Lenovo KVM - Machine virtuelle debian 12 (vm-debian12)

file debian-12-nocloud-amd64

export VM_NAME="vm-debian12"

qemu-img  info $VM_NAME.qcow2

image: vm-debian12.qcow2
file format: qcow2
virtual size: 20 GiB (21474836480 bytes)
disk size: 1.05 GiB
cluster_size: 65536
Format specific information:
    compat: 1.1
    compression type: zlib
    lazy refcounts: false
    refcount bits: 16
    corrupt: false
    extended l2: false
Child node '/file':
    filename: vm-debian12.qcow2
    protocol type: file
    file length: 1.05 GiB (1126236672 bytes)
    disk size: 1.05 GiB

virt-customize -a $VM_NAME.qcow2 --root-password password:debian

[   0.0] Examining the guest ...
[  30.1] Setting a random seed
[  30.1] Setting passwords
[  31.1] Finishing off

[...]
Debian GNU/Linux 12 localhost ttyS0

localhost login: 

[yann@yann-eos ~]$ ls -l /var/lib/ |grep swtpm-localca
drwxr-x---  2 tss     root    4096 16 nov.  11:43 swtpm-localca

swtpm_user = "swtpm"  
swtpm_group = "swtpm"  

sudo chown -R swtpm:swtpm /var/lib/swtpm-localca

ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group de
fault qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAUL
T group default qlen 1000
    link/ether 52:54:00:64:ad:a1 brd ff:ff:ff:ff:ff:ff

90-default.yaml

mkdir /etc/backup.netplan
mv /etc/netplan/* /etc/backup.netplan/

bash -c 'cat << EOF > /etc/netplan/01-enp1s0.yaml
network:
  version: 2
  renderer: networkd
  ethernets:
    enp1s0:
      addresses: [192.168.0.225/24]
      routes:
        - to: default
          via: 192.168.0.254 
      nameservers:
          addresses: [1.1.1.1, 9.9.9.9]
      dhcp4: false
      dhcp6: false
EOF'

netplan generate
netplan apply

ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:64:ad:a1 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.225/24 brd 192.168.0.255 scope global enp1s0
       valid_lft forever preferred_lft forever
    inet6 2a01:e0a:9c8:2080:5054:ff:fe64:ada1/64 scope global dynamic mngtmpaddr noprefix
route 
       valid_lft 86325sec preferred_lft 86325sec
    inet6 fe80::5054:ff:fe64:ada1/64 scope link 
       valid_lft forever preferred_lft forever

networkctl list

IDX LINK   TYPE     OPERATIONAL SETUP    
  1 lo     loopback carrier     unmanaged
  2 enp1s0 ether    off         unmanaged

[Match]
Name=enp1s0
[Network]
Address=192.168.0.225/24
Gateway=192.168.0.254
DNS=1.1.1.1  

ip a show enp1s0

2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default q
len 1000
    link/ether 52:54:00:ae:90:25 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.225/24 brd 192.168.0.255 scope global enp1s0
       valid_lft forever preferred_lft forever
    inet6 2a01:e0a:9c8:2080:5054:ff:feae:9025/64 scope global dynamic mngtmpaddr noprefixrout
e 
       valid_lft 86391sec preferred_lft 86391sec
    inet6 fe80::5054:ff:feae:9025/64 scope link 
       valid_lft forever preferred_lft forever

