For secure purpose, do not run qemu as root. However, there are situations where the virtual machine creation process is forced to use root privileges. This should be controlled and considered empowering decision-making for the admin and the security policy.When qemu runs the bridge helper program to create tap devices that require root privileges, which … Đọc tiếp Building a fault-tolerant firewall system with virtual machines: Creating virtual machine with qemu
Building a fault-tolerant firewall system with virtual machines: Creating disk image
Each virtual machine needs a disk image containing the operating system. We have three virtual machines so we need three disk images. However, just create one image and then make copies of the other two. Creating partitions and filesystem on diskAn operating system generally needs one root partition and one swap partition. We practice on … Đọc tiếp Building a fault-tolerant firewall system with virtual machines: Creating disk image
Building a fault-tolerant firewall system with virtual machines: Creating bridge devices and tap interfaces
The tap network backend is the most appropriate configuration option in qemu for us to create network interfaces for virtual machines because virtual ethernet interfaces created in such a way are considered as normal ethernet devices without any restriction. We also need bridge devices to connect the interfaces in the networks.By design, a bridge device … Đọc tiếp Building a fault-tolerant firewall system with virtual machines: Creating bridge devices and tap interfaces