]> git.proxmox.com Git - pve-docs.git/blame - qm.adoc
Fix qm create syntax example
[pve-docs.git] / qm.adoc
CommitLineData
80c0adcb 1[[chapter_virtual_machines]]
f69cfd23 2ifdef::manvolnum[]
b2f242ab
DM
3qm(1)
4=====
5f09af76
DM
5:pve-toplevel:
6
f69cfd23
DM
7NAME
8----
9
10qm - Qemu/KVM Virtual Machine Manager
11
12
49a5e11c 13SYNOPSIS
f69cfd23
DM
14--------
15
16include::qm.1-synopsis.adoc[]
17
18DESCRIPTION
19-----------
20endif::manvolnum[]
f69cfd23
DM
21ifndef::manvolnum[]
22Qemu/KVM Virtual Machines
23=========================
5f09af76 24:pve-toplevel:
194d2f29 25endif::manvolnum[]
5f09af76 26
c4cba5d7
EK
27// deprecates
28// http://pve.proxmox.com/wiki/Container_and_Full_Virtualization
29// http://pve.proxmox.com/wiki/KVM
30// http://pve.proxmox.com/wiki/Qemu_Server
31
5eba0743 32Qemu (short form for Quick Emulator) is an open source hypervisor that emulates a
c4cba5d7
EK
33physical computer. From the perspective of the host system where Qemu is
34running, Qemu is a user program which has access to a number of local resources
35like partitions, files, network cards which are then passed to an
189d3661 36emulated computer which sees them as if they were real devices.
c4cba5d7
EK
37
38A guest operating system running in the emulated computer accesses these
39devices, and runs as it were running on real hardware. For instance you can pass
40an iso image as a parameter to Qemu, and the OS running in the emulated computer
189d3661 41will see a real CDROM inserted in a CD drive.
c4cba5d7 42
189d3661 43Qemu can emulates a great variety of hardware from ARM to Sparc, but {pve} is
c4cba5d7
EK
44only concerned with 32 and 64 bits PC clone emulation, since it represents the
45overwhelming majority of server hardware. The emulation of PC clones is also one
46of the fastest due to the availability of processor extensions which greatly
47speed up Qemu when the emulated architecture is the same as the host
9c63b5d9
EK
48architecture.
49
50NOTE: You may sometimes encounter the term _KVM_ (Kernel-based Virtual Machine).
51It means that Qemu is running with the support of the virtualization processor
52extensions, via the Linux kvm module. In the context of {pve} _Qemu_ and
53_KVM_ can be use interchangeably as Qemu in {pve} will always try to load the kvm
54module.
55
c4cba5d7
EK
56Qemu inside {pve} runs as a root process, since this is required to access block
57and PCI devices.
58
5eba0743 59
c4cba5d7
EK
60Emulated devices and paravirtualized devices
61--------------------------------------------
62
189d3661
DC
63The PC hardware emulated by Qemu includes a mainboard, network controllers,
64scsi, ide and sata controllers, serial ports (the complete list can be seen in
65the `kvm(1)` man page) all of them emulated in software. All these devices
66are the exact software equivalent of existing hardware devices, and if the OS
67running in the guest has the proper drivers it will use the devices as if it
c4cba5d7
EK
68were running on real hardware. This allows Qemu to runs _unmodified_ operating
69systems.
70
71This however has a performance cost, as running in software what was meant to
72run in hardware involves a lot of extra work for the host CPU. To mitigate this,
73Qemu can present to the guest operating system _paravirtualized devices_, where
74the guest OS recognizes it is running inside Qemu and cooperates with the
75hypervisor.
76
77Qemu relies on the virtio virtualization standard, and is thus able to presente
189d3661
DC
78paravirtualized virtio devices, which includes a paravirtualized generic disk
79controller, a paravirtualized network card, a paravirtualized serial port,
c4cba5d7
EK
80a paravirtualized SCSI controller, etc ...
81
189d3661
DC
82It is highly recommended to use the virtio devices whenever you can, as they
83provide a big performance improvement. Using the virtio generic disk controller
84versus an emulated IDE controller will double the sequential write throughput,
85as measured with `bonnie++(8)`. Using the virtio network interface can deliver
c4cba5d7 86up to three times the throughput of an emulated Intel E1000 network card, as
189d3661 87measured with `iperf(1)`. footnote:[See this benchmark on the KVM wiki
c4cba5d7
EK
88http://www.linux-kvm.org/page/Using_VirtIO_NIC]
89
5eba0743 90
80c0adcb 91[[qm_virtual_machines_settings]]
5274ad28 92Virtual Machines Settings
c4cba5d7 93-------------------------
80c0adcb 94
c4cba5d7
EK
95Generally speaking {pve} tries to choose sane defaults for virtual machines
96(VM). Make sure you understand the meaning of the settings you change, as it
97could incur a performance slowdown, or putting your data at risk.
