[2024-feb-29] Sad news: Eric Layton aka Nocturnal Slacker aka vtel57 passed away on Feb 26th, shortly after hospitalization. He was one of our Wiki's most prominent admins. He will be missed.

Welcome to the Slackware Documentation Project

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
howtos:emulators:helper_script_for_managing_qemu_virtual_machines [2016/08/31 14:37 (UTC)] louigi600howtos:emulators:helper_script_for_managing_qemu_virtual_machines [2016/09/02 08:04 (UTC)] – [Sources] louigi600
Line 252: Line 252:
 As mentioned above, getting bugged with all the details required for configuring a new VM can be a a killer unless you do it really often so here's how I go about it in a similar fashion to creating the basic configuration. The idea is to reduce the amount of code written specifically to each VM option allowing for a relatively slender script and ease to add new VM options if required. As mentioned above, getting bugged with all the details required for configuring a new VM can be a a killer unless you do it really often so here's how I go about it in a similar fashion to creating the basic configuration. The idea is to reduce the amount of code written specifically to each VM option allowing for a relatively slender script and ease to add new VM options if required.
  
-Unfortunately here things are a little more complicated because different qemu-system-* produce slightly different output when prompted with help and because most of the VM options require a separate dialog asking for some specific action nonetheless a lot of the code and data required is self generated the **PARAMS** variable. The only specific code is to work around the differences between the various qemu-system-*.+Unfortunately here things are a little more complicated because different qemu-system-* produce slightly different output when prompted with help and because most of the VM options require a separate dialog asking for some specific action nonetheless a lot of the code required is self generated from the **PARAMS** variable. The only specific code is to work around the differences between the various qemu-system-* emulators.
  
   PARAMS="EMULATOR MACHINE CPU MEM KEYBOARD DISK DISKSIZE CDROM BIOS BOOT_ORDER KVM DISPLAY VNCPW USB KERNEL INITRD APPEND MAC"   PARAMS="EMULATOR MACHINE CPU MEM KEYBOARD DISK DISKSIZE CDROM BIOS BOOT_ORDER KVM DISPLAY VNCPW USB KERNEL INITRD APPEND MAC"
Line 286: Line 286:
     EMULATOR=$(< $DIALOG_OUTPUT)     EMULATOR=$(< $DIALOG_OUTPUT)
     case $EMULATOR in     case $EMULATOR in
-    qemu-system-i*86)  +    qemu-system-i*86|qemu-system-x86_64) 
-      MACHINE=pc +
-      grep -qwE "vmx|svm" /proc/cpuinfo && KVM=1 || KVM=0 +
-      [ $KVM -eq 1 ] && CPU=host || CPU=pentium3 +
-      BIOS="file=/usr/share/qemu/bios.bin" +
-      BOOT_ORDER="c" +
-    ;; +
-    qemu-system-x86_64)+
       MACHINE=pc       MACHINE=pc
       grep -qwE "vmx|svm" /proc/cpuinfo && KVM=1 || KVM=0       grep -qwE "vmx|svm" /proc/cpuinfo && KVM=1 || KVM=0
Line 364: Line 357:
  
 ===== Networking ===== ===== Networking =====
-As mentioned above I want my VMs to look like real machines on the LAN the host server is connected on, this will require bridging the tap devices. Newer versions of qemu can automatically create and use tap0 but I don't think it would do the bridging right and besides that it will make a mess if you run multiple VMs at once. If you intend to run several VMs at once that all look like reals servers on the LAN you will need to write qemu-ifup and  qemu-ifdown scripts in /etc to deal with that.+As mentioned above I want my VMs to look like real machines on the LAN the host server is connected on, this will require bridging the tap devices. Newer versions of qemu can automatically create and use tap device but I it will not do bridging and besides that it you need to tell it which tap device anyway. If you intend to run several VMs at once that all look like real servers on the LAN you will need to write qemu-ifup and  qemu-ifdown scripts in /etc to deal with that.
  
