Prentice hall running xen a hands on guide to the art of virtualization apr 2008 ISBN 0132349663

Running Xen: A Hands-On Guide to the Art of Virtualization by Jeanna N Matthews; Eli M Dow; Todd Deshane; Wenjin Hu; Jeremy Bongio; Patrick F Wilbur; Brendan Johnson Publisher: Prentice Hall Pub Date: April 10, 2008 Print ISBN-10: 0-13-234966-3 Print ISBN-13: 978-0-13-234966-6 eText ISBN-10: 0-13-207467-2 eText ISBN-13: 978-0-13-207467-4 Pages: 624 Table of Contents | Index Overview "This accessible and immediately useful book expertly provides the Xen community with everything it needs to know to download, build, deploy and manage Xen implementations." –Ian Pratt, Xen Project Leader VP Advanced Technology, Citrix Systems The Real—World, 100% Practical Guide to Xen Virtualization in Production Environments Using free, open source Xen virtualization software, you can save money, gain new flexibility, improve utilization, and simplify everything from disaster recovery to software testing Running Xen brings together all the knowledge you need to create and manage high—performance Xen virtual machines in any environment Drawing on the unparalleled experience of a world—class Xen team, it covers everything from installation to administration–sharing field-tested insights, best practices, and case studies you can find nowhere else The authors begin with a primer on virtualization: its concepts, uses, and advantages Next, they tour Xen's capabilities, explore the Xen LiveCD, introduce the Xen hypervisor, and walk you through configuring your own hard—disk—based Xen installation After you're running, they guide you through each leading method for creating "guests" and migrating existing systems to run as Xen guests Then they offer comprehensive coverage of managing and securing Xen guests, devices, networks, and distributed resources Whether you're an administrator, data center manager, developer, system integrator, or ISP, Running Xen will help you achieve your goals with Xen—reliably, efficiently, with outstanding performance, and at a surprisingly low cost •Understanding the Xen hypervisor: what it does, and how it works •Using pre-built system images, including compressed file systems •Managing domains with the xm console •Populating and storing guest images •Planning, designing, and configuring networks in Xen •Utilizing Xen security: special purpose VMs, virtual network segments, remote access, firewalls, network monitors, sHype access control, Xen Security Modules (XSM), and more •Managing guest resources: memory, CPU, and I/O •Employing Xen in the enterprise: tools, products, and techniques Running Xen: A Hands-On Guide to the Art of Virtualization by Jeanna N Matthews; Eli M Dow; Todd Deshane; Wenjin Hu; Jeremy Bongio; Patrick F Wilbur; Brendan Johnson Publisher: Prentice Hall Pub Date: April 10, 2008 Print ISBN-10: 0-13-234966-3 Print ISBN-13: 978-0-13-234966-6 eText ISBN-10: 0-13-207467-2 eText ISBN-13: 978-0-13-207467-4 Pages: 624 Table of Contents | Index Copyright Foreword Preface Acknowledgments About the Authors Chapter 1 Xen—Background and Virtualization Basics Common Uses and Benefits of Virtualization Types of Virtualization Virtualization Heritage Other Virtualization Systems for Commodity Hardware Summary References and Further Reading Chapter 2 A Quick Tour with the Xen LiveCD Running the LiveCD Step 1: Downloading the LiveCD Image and Creating the CD Step 2: Choosing a Domain0 Image from the GRUB Menu Step 3: Logging In and the Desktop Step 4: Creating Guests Step 5: Deleting a Guest Step 6: Interacting with Your Guests Step 7: Testing Your Networking Too Many Guests Summary References and Further Reading Chapter 3 The Xen Hypervisor Xen Hypervisor A Privileged Position Domain0 Xen Boot Options Choosing an OS for Domain0 xend XenStore Summary References and Further Reading Chapter 4 Hardware Requirements and Installation of Xen Domain0 Xen Domain0 Processor Requirements Hardware Device Support and Recommendations Memory Requirements Choosing and Obtaining a Version of Xen Methods of Installing Domain0 Hosts Linux Distributions XenExpress Non-Linux Domain0 Installations Building from Source Summary References and Further Reading Chapter 5 Using Prebuilt Guest Images Introduction to DomU Guests Working with Prebuilt Guest Images Converting Images from Other Virtualization Platforms Summary References and Further Reading Chapter 6 Managing Unprivileged Domains Introduction to the xm Utility The xm list Subcommand The xm create Subcommand Guest Configuration Files Diagnosing Problems with Guest Creation Automatically Starting DomUs Shutting Down Guest Domains Pausing Domains Interacting with a Guest Nongraphically Interacting with a Guest Graphically Summary References and Further Reading Chapter 7 Populating Guest Images Hardware Virtual Machine (HVM) Guest Population Guest Image Customization