Manjaro Difference between revisions of "Virt-manager"

Difference between revisions of "Virt-manager"

From Manjaro
(Remove unnecessary dependencies)
m (Using the verb rather than the noun)
 
(11 intermediate revisions by 5 users not shown)
Line 7: Line 7:
[[file:topbar_logo.png|left]]
[[file:topbar_logo.png|left]]
<br clear="all" />
<br clear="all" />
{{tip|Have you heard about Virtualbox to virtualize operating systems like Linux and Windows or Mac? It 'a good software, but not the only one! Don't forget VMware, Gnome Boxes and ...virt-manager. }}
{{BoxSuccess|tip|Have you heard about Virtualbox to virtualize operating systems like Linux and Windows or Mac? It 'a good software, but not the only one! Don't forget VMware, Gnome Boxes and ...virt-manager. }}




Line 51: Line 51:
<br clear="all" />
<br clear="all" />
2. Check if the 'virtualization parameters' are enabled on BIOS using  
2. Check if the 'virtualization parameters' are enabled on BIOS using  
LC_ALL=C lscpu | grep Virtualization
{{UserCmd|command=LC_ALL=C lscpu | grep Virtualization}}
3. How much memory I have. Check the RAM and verify that is at least 4GB.
3. How much memory I have. Check the RAM and verify that is at least 4GB.
<br clear="all" />
<br clear="all" />
Line 62: Line 62:
<br clear="all" />
<br clear="all" />
From terminal:
From terminal:
sudo pacman -S virt-manager
{{UserCmd|command=sudo pacman -S --needed virt-manager qemu-desktop libvirt edk2-ovmf dnsmasq iptables-nft}}
sudo pacman -S --asdeps qemu-desktop dnsmasq
For TPM support:
{{UserCmd|command=sudo pacman -S --asdeps swtpm}}
Enable and start service
Enable and start service
sudo systemctl enable libvirtd.service
{{UserCmd|command=sudo systemctl enable libvirtd.service}}
sudo systemctl start libvirtd.service
Add user to ''libvirt,'' ''libvirt-qemu'' and ''kvm'' groups to use the '''system'''-level virtual machines (qemu:///system).
Add user to ''libvirt'' group to use the '''system'''-level virtual machines (qemu:///system)
{{UserCmd|command=sudo usermod -a -G libvirt,libvirt-qemu,kvm $USER}}
sudo usermod -a -G libvirt $USER
Note that you will need to restart userspace for the groups to become active.  To restart userspace
{{UserCmd|command=systemctl soft-reboot}}
{{note|
{{note|
# You don't need this step to run system-level virtual machines. However, virt-manager will prompt for sudoer's password when launch if the user is not in the ''libvirt'' group   
# You don't need this step to run system-level virtual machines. However, virt-manager will prompt for sudoer's password when launch if the user is not in the ''libvirt'' group   
Line 74: Line 76:


= Using Virt-Manager for guest creation= <!--T:17-->
= Using Virt-Manager for guest creation= <!--T:17-->
<br clear="all" />
 
<!--T:25-->
0. Prepare installation image. If you're going to install Windows, prepare the [https://www.linux-kvm.org/page/WindowsGuestDrivers/Download_Drivers Virtio driver] image too.
0. Prepare installation image. If you're going to install Windows, prepare the [https://www.linux-kvm.org/page/WindowsGuestDrivers/Download_Drivers Virtio driver] image too.
{{tip|You can also find the [https://aur.archlinux.org/packages/virtio-win virtio-win] package in AUR. The image is located in '''/var/lib/libvirt/images''', which is the default [https://libvirt.org/storage.html#StorageBackendDir directory pool] of qemu:///system}}
{{tip|You can also find the [https://aur.archlinux.org/packages/virtio-win virtio-win] package in AUR. The image is located in '''/var/lib/libvirt/images''', which is the default [https://libvirt.org/storage.html#StorageBackendDir directory pool] of qemu:///system}}
<br clear="all" />
 
<!--T:26-->
1. Launch menu Virtual Machine Manager. It should already have a [https://libvirt.org/drvlxc.html LXC] connection. You can disconnect and remove it if you don't use LXC.
1. Launch menu Virtual Machine Manager. It should already have a [https://libvirt.org/drvlxc.html LXC] connection. You can disconnect and remove it if you don't use LXC.
<br clear="all" />
 