-I like to write a single script qemu-nethelper and have qemu-ifup and qemu-ifdown linked to it.+I like to write a single script qemu-nethelper and have qemu-ifup and qemu-ifdown linked to it. The qemu-system-* emulators all execute /etc/qemu-ifup when bringing up a VM with a tap device, with the tap device parameter, and similarly execute /etc/qemu-ifdown when taking down a VM with a tap device.  
 + 
 +As mentioned above newer versions of qemu (I think 1.1+) automatically create the tap device so the qemu-nethelper only needs to do the bridging. Now to make things a lot easier I like to have the host on which I run VMs with br0 configured at boot and then the qemu-nethelper only needs to add the tap device to the bridge, making it extremely simple. If br0 is already configured at boot then you need not restart any iptables so long as the chains use the bridge devices and the kernel has support for ebtables.
  
   #!/bin/bash   #!/bin/bash
   NAME=$(basename $0)   NAME=$(basename $0)
-  [ $(/usr/bin/id -u) -ne 0 ] && SUDO="sudo " || SUDO="" 
   tun_up ()   tun_up ()
-  { $SUDO /sbin/ifconfig $1 0.0.0.0 promisc up+  { /sbin/ifconfig $1 0.0.0.0 promisc up
     /usr/bin/sleep 0.5     /usr/bin/sleep 0.5
-    $SUDO /sbin/brctl addif br0 $1+    /sbin/brctl addif br0 $1
   }   }
      
   tun_down ()   tun_down ()
-  { $SUDO /sbin/ifconfig $1 down+  { /sbin/ifconfig $1 down
     /usr/bin/sleep 0.5     /usr/bin/sleep 0.5
-    $SUDO /sbin/brctl delif br0 $1 +    /sbin/brctl delif br0 $1 
   }   }
      
Line 389: Line 383:
   esac   esac
  
 +===== Using Qemu from Unprivileged Users =====
 +Using root for doing your everyday tasks is commonly discouraged so let's see how we can work around using qemu from unprivileged users.
 +Some say that it's sufficient to give sudo execution on /etc/qemi-if* but that not really enough because qemu-system-* needs to run as root or it will not be able to create the taps and access other resources. Although it is technically possible to give an unprivileged user sufficient privileges to execute correctly qemu-system-* emulators it is much easier to give users the sudo right to run qemu-system-* as privileged user.
 +
 +  User_Alias QEMUERS = al, john, jack
 +  
 +  Cmnd_Alias QEMUCMD = /usr/bin/qemu-system-*
 +  
 +  QEMUERS ALL=(ALL) NOPASSWD: QEMU
 +
 +This would be sufficient to run the VMs as any of the unprivileged users in QEMUERS user alias (al, john, jack) but the management script would need to run sudo qemu-system-* .... this is easy to obtain:
 +
 +  [ $(/usr/bin/id -u) -ne 0 ] && CMD="sudo qemu-system-.... " || CMD="qemu-system-...."
 +  eval $(echo "$CMD &")
 +
 +Alternatively you could give privileges to execute the management script as root.
 ===== Examples ===== ===== Examples =====
 Here are examples of the dialogs that user would see wile creating, starting, stopping and deleting a VM. Here are examples of the dialogs that user would see wile creating, starting, stopping and deleting a VM.
Line 607: Line 617:
  
 ====== Sources ====== ====== Sources ======
 +I've a blog entry on LQ where I talk a little more extensively on minimizing the code in bash scripts.
 +[[http://www.linuxquestions.org/questions/blog/louigi600-808242/minimize-the-amount-of-code-in-your-bash-scripts-37137/|Minimize the amount of code in your bash scripts ]]
  
 <!-- If you are copying information from another source, then specify that source --> <!-- If you are copying information from another source, then specify that source -->
 howtos:emulators:helper_script_for_managing_qemu_virtual_machines ()