久しぶりにKVMで遊ぶ

# apt install sudo
# usermod -aG sudo (俺)
$ echo 'Apt::Install-Recommends "false";' | sudo tee -a /etc/apt/apt.conf.d/99local
$ echo 'Apt::Install-Suggests "false";' | sudo tee -a /etc/apt/apt.conf.d/99local
$ sudo apt install qemu-system qemu-utils libvirt-clients libvirt-daemon-system virtinst
$ sudo usermod -aG libvirt (俺)
$ sudo apt install bridge-utils

$ bunzip2 OPNsense-22.1.2-OpenSSL-nano-amd64.img.bz2
$ qemu-img convert -f raw -O qcow2 OPNsense-22.1.2-OpenSSL-nano-amd64.img opnsense.qcow2
$ qemu-img resize opnsense.qcow2 8G
$ sudo mv opnsense.qcow2 /var/lib/libvirt/images/

<domain type='kvm'>
  <name>opnsense</name>
  <memory unit='MiB'>1024</memory>
  <currentMemory unit='MiB'>1024</currentMemory>
  <vcpu>1</vcpu>
  <os>
    <type arch='x86_64'>hvm</type>
    <boot dev='hd'/>
  </os>
  <features><acpi/><apic/><pae/></features>
  <clock offset='utc'/>
  <on_poweroff>destroy</on_poweroff>
  <on_reboot>restart</on_reboot>
  <on_crash>restart</on_crash>
  <devices>
    <emulator>/usr/bin/qemu-system-x86_64</emulator>
    <controller type='pci' index='0' model='pci-root'/>
    <disk type='file' device='disk'>
      <driver name='qemu' type='qcow2' cache='none'/>
      <source file='/var/lib/libvirt/images/opnsense.qcow2'/>
      <target dev='vda' bus='virtio'/>
    </disk>
    <interface type='bridge'>
      <source bridge='br0'/>
      <model type='virtio'/>
      <target dev='vnet0'/>
      <alias name='net0'/>
    </interface>
    <serial type='pty'><target port='0'/></serial>
    <console type='pty'><target port='0'/></console>
    <memballoon model='none'></memballoon>
  </devices>
</domain>

$ sudo virsh define opnsense.xml
$ sudo virsh list --all
$ sudo virsh start opnsense
$ sudo virsh console opnsense
$ sudo virsh autostart opnsense

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 22.1.4 (amd64/OpenSSL) at Thu Mar 24 22:57:56 JST 2022
Fetching changelog information, please wait... fetch: transfer timed out
fetch: /usr/local/opnsense/changelog/changelog.txz appears to be truncated: 0/244144 bytes
Updating OPNsense repository catalogue...

# drill @2001:240::13
Error: error sending query: Could not send or receive, because of network error

<network>
  <name>host-to-guest-manual</name>
  <ip address='192.168.254.1' netmask='255.255.255.0'>
  </ip>
</network>

$ sudo apt install dnsmasq
$ sudo virsh net-define host-to-guest-manual.xml
$ sudo virsh net-autostart host-to-guest-manual
$ sudo virsh net-start host-to-guest-manual
$ sudo virsh edit opnsense

    <interface type='network'>
      <source network='host-to-guest-manual'/>
      <model type='virtio'/>
    </interface>

$ sudo virsh shutdown opnsense
$ sudo virsh start opnsense

$ sudo virsh edit opnsense

<vcpu placement='static'>2</vcpu>

<cpu mode='host-passthrough'/>

$ sudo apt install curl gnupg
$ curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
$ echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
$ sudo apt update
$ sudo apt install docker-ce docker-ce-cli containerd.io docker-compose
$ sudo usermod -aG docker (俺)
$ exit

$ sudo systemctl stop dnsmasq.service
$ sudo systemctl disable dnsmasq.service

$ mkdir ~/pihole
$ cd ~/pihole
$ wget https://raw.githubusercontent.com/pi-hole/docker-pi-hole/master/docker-compose.yml.example -O docker-compose.yml

    ports:
      - "192.168.xxx.xxx:53:53/tcp"
      - "192.168.xxx.xxx:53:53/udp"
    #  - "67:67/udp"
      - "80:80/tcp"

$ docker-compose up -d
$ docker logs pihole | grep random
Assigning random password: XXXXXXXX