<!--T:27-->
2. Go to File, choose Add Connection and choose hypervisor QEMU/KVM, or QEMU/KVM user session if you don't want '''system'''-level virtual machines. Click on connect.
2. Go to File, choose Add Connection and choose hypervisor QEMU/KVM, or QEMU/KVM user session if you don't want '''system'''-level virtual machines. Click on connect.
<br clear="all" />
 
<!--T:28-->
3. You need directory pools to store the disk images of virtual machines or the ISO file of CD/DVD. Double click qemu/kvm, go on storage and add by clicking + the path to the folder where you have the iso and the folder where create the virtual machine.
3. You need directory pools to store the disk images of virtual machines or the ISO file of CD/DVD. Double click qemu/kvm, go on storage and add by clicking + the path to the folder where you have the iso and the folder where create the virtual machine.
<br clear="all" />
 
{{tip|My advice: use a different partition than the root. In case you need to reinstall your operating system you don't lose the VM that already ready-to-start.}}
<!--T:29-->
{{BoxInfo|tip|Advice: use a different partition than the root. In case you need to reinstall your operating system you don't lose the VM that already ready-to-start.}}
4. Click on create a new virtual machine: select '''Local install media (ISO image or CDROM)''', and select the installation ISO image and OS type (if not detected).
4. Click on create a new virtual machine: select '''Local install media (ISO image or CDROM)''', and select the installation ISO image and OS type (if not detected).
<br clear="all" />
 
<!--T:30-->
5. How many CPU assign and how much memory? (check the recommended requirements of O.S. that you are installing)
5. How many CPU assign and how much memory? (check the recommended requirements of O.S. that you are installing)
<br clear="all" />
 
<!--T:31-->
6. Create the file system of the virtual machine by selecting '''Select or create custom storage''' and click '''Manage...'''. Under your desired directory pool, create the volume of the virtual machine (default in qcow2 format).  How many GB? Check the recommended requirements O.S. you install.
6. Create the file system of the virtual machine by selecting '''Select or create custom storage''' and click '''Manage...'''. Under your desired directory pool, create the volume of the virtual machine (default in qcow2 format).  How many GB? Check the recommended requirements O.S. you install.
<br clear="all" />
 
<!--T:32-->
7.Assign a name to the machine and flag '''customize configuration before install'''. You have access to the screen with all the hardware that will be virtualized, do a check if there is all that is needed to initialize and launch the installer.
7.Assign a name to the machine and flag '''customize configuration before install'''. You have access to the screen with all the hardware that will be virtualized, do a check if there is all that is needed to initialize and launch the installer.
<br clear="all" />
 
<!--T:33-->
8. In ''Overview'', change the firmware to UEFI for future-proof capacity.
8. In ''Overview'', change the firmware to UEFI for future-proof capacity.
<br clear="all" />
 
<!--T:34-->
9. Change the type of SATA Disk 1 (the disk image of the creating virtual machine) to ''virtio'' for better performance. Change discard mode to ''unmap'', and then apply the change. You should notice the device name would change from SATA Disk 1 to VirtIO Disk 1.
9. Change the type of SATA Disk 1 (the disk image of the creating virtual machine) to ''virtio'' for better performance. Change discard mode to ''unmap'', and then apply the change. You should notice the device name would change from SATA Disk 1 to VirtIO Disk 1.
{{warning| If you're installing Windows, make sure to create a new SATA CDROM device and select the '''virtio-win''' image as the media, so that the Windows Installer can load the driver to recognize the disk. The virtio storage driver should be located at somewhere like ''E:\viostor\w10\amd64''}}
{{BoxWarning|Warning|If you're installing Windows, make sure to create a new SATA CDROM device and select the '''virtio-win''' image as the media, so that the Windows Installer can load the driver to recognize the disk. The virtio storage driver should be located at somewhere like ''E:\viostor\w10\amd64''}}
10. Set the NIC type to virtio too for better network performance.
10. Set the NIC type to virtio too for better network performance.
{{note| If you're installing Windows, once the system if ready, make sure to install all the virtio drivers so that your virtIO network can work normally}}
{{BoxInfo|Note|If you're installing Windows, once the system if ready, make sure to install all the virtio drivers so that your virtIO network can work normally}}
11. Add TPM chip, select '''TIS''' model through '''Emulated device''' backend.
11. Add TPM chip, select '''TIS''' model through '''Emulated device''' backend.
<br clear="all" />
 