IPv6PrivacyExtensions=false
IPv6AcceptRA=true
Address=2a01:e0a:9c8:2082::1

sudo sysctl net.ipv6.conf.eth0.autoconf # 1 dans bookworm

sudo systemctl restart systemd-networkd

ip a show enp1s0

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:ae:90:25 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.225/24 brd 192.168.0.255 scope global enp1s0
       valid_lft forever preferred_lft forever
    inet6 2a01:e0a:9c8:2080:5054:ff:feae:9025/64 scope global dynamic mngtmpaddr noprefixroute 
       valid_lft 85935sec preferred_lft 85935sec
    inet6 2a01:e0a:9c8:2082::1/0 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:ff:feae:9025/64 scope link 
       valid_lft forever preferred_lft forever

hostnamectl set-hostname vm-debian12
hostnamectl

 Static hostname: vm-debian12
       Icon name: computer-vm
         Chassis: vm 🖴
      Machine ID: 85e470b1337c4e209bb5167c34fc00c5
         Boot ID: b0a64369a876497da3f5ab183516e904
  Virtualization: kvm
Operating System: Debian GNU/Linux 12 (bookworm)  
          Kernel: Linux 6.1.0-13-amd64
    Architecture: x86-64
 Hardware Vendor: QEMU
  Hardware Model: Standard PC _Q35 + ICH9, 2009_
Firmware Version: unknown

nano /etc/hosts

127.0.0.1       localhost vm-debian12

adduser bookvm

Adding user `bookvm' ...
Adding new group `bookvm' (1000) ...
Adding new user `bookvm' (1000) with group `bookvm' ...
Creating home directory `/home/bookvm' ...
Copying files from `/etc/skel' ...
New password: 
Retype new password: 
passwd: password updated successfully
Changing the user information for bookvm
Enter the new value, or press ENTER for the default
	Full Name []: 
	Room Number []: 
	Work Phone []: 
	Home Phone []: 
	Other []: 
Is the information correct? [Y/n] 

echo "bookvm     ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/bookvm

[FAILED] Failed to start ssh.servic…[0m - OpenBSD Secure Shell server.

dpkg-reconfigure openssh-server

nano /etc/ssh/sshd_config

# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication yes
#PermitEmptyPasswords no

systemctl restart sshd

ssh-keygen -t ed25519 -o -a 100 -f ~/.ssh/vm-debian12

ssh-copy-id -i ~/.ssh/vm-debian12.pub bookvm@192.168.0.225

ssh bookvm@192.168.0.225

sudo nano /etc/ssh/sshd_config

sudo systemctl restart sshd

ssh -p 55215 -i ~/.ssh/vm-debian12 bookvm@192.168.0.225

sudo apt update && sudo apt install rsync curl tmux jq figlet git

sudo rm /etc/motd && sudo nano /etc/motd

                               __       __     _               ___ ___ 
 _   __ ____ ___          ____/ /___   / /_   (_)____ _ ____  <  /|__ \
| | / // __ `__ \ ______ / __  // _ \ / __ \ / // __ `// __ \ / / __/ /
| |/ // / / / / //_____// /_/ //  __// /_/ // // /_/ // / / // / / __/ 
|___//_/ /_/ /_/        \__,_/ \___//_.___//_/ \__,_//_/ /_//_/ /____/ 
   ___ ____  ___      ___ _____  ____     ____     ___   ___ ______    
  <  // __ \|__ \    <  // ___/ ( __ )   / __ \   |__ \ <  // ____/    
  / // /_/ /__/ /    / // __ \ / __  |  / / / /   __/ / / //___ \      
 / / \__, // __/ _  / // /_/ // /_/ /_ / /_/ /_  / __/ / /____/ /      
/_/ /____//____/(_)/_/ \____/ \____/(_)\____/(_)/____//_//_____/       

Création de domaine terminée.
Vous pouvez redémarrer votre domaine en exécutant :
  virsh --connect qemu:///system start vm-debian12

bookvm@vm-debian12:~$ lsblk
NAME    MAJ:MIN RM  SIZE RO TYPE MOUNTPOINTS
vda     254:0    0   20G  0 disk 
├─vda1  254:1    0  1.9G  0 part /
├─vda14 254:14   0    3M  0 part 
└─vda15 254:15   0  124M  0 part /boot/efi

e2fsck -f /dev/vda1

resize2fs /dev/vda1

sudo nano /etc/systemd/system/vm-debian12.service

[Unit]
Description=Autostart vm-debian12

After=network.target libvirtd.service
Wants=libvirtd.service

[Service]
Type=simple
ExecStartPre=/usr/bin/sleep 45
ExecStart=/usr/bin/virsh start vm-debian12

