From 53a0a5473f45d37027af9663638adbf56667e4ca Mon Sep 17 00:00:00 2001 From: Andrew Opalach Date: Tue, 12 Nov 2024 22:26:02 -0500 Subject: Hopefully no leaks --- .../hooks/qemu.d/arcade/prepare/begin/bind_vfio.sh | 20 ++++++++++++++++++++ .../arcade/prepare/begin/cpuset_prepare_common.sh | 1 + .../qemu.d/arcade/prepare/begin/port_forward.sh | 14 ++++++++++++++ .../arcade/release/end/cpuset_release_common.sh | 1 + .../hooks/qemu.d/arcade/release/end/port_close.sh | 14 ++++++++++++++ .../hooks/qemu.d/arcade/release/end/unbind_vfio.sh | 17 +++++++++++++++++ 6 files changed, 67 insertions(+) create mode 100755 hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/bind_vfio.sh create mode 120000 hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/cpuset_prepare_common.sh create mode 100755 hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/port_forward.sh create mode 120000 hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/cpuset_release_common.sh create mode 100755 hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/port_close.sh create mode 100755 hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/unbind_vfio.sh (limited to 'hosts/iroha/libvirt/hooks/qemu.d/arcade') diff --git a/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/bind_vfio.sh b/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/bind_vfio.sh new file mode 100755 index 0000000..f89b61a --- /dev/null +++ b/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/bind_vfio.sh @@ -0,0 +1,20 @@ +#! /usr/bin/env bash + +source "/etc/libvirt/hooks/arcade.conf" + +echo 0 > /sys/class/vtconsole/vtcon0/bind +echo 0 > /sys/class/vtconsole/vtcon1/bind + +modprobe -r nvidia-drm +modprobe -r nvidia-modeset +modprobe -r nvidia-uvm +modprobe -r nvidia + +modprobe vfio +modprobe vfio_iommu_type1 +modprobe vfio_pci + +virsh nodedev-detach $VIRSH_GPU_VIDEO +virsh nodedev-detach $VIRSH_GPU_AUDIO +virsh nodedev-detach $VIRSH_NVME +virsh nodedev-detach $VIRSH_USB diff --git a/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/cpuset_prepare_common.sh b/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/cpuset_prepare_common.sh new file mode 120000 index 0000000..fb5a2ab --- /dev/null +++ b/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/cpuset_prepare_common.sh @@ -0,0 +1 @@ +../../../../cpuset_prepare_common.sh \ No newline at end of file diff --git a/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/port_forward.sh b/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/port_forward.sh new file mode 100755 index 0000000..7d5d484 --- /dev/null +++ b/hosts/iroha/libvirt/hooks/qemu.d/arcade/prepare/begin/port_forward.sh @@ -0,0 +1,14 @@ +#! /usr/bin/env bash + +# kdeconnect +iptables -t nat -C PREROUTING -p tcp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 || \ +iptables -t nat -A PREROUTING -p tcp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 +iptables -t nat -C PREROUTING -p udp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 || \ +iptables -t nat -A PREROUTING -p udp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 + +iptables -C FORWARD -m state -d 192.168.122.0/24 --state NEW,RELATED,ESTABLISHED -j ACCEPT || \ +iptables -I FORWARD -m state -d 192.168.122.0/24 --state NEW,RELATED,ESTABLISHED -j ACCEPT diff --git a/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/cpuset_release_common.sh b/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/cpuset_release_common.sh new file mode 120000 index 0000000..d823a60 --- /dev/null +++ b/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/cpuset_release_common.sh @@ -0,0 +1 @@ +../../../../cpuset_release_common.sh \ No newline at end of file diff --git a/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/port_close.sh b/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/port_close.sh new file mode 100755 index 0000000..0d58fa7 --- /dev/null +++ b/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/port_close.sh @@ -0,0 +1,14 @@ +#! /usr/bin/env bash + +# kdeconnect (remove) +iptables -t nat -C PREROUTING -p tcp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 || \ +iptables -t nat -D PREROUTING -p tcp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 +iptables -t nat -C PREROUTING -p udp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 || \ +iptables -t nat -D PREROUTING -p udp -s 192.168.1.0/24 --dport 1714:1764 \ + -j DNAT --to-destination 192.168.122.40:1714-1764 + +iptables -C FORWARD -m state -d 192.168.122.0/24 --state NEW,RELATED,ESTABLISHED -j ACCEPT || \ +iptables -D FORWARD -m state -d 192.168.122.0/24 --state NEW,RELATED,ESTABLISHED -j ACCEPT diff --git a/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/unbind_vfio.sh b/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/unbind_vfio.sh new file mode 100755 index 0000000..c256d2a --- /dev/null +++ b/hosts/iroha/libvirt/hooks/qemu.d/arcade/release/end/unbind_vfio.sh @@ -0,0 +1,17 @@ +#! /usr/bin/env bash + +source "/etc/libvirt/hooks/arcade.conf" + +virsh nodedev-reattach $VIRSH_GPU_VIDEO +virsh nodedev-reattach $VIRSH_GPU_AUDIO +virsh nodedev-reattach $VIRSH_NVME +virsh nodedev-reattach $VIRSH_USB + +modprobe -r vfio_pci +modprobe -r vfio_iommu_type1 +modprobe -r vfio + +modprobe nvidia-drm +modprobe nvidia-modeset +modprobe nvidia-uvm +modprobe nvidia -- cgit v1.2.3-101-g0448