98
5eba0743 99
80c0adcb 100[[qm_general_settings]]
c4cba5d7
EK
101General Settings
102~~~~~~~~~~~~~~~~
80c0adcb 103
b473f999 104[thumbnail="gui-create-vm-general.png"]
b16d767f 105
c4cba5d7
EK
106General settings of a VM include
107
108* the *Node* : the physical server on which the VM will run
109* the *VM ID*: a unique number in this {pve} installation used to identify your VM
110* *Name*: a free form text string you can use to describe the VM
111* *Resource Pool*: a logical group of VMs
112
5eba0743 113
80c0adcb 114[[qm_os_settings]]
c4cba5d7
EK
115OS Settings
116~~~~~~~~~~~
80c0adcb 117
b473f999 118[thumbnail="gui-create-vm-os.png"]
200114a7 119
c4cba5d7
EK
120When creating a VM, setting the proper Operating System(OS) allows {pve} to
121optimize some low level parameters. For instance Windows OS expect the BIOS
122clock to use the local time, while Unix based OS expect the BIOS clock to have
123the UTC time.
124
5eba0743 125
80c0adcb 126[[qm_hard_disk]]
c4cba5d7
EK
127Hard Disk
128~~~~~~~~~
80c0adcb 129
2ec49380 130Qemu can emulate a number of storage controllers:
c4cba5d7
EK
131
132* the *IDE* controller, has a design which goes back to the 1984 PC/AT disk
133controller. Even if this controller has been superseded by more more designs,
134each and every OS you can think has support for it, making it a great choice
135if you want to run an OS released before 2003. You can connect up to 4 devices
136on this controller.
137
138* the *SATA* (Serial ATA) controller, dating from 2003, has a more modern
139design, allowing higher throughput and a greater number of devices to be
140connected. You can connect up to 6 devices on this controller.
141
b0b6802b
EK
142* the *SCSI* controller, designed in 1985, is commonly found on server grade
143hardware, and can connect up to 14 storage devices. {pve} emulates by default a
f4bfd701
DM
144LSI 53C895A controller.
145+
81868c7e 146A SCSI controller of type _VirtIO SCSI_ is the recommended setting if you aim for
b0b6802b
EK
147performance and is automatically selected for newly created Linux VMs since
148{pve} 4.3. Linux distributions have support for this controller since 2012, and
c4cba5d7 149FreeBSD since 2014. For Windows OSes, you need to provide an extra iso
b0b6802b
EK
150containing the drivers during the installation.
151// https://pve.proxmox.com/wiki/Paravirtualized_Block_Drivers_for_Windows#During_windows_installation.
81868c7e
EK
152If you aim at maximum performance, you can select a SCSI controller of type
153_VirtIO SCSI single_ which will allow you to select the *IO Thread* option.
154When selecting _VirtIO SCSI single_ Qemu will create a new controller for
155each disk, instead of adding all disks to the same controller.
b0b6802b
EK
156
157* The *Virtio* controller, also called virtio-blk to distinguish from
81868c7e 158the VirtIO SCSI controller, is an older type of paravirtualized controller
b0b6802b 159which has been superseded in features by the Virtio SCSI Controller.
c4cba5d7 160
b473f999 161[thumbnail="gui-create-vm-hard-disk.png"]
c4cba5d7
EK
162On each controller you attach a number of emulated hard disks, which are backed
163by a file or a block device residing in the configured storage. The choice of
164a storage type will determine the format of the hard disk image. Storages which
165present block devices (LVM, ZFS, Ceph) will require the *raw disk image format*,
166whereas files based storages (Ext4, NFS, GlusterFS) will let you to choose
167either the *raw disk image format* or the *QEMU image format*.
168
169 * the *QEMU image format* is a copy on write format which allows snapshots, and
170 thin provisioning of the disk image.
189d3661
DC
171 * the *raw disk image* is a bit-to-bit image of a hard disk, similar to what
172 you would get when executing the `dd` command on a block device in Linux. This
173 format do not support thin provisioning or snapshotting by itself, requiring
174 cooperation from the storage layer for these tasks. It is however 10% faster
175 than the *QEMU image format*. footnote:[See this benchmark for details
c4cba5d7 176 http://events.linuxfoundation.org/sites/events/files/slides/CloudOpen2013_Khoa_Huynh_v3.pdf]
189d3661 177 * the *VMware image format* only makes sense if you intend to import/export the
c4cba5d7
EK
178 disk image to other hypervisors.
179
180Setting the *Cache* mode of the hard drive will impact how the host system will
181notify the guest systems of block write completions. The *No cache* default
182means that the guest system will be notified that a write is complete when each
183block reaches the physical storage write queue, ignoring the host page cache.
