Tag Info

Hot answers tagged

4

When the user's home directory is encrypted with ecryptfs sshd cannot read the authorized_keys file from the user's home directory before the home directory has been mounted. During login sshd will use pam to authenticate the user, and pam will use the password entered by the user to mount the encrypted home directory. This is problematic if you want to ...


3

I got so inspired by kasperd's idea yesterday that I made this: https://github.com/bjornnorman/decryptfs-ssh I've tried it out a little already and it seems to work brilliantly. It makes it really simple to add/remove keys for passwordless decryption of ecryptfs home folders when using SSH... Like kasperd's original, it hasn't been exposed to a peer ...


3

As you are using Openstack, when you create a flavour you can specify the rxtx_factor. My understanding is that this is used to calculate a percentage of the rtx_cap on the network that is available to the VM. I'm not sure if all hypervisors will support it however, though so you may need to do some additional digging to see if KVM does.


3

I would say you have a lot more to consider than just hard drives. You are intending to transfer to a completely different virtualization package, which will take much more than a days worth of work. Theoretically you would need to: - Transcribe the VM configurations (more than likely by hand) from Microsoft's spec to QEmu's spec. - Convert the VHD images ...


2

As Michael Hampton suggested, instead of using KVM directly use virsh, which simplifies handling virtual machines (not only KVM) a lot. As root, first install the needed packages: apt-get install virtinst libvirt-bin You might want to have network-access on your guest machine you will need to have to create a bridge interface on your Host-system (let's ...


2

...fortunately the process is pretty straightforward. Prerequisites/preparation In order to increase cpu count during runtime you need to configure the VM to have a "maximum" vcpu count and a lower "current" cpu count. An example xml extract (modify using virsh edit ): <vcpu placement='static' current='4'>16</vcpu> Perform the increase ...


1

This is not generally done by pinging or ARP trickery. It's done by paperwork. Every request for IPv4 address assignments requires detailed justification, showing that existing addresses are fully utilized and that (in the case of ARIN) the new assignment will be 80% utilized within 30 days. See the ARIN Number Resource Policy Manual for complete details. ...


1

You don't need to be messing with <memtune><hard_limit>. This is actually a rather dangerous setting when applied to KVM guests. I would remove that section immediately. However, users of QEMU and KVM are strongly advised not to set this limit as domain may get killed by the kernel if the guess is too low. To determine the memory needed for a ...


1

CPU pinning ensures a VM will only get CPU time from a specific CPU or set of CPUs. Unless you have a very specific reason to pin, there usually is no need to do that.


1

I'm sure you can have a performance gain if you pin each VM to specific CPU cores, as well as restrict the hypervisor to one or two other cores. That would allow your VM's to optimally benefit from the L1 and L2 caches which are CPU specific and they won't be bothered by interrupts from NIC's and storage controllers. On the other hand I expect the ...


1

Yes, that is possible. You just need to use a tool like virt-v2v to make the image conversion. Additionally, if you google "convert hyper-v to rhel kvm" you'll find many tutorials.


1

Your KVM instances should be able to saturate your hosts network connection with no issues. My first recommendation here is to upgrade both the host and guest's kernel. The stock CentOS 6.5 kernel does not have great performance for KVM. I'd suggest kernel-lt from ELRepo (or kernel-ml if you're feeling brave). This should give you a decent boost in ...


1

All of the "extra" rules you are seeing were added by the libvirt daemon to support (and secure) virtual networking for your virtual machine guests. You generally do not need to worry about these rules (and should not try to persist them, as then they would be duplicated at next boot). It's also clear that all of your persistent firewall rules were added to ...


1

The easy way to do this is to run virt-manager on your desktop and set it up with a remote ssh connection to the hypervisor, the server running your new virtual machine. The hard way to do this is by running virsh vncdisplay guest_name on the server. This will give you VNC connection information. But, you may find this unusable as it may only be bound to ...


1

Old question, I know. But to answer anyway: you cannot have two default gateways. That's where the RTNETLINK answers: File exists error comes from when issuing ifdown and ifup. Remove the gateway 10.10.20.1 line from either eth0 or eth1. And more general: /etc/init.d/networking restart or service networking restart were never really supported and are not ...


1

Apparently, if you set cache=NONE for a disk image file on any host filesystem that does not support Direct IO, Virt-Manager will currently give a not very helpful error message saying "Something something... Invalid Argument" and refuse to start the Guest VM. One example of such a filesystem --that does not support Direct IO-- is the tmpfs. Another such ...



Only top voted, non community-wiki answers of a minimum length are eligible