Converting Existing Installations Summary References and Further Reading Chapter 8 Storing Guest Images Logical Volumes Network Image Storage Options Guest Image Files Summary References and Further Reading Chapter 9 Device Virtualization and Management Device Virtualization Backends and Frontends Granting Control of a PCI Device Exclusive Device Access Versus Trusted Driver Domains Device Emulation with QEMU-DM Future Directions Summary References and Further Reading Chapter 10 Network Configuration Network Virtualization Overview Designing a Virtual Network Topology Bridging, Routing, and Network Address Translation Frontend and Backend Network Drivers and Naming Overview of Network Configuration in Xen Details of Bridging Mode Details of Routing Mode Details of NAT Mode Configuring Purely Virtual Network Segments Assigning MAC Addresses to Virtual Network Interfaces Assigning IP Addresses Handling Multiple Network Interfaces in a Domain vnet—Domain Virtual Network Summary References and Further Reading Chapter 11 Securing a Xen System Structuring Your System for Security Securing the Privileged Domain Firewall and Network Monitors Mandatory Access Control with sHype and Xen Security Modules DomU Security Summary References and Further Reading Chapter 12 Managing Guest Resources Accessing Information about Guests and the Hypervisor Allocating Guest Memory Managing Guest Virtual CPUs Tuning the Hypervisor Scheduler Choosing a Guest IO Scheduler Summary References and Further Reading Chapter 13 Guest Save, Restore, and Live Migration Representing the State of a Virtual Machine Basic Guest Domain Save and Restore Types of Guest Relocation Preparing for xm migrate Experience with xm migrate Summary References and Further Reading Chapter 14 An Overview of Xen Enterprise Management Tools Programmatic Interfaces to the Xen Hypervisor Citrix XenServer Enterprise, Standard, and XenExpress Editions Virtual Iron IBM Virtualization Manager Enomalism virt-manager XenMan Managing Multiple Systems Summary References and Further Reading Appendix A Resources Xen Community XenWiki Xen Mailing Lists and Bug Reporting Xen Summits Xen Source Code Academic Papers and Conferences Distribution-Specific Resources Appendix B The xm Command Appendix C Xend Configuration Parameter Appendix D Guest Configuration Parameter Appendix E Xen Performance Evaluation Xen Performance Measurements Performance Isolation in Xen Performance of Xen Virtual Network and Real Network Summary Index Copyright Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks Where those designations appear in this book, and the publisher was aware of a trademark claim, the designations have been printed with initial capital letters or in all capitals The authors and publisher have taken care in the preparation of this book, but make no expressed or implied warranty of any kind and assume no responsibility for errors or omissions No liability is assumed for incidental or consequential damages in connection with or arising out of the use of the information or programs contained herein The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales, which may include electronic versions and/or custom covers and content particular to your business, training goals, marketing focus, and branding interests For more information, please contact: U.S Corporate and Government Sales (800) 382-3419 corpsales@pearsontechgroup.com For sales outside the United States please contact: International Sales international@pearson.com Visit us on the Web: www.informit.com/ph Library of Congress Cataloging-in-Publication Data: Matthews, Jeanna N Running Xen : a handson guide to the art of virtualization / Jeanna N Matthews, Eli M Dow, Todd Deshane, Wenjin Hu, Jeremy Bongio, Patrick F Wilbur, Brendan Johnson p cm ISBN 0-13-2349663 (pbk : alk paper) 1 Xen (Electronic resource) 2 Virtual computer syste Computer organization Parallel processing (Electronic computers) I T QA76.9.V5M38 2008 005.4'3 dc22 2007052439 Copyright © 2008 Pearson Education, Inc All rights reserved Printed in the United States of America This publication is protected by copyright, and permission must be obtained from the publisher prior to any prohibited reproduction, storage in a retrieval system, or transmission in any form or by any means, electronic, mechanical, photocopying, recording, or likewise For information regarding permissions, write to: Pearson Education, Inc Rights and Contracts Department 501 Boylston Street, Suite 900 Boston, MA 02116 Fax (617) 671 3447 ISBN-13: 978-0-132-34966-6 Text printed in the United States on recycled paper at Courier Stoughton in Stoughton, Massachusetts First printing April 2008 Editor-in-Chief Mark Taub Acquisitions Editor Debra Williams Cauley Development Editor Michael Thurston virtual guests vif= parameter (guest configuration files) 2nd vif-script configuration