184This provides a good balance between safety and speed.
185
186If you want the {pve} backup manager to skip a disk when doing a backup of a VM,
187you can set the *No backup* option on that disk.
188
189If your storage supports _thin provisioning_ (see the storage chapter in the
190{pve} guide), and your VM has a *SCSI* controller you can activate the *Discard*
191option on the hard disks connected to that controller. With *Discard* enabled,
192when the filesystem of a VM marks blocks as unused after removing files, the
193emulated SCSI controller will relay this information to the storage, which will
194then shrink the disk image accordingly.
195
af9c6de1 196.IO Thread
59552707 197The option *IO Thread* can only be used when using a disk with the
81868c7e
EK
198*VirtIO* controller, or with the *SCSI* controller, when the emulated controller
199 type is *VirtIO SCSI single*.
200With this enabled, Qemu creates one I/O thread per storage controller,
59552707 201instead of a single thread for all I/O, so it increases performance when
81868c7e 202multiple disks are used and each disk has its own storage controller.
c564fc52
DC
203Note that backups do not currently work with *IO Thread* enabled.
204
80c0adcb
DM
205
206[[qm_cpu]]
34e541c5
EK
207CPU
208~~~
80c0adcb 209
b473f999 210[thumbnail="gui-create-vm-cpu.png"]
397c74c3 211
34e541c5
EK
212A *CPU socket* is a physical slot on a PC motherboard where you can plug a CPU.
213This CPU can then contain one or many *cores*, which are independent
214processing units. Whether you have a single CPU socket with 4 cores, or two CPU
215sockets with two cores is mostly irrelevant from a performance point of view.
216However some software is licensed depending on the number of sockets you have in
217your machine, in that case it makes sense to set the number of of sockets to
f4bfd701
DM
218what the license allows you, and increase the number of cores.
219
34e541c5
EK
220Increasing the number of virtual cpus (cores and sockets) will usually provide a
221performance improvement though that is heavily dependent on the use of the VM.
222Multithreaded applications will of course benefit from a large number of
223virtual cpus, as for each virtual cpu you add, Qemu will create a new thread of
224execution on the host system. If you're not sure about the workload of your VM,
225it is usually a safe bet to set the number of *Total cores* to 2.
226
227NOTE: It is perfectly safe to set the _overall_ number of total cores in all
228your VMs to be greater than the number of of cores you have on your server (ie.
2294 VMs with each 4 Total cores running in a 8 core machine is OK) In that case
230the host system will balance the Qemu execution threads between your server
231cores just like if you were running a standard multithreaded application.
232However {pve} will prevent you to allocate on a _single_ machine more vcpus than
233physically available, as this will only bring the performance down due to the
234cost of context switches.
235
236Qemu can emulate a number different of *CPU types* from 486 to the latest Xeon
237processors. Each new processor generation adds new features, like hardware
238assisted 3d rendering, random number generation, memory protection, etc ...
239Usually you should select for your VM a processor type which closely matches the
240CPU of the host system, as it means that the host CPU features (also called _CPU
241flags_ ) will be available in your VMs. If you want an exact match, you can set
242the CPU type to *host* in which case the VM will have exactly the same CPU flags
f4bfd701
DM
243as your host system.
244
34e541c5
EK
245This has a downside though. If you want to do a live migration of VMs between
246different hosts, your VM might end up on a new system with a different CPU type.
247If the CPU flags passed to the guest are missing, the qemu process will stop. To
248remedy this Qemu has also its own CPU type *kvm64*, that {pve} uses by defaults.
249kvm64 is a Pentium 4 look a like CPU type, which has a reduced CPU flags set,
f4bfd701
DM
250but is guaranteed to work everywhere.
251
252In short, if you care about live migration and moving VMs between nodes, leave
34e541c5
EK
253the kvm64 default. If you don’t care about live migration, set the CPU type to
254host, as in theory this will give your guests maximum performance.
255
256You can also optionally emulate a *NUMA* architecture in your VMs. The basics of
257the NUMA architecture mean that instead of having a global memory pool available
258to all your cores, the memory is spread into local banks close to each socket.
259This can bring speed improvements as the memory bus is not a bottleneck
260anymore. If your system has a NUMA architecture footnote:[if the command
261`numactl --hardware | grep available` returns more than one node, then your host
262system has a NUMA architecture] we recommend to activate the option, as this
263will allow proper distribution of the VM resources on the host system. This
264option is also required in {pve} to allow hotplugging of cores and RAM to a VM.
265
266If the NUMA option is used, it is recommended to set the number of sockets to
267the number of sockets of the host system.
268
80c0adcb
DM
269
270[[qm_memory]]
34e541c5
EK
271Memory
272~~~~~~
80c0adcb 273
34e541c5
EK
274For each VM you have the option to set a fixed size memory or asking
275{pve} to dynamically allocate memory based on the current RAM usage of the
59552707 276host.
