[root@kvm ~]# systemctl restart libvirtd //重启libvirtd服务，并enable

[root@kvm ~]# systemctl enable libvirtd

[root@kvm ~]# lsmod | grep kvm //查看kvm进程信息

kvm_amd 69849 0

kvm 566340 1 kvm_amd

irqbypass 13503 1 kvm

[root@kvm ~]# virsh -c qemu:///system list

Id 名称 状态

----------------------------------------------------

//出现这些就表明没有问题安装成功

//查看版本信息

[root@kvm ~]# virsh --version

4.5.0

[root@kvm ~]# virt-install --version

1.5.0

[root@kvm ~]# ln -s /usr/libexec/qemu-kvm /usr/bin/qemu-kvm //做一个软连接，否则qemu-kvm该命令指执行tab不出来

[root@kvm ~]# ll /usr/bin/qemu-kvm

lrwxrwxrwx 1 root root 21 7月 28 19:27 /usr/bin/qemu-kvm -> /usr/libexec/qemu-kvm

//查看桥接网络信息

[root@kvm ~]# brctl show

bridge namebridge idSTP enabledinterfaces

br08000.000c29aafd37noens33

virbr08000.525400b818f4yesvirbr0-nic

4.)KVM管理界面安装

Kvm的web界面是由webvirtmgr程序提供的

[root@kvm ~]# yum -y install git python-pip libvirt-python libxml2-python python-websockify supervisor nginx python-devel

[root@kvm src]# cd /usr/local/src/

[root@kvm src]# git clone http://github.com/retspen/webvirtmgr.git

[root@kvm src]# ls

webvirtmgr

//安装webvirtmgr

[root@kvm webvirtmgr]# pip --trusted-host pypi.python.org install -r requirements.txt //加上--trusted-host pypi.python.org表示信任该网址

Collecting django==1.5.5 (from -r requirements.txt (line 1))

\xe7\xbd\x91\xe7\xbb\x9c\xe4\xb8\x8d\xe5\x8f\xaf\xe8\xbe\xbe',)': /packages/38/49/93511c5d3367b6b21fc2995a0e53399721afc15e4cd6eb57be879ae13ad4/Django-1.5.5.tar.gz

Downloading https://files.pythonhosted.org/packages/38/49/93511c5d3367b6b21fc2995a0e53399721afc15e4cd6eb57be879ae13ad4/Django-1.5.5.tar.gz (8.1MB)

100% |████████████████████████████████| 8.1MB 33kB/s

Collecting gunicorn==19.5.0 (from -r requirements.txt (line 2))

Retrying (Retry(total=4, connect=None, read=None, redirect=None)) after connection broken by 'NewConnectionError('<pip._vendor.requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7f50af8c2b50>: Failed to establish a new connection: [Errno 101] \xe7\xbd\x91\xe7\xbb\x9c\xe4\xb8\x8d\xe5\x8f\xaf\xe8\xbe\xbe',)': /simple/gunicorn/

Downloading https://files.pythonhosted.org/packages/f9/4e/f4076a1a57fc1e75edc0828db365cfa9005f9f6b4a51b489ae39a91eb4be/gunicorn-19.5.0-py2.py3-none-any.whl (113kB)

100% |████████████████████████████████| 122kB 55kB/s

Collecting lockfile>=0.9 (from -r requirements.txt (line 5))

Downloading https://files.pythonhosted.org/packages/c8/22/9460e311f340cb62d26a38c419b1381b8593b0bb6b5d1f056938b086d362/lockfile-0.12.2-py2.py3-none-any.whl

Installing collected packages: django, gunicorn, lockfile

Running setup.py install for django ... done

Successfully installed django-1.5.5 gunicorn-19.5.0 lockfile-0.12.2

//这样就安装成功

[root@kvm webvirtmgr]# python

Python 2.7.5 (default, Nov 14 2023, 16:14:06)

[GCC 4.8.5 20150623 (Red Hat 4.8.5-44)] on linux2

Type "help", "copyright", "credits" or "license" for more information.

