<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>KernelVirtualMachine</title><revhistory><revision><revnumber>1</revnumber><date>2012-12-09 07:20:12</date><authorinitials>ClintonEbadi</authorinitials><revremark>vaguely useful documentation of our use of kvm</revremark></revision></revhistory></articleinfo><para>As is the fashion, HCoop is now using <ulink url="http://www.linux-kvm.org/page/Main_Page">KVM</ulink> managed by <ulink url="http://libvirt.org/">Libvirt</ulink> to make managing our systems much easier. </para><caution><para>This document represents the state of things, not any best practices. In particular, management of nodes and our network bridging setup probably need work </para></caution><section><title>Network Bridging</title><para>Some information: <ulink url="https://bugzilla.redhat.com/show_bug.cgi?id=512206"/> </para><para>We are currently using a single bridge <code>br0</code> that works atop the primary ethernet. Each kvm is then given a sub-device named <code>br0:$hostname</code>. <ulink url="https://wiki.hcoop.net/KernelVirtualMachine/ClintonEbadi#">ClintonEbadi</ulink> suspects there is something wrong with this. If any network wizards know better, please mail hcoop-sysadmin and let us know. </para></section><section><title>Node Management</title><itemizedlist><listitem><para>Account <code>clinton_admin</code> is in the <code>libvirt</code> group on fritz  </para><itemizedlist><listitem><para>This permits <ulink url="https://wiki.hcoop.net/KernelVirtualMachine/ClintonEbadi#">ClintonEbadi</ulink> to manage kvms as his user remotely using <ulink url="http://virt-manager.et.redhat.com/">virt-manager</ulink>. </para></listitem></itemizedlist></listitem></itemizedlist><para>We only have one virtualization node now, and soon will have but two. Therefore adding admins who are permitted to manage libvirt to the groups file on each node isn't the worst thing. We probably should use a config package, domtool, or centralized groups database to make it cleaner. </para><!--rule (<hr>) is not applicable to DocBook--><para> <ulink url="https://wiki.hcoop.net/KernelVirtualMachine/CategorySystemAdministration#">CategorySystemAdministration</ulink> <ulink url="https://wiki.hcoop.net/KernelVirtualMachine/CategoryNeedsWork#">CategoryNeedsWork</ulink> </para></section></article>