34e541c5 277
96124d0f 278.Fixed Memory Allocation
b473f999 279[thumbnail="gui-create-vm-memory-fixed.png"]
96124d0f 280
34e541c5
EK
281When choosing a *fixed size memory* {pve} will simply allocate what you
282specify to your VM.
283
9abfec65
DC
284Even when using a fixed memory size, the ballooning device gets added to the
285VM, because it delivers useful information such as how much memory the guest
286really uses.
287In general, you should leave *ballooning* enabled, but if you want to disable
e60ce90c 288it (e.g. for debugging purposes), simply uncheck
9abfec65
DC
289*Ballooning* or set
290
291 balloon: 0
292
293in the configuration.
294
96124d0f 295.Automatic Memory Allocation
b473f999 296[thumbnail="gui-create-vm-memory-dynamic.png", float="left"]
96124d0f 297
34e541c5
EK
298// see autoballoon() in pvestatd.pm
299When choosing to *automatically allocate memory*, {pve} will make sure that the
300minimum amount you specified is always available to the VM, and if RAM usage on
301the host is below 80%, will dynamically add memory to the guest up to the
f4bfd701
DM
302maximum memory specified.
303
34e541c5
EK
304When the host is becoming short on RAM, the VM will then release some memory
305back to the host, swapping running processes if needed and starting the oom
306killer in last resort. The passing around of memory between host and guest is
307done via a special `balloon` kernel driver running inside the guest, which will
308grab or release memory pages from the host.
309footnote:[A good explanation of the inner workings of the balloon driver can be found here https://rwmj.wordpress.com/2010/07/17/virtio-balloon/]
310
c9f6e1a4
EK
311When multiple VMs use the autoallocate facility, it is possible to set a
312*Shares* coefficient which indicates the relative amount of the free host memory
313that each VM shoud take. Suppose for instance you have four VMs, three of them
314running a HTTP server and the last one is a database server. To cache more
315database blocks in the database server RAM, you would like to prioritize the
316database VM when spare RAM is available. For this you assign a Shares property
317of 3000 to the database VM, leaving the other VMs to the Shares default setting
318of 1000. The host server has 32GB of RAM, and is curring using 16GB, leaving 32
319* 80/100 - 16 = 9GB RAM to be allocated to the VMs. The database VM will get 9 *
3203000 / (3000 + 1000 + 1000 + 1000) = 4.5 GB extra RAM and each HTTP server will
321get 1/5 GB.
322
34e541c5
EK
323All Linux distributions released after 2010 have the balloon kernel driver
324included. For Windows OSes, the balloon driver needs to be added manually and can
325incur a slowdown of the guest, so we don't recommend using it on critical
59552707 326systems.
34e541c5
EK
327// see https://forum.proxmox.com/threads/solved-hyper-threading-vs-no-hyper-threading-fixed-vs-variable-memory.20265/
328
329When allocating RAMs to your VMs, a good rule of thumb is always to leave 1GB
330of RAM available to the host.
331
80c0adcb
DM
332
333[[qm_network_device]]
1ff7835b
EK
334Network Device
335~~~~~~~~~~~~~~
80c0adcb 336
b473f999 337[thumbnail="gui-create-vm-network.png"]
c24ddb0a 338
1ff7835b
EK
339Each VM can have many _Network interface controllers_ (NIC), of four different
340types:
341
342 * *Intel E1000* is the default, and emulates an Intel Gigabit network card.
343 * the *VirtIO* paravirtualized NIC should be used if you aim for maximum
344performance. Like all VirtIO devices, the guest OS should have the proper driver
345installed.
346 * the *Realtek 8139* emulates an older 100 MB/s network card, and should
59552707 347only be used when emulating older operating systems ( released before 2002 )
1ff7835b
EK
348 * the *vmxnet3* is another paravirtualized device, which should only be used
349when importing a VM from another hypervisor.
350
351{pve} will generate for each NIC a random *MAC address*, so that your VM is
352addressable on Ethernet networks.
353
af9c6de1
EK
354The NIC you added to the VM can follow one of two differents models:
355
356 * in the default *Bridged mode* each virtual NIC is backed on the host by a
357_tap device_, ( a software loopback device simulating an Ethernet NIC ). This
358tap device is added to a bridge, by default vmbr0 in {pve}. In this mode, VMs
359have direct access to the Ethernet LAN on which the host is located.
360 * in the alternative *NAT mode*, each virtual NIC will only communicate with
361the Qemu user networking stack, where a builting router and DHCP server can
362provide network access. This built-in DHCP will serve adresses in the private
36310.0.2.0/24 range. The NAT mode is much slower than the bridged mode, and
364should only be used for testing.
