tbhf-lxd-dmz

sudo dpkg -i /usr/lib/live/mount/medium/firmware-bnx2_20210315-3_all.deb
sudo dhclient
ip address
sudo apt-get update
sudo apt-get --yes install openssh-server
sudo systemctl start ssh

sudo apt-get install hdparm
sudo fdisk -l
sudo hdparm -t /dev/sda
sudo hdparm -t /dev/sdb

sudo apt-get install bridge-utils ifenslave

cat /proc/net/bonding/bond0
ip address

ip address
ip link list
systemctl --type service
ls -al /etc/resolv.conf
cat /etc/resolv.conf

sudo delta setup apache         # Set up apache web server.

scp -p delta@tbhf-anc-mrm:/media/Windows/Software/APC/pcns441Linux-x86-64.tar.gz .
tar xfz pcns441Linux-x86-64.tar.gz
cd Linux_x64
sudo ./install.sh

cd
rm -rf Linux_x64
sudo service PowerChute status

sudo /opt/APC/PowerChute/uninstall

sudo delta setup kernel-firmware                # Install and configure kernel firmware.
sudo delta setup kvm                            # Install and configure kvm type 1 hypervisor.
sudo systemctl status libvirtd

# Make Debian 11 known as an os variant.
sudo apt-get install curl
sudo apt-get install libosinfo-bin
# Browse to http://http.us.debian.org/debian/pool/main/o/osinfo-db to find latest package.
curl -L -O http://http.us.debian.org/debian/pool/main/o/osinfo-db/osinfo-db_0.20220214-1_all.deb
sudo dpkg -i osinfo-db_0.20220214-1_all.deb

# List os variants for Debian.
osinfo-query os | grep -i debian

sudo mkdir -p /home/kvm/images
mkdir -p /home/delta/images

sudo adduser delta kvm
sudo adduser delta libvirt

# log of & log on
# sudo systemctl restart libvirtd

ls -al /usr/lib/qemu/qemu-bridge-helper
sudo chmod u+s /usr/lib/qemu/qemu-bridge-helper
ls -al /usr/lib/qemu/qemu-bridge-helper

# https://blog.christophersmart.com/2016/08/31/configuring-qemu-bridge-helper-after-access-denied-by-acl-file-error
sudo mkdir -p /etc/qemu
echo "allow all" | sudo tee /etc/qemu/delta.conf
echo "include /etc/qemu/delta.conf" | sudo tee --append /etc/qemu/bridge.conf
cat /etc/qemu/bridge.conf               # include /etc/qemu/delta.conf
cat /etc/qemu/delta.conf                        # allow all
sudo chmod 640 /etc/qemu/delta.conf
sudo chown root:delta /etc/qemu/delta.conf
ls -al /etc/qemu/bridge.conf            # -rw-r--r-- 1 root root 28 2022-03-16 16:35:56 /etc/qemu/bridge.conf
ls -al /etc/qemu/delta.conf             # -rw-r----- 1 root delta 10 2022-03-16 16:34:30 /etc/qemu/delta.conf

# Create virtual machine in user space.
virt-install \
  --disk format=qcow2,path=/home/delta/images/tbhf-anc-mrm.qcow2,size=100 \
  --extra-args "console tty0 console=ttyS0,115200n8 serial" \
  --graphics none \
  --location http://deb.debian.org/debian/dists/stable/main/installer-amd64 \
  --memory 2048 \
  --name tbhf-anc-mrm \
  --network bridge=br0 \
  --os-variant debian11 \
  --vcpus 1 \
  --virt-type kvm

sudo ls -al /home/kvm/images
sudo ls -al /home/delta/images
sudo virsh list --all
sudo virsh shutdown <vm>        # Graceful shut down.
sudo virsh list --all
sudo virsh destroy <vm>         # Forced shut down.
sudo virsh undefine --domain <vm> --remove-all-storage
sudo virsh list --all
sudo ls -al /home/kvm/images
sudo ls -al /home/delta/images

sudo virsh list --all
sudo virsh pool-list --all
sudo virsh start <vm>
sudo virsh shutdown <vm>

sudo ls -al /var/lib/libvirt/images
sudo ls -al /home/kvm/images

sudo delta setup exim                           # Install and configure exim message transfer agent.
sudo delta setup share SMRU-SRV Teams$          # Add Teams$ (itadmin) share to /etc/fstab.
sudo delta setup share SMRU-HyperV01 Windows$   # Add Windows$ (winaccess) share to /etc/fstab.
sudo crontab -e                                 # Append following line to cron jobs.

