https://coolscript.net/api.php?action=feedcontributions&feedformat=atom&user=Admin
Coolscript - User contributions [en]
2026-06-02T15:03:32Z
User contributions
MediaWiki 1.40.1
https://coolscript.net/index.php?title=Ollama_Modelfile_List&diff=1151
Ollama Modelfile List
2026-05-28T11:31:59Z
<p>Admin: </p>
<hr />
<div>'''This is a local Ollama installation running on a powerful local GPU.'''<br />
<br />
__NOTOC__<br />
This page serves as a comprehensive technical registry and capabilities guide for the locally installed Ollama Large Language Models (LLMs). It outlines their core architecture, performance profiles, memory usage, and safety alignment status.<br />
<br />
== Local Hardware Performance Overview ==<br />
The following estimates assume full GPU offloading utilizing a high-end local GPU layout. Splitting models onto system RAM will heavily degrade these numbers.<br />
<br />
{| class="wikibase" style="width:100%; border:1px solid #ccc; border-collapse:collapse; text-align:left;"<br />
! Scope / Scale<br />
! Parameter Range<br />
! Avg. VRAM Footprint<br />
! Speed (Tokens/sec)<br />
! Context Latency (TTFT)<br />
|-<br />
| '''High-Capability'''<br />
| 20B – 31B<br />
| 16 GB – 24 GB<br />
| 20 – 35 tok/s<br />
| Moderate (~1.5s - 3.0s)<br />
|-<br />
| '''Mid-Range / Specialist'''<br />
| 8B – 16B<br />
| 6 GB – 14 GB<br />
| 40 – 65 tok/s<br />
| Low (~0.8s - 1.5s)<br />
|-<br />
| '''Low-Resource / Edge'''<br />
| 1B – 7B<br />
| 2 GB – 6 GB<br />
| 70 – 120+ tok/s<br />
| Near-Instant (<0.5s)<br />
|}<br />
<br />
---<br />
<br />
== Capability Comparison Matrix ==<br />
Ratings are practical local-workflow estimates on a 1-5 scale (5 = strongest). Speech and Image scores reflect end-to-end usefulness when paired with local ASR/TTS or VLM pipelines.<br />
<br />
{| class="wikibase" style="width:100%; border:1px solid #ccc; border-collapse:collapse; text-align:left;"<br />
! Model<br />
! Text<br />
! Speech<br />
! Python<br />
! Image<br />
! Speed<br />
! Notes<br />
|-<br />
| gemma-4-31b-uncensored<br />
| 5<br />
| 2<br />
| 4<br />
| 1<br />
| 2<br />
| Top-tier long-form reasoning and writing depth.<br />
|-<br />
| qwen3-coder:30b<br />
| 4<br />
| 1<br />
| 5<br />
| 1<br />
| 2<br />
| Best overall local coding model for complex repos.<br />
|-<br />
| qwen3.6:27b<br />
| 5<br />
| 2<br />
| 4<br />
| 1<br />
| 3<br />
| Strong generalist for reasoning and multilingual tasks.<br />
|-<br />
| gemma4:26b<br />
| 5<br />
| 2<br />
| 4<br />
| 3<br />
| 3<br />
| High-quality aligned model; useful in multimodal stacks.<br />
|-<br />
| gpt-oss:20b<br />
| 4<br />
| 2<br />
| 4<br />
| 1<br />
| 3<br />
| Fast all-purpose assistant behavior.<br />
|-<br />
| hf.co/mradermacher/Mistral-Nemo-Instruct-2407-abliterated-i1-GGUF:Q5_K_M<br />
| 4<br />
| 1<br />
| 3<br />
| 1<br />
| 4<br />
| Fast and permissive instruction-following.<br />
|-<br />
| hf.co/MaziyarPanahi/Mistral-Nemo-Instruct-2407-GGUF:Q5_K_M<br />
| 4<br />
| 2<br />
| 3<br />
| 1<br />
| 4<br />
| Stable, predictable 12B instruction model.<br />
|-<br />
| MFDoom/deepseek-coder-v2-tool-calling:16b<br />
| 3<br />
| 1<br />
| 5<br />
| 1<br />
| 4<br />
| Great for agent/tool-call workflows.<br />
|-<br />
| deepseek-coder-v2:16b<br />
| 3<br />
| 1<br />
| 5<br />
| 1<br />
| 4<br />
| Excellent raw coding throughput.<br />
|-<br />
| qwen3:14b<br />
| 4<br />
| 2<br />
| 4<br />
| 1<br />
| 4<br />
| Balanced mid-size general model.<br />
|-<br />
| qwen2.5:14b<br />
| 4<br />
| 2<br />
| 4<br />
| 1<br />
| 4<br />
| Reliable instruction quality with strong consistency.<br />
|-<br />
| mistral-nemo:12b<br />
| 4<br />
| 2<br />
| 3<br />
| 1<br />
| 4<br />
| Strong multilingual and summarization performance.<br />
|-<br />
| qwen2.5-coder:14b<br />
| 3<br />
| 1<br />
| 5<br />
| 1<br />
| 4<br />
| Mature coding model with high syntax reliability.<br />
|-<br />
| gemma3:12b<br />
| 4<br />
| 2<br />
| 3<br />
| 1<br />
| 4<br />
| Efficient everyday productivity model.<br />
|-<br />
| gemma4:e4b<br />
| 4<br />
| 2<br />
| 3<br />
| 3<br />
| 4<br />
| Lightweight Gemma 4 variant with multimodal utility.<br />
|-<br />
| gemma2:9b<br />
| 4<br />
| 2<br />
| 3<br />
| 1<br />
| 4<br />
| Fast, low-overhead generalist. Fast grammar check<br />
|-<br />
| hf.co/NousResearch/Hermes-3-Llama-3.1-8B-GGUF:Q5_K_M<br />
| 4<br />
| 2<br />
| 3<br />
| 1<br />
| 4<br />
| Creative and permissive conversational behavior.<br />
|-<br />
| gemma4-8b-uncensored:latest<br />
| 4<br />
| 2<br />
| 3<br />
| 2<br />
| 4<br />
| Unrestricted 8B with good speed/quality balance.<br />
|-<br />
| dolphin-2.9-8b:latest<br />
| 3<br />
| 1<br />
| 2<br />
| 1<br />
| 4<br />
| Unfiltered assistant style; weaker on precise coding.<br />
|-<br />
| hf.co/Qwen/Qwen3-8B-GGUF:Q4_K_M<br />
| 3<br />
| 2<br />
| 3<br />
| 1<br />
| 5<br />
| Lean baseline for low-latency local chat.<br />
|-<br />
| qwen2.5-coder:7b<br />
| 2<br />
| 1<br />
| 4<br />
| 1<br />
| 5<br />
| Great speed for IDE autocomplete loops.<br />
|-<br />
| qwen7b-32k:latest<br />
| 3<br />
| 1<br />
| 2<br />
| 1<br />
| 4<br />
| Useful when very long context is required.<br />
|-<br />
| llama3.2:latest<br />
| 3<br />
| 2<br />
| 2<br />
| 1<br />
| 5<br />
| Ultra-fast small general assistant.<br />
|-<br />
| qwen2.5-coder:3b<br />
| 2<br />
| 1<br />
| 3<br />
| 1<br />
| 5<br />
| Compact coding model for constrained hardware.<br />
|-<br />
| qwen3b-high-ctx:latest<br />
| 3<br />
| 1<br />
| 2<br />
| 1<br />
| 5<br />
| Good small-model option for bigger contexts.<br />
|-<br />
| deepseek-r1:1.5b<br />
| 2<br />
| 1<br />
| 1<br />
| 1<br />
| 5<br />
| Tiny reasoning model; best for lightweight logic tests.<br />
|-<br />
| smollm2-uncensored:latest<br />
| 2<br />
| 1<br />
| 1<br />
| 1<br />
| 5<br />
| Minimal-footprint uncensored utility model.<br />
|}<br />
<br />
---<br />
<br />
== High-Capability & Large-Scale Models (15B - 31B) ==<br />
<br />
=== gemma-4-31b-uncensored ===<br />
* '''Purpose:''' A highly capable, large-scale model based on the Google Gemma 4 architecture, modified to bypass standard safety guardrails.<br />
* '''Best For:''' Complex reasoning, deep creative writing, philosophical exploration, and processing intricate multi-step prompts without refusal barriers.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~31 Billion<br />
** '''Memory/VRAM Usage:''' ~20.5 GB (Quantized)<br />
** '''Performance & Latency:''' Generates ~22-26 tokens/sec. High reasoning overhead can cause a slightly delayed Time-To-First-Token (TTFT) of 2-3 seconds.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored / Abliterated</span> – All standard safety alignment filters have been removed.<br />
<br />
=== qwen3-coder:30b ===<br />
* '''Purpose:''' Alibaba's flagship open-weights coding model, optimized for enterprise-grade software engineering, architecture design, and complex debugging.<br />
* '''Best For:''' Writing full-stack applications, handling multi-file repository contexts, explaining complex algorithms, and optimizing legacy code.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~30 Billion<br />
** '''Memory/VRAM Usage:''' ~19.8 GB<br />
** '''Performance & Latency:''' Achieves ~25-30 tokens/sec. Processing long context inputs (codebases) will cause pre-fill latency to scale upward.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard alignment remains active to prevent malicious code generation (e.g., malware design).<br />
<br />
=== qwen3.6:27b ===<br />
* '''Purpose:''' A premium, heavy-duty generalist model designed for advanced reasoning, mathematical logic, translation, and analytical workflows.<br />
* '''Best For:''' High-fidelity data analysis, complex summarizing, multi-language translation, and acting as a central orchestration agent.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~27 Billion<br />
** '''Memory/VRAM Usage:''' ~18.2 GB<br />
** '''Performance & Latency:''' ~28-33 tokens/sec. Consistent, stable token execution pacing.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Adheres to strict ethical, helpful, and harmless boundaries.<br />
<br />
=== gemma4:26b ===<br />
* '''Purpose:''' The standard, fully-aligned iteration of Google's 26B Gemma 4 model, balancing massive parameter depth with strict safety guardrails.<br />
* '''Best For:''' Enterprise deployments, academic research assistance, and standard corporate productivity tools where safety compliance is required.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~26 Billion<br />
** '''Memory/VRAM Usage:''' ~17.5 GB<br />
** '''Performance & Latency:''' ~30 tokens/sec. Safety evaluations add a marginal execution latency overhead to the initial response generation.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Strictly Censored</span> – Contains default Google RLHF guardrails against sensitive, harmful, or controversial topics.<br />
<br />
=== gpt-oss:20b ===<br />
* '''Purpose:''' An open-source generalist model trained to mimic commercial GPT-style interactions across diverse task types.<br />
* '''Best For:''' General brainstorming, text transformation, data cleaning, and everyday agentic tasks.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~20 Billion<br />
** '''Memory/VRAM Usage:''' ~14.0 GB<br />
** '''Performance & Latency:''' Highly responsive at ~35 tokens/sec with low overall processing latency.<br />
* '''Censorship Status:''' <span style="color:orange; font-weight:bold;">[Partial] Lightly Censored</span> – Usually features basic ethical boundaries but is significantly more permissive than strict corporate models.<br />
<br />
---<br />
<br />
== Mid-Range & Specialist Models (8B - 16B) ==<br />
<br />
=== hf.co/mradermacher/Mistral-Nemo-Instruct-2407-abliterated-i1-GGUF:Q5_K_M ===<br />
* '''Purpose:''' A precision-tuned 12B parameter model combining Mistral's architecture with "abliteration" techniques to erase negative refusal weights.<br />
* '''Best For:''' Unrestricted academic research, writing intense fiction, roleplay, and analyzing controversial text datasets.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 12.2 Billion<br />
** '''Memory/VRAM Usage:''' ~8.9 GB (Q5_K_M layout)<br />
** '''Performance & Latency:''' Swift ~45-52 tokens/sec response generation. Near-instant text generation initialization.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored / Abliterated</span> – Chemically stripped of refusal behaviors while retaining structural coherence.<br />
<br />
=== hf.co/MaziyarPanahi/Mistral-Nemo-Instruct-2407-GGUF:Q5_K_M ===<br />
* '''Purpose:''' The cleanly quantized, official instruction-tuned variant of the highly regarded Mistral-Nemo 12B model.<br />
* '''Best For:''' General instruction following, structured text generation, multi-lingual translation, and logic puzzles.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 12.2 Billion<br />
** '''Memory/VRAM Usage:''' ~8.9 GB (Q5_K_M layout)<br />
** '''Performance & Latency:''' Highly predictable ~45-52 tokens/sec generation speed with negligible pre-fill lag.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Retains default Mistral safety alignments.<br />
<br />
=== MFDoom/deepseek-coder-v2-tool-calling:16b ===<br />
* '''Purpose:''' A custom Mixture-of-Experts (MoE) fine-tune specifically optimized to act as an agentic backend capable of executing external function calls.<br />
* '''Best For:''' AI agents, local tool integration, and automated pipeline execution.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 16 Billion Total (uses ~3.3B active parameters per token)<br />
** '''Memory/VRAM Usage:''' ~11.2 GB<br />
** '''Performance & Latency:''' Blazing fast inference speeds due to MoE architecture, averaging ~55-65 tokens/sec. High initial layout parsing efficiency.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Aligned to prevent execution of destructive or malicious local commands.<br />
<br />
=== deepseek-coder-v2:16b ===<br />
* '''Purpose:''' The foundational Mixture-of-Experts (MoE) coding model from DeepSeek, prized for high-efficiency programming generation.<br />
* '''Best For:''' Continuous inline code completion, rapid prototyping, code refactoring, and general script writing.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 16 Billion Total<br />
** '''Memory/VRAM Usage:''' ~11.2 GB<br />
** '''Performance & Latency:''' ~55-65 tokens/sec. Optimized for sub-second text stream delivery loops.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard guardrails against generating malware or exploits.<br />
<br />
=== qwen3:14b ===<br />
* '''Purpose:''' The standard mid-tier iteration of the Qwen 3 general-purpose intelligence framework.<br />
* '''Best For:''' Summarizing lengthy documents, conversational search support, copy editing, and medium-complexity script writing.<br />
* '''Strengths:'''<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~14 Billion<br />
** '''Memory/VRAM Usage:''' ~10.1 GB<br />
** '''Performance & Latency:''' Runs fluidly at ~42-48 tokens/sec. Moderate latency scaling during lengthy prompt ingestion phases.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Fully aligned with default safety training.<br />
<br />
=== qwen2.5:14b ===<br />
* '''Purpose:''' A mature 14B general-purpose model from the Qwen 2.5 family focused on reliable instruction following and balanced reasoning.<br />
* '''Best For:''' General assistant tasks, drafting and rewriting, translation, and broad knowledge Q&A.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~14 Billion<br />
** '''Memory/VRAM Usage:''' ~9.8 GB<br />
** '''Performance & Latency:''' Consistent ~40-48 tokens/sec with modest prompt prefill latency on longer contexts.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard alignment behavior.<br />
<br />
=== mistral-nemo:12b ===<br />
* '''Purpose:''' The native Ollama distribution of Mistral-Nemo 12B, optimized for instruction following and strong multilingual quality.<br />
* '''Best For:''' General chat, document transformation, summarization, translation, and medium-depth reasoning.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~12 Billion<br />
** '''Memory/VRAM Usage:''' ~8.5 GB<br />
** '''Performance & Latency:''' Typically ~44-52 tokens/sec with fast startup and steady streaming.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Retains default instruction-tuned safety alignment.<br />
<br />
=== qwen2.5-coder:14b ===<br />
* '''Purpose:''' The established, highly mature 14B coding engine from the Qwen 2.5 generation.<br />
* '''Best For:''' Stable software development environments requiring predictable, reliable syntax generation.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 14.8 Billion<br />
** '''Memory/VRAM Usage:''' ~10.5 GB<br />
** '''Performance & Latency:''' Stable ~42-48 tokens/sec. Excellent processing consistency throughout extended syntax blocks.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Features standard safety controls.<br />
<br />
=== gemma3:12b ===<br />
* '''Purpose:''' A legacy mid-tier general model from Google’s third-generation open weights release.<br />
* '''Best For:''' Everyday office automation tasks, document formatting, and general QA datasets.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 12.2 Billion<br />
** '''Memory/VRAM Usage:''' ~8.8 GB<br />
** '''Performance & Latency:''' ~45 tokens/sec. Low baseline generation latency.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Governed by standard Google safety alignment.<br />
<br />
=== gemma4:e4b ===<br />
* '''Purpose:''' An experimental or early-quantized/preview variant of the Gemma 4 framework optimized for edge environments.<br />
* '''Best For:''' Comparing structural generation changes between Gemma versions or running low-overhead general tasks.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~12 Billion Equivalent<br />
** '''Memory/VRAM Usage:''' ~7.9 GB<br />
** '''Performance & Latency:''' Spits out tokens highly efficiently at ~50 tokens/sec. Rapid initialization cycles.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard guardrails apply.<br />
<br />
=== gemma2:9b ===<br />
* '''Purpose:''' Google’s highly successful 9B parameter generalist model from the Gemma 2 era.<br />
* '''Best For:''' Low-resource conversational assistance, flashcard generation, and quick text summarization.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 9.2 Billion<br />
** '''Memory/VRAM Usage:''' ~6.8 GB<br />
** '''Performance & Latency:''' Sharp, snappy output reaching ~55 tokens/sec. Minimal processing delay.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Fully aligned.<br />
<br />
=== hf.co/NousResearch/Hermes-3-Llama-3.1-8B-GGUF:Q5_K_M ===<br />
* '''Purpose:''' A premium, creative fine-tune of Llama 3.1 8B by Nous Research, tailored for advanced roleplay, agentic steps, and complex instruction following.<br />
* '''Best For:''' Creative writing, world-building, intricate multi-turn roleplay, and agentic workflows.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 8.0 Billion<br />
** '''Memory/VRAM Usage:''' ~5.9 GB (Q5_K_M execution footprint)<br />
** '''Performance & Latency:''' Highly responsive ~60 tokens/sec stream velocity. Instant initial output response behavior.<br />
* '''Censorship Status:''' <span style="color:orange; font-weight:bold;">[Partial] Highly Permissive</span> – While not aggressively abliterated, it is fine-tuned to be neutral, non-preachy, and almost entirely free of false-positive refusals.<br />
<br />
=== gemma4-8b-uncensored ===<br />
* '''Purpose:''' A modified 8B Gemma 4 base designed to offer modern reasoning power without any topic restriction.<br />
* '''Best For:''' Running unfiltered writing experiments or analysis tasks on low-spec hardware.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~8 Billion<br />
** '''Memory/VRAM Usage:''' ~5.5 GB<br />
** '''Performance & Latency:''' Snappy ~58-64 tokens/sec. Zero latency blocks.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored</span> – Safety tuning bypassed.<br />
<br />
=== dolphin-2.9-8b:latest ===<br />
* '''Purpose:''' Eric Hartford's iconic Dolphin fine-tune applied to an 8B base, explicitly optimized to be helpful, harmless, and completely unbiased/unfiltered.<br />
* '''Best For:''' Unrestricted hacking/penetration testing research, unfiltered creative prose, and raw data transformations.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 8.0 Billion<br />
** '''Memory/VRAM Usage:''' ~5.3 GB<br />
** '''Performance & Latency:''' Fast ~60 tokens/sec stream output rate. Exceptionally low prompt parsing delays.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored</span> – Fully uncensored by design.<br />
<br />
=== hf.co/Qwen/Qwen3-8B-GGUF:Q4_K_M ===<br />
* '''Purpose:''' The lean, highly quantized 8B baseline of the Qwen 3 general series.<br />
* '''Best For:''' Basic chat utilities, lightweight translation scripts, and low-latency local assistants.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 8.2 Billion<br />
** '''Memory/VRAM Usage:''' ~5.2 GB (Q4_K_M sweet spot footprint)<br />
** '''Performance & Latency:''' Swift ~65 tokens/sec throughput with immediate text streaming characteristics.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard default alignment.<br />
<br />
---<br />
<br />
== Low-Resource & Edge Models (1B - 7B) ==<br />
<br />
=== qwen2.5-coder:7b ===<br />
* '''Purpose:''' A highly optimized 7B parameter programming specialist designed to run efficiently on standard laptops.<br />
* '''Best For:''' Real-time IDE integration, autocomplete loops, and small-scale scripting.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 7.6 Billion<br />
** '''Memory/VRAM Usage:''' ~4.8 GB<br />
** '''Performance & Latency:''' Blazing fast performance at ~75-85 tokens/sec. Perfect for immediate inline coding block autocomplete behaviors.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Basic coding safety limits apply.<br />
<br />
=== qwen7b-32k:latest ===<br />
* '''Purpose:''' A specialized 7B variant configured specifically to ingest and remember massive text inputs up to a 32,000 token window.<br />
