I myself, for instance, often access the full desktop of server-based VMs from my Linux workstation or from a Linux laptop. Being able to work with a full fledged graphical desktop of a VM from different clients and locations in your LAN might be a basic requirement for preparing presentations, documents and maybe some development work in parallel on the VM. This is were Spice comes into the game – at least in a Linux environment. Backup, recovery and machine extensions are easy to manage, too.īut you may need to access a VM’s desktop graphically from a client system (PC, laptop). You then can encrypt the virtual disks and isolate the VM(s) pretty well by configuring both firewalls in the virtual network, on each VM as well as on the KVM-host and on routers in your LAN. Personally, I strongly recommend to confine the work and all data exchange processes for a selected customer to a specific VM on a well managed Linux server host. Why do I discuss remote scenarios for a “one seat” console of a VM in an Intranet at all? One answer is:Īny free-lance consultant or developer must think about a systematic way of how to organize data and work for customers in accordance with security requirements like the EU-GDP or the German DSGVO. Why do we care about remote Spice scenarios in an Intranet? Some knowledge about Pulseaudio is helpful, too. I assume that the reader is familiar with SSH and the setup of the SSH-service on a Linux system. As the QXL device it corresponds to a kind of virtual graphics card. In the course of our experiments I will also introduce another virtual “video” device model which can be used together with our VM – namely a “virtio” device with multiple heads. And despite a lack of OpenGL HW acceleration Spice reacts very responsively to mouse operations and window movements. Such a method requires relatively high data transfer rates across the network – but in a switched Gigabit LAN the rates are within reasonable limits …. We confined the right to access the socket for a VM to a specific group of users.Īctually, the socket based access method also provides the basis for a simple remote scenario in an Intranet – namely via ssh -X. Its a simple and fairly effective method – though not well documented. In the last article we saw that “remote-viewer” can be used locally on the KVM-host to directly access the Qemu-emulator of a specific VM via a Unix socket instead of a network port. KVM/Qemu VMs with a multi-screen Spice console – I – Overview over local and remote access methods KVM/Qemu VMs with a multi-screen Spice console – II – local access with remote-viewer via a network port KVM/Qemu VMs with a multi-screen Spice console – III – local access with remote-viewer via a Unix socket I continue with my series on methods to access the graphical Spice console of virtual machines based on the KVM/Qemu-hypervisor combination on a Linux host.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |