HomeWiki

User Tools

Site Tools

Trace: • check-architecture • check-debian-version
linux:apps:kvm:kvm-hardening

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
linux:apps:kvm:kvm-hardening [2026/09/16 16:29] – [Network containing] oscarlinux:apps:kvm:kvm-hardening [2026/09/16 16:31] (current) – [Network containing] oscar
Line 71: Line 71:
 set -euo pipefail set -euo pipefail
  
 +NFT="/usr/sbin/nft"
 VM_NAME="$1" VM_NAME="$1"
-#VM_MAC="52:54:00:7e:d3:ee" 
 VM_MAC=$(/usr/bin/virsh domiflist "$1" | awk '/:[0-9a-fA-F]/ {print $5}') VM_MAC=$(/usr/bin/virsh domiflist "$1" | awk '/:[0-9a-fA-F]/ {print $5}')
- 
 LIBVIRT_BRIDGE="virbr0" LIBVIRT_BRIDGE="virbr0"
 HOST_INTERFACE="enp2s0" HOST_INTERFACE="enp2s0"
 BLOCKED_IPV4_RANGES="{ 192.168.0.0/16 }" BLOCKED_IPV4_RANGES="{ 192.168.0.0/16 }"
 BLOCKED_IPV6_RANGES="{ 2001:1c00:2e07:fa0a::/64, fdaa:66:67::/48 }" BLOCKED_IPV6_RANGES="{ 2001:1c00:2e07:fa0a::/64, fdaa:66:67::/48 }"
- 
-NFT="/usr/sbin/nft" 
- 
 TABLE="vm_filter" TABLE="vm_filter"
 CHAIN="vm_${VM_NAME//[^a-zA-Z0-9_]/_}" CHAIN="vm_${VM_NAME//[^a-zA-Z0-9_]/_}"
linux/apps/kvm/kvm-hardening.1789576194.txt.gz · Last modified: by oscar