sudo delta setup smartmontools          # Install and configure smartmontools.

sudo cp -a /etc/dnsmasq.conf /etc/dnsmasq.conf.org

sudo systemctl restart dnsmasq
sudo systemctl status dnsmasq

sudo apt-get install bridge-utils debootstrap lxc
sudo systemctl status lxc-net
sudo systemctl --type service
ip address

sudo mkdir -p /home/lxc
sudo mount --bind /home/lxc /var/lib/lxc
sudo cp -a /etc/fstab /etc/fstab.org

file="/etc/lxc/default.conf"
# Back up original file if backup file is missing.
if [ -f "${file}" ] && [ ! -f "${file}.org" ]; then cp -a "${file}" "${file}.org"; fi

sudo sed -i "s/lxcbr0/br0/" "${file}"
sudo sed -i "$ a lxc.start.auto = 1" "${file}"
sudo sed -i "$ a lxc.start.delay = 5" "${file}"
diff /etc/lxc/default.conf.org /etc/lxc/default.conf
sudo systemctl restart lxc-net
sudo systemctl status lxc-net

# Note: The very first time debootstrap is called which takes about 2 minutes.
# Note: The update-rc.d: errors can be safely ignored.
# Note: The invoke-rc.d: errors can be safely ignored.
# Note: Type "lxc-create -t debian -h" to see the template options.

# Create privileged container.
sudo lxc-create --name tbhf-aaa-mrm --template debian -- -r bullseye
sudo ls -al /home/lxc

# Make sure to modify the /etc/network/interfaces file.
sudo lxc-info tbhf-aaa-mrm

sudo lxc-ls
sudo lxc-destroy --name tbhf-aaa-mrm

sudo lxc-snapshot --logpriority=LEVEL --name tbhf-aaa-mrm

sudo lxc-info tbhf-aaa-mrm
sudo lxc-ls
sudo lxc-ls --fancy
sudo lxc-start  --name tbhf-aaa-mrm
sudo lxc-attach --name tbhf-aaa-mrm

# Inside container.
ip address
cat /etc/network/interfaces
cat /etc/resolv.conf
ls -al /etc/resolv.conf

apt-get install iputils-ping
apt-get install vim.tiny

exit

sudo apt-get update
sudo apt-get install snapd
sudo snap install lxd


file="/etc/sudoers"
# Back up original file if backup file is missing.
if [ -f "${file}" ] && [ ! -f "${file}.org" ]; then cp -a "${file}" "${file}.org"; fi
# Add path.
sudo sed -i "s|secure_path=\"\(.*\)\"|secure_path=\"\1:/snap/bin\"|g" "${file}"

# Log off and log in again.
which lxd
sudo which lxd                          # /snap/bin/lxd
lxd --version                           # 5.0.0
sudo lxd --version                      # 5.0.0

ls -al /home

#
sudo lxc config set core.https_address :8443
sudo lxc config set core.trust_password ********        # Use level 2 password.

lxc remote list
lxc image list images: debian bullseye amd64

sudo lxc list -c ns46tS,boot.autostart

# Create container.
sudo lxc launch images:debian/11 tbhf-aaa-mrm

# Create virtual machine.
sudo lxc launch images:debian/11 tbhf-bbb-mrm --vm

sudo lxc list
sudo lxc info tbhf-aaa-mrm
sudo lxc info tbhf-bbb-mrm

# Prevent apparmor="DENIED" operation="mount" syslog messages for containers.
# See https://discuss.linuxcontainers.org/t/apparmor-denied-operation-mount/2424/17
sudo lxc config set tbhf-aaa-mrm security.nesting true