* '''Best For:''' Ingesting whole research papers, large source-code files, or extensive chat histories in a single prompt.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 7.2 Billion<br />
** '''Memory/VRAM Usage:''' ~4.7 GB base allocation. Maxing out the context window to 32k tokens causes the pre-allocated Key-Value (KV) cache memory to expand significantly (up to an additional 4-8 GB of VRAM dynamically).<br />
** '''Performance & Latency:''' ~70 tokens/sec under standard usage. Heavy prompt ingestion will scale initial TTFT up to several seconds during token processing phases.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard Qwen alignment.<br />
<br />
=== llama3.2:latest ===<br />
* '''Purpose:''' Meta's highly popular, lightweight 3B generalist model designed for edge computing and mobile deployment.<br />
* '''Best For:''' Ultra-fast everyday text tasks, basic email formatting, and maintaining a low-footprint background desktop assistant.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 3.2 Billion<br />
** '''Memory/VRAM Usage:''' ~2.5 GB<br />
** '''Performance & Latency:''' Extreme text throughput speeds averaging ~100-120+ tokens/sec. Instantaneous response execution.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Adheres strictly to Meta's safety guidelines.<br />
<br />
=== qwen2.5-coder:3b ===<br />
* '''Purpose:''' An ultra-compact coding model tailored for low-resource hardware, suitable for embedded systems or background IDE plugins.<br />
* '''Best For:''' Quick syntax checks, simple function writing, and short utility scripts.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 3.1 Billion<br />
** '''Memory/VRAM Usage:''' ~2.4 GB<br />
** '''Performance & Latency:''' ~110 tokens/sec. Text returns arrive immediately with zero typing lag.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Basic alignment active.<br />
<br />
=== qwen3b-high-ctx:latest ===<br />
* '''Purpose:''' A 3B parameter model optimized specifically for handling enlarged context lengths on constrained hardware.<br />
* '''Best For:''' Reading lengthy logs or documentation files on machines lacking dedicated GPU hardware.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~3 Billion<br />
** '''Memory/VRAM Usage:''' ~2.3 GB base (expands based on operational context volume loading).<br />
** '''Performance & Latency:''' ~95-105 tokens/sec under typical loads.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard alignment.<br />
<br />
=== deepseek-r1:1.5b ===<br />
* '''Purpose:''' A tiny, distilled reasoning model featuring internal chain-of-thought ("thinking") capabilities.<br />
* '''Best For:''' Basic logical problem solving, simple math validation, and testing deep reasoning architectures on extremely weak hardware.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 1.5 Billion<br />
** '''Memory/VRAM Usage:''' ~1.1 GB<br />
** '''Performance & Latency:''' Outrageously fast formatting speeds up to ~130 tokens/sec. However, note that total latency is lengthened because the model generates internal thinking tokens before revealing the raw target answer text.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Retains default alignment protocols during its thinking phase.<br />
<br />
=== smollm2-uncensored:latest ===<br />
* '''Purpose:''' An ultra-compact 1.7B parameter model optimized for mobile or CPU-only setups, stripped of systemic safety refusals.<br />
* '''Best For:''' Unfiltered basic text generation, edge-device testing, and quick offline note restructuring.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 1.7 Billion<br />
** '''Memory/VRAM Usage:''' ~1.3 GB<br />
** '''Performance & Latency:''' Absolute maximum speed configuration running at ~130+ tokens/sec with sub-millisecond start delivery times.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored</span> – Safety mechanisms fully removed.<br />
<br />
[[Category:Local AI Models]]<br />
[[Category:Ollama Infrastructure]]</div>
Admin
https://coolscript.net/index.php?title=Ollama_Modelfile_List&diff=1150
Ollama Modelfile List
2026-05-26T20:49:56Z
<p>Admin: Replaced content with "Only on Test"</p>
<hr />
<div>Only on Test</div>
Admin
https://coolscript.net/index.php?title=Ollama_Modelfile_List&diff=1149
Ollama Modelfile List
2026-05-26T20:37:42Z
<p>Admin: Created page with "'''This is a local Ollama installation running on a powerful local GPU.''' __NOTOC__ This page serves as a comprehensive technical registry and capabilities guide for the locally installed Ollama Large Language Models (LLMs). It outlines their core architecture, performance profiles, memory usage, and safety alignment status. == Local Hardware Performance Overview == The following estimates assume full GPU offloading utilizing a high-end local GPU layout. Splitting mod..."</p>
<hr />
<div>'''This is a local Ollama installation running on a powerful local GPU.'''<br />
<br />
__NOTOC__<br />
This page serves as a comprehensive technical registry and capabilities guide for the locally installed Ollama Large Language Models (LLMs). It outlines their core architecture, performance profiles, memory usage, and safety alignment status.<br />
<br />
== Local Hardware Performance Overview ==<br />
The following estimates assume full GPU offloading utilizing a high-end local GPU layout. Splitting models onto system RAM will heavily degrade these numbers.<br />
<br />
{| class="wikibase" style="width:100%; border:1px solid #ccc; border-collapse:collapse; text-align:left;"<br />
! Scope / Scale<br />
! Parameter Range<br />
! Avg. VRAM Footprint<br />
! Speed (Tokens/sec)<br />
! Context Latency (TTFT)<br />
|-<br />
| '''High-Capability'''<br />
| 20B – 31B<br />
| 16 GB – 24 GB<br />
| 20 – 35 tok/s<br />
| Moderate (~1.5s - 3.0s)<br />
|-<br />
| '''Mid-Range / Specialist'''<br />
| 8B – 16B<br />
| 6 GB – 14 GB<br />
| 40 – 65 tok/s<br />
| Low (~0.8s - 1.5s)<br />
|-<br />
| '''Low-Resource / Edge'''<br />
| 1B – 7B<br />
| 2 GB – 6 GB<br />
| 70 – 120+ tok/s<br />
| Near-Instant (<0.5s)<br />
|}<br />
<br />
---<br />
<br />
== High-Capability & Large-Scale Models (15B - 31B) ==<br />
<br />
=== gemma-4-31b-uncensored ===<br />
* '''Purpose:''' A highly capable, large-scale model based on the Google Gemma 4 architecture, modified to bypass standard safety guardrails.<br />
* '''Best For:''' Complex reasoning, deep creative writing, philosophical exploration, and processing intricate multi-step prompts without refusal barriers.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~31 Billion<br />
** '''Memory/VRAM Usage:''' ~20.5 GB (Quantized)<br />
** '''Performance & Latency:''' Generates ~22-26 tokens/sec. High reasoning overhead can cause a slightly delayed Time-To-First-Token (TTFT) of 2-3 seconds.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored / Abliterated</span> – All standard safety alignment filters have been removed.<br />
<br />
=== qwen3-coder:30b ===<br />
* '''Purpose:''' Alibaba's flagship open-weights coding model, optimized for enterprise-grade software engineering, architecture design, and complex debugging.<br />
* '''Best For:''' Writing full-stack applications, handling multi-file repository contexts, explaining complex algorithms, and optimizing legacy code.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~30 Billion<br />
** '''Memory/VRAM Usage:''' ~19.8 GB<br />
** '''Performance & Latency:''' Achieves ~25-30 tokens/sec. Processing long context inputs (codebases) will cause pre-fill latency to scale upward.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard alignment remains active to prevent malicious code generation (e.g., malware design).<br />
<br />
=== qwen3.6:27b ===<br />
* '''Purpose:''' A premium, heavy-duty generalist model designed for advanced reasoning, mathematical logic, translation, and analytical workflows.<br />
* '''Best For:''' High-fidelity data analysis, complex summarizing, multi-language translation, and acting as a central orchestration agent.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~27 Billion<br />
** '''Memory/VRAM Usage:''' ~18.2 GB<br />
** '''Performance & Latency:''' ~28-33 tokens/sec. Consistent, stable token execution pacing.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Adheres to strict ethical, helpful, and harmless boundaries.<br />
<br />
=== gemma4:26b ===<br />
* '''Purpose:''' The standard, fully-aligned iteration of Google's 26B Gemma 4 model, balancing massive parameter depth with strict safety guardrails.<br />
* '''Best For:''' Enterprise deployments, academic research assistance, and standard corporate productivity tools where safety compliance is required.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~26 Billion<br />
** '''Memory/VRAM Usage:''' ~17.5 GB<br />
** '''Performance & Latency:''' ~30 tokens/sec. Safety evaluations add a marginal execution latency overhead to the initial response generation.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Strictly Censored</span> – Contains default Google RLHF guardrails against sensitive, harmful, or controversial topics.<br />
<br />
=== gpt-oss:20b ===<br />
* '''Purpose:''' An open-source generalist model trained to mimic commercial GPT-style interactions across diverse task types.<br />
* '''Best For:''' General brainstorming, text transformation, data cleaning, and everyday agentic tasks.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~20 Billion<br />
** '''Memory/VRAM Usage:''' ~14.0 GB<br />
** '''Performance & Latency:''' Highly responsive at ~35 tokens/sec with low overall processing latency.<br />
* '''Censorship Status:''' <span style="color:orange; font-weight:bold;">[Partial] Lightly Censored</span> – Usually features basic ethical boundaries but is significantly more permissive than strict corporate models.<br />
<br />
---<br />
<br />
== Mid-Range & Specialist Models (8B - 16B) ==<br />
<br />
=== hf.co/mradermacher/Mistral-Nemo-Instruct-2407-abliterated-i1-GGUF:Q5_K_M ===<br />
* '''Purpose:''' A precision-tuned 12B parameter model combining Mistral's architecture with "abliteration" techniques to erase negative refusal weights.<br />
* '''Best For:''' Unrestricted academic research, writing intense fiction, roleplay, and analyzing controversial text datasets.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 12.2 Billion<br />
** '''Memory/VRAM Usage:''' ~8.9 GB (Q5_K_M layout)<br />
** '''Performance & Latency:''' Swift ~45-52 tokens/sec response generation. Near-instant text generation initialization.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored / Abliterated</span> – Chemically stripped of refusal behaviors while retaining structural coherence.<br />
<br />
=== hf.co/MaziyarPanahi/Mistral-Nemo-Instruct-2407-GGUF:Q5_K_M ===<br />
* '''Purpose:''' The cleanly quantized, official instruction-tuned variant of the highly regarded Mistral-Nemo 12B model.<br />
* '''Best For:''' General instruction following, structured text generation, multi-lingual translation, and logic puzzles.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 12.2 Billion<br />
** '''Memory/VRAM Usage:''' ~8.9 GB (Q5_K_M layout)<br />
** '''Performance & Latency:''' Highly predictable ~45-52 tokens/sec generation speed with negligible pre-fill lag.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Retains default Mistral safety alignments.<br />
<br />
=== MFDoom/deepseek-coder-v2-tool-calling:16b ===<br />
* '''Purpose:''' A custom Mixture-of-Experts (MoE) fine-tune specifically optimized to act as an agentic backend capable of executing external function calls.<br />
* '''Best For:''' AI agents, local tool integration, and automated pipeline execution.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 16 Billion Total (uses ~3.3B active parameters per token)<br />
** '''Memory/VRAM Usage:''' ~11.2 GB<br />
** '''Performance & Latency:''' Blazing fast inference speeds due to MoE architecture, averaging ~55-65 tokens/sec. High initial layout parsing efficiency.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Aligned to prevent execution of destructive or malicious local commands.<br />
<br />
=== deepseek-coder-v2:16b ===<br />
* '''Purpose:''' The foundational Mixture-of-Experts (MoE) coding model from DeepSeek, prized for high-efficiency programming generation.<br />
* '''Best For:''' Continuous inline code completion, rapid prototyping, code refactoring, and general script writing.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 16 Billion Total<br />
** '''Memory/VRAM Usage:''' ~11.2 GB<br />
** '''Performance & Latency:''' ~55-65 tokens/sec. Optimized for sub-second text stream delivery loops.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard guardrails against generating malware or exploits.<br />
<br />
=== qwen3:14b ===<br />
* '''Purpose:''' The standard mid-tier iteration of the Qwen 3 general-purpose intelligence framework.<br />
* '''Best For:''' Summarizing lengthy documents, conversational search support, copy editing, and medium-complexity script writing.<br />
* '''Strengths:'''<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~14 Billion<br />
** '''Memory/VRAM Usage:''' ~10.1 GB<br />
** '''Performance & Latency:''' Runs fluidly at ~42-48 tokens/sec. Moderate latency scaling during lengthy prompt ingestion phases.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Fully aligned with default safety training.<br />
<br />
=== qwen2.5-coder:14b ===<br />
* '''Purpose:''' The established, highly mature 14B coding engine from the Qwen 2.5 generation.<br />
* '''Best For:''' Stable software development environments requiring predictable, reliable syntax generation.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 14.8 Billion<br />
** '''Memory/VRAM Usage:''' ~10.5 GB<br />
** '''Performance & Latency:''' Stable ~42-48 tokens/sec. Excellent processing consistency throughout extended syntax blocks.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Features standard safety controls.<br />
<br />
=== gemma3:12b ===<br />
* '''Purpose:''' A legacy mid-tier general model from Google’s third-generation open weights release.<br />
* '''Best For:''' Everyday office automation tasks, document formatting, and general QA datasets.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 12.2 Billion<br />
** '''Memory/VRAM Usage:''' ~8.8 GB<br />
** '''Performance & Latency:''' ~45 tokens/sec. Low baseline generation latency.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Governed by standard Google safety alignment.<br />
<br />
=== gemma4:e4b ===<br />
* '''Purpose:''' An experimental or early-quantized/preview variant of the Gemma 4 framework optimized for edge environments.<br />
* '''Best For:''' Comparing structural generation changes between Gemma versions or running low-overhead general tasks.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~12 Billion Equivalent<br />
** '''Memory/VRAM Usage:''' ~7.9 GB<br />
** '''Performance & Latency:''' Spits out tokens highly efficiently at ~50 tokens/sec. Rapid initialization cycles.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard guardrails apply.<br />
<br />
=== gemma2:9b ===<br />
* '''Purpose:''' Google’s highly successful 9B parameter generalist model from the Gemma 2 era.<br />
* '''Best For:''' Low-resource conversational assistance, flashcard generation, and quick text summarization.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 9.2 Billion<br />
** '''Memory/VRAM Usage:''' ~6.8 GB<br />
** '''Performance & Latency:''' Sharp, snappy output reaching ~55 tokens/sec. Minimal processing delay.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Fully aligned.<br />
<br />
=== hf.co/NousResearch/Hermes-3-Llama-3.1-8B-GGUF:Q5_K_M ===<br />
* '''Purpose:''' A premium, creative fine-tune of Llama 3.1 8B by Nous Research, tailored for advanced roleplay, agentic steps, and complex instruction following.<br />
* '''Best For:''' Creative writing, world-building, intricate multi-turn roleplay, and agentic workflows.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 8.0 Billion<br />
** '''Memory/VRAM Usage:''' ~5.9 GB (Q5_K_M execution footprint)<br />
** '''Performance & Latency:''' Highly responsive ~60 tokens/sec stream velocity. Instant initial output response behavior.<br />
* '''Censorship Status:''' <span style="color:orange; font-weight:bold;">[Partial] Highly Permissive</span> – While not aggressively abliterated, it is fine-tuned to be neutral, non-preachy, and almost entirely free of false-positive refusals.<br />
<br />
=== gemma4-8b-uncensored ===<br />
* '''Purpose:''' A modified 8B Gemma 4 base designed to offer modern reasoning power without any topic restriction.<br />
* '''Best For:''' Running unfiltered writing experiments or analysis tasks on low-spec hardware.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~8 Billion<br />
** '''Memory/VRAM Usage:''' ~5.5 GB<br />
** '''Performance & Latency:''' Snappy ~58-64 tokens/sec. Zero latency blocks.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored</span> – Safety tuning bypassed.<br />
<br />
=== dolphin-2.9-8b:latest ===<br />
* '''Purpose:''' Eric Hartford's iconic Dolphin fine-tune applied to an 8B base, explicitly optimized to be helpful, harmless, and completely unbiased/unfiltered.<br />
* '''Best For:''' Unrestricted hacking/penetration testing research, unfiltered creative prose, and raw data transformations.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 8.0 Billion<br />
** '''Memory/VRAM Usage:''' ~5.3 GB<br />
** '''Performance & Latency:''' Fast ~60 tokens/sec stream output rate. Exceptionally low prompt parsing delays.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored</span> – Fully uncensored by design.<br />
<br />
=== hf.co/Qwen/Qwen3-8B-GGUF:Q4_K_M ===<br />
* '''Purpose:''' The lean, highly quantized 8B baseline of the Qwen 3 general series.<br />
* '''Best For:''' Basic chat utilities, lightweight translation scripts, and low-latency local assistants.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 8.2 Billion<br />
** '''Memory/VRAM Usage:''' ~5.2 GB (Q4_K_M sweet spot footprint)<br />
** '''Performance & Latency:''' Swift ~65 tokens/sec throughput with immediate text streaming characteristics.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard default alignment.<br />
<br />
---<br />
<br />
== Low-Resource & Edge Models (1B - 7B) ==<br />
<br />
=== qwen2.5-coder:7b ===<br />
* '''Purpose:''' A highly optimized 7B parameter programming specialist designed to run efficiently on standard laptops.<br />
* '''Best For:''' Real-time IDE integration, autocomplete loops, and small-scale scripting.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 7.6 Billion<br />
** '''Memory/VRAM Usage:''' ~4.8 GB<br />
** '''Performance & Latency:''' Blazing fast performance at ~75-85 tokens/sec. Perfect for immediate inline coding block autocomplete behaviors.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Basic coding safety limits apply.<br />
<br />
=== qwen7b-32k:latest ===<br />
* '''Purpose:''' A specialized 7B variant configured specifically to ingest and remember massive text inputs up to a 32,000 token window.<br />
* '''Best For:''' Ingesting whole research papers, large source-code files, or extensive chat histories in a single prompt.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 7.2 Billion<br />
** '''Memory/VRAM Usage:''' ~4.7 GB base allocation. Maxing out the context window to 32k tokens causes the pre-allocated Key-Value (KV) cache memory to expand significantly (up to an additional 4-8 GB of VRAM dynamically).<br />
** '''Performance & Latency:''' ~70 tokens/sec under standard usage. Heavy prompt ingestion will scale initial TTFT up to several seconds during token processing phases.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard Qwen alignment.<br />
<br />
=== llama3.2:latest ===<br />
* '''Purpose:''' Meta's highly popular, lightweight 3B generalist model designed for edge computing and mobile deployment.<br />
* '''Best For:''' Ultra-fast everyday text tasks, basic email formatting, and maintaining a low-footprint background desktop assistant.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 3.2 Billion<br />
** '''Memory/VRAM Usage:''' ~2.5 GB<br />
** '''Performance & Latency:''' Extreme text throughput speeds averaging ~100-120+ tokens/sec. Instantaneous response execution.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Adheres strictly to Meta's safety guidelines.<br />
<br />
