Use QEMU user-mode networking for contest VMs - #684
Draft
matusmarhefka wants to merge 1 commit into
Draft
matusmarhefka wants to merge 1 commit into
matusmarhefka wants to merge 1 commit into
Conversation
Remove setup of the custom libvirt NAT and DHCP network. Configure VM installs and image imports with a QEMU user network and virtio NIC. Select a localhost port for access to guest port 22, read that port from the domain XML when starting an existing VM, and report port conflicts. Update SSH, SCP, rsync, Ansible, snapshot and reboot paths, and `contest-sshvm` to use localhost and the selected port. Check the SSH banner to detect when guest SSH stops and starts since QEMU may keep accepting connections during a guest reboot. Bind HTTP servers and Podman registries to host loopback. VM guests see the host at `10.0.2.2`, so use that address for the served YUM repository, datastreams and container images. Keep the osbuild-composer repository URL on localhost because composer accesses it from the host. Remove libvirt network-driver and firewalld test requirements, remove HTTP-server firewall changes, and update the SSH documentation wrt VM access through QEMU user-mode networking. Resolves RHSecurityCompliance#399
Contributor
Author
|
/packit test -i productization |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Remove setup of the custom libvirt NAT and DHCP network. Configure VM installs and image imports with a QEMU user network and virtio NIC. Select a localhost port for access to guest port 22, read that port from the domain XML when starting an existing VM, and report port conflicts.
Update SSH, SCP, rsync, Ansible, snapshot and reboot paths, and
contest-sshvmto use localhost and the selected port. Check the SSH banner to detect when guest SSH stops and starts since QEMU may keep accepting connections during a guest reboot.Bind HTTP servers and Podman registries to host loopback. VM guests see the host at
10.0.2.2, so use that address for the served YUM repository, datastreams and container images. Keep the osbuild-composer repository URL on localhost because composer accesses it from the host.Remove libvirt network-driver and firewalld test requirements, remove HTTP-server firewall changes, and update the SSH documentation wrt VM access through QEMU user-mode networking.
Resolves #399