# Attach to console, to detach from console, press <ctrl>+a q
sudo lxc console tbhf-aaa-mrm
sudo lxc console tbhf-bbb-mrm

# Start shell inside container or virtual machine.
sudo lxc exec tbhf-aaa-mrm -- /bin/bash
sudo lxc exec tbhf-bbb-mrm -- /bin/bash

# Delete container.
sudo lxc stop   tbhf-aaa-mrm
sudo lxc stop   debian11 --force
sudo lxc delete tbhf-aaa-mrm

# Backup container.
sudo lxc snapshot tbhf-aaa-mrm 2022-04-13
sudo ls -al /home/containers-snapshots/tbhf-aaa-mrm/2022-04-13
sudo lxc info tbhf-aaa-mrm
sudo lxc publish --force tbhf-aaa-mrm/2022-04-13 --alias tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE
sudo lxc image info tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE
# Export lxc image to image.tar.gz file.
sudo lxc image export tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE
ls -al tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE.tar.gz

# Cleanup container snapshots.
sudo lxc delete tbhf-aaa-mrm/2022-04-13                         # Delete snapshot.
sudo lxc image delete tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE      # Delete image.
# sudo rm tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE.tar.gz           # Delete published image.

# Restore container.
sudo lxc image import tbhf-aaa-mrm-BACKUP-2022-04-13-IMAGE.tar.gz --alias tbhf-aaa-mrm-restored
sudo lxc image list
sudo lxc launch tbhf-aaa-mrm-restored tbhf-aaa-mrm
sudo lxc list

# Backup virtual machine.
sudo lxc snapshot debian11 2022-04-26
sudo ls -al /home/virtual-machines-snapshots/debian11/2022-04-26
sudo lxc info debian11
sudo lxc publish --force debian11/2022-04-26 --alias debian11-BACKUP-2022-04-26-IMAGE
#       qemu-img convert -f raw -O qcow2 -c -T none -t none /var/snap/lxd/common/lxd/storage-pools/default/virtual-machines-snapshots/win10b/2022-04-27/root.img /var/snap/lxd/common/lxd/images/lxd_export_2189678916/rootfs.img
#       See https://github.com/lxc/lxd/issues/5509
        sudo lxc storage show default
        sudo lxc storage list

# Export lxc image to image.tar.gz file.
sudo lxc image export debian11-BACKUP-2022-04-26-IMAGE debian11-BACKUP-2022-04-26-IMAGE
ls -al debian11-BACKUP-2022-04-26-IMAGE.tar.gz

# Cleanup virtual machine snapshots.
sudo lxc delete debian11/2022-04-26                     # Delete snapshot.
sudo lxc image delete debian11-BACKUP-2022-04-26-IMAGE  # Delete image.
sudo lxc image delete debian11                          # Delete image.                 ???
# sudo rm debian11-BACKUP-2022-04-26-IMAGE.tar.gz       # Delete published image.

# Restore virtual machine.
sudo lxc stop debian11
sudo lxc delete debian11/2022-04-26     # Remove snapshot.
#       Error: Failed setting subvolume writable "/var/snap/lxd/common/lxd/storage-pools/default/virtual-machines-snapshots/debian11/2022-04-26":
#       Failed to run: btrfs property set -ts /var/snap/lxd/common/lxd/storage-pools/default/virtual-machines-snapshots/debian11/2022-04-26 ro false:
#       ERROR: Could not set subvolume flags: Read-only file system
# Workaround:   sudo btrfs subvolume delete /home/images/b5230ba66e21c7718f887d3f58235ae204bc3d4aa9093a983e25a82d76026dd0
# Workaround:   sudo btrfs subvolume delete /home/virtual-machines-snapshots/debian11/2022-04-26

# Moving to a different storage pool.
# See https://discuss.linuxcontainers.org/t/change-storage-size-and-driver/6097

sudo lxc delete debian11
sudo lxc image import debian11-BACKUP-2022-04-26-IMAGE.tar.gz --alias debian11-restored
sudo lxc image list
sudo lxc launch debian11-restored debian11
sudo lxc list

sudo lxc delete debian11
sudo lxc init debian11-restored debian11 --vm --config security.secureboot=false --config limits.cpu=1 --config limits.memory=2GB
sudo lxc start debian11

sudo lxc stop debian11 --force
sudo lxc delete debian11
sudo lxc launch debian11-restored debian11 --console --vm
sudo lxc start debian11 --console