>>> import sqlite3 //将sqlite33导入python数据库中

>>> exit()

4.) 初始化账号信息

[root@kvm webvirtmgr]# python manage.py syncdb

WARNING:root:No local_settings file found.

Creating tables ...

Creating table auth_permission

Creating table auth_group_permissions

Creating table auth_group

Creating table auth_user_groups

Creating table auth_user_user_permissions

Creating table auth_user

Creating table django_content_type

Creating table django_session

Creating table django_site

Creating table servers_compute

Creating table instance_instance

Creating table create_flavor

You just installed Django's auth system, which means you don't have any superusers defined.

Would you like to create one now? (yes/no): yes //是否创建管理员用户

Username (leave blank to use 'root'): //是否默认为root用户

Email address: admin@example.com //邮箱（这个可以随便天）

Password: //输入设置密码

Password (again): //再次输入密码

Superuser created successfully.

Installing custom SQL ...

Installing indexes ...

Installed 6 object(s) from 1 fixture(s)

//拷贝web网页到指定目录

[root@kvm webvirtmgr]# mkdir /var/www

[root@kvm webvirtmgr]# cp -r /usr/local/src/webvirtmgr/ /var/www/

[root@kvm webvirtmgr]# chown -R nginx.nginx /var/www /webvirtmgr/

//生成一对公钥与私钥，由于这里webvirtmgr和kvm服务部署在同一台主机中，所以这里本地信任。如果kvm部署在其他机器上的时候，那么就需要把公钥发送到kvm主机中

[root@kvm webvirtmgr]# ssh-keygen

[root@kvm webvirtmgr]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.100.10 //将密钥发送到主机

[root@kvm webvirtmgr]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.100.10

/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@192.168.100.10's password:

Number of key(s) added: 1

Now try logging into the machine, with: "ssh 'root@192.168.100.10'"

and check to make sure that only the key(s) you wanted were added.

5.)配置端口转发

[root@kvm webvirtmgr]# ssh 192.168.100.10 -L localhost:8000:localhost:8000 -L localhost:6080:localhost:60

Last login: Sun Jul 28 21:27:47 2024 from 192.168.100.1

//查看段端口信息

[root@kvm ~]# ss -anlt

State Recv-Q Send-Q Local Address:Port Peer Address:Port

LISTEN 0 128 *:111 *:*

LISTEN 0 5 192.168.122.1:53 *:*

LISTEN 0 128 *:22 *:*

LISTEN 0 128 127.0.0.1:631 *:*

LISTEN 0 100 127.0.0.1:25 *:*

LISTEN 0 128 127.0.0.1:6010 *:*

LISTEN 0 128 127.0.0.1:6080 *:*

LISTEN 0 128 127.0.0.1:8000 *:*

LISTEN 0 128 :::111 :::*

LISTEN 0 128 :::22 :::*

LISTEN 0 128 ::1:631 :::*

LISTEN 0 100 ::1:25 :::*

LISTEN 0 128 ::1:6010 :::*

LISTEN 0 128 ::1:6080 :::*

LISTEN 0 128 ::1:8000 :::*

6.)配置nginx

[root@kvm ~]# cd /etc/nginx/

[root@kvm nginx]# ls

conf.d fastcgi.conf fastcgi_params koi-utf mime.types nginx.conf scgi_params uwsgi_params win-utf

default.d fastcgi.conf.default fastcgi_params.default koi-win mime.types.default nginx.conf.default scgi_params.default uwsgi_params.default

[root@kvm nginx]# cp nginx.conf nginx.conf.bak //给配置文件做个备份

[root@kvm nginx]# vim nginx.conf

删除listen [::]:80;行

参数server_name行改成server_name localhost;

