记录一下，谨防忘记。
1 2 3 4 5 6 7 8 9 10 11 12 13 14 | virt-install \ --accelerate \ --name debian8 \ --ram 1024 \ --controller type=scsi,model=virtio-scsi \ --disk path=/home/date/debian8.qcow2,size=10,sparse=true,cache=none,bus=scsi \ --vcpus 1 \ --os-type linux \ --os-variant generic \ --network bridge=br0 \ --graphics none \ --console pty,target_type=serial \ --location 'http://ftp.nl.debian.org/debian/dists/jessie/main/installer-amd64/' \ --extra-args 'console=ttyS0,115200n8 serial' |
centos 7安装好KVM之后还要安装虚拟机，通过VNC连接手动安装centos 7虚拟机太麻烦了，所以无人值守安装是做好的。简单记录下。
无人值守安装centos 7前提是要安装KVM，并且能手动创建虚拟机。
首先创建centos7.ks.cfg文件 vi /root/centos7.ks.cfg
(more…)
看到linode都由xen转移到kvm，刚好最近新买了台服务器，就不用xen了，记录一下安装centos 7安装KVM。
新安装的centos 7怎么初始化就不说，但是要禁止selinux。
1 | sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config |
yum安装KVM
1 | yum install kvm virt-manager libvirt virt-install qemu-kvm |
接着就是桥接网卡，将/etc/sysconfig/network-scripts/ifcfg-eth0 改为
1 2 3 4 5 6 | DEVICE=eth0 TYPE=Ethernet ONBOOT=yes BOOTPROTO=none BRIDGE=br0 IPV6INIT=yes |
运行systemctl status libvirtd出现如下错误
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 | systemctl status libvirtd libvirtd.service - Virtualization daemon Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled) Active: active (running) since Thu 2015-09-17 20:07:25 CST; 6h ago Docs: man:libvirtd(8) http://libvirt.org Main PID: 807 (libvirtd) CGroup: /system.slice/libvirtd.service ├─807 /usr/sbin/libvirtd ├─887 /sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --dhcp-script=/usr/libexec/libvirt_leaseshelper └─888 /sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --dhcp-script=/usr/libexec/libvirt_leaseshelper Sep 18 02:11:59 pandora libvirtd[807]: libvirt version: 1.2.8, package: 16.el7_1.4 (CentOS BuildSystem <http://bugs.centos.org>, 2015-09-15-14:00:05, worker1.bsys.centos.org) Sep 18 02:11:59 pandora libvirtd[807]: failed to connect to monitor socket: No such process Sep 18 02:11:59 pandora libvirtd[807]: internal error: process exited while connecting to monitor: 2015-09-17T18:11:59.609939Z qemu-kvm: -chardev pty,id=charserial0: Failed to create chardev Sep 18 02:14:39 pandora libvirtd[807]: failed to connect to monitor socket: No such process Sep 18 02:14:39 pandora libvirtd[807]: internal error: process exited while connecting to monitor: 2015-09-17T18:14:39.583154Z qemu-kvm: -chardev pty,id=charserial0: Failed to create chardev Sep 18 02:17:24 pandora libvirtd[807]: failed to connect to monitor socket: No such process Sep 18 02:17:24 pandora libvirtd[807]: internal error: process exited while connecting to monitor: 2015-09-17T18:17:23.881779Z qemu-kvm: -chardev pty,id=charserial0: Failed to create chardev |
在modules里面添加attr_rewrite，内容为
1 2 3 4 5 6 7 8 9 10 | attr_rewrite sanereplymessage { attribute = Reply-Message searchin = reply searchfor = "\n|\r" replacewith = "" ignore_case = no new_attribute = no max_matches = 10 append = no } |
FreeRADIUS 2.x默认在数据库只记录用户名，密码，认证时间等信息，但没有访问IP和连接VPN的IP，为了更好的监控，所以添加记录验证者的ip和连接vpn的IP。
首先给FreeRADIUS数据库的radpostauth表添加2个字段 calledstationid和nasipaddress。
然后修改 /usr/local/etc/raddb/sql/mysql/dialup.conf ，将最后的认证信息修改为：
1 2 3 4 5 6 | postauth_query = "INSERT INTO ${postauth_table} \ (username, pass, reply, authdate, calledstationid, nasipaddress) \ VALUES ( \ '%{User-Name}', \ '%{%{User-Password}:-%{Chap-Password}}', \ '%{reply:Packet-Type}', '%S', '%{Calling-Station-Id}', '%{NAS-IP-Address}')" |
重启FreeRADIUS就OK