#       BdsDxe: failed to load Boot0001 "UEFI QEMU QEMU HARDDISK " from PciRoot(0x0)/Pci(0x1,0x1)/Pci(0x0,0x0)/Scsi(0x0,0x1): Not Found
#       >>Start PXE over IPv4.

sudo lxc stop win10 --force
sudo lxc delete win10
sudo lxc launch win10-restored win10 --console --vm
sudo lxc start win10 --console

#       BdsDxe: failed to load Boot0001 "UEFI QEMU QEMU HARDDISK " from PciRoot(0x0)/Pci(0x1,0x1)/Pci(0x0,0x0)/Scsi(0x0,0x1): Not Found
#       >>Start PXE over IPv4.



# See https://pve.proxmox.com/wiki/OVMF/UEFI_Boot_Entries
# See https://mricher.fr/post/boot-from-an-efi-shell
# Press Esc during boot to enter ?UEFI boot menu?

# Linux:
# Wait several minutes for the SHELL> prompt to show up.
# Wait several minutes for the UEFI Interactive Shell.
# map
# FS0:
# ls
# cd EFI
# ls
# cd debian
# ls
# grubx64.efi
# IF: Command Error Status: Access Denied THEN Disable Secure Boot.
# sudo fdisk -l
# Fix boot error.
# sudo grub-install /dev/sda


# Windows:
# Wait several minutes for the SHELL> prompt to show up.
# Wait several minutes for the UEFI Interactive Shell.
# map
# BLK0:
# exit  -->



# Auto start.
sudo lxc config set <instance> boot.autostart false
sudo lxc config set <instance> boot.autostart true
sudo lxc list -c ns46tS,boot.autostart
sudo find /home -iname backup.yaml -print -exec sudo grep boot.autostart {} \;
sudo lxc image info debian11-BACKUP-2022-04-26-IMAGE

# Profiles.
sudo lxc profile list
sudo lxc profile show default

# Extract iso file and add unattend files.
set "Folder=W:\Images\Windows\Windows 10\21H2"
set "File=en-us_windows_10_business_editions_version_21h2_x64_dvd_ce067768.iso"
rmdir /q /s "%Folder%\Tmp"
"C:\Program Files\7-Zip\7z.exe" x -y -o"%Folder%\Tmp" "%Folder%\%File%"
copy W:\Unattend-x64-*.xml "%Folder%\Tmp"
copy W:\Unattend-x86-*.xml "%Folder%\Tmp"

# Create new iso file with unattend files.
set "BootFile="%Folder%\Tmp\boot\etfsboot.com"
set "Label=Windows-10-Enterprise-x64"
set "SourceRoot="%Folder%\Tmp"
set "TargetFile=W:\Windows-10-Enterprise-Unattend-x64.iso"
set "Folder=C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\amd64\Oscdimg"
"%Folder%\oscdimg.exe" -u2 -o -l%Label% -b%BootFile% %SourceRoot% %TargetFile%

sudo snap install distrobuilder --classic
sudo apt-get install -y libguestfs-tools wimtools

folder="/media/Windows"
file="Windows-10-Enterprise-Unattend-x64.iso"
sudo distrobuilder repack-windows "${folder}/${file}" "${file}"
# Wait about 5 minutes for it to finish.

# Create an empty virtual machine.
sudo lxc init win10 --empty --vm --config security.secureboot=false --config limits.cpu=1 --config limits.memory=2GB
sudo lxc config device override win10 root size=30GiB
# Add iso file as boot drive.
# By default root disk has boot priority of 1.
sudo lxc config device add win10 iso disk source="$(pwd)/${file}" boot.priority=10
sudo lxc config show win10

sudo lxc list
sudo lxc start win10

# Remote to the virtual machine from Windows.
# lxc.exe console win10 --type=vga

# Remove boot drive.
sudo lxc config device remove win10 iso