删除root /usr/share/nginx/html;行

include /etc/nginx/conf.d/*.conf;

server {

listen 80;

server_name localhost;

# Load configuration files for the default server block.

include /etc/nginx/default.d/*.conf;

//添加一部分

location / {

root html;

index index.html index.htm;

}

error_page 404 /404.html;

location = /404.html {

}

//配置nginx虚拟主机

[root@kvm nginx]# cd conf.d/

[root@kvm conf.d]# ls

[root@kvm conf.d]# vim webvirtmgr.conf //在里面写入

server {

listen 80 default_server;

server_name $hostname;

#access_log /var/log/nginx/webvirtmgr_access_log;

location /static/ {

root /var/www/webvirtmgr/webvirtmgr;

expires max;

}

location / {

proxy_pass http://127.0.0.1:8000;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-for $proxy_add_x_forwarded_for;

proxy_set_header Host $host:$server_port;

proxy_set_header X-Forwarded-Proto $remote_addr;

proxy_connect_timeout 600;

proxy_read_timeout 600;

proxy_send_timeout 600;

client_max_body_size 1024M;

}

}

//查看gunicorn.conf.py中的信息是否与上文webvirtmgr.conf中IP一致

[root@kvm conf.d]# cd /var/www/webvirtmgr/

[root@kvm webvirtmgr]# cd conf/

[root@kvm conf]# ls

conf.d gunicorn.conf.py init initd libvirt-bootstrap.sh saltstack

[root@kvm conf]# vim gunicorn.conf.py

bind = '127.0.0.1:8000'

backlog = 2048

//是一致的就保存退出就可以了

//重启nginx服务，并查看端口是否还处于开启状态

[root@kvm conf]# systemctl restart nginx

[root@kvm conf]# ss -anlt

State Recv-Q Send-Q Local Address:Port Peer Address:Port

LISTEN 0 128 *:111 *:*

LISTEN 0 128 *:80 *:*

LISTEN 0 5 192.168.122.1:53 *:*

LISTEN 0 128 *:22 *:*

LISTEN 0 128 127.0.0.1:631 *:*

LISTEN 0 100 127.0.0.1:25 *:*

LISTEN 0 128 127.0.0.1:6010 *:*

LISTEN 0 128 127.0.0.1:6080 *:*

LISTEN 0 128 127.0.0.1:8000 *:*

LISTEN 0 128 :::111 :::*

LISTEN 0 128 :::22 :::*

LISTEN 0 128 ::1:631 :::*

LISTEN 0 100 ::1:25 :::*

LISTEN 0 128 ::1:6010 :::*

LISTEN 0 128 ::1:6080 :::*

LISTEN 0 128 ::1:8000

7.)设置supervisor

[root@kvm ~]# vim /etc/supervisord.conf //编辑配置文件，在最后写入以下信息

[program:webvirtmgr]

command=/usr/bin/python2 /var/www/webvirtmgr/manage.py run_gunicorn -c /var/www/webvirtmgr/conf/gunicorn.conf.py

directory=/var/www/webvirtmgr

autostart=true

autorestart=true

logfile=/var/log/supervisor/webvirtmgr.log

log_stderr=true

user=nginx

[program:webvirtmgr-console]

command=/usr/bin/python2 /var/www/webvirtmgr/console/webvirtmgr-console

directory=/var/www/webvirtmgr

autostart=true

autorestart=true

stdout_logfile=/var/log/supervisor/webvirtmgr-console.log

redirect_stderr=true

user=nginx

[root@kvm ~]# systemctl restart supervisord.service

[root@kvm ~]# systemctl enable supervisord.service

Created symlink from /etc/systemd/system/multi-user.target.wants/supervisord.service to /usr/lib/systemd/system/supervisord.service.

8.)配置nginx用户

[root@kvm ~]# su - nginx -s /bin/bash

-bash-4.2$ ssh-keygen

Generating public/private rsa key pair.