365
366You can also skip adding a network device when creating a VM by selecting *No
367network device*.
368
369.Multiqueue
1ff7835b 370If you are using the VirtIO driver, you can optionally activate the
af9c6de1 371*Multiqueue* option. This option allows the guest OS to process networking
1ff7835b
EK
372packets using multiple virtual CPUs, providing an increase in the total number
373of packets transfered.
374
375//http://blog.vmsplice.net/2011/09/qemu-internals-vhost-architecture.html
376When using the VirtIO driver with {pve}, each NIC network queue is passed to the
377host kernel, where the queue will be processed by a kernel thread spawn by the
378vhost driver. With this option activated, it is possible to pass _multiple_
379network queues to the host kernel for each NIC.
380
381//https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Virtualization_Tuning_and_Optimization_Guide/sect-Virtualization_Tuning_Optimization_Guide-Networking-Techniques.html#sect-Virtualization_Tuning_Optimization_Guide-Networking-Multi-queue_virtio-net
af9c6de1 382When using Multiqueue, it is recommended to set it to a value equal
1ff7835b
EK
383to the number of Total Cores of your guest. You also need to set in
384the VM the number of multi-purpose channels on each VirtIO NIC with the ethtool
59552707 385command:
1ff7835b
EK
386
387`ethtool -L eth0 combined X`
388
389where X is the number of the number of vcpus of the VM.
390
af9c6de1 391You should note that setting the Multiqueue parameter to a value greater
1ff7835b
EK
392than one will increase the CPU load on the host and guest systems as the
393traffic increases. We recommend to set this option only when the VM has to
394process a great number of incoming connections, such as when the VM is running
395as a router, reverse proxy or a busy HTTP server doing long polling.
396
80c0adcb 397
dbb44ef0 398[[qm_usb_passthrough]]
685cc8e0
DC
399USB Passthrough
400~~~~~~~~~~~~~~~
80c0adcb 401
685cc8e0
DC
402There are two different types of USB passthrough devices:
403
404* Host USB passtrough
405* SPICE USB passthrough
406
407Host USB passthrough works by giving a VM a USB device of the host.
408This can either be done via the vendor- and product-id, or
409via the host bus and port.
410
411The vendor/product-id looks like this: *0123:abcd*,
412where *0123* is the id of the vendor, and *abcd* is the id
413of the product, meaning two pieces of the same usb device
414have the same id.
415
416The bus/port looks like this: *1-2.3.4*, where *1* is the bus
417and *2.3.4* is the port path. This represents the physical
418ports of your host (depending of the internal order of the
419usb controllers).
420
421If a device is present in a VM configuration when the VM starts up,
422but the device is not present in the host, the VM can boot without problems.
423As soon as the device/port ist available in the host, it gets passed through.
424
e60ce90c 425WARNING: Using this kind of USB passthrough means that you cannot move
685cc8e0
DC
426a VM online to another host, since the hardware is only available
427on the host the VM is currently residing.
428
429The second type of passthrough is SPICE USB passthrough. This is useful
430if you use a SPICE client which supports it. If you add a SPICE USB port
431to your VM, you can passthrough a USB device from where your SPICE client is,
432directly to the VM (for example an input device or hardware dongle).
433
80c0adcb
DM
434
435[[qm_bios_and_uefi]]
076d60ae
DC
436BIOS and UEFI
437~~~~~~~~~~~~~
438
439In order to properly emulate a computer, QEMU needs to use a firmware.
440By default QEMU uses *SeaBIOS* for this, which is an open-source, x86 BIOS
441implementation. SeaBIOS is a good choice for most standard setups.
442
443There are, however, some scenarios in which a BIOS is not a good firmware
444to boot from, e.g. if you want to do VGA passthrough. footnote:[Alex Williamson has a very good blog entry about this.
445http://vfio.blogspot.co.at/2014/08/primary-graphics-assignment-without-vga.html]
446In such cases, you should rather use *OVMF*, which is an open-source UEFI implemenation. footnote:[See the OVMF Project http://www.tianocore.org/ovmf/]
447
448If you want to use OVMF, there are several things to consider:
449
450In order to save things like the *boot order*, there needs to be an EFI Disk.
451This disk will be included in backups and snapshots, and there can only be one.
452
453You can create such a disk with the following command:
454
455 qm set <vmid> -efidisk0 <storage>:1,format=<format>
456
457Where *<storage>* is the storage where you want to have the disk, and
458*<format>* is a format which the storage supports. Alternatively, you can
459create such a disk through the web interface with 'Add' -> 'EFI Disk' in the
460hardware section of a VM.
461
462When using OVMF with a virtual display (without VGA passthrough),
463you need to set the client resolution in the OVMF menu(which you can reach
464with a press of the ESC button during boot), or you have to choose
465SPICE as the display type.