<!--T:35-->
12. Add a watchdog to reboot the guest when it hangs. Leave the settings as default.
12. Add a watchdog to reboot the guest when it hangs. Leave the settings as default.
<br clear="all" />
 
<!--T:36-->
13. And a hardware RNG, to get entropy from the host.
13. And a hardware RNG, to get entropy from the host.
<br clear="all" />
 
<!--T:37-->
14. Click on the top to start installation.
14. Click on the top to start installation.
<br clear="all" />
 
{{warning|'''All these steps are visible on youtube.''' '''[https://youtu.be/DiUG_hlLk3c >>> PLAY THIS] [[File:YouTube_1.png|thumb|center|300px]]'''}}
<!--T:38-->
{{BoxWarning|Warning|'''All these steps are visible on youtube.''' '''[https://youtu.be/DiUG_hlLk3c >>> PLAY THIS] [[File:YouTube_1.png|thumb|center|300px]]'''}}


==Install guest additions== <!--T:21-->
==Install guest additions== <!--T:21-->
Once the VM is started and running you have to install the [https://www.spice-space.org/download.html spice guest tools].
Once the VM is started and running you have to install the [https://www.spice-space.org/download.html spice guest tools].
<br clear="all" />
 
<!--T:39-->
For Windows is a single package: spice-guest-tools-xxxx.exe
For Windows is a single package: spice-guest-tools-xxxx.exe
<br clear="all" />
 
<!--T:40-->
For linux are: spice-vdagent and xf86-video-qxl. If you visrtualize a linux distro you can install them with their package manager
For linux are: spice-vdagent and xf86-video-qxl. If you visrtualize a linux distro you can install them with their package manager
<br clear="all" />
 
<!--T:41-->
Visit: '''[http://www.spice-space.org/download.html Spice download]'''
Visit: '''[http://www.spice-space.org/download.html Spice download]'''


Line 143: Line 162:
For example, my CPU has 1 socket, 8 cores, and 16 threads in total. The automatic topology assigns 4 sockets, 1 core, and 1 thread to my guest. After changing it to 1 socket, 4 cores, and 1 thread, the performance increases significantly.
For example, my CPU has 1 socket, 8 cores, and 16 threads in total. The automatic topology assigns 4 sockets, 1 core, and 1 thread to my guest. After changing it to 1 socket, 4 cores, and 1 thread, the performance increases significantly.
<br clear="all" />
<br clear="all" />
=Lab: Windows 11= <!--T:42-->
Windows Setup provides for setting up virtual Windows system for lab purpose. It can be for testing software or for pentesting.
<!--T:43-->
For a continued use of Windows you will need a valid license key to run a virtualized Windows.
==Prepare== <!--T:44-->
<!--T:45-->
* Create a new virtual machine
* Select a Windows 11 ISO file
* Accept the defaults clicking Next until you reach the final screen
* Tick the box Customize configuration before install and click Finish
* In the Overview pane - set vm firmware to BIOS and click Apply
* Click the button Begin Installation
==Install== <!--T:46-->
<!--T:47-->
Before starting the installer press ShiftF10 so launch the Windows Cmd utility and launch regedit.
<!--T:48-->
* Expand HKEY_LOCAL_MACHINE\SYSTEM\Setup
* Add new key named LabConfig
* Add new DWORD value with name BypassTPMCheck and change the value to 1.
* Add new DWORD value with name BypassRAMCheck and change the value to 1.
* Add new DWORD value with name BypassSecureBootCheck and change the value to 1.
<!--T:49-->
Close the registry editor and exit the shell, then continue the installer
==Final Setup== <!--T:50-->
During last stage the installer will insist in network access but you may want use a local account instead of the required Microsoft account.
<!--T:51-->
This can be disabled using the Cmd utility ShiftF10
<!--T:53-->
* enter OOBE\BYPASSNRO and press Enter
* close the Cmd utility
* back in the setup window click I don't have internet


= References = <!--T:18-->
= References = <!--T:18-->

Latest revision as of 16:33, 1 November 2024

Other languages:
English • ‎Türkçe • ‎русский

Overview

Topbar logo.png


tip
Have you heard about Virtualbox to virtualize operating systems like Linux and Windows or Mac? It 'a good software, but not the only one! Don't forget VMware, Gnome Boxes and ...virt-manager.


