Front cover Virtualization Cookbook for IBM Z Volume 5 KVM Bill White Sergio Chang Mariselli David Borges de Sousa Eduardo Simoes Franco Pablo Paniagua Richard Ruppel Richard Young Redbooks IBM Redbooks Virtualization Cookbook for IBM Z Volume 5: KVM April 2020 SG24-8463-00 Note: Before using this information and the product it supports, read the information in “Notices” on page vii. First Edition (April 2020) This edition applies to Red Hat REL 8.1, SUSE SELS 15 SP1, and Ubuntu 18.04 LTS. © Copyright International Business Machines Corporation 2020. All rights reserved. Note to U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Contents Notices . vii Trademarks . viii Preface . ix Authors. ix Now you can become a published author, too! . .x Comments welcome. xi Stay connected to IBM Redbooks . xi Chapter 1. Understanding the kernel-based virtual machine on IBM Z . 1 1.1 Kernel-based virtual machine on IBM Z . 2 1.1.1 Why on IBM Z . 2 1.1.2 KVM as a hypervisor on IBM Z . 3 1.2 KVM working on IBM Z . 6 1.3 Managing and monitoring KVM on IBM Z . 7 1.3.1 Libvirt . 8 1.3.2 OpenStack . 8 1.3.3 Virt-install . 8 1.3.4 Virsh . 9 1.3.5 Cockpit . 9 1.3.6 Platform management. 10 1.3.7 Managing the KVM guest lifecycle . 10 1.3.8 KVM host and guest monitoring . 10 1.4 Securing KVM on IBM Z . 11 1.4.1 Access control. 11 1.4.2 Authentication solutions . 11 1.4.3 Multi-Factor authentication . 11 1.4.4 Audit . 12 1.5 Availability with KVM on IBM Z . 12 1.6 KVM on IBM Z backup and recovery . 13 Chapter 2. Planning for the kernel-based virtual machine host and guest . 15 2.1 Basic requirements for KVM hosts and guests . 16 2.1.1 Hardware requirements. 16 2.1.2 Software requirements . 17 2.1.3 Availability requirements . 17 2.1.4 Deployment architecture . 19 2.2 Planning resources for KVM guests . 20 2.2.1 Compute considerations . 20 2.2.2 Storage considerations . 21 2.2.3 Network considerations. 25 2.2.4 Encryption considerations. 26 2.2.5 KVM guest domain considerations . 27 2.2.6 Methods for installing Linux into a guest domain . 28 2.2.7 Linux virtual machine live migration . 29 2.3 Planning for management and monitoring . 30 2.3.1 KVM host management . 30 2.3.2 KVM host monitoring. 31 2.3.3 KVM guest management . 31 © Copyright IBM Corp. 2020. All rights reserved. iii 2.3.4 KVM guest monitoring. 32 2.4 Planning for security . 33 2.4.1 Access controls. 33 2.4.2 Authentication solutions . 33 2.4.3 Audit . 34 2.4.4 Firewalls . 34 2.4.5 Cryptography . 35 2.4.6 Multifactor authentication . 36 2.5 Planning for backup and recovery. 36 2.5.1 KVM host backups and recovery . 36 2.5.2 KVM guest backup and recovery . 38 Chapter 3. Preparing the Red Hat KVM environment for VM usage. 39 3.1 Defining the target configuration . 40 3.1.1 Logical View . 40 3.1.2 Physical resources . 41 3.1.3 Software resources . 42 3.2 Preparing the infrastructure. 42 3.2.1 Configuring the resources in Z platform . 42 3.2.2 Configure the storage resources. 42 3.3 Collecting information . 44 3.3.1 Required information for RHEL on an LPAR installation. 45 3.3.2 Required information for virtual machine installations. 46 3.4 Installing RHEL on an LPAR as KVM host . 48 3.4.1 Preparing the installation . 48 3.4.2 Install RHEL on an LPAR . ..