=== qwen2.5-coder:3b ===<br />
* '''Purpose:''' An ultra-compact coding model tailored for low-resource hardware, suitable for embedded systems or background IDE plugins.<br />
* '''Best For:''' Quick syntax checks, simple function writing, and short utility scripts.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 3.1 Billion<br />
** '''Memory/VRAM Usage:''' ~2.4 GB<br />
** '''Performance & Latency:''' ~110 tokens/sec. Text returns arrive immediately with zero typing lag.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Basic alignment active.<br />
<br />
=== qwen3b-high-ctx:latest ===<br />
* '''Purpose:''' A 3B parameter model optimized specifically for handling enlarged context lengths on constrained hardware.<br />
* '''Best For:''' Reading lengthy logs or documentation files on machines lacking dedicated GPU hardware.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' ~3 Billion<br />
** '''Memory/VRAM Usage:''' ~2.3 GB base (expands based on operational context volume loading).<br />
** '''Performance & Latency:''' ~95-105 tokens/sec under typical loads.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Standard alignment.<br />
<br />
=== deepseek-r1:1.5b ===<br />
* '''Purpose:''' A tiny, distilled reasoning model featuring internal chain-of-thought ("thinking") capabilities.<br />
* '''Best For:''' Basic logical problem solving, simple math validation, and testing deep reasoning architectures on extremely weak hardware.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 1.5 Billion<br />
** '''Memory/VRAM Usage:''' ~1.1 GB<br />
** '''Performance & Latency:''' Outrageously fast formatting speeds up to ~130 tokens/sec. However, note that total latency is lengthened because the model generates internal thinking tokens before revealing the raw target answer text.<br />
* '''Censorship Status:''' <span style="color:red;">[Yes] Censored</span> – Retains default alignment protocols during its thinking phase.<br />
<br />
=== smollm2-uncensored:latest ===<br />
* '''Purpose:''' An ultra-compact 1.7B parameter model optimized for mobile or CPU-only setups, stripped of systemic safety refusals.<br />
* '''Best For:''' Unfiltered basic text generation, edge-device testing, and quick offline note restructuring.<br />
* '''Resource Profile:'''<br />
** '''Parameters:''' 1.7 Billion<br />
** '''Memory/VRAM Usage:''' ~1.3 GB<br />
** '''Performance & Latency:''' Absolute maximum speed configuration running at ~130+ tokens/sec with sub-millisecond start delivery times.<br />
* '''Censorship Status:''' <span style="color:green; font-weight:bold;">[No] Uncensored</span> – Safety mechanisms fully removed.<br />
<br />
[[Category:Local AI Models]]<br />
[[Category:Ollama Infrastructure]]</div>
Admin
https://coolscript.net/index.php?title=Ollama_Modelfile_Sample&diff=1148
Ollama Modelfile Sample
2026-05-01T18:04:54Z
<p>Admin: Created page with "= Ollama Modelfile Cheat Sheet = == Basic Structure == A Modelfile is a recipe for building a model. <pre> FROM <base_model> # Optional settings PARAMETER <key> <value> SYSTEM <text> TEMPLATE <text> ADAPTER <path> LICENSE <text> MESSAGE <role> <text> </pre> == FROM (Required) == Base model you build on. <pre> FROM llama3 FROM mistral FROM ./local-model.gguf </pre> == PARAMETER == Controls runtime behavior. === Common Parameters === <pre> PARAMETER temperatur..."</p>
<hr />
<div>= Ollama Modelfile Cheat Sheet =<br />
<br />
== Basic Structure ==<br />
A Modelfile is a recipe for building a model.<br />
<br />
<pre><br />
FROM <base_model><br />
<br />
# Optional settings<br />
PARAMETER <key> <value><br />
<br />
SYSTEM <text><br />
<br />
TEMPLATE <text><br />
<br />
ADAPTER <path><br />
<br />
LICENSE <text><br />
<br />
MESSAGE <role> <text><br />
</pre><br />
<br />
== FROM (Required) ==<br />
Base model you build on.<br />
<br />
<pre><br />
FROM llama3<br />
FROM mistral<br />
FROM ./local-model.gguf<br />
</pre><br />
<br />
== PARAMETER ==<br />
Controls runtime behavior.<br />
<br />
=== Common Parameters ===<br />
<br />
<pre><br />
PARAMETER temperature 0.7<br />
PARAMETER top_p 0.9<br />
PARAMETER top_k 40<br />
PARAMETER num_ctx 4096<br />
PARAMETER repeat_penalty 1.1<br />
PARAMETER seed 42<br />
PARAMETER num_predict 128<br />
</pre><br />
<br />
=== Description ===<br />
<br />
* '''temperature''' – randomness (0 = deterministic, 1 = highly random)<br />
* '''top_p''' – nucleus sampling probability cutoff<br />
* '''top_k''' – limits token selection pool<br />
* '''num_ctx''' – context window size<br />
* '''repeat_penalty''' – reduces repetition<br />
* '''num_predict''' – max tokens to generate<br />
<br />
== SYSTEM ==<br />
Defines assistant behavior.<br />
<br />
<pre><br />
SYSTEM You are a helpful assistant that explains things simply.<br />
</pre><br />
<br />
== TEMPLATE ==<br />
Controls prompt formatting.<br />
<br />
<pre><br />
TEMPLATE """<br />
{{ if .System }}<|system|><br />
{{ .System }}<br />
{{ end }}<br />
<br />
<|user|><br />
{{ .Prompt }}<br />
<br />
<|assistant|><br />
"""<br />
</pre><br />
<br />
== MESSAGE ==<br />
Few-shot examples.<br />
<br />
<pre><br />
MESSAGE user What is 2+2?<br />
MESSAGE assistant 4<br />
</pre><br />
<br />
== ADAPTER ==<br />
Attach LoRA adapters.<br />
<br />
<pre><br />
ADAPTER ./my-lora<br />
</pre><br />
<br />
== LICENSE ==<br />
Attach a license.<br />
<br />
<pre><br />
LICENSE MIT<br />
</pre><br />
<br />
== Full Example ==<br />
<br />
<pre><br />
FROM llama3<br />
<br />
PARAMETER temperature 0.7<br />
PARAMETER top_p 0.9<br />
PARAMETER num_ctx 4096<br />
<br />
SYSTEM You are a precise and concise coding assistant.<br />
<br />
TEMPLATE """<br />
{{ if .System }}<|system|><br />
{{ .System }}<br />
{{ end }}<br />
<br />
<|user|><br />
{{ .Prompt }}<br />
<br />
<|assistant|><br />
"""<br />
<br />
MESSAGE user Write a Python function to add two numbers.<br />
MESSAGE assistant def add(a, b): return a + b<br />
</pre><br />
<br />
== Build and Run ==<br />
<br />
<pre><br />
ollama create mymodel -f Modelfile<br />
ollama run mymodel<br />
</pre><br />
<br />
== Common Pitfalls ==<br />
<br />
* Missing FROM → build fails<br />
* Too large num_ctx → high memory usage<br />
* Incorrect TEMPLATE → broken responses<br />
* High temperature → hallucinations<br />
* Low temperature → overly rigid output<br />
<br />
== Mental Model ==<br />
<br />
* FROM = base model<br />
* SYSTEM = behavior<br />
* TEMPLATE = prompt structure<br />
* PARAMETER = tuning<br />
* MESSAGE = examples<br />
* ADAPTER = extensions</div>
Admin
https://coolscript.net/index.php?title=Ollama_Systemd_Unit_File_Sample&diff=1147
Ollama Systemd Unit File Sample
2026-04-30T16:29:13Z
<p>Admin: Created page with "== Ollama systemd override (annotated) == === Resource limits === <code> MemoryMax=16G # hard RAM cap (kills process if exceeded)<br> MemoryHigh=14G # soft limit (throttling before hard cap)<br> CPUQuota=400% # limit to ~4 CPU cores </code> === File descriptors === <code> LimitNOFILE=1048576 # prevent "too many open files" </code> === Restart / stability === <code> Restart=on-failure # restart only on crashes<br> RestartSec=3 # delay before restart<br> StartLimitInter..."</p>
<hr />
<div>== Ollama systemd override (annotated) ==<br />
<br />
=== Resource limits ===<br />
<code><br />
MemoryMax=16G # hard RAM cap (kills process if exceeded)<br><br />
MemoryHigh=14G # soft limit (throttling before hard cap)<br><br />
CPUQuota=400% # limit to ~4 CPU cores<br />
</code><br />
<br />
=== File descriptors ===<br />
<code><br />
LimitNOFILE=1048576 # prevent "too many open files"<br />
</code><br />
<br />
=== Restart / stability ===<br />
<code><br />
Restart=on-failure # restart only on crashes<br><br />
RestartSec=3 # delay before restart<br><br />
StartLimitIntervalSec=60<br><br />
StartLimitBurst=5 # avoid infinite restart loops<br />
</code><br />
<br />
=== IO / disk behavior ===<br />
<code><br />
IOSchedulingClass=best-effort<br><br />
IOSchedulingPriority=4<br />
</code><br />
<br />
=== Optional CPU pinning ===<br />
<code><br />
<br />
CPUAffinity=0 1 2 3 # bind to specific cores<br />
</code><br />
<br />
=== Security (light sandboxing) ===<br />
<code><br />
NoNewPrivileges=true<br><br />
PrivateTmp=true<br><br />
ProtectSystem=full<br><br />
ProtectHome=true<br />
</code><br />
<br />
=== Logging ===<br />
<code><br />
StandardOutput=journal<br><br />
StandardError=journal<br><br />
LogRateLimitIntervalSec=0<br />
</code><br />
<br />
=== Ollama tuning ===<br />
<code><br />
Environment="OLLAMA_NUM_PARALLEL=2" # concurrent requests<br><br />
Environment="OLLAMA_MAX_LOADED_MODELS=1" # avoid VRAM exhaustion<br><br />
Environment="OLLAMA_KEEP_ALIVE=5m" # unload after idle<br><br />
<br />
Environment="OLLAMA_HOST=127.0.0.1" # bind local only<br />
</code><br />
<br />
== Minimal working example ==<br />
<code><br />
[Service]<br><br />
MemoryMax=16G<br><br />
CPUQuota=400%<br><br />
LimitNOFILE=1048576<br><br />
Restart=on-failure<br><br />
RestartSec=3<br><br />
Environment="OLLAMA_NUM_PARALLEL=2"<br><br />
Environment="OLLAMA_MAX_LOADED_MODELS=1"<br />
</code></div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1146
PoC: KVM
2026-04-30T15:59:13Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running '''Kernel-based Virtual Machine (KVM)''' on my local machine instead of:<br />
* <s>Hyper-V</s><br />
* <s>VMWare</s><br />
* <s>Proxmox</s><br />
* '''<span style="color:green;">virsh (Virtualization Shell)</span>'''<br />
<br />
Use on-board Linux apps and utilities only; prefer APT distros such as Debian or Ubuntu.<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk to qcow2===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk to qcow2===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
===Converting a qcow2 Disk to vhdx===<br />
<br />
*Convert<br />
qemu-img convert -p -f qcow2 -O vhdx win8.qcow2 win8.vhdx<br />
<br />
*Info<br />
root@ts01:~# qemu-img info win8.vhdx<br />
image: /var/lib/libvirt/images/win8.vhdx<br />
file format: vhdx<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 25.9 GiB<br />
cluster_size: 16777216<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/win8.vhdx<br />
protocol type: file<br />
file length: 26.6 GiB (28613541888 bytes)<br />
disk size: 25.9 GiB<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
*Using the official Windows 11 ISO<br />
*Install Windows 11 but without network, this way no registration takes place<br />
<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
===Installation Mac OS (EXPERIMENTAL)===<br />
'''The following section is experimental by AI created'''<br />
*Repository Initialization<br />
The foundation of the project relies on the OSX-KVM repository, which provides the OpenCore bootloader configurations and scripts to fetch official macOS assets.<br />
<br />
<pre><br />
# Clone the project repository<br />
git clone --depth 1 https://github.com/kholia/OSX-KVM.git<br />
cd OSX-KVM<br />
</pre><br />
<br />
*Preparation Tasks<br />
Before configuring the Virtual Machine, specific scripts must be run to acquire the macOS installation media.<br />
<br />
*Fetching macOS Assets<br />
Run the Python script to download the Recovery image directly from Apple's servers.<br />
<pre><br />
./fetch-macOS-v2.py<br />
</pre><br />
Note: You will be prompted to choose a version (e.g., Ventura, Sonoma). This creates a "BaseSystem.dmg" file.<br />
<br />
*Image Conversion<br />
The downloaded DMG must be converted into a raw image format that KVM can easily mount.<br />
<pre><br />
dmg2img -i BaseSystem.dmg BaseSystem.img<br />
</pre><br />
<br />
*Virtual Disk Creation<br />
Create the virtual hard drive where the OS will be permanently installed.<br />
<pre><br />
qemu-img create -f qcow2 mac_hdd_ng.img 128G<br />
</pre><br />
<br />
*Host-Level Optimizations<br />
To prevent Kernel Panics during the boot process, the KVM module must be configured to ignore unhandled Model Specific Registers (MSRs).<br />
<br />
*Permanent MSR Fix<br />
Edit or create the KVM configuration file on the host:<br />
<pre><br />
sudo nano /etc/modprobe.d/kvm.conf<br />
</pre><br />
<br />
Add the following configuration line:<br />
<pre><br />
options kvm ignore_msrs=1<br />
</pre><br />
<br />
To apply the change without rebooting the host:<br />
<pre><br />
echo 1 | sudo tee /sys/module/kvm/parameters/ignore_msrs<br />
</pre><br />
<br />
*Virtual Machine XML Configuration<br />
The VM is defined in Libvirt using a modified XML template. Key adjustments ensure the guest OS perceives the hardware as a compatible Apple-Intel machine.<br />
<br />
*CPU Masking and OSK<br />
The CPU must be set to 'Penryn' with an Intel vendor ID mask to bypass Apple's hardware checks.<br />
<pre><br />
<cpu mode='custom' match='exact' check='none'><br />
<model fallback='allow'>Penryn</model><br />
<feature policy='require' name='vendor_id' value='GenuineIntel'/><br />
</cpu><br />
</pre><br />
Note: The OSK (Apple System Management Controller Key) must be included in the QEMU command-line arguments section of the XML.<br />
<br />
*Storage and Firmware Paths<br />
Ensure the following paths point to your actual local files:<br />
* '''Loader:''' /home/vmadmin/OSX-KVM/OVMF_CODE_4M.fd<br />
* '''NVRAM:''' /home/vmadmin/OSX-KVM/OVMF_VARS-1024x768.fd<br />
* '''OpenCore:''' /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
* '''BaseSystem:''' /home/vmadmin/OSX-KVM/BaseSystem.img<br />
* '''Target Disk:''' /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
<br />
*Filesystem Permissions<br />
Libvirt runs as a separate system user and requires explicit access to files located in a user's home directory.<br />
<br />
<pre><br />
# Enable directory traversal<br />
chmod +x /home/vmadmin<br />
chmod +x /home/vmadmin/OSX-KVM<br />
<br />
# Change ownership to the Libvirt-QEMU user<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/BaseSystem.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
</pre><br />
<br />
*The Installation Process<br />
# '''Format:''' Use Disk Utility inside the "macOS Base System" to erase the virtual disk as APFS with a GUID Partition Map.<br />
# '''Install:''' Select "Reinstall macOS" and target the newly formatted drive.<br />
# '''Bootloader Logic:''' Upon rebooting, the OpenCore picker will show a "macOS Installer" icon. This must be selected for all intermediate reboots (usually 3-4 times).<br />
# '''Final Boot:''' Once the installer icon disappears, select the name of your formatted drive (e.g., "MAConKVM") to complete the user setup.<br />
<br />
<br />
*'''Screenshots:'''<br />
[[image:Mac01.png|400px]]<br />
[[image:Mac02.png|400px]]<br />
[[image:Mac03.png|400px]]<br />
[[image:Mac04.png|400px]]<br />
[[image:Mac05a.png|400px]]<br />
[[image:Mac06a.png|400px]]<br />
[[image:Mac07.png|400px]]<br />
[[image:Mac08a.png|400px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh autostart win11 --disable<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=Grafana_Alloy,_Loki_and_SELinux&diff=1145
Grafana Alloy, Loki and SELinux
2026-04-20T14:24:11Z
<p>Admin: Created page with "= Grafana Alloy, Loki and SELinux = This article summarizes how to run Grafana Alloy on an SELinux-enabled Linux system, how to troubleshoot startup and access problems, and what to check when Alloy sends metrics to Mimir or logs to Loki. == Scope == The main SELinux topics for Alloy are: * execution of the Alloy binary * outbound network access to Mimir and Loki * reading local log files for Loki * reading the systemd journal for Loki * file ownership and runtime st..."</p>
<hr />
<div>= Grafana Alloy, Loki and SELinux =<br />
<br />
This article summarizes how to run Grafana Alloy on an SELinux-enabled Linux system, how to troubleshoot startup and access problems, and what to check when Alloy sends metrics to Mimir or logs to Loki.<br />
<br />
== Scope ==<br />
<br />
The main SELinux topics for Alloy are:<br />
<br />
* execution of the Alloy binary<br />
* outbound network access to Mimir and Loki<br />
* reading local log files for Loki<br />
* reading the systemd journal for Loki<br />
* file ownership and runtime state when Alloy runs as a restricted user<br />
<br />
== Key Lessons ==<br />
<br />
* The Alloy binary at `/usr/local/bin/alloy` must have a valid SELinux label such as `bin_t`.<br />
* Do not use `SELinuxContext=` in the systemd unit.<br />
* If cAdvisor is local, scrape `127.0.0.1:8080` instead of a hostname that may not resolve.<br />
* If Alloy runs as a restricted user, it must be able to read the config and write its WAL.<br />
* For Loki, SELinux usually matters more for reading log sources than for sending data to the Loki endpoint.<br />
<br />
== Installation Basics ==<br />
<br />
=== Binary ===<br />
<br />
Install Alloy here:<br />
<br />
/usr/local/bin/alloy<br />
<br />
Check the SELinux label:<br />
<br />
<pre><br />
ls -lZ /usr/local/bin/alloy<br />
</pre><br />
<br />
Expected type:<br />
<br />
bin_t<br />
<br />
If the label is wrong, fix it:<br />
<br />
<pre><br />
restorecon -v /usr/local/bin/alloy<br />
</pre><br />
<br />
If that does not persist correctly, define the file context and relabel:<br />
<br />
<pre><br />
semanage fcontext -a -t bin_t '/usr/local/bin/alloy'<br />
restorecon -v /usr/local/bin/alloy<br />
</pre><br />
<br />
=== Config ===<br />
<br />
Typical config location:<br />
<br />
/etc/alloy/config.alloy<br />
<br />
=== Runtime Data ===<br />
<br />
Prefer runtime state under:<br />
<br />
/var/lib/alloy<br />
<br />
Avoid keeping mutable runtime data under `/etc/alloy` when possible.<br />
<br />
== Systemd Unit ==<br />
<br />
Use a normal unit file. Do not set `SELinuxContext=`.<br />
<br />
Example:<br />
<br />
<pre lang="ini"><br />
[Unit]<br />
Description=Grafana Alloy Service<br />
After=network.target<br />
<br />
[Service]<br />
Type=simple<br />
ExecStart=/usr/local/bin/alloy run /etc/alloy/config.alloy<br />
WorkingDirectory=/etc/alloy<br />
Restart=always<br />
RestartSec=5<br />
User=root<br />
LimitNOFILE=65535<br />
StandardOutput=syslog<br />
StandardError=syslog<br />
SyslogIdentifier=alloy<br />
Environment="test"<br />
Environment="APP_NAME=test"<br />
Environment="OrgID=anonymous"<br />
Environment="PATH=/usr/local/bin:/usr/bin:/bin"<br />
<br />
[Install]<br />
WantedBy=multi-user.target<br />
</pre><br />
<br />
== Prometheus Scrape Example ==<br />
<br />
If cAdvisor runs locally, use:<br />
<br />
<pre lang="ruby"><br />
prometheus.scrape "pan_cadvisor" {<br />
targets = [{ __address__ = "127.0.0.1:8080", client = sys.env("CLIENT") }]<br />
forward_to = [prometheus.remote_write.hosting.receiver]<br />
}<br />
</pre><br />
<br />
This avoids hostname resolution problems such as failing to resolve `cadvisor`.<br />
<br />
== Common SELinux Problems ==<br />
<br />
=== 203/EXEC on startup ===<br />
<br />
Symptom:<br />
<br />
Main process exited, code=exited, status=203/EXEC<br />
<br />
This usually means systemd could not execute the binary. A common cause is a wrong SELinux label on `/usr/local/bin/alloy`.<br />
<br />
Example bad label:<br />
<br />
admin_home_t<br />
<br />
Check:<br />
<br />
<pre><br />
ls -lZ /usr/local/bin/alloy<br />
</pre><br />
<br />
Fix:<br />
<br />
<pre><br />
restorecon -v /usr/local/bin/alloy<br />
</pre><br />
<br />
=== Scrape fails with connect: permission denied ===<br />
<br />
Symptom:<br />
<br />
Get "http://127.0.0.1:8080/metrics": dial tcp 127.0.0.1:8080: connect: permission denied<br />
<br />
If `curl` works from the shell but Alloy cannot connect, SELinux may be blocking the Alloy process.<br />
<br />
Check denials:<br />
<br />
<pre><br />
ausearch -m AVC -ts recent<br />
</pre><br />
<br />
If needed, generate and install a local policy:<br />
<br />
<pre><br />
ausearch -m AVC -c alloy --raw | audit2allow -M alloy_local<br />
semodule -i alloy_local.pp<br />
</pre><br />
<br />
=== WAL permission denied ===<br />
<br />
Symptom:<br />
<br />
open data-alloy/prometheus.remote_write.hosting/wal/00000657: permission denied<br />
<br />
This typically happens after switching Alloy from `root` to a restricted user while the WAL directory is still owned by `root`.<br />
<br />
Immediate fix:<br />
<br />
<pre><br />
chown -R alloy-user:alloy-user /etc/alloy/data-alloy<br />
chmod -R u+rwX /etc/alloy/data-alloy<br />
restorecon -Rv /etc/alloy/data-alloy<br />
</pre><br />
<br />
Also ensure config readability:<br />
<br />
<pre><br />
chown root:alloy-user /etc/alloy<br />
chmod 750 /etc/alloy<br />
chmod 640 /etc/alloy/config.alloy<br />
</pre><br />
<br />
== Running Alloy as a Restricted User ==<br />
<br />
Create the user:<br />
<br />
<pre><br />
useradd --system --no-create-home --shell /sbin/nologin alloy-user<br />
id alloy-user<br />
</pre><br />
<br />
Set the service to:<br />
<br />
<pre lang="ini"><br />
User=alloy-user<br />
Group=alloy-user<br />
</pre><br />
<br />
Ensure:<br />
<br />
* `/usr/local/bin/alloy` is still labeled `bin_t`<br />
* `/etc/alloy` is readable by `alloy-user`<br />
* the WAL and runtime directories are writable by `alloy-user`<br />
<br />
Preferred runtime directory:<br />
<br />
<pre><br />
mkdir -p /var/lib/alloy<br />
chown -R alloy-user:alloy-user /var/lib/alloy<br />
chmod 750 /var/lib/alloy<br />
restorecon -Rv /var/lib/alloy<br />
</pre><br />
<br />
== Returning Alloy to root ==<br />
<br />
Either set:<br />
<br />
<pre lang="ini"><br />
User=root<br />
Group=root<br />
</pre><br />
<br />
or remove both lines entirely, since systemd defaults to `root`.<br />
<br />
If runtime directories were reassigned, give them back to root if needed:<br />
<br />
<pre><br />
chown -R root:root /etc/alloy/data-alloy<br />
chown -R root:root /var/lib/alloy<br />
</pre><br />
<br />
Then reload and restart:<br />
<br />
<pre><br />
systemctl daemon-reload<br />
systemctl restart alloy.service<br />
systemctl status alloy.service<br />
</pre><br />
<br />
== Loki and SELinux ==<br />
<br />
=== Sending data to Loki ===<br />
<br />
For the Loki endpoint, SELinux checks the outbound network connection from the Alloy process.<br />
<br />
If Alloy is running in `unconfined_service_t`, SELinux is usually not the main blocker for outbound HTTPS to Loki.<br />
<br />
Check the process context:<br />
<br />
<pre><br />
ps -eZ | grep alloy<br />
</pre><br />
<br />
Example output:<br />
<br />
system_u:system_r:unconfined_service_t:s0 539778 ? 00:00:16 alloy<br />
<br />
Important part:<br />
<br />
unconfined_service_t<br />
<br />
This means the process is not tightly confined. In that case, failures to send to Loki are more likely to be caused by:<br />
<br />
* DNS problems<br />
* TLS or certificate issues<br />
* authentication problems<br />
* proxy or firewall rules<br />
* a wrong Loki URL<br />
<br />
Check for actual SELinux denials before changing policy:<br />
<br />
<pre><br />
ausearch -m AVC -ts recent<br />
</pre><br />
<br />
If a denial shows `name_connect`, a local policy module may be required.<br />
<br />
=== Reading plain log files for Loki ===<br />
<br />
This is the most common SELinux issue when adding Loki.<br />
<br />
Alloy must be able to:<br />
<br />
* traverse the parent directories<br />
* open the file<br />
* read the file<br />
<br />
Check labels:<br />
<br />
<pre><br />
ls -lZ /path/to/log-directory<br />
ls -lZ /path/to/logfile<br />
matchpathcon /path/to/logfile<br />
</pre><br />
<br />
If the file should behave like a regular log file, `var_log_t` is a common type.<br />
<br />
Quick test for one file:<br />
<br />
<pre><br />
chcon -t var_log_t /path/to/logfile<br />
</pre><br />
<br />
Important:<br />
<br />
* `chcon` changes the current live label immediately<br />
* `chcon` is usually not persistent<br />
* `restorecon` may revert it later<br />
<br />
Preferred long-term fix for a custom log directory:<br />
<br />
<pre><br />
semanage fcontext -a -t var_log_t '/path/to/log-directory(/.*)?'<br />
restorecon -Rv /path/to/log-directory<br />
</pre><br />
<br />
=== Reading the systemd journal ===<br />
<br />
If Alloy reads the journal, verify both OS permissions and SELinux access.<br />
<br />
Check:<br />
<br />
<pre><br />
id alloy-user<br />
ls -lZ /var/log/journal<br />
ausearch -m AVC -ts recent<br />
</pre><br />
<br />
If Alloy runs as a restricted user, journal group access may be needed:<br />
<br />
<pre><br />
usermod -aG systemd-journal alloy-user<br />
</pre><br />
<br />
Restart the service after changing group membership.<br />
<br />
=== Reading container logs ===<br />
<br />
If logs come from paths such as `/var/lib/docker/containers` or `/var/log/containers`, SELinux may be stricter because container paths often use special SELinux types.<br />
<br />
Check:<br />
<br />
<pre><br />
ls -lZ /var/lib/docker/containers<br />
ls -lZ /var/log/containers<br />
ausearch -m AVC -ts recent<br />
</pre><br />
<br />
In such cases, a local policy module may be required.<br />
<br />
== What `ps -eZ | grep alloy` tells you ==<br />
<br />
Example:<br />
<br />
system_u:system_r:unconfined_service_t:s0 539778 ? 00:00:16 alloy<br />
<br />
Meaning:<br />
<br />
* `system_u` = SELinux user<br />
* `system_r` = SELinux role<br />
* `unconfined_service_t` = SELinux type or process domain<br />
* `s0` = SELinux level<br />
<br />
The most important field is the type. If Alloy runs as `unconfined_service_t`, SELinux is generally less restrictive for this process than for a tightly confined domain.<br />
<br />
== Useful SELinux Commands ==<br />
<br />
=== ls -lZ ===<br />
<br />
Shows the SELinux label of a file or directory.<br />
<br />
<pre><br />
ls -lZ /usr/local/bin/alloy<br />
</pre><br />
<br />
=== restorecon ===<br />
<br />
Restores the default label according to policy.<br />
<br />
<pre><br />
restorecon -v /usr/local/bin/alloy<br />
restorecon -Rv /var/lib/alloy<br />
</pre><br />
<br />
=== semanage ===<br />
<br />
Defines persistent SELinux mappings, such as file contexts and port types.<br />
<br />
<pre><br />
semanage fcontext -a -t bin_t '/usr/local/bin/alloy'<br />
semanage fcontext -a -t var_log_t '/path/to/log-directory(/.*)?'<br />
semanage port -l | grep 8080<br />
</pre><br />
<br />
=== semodule ===<br />
<br />
Installs and lists policy modules.<br />
<br />
<pre><br />
semodule -i alloy_local.pp<br />
semodule -l | grep alloy<br />
</pre><br />
<br />
=== ausearch ===<br />
<br />
Searches the audit log for SELinux denials.<br />
<br />
<pre><br />
ausearch -m AVC -ts recent<br />
ausearch -m AVC -c alloy --raw<br />
</pre><br />
<br />
=== getenforce and setenforce ===<br />
<br />
Show or temporarily change SELinux mode.<br />
<br />
<pre><br />
getenforce<br />
setenforce 0<br />
setenforce 1<br />
</pre><br />
<br />
Use `setenforce 0` only as a temporary test.<br />
<br />
=== matchpathcon ===<br />
<br />
Shows the expected SELinux label for a path.<br />
<br />
<pre><br />
matchpathcon /usr/local/bin/alloy<br />
matchpathcon /path/to/logfile<br />
</pre><br />
<br />
=== audit2allow ===<br />
<br />
Builds a local policy module from recorded denials.<br />
<br />
<pre><br />
ausearch -m AVC -c alloy --raw | audit2allow -M alloy_local<br />
semodule -i alloy_local.pp<br />
</pre><br />
<br />
Review generated policy before using it in production.<br />
<br />
== Recommended Troubleshooting Flow ==<br />
<br />
# Verify SELinux mode:<br />
#* `getenforce`<br />
#* `sestatus`<br />
# Verify the Alloy binary label:<br />
#* `ls -lZ /usr/local/bin/alloy`<br />
#* `matchpathcon /usr/local/bin/alloy`<br />
# Fix labels if needed:<br />
#* `restorecon -v /usr/local/bin/alloy`<br />
#* or use `semanage fcontext` plus `restorecon`<br />
# Check the running process context:<br />
#* `ps -eZ | grep alloy`<br />
# Reproduce the problem and inspect denials:<br />
#* `ausearch -m AVC -ts recent`<br />
# For Loki file collection, inspect the file and directory labels.<br />
# For journald collection, check journal permissions and group membership.<br />
# If required, generate and install a local policy module.<br />
# Restart Alloy and verify logs.<br />
<br />
== Final Recommendations ==<br />
<br />
* Keep `/usr/local/bin/alloy` labeled as `bin_t`.<br />
* Do not use `SELinuxContext=` in the systemd unit.<br />
* Prefer `/var/lib/alloy` for runtime state.<br />
* Use `127.0.0.1:8080` for a local cAdvisor target.<br />
* For Loki, first focus on SELinux access to the log source, not only the Loki endpoint.<br />
* Use `chcon` only for quick tests.<br />
* Use `semanage fcontext` plus `restorecon` for persistent label fixes.<br />
* Use `ausearch -m AVC -ts recent` before changing SELinux policy.</div>
Admin
https://coolscript.net/index.php?title=Systemctl_Cheet_Sheet&diff=1144
Systemctl Cheet Sheet
2026-04-20T14:23:43Z
<p>Admin: Created page with "= systemctl Cheat Sheet = This is a generic `systemctl` cheat sheet using `alloy.service` as the example unit name. == Service Status == <pre> systemctl status alloy.service systemctl is-active alloy.service systemctl is-enabled alloy.service </pre> == Start, Stop, Restart == <pre> systemctl start alloy.service systemctl stop alloy.service systemctl restart alloy.service systemctl reload alloy.service </pre> == Enable or Disable at Boot == <pre> systemctl enable a..."</p>
<hr />
<div>= systemctl Cheat Sheet =<br />
<br />
This is a generic `systemctl` cheat sheet using `alloy.service` as the example unit name.<br />
<br />
== Service Status ==<br />
<br />
<pre><br />
systemctl status alloy.service<br />
systemctl is-active alloy.service<br />
systemctl is-enabled alloy.service<br />
</pre><br />
<br />
== Start, Stop, Restart ==<br />
<br />
<pre><br />
systemctl start alloy.service<br />
systemctl stop alloy.service<br />
systemctl restart alloy.service<br />
systemctl reload alloy.service<br />
</pre><br />
<br />
== Enable or Disable at Boot ==<br />
<br />
<pre><br />
systemctl enable alloy.service<br />
systemctl disable alloy.service<br />
systemctl enable --now alloy.service<br />
systemctl disable --now alloy.service<br />
</pre><br />
<br />
== Reload Unit Files ==<br />
<br />
<pre><br />
systemctl daemon-reload<br />
</pre><br />
<br />
Use this after changing a unit file in `/etc/systemd/system/`.<br />
<br />
== View Unit Definition ==<br />
<br />
<pre><br />
systemctl cat alloy.service<br />
systemctl show alloy.service<br />
</pre><br />
<br />
== Edit a Unit ==<br />
<br />
<pre><br />
systemctl edit --full alloy.service<br />
systemctl edit alloy.service<br />
</pre><br />
<br />
Notes:<br />
* `--full` edits the whole unit file<br />
* without `--full`, systemd creates a drop-in override<br />
<br />
== Remove Overrides ==<br />
<br />
<pre><br />
systemctl revert alloy.service<br />
</pre><br />
<br />
== Logs ==<br />
<br />
<pre><br />
journalctl -u alloy.service<br />
journalctl -u alloy.service -n 50 --no-pager<br />
journalctl -u alloy.service -f<br />
</pre><br />
<br />
== Failed Units and Unit Files ==<br />
<br />
<pre><br />
systemctl list-units --failed<br />
systemctl --failed<br />
systemctl list-unit-files<br />
</pre><br />
<br />
== Mask and Unmask ==<br />
<br />
<pre><br />
systemctl mask alloy.service<br />
systemctl unmask alloy.service<br />
</pre><br />
<br />
`mask` prevents manual or automatic start.<br />
<br />
== Dependencies ==<br />
<br />
<pre><br />
systemctl list-dependencies alloy.service<br />
</pre><br />
<br />
== Common Workflow After Changing a Service ==<br />
<br />
<pre><br />
systemctl daemon-reload<br />
systemctl restart alloy.service<br />
systemctl status alloy.service<br />
journalctl -u alloy.service -n 50 --no-pager<br />
</pre><br />
<br />
== Common Troubleshooting ==<br />
<br />
<pre><br />
systemd-analyze verify /etc/systemd/system/alloy.service<br />
systemctl cat alloy.service<br />
journalctl -xeu alloy.service<br />
</pre></div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1143
PoC: KVM
2026-02-28T18:29:46Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running '''Kernel-based Virtual Machine (KVM)''' on my local machine instead of:<br />
* <s>Hyper-V</s><br />
* <s>VMWare</s><br />
* <s>Proxmox</s><br />
* '''<span style="color:green;">virsh (Virtualization Shell)</span>'''<br />
<br />
Use on-board Linux apps and utilities only; prefer APT distros such as Debian or Ubuntu.<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk to qcow2===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk to qcow2===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
===Converting a qcow2 Disk to vhdx===<br />
<br />
*Convert<br />
qemu-img convert -p -f qcow2 -O vhdx win8.qcow2 win8.vhdx<br />
<br />
*Info<br />
root@ts01:~# qemu-img info win8.vhdx<br />
image: /var/lib/libvirt/images/win8.vhdx<br />
file format: vhdx<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 25.9 GiB<br />
cluster_size: 16777216<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/win8.vhdx<br />
protocol type: file<br />
file length: 26.6 GiB (28613541888 bytes)<br />
disk size: 25.9 GiB<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
*Using the official Windows 11 ISO<br />
*Install Windows 11 but without network, this way no registration takes place<br />
<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
===Installation Mac OS (EXPERIMENTAL)===<br />
'''The following section is experimental by AI created'''<br />
*Repository Initialization<br />
The foundation of the project relies on the OSX-KVM repository, which provides the OpenCore bootloader configurations and scripts to fetch official macOS assets.<br />
<br />
<pre><br />
# Clone the project repository<br />
git clone --depth 1 https://github.com/kholia/OSX-KVM.git<br />
cd OSX-KVM<br />
</pre><br />
<br />
*Preparation Tasks<br />
Before configuring the Virtual Machine, specific scripts must be run to acquire the macOS installation media.<br />
<br />
*Fetching macOS Assets<br />
Run the Python script to download the Recovery image directly from Apple's servers.<br />
<pre><br />
./fetch-macOS-v2.py<br />
</pre><br />
Note: You will be prompted to choose a version (e.g., Ventura, Sonoma). This creates a "BaseSystem.dmg" file.<br />
<br />
*Image Conversion<br />
The downloaded DMG must be converted into a raw image format that KVM can easily mount.<br />
<pre><br />
dmg2img -i BaseSystem.dmg BaseSystem.img<br />
</pre><br />
<br />
*Virtual Disk Creation<br />
Create the virtual hard drive where the OS will be permanently installed.<br />
<pre><br />
qemu-img create -f qcow2 mac_hdd_ng.img 128G<br />
</pre><br />
<br />
*Host-Level Optimizations<br />
To prevent Kernel Panics during the boot process, the KVM module must be configured to ignore unhandled Model Specific Registers (MSRs).<br />
<br />
*Permanent MSR Fix<br />
Edit or create the KVM configuration file on the host:<br />
<pre><br />
sudo nano /etc/modprobe.d/kvm.conf<br />
</pre><br />
<br />
Add the following configuration line:<br />
<pre><br />
options kvm ignore_msrs=1<br />
</pre><br />
<br />
To apply the change without rebooting the host:<br />
<pre><br />
echo 1 | sudo tee /sys/module/kvm/parameters/ignore_msrs<br />
</pre><br />
<br />
*Virtual Machine XML Configuration<br />
The VM is defined in Libvirt using a modified XML template. Key adjustments ensure the guest OS perceives the hardware as a compatible Apple-Intel machine.<br />
<br />
*CPU Masking and OSK<br />
The CPU must be set to 'Penryn' with an Intel vendor ID mask to bypass Apple's hardware checks.<br />
<pre><br />
<cpu mode='custom' match='exact' check='none'><br />
<model fallback='allow'>Penryn</model><br />
<feature policy='require' name='vendor_id' value='GenuineIntel'/><br />
</cpu><br />
</pre><br />
Note: The OSK (Apple System Management Controller Key) must be included in the QEMU command-line arguments section of the XML.<br />
<br />
*Storage and Firmware Paths<br />
Ensure the following paths point to your actual local files:<br />
* '''Loader:''' /home/vmadmin/OSX-KVM/OVMF_CODE_4M.fd<br />
* '''NVRAM:''' /home/vmadmin/OSX-KVM/OVMF_VARS-1024x768.fd<br />
* '''OpenCore:''' /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
* '''BaseSystem:''' /home/vmadmin/OSX-KVM/BaseSystem.img<br />
* '''Target Disk:''' /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
<br />
*Filesystem Permissions<br />
Libvirt runs as a separate system user and requires explicit access to files located in a user's home directory.<br />
<br />
<pre><br />
# Enable directory traversal<br />
chmod +x /home/vmadmin<br />
chmod +x /home/vmadmin/OSX-KVM<br />
<br />
# Change ownership to the Libvirt-QEMU user<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/BaseSystem.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
</pre><br />
<br />
*The Installation Process<br />
# '''Format:''' Use Disk Utility inside the "macOS Base System" to erase the virtual disk as APFS with a GUID Partition Map.<br />
# '''Install:''' Select "Reinstall macOS" and target the newly formatted drive.<br />
# '''Bootloader Logic:''' Upon rebooting, the OpenCore picker will show a "macOS Installer" icon. This must be selected for all intermediate reboots (usually 3-4 times).<br />
# '''Final Boot:''' Once the installer icon disappears, select the name of your formatted drive (e.g., "MAConKVM") to complete the user setup.<br />
<br />
<br />
*'''Screenshots:'''<br />
[[image:Mac01.png|400px]]<br />
[[image:Mac02.png|400px]]<br />
[[image:Mac03.png|400px]]<br />
[[image:Mac04.png|400px]]<br />
[[image:Mac05a.png|400px]]<br />
[[image:Mac06a.png|400px]]<br />
[[image:Mac07.png|400px]]<br />
[[image:Mac08a.png|400px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1142
PoC: KVM
2026-02-28T18:14:10Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* <s>Hyper-V</s><br />
* <s>VMWare</s><br />
* <s>Proxmox</s><br />
Use on-board Linux apps and utilities only; prefer APT distros such as Debian or Ubuntu.<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk to qcow2===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk to qcow2===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
===Converting a qcow2 Disk to vhdx===<br />
<br />
*Convert<br />
qemu-img convert -p -f qcow2 -O vhdx win8.qcow2 win8.vhdx<br />
<br />
*Info<br />
root@ts01:~# qemu-img info win8.vhdx<br />
image: /var/lib/libvirt/images/win8.vhdx<br />
file format: vhdx<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 25.9 GiB<br />
cluster_size: 16777216<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/win8.vhdx<br />
protocol type: file<br />
file length: 26.6 GiB (28613541888 bytes)<br />
disk size: 25.9 GiB<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
*Using the official Windows 11 ISO<br />
*Install Windows 11 but without network, this way no registration takes place<br />
<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
===Installation Mac OS (EXPERIMENTAL)===<br />
'''The following section is experimental by AI created'''<br />
*Repository Initialization<br />
The foundation of the project relies on the OSX-KVM repository, which provides the OpenCore bootloader configurations and scripts to fetch official macOS assets.<br />
<br />
<pre><br />
# Clone the project repository<br />
git clone --depth 1 https://github.com/kholia/OSX-KVM.git<br />
cd OSX-KVM<br />
</pre><br />
<br />
*Preparation Tasks<br />
Before configuring the Virtual Machine, specific scripts must be run to acquire the macOS installation media.<br />
<br />
*Fetching macOS Assets<br />
Run the Python script to download the Recovery image directly from Apple's servers.<br />
<pre><br />
./fetch-macOS-v2.py<br />
</pre><br />
Note: You will be prompted to choose a version (e.g., Ventura, Sonoma). This creates a "BaseSystem.dmg" file.<br />
<br />
*Image Conversion<br />
The downloaded DMG must be converted into a raw image format that KVM can easily mount.<br />
<pre><br />
dmg2img -i BaseSystem.dmg BaseSystem.img<br />
</pre><br />
<br />
*Virtual Disk Creation<br />
Create the virtual hard drive where the OS will be permanently installed.<br />
<pre><br />
qemu-img create -f qcow2 mac_hdd_ng.img 128G<br />
</pre><br />
<br />
*Host-Level Optimizations<br />
To prevent Kernel Panics during the boot process, the KVM module must be configured to ignore unhandled Model Specific Registers (MSRs).<br />
<br />
*Permanent MSR Fix<br />
Edit or create the KVM configuration file on the host:<br />
<pre><br />
sudo nano /etc/modprobe.d/kvm.conf<br />
</pre><br />
<br />
Add the following configuration line:<br />
<pre><br />
options kvm ignore_msrs=1<br />
</pre><br />
<br />