Virt-manager uses libvirt and it's a manager of many hypervisors, including the one that we want to use here: QEMU/KVM.


Why do I need to virtualize?

  • To learn about a new O.S.
  • To configure a hardware that has a setup only for that operating system
  • To use a software that only works on another

I want to know more

Hypervisor 1.png


1. Virtualization
2. Hypervisor
3. Virtual machine

What we absolutely must know


1. What is my CPU. Identify it and make sure it's at least a quad core. TAKE A LOOK AT CPU-World
2. Check if the 'virtualization parameters' are enabled on BIOS using

user $ LC_ALL=C lscpu COPY TO CLIPBOARD


3. How much memory I have. Check the RAM and verify that is at least 4GB.
4. The amount of free space on my hard drive. The virtual machine can use a disk image file so extra partitions are not necessary.

Note
You can also use raw partition specific for virtual machines. See partitioning for more information

5. The minimum hardware requirements of the operating system you want to install as a virtual machine.

Install virt-manager, qemu and all dependencies


From terminal:

user $ sudo pacman -S --needed virt-manager qemu-desktop libvirt edk2-ovmf dnsmasq iptables-nft COPY TO CLIPBOARD


For TPM support:

user $ sudo pacman -S --asdeps swtpm COPY TO CLIPBOARD


Enable and start service

user $ sudo systemctl enable libvirtd.service COPY TO CLIPBOARD


Add user to libvirt, libvirt-qemu and kvm groups to use the system-level virtual machines (qemu:///system).

user $ sudo usermod -a -G libvirt,libvirt-qemu,kvm $USER COPY TO CLIPBOARD


Note that you will need to restart userspace for the groups to become active. To restart userspace

user $ systemctl soft-reboot COPY TO CLIPBOARD


Note
  1. You don't need this step to run system-level virtual machines. However, virt-manager will prompt for sudoer's password when launch if the user is not in the libvirt group
  2. You can also create user-level virtual machines (qemu:///session) and use without sudoer's privelige. However, some features such as VirtioFS file sharing may be unavailable in qemu:///session

Using Virt-Manager for guest creation

0. Prepare installation image. If you're going to install Windows, prepare the Virtio driver image too.


Tip
You can also find the virtio-win package in AUR. The image is located in /var/lib/libvirt/images, which is the default directory pool of qemu:///system

1. Launch menu Virtual Machine Manager. It should already have a LXC connection. You can disconnect and remove it if you don't use LXC.

2. Go to File, choose Add Connection and choose hypervisor QEMU/KVM, or QEMU/KVM user session if you don't want system-level virtual machines. Click on connect.

3. You need directory pools to store the disk images of virtual machines or the ISO file of CD/DVD. Double click qemu/kvm, go on storage and add by clicking + the path to the folder where you have the iso and the folder where create the virtual machine.


tip
Advice: use a different partition than the root. In case you need to reinstall your operating system you don't lose the VM that already ready-to-start.

4. Click on create a new virtual machine: select Local install media (ISO image or CDROM), and select the installation ISO image and OS type (if not detected).

5. How many CPU assign and how much memory? (check the recommended requirements of O.S. that you are installing)

6. Create the file system of the virtual machine by selecting Select or create custom storage and click Manage.... Under your desired directory pool, create the volume of the virtual machine (default in qcow2 format). How many GB? Check the recommended requirements O.S. you install.

7.Assign a name to the machine and flag customize configuration before install. You have access to the screen with all the hardware that will be virtualized, do a check if there is all that is needed to initialize and launch the installer.