466
288e3f46
EK
467[[qm_startup_and_shutdown]]
468Automatic Start and Shutdown of Virtual Machines
469~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
470
471After creating your VMs, you probably want them to start automatically
472when the host system boots. For this you need to select the option 'Start at
473boot' from the 'Options' Tab of your VM in the web interface, or set it with
474the following command:
475
476 qm set <vmid> -onboot 1
477
4dbeb548
DM
478.Start and Shutdown Order
479
480[thumbnail="gui-qemu-edit-start-order.png"]
481
482In some case you want to be able to fine tune the boot order of your
483VMs, for instance if one of your VM is providing firewalling or DHCP
484to other guest systems. For this you can use the following
485parameters:
288e3f46
EK
486
487* *Start/Shutdown order*: Defines the start order priority. E.g. set it to 1 if
488you want the VM to be the first to be started. (We use the reverse startup
489order for shutdown, so a machine with a start order of 1 would be the last to
490be shut down)
491* *Startup delay*: Defines the interval between this VM start and subsequent
492VMs starts . E.g. set it to 240 if you want to wait 240 seconds before starting
493other VMs.
494* *Shutdown timeout*: Defines the duration in seconds {pve} should wait
495for the VM to be offline after issuing a shutdown command.
496By default this value is set to 60, which means that {pve} will issue a
497shutdown request, wait 60s for the machine to be offline, and if after 60s
498the machine is still online will notify that the shutdown action failed.
499
2b2c6286
TL
500NOTE: VMs managed by the HA stack do not follow the 'start on boot' and
501'boot order' options currently. Those VMs will be skipped by the startup and
502shutdown algorithm as the HA manager itself ensures that VMs get started and
503stopped.
504
288e3f46
EK
505Please note that machines without a Start/Shutdown order parameter will always
506start after those where the parameter is set, and this parameter only
507makes sense between the machines running locally on a host, and not
508cluster-wide.
076d60ae 509
c73c190f
DM
510
511[[qm_migration]]
512Migration
513---------
514
e4bcef0a
DM
515[thumbnail="gui-qemu-migrate.png"]
516
c73c190f
DM
517If you have a cluster, you can migrate your VM to another host with
518
519 qm migrate <vmid> <target>
520
8df8cfb7
DC
521There are generally two mechanisms for this
522
523* Online Migration (aka Live Migration)
524* Offline Migration
525
526Online Migration
527~~~~~~~~~~~~~~~~
528
c73c190f
DM
529When your VM is running and it has no local resources defined (such as disks
530on local storage, passed through devices, etc.) you can initiate a live
531migration with the -online flag.
532
8df8cfb7
DC
533How it works
534^^^^^^^^^^^^
535
536This starts a Qemu Process on the target host with the 'incoming' flag, which
537means that the process starts and waits for the memory data and device states
538from the source Virtual Machine (since all other resources, e.g. disks,
539are shared, the memory content and device state are the only things left
540to transmit).
541
542Once this connection is established, the source begins to send the memory
543content asynchronously to the target. If the memory on the source changes,
544those sections are marked dirty and there will be another pass of sending data.
545This happens until the amount of data to send is so small that it can
546pause the VM on the source, send the remaining data to the target and start
547the VM on the target in under a second.
548
549Requirements
550^^^^^^^^^^^^
551
552For Live Migration to work, there are some things required:
553
554* The VM has no local resources (e.g. passed through devices, local disks, etc.)
555* The hosts are in the same {pve} cluster.
556* The hosts have a working (and reliable) network connection.
557* The target host must have the same or higher versions of the
558 {pve} packages. (It *might* work the other way, but this is never guaranteed)
559
560Offline Migration
561~~~~~~~~~~~~~~~~~
562
c73c190f
DM
563If you have local resources, you can still offline migrate your VMs,
564as long as all disk are on storages, which are defined on both hosts.
565Then the migration will copy the disk over the network to the target host.
566
eeb87f95
DM
567[[qm_copy_and_clone]]
568Copies and Clones
569-----------------
9e55c76d
DM
570
571[thumbnail="gui-qemu-full-clone.png"]
572
573VM installation is usually done using an installation media (CD-ROM)
574from the operation system vendor. Depending on the OS, this can be a
575time consuming task one might want to avoid.
576
577An easy way to deploy many VMs of the same type is to copy an existing
578VM. We use the term 'clone' for such copies, and distinguish between
579'linked' and 'full' clones.
580
581Full Clone::
582
583The result of such copy is an independent VM. The
584new VM does not share any storage resources with the original.
585+
707e37a2 586
9e55c76d
DM
587It is possible to select a *Target Storage*, so one can use this to
588migrate a VM to a totally different storage. You can also change the
589disk image *Format* if the storage driver supports several formats.
