Nested virtualization & PCI pass-through

•

1 recomendación•612 vistas

OpenNebula Project

A look at how to test virtualized environments without hardware

Software

Nested virtualization & PCI pass-through
1

Whyyyy
Test virtualized environments without
hardware
- 100s of hypervisors without 100s of physical
servers
- API, test automation, dynamic environment
4

Hosts
BIOS settings, VT-d, VMCS shadow
kernel params: intel_iommu=on iommu=pt pci=realloc
Libvirt/qemu/KVM - /etc/modprobe.d/kvm.conf
options kvm-intel nested=1
options kvm-intel enable_shadow_vmcs=1
https://software.intel.com/en-us/blogs/2014/12/12/enabling-virtual-machine-
control-structure-shadowing-on-a-nested-virtual-machine
https://access.redhat.com/documentation/en-
us/red_hat_enterprise_linux/5/html/virtualization/chap-virtualization-
pci_passthrough
https://access.redhat.com/documentation/en-
us/red_hat_enterprise_linux/7/html/virtualization_deployment_and_administration
_guide/chap-guest_virtual_machine_device_configuration

OpenNebula
http://mars/#hosts-tab/0
http://mars/#templates-tab/3
/var/lib/one/remotes/etc/im/kvm-probes.d/pci.conf
device filter

OpenNebula
https://github.com/OpenNebula/addon-
storpool/blob/master/docs/advanced_configuration.
md#vms-domain-xml-tweaking
/var/lib/one/remotes/vmm/kvm/deploy-tweaks.d -
hostdev to interface hostdev

Boyan Krosnov
StorPool Storage
bk@storpool.com
www.storpool.com
@storpool
We are hiring!
8

Boyan Krosnov
StorPool Storage
bk@storpool.com
www.storpool.com
@storpool
Thank you
9

Más contenido relacionado

La actualidad más candente

ACRN vMeet-Up EU 2021 - Boot Process and Secure Boot

Project ACRN

ACRN vMeet-Up EU 2021 - installation and configuration introduction

Project ACRN

Project ACRN system debug

Project ACRN

QEMU in Cross building

Tetsuyuki Kobayashi

Project ACRN CPU sharing BVT scheduler in ACRN hypervisor

Project ACRN

Virtualization lab

Yogendra Tamang

Project ACRN Yocto Project meta-acrn layer introduction

Project ACRN

Project ACRN CSE Virtualization

Project ACRN

ACRN vMeet-Up EU 2021 - Introduction and Architecture Look Forward

Project ACRN

ACRN vMeet-Up EU 2021 - shared memory based inter-vm communication introduction

Project ACRN

ACRN vMeet-Up EU 2021 - Real Time Management and Performance Optimization

Project ACRN

ACRN vMeet-Up EU 2021 - hypervisor new platform enabling

Project ACRN

Project ACRN hypervisor introduction

Project ACRN

Dave Gilbert - KVM and QEMU

Danny Abukalam

ACRN vMeet-Up EU 2021 - functional safety design and certification plan

Project ACRN

ACRN vMeet-Up EU 2021 - debug ACRN hypervisor

Project ACRN

Project ACRN configuration scenarios and config tool

Project ACRN

Presentation delivered at LinuxCon China 2017. The Libvirt API is cloud industry standard API to manage virtualization hosts on cross platforms.It is widely implemented in renowned cloud system such as openstack,opencloud. The compatibility and fragmentation avoiding of Libvirt APIs will eventually play great impact on what Libvirt can achieve as a whole. For this reason,Libvirt API certification is introduced. Libvirt API certification focuses on testing a technology implementation to make sure that it operates consistently with all other implementations of the same Libvirt technology specification. In this paper, the author will review current state of Libvirt API certification, discuss the challenges it faces, and look forward to how Libvirt community may address those challenges.

Libvirt API Certification

LinuxCon ContainerCon CloudOpen China

ACRN Kata Container on ACRN

Project ACRN

Embedded Systems Conference 2014 Presentation

Manish Jaggi

La actualidad más candente (20)