option (xend) 2nd vif directive vifs (virtual network interfaces) frontend/backend network drivers scripts visibility virt-install 2nd virt-manager 2nd 3rd Allocate Memory and CPU window Assigning Storage Space window capabilities command-line options compilation procedure Create a New Virtual System window Creating Virtual Machine dialog installation screen main window Naming Your Virtual System window Open Connection dialog Ready to Begin Installation window Virtual Machine Console Virtual Appliances virtual block devices (VBDs) virtual CPUs [See VCPUs (virtual CPUs).] virtual devices allocating configuring Virtual Disk Migration Utility virtual frame buffers 2nd virtual guests, viewing Virtual Iron Software, Inc Virtualization Manager 2nd Virtualization Services 2nd virtualization application virtualization advantages/disadvantages definition backend/frontend architecture backend information in XenStore frontend information in XenStore overview split-driver model XenBus bare-metal virtualization systems benefits commodity virtualization technologies Bochs comparison of virtualization products lguest Linux-VServer Linux KVM (Kernel Virtual Machine) Microsoft Hyper-V Microsoft Virtual PC OpenVZ paravirt_ops QEMU UML (User-Mode Linux) VMware emulation advantages/disadvantages Bochs definition QEMU full virtualiation advantages/disadvantages definition Linux KVM (Kernel Virtual Machine) Microsoft Hyper-V Microsoft Virtual PC VMware history of commodity hardware IBM mainframes time line x86 virtualization extensions Xen origins and time line hosted virtualization systems library virtualization advantages/disadvantages definition networks no virtualiation operating system level virtualization advantages/disadvantages definition Linux-VServer OpenVZ overview paravirtualiation advantages/disadvantages definition lguest paravirt_ops QEMU UML (User-Mode Linux) references and further reading Virtualization Manager 2nd Virtualization Services 2nd Virtualization Technology (VT) 2nd Virtual Machine Console Virtual Machine Extensions (VMX) root operation mode Virtual Machine Interface (VMI) Virtual Machine Manager [See virt-manager.] virtual machine monitors [See hypervisor.] virtual machines images, backing up representing state of running only when needed special purpose virtual machines virtual network [See vnet (virtual network).] Virtual Network Computing 2nd 3rd virtual network interfaces [See vifs (virtual network interfaces).] virtual networking interface connections (VNICs) virtual networks performance segments topology virtual partitions associating creating detaching formatting Virtual PC (Microsoft) virtual Web hosting /vm/ directory /vm//image directory VMcasting vm entry (/local/domain/ directory) VMI (Virtual Machine Interface) VMs [See virtual machines.] VMware VMX (Virtual Machine Extensions) root operation mode VNC (Virtual Network Computing) 2nd 3rd vnc-listen parameter (xend) VNC/SDL libraries vncpasswd parameter (xend) vnet (virtual network) configuring creating installing loading overview running xm Vnet-related commands vnet-create option xm command xm vnet command vnet-delete option xm command xm vnet command vnet-list option xm command xm vnet command VNICs (virtual networking interface connections) volume groups (VGs) volumes LVs (logical volumes) configuration files CoW (copy on write) creating creating VGs for extending initializing partitions for populating reducing PVs (physical volumes) VT (Virtualization Technology) 2nd VT-d VT-i VT-x vtpm-list option (xm command) vtpm= parameter (guest configuration files) Index [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z] -w option xm reboot command xm shutdown command -w value option (xm sched-sedf command) warm static migration 2nd watchdog boot option Web hosting web resources [See resources.] weight=float value option (xm sched-sedf command) weight=integer value option (xm sched-credit command) weights Wiki 2nd Windows XP HVM (Hardware Virtual Machine) guest population configuration files dd command display configuration xm create command Wine library writable persistent snapshots Index [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z] X11DisplayOffset parameter (SSH) X11Forwarding parameter (SSH) X11UseLocalhost parameter (SSH) x86 protection rings virtualization extensions Xen-compatible processors Xen on x86 versus IBM zServer XauthLocation parameter (SSH) Xauthority file Xen definition distributions enterprise class Linux support open source distributions Virtual Iron Software, Inc XenServer Express Edition origins and time line xen_caps attribute (xm info command output) xen_changeset attribute (xm info command output) Xen-CIM xen_extra attribute (xm info command output) xen_major attribute (xm info command output) xen_minor attribute (xm info command output) xen_pagesize attribute (xm info command output) Xen and the Art