HP BL860c HP Integrity Virtual Machines Release Notes - Page 38

Modifying Guests, 5 Do Not Add User Accounts to the, Group, 6 Do Not Enter Ctrl/B after Starting

Page 38 highlights

-d /var/opt/hpvm/guests/testme \ testme1 # useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \ -c "Console access to guest 'testme'" \> -d /var/opt/hpvm/guests/testme \ testme2 # useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \ -c "Console access to guest 'testme'" \ -d /var/opt/hpvm/guests/testme \ testme3 The following command creates the virtual machine named testme: # hpvmcreate -P testme -u testme1:admin -u testme2 -u testme3:oper At this point, users testme2 and testme3 both have oper level access to the virtual console, and user testme1 has admin level access. In order to make these accounts usable, set passwords for them, as follows: # passwd testme1 ... # passwd testme2 ... # passwd testme3 ... Because of the way the useradd command works, an attempt to create an additional account may result in an error. For example, the following command attempts and fails to add the testme4 user account: # useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \ > -c "Console access to guest 'testme'" \ > -d /var/opt/hpvm/guests/testme \ > testme4 '/var/opt/hpvm/guests/testme' is not a valid directory To enter the command correctly, include the entire directory path. For example: # useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \ > -c "Console access to guest 'testme'" \ > -d /var/opt/hpvm/guests/testme/. \ > testme4 # hpvmmodify -P testme -u testme4 # passwd testme4 Note the addition of the /. to the end of the argument to the -d option, which ensures there is no confusion with HP-UX shared home directories. 6.4 Modifying Guests Do not reduce the physical CPU count below the virtual CPU (vCPU) count of any guest. No running guest should be allocated more vCPUs than the VM Host system has physical processors. 6.5 Do Not Add User Accounts to the hpvmsys Group The hpvmsys group implements the security model for the VM Host and guests. The hpvmsys group is automatically added to /etc/group when Integrity VM is installed. Do not add user accounts to this group. 6.6 Do Not Enter Ctrl/B after Starting Guest with Virtual Console When you use the pc -on command inside the Integrity VM virtual console to start the guest, do not enter Ctrl/B; this will interrupt the guest boot process. Wait for the guest boot to complete and the virtual console prompt to return. Then enter Ctrl/B. 38 Guest Administration

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51

-d /var/opt/hpvm/guests/testme \
testme1
#
useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \
-c "Console access to guest 'testme'" \> -d /var/opt/hpvm/guests/testme \
testme2
#
useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \
-c "Console access to guest 'testme'" \
-d /var/opt/hpvm/guests/testme \
testme3
The following command creates the virtual machine named
testme
:
#
hpvmcreate -P testme -u testme1:admin -u testme2 -u testme3:oper
At this point, users
testme2
and
testme3
both have
oper
level access to the virtual console,
and user
testme1
has
admin
level access. In order to make these accounts usable, set passwords
for them, as follows:
#
passwd testme1
...
#
passwd testme2
...
#
passwd testme3
...
Because of the way the
useradd
command works, an attempt to create an additional account
may result in an error. For example, the following command attempts and fails to add the
testme4
user account:
# useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \
> -c "Console access to guest 'testme'" \
> -d /var/opt/hpvm/guests/testme \
> testme4
'/var/opt/hpvm/guests/testme' is not a valid directory
To enter the command correctly, include the entire directory path. For example:
# useradd -r no -g users -s /opt/hpvm/bin/hpvmconsole \
> -c "Console access to guest 'testme'" \
> -d /var/opt/hpvm/guests/testme/. \
> testme4
# hpvmmodify -P testme -u testme4
# passwd testme4
Note the addition of the
/.
to the end of the argument to the
d
option, which ensures there is
no confusion with HP-UX shared home directories.
6.4 Modifying Guests
Do not reduce the physical CPU count below the virtual CPU (vCPU) count of any guest. No
running guest should be allocated more vCPUs than the VM Host system has physical processors.
6.5 Do Not Add User Accounts to the
hpvmsys
Group
The
hpvmsys
group implements the security model for the VM Host and guests. The
hpvmsys
group is automatically added to
/etc/group
when Integrity VM is installed. Do not add user
accounts to this group.
6.6 Do Not Enter Ctrl/B after Starting Guest with Virtual Console
When you use the
pc -on
command inside the Integrity VM virtual console to start the guest,
do not enter
Ctrl/B
; this will interrupt the guest boot process. Wait for the guest boot to complete
and the virtual console prompt to return. Then enter
Ctrl/B
.
38
Guest Administration