[Install]
WantedBy=multi-user.target

sudo systemctl enable vm-debian12

sudo systemctl daemon-reload
sudo systemctl start vm-debian12

mkdir -p $HOME/{scripts,media}

media_tag   /home/bookvm/media   virtiofs rw,_netdev 0 0
scripts_tag /home/bookvm/scripts virtiofs rw,_netdev 0 0

sudo systemctl daemon-reload
sudo mount -a

set_var EASYRSA_REQ_COUNTRY    "FR"
set_var EASYRSA_REQ_PROVINCE   "Pays de Loire"
set_var EASYRSA_REQ_CITY       "Bopro"
set_var EASYRSA_REQ_ORG        "yann"
set_var EASYRSA_REQ_EMAIL      "vps@cinay.eu"
set_var EASYRSA_REQ_OU         "Dom"
set_var EASYRSA_ALGO           "ec"
set_var EASYRSA_DIGEST         "sha512"

wget https://static.xoyize.xyz/files/compilation-nginx-tls1.3.sh
chmod +x compilation-nginx-tls1.3.sh
./compilation-nginx-tls1.3.sh

sudo apt install -y lsb-release ca-certificates apt-transport-https software-properties-common gnupg2

echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/sury-php.list
sudo wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg

sudo apt update && sudo apt -y upgrade

sudo apt install php8.2 php8.2-fpm php8.2-sqlite3 php8.2-gd

sudo apt -y install php8.2 php8.2-fpm php8.2-sqlite3 php8.2-cli php8.2-gd php8.2-imap php8.2-mysql php8.2-soap php8.2-apcu php8.2-common php8.2-gmp  php8.2-intl php8.2-opcache php8.2-xml php8.2-curl php8.2-igbinary php8.2-readline  php8.2-zip php8.2-bcmath php8.2-imagick php8.2-mbstring php8.2-redis imagemagick libmagickcore-6.q16-6-extra

nano /etc/php/8.0/fpm/pool.d/devel.conf

[devel]

user = bookvm
group = bookvm

listen = /run/php/php8.2-fpm-devel.sock

listen.owner = bookvm
listen.group = bookvm

pm = dynamic
pm.max_children = 5
pm.start_servers = 2
pm.min_spare_servers = 1
pm.max_spare_servers = 3

server {
  listen *:443 ssl http2;
  server_name test.bookvm.loc;
  ssl_certificate /etc/ssl/certs/bookvm-cert.pem;
  ssl_certificate_key /etc/ssl/private/bookvm-key.pem;
  root /home/bookvm/media/www/bookvm/default-www/;
  # root /var/www/default-www/;
  
  location / {
    index index.htm index.html;
  }

  location /diceware {
    alias /home/bookvm/media/diceware/;
  }

  location /cartes {
    alias /home/bookvm/media/osm-new/;
  }

  location ~ \.php$ {
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass unix:/run/php/php8.2-fpm-devel.sock;   # PHP8.2
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
   }

}

systemctl restart php8.2-fpm nginx

sudo apt install unzip

sudo apt search mariadb-server
Sorting... Done
Full Text Search... Done
mariadb-server/stable 1:10.11.4-1~deb12u1 amd64
  MariaDB database server binaries

mariadb-server-10.5/stable 1:10.11.4-1~deb12u1 amd64
  MariaDB database server binaries

mariadb-server-core/stable 1:10.11.4-1~deb12u1 amd64
  MariaDB database core server files

sudo apt install mariadb-server-10.5

sudo mysql_secure_installation

composer require jasny/sso

ssh -L 9501:localhost:9001 bullsvm@192.168.0.210 -p 55210 -i /home/yann/.ssh/vm-bullseyes

ls -l $HOME/.local/share/mkcert

mkcert bookvm.loc '*.bookvm.loc' localhost 127.0.0.1 ::1

Created a new certificate valid for the following names 📜
 - "bookvm.loc"
 - "*.bookvm.loc"
 - "localhost"
 - "127.0.0.1"
 - "::1"