To apply the change without rebooting the host:<br />
<pre><br />
echo 1 | sudo tee /sys/module/kvm/parameters/ignore_msrs<br />
</pre><br />
<br />
*Virtual Machine XML Configuration<br />
The VM is defined in Libvirt using a modified XML template. Key adjustments ensure the guest OS perceives the hardware as a compatible Apple-Intel machine.<br />
<br />
*CPU Masking and OSK<br />
The CPU must be set to 'Penryn' with an Intel vendor ID mask to bypass Apple's hardware checks.<br />
<pre><br />
<cpu mode='custom' match='exact' check='none'><br />
<model fallback='allow'>Penryn</model><br />
<feature policy='require' name='vendor_id' value='GenuineIntel'/><br />
</cpu><br />
</pre><br />
Note: The OSK (Apple System Management Controller Key) must be included in the QEMU command-line arguments section of the XML.<br />
<br />
*Storage and Firmware Paths<br />
Ensure the following paths point to your actual local files:<br />
* '''Loader:''' /home/vmadmin/OSX-KVM/OVMF_CODE_4M.fd<br />
* '''NVRAM:''' /home/vmadmin/OSX-KVM/OVMF_VARS-1024x768.fd<br />
* '''OpenCore:''' /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
* '''BaseSystem:''' /home/vmadmin/OSX-KVM/BaseSystem.img<br />
* '''Target Disk:''' /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
<br />
*Filesystem Permissions<br />
Libvirt runs as a separate system user and requires explicit access to files located in a user's home directory.<br />
<br />
<pre><br />
# Enable directory traversal<br />
chmod +x /home/vmadmin<br />
chmod +x /home/vmadmin/OSX-KVM<br />
<br />
# Change ownership to the Libvirt-QEMU user<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/BaseSystem.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
</pre><br />
<br />
*The Installation Process<br />
# '''Format:''' Use Disk Utility inside the "macOS Base System" to erase the virtual disk as APFS with a GUID Partition Map.<br />
# '''Install:''' Select "Reinstall macOS" and target the newly formatted drive.<br />
# '''Bootloader Logic:''' Upon rebooting, the OpenCore picker will show a "macOS Installer" icon. This must be selected for all intermediate reboots (usually 3-4 times).<br />
# '''Final Boot:''' Once the installer icon disappears, select the name of your formatted drive (e.g., "MAConKVM") to complete the user setup.<br />
<br />
<br />
*'''Screenshots:'''<br />
[[image:Mac01.png|400px]]<br />
[[image:Mac02.png|400px]]<br />
[[image:Mac03.png|400px]]<br />
[[image:Mac04.png|400px]]<br />
[[image:Mac05a.png|400px]]<br />
[[image:Mac06a.png|400px]]<br />
[[image:Mac07.png|400px]]<br />
[[image:Mac08a.png|400px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1141
PoC: KVM
2026-02-28T18:03:14Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* <s>Hyper-V</s><br />
* <s>VMWare</s><br />
* <s>Proxmox</s><br />
Use on-board Linux apps and utilities only; prefer Debian or Ubuntu.<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk to qcow2===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk to qcow2===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
===Converting a qcow2 Disk to vhdx===<br />
<br />
*Convert<br />
qemu-img convert -p -f qcow2 -O vhdx win8.qcow2 win8.vhdx<br />
<br />
*Info<br />
root@ts01:~# qemu-img info win8.vhdx<br />
image: /var/lib/libvirt/images/win8.vhdx<br />
file format: vhdx<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 25.9 GiB<br />
cluster_size: 16777216<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/win8.vhdx<br />
protocol type: file<br />
file length: 26.6 GiB (28613541888 bytes)<br />
disk size: 25.9 GiB<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
*Using the official Windows 11 ISO<br />
*Install Windows 11 but without network, this way no registration takes place<br />
<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
===Installation Mac OS (EXPERIMENTAL)===<br />
<br />
*Repository Initialization<br />
The foundation of the project relies on the OSX-KVM repository, which provides the OpenCore bootloader configurations and scripts to fetch official macOS assets.<br />
<br />
<pre><br />
# Clone the project repository<br />
git clone --depth 1 https://github.com/kholia/OSX-KVM.git<br />
cd OSX-KVM<br />
</pre><br />
<br />
*Preparation Tasks<br />
Before configuring the Virtual Machine, specific scripts must be run to acquire the macOS installation media.<br />
<br />
*Fetching macOS Assets<br />
Run the Python script to download the Recovery image directly from Apple's servers.<br />
<pre><br />
./fetch-macOS-v2.py<br />
</pre><br />
Note: You will be prompted to choose a version (e.g., Ventura, Sonoma). This creates a "BaseSystem.dmg" file.<br />
<br />
*Image Conversion<br />
The downloaded DMG must be converted into a raw image format that KVM can easily mount.<br />
<pre><br />
dmg2img -i BaseSystem.dmg BaseSystem.img<br />
</pre><br />
<br />
*Virtual Disk Creation<br />
Create the virtual hard drive where the OS will be permanently installed.<br />
<pre><br />
qemu-img create -f qcow2 mac_hdd_ng.img 128G<br />
</pre><br />
<br />
*Host-Level Optimizations<br />
To prevent Kernel Panics during the boot process, the KVM module must be configured to ignore unhandled Model Specific Registers (MSRs).<br />
<br />
*Permanent MSR Fix<br />
Edit or create the KVM configuration file on the host:<br />
<pre><br />
sudo nano /etc/modprobe.d/kvm.conf<br />
</pre><br />
<br />
Add the following configuration line:<br />
<pre><br />
options kvm ignore_msrs=1<br />
</pre><br />
<br />
To apply the change without rebooting the host:<br />
<pre><br />
echo 1 | sudo tee /sys/module/kvm/parameters/ignore_msrs<br />
</pre><br />
<br />
*Virtual Machine XML Configuration<br />
The VM is defined in Libvirt using a modified XML template. Key adjustments ensure the guest OS perceives the hardware as a compatible Apple-Intel machine.<br />
<br />
*CPU Masking and OSK<br />
The CPU must be set to 'Penryn' with an Intel vendor ID mask to bypass Apple's hardware checks.<br />
<pre><br />
<cpu mode='custom' match='exact' check='none'><br />
<model fallback='allow'>Penryn</model><br />
<feature policy='require' name='vendor_id' value='GenuineIntel'/><br />
</cpu><br />
</pre><br />
Note: The OSK (Apple System Management Controller Key) must be included in the QEMU command-line arguments section of the XML.<br />
<br />
*Storage and Firmware Paths<br />
Ensure the following paths point to your actual local files:<br />
* '''Loader:''' /home/vmadmin/OSX-KVM/OVMF_CODE_4M.fd<br />
* '''NVRAM:''' /home/vmadmin/OSX-KVM/OVMF_VARS-1024x768.fd<br />
* '''OpenCore:''' /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
* '''BaseSystem:''' /home/vmadmin/OSX-KVM/BaseSystem.img<br />
* '''Target Disk:''' /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
<br />
*Filesystem Permissions<br />
Libvirt runs as a separate system user and requires explicit access to files located in a user's home directory.<br />
<br />
<pre><br />
# Enable directory traversal<br />
chmod +x /home/vmadmin<br />
chmod +x /home/vmadmin/OSX-KVM<br />
<br />
# Change ownership to the Libvirt-QEMU user<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/BaseSystem.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
</pre><br />
<br />
*The Installation Process<br />
# '''Format:''' Use Disk Utility inside the "macOS Base System" to erase the virtual disk as APFS with a GUID Partition Map.<br />
# '''Install:''' Select "Reinstall macOS" and target the newly formatted drive.<br />
# '''Bootloader Logic:''' Upon rebooting, the OpenCore picker will show a "macOS Installer" icon. This must be selected for all intermediate reboots (usually 3-4 times).<br />
# '''Final Boot:''' Once the installer icon disappears, select the name of your formatted drive (e.g., "MAConKVM") to complete the user setup.<br />
<br />
<br />
*'''Screenshots:'''<br />
[[image:Mac01.png|400px]]<br />
[[image:Mac02.png|400px]]<br />
[[image:Mac03.png|400px]]<br />
[[image:Mac04.png|400px]]<br />
[[image:Mac05a.png|400px]]<br />
[[image:Mac06a.png|400px]]<br />
[[image:Mac07.png|400px]]<br />
[[image:Mac08a.png|400px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1140
PoC: KVM
2026-02-28T17:35:08Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* <s>Hyper-V</s><br />
* <s>VMWare</s><br />
* <s>Proxmox </s><br />
Use on board Linux apps and utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk to qcow2===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk to qcow2===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
===Converting a qcow2 Disk to vhdx===<br />
<br />
*Convert<br />
qemu-img convert -p -f qcow2 -O vhdx win8.qcow2 win8.vhdx<br />
<br />
*Info<br />
root@ts01:~# qemu-img info win8.vhdx<br />
image: /var/lib/libvirt/images/win8.vhdx<br />
file format: vhdx<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 25.9 GiB<br />
cluster_size: 16777216<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/win8.vhdx<br />
protocol type: file<br />
file length: 26.6 GiB (28613541888 bytes)<br />
disk size: 25.9 GiB<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
*Using the official Windows 11 ISO<br />
*Install Windows 11 but without network, this way no registration takes place<br />
<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
===Installation Mac OS (EXPERIMENTAL)===<br />
<br />
*Repository Initialization<br />
The foundation of the project relies on the OSX-KVM repository, which provides the OpenCore bootloader configurations and scripts to fetch official macOS assets.<br />
<br />
<pre><br />
# Clone the project repository<br />
git clone --depth 1 https://github.com/kholia/OSX-KVM.git<br />
cd OSX-KVM<br />
</pre><br />
<br />
*Preparation Tasks<br />
Before configuring the Virtual Machine, specific scripts must be run to acquire the macOS installation media.<br />
<br />
*Fetching macOS Assets<br />
Run the Python script to download the Recovery image directly from Apple's servers.<br />
<pre><br />
./fetch-macOS-v2.py<br />
</pre><br />
Note: You will be prompted to choose a version (e.g., Ventura, Sonoma). This creates a "BaseSystem.dmg" file.<br />
<br />
*Image Conversion<br />
The downloaded DMG must be converted into a raw image format that KVM can easily mount.<br />
<pre><br />
dmg2img -i BaseSystem.dmg BaseSystem.img<br />
</pre><br />
<br />
*Virtual Disk Creation<br />
Create the virtual hard drive where the OS will be permanently installed.<br />
<pre><br />
qemu-img create -f qcow2 mac_hdd_ng.img 128G<br />
</pre><br />
<br />
*Host-Level Optimizations<br />
To prevent Kernel Panics during the boot process, the KVM module must be configured to ignore unhandled Model Specific Registers (MSRs).<br />
<br />
*Permanent MSR Fix<br />
Edit or create the KVM configuration file on the host:<br />
<pre><br />
sudo nano /etc/modprobe.d/kvm.conf<br />
</pre><br />
<br />
Add the following configuration line:<br />
<pre><br />
options kvm ignore_msrs=1<br />
</pre><br />
<br />
To apply the change without rebooting the host:<br />
<pre><br />
echo 1 | sudo tee /sys/module/kvm/parameters/ignore_msrs<br />
</pre><br />
<br />
*Virtual Machine XML Configuration<br />
The VM is defined in Libvirt using a modified XML template. Key adjustments ensure the guest OS perceives the hardware as a compatible Apple-Intel machine.<br />
<br />
*CPU Masking and OSK<br />
The CPU must be set to 'Penryn' with an Intel vendor ID mask to bypass Apple's hardware checks.<br />
<pre><br />
<cpu mode='custom' match='exact' check='none'><br />
<model fallback='allow'>Penryn</model><br />
<feature policy='require' name='vendor_id' value='GenuineIntel'/><br />
</cpu><br />
</pre><br />
Note: The OSK (Apple System Management Controller Key) must be included in the QEMU command-line arguments section of the XML.<br />
<br />
*Storage and Firmware Paths<br />
Ensure the following paths point to your actual local files:<br />
* '''Loader:''' /home/vmadmin/OSX-KVM/OVMF_CODE_4M.fd<br />
* '''NVRAM:''' /home/vmadmin/OSX-KVM/OVMF_VARS-1024x768.fd<br />
* '''OpenCore:''' /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
* '''BaseSystem:''' /home/vmadmin/OSX-KVM/BaseSystem.img<br />
* '''Target Disk:''' /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
<br />
*Filesystem Permissions<br />
Libvirt runs as a separate system user and requires explicit access to files located in a user's home directory.<br />
<br />
<pre><br />
# Enable directory traversal<br />
chmod +x /home/vmadmin<br />
chmod +x /home/vmadmin/OSX-KVM<br />
<br />
# Change ownership to the Libvirt-QEMU user<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/BaseSystem.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
</pre><br />
<br />
*The Installation Process<br />
# '''Format:''' Use Disk Utility inside the "macOS Base System" to erase the virtual disk as APFS with a GUID Partition Map.<br />
# '''Install:''' Select "Reinstall macOS" and target the newly formatted drive.<br />
# '''Bootloader Logic:''' Upon rebooting, the OpenCore picker will show a "macOS Installer" icon. This must be selected for all intermediate reboots (usually 3-4 times).<br />
# '''Final Boot:''' Once the installer icon disappears, select the name of your formatted drive (e.g., "MAConKVM") to complete the user setup.<br />
<br />
<br />
*'''Screenshots:'''<br />
[[image:Mac01.png|400px]]<br />
[[image:Mac02.png|400px]]<br />
[[image:Mac03.png|400px]]<br />
[[image:Mac04.png|400px]]<br />
[[image:Mac05a.png|400px]]<br />
[[image:Mac06a.png|400px]]<br />
[[image:Mac07.png|400px]]<br />
[[image:Mac08a.png|400px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1139
PoC: KVM
2026-02-28T17:03:14Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
<br />
*Install Windows 11 but without network<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
===Installation Mac OS (EXPERIMENTAL)===<br />
<br />
*Repository Initialization<br />
The foundation of the project relies on the OSX-KVM repository, which provides the OpenCore bootloader configurations and scripts to fetch official macOS assets.<br />
<br />
<pre><br />
# Clone the project repository<br />
git clone --depth 1 https://github.com/kholia/OSX-KVM.git<br />
cd OSX-KVM<br />
</pre><br />
<br />
*Preparation Tasks<br />
Before configuring the Virtual Machine, specific scripts must be run to acquire the macOS installation media.<br />
<br />
*Fetching macOS Assets<br />
Run the Python script to download the Recovery image directly from Apple's servers.<br />
<pre><br />
./fetch-macOS-v2.py<br />
</pre><br />
Note: You will be prompted to choose a version (e.g., Ventura, Sonoma). This creates a "BaseSystem.dmg" file.<br />
<br />
*Image Conversion<br />
The downloaded DMG must be converted into a raw image format that KVM can easily mount.<br />
<pre><br />
dmg2img -i BaseSystem.dmg BaseSystem.img<br />
</pre><br />
<br />
*Virtual Disk Creation<br />
Create the virtual hard drive where the OS will be permanently installed.<br />
<pre><br />
qemu-img create -f qcow2 mac_hdd_ng.img 128G<br />
</pre><br />
<br />
*Host-Level Optimizations<br />
To prevent Kernel Panics during the boot process, the KVM module must be configured to ignore unhandled Model Specific Registers (MSRs).<br />
<br />
*Permanent MSR Fix<br />
Edit or create the KVM configuration file on the host:<br />
<pre><br />
sudo nano /etc/modprobe.d/kvm.conf<br />
</pre><br />
<br />
Add the following configuration line:<br />
<pre><br />
options kvm ignore_msrs=1<br />
</pre><br />
<br />
To apply the change without rebooting the host:<br />
<pre><br />
echo 1 | sudo tee /sys/module/kvm/parameters/ignore_msrs<br />
</pre><br />
<br />
*Virtual Machine XML Configuration<br />
The VM is defined in Libvirt using a modified XML template. Key adjustments ensure the guest OS perceives the hardware as a compatible Apple-Intel machine.<br />
<br />
*CPU Masking and OSK<br />
The CPU must be set to 'Penryn' with an Intel vendor ID mask to bypass Apple's hardware checks.<br />
<pre><br />
<cpu mode='custom' match='exact' check='none'><br />
<model fallback='allow'>Penryn</model><br />
<feature policy='require' name='vendor_id' value='GenuineIntel'/><br />
</cpu><br />
</pre><br />
Note: The OSK (Apple System Management Controller Key) must be included in the QEMU command-line arguments section of the XML.<br />
<br />
*Storage and Firmware Paths<br />
Ensure the following paths point to your actual local files:<br />
* '''Loader:''' /home/vmadmin/OSX-KVM/OVMF_CODE_4M.fd<br />
* '''NVRAM:''' /home/vmadmin/OSX-KVM/OVMF_VARS-1024x768.fd<br />
* '''OpenCore:''' /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
* '''BaseSystem:''' /home/vmadmin/OSX-KVM/BaseSystem.img<br />
* '''Target Disk:''' /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
<br />
*Filesystem Permissions<br />
Libvirt runs as a separate system user and requires explicit access to files located in a user's home directory.<br />
<br />
<pre><br />
# Enable directory traversal<br />
chmod +x /home/vmadmin<br />
chmod +x /home/vmadmin/OSX-KVM<br />
<br />
# Change ownership to the Libvirt-QEMU user<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/BaseSystem.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
</pre><br />
<br />
*The Installation Process<br />
# '''Format:''' Use Disk Utility inside the "macOS Base System" to erase the virtual disk as APFS with a GUID Partition Map.<br />
# '''Install:''' Select "Reinstall macOS" and target the newly formatted drive.<br />
# '''Bootloader Logic:''' Upon rebooting, the OpenCore picker will show a "macOS Installer" icon. This must be selected for all intermediate reboots (usually 3-4 times).<br />
# '''Final Boot:''' Once the installer icon disappears, select the name of your formatted drive (e.g., "MAConKVM") to complete the user setup.<br />
<br />
<br />
*'''Screenshots:'''<br />
[[image:Mac01.png|400px]]<br />
[[image:Mac02.png|400px]]<br />
[[image:Mac03.png|400px]]<br />
[[image:Mac04.png|400px]]<br />
[[image:Mac05a.png|400px]]<br />
[[image:Mac06a.png|400px]]<br />
[[image:Mac07.png|400px]]<br />
[[image:Mac08a.png|400px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1138
PoC: KVM
2026-02-28T16:59:13Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
<br />
*Install Windows 11 but without network<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
===Installation Mac OS (Project from Github)===<br />
<br />
==== Repository Initialization ====<br />
The foundation of the project relies on the OSX-KVM repository, which provides the OpenCore bootloader configurations and scripts to fetch official macOS assets.<br />
<br />
<pre><br />
# Clone the project repository<br />
git clone --depth 1 https://github.com/kholia/OSX-KVM.git<br />
cd OSX-KVM<br />
</pre><br />
<br />
==== Preparation Tasks ====<br />
Before configuring the Virtual Machine, specific scripts must be run to acquire the macOS installation media.<br />
<br />
===== Fetching macOS Assets =====<br />
Run the Python script to download the Recovery image directly from Apple's servers.<br />
<pre><br />
./fetch-macOS-v2.py<br />
</pre><br />
Note: You will be prompted to choose a version (e.g., Ventura, Sonoma). This creates a "BaseSystem.dmg" file.<br />
<br />
===== Image Conversion =====<br />
The downloaded DMG must be converted into a raw image format that KVM can easily mount.<br />
<pre><br />
dmg2img -i BaseSystem.dmg BaseSystem.img<br />
</pre><br />
<br />
===== Virtual Disk Creation =====<br />
Create the virtual hard drive where the OS will be permanently installed.<br />
<pre><br />
qemu-img create -f qcow2 mac_hdd_ng.img 128G<br />
</pre><br />
<br />
==== Host-Level Optimizations ====<br />
To prevent Kernel Panics during the boot process, the KVM module must be configured to ignore unhandled Model Specific Registers (MSRs).<br />
<br />
===== Permanent MSR Fix =====<br />
Edit or create the KVM configuration file on the host:<br />
<pre><br />
sudo nano /etc/modprobe.d/kvm.conf<br />
</pre><br />
<br />
Add the following configuration line:<br />
<pre><br />
options kvm ignore_msrs=1<br />
</pre><br />
<br />
To apply the change without rebooting the host:<br />
<pre><br />
echo 1 | sudo tee /sys/module/kvm/parameters/ignore_msrs<br />
</pre><br />
<br />
==== Virtual Machine XML Configuration ====<br />