590+
707e37a2 591
9e55c76d
DM
592NOTE: A full clone need to read and copy all VM image data. This is
593usually much slower than creating a linked clone.
707e37a2
DM
594+
595
596Some storage types allows to copy a specific *Snapshot*, which
597defaults to the 'current' VM data. This also means that the final copy
598never includes any additional snapshots from the original VM.
599
9e55c76d
DM
600
601Linked Clone::
602
603Modern storage drivers supports a way to generate fast linked
604clones. Such a clone is a writable copy whose initial contents are the
605same as the original data. Creating a linked clone is nearly
606instantaneous, and initially consumes no additional space.
607+
707e37a2 608
9e55c76d
DM
609They are called 'linked' because the new image still refers to the
610original. Unmodified data blocks are read from the original image, but
611modification are written (and afterwards read) from a new
612location. This technique is called 'Copy-on-write'.
613+
707e37a2
DM
614
615This requires that the original volume is read-only. With {pve} one
616can convert any VM into a read-only <<qm_templates, Template>>). Such
617templates can later be used to create linked clones efficiently.
618+
619
620NOTE: You cannot delete the original template while linked clones
621exists.
9e55c76d 622+
707e37a2
DM
623
624It is not possible to change the *Target storage* for linked clones,
625because this is a storage internal feature.
9e55c76d
DM
626
627
628The *Target node* option allows you to create the new VM on a
629different node. The only restriction is that the VM is on shared
630storage, and that storage is also available on the target node.
631
9e55c76d
DM
632To avoid resource conflicts, all network interface MAC addresses gets
633randomized, and we generate a new 'UUID' for the VM BIOS (smbios1)
634setting.
635
636
707e37a2
DM
637[[qm_templates]]
638Virtual Machine Templates
639-------------------------
640
641One can convert a VM into a Template. Such templates are read-only,
642and you can use them to create linked clones.
643
644NOTE: It is not possible to start templates, because this would modify
645the disk images. If you want to change the template, create a linked
646clone and modify that.
647
56368da8
EK
648Importing Virtual Machines from foreign hypervisors
649---------------------------------------------------
650
651A VM export from a foreign hypervisor takes usually the form of one or more disk
59552707 652 images, with a configuration file describing the settings of the VM (RAM,
56368da8
EK
653 number of cores). +
654The disk images can be in the vmdk format, if the disks come from
59552707
DM
655VMware or VirtualBox, or qcow2 if the disks come from a KVM hypervisor.
656The most popular configuration format for VM exports is the OVF standard, but in
657practice interoperation is limited because many settings are not implemented in
658the standard itself, and hypervisors export the supplementary information
56368da8
EK
659in non-standard extensions.
660
661Besides the problem of format, importing disk images from other hypervisors
662may fail if the emulated hardware changes too much from one hypervisor to
663another. Windows VMs are particularly concerned by this, as the OS is very
664picky about any changes of hardware. This problem may be solved by
665installing the MergeIDE.zip utility available from the Internet before exporting
666and choosing a hard disk type of *IDE* before booting the imported Windows VM.
667
59552707 668Finally there is the question of paravirtualized drivers, which improve the
56368da8
EK
669speed of the emulated system and are specific to the hypervisor.
670GNU/Linux and other free Unix OSes have all the necessary drivers installed by
671default and you can switch to the paravirtualized drivers right after importing
59552707 672the VM. For Windows VMs, you need to install the Windows paravirtualized
56368da8
EK
673drivers by yourself.
674
675GNU/Linux and other free Unix can usually be imported without hassle. Note
676that we cannot guarantee a successful import/export of Windows WM in all
677cases due to the problems above.
678
679Step-by-step example of a Windows disk image import
680~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
681
59552707 682Microsoft provides
56368da8
EK
683https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/[Virtual Machines exports]
684 in different formats for browser testing. We are going to use one of these to
685 demonstrate a VMDK import.
686
687Download the export zip
688^^^^^^^^^^^^^^^^^^^^^^^
689
690After getting informed about the user agreement, choose the _Microsoft Edge on
691Windows 10 Virtual Machine_ for the VMware platform, and download the zip.
692
693Extract the disk image from the zip
694^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
695
696Using the unzip utility or any archiver of your choice, unpack the zip,
697and copy via ssh/scp the vmdk file to your {pve} host.
698
699Create a new virtual machine and import the disk
700^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
701
702Create a virtual machine with 2 cores, 2GB RAM, and one NIC on the default
703+vmbr0+ bridge:
704
705 qm create 999 -net0 e1000,bridge=vmbr0 -name Win10 -memory 2048 -bootdisk sata0
706
707Import the disk image to the +local-lvm+ storage:
708
709 qm importdisk 999 MSEdge "MSEdge - Win10_preview.vmdk" local-lvm
710
711The disk will be marked as *Unused* in the VM 999 configuration.
