|
Installation in unprivileged VM (domU)
Summary
- Configure xen
- Setup a shared directory between dom0 and domU
- Setup passwordless SSH
from domU to dom0
- Unpack xenodaemon.tgz in domU's
/opt
- Run
/opt/xenodaemon/xenodaemon
Detailed Description
Configure xen
A functional xen installation must be availble in dom0. The check-xen.sh
script can be used to determine any missing dependencies.
On top of that, the xen consoles should be accessible from domU. They
should not be accessible, however, from unstrusted IPs. Connections
from clients will be tunneled securely to the XenoDaemon and then a
plain connection from the XenoDaemon in domU to the console in dom0
will be made.
Setup a shared directory
This step is required because the image files used for
creating a domain must be accessible from dom0.
/xeno DOMU_IP(rw,no_root_squash)
Create the /xeno directory and add the
following line to the /etc/exports file in dom0.
Start or restart the nfs service.
You may have to install the appropriate NFS-related packages on
both machines.
Setup passwordless SSH
This step is required because the unprivileged domain
needs to issue domain management command, which is only possible in the
privileged dom0.
In the future, the permitted commands will be limited
for security reasons to the creation and manipulation of domains.
First, generate an ssh keypair with:
ssh-keygen -q -t rsa -C XenoDaemon -N''
Then copy the generated id_rsa file to the
/root/.ssh directory in domainU, and append
the generated id_rsa.pub to the /root/.ssh/authorized_keys
file in domain0.
Be sure to test the connection using the hostname that
will be used to access
the domain0 and verify the host key.
Unpack XenoDaemon distribution
Get the xenodaemon distribution from here
and
unpack the xenodaemon-VERSION.tgz bundle into /opt.
The bundle includes:
- XenoDaemon
- JRE version 1.4.1
- XenoCorp certificate
Run XenoDaemon
Executing the /opt/xenodaemon/xenodaemon
command will bring up a management tool.
For further instructions on setting up and running the
newly installed XenoServer read
Setting up a Xeno Server.
|