Reminder: X.509 wildcards only go one level deep, so this won't match a.b.bookvm.loc ℹ️

The certificate is at "./bookvm.loc+4.pem" and the key at "./bookvm.loc+4-key.pem" ✅

It will expire on 18 February 2026 🗓

# Debian and Ubuntu derived distributions
sudo cp /tmp/rootCA.pem /usr/local/share/ca-certificates/
sudo update-ca-certificates
# Archlinux
sudo cp /tmp/rootCA.pem /etc/ca-certificates/trust-source/anchors/
sudo update-ca-trust

mv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/bookvm.loc.conf

server {
  listen *:443 ssl http2;
  server_name bookvm.loc;
  ssl_certificate /etc/ssl/certs/bookvm-cert.pem;
  ssl_certificate_key /etc/ssl/private/bookvm-key.pem;
  root /home/bookvm/media/www/bookvm/default-www/;

  
  location / {
    index index.htm index.html;
  }

  location /diceware {
    alias /home/bookvm/media/diceware/;
  }

  location /cartes {
    alias /home/bookvm/media/osm-new/;
  }

}

sudo systemctl restart nginx

192.168.0.225   bookvm.loc static.loc bookvm.loc gpx.bookvm.loc static.bookvm.loc calibre.bookvm.loc zic.bookvm.loc fmy.bookvm.loc traduction.bookvm.loc rss.bookvm.loc cloud.bookvm.loc iptv.bookvm.loc

npm install -g radiolise

radiolise

sudo apt install python3 python3-pip python3-venv
sudo apt install python-is-python3

sudo apt-get install python3 python3-pycurl python3-dnspython python3-openssl python3-netaddr  # debian
yay -S python-pycurl python-dnspython python-pyopenssl python-netaddr # archlinux

git clone https://framagit.org/bortzmeyer/homer
cd homer

./remoh.py https://doh.icebull.xyz afnic.fr

id 0
opcode QUERY
rcode NOERROR
flags QR RD RA AD
edns 0
payload 1232
option ECS 0.0.0.0/0 scope/0
;QUESTION
afnic.fr. IN AAAA
;ANSWER
afnic.fr. 600 IN AAAA 2001:41d0:404:200::2df6
;AUTHORITY
;ADDITIONAL

./remoh.py --dot dot.icebull.xyz afnic.fr

id 51405
opcode QUERY
rcode NOERROR
flags QR RD RA AD
edns 0
payload 1232
;QUESTION
afnic.fr. IN AAAA
;ANSWER
afnic.fr. 579 IN AAAA 2001:41d0:404:200::2df6
;AUTHORITY
;ADDITIONAL

cd ~/media/devel/wg-gen-web

tmux 

go run cmd/wg-gen-web/main.go

tmux

cd ~/media/devel/wg-gen-web/ui

npm install

export VUE_APP_API_BASE_URL=http://localhost:8080/api/v1.0

npm run serve

chmod +x $HOME/build-wg-gen-web.sh

./build-wg-gen-web.sh

/opt/appwg/.env

# IP address to listen to
SERVER=127.0.0.1
# port to bind
PORT=8080
# Gin framework release mode
GIN_MODE=release
# where to write all generated config files
WG_CONF_DIR=/etc/wireguard
# WireGuard main config file name, generally <interface name>.conf
WG_INTERFACE_NAME=wg0.conf

# SMTP settings to send email to clients
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USERNAME=account@gmail.com
SMTP_PASSWORD=*************
SMTP_FROM=Wg Gen Web <account@gmail.com>