ACRN vMeet-Up EU 2021 - Boot Process and Secure Boot

ACRN vMeet-Up EU 2021 - installation and configuration introduction

Project ACRN system debug

QEMU in Cross building

Project ACRN CPU sharing BVT scheduler in ACRN hypervisor

Virtualization lab

Project ACRN Yocto Project meta-acrn layer introduction

Project ACRN CSE Virtualization

ACRN vMeet-Up EU 2021 - Introduction and Architecture Look Forward

ACRN vMeet-Up EU 2021 - shared memory based inter-vm communication introduction

ACRN vMeet-Up EU 2021 - Real Time Management and Performance Optimization

ACRN vMeet-Up EU 2021 - hypervisor new platform enabling

Project ACRN hypervisor introduction

Dave Gilbert - KVM and QEMU

ACRN vMeet-Up EU 2021 - functional safety design and certification plan

ACRN vMeet-Up EU 2021 - debug ACRN hypervisor

Project ACRN configuration scenarios and config tool

Libvirt API Certification

ACRN Kata Container on ACRN

Embedded Systems Conference 2014 Presentation

Similar a Nested virtualization & PCI pass-through

PCI Pass-through - FreeBSD VM on Hyper-V (MeetBSD California 2016)

iXsystems

Automating Container Deployments on Virtualization with Ansible: OpenShift on...

Laurent Domb

oVirt 4.3 highlights

Douglas Landgraf

Security best practices for hyper v and server virtualisation [svr307]

Louis Göhl

Presentation delivered at LinuxCon China 2017 Real-Time is used for deadline-oriented applications and time-sensitive workloads. Real-Time KVM is the extension of KVM(Linux Kernel-based Virtual Machine) to allow the virtual machines(VM) to be a truly Real-Time operating system.Users sometimes need to run low-latency applications(such as audio/video streaming, highly interactive systems, etc) to meet their requirements in clouds. NFV is a new network concept which uses virtualization and software instead of dedicated network appliances. For some use cases of telecommunications, network latency must be within a certain range of values. Real-Time KVM can help NFV meet this requirements. In this presentation, Pei Zhang will talk about: (1)Real-Time KVM introduction (2)Real-Time cloud building (3)Real-Time KVM in NFV: VM with openvswitch, dpdk and qemu’s vhostuser (4)Performance testing results show

See what happened with real time kvm when building real time cloud pezhang@re...

LinuxCon ContainerCon CloudOpen China

Component pack 6006 install guide

Roberto Boccadoro

Cloud stack troubleshooting

AlexTian

Comando kvm terminal

Carlos Eduardo

Lessons On Hyper V

Aidan Finn

Virtualizare si SCVMM2008

Tudor Damian

Integrating&Managing HP Blade System

acute23

How to configure esx to pass an audit

Concentrated Technology

VMWARE Professionals - Security, Multitenancy and Flexibility

Paulo Freitas

FIWARE Wednesday Webinar - How to Secure IoT Devices (22nd April 2020) Corresponding webinar recording: https://youtu.be/_87IZhrYo3U Live coding session and commentary, demonstrating various techniques and methods for securing the interactions between Devices, IoT Agents and the Context Broker Chapter: Security Difficulty: 3 Audience: Any Technical Presenter: Jason Fox (Senior Technical Evangelist, FIWARE Foundation)

FIWARE Wednesday Webinars - How to Secure IoT Devices

FIWARE

Linux sever building

Edmond Yu

Php version 7

RANVIJAY GAUR

Qemu device prototyping

Yan Vugenfirer

PCI Passthrough and ITS Support in Xen / ARM :Xen Dev Summit 2015 Presentation

Manish Jaggi

Red hat enterprise_linux-5.5-release_notes-en-us

Duong Hieu

RMLL / LSM 2009

Franck_Villaume

Similar a Nested virtualization & PCI pass-through (20)

PCI Pass-through - FreeBSD VM on Hyper-V (MeetBSD California 2016)

Automating Container Deployments on Virtualization with Ansible: OpenShift on...

oVirt 4.3 highlights

Security best practices for hyper v and server virtualisation [svr307]

See what happened with real time kvm when building real time cloud pezhang@re...

Component pack 6006 install guide

Cloud stack troubleshooting

Comando kvm terminal

Lessons On Hyper V

Virtualizare si SCVMM2008

Integrating&Managing HP Blade System

How to configure esx to pass an audit

VMWARE Professionals - Security, Multitenancy and Flexibility

FIWARE Wednesday Webinars - How to Secure IoT Devices

Linux sever building

Php version 7

Qemu device prototyping

PCI Passthrough and ITS Support in Xen / ARM :Xen Dev Summit 2015 Presentation

Red hat enterprise_linux-5.5-release_notes-en-us

RMLL / LSM 2009

Más de OpenNebula Project

We've made our way into the world of open cloud — where each organization can find the right cloud for its unique needs. A single cloud management platform cannot be all things to all people. There will be a cloud space with several offerings focused on different environments and/or industries. The OpenNebula commitment to the open cloud is at the very base of its mission — to become the simplest cloud enabling platform — and its purpose — to bring simplicity to the private and hybrid enterprise cloud. OpenNebula exists to help companies build simple, cost-effective, reliable, open enterprise clouds on existing IT infrastructure. The OpenNebula Conference will be a great opportunity to communicate and share our vision and commitment, to look back at how the project has grown in the last 9 years, and to shed some insight into what to expect from the project in the near future.