The VM is defined in Libvirt using a modified XML template. Key adjustments ensure the guest OS perceives the hardware as a compatible Apple-Intel machine.<br />
<br />
===== CPU Masking and OSK =====<br />
The CPU must be set to 'Penryn' with an Intel vendor ID mask to bypass Apple's hardware checks.<br />
<pre><br />
<cpu mode='custom' match='exact' check='none'><br />
<model fallback='allow'>Penryn</model><br />
<feature policy='require' name='vendor_id' value='GenuineIntel'/><br />
</cpu><br />
</pre><br />
Note: The OSK (Apple System Management Controller Key) must be included in the QEMU command-line arguments section of the XML.<br />
<br />
===== Storage and Firmware Paths =====<br />
Ensure the following paths point to your actual local files:<br />
* '''Loader:''' /home/vmadmin/OSX-KVM/OVMF_CODE_4M.fd<br />
* '''NVRAM:''' /home/vmadmin/OSX-KVM/OVMF_VARS-1024x768.fd<br />
* '''OpenCore:''' /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
* '''BaseSystem:''' /home/vmadmin/OSX-KVM/BaseSystem.img<br />
* '''Target Disk:''' /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
<br />
==== Filesystem Permissions ====<br />
Libvirt runs as a separate system user and requires explicit access to files located in a user's home directory.<br />
<br />
<pre><br />
# Enable directory traversal<br />
chmod +x /home/vmadmin<br />
chmod +x /home/vmadmin/OSX-KVM<br />
<br />
# Change ownership to the Libvirt-QEMU user<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/mac_hdd_ng.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/BaseSystem.img<br />
sudo chown libvirt-qemu:kvm /home/vmadmin/OSX-KVM/OpenCore/OpenCore.qcow2<br />
</pre><br />
<br />
==== The Installation Process ====<br />
# '''Format:''' Use Disk Utility inside the "macOS Base System" to erase the virtual disk as APFS with a GUID Partition Map.<br />
# '''Install:''' Select "Reinstall macOS" and target the newly formatted drive.<br />
# '''Bootloader Logic:''' Upon rebooting, the OpenCore picker will show a "macOS Installer" icon. This must be selected for all intermediate reboots (usually 3-4 times).<br />
# '''Final Boot:''' Once the installer icon disappears, select the name of your formatted drive (e.g., "MAConKVM") to complete the user setup.<br />
<br />
<br />
*'''Pictures:'''<br />
[[image:Mac01.png|600px]]<br />
[[image:Mac02.png|600px]]<br />
[[image:Mac03.png|600px]]<br />
[[image:Mac04.png|600px]]<br />
[[image:Mac05a.png|600px]]<br />
[[image:Mac06a.png|600px]]<br />
[[image:Mac07.png|600px]]<br />
[[image:Mac08a.png|600px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=File:Mac08a.png&diff=1137
File:Mac08a.png
2026-02-28T16:58:56Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Mac07.png&diff=1136
File:Mac07.png
2026-02-28T16:58:46Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Mac06a.png&diff=1135
File:Mac06a.png
2026-02-28T16:58:35Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Mac05.png&diff=1134
File:Mac05.png
2026-02-28T16:58:24Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Mac03.png&diff=1133
File:Mac03.png
2026-02-28T16:58:13Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Mac02.png&diff=1132
File:Mac02.png
2026-02-28T16:58:02Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Mac01.png&diff=1131
File:Mac01.png
2026-02-28T16:57:53Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1130
PoC: KVM
2026-02-23T18:33:16Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
<br />
*Install Windows 11 but without network<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
<br />
===Attach a USB Scanner to the VM===<br />
<br />
*Pick the device<br />
root@ts01:~# ''lsusb''''<br />
Bus 002 Device 008: ID 04a9:190f Canon, Inc. CanoScan LiDE 220<br />
<br />
*Edit the vm setting, assume the vm is called win10<br />
root@ts01:~# virsh edit win10<br />
Add the usb port between the xml devices element element, like:<br />
<devices><br />
...<br />
...<br />
</devices><br />
<br />
*Add and save:<br />
<hostdev mode='subsystem' type='usb' managed='yes'><br />
<source><br />
<vendor id='0x04a9'/><br />
<product id='0x190f'/><br />
</source><br />
</hostdev><br />
<br />
*Alternative edit the usb port using Virt-manager on x <br><br />
[[image:Virt-manager-usb.png|600px]]<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm<br />
<br />
*Configure Autostart<br />
<br />
virsh autostart win11<br />
<br />
virsh dominfo win11 | grep Autostart<br />
Autostart: enable<br />
Autostart Once: disable</div>
Admin
https://coolscript.net/index.php?title=File:Virt-manager-usb.png&diff=1129
File:Virt-manager-usb.png
2026-02-23T18:32:55Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1128
PoC: KVM
2026-02-18T19:35:36Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
<br />
<br />
===Installation Win11 VM (from iso, no registration)===<br />
<br />
*Install Windows 11 but without network<br />
[[image:Win11-no-network.png|600px]]<br />
<br />
<br />
* When asked for network connectivity then press '''Shift + F10'''<br />
*Then type:<br />
OOBE\BYPASSNRO<br />
<br />
*After finishing the setup, shutdown<br />
root@ts01:/data/vmtemplate# virsh shutdown win11<br />
<br />
<br />
*It is required to install the network driver, but first detach the current iso image:<br />
root@ts01:/data/vmtemplate# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
<br />
*Attach the network interface<br />
root@ts01:/data/vmtemplate# virsh attach-interface \<br />
--domain win11 \<br />
--type bridge \<br />
--source br0 \<br />
--model virtio \<br />
--config<br />
Interface attached successfully<br />
<br />
*Check:<br />
root@ts01:/data/vmtemplate# virsh domiflist win11<br />
Interface Type Source Model MAC<br />
-----------------------------------------------------------<br />
- bridge br0 virtio 52:54:00:16:25:ee<br />
<br />
*Download driver disk:<br />
cd /var/lib/libvirt/images<br />
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso<br />
<br />
*Attach driver disk:<br />
virsh attach-disk win11 \<br />
/var/lib/libvirt/images/virtio-win.iso \<br />
sdb \<br />
--type cdrom \<br />
--mode readonly \<br />
--targetbus sata \<br />
--config<br />
<br />
*Start VM<br />
root@ts01:/data/vmtemplate# virsh start win11<br />
Domain 'win11' started<br />
<br />
<br />
*From Device Manager, Install missing Driver from the new disk: NetKVM\w10\amd64<br />
[[image:Win11-install02.png|480px]]<br />
<br><br />
*Install<br />
[[image:Win11-install03.png|480px]]<br />
<br />
<br />
<br />
<br />
<br />
*Stop VM<br />
*Detach Helper Disk<br />
root@ts01:/data/iso# virsh detach-disk win11 sdb --config<br />
Disk detached successfully<br />
*Finished<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm</div>
Admin
https://coolscript.net/index.php?title=File:Win11-no-network.png&diff=1127
File:Win11-no-network.png
2026-02-18T19:35:05Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Win11-install01.png&diff=1126
File:Win11-install01.png
2026-02-18T19:34:47Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Win11-install02.png&diff=1125
File:Win11-install02.png
2026-02-18T19:34:35Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Win11-install03.png&diff=1124
File:Win11-install03.png
2026-02-18T19:34:24Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1123
PoC: KVM
2026-02-14T18:27:23Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<br />
===Reboot behaviour===<br />
*Set the following in '''/etc/defaultlib/virt-guests''' to allow a manged reboot of the vm's, means that previous running vm's are automatically started again after reboot<br />
<br />
# What to do when the host shuts down<br />
ON_SHUTDOWN=suspend<br />
<br />
# What to do when the host boots up<br />
ON_BOOT=start<br />
<br />
# Number of seconds to wait for a guest to shut down/suspend<br />
SHUTDOWN_TIMEOUT=300<br />
<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
===Backup/Restore of the VM settings===<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*To delete the pool use:<br />
virsh pool-destroy nvme-pool<br />
virsh pool-undefine nvme-pool<br />
<br />
==Deploy a new VM via CLI==<br />
*Requires (template copy):<br />
**/data/vmstorage/vm-bookworm.qcow2<br />
This will setup a new VM with:<br />
*Name: vm-bookworm<br />
*OS Debian 13 (Trixy)<br />
*Disk: /data/vmstorage/vm-bookworm.qcow2<br />
*2CPU/2GB-RAM<br />
*Network Bridged <br />
<br />
<br />
root@ts01:/data/vmstorage# '''virt-install''' \<br />
--name vm-bookworm \<br />
--memory 2048 \<br />
--vcpus 2 \<br />
--cpu host-passthrough \<br />
--os-variant debian12 \<br />
--disk path=/data/vmstorage/vm-bookworm.qcow2,bus=virtio,discard=unmap \<br />
--network bridge=br0,model=virtio \<br />
--graphics spice,listen=0.0.0.0 \<br />
--channel spicevmc \<br />
--autoconsole none \<br />
--import<br />
<br />
Starting install...<br />
Creating domain... | 00:00:00<br />
Domain creation completed.<br />
<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# '''nmap -sn 192.168.2.0/24'''<br />
<br />
*Add a description for a VM<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname "My Description ..." --config'''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
My Description ...<br />
<br />
* Alternative description with carriage returns within the text<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname --config --new-desc $'Line 1: Text123\nLine 2: Text456\nLine 3: Text789''''<br />
Domain description updated successfully<br />
root@ts01:/var/lib/libvirt/images# '''virsh desc vmname'''<br />
Line 1: Text123<br />
Line 2: Text456<br />
Line 3: Text789<br />
<br />
*Virtual Top<br />
root@ts01:/# '''virt-top'''<br />
virt-top 21:20:58 - x86_64 24/24CPU 1200MHz 61890MB<br />
6 domains, 1 active, 1 running, 0 sleeping, 0 paused, 5 inactive D:0 O:0 X:0<br />
CPU: 0.1% Mem: 2048 MB (2048 MB by guests)<br />
<br />
ID S RDRQ WRRQ RXBY TXBY %CPU %MEM TIME NAME<br />
10 R 0 2 1396 206 0.1 3.0 0:47.07 vm-bookworm</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1122
PoC: KVM
2026-02-13T17:37:44Z
<p>Admin: /* Create a new Pool and apply new VMs */</p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
'''WARNING''' Using a cloned windows vm may lead into a SID conflict in your network if the machine becomes a domain member<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
==Backup/Restore of the VM settings==<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*'''Hint: To the delete the above pool use:'''<br />
root@ts01:~# virsh pool-destroy nvme-pool<br />
Pool nvme-pool destroyed<br />
root@ts01:~# virsh pool-undefine nvme-pool<br />
Pool nvme-pool has been undefined<br />
==Useful Commands==<br />
*Nmap accross the network to obtain new IP addresses from new vm machines<br />
root@ts01:/var/lib/libvirt/images# nmap -sn 192.168.2.0/24</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1121
PoC: KVM
2026-02-13T17:19:32Z
<p>Admin: /* Installation Win10 VM (former vhdx file) */</p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
'''WARNING''' Using a cloned windows vm may lead into a SID conflict in your network if the machine becomes a domain member<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
==Backup/Restore of the VM settings==<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*'''Hint: To the delete the above pool use:'''<br />
root@ts01:~# virsh pool-destroy nvme-pool<br />
Pool nvme-pool destroyed<br />
root@ts01:~# virsh pool-undefine nvme-pool<br />
Pool nvme-pool has been undefined</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1120
PoC: KVM
2026-02-13T16:46:55Z
<p>Admin: /* Create a new Pool and apply new VMs */</p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
==Backup/Restore of the VM settings==<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*'''Hint: To the delete the above pool use:'''<br />
root@ts01:~# virsh pool-destroy nvme-pool<br />
Pool nvme-pool destroyed<br />
root@ts01:~# virsh pool-undefine nvme-pool<br />
Pool nvme-pool has been undefined</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1119
PoC: KVM
2026-02-13T16:42:49Z
<p>Admin: /* Create a new Pool and apply new VMs */</p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
==Backup/Restore of the VM settings==<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.<br />
<br />
*Hint: To the deleete the above pool use:<br />
root@ts01:~# virsh pool-destroy nvme-pool<br />
Pool nvme-pool destroyed<br />
root@ts01:~# virsh pool-undefine nvme-pool<br />
Pool nvme-pool has been undefined</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1118
PoC: KVM
2026-02-12T20:20:49Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* Microsoft Terminal Server / Remote Desktop<br />
* VMWare<br />
* Proxmox (for now)<br />
Try to use the Linux on board utilities only<br />
<br />
<br />
==Setup==<br />
===System Information===<br />
vmadmin@ts01:~$ '''sudo -i'''<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
===Install and setup packages===<br />
root@ts01:~# '''apt install -y '''<br />
'''qemu-kvm \'''<br />
'''libvirt-daemon-system \'''<br />
'''libvirt-clients \'''<br />
'''bridge-utils \'''<br />
'''virt-manager \'''<br />
'''cpu-checker'''<br />
<br />
====Libvirt (Orchestrator)====<br />
*Enable <br />
root@ts01:~# '''systemctl enable --now libvirtd'''<br />
*Status<br />
root@ts01:~# '''systemctl status libvirtd'''<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
====Virsh (Controler)====<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# '''virsh net-start default'''<br />
root@ts01:~# '''virsh net-autostart default'''<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
===Prepare KVM User===<br />
*User admin:<br />
vmadmin@ts01:~$ '''usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''sudo usermod -aG libvirt,kvm $USER'''<br />
vmadmin@ts01:~$ '''less /etc/groups'''<br />
<br />
*Optional start user admin in xrdp:<br />
virt-manager<br />
<br />
===Advanced - Bridging===<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# '''sudo virsh net-define /dev/stdin <<EOF'''<br />
'''<network>'''<br />
'''<name>br0</name>'''<br />
'''<forward mode="bridge"/>'''<br />
'''<bridge name="br0"/>'''<br />
'''</network>'''<br />
'''EOF'''<br />
<br />
*Start<br />
root@ts01:~# '''virsh net-start br0'''<br />
virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# '''virsh shutdown debian13'''<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
'''virsh edit debian'''<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Advanced - Converting virtual disks==<br />
===Converting a VHDX Windows Disk===<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# '''qemu-img info /home/vmadmin/vm-surf01.vhdx'''<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# '''cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images'''<br />
root@ts01:~# '''chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso'''<br />
root@ts01:~# '''chmod 777 /var/lib/libvirt/images'''<br />
<br />
*Convert the disk<br />
root@ts01:~# '''qemu-img convert -p -f vhdx -O qcow2 \'''<br />
'''/home/vmadmin/vm-surf01.vhdx \'''<br />
'''/var/lib/libvirt/images/vm-surf01.qcow2'''<br />
(100.00/100%)<br />
<br />
<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2'''<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
===Converting a VMDK VMWare Disk===<br />
*Inspect <br />
root@ts01:~# '''qemu-img info /var/lib/libvirt/ qemu-img info 'Windows 8.x x64.vmdk' '''<br />
image: Windows 8.x x64.vmdk<br />
file format: vmdk<br />
virtual size: 100 GiB (107374182400 bytes)<br />
disk size: 16.7 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
cid: 2432867383<br />
parent cid: 4294967295<br />
create type: monolithicSparse<br />
extents:<br />
[0]:<br />
virtual size: 107374182400<br />
filename: Windows 8.x x64.vmdk<br />
cluster size: 65536<br />
format:<br />
Child node '/file':<br />
filename: Windows 8.x x64.vmdk<br />
protocol type: file<br />
file length: 16.7 GiB (17974165504 bytes)<br />
disk size: 16.7 GiB<br />
<br />
*Convert<br />
root@ts01:~# '''qemu-img convert -f vmdk -O qcow2 'Windows 8.x x64.vmdk' win8.qcow2'''<br />
<br />
==VM Installation==<br />
<br />
<br />
===Installation Debian from ISO===<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
===Installation Win10 VM (former vhdx file)===<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# '''lsusb'''<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# '''virsh attach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# '''virsh dumpxml win10 | grep -A10 hostdev'''<br />
''' <hostdev mode='subsystem' type='usb' managed='no'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''<address type='usb' bus='0' port='4'/>'''<br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# '''virsh start win10'''<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# '''virsh detach-device win10 --file <(cat <<EOF'''<br />
'''<hostdev mode='subsystem' type='usb'>'''<br />
'''<source>'''<br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
'''</source>'''<br />
'''</hostdev>'''<br />
'''EOF'''<br />
''') --persistent'''<br />
Device detached successfully<br />
<br />
==Basic admin commands==<br />
===Cloning a machine===<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# '''virsh shutdown win10'''<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# '''virt-clone \'''<br />
'''--original win10 \'''<br />
'''--name win10a \'''<br />
'''--auto-clone'''<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
===Snapshots===<br />
*Create a snapshort<br />
root@ts01:~# '''virsh snapshot-create win10a'''<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# '''virsh snapshot-revert win10a 1770483334'''<br />
Domain snapshot 1770483334 reverted<br />
<br />
===Hibernate===<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# '''virsh managedsave win10a'''<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
*List<br />
root@ts01:~# '''virsh list --all'''<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# '''virsh start win10a'''<br />
Domain 'win10a' started<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--><br />
<br />
==Backup/Restore of the VM settings==<br />
To Backup the VM settings only run:<br />
virsh list --all<br />
virsh dumpxml vmname > vmname.xml<br />
<br />
*To Restore<br />
virsh define vmname.xml<br />
<br />
==Adding a new VM Storage==<br />
===Partition the new storage===<br />
root@ts01:~# parted /dev/nvme0n1<br />
GNU Parted 3.6<br />
Using /dev/nvme0n1<br />
Welcome to GNU Parted! Type 'help' to view a list of commands.<br />
(parted) mklabel gpt<br />
Warning: The existing disk label on /dev/nvme0n1 will be destroyed and all data on this disk will be lost. Do you want to continue?<br />
Yes/No? y<br />
(parted) quit<br />
Information: You may need to update /etc/fstab.<br />
===Add Filesystem===<br />
root@ts01:~# '''mkfs.ext4 /dev/nvme0n1p1'''<br />
mke2fs 1.47.2 (1-Jan-2025)<br />
/dev/nvme0n1p1 contains a ntfs file system labelled 'NVM'<br />
Proceed anyway? (y,N) y<br />
Discarding device blocks: done<br />
Creating filesystem with 500099328 4k blocks and 125026304 inodes<br />
Filesystem UUID: 2382c329-2c7c-4a57-855d-aea09003dd30<br />
Superblock backups stored on blocks:<br />
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,<br />
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,<br />
102400000, 214990848<br />
<br />
Allocating group tables: done<br />
Writing inode tables: done<br />
Creating journal (262144 blocks): done<br />
Writing superblocks and filesystem accounting information: done<br />
<br />
<br />
===Mount Filesystem===<br />
*Make and mount<br />
root@ts01:~# mkdir /vmstorage<br />
root@ts01:~# mount /dev/nvme0n1p1 /vmstorage<br />
<br />
*Check<br />
root@ts01:~# df -h<br />
Filesystem Size Used Avail Use% Mounted on<br />
tmpfs 6.1G 16M 6.1G 1% /run<br />
/dev/sda2 915G 459G 411G 53% /<br />
tmpfs 31G 0 31G 0% /dev/shm<br />
efivarfs 256K 148K 104K 59% /sys/firmware/efi/efivars<br />
tmpfs 5.0M 12K 5.0M 1% /run/lock<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service<br />
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service<br />
/dev/sda1 1.1G 6.3M 1.1G 1% /boot/efi<br />
tmpfs 31G 8.0K 31G 1% /tmp<br />
tmpfs 6.1G 116K 6.1G 1% /run/user/60578<br />
tmpfs 6.1G 108K 6.1G 1% /run/user/1000<br />
'''/dev/nvme0n1p1 1.9T 2.1M 1.8T 1% /vmstorage'''<br />
*Get UUID<br />
root@ts01:~# blkid /dev/nvme0n1p1<br />
