Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/rgl/debian-vagrant

This builds an up-to-date Vagrant Debian Base Box
https://github.com/rgl/debian-vagrant

debian libvirt packer proxmox vagrant

Last synced: 12 days ago
JSON representation

This builds an up-to-date Vagrant Debian Base Box

Awesome Lists containing this project

README

        

# Install

If you can, follow [rgl/esxi-vagrant](https://github.com/rgl/esxi-vagrant)
to create the base box, otherwise follow the next section to manually
install ESXi.

## Manual Install

Download the [ESXi](https://www.vmware.com/go/get-free-esxi) ISO file.

Install it into a VM that has nested virtualization support. In my case, I've used libvirt and Virtual Machine Manager to create a KVM VM with a `host-passthrough` (for nested-virtualization) CPU type, a e1000 network interface connected to a 10.2.0.0/24 NAT network, a 80GB IDE disk and 8192MB (8GB) of memory.

**NB** For the examples to work, make sure you set the `root` password to `HeyH0Password`.

**NB** The examples assume ESXi is at the `esxi.test` address.

Once ESXi is installed, access the [HTML UI](https://esxi.test) and enable SSH through the `Host | Manage | Services | Right click the TSM-SSH service | Policy | Start and stop with host` then `Start` it.

Upgrade ESXi by grabbing the latest imageprofile from https://esxi-patches.v-front.de/ESXi-6.7.0.html and follow the instructions. At the time of writing, the latest imageprofile was ESXi-6.7.0-20181104001-standard (Build 10764712) and the instructions were:

```bash
# ssh into ESXi and enter the maintenance mode.
ssh [email protected]
vim-cmd hostsvc/maintenance_mode_enter

# see current version.
esxcli system version get
esxcli network ip connection list

# upgrade.
# NB if you are having trouble to install the upgrade, increase the memory of the VM.
esxcli network firewall ruleset set -e true -r httpClient
esxcli software profile update -p ESXi-6.7.0-20190104001-standard \
-d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml
esxcli network firewall ruleset set -e false -r httpClient

# NB I was having problems (even after configuring the swap inside datastore1):
# [InstallationError]
# [Errno 28] No space left on device
# vibs = VMware_locker_tools-light_10.3.2.9925305-10176879
# Please refer to the log file for more details.
# checking the logs at /var/log/esxupdate.log lead me to manually download and install this vib:
# 2019-01-05T11:52:26Z esxupdate: 2099679: downloader: INFO: Downloading https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/esx/vmw/vib20/tools-light/VMware_locker_tools-light_10.3.2.9925305-10176879.vib to /tmp/vibdownload/VMware_locker_tools-light_10.3.2.9925305-10176879.vib
# so I've installed it and repeated the upgrade process, and it succeeded.
cd /vmfs/volumes/datastore1
# NB wget on esxi does not support https, so I've changed the url to http.
wget http://hostupdate.vmware.com/software/VUM/PRODUCTION/main/esx/vmw/vib20/tools-light/VMware_locker_tools-light_10.3.2.9925305-10176879.vib
esxcli software vib install -v $PWD/VMware_locker_tools-light_10.3.2.9925305-10176879.vib
rm VMware_locker_tools-light_10.3.2.9925305-10176879.vib
# NB you must now repeat the upgrade process and then continue from here.

# reboot to complete the upgrade.
reboot

# ssh into ESXi and exit the maintenance mode.
ssh [email protected]
vim-cmd hostsvc/maintenance_mode_exit

# verify the version and exit.
esxcli system version get
exit
```

**NB** view the logs at /var/log/esxupdate.log (or https://esxi.test/ui/#/host/monitor/logs).

**NB** if the update fails with a `No Space Left On Device` error, set the swap datastore to `datastore1` at `Host | Manage | System | Swap`.

Download the [ovftool bundle](https://code.vmware.com/tool/ovf) and save it as the `ovftool.bundle` file, then install it with, e.g.:

```bash
TERM=dumb sh ovftool.bundle --eulas-agreed --required --prefix=/opt/ovftool
ln -s /opt/ovftool/lib/vmware-ovftool/ovftool /usr/local/bin/
ovftool --version
```

Enable guest ARP inspection to get IP (aka the Guest IP Hack):

```bash
ssh [email protected]
esxcli system settings advanced list -o /Net/GuestIPHack
esxcli system settings advanced set -o /Net/GuestIPHack -i 1
```

Configure the firewall to allow VNC access:

```bash
stat /etc/vmware/firewall/service.xml
chmod 644 /etc/vmware/firewall/service.xml
chmod +t /etc/vmware/firewall/service.xml
grep 'vnc' /etc/vmware/firewall/service.xml || sed -i -E 's,(),vncinboundtcpdst59006000\n\1,' /etc/vmware/firewall/service.xml
vi /etc/vmware/firewall/service.xml
```

Refresh the firewall:

```bash
esxcli network firewall refresh
esxcli network firewall ruleset set --ruleset-id vnc --enabled true
esxcli network firewall ruleset list | grep vnc
esxcli network firewall ruleset rule list | grep vnc
```

**NB** You **MUST** re-apply the above firewall changes every time ESXi (re)boots.

# Tips

## ovftool

* You can enable verbose logging:

```
ovftool --X:logToConsole --X:logLevel=verbose ...
```

* Show a VM details, e.g. show the `example` VM details:

```
ovftool --noSSLVerify=true vi://root:[email protected]/example
```