Taggart "SHINY"/GOLD Wiki | Technical / Virtualization / OpenVZ Setup

OpenVZ setup

The /vz filesystem already exists, firewall Forwarding policy is already ACCEPT, and the epel repository already installed.

Installation

yum localinstall https://download.openvz.org/virtuozzo/releases/openvz-7.0.6-509/x86_64/os/Packages/o/openvz-release-7.0.6-5.vz7.x86_64.rpm \
https://download.openvz.org/virtuozzo/releases/openvz-7.0.6-509/x86_64/os/Packages/p/python-subprocess32-3.2.7-1.vz7.3.x86_64.rpm
yum install prlctl prl-disp-service vzmigrate vzkernel

Configure

Create /etc/sysctl.d/79-openvz.conf

## FOR OPENVZ SERVER support

# On Hardware Node we generally need
# packet forwarding enabled and proxy arp disabled
net.ipv4.ip_forward = 1
net.ipv6.conf.default.forwarding = 1
net.ipv6.conf.all.forwarding = 1
net.ipv4.conf.default.proxy_arp = 0

# Enables source route verification
net.ipv4.conf.all.rp_filter = 1

# Enables the magic-sysrq key
kernel.sysrq = 1

# We do not want all our interfaces to send redirects
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.all.send_redirects = 0

Networking

We need to provide some sort of network translation if we do not use public IP addresses. For network 192.168.68.0/24, use:

iptables -t nat -A POSTROUTING -s 192.168.68.0/24 ! -d 192.168.68.0/24 -o enp2s0f0 -j MASQUERADE

Reboot

shutdown -r now;exit