/dev/nvme0n1p1: UUID="2382c329-2c7c-4a57-855d-aea09003dd30" BLOCK_SIZE="4096" TYPE="ext4" PARTLABEL="primary" PARTUUID="f49249d9-50eb-45bd-aafc-701ef7d66f5b"<br />
*Add to /etc/fstab<br />
UUID=2382c329-2c7c-4a57-855d-aea09003dd30 /vmstorage ext4 defaults 0 2<br />
*Reboot to test!<br />
<br />
===Create a new Pool and apply new VMs===<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
<br />
*Create a new pool using the new vmstorage<br />
root@ts01:~# '''virsh pool-define-as nvme-pool dir --target /vmstorage'''<br />
Pool nvme-pool defined<br />
root@ts01:~# '''virsh pool-build nvme-pool'''<br />
Pool nvme-pool built<br />
root@ts01:~# '''virsh pool-start nvme-pool'''<br />
Pool nvme-pool started<br />
root@ts01:~# '''virsh pool-autostart nvme-pool'''<br />
Pool nvme-pool marked as autostarted<br />
<br />
*List current pool<br />
root@ts01:~# '''virsh pool-list --all'''<br />
Name State Autostart<br />
---------------------------------<br />
default active yes<br />
nvme-pool active yes<br />
<br />
*Move the VM to another disk<br />
root@ts01:~# mv /var/lib/libvirt/images/vm-win10a.qcow2 /vmstorage/vm-win10.qcow2<br />
<br />
*Edit the vm settings<br />
root@ts01:~# virsh edit win10a<br />
<br />
*Then:<br />
**set source file to:<br />
**/vmstorage/vm-win10.qcow2<br />
<br />
*And save<br />
Domain 'win10a' XML configuration edited.</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1117
PoC: KVM
2026-02-08T18:24:39Z
<p>Admin: </p>
<hr />
<div>'''The Motivation'''<br><br />
Running''' Kernel-based Virtual Machine (KVM)''' on my local machine instead of <br />
* No Microsoft Terminal Server / Remote Desktop<br />
* No VMWare<br />
* No Proxmox<br />
'''Use of Linux on board utilities only!'''<br />
* ToDo<br />
**Wipe Windows<br />
**Install Linux<br />
***Install Debian Gnome<br />
***Or Install Ubuntu<br />
***Install KVM<br />
<br />
<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y <br />
qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Converting a VHDX Windows Disk==<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# qemu-img info /home/vmadmin/vm-surf01.vhdx<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
*Convert the disk<br />
root@ts01:~# qemu-img convert -p -f vhdx -O qcow2 \<br />
/home/vmadmin/vm-surf01.vhdx \<br />
/var/lib/libvirt/images/vm-surf01.qcow2<br />
(100.00/100%)<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
<br />
==Install a Win10 VM from a previous disk==<br />
<br />
*Install01<br />
[[image:wininst01a.png|600px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|600px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|600px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|600px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|800px]]<br />
<br />
==USB Operations==<br />
<br />
===Attach a USB Stick to the VM===<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# lsusb<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# virsh attach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# virsh dumpxml win10 | grep -A10 hostdev<br />
<hostdev mode='subsystem' type='usb' managed='no'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
<address type='usb' bus='0' port='4'/><br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# virsh start win10<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
===Detach a USB Stick from the VM===<br />
<br />
*Detach device<br />
root@ts01:~# virsh detach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device detached successfully<br />
<br />
==Cloning a machine==<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# virt-clone \<br />
--original win10 \<br />
--name win10a \<br />
--auto-clone<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.<br />
<br />
<br />
==Snapshots==<br />
*Create a snapshort<br />
root@ts01:~# virsh snapshot-create win10a<br />
Domain snapshot 1770483334 created<br />
root@ts01:~# virsh snapshot-list win10a<br />
Name Creation Time State<br />
---------------------------------------------------<br />
1770483334 2026-02-07 17:55:34 +0100 running<br />
<br />
<br />
*Revert snapshort<br />
root@ts01:~# virsh snapshot-revert win10a 1770483334<br />
Domain snapshot 1770483334 reverted<br />
<br />
<br />
==Hibernate==<br />
*Hibernate with '''managedsave'''<br />
root@ts01:~# virsh managedsave win10a<br />
<br />
Domain 'win10a' state saved by libvirt<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
4 debian13 running<br />
- win10a shut off<br />
<br />
*Start back<br />
root@ts01:~# virsh start win10a<br />
Domain 'win10a' started<br />
<br />
<!-- To be mentioned: <br />
Drawbacks:<br />
-Tricky Backup procedure <br />
-USB Stick handling<br />
--></div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1116
PoC: KVM
2026-02-06T19:22:41Z
<p>Admin: /* Cloning a machine */</p>
<hr />
<div>kvm testsetup at home<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Converting a VHDX Windows Disk==<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# qemu-img info /home/vmadmin/vm-surf01.vhdx<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
*Convert the disk<br />
root@ts01:~# qemu-img convert -p -f vhdx -O qcow2 \<br />
/home/vmadmin/vm-surf01.vhdx \<br />
/var/lib/libvirt/images/vm-surf01.qcow2<br />
(100.00/100%)<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
<br />
==Install a Win10 VM from a previous disk==<br />
<br />
*Install01<br />
[[image:wininst01a.png|800px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|800px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|800px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|800px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|1200px]]<br />
<br />
==Attach a USB Stick to the VM==<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# lsusb<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# virsh attach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# virsh dumpxml win10 | grep -A10 hostdev<br />
<hostdev mode='subsystem' type='usb' managed='no'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
<address type='usb' bus='0' port='4'/><br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# virsh start win10<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
==Detach a USB Stick from the VM==<br />
<br />
*Detach device<br />
root@ts01:~# virsh detach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device detached successfully<br />
<br />
<br />
<br />
==Cloning a machine==<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Clone Process<br />
[[image:Clonevm.png|800px]]<br />
<br />
<br />
root@ts01:~# virt-clone \<br />
--original win10 \<br />
--name win10a \<br />
--auto-clone<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.</div>
Admin
https://coolscript.net/index.php?title=File:Clonevm.png&diff=1115
File:Clonevm.png
2026-02-06T19:22:01Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1114
PoC: KVM
2026-02-06T19:21:14Z
<p>Admin: /* Cloning a machine */</p>
<hr />
<div>kvm testsetup at home<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Converting a VHDX Windows Disk==<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# qemu-img info /home/vmadmin/vm-surf01.vhdx<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
*Convert the disk<br />
root@ts01:~# qemu-img convert -p -f vhdx -O qcow2 \<br />
/home/vmadmin/vm-surf01.vhdx \<br />
/var/lib/libvirt/images/vm-surf01.qcow2<br />
(100.00/100%)<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
<br />
==Install a Win10 VM from a previous disk==<br />
<br />
*Install01<br />
[[image:wininst01a.png|800px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|800px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|800px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|800px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|1200px]]<br />
<br />
==Attach a USB Stick to the VM==<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# lsusb<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# virsh attach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# virsh dumpxml win10 | grep -A10 hostdev<br />
<hostdev mode='subsystem' type='usb' managed='no'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
<address type='usb' bus='0' port='4'/><br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# virsh start win10<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
==Detach a USB Stick from the VM==<br />
<br />
*Detach device<br />
root@ts01:~# virsh detach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device detached successfully<br />
<br />
<br />
<br />
==Cloning a machine==<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
<br />
root@ts01:~# virt-clone \<br />
--original win10 \<br />
--name win10a \<br />
--auto-clone<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1113
PoC: KVM
2026-02-06T19:20:32Z
<p>Admin: /* Detach a USB Stick from the VM */</p>
<hr />
<div>kvm testsetup at home<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Converting a VHDX Windows Disk==<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# qemu-img info /home/vmadmin/vm-surf01.vhdx<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
*Convert the disk<br />
root@ts01:~# qemu-img convert -p -f vhdx -O qcow2 \<br />
/home/vmadmin/vm-surf01.vhdx \<br />
/var/lib/libvirt/images/vm-surf01.qcow2<br />
(100.00/100%)<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
<br />
==Install a Win10 VM from a previous disk==<br />
<br />
*Install01<br />
[[image:wininst01a.png|800px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|800px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|800px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|800px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|1200px]]<br />
<br />
==Attach a USB Stick to the VM==<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# lsusb<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# virsh attach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# virsh dumpxml win10 | grep -A10 hostdev<br />
<hostdev mode='subsystem' type='usb' managed='no'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
<address type='usb' bus='0' port='4'/><br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# virsh start win10<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
==Detach a USB Stick from the VM==<br />
<br />
*Detach device<br />
root@ts01:~# virsh detach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device detached successfully<br />
<br />
<br />
<br />
==Cloning a machine==<br />
'''Cloning win10 to win10a'''<br />
*Shutdown Main<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
*Clone<br />
root@ts01:~# virt-clone \<br />
--original win10 \<br />
--name win10a \<br />
--auto-clone<br />
Allocating 'vm-surf01-clone.qcow2' | 127 GB 00:02:21<br />
<br />
Clone 'win10a' created successfully.</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1112
PoC: KVM
2026-02-06T18:36:32Z
<p>Admin: /* Attach a USB Stick to the VM */</p>
<hr />
<div>kvm testsetup at home<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Converting a VHDX Windows Disk==<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# qemu-img info /home/vmadmin/vm-surf01.vhdx<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
*Convert the disk<br />
root@ts01:~# qemu-img convert -p -f vhdx -O qcow2 \<br />
/home/vmadmin/vm-surf01.vhdx \<br />
/var/lib/libvirt/images/vm-surf01.qcow2<br />
(100.00/100%)<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
<br />
==Install a Win10 VM from a previous disk==<br />
<br />
*Install01<br />
[[image:wininst01a.png|800px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|800px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|800px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|800px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|1200px]]<br />
<br />
==Attach a USB Stick to the VM==<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# lsusb<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# virsh attach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device attached successfully<br />
<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# virsh dumpxml win10 | grep -A10 hostdev<br />
<hostdev mode='subsystem' type='usb' managed='no'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
<address type='usb' bus='0' port='4'/><br />
....<br />
<br />
*Shutdown Win10<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
*Start back win10<br />
root@ts01:~# virsh start win10<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
==Detach a USB Stick from the VM==<br />
<br />
*Detach device<br />
root@ts01:~# virsh detach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device detached successfully</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1111
PoC: KVM
2026-02-06T18:33:41Z
<p>Admin: /* Attach a USB Stick to the VM */</p>
<hr />
<div>kvm testsetup at home<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Converting a VHDX Windows Disk==<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# qemu-img info /home/vmadmin/vm-surf01.vhdx<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
*Convert the disk<br />
root@ts01:~# qemu-img convert -p -f vhdx -O qcow2 \<br />
/home/vmadmin/vm-surf01.vhdx \<br />
/var/lib/libvirt/images/vm-surf01.qcow2<br />
(100.00/100%)<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
<br />
==Install a Win10 VM from a previous disk==<br />
<br />
*Install01<br />
[[image:wininst01a.png|800px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|800px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|800px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|800px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|1200px]]<br />
<br />
==Attach a USB Stick to the VM==<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# lsusb<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# virsh attach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device attached successfully<br />
<br />
<br />
<br />
*Shutdown Win10<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# virsh dumpxml win10 | grep -A10 hostdev<br />
<hostdev mode='subsystem' type='usb' managed='no'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
<address type='usb' bus='0' port='4'/><br />
....<br />
<br />
*Start back win10<br />
root@ts01:~# virsh start win10<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|800px]]<br />
<br />
==Detach a USB Stick from the VM==<br />
<br />
*Detach device<br />
root@ts01:~# virsh detach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device detached successfully</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1110
PoC: KVM
2026-02-06T18:33:22Z
<p>Admin: </p>
<hr />
<div>kvm testsetup at home<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png|800px]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png|800px]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png|800px]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png|800px]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png|800px]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png|800px]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png|800px]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png|800px]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png|800px]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png|800px]]<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.<br />
<br />
==Converting a VHDX Windows Disk==<br />
<br />
<br />
*Inspect the disk:<br />
root@ts01:~# qemu-img info /home/vmadmin/vm-surf01.vhdx<br />
image: /home/vmadmin/vm-surf01.vhdx<br />
file format: vhdx<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 41 GiB<br />
cluster_size: 33554432<br />
Child node '/file':<br />
filename: /home/vmadmin/vm-surf01.vhdx<br />
protocol type: file<br />
file length: 41 GiB (43994054656 bytes)<br />
disk size: 41 GiB<br />
<br />
<br />
*Get the disk ready for KVM<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
*Convert the disk<br />
root@ts01:~# qemu-img convert -p -f vhdx -O qcow2 \<br />
/home/vmadmin/vm-surf01.vhdx \<br />
/var/lib/libvirt/images/vm-surf01.qcow2<br />
(100.00/100%)<br />
<br />
<br />
*Inspect the converting results<br />
root@ts01:~# qemu-img info /var/lib/libvirt/images/vm-surf01.qcow2<br />
image: /var/lib/libvirt/images/vm-surf01.qcow2<br />
file format: qcow2<br />
virtual size: 127 GiB (136365211648 bytes)<br />
disk size: 37.6 GiB<br />
cluster_size: 65536<br />
Format specific information:<br />
compat: 1.1<br />
compression type: zlib<br />
lazy refcounts: false<br />
refcount bits: 16<br />
corrupt: false<br />
extended l2: false<br />
Child node '/file':<br />
filename: /var/lib/libvirt/images/vm-surf01.qcow2<br />
protocol type: file<br />
file length: 37.6 GiB (40399208448 bytes)<br />
disk size: 37.6 GiB<br />
<br />
<br />
==Install a Win10 VM from a previous disk==<br />
<br />
*Install01<br />
[[image:wininst01a.png|800px]]<br />
<br />
*Install02<br />
[[image:wininst02.png|800px]]<br />
<br />
*Install03<br />
[[image:wininst03.png|800px]]<br />
<br />
<br />
*Install04<br />
[[image:wininst04a.png|800px]]<br />
<br />
<br />
<br />
*Win10 in running state<br />
[[image:Windows10afterclone.png|1200px]]<br />
<br />
==Attach a USB Stick to the VM==<br />
*Get attached devices<br />
**Note: We're after '''ID 0781:5591 SanDisk Corp.'''<br />
<br />
root@ts01:~# lsusb<br />
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 001 Device 002: ID 8087:800a Intel Corp. Hub<br />
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 002 Device 002: ID 3938:1032 MOSART Semi. 2.4G RF Keyboard & Mouse<br />
Bus 002 Device 003: ID 04b3:3025 IBM Corp. NetVista Full Width Keyboard<br />
Bus 002 Device 004: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
Bus 002 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller<br />
Bus 002 Device 006: ID 046d:c52b Logitech, Inc. Unifying Receiver<br />
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub<br />
Bus 003 Device 002: ID 17aa:1034 VIA Labs, Inc. USB Hub<br />
'''Bus 003 Device 003: ID 0781:5591 SanDisk Corp. Ultra Flair'''<br />
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub<br />
Bus 004 Device 002: ID 8087:8002 Intel Corp. 8 channel internal hub<br />
<br />
*Attach SanDisk to win10<br />
root@ts01:~# virsh attach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
'''<vendor id='0x0781'/>'''<br />
'''<product id='0x5591'/>'''<br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device attached successfully<br />
<br />
<br />
<br />
*Shutdown Win10<br />
root@ts01:~# virsh shutdown win10<br />
Domain 'win10' is being shutdown<br />
<br />
*Optional dump message to investigate the current settings<br />
root@ts01:~# virsh dumpxml win10 | grep -A10 hostdev<br />
<hostdev mode='subsystem' type='usb' managed='no'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
<address type='usb' bus='0' port='4'/><br />
....<br />
<br />
*Start back win10<br />
root@ts01:~# virsh start win10<br />
Domain 'win10' started<br />
<br />
*Get Status <br />
root@ts01:~# virsh list --all<br />
Id Name State<br />
---------------------------<br />
3 win10 running<br />
- debian13 shut off<br />
<br />
<br />
<br />
<br />
<br />
<br />
*Attached USB Stick to Win10<br />
[[image:Winusbb.png|1200px]]<br />
<br />
==Detach a USB Stick from the VM==<br />
<br />
*Detach device<br />
root@ts01:~# virsh detach-device win10 --file <(cat <<EOF<br />
<hostdev mode='subsystem' type='usb'><br />
<source><br />
<vendor id='0x0781'/><br />
<product id='0x5591'/><br />
</source><br />
</hostdev><br />
EOF<br />
) --persistent<br />
Device detached successfully</div>
Admin
https://coolscript.net/index.php?title=File:Wininst04a.png&diff=1109
File:Wininst04a.png
2026-02-06T18:33:01Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Winusbb.png&diff=1108
File:Winusbb.png
2026-02-06T18:32:18Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Windows10afterclone.png&diff=1107
File:Windows10afterclone.png
2026-02-06T18:32:08Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Wininst03.png&diff=1106
File:Wininst03.png
2026-02-06T18:31:45Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Wininst02.png&diff=1105
File:Wininst02.png
2026-02-06T18:31:33Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=File:Wininst01a.png&diff=1104
File:Wininst01a.png
2026-02-06T18:31:09Z
<p>Admin: </p>
<hr />
<div></div>
Admin
https://coolscript.net/index.php?title=Custom_Monitoring_Stack&diff=1103