Enter file in which to save the key (/var/lib/nginx/.ssh/id_rsa):

Created directory '/var/lib/nginx/.ssh'.

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /var/lib/nginx/.ssh/id_rsa.

Your public key has been saved in /var/lib/nginx/.ssh/id_rsa.pub.

The key fingerprint is:

SHA256:4sVaYlLBTcczZ4BmYa+Dd8K0mgr3X0ByBb3c+diUxJQ nginx@kvm.example.com

The key's randomart image is:

+---[RSA 2048]----+

| ..o=*+. o.. |

| .o=+= o E |

| oo+..B o . |

| . O oo o o |

| . = S . = |

| + X = . o |

| . . = . |

| o o . |

| . ... |

+----[SHA256]-----+

-bash-4.2$ touch ~/.ssh/config

-bash-4.2$ vim ~/.ssh/config //在文件内写入

StrictHostKeyChecking=no

UserKnownHostsFile=/dev/null

-bash-4.2$ chmod 0600 ~/.ssh/config

-bash-4.2$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.100.10

/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/var/lib/nginx/.ssh/id_rsa.pub"

/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

Warning: Permanently added '192.168.100.10' (ECDSA) to the list of known hosts.

root@192.168.100.10's password:

Number of key(s) added: 1

Now try logging into the machine, with: "ssh 'root@192.168.100.10'"

and check to make sure that only the key(s) you wanted were added.

-bash-4.2$ ssh root@192.168.100.10 //验证密钥认证是否成功

Warning: Permanently added '192.168.100.10' (ECDSA) to the list of known hosts.

Last login: Sun Jul 28 21:37:00 2024 from 192.168.100.10

[root@kvm ~]#

[root@kvm ~]# exit

登出

Connection to 192.168.100.10 closed.

-bash-4.2$ exit

登出

//验证完成就可以退出来了

//配置libvirt

[root@kvm ~]# vim /etc/polkit-1/localauthority/50-local.d/50-libvirt-remote-access.pkla //在里面写入（这是创建的新文件）

[Remote libvirt SSH access]

Identity=unix-user:root

Action=org.libvirt.unix.manage

ResultAny=yes

ResultInactive=yes

ResultActive=yes

[root@kvm ~]# chown -R root.root /etc/polkit-1/localauthority/50-local.d/50-libvirt-remote-access.pkla

[root@kvm ~]# systemctl restart nginx.service

[root@kvm ~]# systemctl enable nginx.service

Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service.

[root@kvm ~]# systemctl restart libvirtd

[root@kvm ~]# systemctl enable libvirtd

四、访问web页面

当你访问网页时，命令窗口会一直弹出信息

[root@kvm ~]# accept: Too many open files

accept: Too many open files

accept: Too many open files

accept: Too many open files

accept: Too many open files

accept: Too many open files

解决方法：

//修改nginx配置文件

[root@kvm ~]# vim /etc/nginx/nginx.conf

user nginx;

worker_processes auto;

error_log /var/log/nginx/error.log;

pid /run/nginx.pid;

worker_rlimit_nofile 655350; //添加此行

//对系统参数进行设置

[root@kvm ~]# vim /etc/security/limits.conf

//在文件最末尾写入

* soft nofile 655350

* hard nofile 655350

//重启服务，重读文件

[root@kvm ~]# sysctl -p

[root@kvm ~]# systemctl restart nginx

进去之后会显示无连接，点击右上角的绿色的添加连接按钮

我这里使用的是FileZilla进行传输的

也可以使用Xshell

[root@kvm ~]# yum -y install lrzsz

[root@kvm ~]# cd /kvmdata/

将进行拖进来

//点击左侧网络池选项卡 ，然后defautl上方有个 NEW network，点击它

点击自定义实例，创建心得虚拟机

如果出现了连接超时，则做如下步骤，如果没有出现，则不管

解决方法：