mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-02-09 03:18:34 -05:00
804c173d52
* Use terraform in CLI to create QEMU cluster * Dont allow qemu creation on os/arch other than linux/amd64 * Allow usage of --name flag for QEMU resources Signed-off-by: Daniel Weiße <dw@edgeless.systems>
94 lines
2.1 KiB
Markdown
94 lines
2.1 KiB
Markdown
# Local image testing with QEMU / libvirt
|
|
|
|
To create local testing clusters using QEMU, some prerequisites have to be met:
|
|
|
|
- [qcow2 constellation image](/image/README.md)
|
|
- [libvirt setup](#setup-libvirt)
|
|
- [qemu-metadata-api container image](/hack/qemu-metadata-api/README.md)
|
|
|
|
## Setup libvirt
|
|
|
|
<details>
|
|
<summary>Ubuntu</summary>
|
|
|
|
### Install required packages
|
|
|
|
[General reference](https://ubuntu.com/server/docs/virtualization-libvirt)
|
|
|
|
```shell-session
|
|
sudo apt install qemu-kvm libvirt-daemon-system xsltproc
|
|
sudo systemctl enable libvirtd
|
|
sudo usermod -a -G libvirt $USER
|
|
# reboot
|
|
```
|
|
|
|
### Setup emulated TPM
|
|
|
|
Using a virtual TPM (vTPM) with QEMU only works if swtpm is version 0.7 or newer!
|
|
Ubuntu 22.04 currently ships swtpm 0.6.3, so you need to install swtpm [from launchpad](https://launchpad.net/~stefanberger/+archive/ubuntu/swtpm-jammy/).
|
|
|
|
1. Uninstall current version of swtpm (if installed)
|
|
|
|
```shell-session
|
|
sudo apt remove swtpm swtpm-tools
|
|
```
|
|
|
|
2. Add ppa (this command shows the ppa for Ubuntu 22.04 jammy but others are available)
|
|
|
|
```shell-session
|
|
sudo add-apt-repository ppa:stefanberger/swtpm-jammy
|
|
sudo apt update
|
|
```
|
|
|
|
3. Install swtpm
|
|
|
|
```shell-session
|
|
sudo apt install swtpm swtpm-tools
|
|
```
|
|
|
|
4. Patch configuration under `/etc/swtpm_setup.conf`
|
|
|
|
```shell-session
|
|
# Program invoked for creating certificates
|
|
create_certs_tool = /usr/bin/swtpm_localca
|
|
```
|
|
|
|
5. Patch ownership of `/var/lib/swtpm-localca`
|
|
|
|
```shell-session
|
|
sudo chown -R swtpm:root /var/lib/swtpm-localca
|
|
```
|
|
|
|
</details>
|
|
|
|
<details>
|
|
<summary>Fedora</summary>
|
|
|
|
```shell-session
|
|
sudo dnf install -y dnf-plugins-core
|
|
sudo dnf -y install qemu-kvm libvirt-daemon-config-network libvirt-daemon-kvm xsltproc swtpm
|
|
sudo usermod -a -G libvirt $USER
|
|
# reboot
|
|
```
|
|
|
|
</details>
|
|
|
|
## Update libvirt settings
|
|
|
|
Open `/etc/libvirt/qemu.conf` and change the following settings:
|
|
|
|
```shell-session
|
|
security_driver = "none"
|
|
```
|
|
|
|
Then restart libvirt
|
|
|
|
```shell-session
|
|
sudo systemctl restart libvirtd
|
|
```
|
|
|
|
## Misc
|
|
|
|
- List all domains: `virsh list --all`
|
|
- Destroy domain with nvram: `virsh undefine --nvram <name>`
|