8. In Overview, change the firmware to UEFI for future-proof capacity.

9. Change the type of SATA Disk 1 (the disk image of the creating virtual machine) to virtio for better performance. Change discard mode to unmap, and then apply the change. You should notice the device name would change from SATA Disk 1 to VirtIO Disk 1.

Warning
If you're installing Windows, make sure to create a new SATA CDROM device and select the virtio-win image as the media, so that the Windows Installer can load the driver to recognize the disk. The virtio storage driver should be located at somewhere like E:\viostor\w10\amd64

10. Set the NIC type to virtio too for better network performance.

Note
If you're installing Windows, once the system if ready, make sure to install all the virtio drivers so that your virtIO network can work normally

11. Add TPM chip, select TIS model through Emulated device backend.

12. Add a watchdog to reboot the guest when it hangs. Leave the settings as default.

13. And a hardware RNG, to get entropy from the host.

14. Click on the top to start installation.


Warning
All these steps are visible on youtube. >>> PLAY THIS
YouTube 1.png

Install guest additions

Once the VM is started and running you have to install the spice guest tools.

For Windows is a single package: spice-guest-tools-xxxx.exe

For linux are: spice-vdagent and xf86-video-qxl. If you visrtualize a linux distro you can install them with their package manager

Visit: Spice download

Tune the display settings

The default model of display card is QXL. If your virtual machine is Linux system, you can change it to virtio and enable 3D acceleration for better graphic performance.
Windows virtual machine, however doesn't support virtio display yet. Nevertheless, we can increase its VGA memory from the default 16 MB to 64 MB to allow higher display resolution and slightly better 2D graphical performance.
To do so, we need to edit the XML file of the virtual machine.

  1. In virt-manager, go to edit > preference, and check Enable XML edit.
  2. In virtual machine details, go to display card. Under the XML tab, change the value of vgamem to 65536, then apply the change.


File sharing between host and guest

For Linux guests, Virtio-FS and 9p are available for file sharing. See ArchWiki for more information.
For Windows guest, the easiest way to share file between host and guest is through SAMBA.

  1. Create a SAMBA usershare
  2. In Windows guest, enter \\192.168.122.1 in the file explorer, and you should be able to see the usershare on your host.
  3. Map that SAMBA usershare to a new drive, and connect to it with the appropriate credential. That's it.

Check this article for more information.

Optimize vCPU

Check this article to customize vCPU topology for better performance.
For example, my CPU has 1 socket, 8 cores, and 16 threads in total. The automatic topology assigns 4 sockets, 1 core, and 1 thread to my guest. After changing it to 1 socket, 4 cores, and 1 thread, the performance increases significantly.

Lab: Windows 11

Windows Setup provides for setting up virtual Windows system for lab purpose. It can be for testing software or for pentesting.

For a continued use of Windows you will need a valid license key to run a virtualized Windows.

Prepare

  • Create a new virtual machine
  • Select a Windows 11 ISO file
  • Accept the defaults clicking Next until you reach the final screen
  • Tick the box Customize configuration before install and click Finish
  • In the Overview pane - set vm firmware to BIOS and click Apply
  • Click the button Begin Installation

Install

Before starting the installer press ShiftF10 so launch the Windows Cmd utility and launch regedit.

  • Expand HKEY_LOCAL_MACHINE\SYSTEM\Setup
  • Add new key named LabConfig
  • Add new DWORD value with name BypassTPMCheck and change the value to 1.
  • Add new DWORD value with name BypassRAMCheck and change the value to 1.
  • Add new DWORD value with name BypassSecureBootCheck and change the value to 1.

Close the registry editor and exit the shell, then continue the installer

Final Setup

During last stage the installer will insist in network access but you may want use a local account instead of the required Microsoft account.

This can be disabled using the Cmd utility ShiftF10

  • enter OOBE\BYPASSNRO and press Enter
  • close the Cmd utility
  • back in the setup window click I don't have internet

References

Virt-manager
Libvirt
Qemu
x86 virtualization
Intel-vt
Amd-v

Retrieved from "https://wiki.manjaro.org/index.php?title=Virt-manager&oldid=53651"
Cookies help us deliver our services. By using our services, you agree to our use of cookies.