OpenNebulaConf2019 - Welcome and Project Update - Ignacio M. Llorente, Rubén ...

OpenNebula Project

Computer networks are undergoing a phenomenal growth, driven by the rapidly increasing number of nodes constituting the networks. At the same time, the number of security threats on Internet and intranet networks is constantly increasing, and the testing and experimentation of cyber defense solutions require the availability of separate, test environments that best reflect the complexity of a real system. Such environments support the deployment and monitoring of complex mission-driven network scenarios, and cyber security training activities, thus enabling enterprises to study cyber defense strategies and allowing security researchers to evaluate their algorithms at scale. The main objective is delivering to researchers and practitioners an overview of the technological means and the practical steps to setup a private cloud platform based on OpenNebula for the creation and management of virtual environments that support cyber-security activities of training and testing, as well as an overview of its possible applications in the cyber security domain. In particular: 1. We describe our infrastructure based on OpenNebula 2. We overview our application, sitting on top of OpenNebula, as well as the technological tools involved in the management of its lifecycle (e.g., Ansible) . 3. We show how the platform can support various examples of security research activities  [References] Building an emulation environment for cyber security analyses of complex networked systems, Tanasache, Florin Dragos and Sorella, Mara and Bonomi, Silvia and Rapone, Raniero and Meacci, Davide, ICDCN '19, ACM, 2019

OpenNebulaConf2019 - Building Virtual Environments for Security Analyses of C...

OpenNebula Project

OpenNebulaConf2019 - CORD and Edge computing with OpenNebula - Alfonso Aureli...

OpenNebula Project

OpenNebulaConf2019 - 6 years (+) OpenNebula - Lessons learned - Sebastian Man...

OpenNebula Project

OpenNebula users have a range of storage options available to them, including proprietary appliances, proprietary software and Open Source software projects. This session will present a fully Open Source approach, that tightly integrates with Linux, and makes full use of the mature building blocks within the Linux kernel (LVM, Software RAID, DM-crypt, NVMe-oF Target, DRBD, etc...), and delivers one of the highest performance open source storage stacks currently available. The core goal is to expose the improved performance of NVMe storage devices to VMs and containers. The solution covers both local NVMe drives and NVMe-oF. For interacting with NVMe-oF targets it supports the Swordfish-API and LVM & Linux’s software NVMe-oF target. The solution contains a storage addon for OpenNebula.

OpenNebulaConf2019 - Performant and Resilient Storage the Open Source & Linux...

OpenNebula Project

OpenNebulaConf2019 - Image Backups in OpenNebula - Momčilo Medić - ITAF

OpenNebula Project

At Iguane Solutions, a lot of our "DevOps" tools are developed in Golang, and we have a good amount of experience in contributing to the Goca. I'll review just what contributions we make, as well as how we use Goca with different tools, on a daily basis, to manage and monitor our OpenNebula cloud. I will delve into the concept of Infrastructure as Code - deployment of VM instances on cloud, as well as, also address the metrics collection of deployed VMs. Finally, I will present how we can abstract VM management with automation tools thanks to GOCA.

OpenNebulaConf2019 - How We Use GOCA to Manage our OpenNebula Cloud - Jean-Ph...

OpenNebula Project

OpenNebulaConf2019 - Crytek: A Video gaming Edge Implementation "on the shoul...

OpenNebula Project

Replacing vCloud with OpenNebula

OpenNebula Project

NTS: What We Do With OpenNebula - and Why We Do It

OpenNebula Project

OpenNebula from the Perspective of an ISP

OpenNebula Project

NTS CAPTAIN / OpenNebula at Julius Blum GmbH

OpenNebula Project

Performant and Resilient Storage: The Open Source & Linux Way

OpenNebula Project

NetApp Hybrid Cloud with OpenNebula

OpenNebula Project

NSX with OpenNebula - upcoming 5.10

OpenNebula Project

Security for Private Cloud Environments

OpenNebula Project

CheckPoint R80.30 Installation on OpenNebula

OpenNebula Project

DE-CIX: CloudConnectivity

OpenNebula Project

DDC Demo

OpenNebula Project

Cloud Disaggregation with OpenNebula

OpenNebula Project

Más de OpenNebula Project (20)