of Repeated Research (paper) Xen and the Art of Virtualization (paper) XenAPI 2nd XenBus Xen Community site xencons=off boot option xencons=tty boot option XenConsole Xen-oprofile xend (Xen daemon) checking status of configuration 2nd configuration file for Domain0_Host1 configuration file for Domain0_Host2 configuration parameters console-limit option dom0-cpus option dom0-min-mem option enable-dump option external-migration-tool option logfile option loglevel option network-script option sample xend-config.sxp file vif-script option xend-address option xend-http-server option xend-port option xend-relocation-address option xend-relocation-hosts-allow option xend-relocation-port option xend-relocation-server option xend-tcp-xmlrpc-server option xend-unix-server option xend-unix-xmlrpc-server option controlling error messages log files 2nd NAT mode configuration network-route script overview querying current condition restarting routing mode configurations starting stopping xm Xend-related commands xend-address configuration option (xend) 2nd xend_config_format attribute (xm info command output) xend-config.sxp file Xen daemon [See xend (Xen daemon).] xend-debug.log file xend-hotplug.log file xend-http-server configuration option (xend) 2nd xend-port configuration option (xend) 2nd xend-relocation-address configuration option (xend) 2nd xend-relocation-hosts-allow configuration option (xend) 2nd xend-relocation-port configuration option (xend) 2nd xend-relocation-server configuration option (xend) 2nd xend-tcp-xmlrpc-server configuration option (xend) 2nd xend-unix-path parameter (xend) xend-unix-server configuration option (xend) xend-unix-xmlrpc-server configuration option (xend) 2nd xend.log file xendomains script xendsxp file XenExpress installation PV (paravirtualized) guest population Xen hypervisor [See hypervisor.] Xen LiveCD Domain0 images downloading LiveCD image guests creating deleting interacting with number of login process network testing references and further reading running test system details Xfce desktop Xen mailing lists XenMan binary package installation running source-derived installation XenoLinux XenoServer project Xen Project Web site xensec_ezpolicy Xen Security Modules (XSM) XenServer Express Edition XenSource 2nd XenStore backend information in commands dumping contents of frontend information in /local/domain/ directory overview /var/lib/xenstored/tdb file /vm//image directory /vm/ directory xenstore-list xenstore-chmod command xenstore-control command xenstore-exists command xenstore-list command xenstore-read command xenstore-rm command xenstore-write command xenstored, killing xenstored directory, removing contents of Xen Summit meetings xentop command Xen User's Manual 2nd XenWiki 2nd Xfce desktop X forwarding with SSH xm command overview prerequisites running from non-root account syntax 2nd xm addlabel xm block-attach xm block-detach xm block-list xm cfgbootpolicy xm console 2nd xm create 2nd booting Debian guest booting Fedora guest booting HVM guests booting openfiler guest 2nd c option console output creating guests with dryrun option overview pci parameter 2nd prerequisites xm destroy 2nd 3rd xm dmesg 2nd xm domid xm domname xm dump-core xm dumppolicy xm help xm info 2nd xm labels xm list 2nd 3rd 4th label option listing basic guest information listing information about specific guests long option xm loadpolicy xm log 2nd xm makepolicy xm mem-max 2nd xm mem-set 2nd xm migrate live migration migration errors preparation syntax warm static migration xm network-attach 2nd xm network-detach 2nd xm network-list 2nd xm pause 2nd xm reboot xm resources xm restore xm rmlabel xm save xm sched-credit xm serve xm shutdown 2nd xm sysrp xm top 2nd xm unpause xm uptime 2nd xm vcpu-list 2nd xm vcpu-pin 2nd xm vcpu-set xm vnet xm vnet-create xm vnet-delete xm vnet-list xm vtpm-list xsls command XSM (Xen Security Modules) Xu, Herbert Index [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z] YaST Virtual Machine Management 2nd Index [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z] zombie guests zServer ... Visit us on the Web: www.informit.com/ph Library of Congress Cataloging-in-Publication Data: Matthews, Jeanna N Running Xen : a handson guide to the art of virtualization / Jeanna N Matthews, Eli M Dow, Todd Deshane, Wenjin Hu, Jeremy Bongio, Patrick F... those designations appear in this book, and the publisher was aware of a trademark claim, the designations have been printed with initial capital letters or in all capitals The authors and publisher have taken care in the preparation of this book, but make no expressed or implied warranty of any... deploy, and manage Xen implementations To the authors, a set of Xen contributors, practitioners, and researchers, I would like to say thank you on behalf of the broader Xen community for an accessible and immediately