accept the trust key | # Accept the trust key | ||
<pre> | <pre> | ||
| + | |||
| + | |||
| + | |||
| + | == Useful == | ||
| + | |||
| + | <pre> | ||
| + | chroot_vm() { | ||
| + | GUEST=$1 | ||
| + | xm list | grep "^$GUEST " && echo "$GUEST is running" && return | ||
| + | mkdir /mnt/${GUEST}_chroot/ | ||
| + | mount /dev/$VG/${GUEST}_root /mnt/${GUEST}_chroot/ && | ||
| + | chroot /mnt/${GUEST}_chroot/ | ||
| + | umount /mnt/${GUEST}_chroot/ | ||
| + | rmdir /mnt/${GUEST}_chroot/ | ||
| + | } | ||
| + | </pre> | ||
Starting with a minimal Suse 11.2 install
Define some base data
ROOTFS=/data/11.2min/image-root ROUTER_IP=10.0.0.1 VG=VM
Based on http://en.opensuse.org/Build_Service/KIWI/Cookbook
zypper ar http://download.opensuse.org/repositories/Virtualization:/Appliances/openSUSE_11.2/ Virtualization:Appliances zypper refresh
zypper in kiwi kiwi-templates kiwi-desc-xenboot squashfs emacs
Prepare the storage for LV usage
parted /ddev/sdb mklabel gpt mkpart p1 0 10% mkpart p2 10% 20% mkpart p3 20% 30% mkpart p4 30% 40% mkpart p5 40% 50% mkpart p6 50% 60% mkpart p7 60% 70% mkpart p8 70% 80% mkpart p9 80% 90% mkpart p10 90% 100% quit
Then make the VG
pvcreate /dev/sdb?* vgcreate $VG /dev/sdb1
Prepare an openSUSE minimal image:
mkdir -p /data/11.2min rm -rf /data/11.2min/root-image kiwi --prepare suse-11.2-JeOS --root $ROOTFS --add-profile xenFlavour --add-package less --add-package iputils --add-package kernel-xen-2.6.31.12 --add-package wget --add-package less --add-package iputils --add-package terminfo --add-package emacs
Update the config & modules:
echo default $ROUTER_IP > $ROOTFS/etc/sysconfig/network/routes echo NETCONFIG_DNS_POLICY=\"\" >> $ROOTFS/etc/sysconfig/network/config echo nameserver 8.8.8.8 > $ROOTFS/etc/resolv.conf echo default $ROUTER_IP > $ROOTFS/etc/sysconfig/network/routes cat << EOF >$ROOTFS/etc/sysconfig/network/ifcfg-eth0 BOOTPROTO='static' BROADCAST='' STARTMODE='onboot' EOF echo /dev/xvda1 swap swap defaults 0 0 >> $ROOTFS/etc/fstab
Prepare some overlay data from the main host to allow ssh into guests
etc
# Allow user ssh to all VMs and retain sudo rights # Should probably be done periodically somehow mkdir /data/vm_overlay/home cp -ar /home /data/vm_overlay/home mkdir -p /data/vm_overlay/etc/sysconfig/ ln /etc/passwd /data/vm_overlay/etc/ ln /etc/shadow /data/vm_overlay/etc/ ln /etc/group /data/vm_overlay/etc/ ln /etc/sudoers /data/vm_overlay/etc/ # Fix for screen/bash ctrl-arrow ln /etc/inputrc /data/vm_overlay/etc/ # Network proxy information ln /etc/sysconfig/proxy /data/vm_overlay/etc/sysconfig/
(note JeOS 11.2 won't allow su - <user> or ssh when user is disabled using ! in /etc/shadow. Instead use an impossible hash.)
Make sure you setup the base data environment
VG=VM FE_IP=10.0.0.10 BE_IP=10.0.0.11
Create Xen volumes
mk_lv() {
GUEST=$1
lvremove /dev/$VG/${GUEST}_*
lvcreate -L 10G $VG -n ${GUEST}_root
lvcreate -L 2G $VG -n ${GUEST}_swap
mkswap -f /dev/$VG/${GUEST}_swap
}
For cfe & cbe
mk_lv cfe mk_lv cbe
Copy the minimal image and overlay to the VM root disk and set an IP
mk_fs() {
GUEST=$1
IP=$2
mkdir /mnt/lvm
echo mkfs &&
mkfs -text4 /dev/$VG/${GUEST}_root &&
echo mounting &&
mount /dev/$VG/${GUEST}_root /mnt/lvm &&
echo copy rootfs &&
rsync -HAXa /data/11.2min/image-root/ /mnt/lvm/ &&
echo copy overlay &&
echo ${GUEST}.meego.com > /mnt/lvm/etc/HOSTNAME &&
echo "IPADDR='$IP/24'" >> /mnt/lvm/etc/sysconfig/network/ifcfg-eth0 &&
rsync -HAXa /data/vm_overlay/ /mnt/lvm/ &&
echo umount &&
umount /mnt/lvm
}
For cfe & cbe
mk_fs cfe $IP_FE mk_fs cbe $IP_BE
Make per-machine files in /etc/xen/ with unique MACs Additional LV space can be allocated here too
mk_g() {
GUEST=$1
MAC=$2
cat <<EOF > /etc/xen/$GUEST.cfg
name='${GUEST}'
disk=['phy:/dev/$VG/${GUEST}_root,xvda2,w', 'phy:/dev/$VG/${GUEST}_swap,xvda1,w']
vif=['mac=$MAC, bridge=eth0']
memory='2048'
root='/dev/xvda2 rw'
kernel='/boot/vmlinuz-2.6.31.12-0.2-xen'
ramdisk='/boot/initrd-2.6.31.12-0.2-xen'
extra='clocksource=jiffies console=hvc0 xencons=tty'
on_poweroff='destroy'
on_reboot='restart'
on_crash='restart'
EOF
}
For cfe & cbe
mk_g cfe 00:16:3E:40:B5:FE mk_g cbe 00:16:3E:40:B5:BE
Then start the VMs:
xm create /etc/xen/cfe.cfg xm create /etc/xen/cbe.cfg
On this host we need also to setup openSUSE Tools repository:
cd /etc/zypp/repos.d/;
wget http://download.opensuse.org/repositories/Maemo:/MeeGo-Infra:/OBS/Tools_Unstable_openSUSE_11.2/Maemo:MeeGo-Infra:OBS.repo
wget http://download.opensuse.org/repositories/openSUSE:/Tools:/Unstable/openSUSE_11.2/openSUSE:Tools:Unstable.repo
zypper ref
# Accept the trust key
<pre>
== Useful ==
<pre>
chroot_vm() {
GUEST=$1
xm list | grep "^$GUEST " && echo "$GUEST is running" && return
mkdir /mnt/${GUEST}_chroot/
mount /dev/$VG/${GUEST}_root /mnt/${GUEST}_chroot/ &&
chroot /mnt/${GUEST}_chroot/
umount /mnt/${GUEST}_chroot/
rmdir /mnt/${GUEST}_chroot/
}