# set provider name to fake to disable auth, also the default
OAUTH2_PROVIDER_NAME=fake

sudo nano /etc/systemd/system/wgweb.service

[Unit]
Description=Wireguard web
After=network.target

[Service]

Type=simple

Restart=on-failure
RestartSec=10

WorkingDirectory=/opt/appwg
ExecStart=/opt/appwg/deb-wg-gen-web

[Install]
WantedBy=multi-user.target

/etc/wireguard/server.json 

sudo systemctl daemon-reload
sudo systemctl start wgweb.service
sudo systemctl status wgweb.service

● wgweb.service - Wireguard web
   Loaded: loaded (/etc/systemd/system/wgweb.service; disabled; vendor preset: enabled)
   Active: active (running) since Wed 2020-10-21 10:46:58 CEST; 43s ago
 Main PID: 1426 (deb-wg-gen-web)
    Tasks: 5 (limit: 2289)
   Memory: 5.0M
   CGroup: /system.slice/wgweb.service
           └─1426 /opt/appwg/deb-wg-gen-web

Oct 21 10:46:58 debian-cx11 systemd[1]: Started Wireguard web.
Oct 21 10:46:58 debian-cx11 deb-wg-gen-web[1426]: time="2020-10-21T10:46:58+02:00" level=info msg="Lancement de la version Web de Wg Gen : yann"
Oct 21 10:46:58 debian-cx11 deb-wg-gen-web[1426]: time="2020-10-21T10:46:58+02:00" level=warning msg="Oauth n'est pas utilisé, aucune authentification réelle ne sera effectuée"

ssh -L 9000:localhost:8080 bookvm@192.168.0.225 -p 55215 -i /home/yann/.ssh/vm-debian12

sudo systemctl enable wgweb.service

rbenv install -l

3.1.6
3.2.5
3.3.5
jruby-9.4.8.0
mruby-3.3.0
picoruby-3.0.0
truffleruby-24.1.0
truffleruby+graalvm-24.1.0

Only latest stable releases for each Ruby implementation are shown.
Use `rbenv install --list-all' to show all local versions.

rbenv install 3.1.6

rbenv global 3.1.6

gem install bundler

mkdir -p ~/media/vm-debian12/bookvmstatic

bundle exec jekyll serve

Configuration file: /home/bookvm/media/vm-debian12/bookvmstatic/_config.yml
            Source: /home/bookvm/media/vm-debian12/bookvmstatic
       Destination: /home/bookvm/media/vm-debian12/bookvmstatic/_site
 Incremental build: disabled. Enable with --incremental
      Generating... 
       Jekyll Feed: Generating feed for posts
                    done in 33.789 seconds.
 Auto-regeneration: enabled for '/home/bookvm/media/vm-debian12/bookvmstatic'
    Server address: http://127.0.0.1:4000
  Server running... press ctrl-c to stop.

ssh -L 9200:127.0.0.1:4000 bookvm@192.168.0.225 -p 55215 -i /home/yann/.ssh/vm-debian12

env > /home/bookvm/media/vm-debian12/bookvmstatic/env_file

mkdir -p ~/.config/systemd/user
nano ~/.config/systemd/user/bookvmstatic.service

systemctl --user daemon-reload
systemctl --user start bookvmstatic

systemctl --user status bookvmstatic

---
regenerate: true
---
[
  {% assign sorted = site.posts | sort_natural: "modif" | reverse %} 
  {% for post in sorted %}
    {

      "title"    : "{{ post.title | strip_html | escape }}",
      "url"      : "{{ site.baseurl }}{{ post.url }}",
      "tags"     : "{{ post.tags | join: ', ' }}",
      "create"   : "{{ post.create }}",
      "date"     : "{{ post.modif }}"

    } {% unless forloop.last %},{% endunless %}
  {% endfor %}
]