Custom Monitoring Stack
2026-02-04T21:18:02Z
<p>Admin: </p>
<hr />
<div>= About Custom Monitoring Stack =<br />
<br />
'''A lightweight, Prometheus-native monitoring system designed for small environments'''<br><br><br />
'''Highlights:'''<br />
* '''Quick to set up''' – requires little more than a Prometheus container or a local Python Setup<br />
* '''Custom exporter mode''' – exposes metrics in native Prometheus format<br />
* '''Extensible plugin framework''' – simple, stateless checks (ping, port, process, http, cert) <br />
* '''Highly flexible custom scheduler''' – orchestrates both local and remote plugin execution<br />
* '''Minimal custom job runner''' – executes plugins remotely on behalf of the scheduler<br />
* '''Grafana-ready by design''' – dashboards and alerting via Grafana and Grafana Alertmanager follow standard Prometheus workflows<br />
* '''Mobile-friendly interface''' – optional mobile phone app available, view integrated with Grafana Alertmanager for basic alert monitoring and management<br />
<p></p><br />
<br />
<br />
__TOC__<br />
<br />
== Overview ==<br />
<br />
This system provides a lightweight monitoring framework built around:<br />
<br />
{| class="wikitable"<br />
! Component !! Purpose<br />
|-<br />
| Custom-Exporter || Receives metrics and exposes Prometheus format<br />
|-<br />
| Plugins || Perform individual checks (ping, port, HTTP, cert, process)<br />
|-<br />
| Custom-JobRunner (optional) || Executes plugins remotely via HTTP<br />
|-<br />
| Custom-Scheduler (optional) || Orchestrates execution and intervals<br />
|}<br />
<br />
Design principles:<br />
<br />
* Stateless checks<br />
* JSON-only interfaces<br />
* No SSH dependency<br />
* Automatic metric expiry<br />
* Prometheus-native output<br />
<br />
== Architecture ==<br />
<br />
=== Logical Flow ===<br />
<br />
The monitoring stack supports three execution models.<br />
<br />
----<br />
<br />
==== A: Direct execution via system scheduler (e.g. crontab) ====<br />
<br />
In this model, plugins are executed directly by the system scheduler.<br />
In this way the local system crontab is in use.<br />
<br>[[image:Custom-setup01.png]]<br><br><br />
<br />
Check Plugins are also able to write from remote hosts via the network to the Custom-Exporter<br />
<br><br>[[image:Custom-exporter01a.png]]<br><br />
<br />
<br />
Typical use cases:<br />
* Simple hosts<br />
* Minimal dependencies<br />
* One-off or legacy checks<br />
<br />
----<br />
<br />
==== B: Local execution using the Scheduler ====<br />
<br />
The Scheduler runs and orchestors locally and executes plugins directly on the same system.<br />
<br>[[image:Custom-setup02.png]]<br><br />
<br />
Typical use cases:<br />
* Centralized scheduling<br />
* Consistent intervals<br />
* Local-only monitoring<br />
<br />
----<br />
<br />
==== C: Remote execution using Scheduler and JobRunner ====<br />
<br />
In this model, the Scheduler coordinates execution and sends requests to the<br />
JobRunner. The JobRunner executes plugins on remote hosts and returns the<br />
results back to the Scheduler.<br />
<br />
The Custom-Scheduler then forwards metric payloads to the Custom-Exporter.<br />
The Custom-Exporter is not part of the execution chain and operates independently.<br />
<br />
<br>[[image:Custom-setup03.png]]<br><br />
<br />
Another sample which is a bit odd and should only display the capabilties of<br />
the check_plugins as they can write dierectly to the custom exporter via network.<br />
<br />
<br>[[image:Custom-setup3a.png]]<br><br />
<br />
=== Combined Local and Remote Execution ===<br />
<br />
'''The preferred execution model.'''<br />
<br />
As illustrated in the diagram below, the Custom Scheduler acts as the central<br />
execution authority between local plugins, remote JobRunner instances,<br />
and the Prometheus Custom Exporter.<br />
<br />
<br/>[[image:Custom-setup04a.png]]<br/><br/><br />
<br />
A single Scheduler instance can:<br />
<br />
* Execute selected checks locally or via remote<br />
* Dispatch other checks to one or more remote JobRunner instances<br />
* Collect and evaluate all plugin results centrally<br />
* Forward processed results to the Custom Exporter only after evaluation<br />
<br />
Local and remote execution paths are selected per check by scheduler<br />
configuration, not by a global operating mode.<br />
<br />
This enables mixed deployments where local services are checked directly,<br />
while remote, firewalled, or restricted hosts are monitored via JobRunner,<br />
without duplicating exporters or schedulers.<br />
<br />
=== Key characteristics ===<br />
<br />
* JobRunner appears only once in the execution chain<br />
* Downward flow represents execution requests<br />
* Upward flow represents returned plugin results<br />
* Custom-Scheduler receives and evaluates results<br />
* Custom-Exporter is triggered only after result processing<br />
* No direct plugin-to-exporter communication<br />
<br />
Typical use cases:<br />
<br />
* Remote hosts<br />
* Environments without SSH access<br />
* Firewalled or segmented networks<br />
* Centralized orchestration<br />
<br />
----<br />
<br />
== Custom-Exporter ==<br />
<br />
=== Purpose ===<br />
<br />
The exporter receives metrics via HTTP, stores them temporarily, and exposes them for Prometheus scraping.<br />
<br />
Metrics automatically expire if not refreshed.<br />
<br />
'''This is not a Pushgateway replacement.'''<br />
<br />
=== Features ===<br />
<br />
* HTTP push ingestion<br />
* Metric TTL (expiry)<br />
* Optional SQLite persistence<br />
* Thread-safe in-memory storage<br />
* Mandatory label validation<br />
* Optional check timestamp metrics<br />
<br />
=== Supported Metrics ===<br />
<br />
{| class="wikitable"<br />
! Metric !! Description<br />
|-<br />
| check_ping || ICMP latency (ms)<br />
|-<br />
| check_tcp_port || TCP connect latency (ms)<br />
|-<br />
| check_proc || Process memory (RSS bytes)<br />
|-<br />
| check_http || HTTP latency or negative status<br />
|-<br />
| check_cert_expiry_days || Days until TLS expiry<br />
|}<br />
<br />
=== Mandatory Labels ===<br />
<br />
{| class="wikitable"<br />
! Label !! Required !! Meaning<br />
|-<br />
| source || Yes || Origin of the check<br />
|}<br />
<br />
=== HTTP Endpoints ===<br />
<br />
{| class="wikitable"<br />
! Endpoint !! Method !! Description<br />
|-<br />
| /push || POST || Accept metric JSON<br />
|-<br />
| /metrics || GET || Prometheus scrape endpoint<br />
|}<br />
<br />
=== Example Payload ===<br />
<br />
<pre><br />
{<br />
"metric_name": "check_ping",<br />
"value": 12.3,<br />
"expiry": 300,<br />
"time_label": 1,<br />
"labels": {<br />
"host": "example.com",<br />
"source": "scheduler"<br />
}<br />
}<br />
</pre><br />
<br />
=== Security and Exposure ===<br />
<br />
If the custom exporter is exposed beyond localhost or a trusted internal network,<br />
it '''must''' be placed behind a reverse proxy such as nginx.<br />
<br />
Direct internet exposure of the custom exporter service is discouraged.<br />
<br />
The reverse proxy is responsible for:<br />
<br />
* TLS termination<br />
* Authentication (Basic Auth, mTLS, or equivalent)<br />
* IP allowlisting<br />
* Rate limiting<br />
* Request size limits<br />
<br />
The custom exporter itself intentionally remains simple and does not replace<br />
an edge security layer.<br />
<br />
----<br />
<br />
=== Custom Exporter Startup Arguments ===<br />
<br />
The custom exporter is configured '''exclusively via command-line arguments'''.<br />
There is no static configuration file.<br />
<br />
All runtime behaviour is derived from incoming metric payloads.<br />
<br />
=== Supported Arguments ===<br />
<br />
{| class="wikitable"<br />
! Argument !! Description !! Default<br />
|-<br />
| --db || Path to SQLite database for metric persistence || Disabled<br />
|}<br />
<br />
=== Startup Load Sequence ===<br />
<br />
# Parse CLI arguments<br />
# Initialize SQLite (if enabled)<br />
# Load non-expired metrics from DB<br />
# Start expiry cleanup thread<br />
# Start HTTP server<br />
<br />
== Plugins ==<br />
<br />
=== Common Behaviour ===<br />
<br />
All plugins:<br />
<br />
* Are standalone executables<br />
* Output structured JSON<br />
* Support retries<br />
* Support optional Basic Auth<br />
* Support no export, allowing the scheduler to forward payloads<br />
* Can run locally or remotely via the JobRunner<br />
<br />
=== Plugin Summary ===<br />
<br />
{| class="wikitable"<br />
! Plugin !! Function<br />
|-<br />
| check-ping || ICMP reachability<br />
|-<br />
| check-port || TCP connection latency<br />
|-<br />
| check-proc || Process memory usage<br />
|-<br />
| check-http || HTTP latency and content checks<br />
|-<br />
| check-cert || TLS certificate expiry<br />
|}<br />
<br />
=== check-ping ===<br />
<br />
* Uses system ping<br />
* Measures round-trip time<br />
* Retries on failure<br />
<br />
<pre><br />
check-ping --host google.de --expiry 300 --time-metric<br />
</pre><br />
<br />
=== check-port ===<br />
<br />
* TCP connect test<br />
* Measures latency<br />
* Supports arbitrary ports<br />
<br />
<pre><br />
check-port --host mail.example.com --port 587<br />
</pre><br />
<br />
=== check-proc ===<br />
<br />
* Uses psutil<br />
* Reports RSS memory<br />
* Fails if process is missing<br />
<br />
<pre><br />
check-proc --name dockerd<br />
</pre><br />
<br />
=== check-http ===<br />
<br />
* Measures HTTP latency<br />
* Optional regex content search<br />
* Optional redirect handling<br />
<br />
Return values:<br />
<br />
{| class="wikitable"<br />
! Value !! Meaning<br />
|-<br />
| >0 || Latency in ms<br />
|-<br />
| -2 || Pattern not found<br />
|-<br />
| -3xx || Redirect blocked<br />
|}<br />
<br />
<pre><br />
check-http -w https://example.com -p "Welcome"<br />
</pre><br />
<br />
=== check-cert ===<br />
<br />
* Opens TLS connection<br />
* Reads certificate notAfter field<br />
* Returns remaining days<br />
<br />
<pre><br />
check-cert --host example.com<br />
</pre><br />
<br />
----<br />
<br />
== Custom JobRunner (Optional) ==<br />
<br />
=== Purpose ===<br />
<br />
JobRunner allows controlled remote execution of plugins via HTTP.<br />
<br />
=== Features ===<br />
<br />
* HTTP API<br />
* Alias-based execution<br />
* Sync or async execution<br />
* Syslog logging<br />
* No shell injection<br />
* JSON output<br />
<br />
=== Example Request ===<br />
<br />
<pre><br />
POST /run?alias=check-ping&args=--host example.com<br />
</pre><br />
<br />
=== Alias Configuration ===<br />
<br />
<pre><br />
joblist:<br />
- alias: check-ping<br />
cmd: /usr/local/bin/check-ping<br />
</pre><br />
<br />
=== Configuration Encryption ===<br />
<br />
Sensitive values in **jobrunner.yaml** and **exporter.yaml** may be stored encrypted.<br />
<br />
If plaintext or decrypted values are detected during load, JobRunner<br />
will automatically encrypt them using **Fernet** and persist the<br />
encrypted form.<br />
<br />
This prevents accidental long-term storage of secrets in readable form<br />
while keeping configuration management simple.<br />
<br />
----<br />
<br />
=== Security and Exposure ===<br />
<br />
If JobRunner is accessible from outside the local host or trusted network,<br />
it **must** be placed behind a reverse proxy such as nginx.<br />
<br />
The reverse proxy should provide:<br />
<br />
* TLS termination<br />
* Authentication<br />
* IP-based access control<br />
* Rate limiting<br />
<br />
JobRunner deliberately avoids implementing complex security logic and<br />
assumes a protected deployment environment.<br />
<br />
----<br />
<br />
== Custom Scheduler (Optional) ==<br />
<br />
=== Purpose ===<br />
<br />
The scheduler coordinates which checks run, where, and how often.<br />
<br />
=== Configuration Files ===<br />
<br />
{| class="wikitable"<br />
! File !! Purpose<br />
|-<br />
| hosts.yaml || Host inventory<br />
|-<br />
| services.yaml || Service definitions<br />
|-<br />
| commands.yaml || Local command paths<br />
|-<br />
| jobrunner.yaml || Remote runners<br />
|-<br />
| exporter.yaml || Exporter targets<br />
|}<br />
<br />
=== Execution Logic ===<br />
<br />
# Load configuration<br />
# Replace %hostname% placeholders<br />
# Apply random startup delay<br />
# Execute checks at interval<br />
# Parse JSON output<br />
# Forward metrics to exporter<br />
<br />
=== Interval Syntax ===<br />
<br />
{| class="wikitable"<br />
! Format !! Meaning<br />
|-<br />
| 30s || 30 seconds<br />
|-<br />
| 5m || 5 minutes<br />
|-<br />
| 1h || 1 hour<br />
|-<br />
| 1d || 1 day<br />
|}<br />
<br />
----<br />
<br />
== Python Module Requirements ==<br />
<br />
=== Overview ===<br />
<br />
The monitoring stack is written in Python and relies on a small set of<br />
well-known third-party modules in addition to the Python standard library.<br />
<br />
{| class="wikitable"<br />
! Component !! Purpose !! Python Modules<br />
|-<br />
| Exporter || Prometheus metrics endpoint || flask, prometheus_client, requests, cryptography<br />
|-<br />
| Scheduler || Job orchestration || pyyaml<br />
|-<br />
| JobRunner || Remote execution API || flask, pyyaml, cryptography<br />
|-<br />
| Plugins || Monitoring checks || requests, psutil<br />
|}<br />
<br />
----<br />
<br />
=== Custom Exporter ===<br />
<br />
<pre><br />
from flask import Flask<br />
from prometheus_client import CollectorRegistry, generate_latest<br />
from prometheus_client.core import GaugeMetricFamily<br />
import requests<br />
import sqlite3<br />
</pre><br />
<br />
----<br />
<br />
=== Scheduler ===<br />
<br />
<pre><br />
import yaml<br />
import threading<br />
import subprocess<br />
import time<br />
</pre><br />
<br />
----<br />
<br />
=== JobRunner ===<br />
<br />
<pre><br />
from flask import Flask, request, jsonify<br />
from cryptography.fernet import Fernet<br />
import yaml<br />
import subprocess<br />
import logging<br />
</pre><br />
<br />
----<br />
<br />
=== Plugins ===<br />
<br />
<pre><br />
import requests<br />
import psutil<br />
import socket<br />
import ssl<br />
import argparse<br />
import json<br />
import time<br />
</pre><br />
<br />
----<br />
<br />
=== Python Version ===<br />
<br />
* Python 3.8 or newer<br />
* Python 3.11 recommended<br />
<br />
----<br />
<br />
=== Minimal Installation ===<br />
<br />
<pre><br />
pip install flask prometheus_client requests pyyaml psutil cryptography<br />
</pre><br />
<br />
== Summary of Custom Monitoring Stack ==<br />
<br />
This monitoring stack provides:<br />
<br />
* Stateless plugin execution<br />
* Prometheus-compatible metrics<br />
* Automatic metric expiry<br />
* Remote execution without SSH<br />
* Central scheduling<br />
* Clear JSON boundaries<br />
* Automatic self-healing encryption of sensitive configuration values<br />
<br />
It is intentionally simple, predictable, and easy to reason about.</div>
Admin
https://coolscript.net/index.php?title=PoC:_KVM&diff=1102
PoC: KVM
2026-02-04T20:55:01Z
<p>Admin: Created page with "kvm testsetup at home ==System== vmadmin@ts01:~$ sudo -i root@ts01:~# cat /etc/os-release PRETTY_NAME="Ubuntu 25.10" NAME="Ubuntu" VERSION_ID="25.10" VERSION="25.10 (Questing Quokka)" VERSION_CODENAME=questing ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/" SUPPORT_URL="https://help.ubuntu.com/" BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" UBUNTU_CODENAME..."</p>
<hr />
<div>kvm testsetup at home<br />
<br />
==System==<br />
vmadmin@ts01:~$ sudo -i<br />
root@ts01:~# cat /etc/os-release<br />
PRETTY_NAME="Ubuntu 25.10"<br />
NAME="Ubuntu"<br />
VERSION_ID="25.10"<br />
VERSION="25.10 (Questing Quokka)"<br />
VERSION_CODENAME=questing<br />
ID=ubuntu<br />
ID_LIKE=debian<br />
HOME_URL="https://www.ubuntu.com/"<br />
SUPPORT_URL="https://help.ubuntu.com/"<br />
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"<br />
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"<br />
UBUNTU_CODENAME=questing<br />
LOGO=ubuntu-logo<br />
<br />
==Install Packages==<br />
root@ts01:~# apt install -y qemu-kvm \<br />
libvirt-daemon-system \<br />
libvirt-clients \<br />
bridge-utils \<br />
virt-manager \<br />
cpu-checker<br />
<br />
===Libvirt===<br />
*Enable <br />
root@ts01:~# systemctl enable --now libvirtd<br />
*Status<br />
root@ts01:~# systemctl status libvirtd<br />
● libvirtd.service - libvirt legacy monolithic daemon<br />
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; preset: enabled)<br />
Active: active (running) since Wed 2026-02-04 19:32:47 CET; 52min ago<br />
Invocation: de3b4269f9074f69aef468813b833a4b<br />
TriggeredBy: ● libvirtd.socket<br />
● libvirtd-admin.socket<br />
● libvirtd-ro.socket<br />
Docs: man:libvirtd(8)<br />
https://libvirt.org/<br />
Main PID: 26280 (libvirtd)<br />
Tasks: 25 (limit: 32768)<br />
Memory: 24.1M (peak: 51M)<br />
CPU: 9.655s<br />
CGroup: /system.slice/libvirtd.service<br />
├─26280 /usr/sbin/libvirtd --timeout 120<br />
├─26388 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
└─26389 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper<br />
<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPDISCOVER(virbr0) 52:54:00:2a:f9:66<br />
Feb 04 20:03:14 ts01 dnsmasq-dhcp[26388]: DHCPOFFER(virbr0) 192.168.122.128 52:54:00:2a:f9:66root@ts01:~# kvm-ok<br />
<br />
<br />
<br />
<br />
<br />
===Virsh===<br />
*List<br />
root@ts01:~# virsh list --all<br />
virsh list --all<br />
Id Name State<br />
--------------------------<br />
*Node Info<br />
root@ts01:~# virsh nodeinfo<br />
CPU model: x86_64<br />
CPU(s): 24<br />
CPU frequency: 1197 MHz<br />
CPU socket(s): 1<br />
Core(s) per socket: 12<br />
Thread(s) per core: 2<br />
NUMA cell(s): 1<br />
Memory size: 63375964 KiB<br />
*Net List<br />
root@ts01:~# virsh net-list --all<br />
Name State Autostart Persistent<br />
--------------------------------------------<br />
default active yes yes<br />
<br />
*Set Start<br />
root@ts01:~# virsh net-start default<br />
root@ts01:~# virsh net-autostart default<br />
<br />
*Prepare for the first Debian Image<br />
root@ts01:~# cp /home/admin/debian-13.3.0-amd64-netinst.iso /var/lib/libvirt/images<br />
root@ts01:~# chmod 666 /var/lib/libvirt/images/debian-13.3.0-amd64-netinst.iso<br />
root@ts01:~# #Do this only on a sandbox<br />
root@ts01:~# chmod 777 /var/lib/libvirt/images<br />
<br />
===Prepare User===<br />
*User admin:<br />
vmadmin@ts01:~$ usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ sudo usermod -aG libvirt,kvm $USER<br />
vmadmin@ts01:~$ less /etc/groups<br />
<br />
*User admin in xrdp:<br />
virt-manager<br />
<br />
==Installation Screenshots==<br />
*VM Installer01<br />
[[image:KVMInstall03.png]]<br />
<br />
*VM Installer02<br />
[[image:KVMInstall04.png]]<br />
<br />
*VM Installer05<br />
[[image:KVMInstall05a.png]]<br />
<br />
*VM Installer06<br />
[[image:KVMInstall06b.png]]<br />
<br />
*VM Installer07<br />
[[image:KVMInstall07.png]]<br />
<br />
*VM Installer08<br />
[[image:KVMInstall08.png]]<br />
<br />
*VM Installer09<br />
[[image:KVMInstall09.png]]<br />
<br />
*VM Installer10<br />
[[image:KVMInstall10a.png]]<br />
<br />
*VM Installer11<br />
[[image:KVMInstall11.png]]<br />
<br />
*VM Installer12<br />
[[image:KVMInstall12.png]]<br />
<br />
<br />
<br />
==Advanced - Bridging==<br />
<br />
*advanced, make the vm bridged<br />
root@ts01:~# sudo virsh net-define /dev/stdin <<EOF<br />
<network><br />
<name>br0</name><br />
<forward mode="bridge"/><br />
<bridge name="br0"/><br />
</network><br />
EOF<br />
<br />
*Start<br />
root@ts01:~# sudo virsh net-start br0<br />
sudo virsh net-autostart br0<br />
Network br0 started<br />
<br />
Network br0 marked as autostarted<br />
<br />
*Shutdown running VM<br />
root@ts01:~# virsh shutdown debian13<br />
Domain 'debian13' is being shutdown<br />
<br />
*Edit<br />
virsh edit debian<br />
<br />
<br />
*Change:<br />
<interface type='network'><br />
<source network='default'/><br />
<br />
*To:<br />
<br />
<interface type='bridge'><br />
<source bridge='br0'/><br />
<model type='virtio'/><br />
</interface><br />
<br />
Domain 'debian13' XML configuration edited.</div>
Admin