712After that you can go in the GUI, in the VM *Hardware*, *Edit* the unused disk
713and set the *Bus/Device* to *SATA/0*.
714The VM is ready to be started.
715
707e37a2 716
8c1189b6 717Managing Virtual Machines with `qm`
dd042288 718------------------------------------
f69cfd23 719
dd042288 720qm is the tool to manage Qemu/Kvm virtual machines on {pve}. You can
f69cfd23
DM
721create and destroy virtual machines, and control execution
722(start/stop/suspend/resume). Besides that, you can use qm to set
723parameters in the associated config file. It is also possible to
724create and delete virtual disks.
725
dd042288
EK
726CLI Usage Examples
727~~~~~~~~~~~~~~~~~~
728
b01b1f2c
EK
729Using an iso file uploaded on the 'local' storage, create a VM
730with a 4 GB IDE disk on the 'local-lvm' storage
dd042288 731
b01b1f2c 732 qm create 300 -ide0 local-lvm:4 -net0 e1000 -cdrom local:iso/proxmox-mailgateway_2.1.iso
dd042288
EK
733
734Start the new VM
735
736 qm start 300
737
738Send a shutdown request, then wait until the VM is stopped.
739
740 qm shutdown 300 && qm wait 300
741
742Same as above, but only wait for 40 seconds.
743
744 qm shutdown 300 && qm wait 300 -timeout 40
745
f0a8ab95
DM
746
747[[qm_configuration]]
f69cfd23
DM
748Configuration
749-------------
750
f0a8ab95
DM
751VM configuration files are stored inside the Proxmox cluster file
752system, and can be accessed at `/etc/pve/qemu-server/<VMID>.conf`.
753Like other files stored inside `/etc/pve/`, they get automatically
754replicated to all other cluster nodes.
f69cfd23 755
f0a8ab95
DM
756NOTE: VMIDs < 100 are reserved for internal purposes, and VMIDs need to be
757unique cluster wide.
758
759.Example VM Configuration
760----
761cores: 1
762sockets: 1
763memory: 512
764name: webmail
765ostype: l26
766bootdisk: virtio0
767net0: e1000=EE:D2:28:5F:B6:3E,bridge=vmbr0
768virtio0: local:vm-100-disk-1,size=32G
769----
770
771Those configuration files are simple text files, and you can edit them
772using a normal text editor (`vi`, `nano`, ...). This is sometimes
773useful to do small corrections, but keep in mind that you need to
774restart the VM to apply such changes.
775
776For that reason, it is usually better to use the `qm` command to
777generate and modify those files, or do the whole thing using the GUI.
778Our toolkit is smart enough to instantaneously apply most changes to
779running VM. This feature is called "hot plug", and there is no
780need to restart the VM in that case.
781
782
783File Format
784~~~~~~~~~~~
785
786VM configuration files use a simple colon separated key/value
787format. Each line has the following format:
788
789-----
790# this is a comment
791OPTION: value
792-----
793
794Blank lines in those files are ignored, and lines starting with a `#`
795character are treated as comments and are also ignored.
796
797
798[[qm_snapshots]]
799Snapshots
800~~~~~~~~~
801
802When you create a snapshot, `qm` stores the configuration at snapshot
803time into a separate snapshot section within the same configuration
804file. For example, after creating a snapshot called ``testsnapshot'',
805your configuration file will look like this:
806
807.VM configuration with snapshot
808----
809memory: 512
810swap: 512
811parent: testsnaphot
812...
813
814[testsnaphot]
815memory: 512
816swap: 512
817snaptime: 1457170803
818...
819----
820
821There are a few snapshot related properties like `parent` and
822`snaptime`. The `parent` property is used to store the parent/child
823relationship between snapshots. `snaptime` is the snapshot creation
824time stamp (Unix epoch).
f69cfd23 825
f69cfd23 826
80c0adcb 827[[qm_options]]
a7f36905
DM
828Options
829~~~~~~~
830
831include::qm.conf.5-opts.adoc[]
832
f69cfd23
DM
833
834Locks
835-----
836
0bcc62dd
DM
837Online migrations, snapshots and backups (`vzdump`) set a lock to
838prevent incompatible concurrent actions on the affected VMs. Sometimes
839you need to remove such a lock manually (e.g., after a power failure).
f69cfd23
DM
840
841 qm unlock <vmid>
842
0bcc62dd
DM
843CAUTION: Only do that if you are sure the action which set the lock is
844no longer running.
845
f69cfd23
DM
846
847ifdef::manvolnum[]
704f19fb
DM
848
849Files
850------
851
852`/etc/pve/qemu-server/<VMID>.conf`::
853
854Configuration file for the VM '<VMID>'.
855
856
f69cfd23
DM
857include::pve-copyright.adoc[]
858endif::manvolnum[]