diff --git a/libvirt/qemu b/libvirt/qemu index 25e458b..8fb3979 100755 --- a/libvirt/qemu +++ b/libvirt/qemu @@ -4,29 +4,29 @@ #sudo ln -sf "$(pwd)"/qemu /etc/libvirt/hooks/qemu ## IOMMU groups -IOMMU_GPU="06:00.0" -IOMMU_GPU_AUDIO="06:00.1" -IOMMU_USB="07:00.3" -IOMMU_AUDIO="08:00.3" +#IOMMU_GPU="06:00.0" +#IOMMU_GPU_AUDIO="06:00.1" +#IOMMU_USB="07:00.3" +#IOMMU_AUDIO="08:00.3" ## Virsh devices VIRSH_GPU="pci_0000_06_00_0" VIRSH_GPU_AUDIO="pci_0000_06_00_1" VIRSH_USB="pci_0000_07_00_3" -VIRSH_AUDIO="pci_0000_08_00_3" +#VIRSH_AUDIO="pci_0000_08_00_3" ## PCI BUS ID -videoid="10de 1184" -audioid="10de 0e0a" -videobusid="0000:${IOMMU_GPU}" -audiobusid="0000:${IOMMU_GPU_AUDIO}" +#videoid="10de 1184" +#audioid="10de 0e0a" +#videobusid="0000:${IOMMU_GPU}" +#audiobusid="0000:${IOMMU_GPU_AUDIO}" ## QEMU options -RAM=12G +#RAM=12G ## Ulimit -ULIMIT=$(ulimit -a | grep "max locked memory" | awk '{print $6}') -ULIMIT_TARGET=$(( $(echo $RAM | tr -d 'G') * 1048576 + 100000 )) +#ULIMIT=$(ulimit -a | grep "max locked memory" | awk '{print $6}') +#ULIMIT_TARGET=$(( $(echo $RAM | tr -d 'G') * 1048576 + 100000 )) ## Log file LOG=/tmp/qemu_log.txt @@ -62,6 +62,14 @@ if [[ "$1" == "GPU"* ]]; then ## Memory lock limit #[ "$ULIMIT" != "$ULIMIT_TARGET" ] && ulimit -l "$ULIMIT_TARGET" + ## Firewall nftables + nft add rule inet filter INPUT iifname "virbr1" tcp dport { 53, 67, 68, 139, 445 \} counter accept + nft add rule inet filter INPUT iifname "virbr1" udp dport { 53, 67, 68 \} counter accept + nft add rule arp filter INPUT iifname "virbr1" accept + + ## Volume + amixer -q sset Master 100% + ## Kill the Window Manager killall i3 > /dev/null 2>&1 sleep 5 ## Just in case @@ -88,18 +96,19 @@ if [[ "$1" == "GPU"* ]]; then samba_server start ## iptables - iptables -A LIBVIRT_INP -i virbr1 -p tcp -m tcp --dport 445 -j ACCEPT + #iptables -A LIBVIRT_INP -i virbr1 -p tcp -m tcp --dport 445 -j ACCEPT fi + if [ "$2" == "release" ]; then ## iptables #iptables -D LIBVIRT_INP -i virbr1 -p tcp -m tcp --dport 445 -j ACCEPT ## Stop the samba server - samba_server stop + #samba_server stop - ## Stop the network + ## Stop the network if [ "$(virsh net-list --all | grep "$VIRTNAME" | awk '{print $2}')" == "active" ]; then virsh net-destroy "$VIRTNAME" fi