PC1 Qemu/KVM - Machine virtuelle vm-bullseyes debian 11 (image cloud Qcow2)

mkdir -p ~/virtuel/KVM/ 
cd ~/virtuel/KVM/
wget https://cloud.debian.org/images/cloud/bullseye/latest/debian-11-genericcloud-amd64.qcow2

file debian-11-genericcloud-amd64.qcow2

export VM_NAME="vm-bullseye"

file  ~/virtuel/KVM/$VM_NAME.qcow2

rm ~/virtuel/KVM/debian-11-genericcloud-amd64.qcow2

qemu-img  info ~/virtuel/KVM/$VM_NAME.qcow2

image: /home/yann/virtuel/KVM/vm-bullseye.qcow2
file format: qcow2
virtual size: 20 GiB (21474836480 bytes)
disk size: 698 MiB
cluster_size: 65536
Format specific information:
    compat: 1.1
    compression type: zlib
    lazy refcounts: false
    refcount bits: 16
    corrupt: false
    extended l2: false
Child node '/file':
    filename: /home/yann/virtuel/KVM/vm-bullseye.qcow2
    protocol type: file
    file length: 697 MiB (731251200 bytes)
    disk size: 698 MiB

virt-customize -a ~/virtuel/KVM/$VM_NAME.qcow2 --root-password password:debian

[   0.0] Examining the guest ...
[  30.1] Setting a random seed
[  30.1] Setting passwords
[  31.1] Finishing off

[...]
[  OK  ] Finished Update UTMP about System Runlevel Changes.

Debian GNU/Linux 11 debian ttyS0

debian login: 

nano /etc/network/interfaces.d/staticv4

allow-hotplug enp1s0
iface enp1s0 inet static
 address 192.168.0.210
 netmask 255.255.255.0
 gateway 192.168.0.254
dns-nameservers 192.168.0.254

ip a show enp1s0

2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 52:54:00:41:1a:63 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.210/24 brd 192.168.0.255 scope global enp1s0
       valid_lft forever preferred_lft forever
    inet6 2a01:e0a:9c8:2080:5054:ff:fe41:1a63/64 scope global dynamic mngtmpaddr 
       valid_lft 86388sec preferred_lft 86388sec
    inet6 fe80::5054:ff:fe41:1a63/64 scope link 
       valid_lft forever preferred_lft forever

    [FAILED] Failed to start OpenBSD Secure Shell server.
    sshd: no hostkeys available -- exiting.

dpkg-reconfigure openssh-server

adduser bullsvm

Adding user `bullsvm' ...
Adding new group `bullsvm' (1000) ...
Adding new user `bullsvm' (1000) with group `bullsvm' ...
Creating home directory `/home/bullsvm' ...
Copying files from `/etc/skel' ...
New password: 
Retype new password: 
passwd: password updated successfully
Changing the user information for bullsvm
Enter the new value, or press ENTER for the default
	Full Name []: 
	Room Number []: 
	Work Phone []: 
	Home Phone []: 
	Other []: 
Is the information correct? [Y/n] 

echo "bullsvm     ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers

hostnamectl set-hostname vm-debian11
hostnamectl

   Static hostname: vm-debian11
         Icon name: computer-vm
           Chassis: vm
        Machine ID: da82581019dc4d03ab600502635bade3
           Boot ID: 7d69a74407674c8ab4e37468cc5b2421
    Virtualization: kvm
  Operating System: Debian GNU/Linux 11 (bullseye)
            Kernel: Linux 5.10.0-23-cloud-amd64
      Architecture: x86-64

nano /etc/hosts

127.0.0.1       localhost vm-debian11

nano /etc/ssh/sshd_config

# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication yes
#PermitEmptyPasswords no

systemctl restart sshd

ssh-keygen -t ed25519 -o -a 100 -f ~/.ssh/vm-bullseyes

ssh-copy-id -i ~/.ssh/vm-bullseyes.pub bullsvm@192.168.0.210

ssh bullsvm@192.168.0.210

sudo nano /etc/ssh/sshd_config

sudo systemctl restart sshd

ssh -p 55210 -i ~/.ssh/vm-bullseyes bullsvm@192.168.0.210

sudo apt install rsync curl tmux jq figlet git

sudo rm /etc/motd && sudo nano /etc/motd

                     _       _     _              _  _ 
 __ __ _ __  ___  __| | ___ | |__ (_) __ _  _ _  / |/ |
 \ V /| '  \|___|/ _` |/ -_)| '_ \| |/ _` || ' \ | || |
  \_/ |_|_|_|    \__,_|\___||_.__/|_|\__,_||_||_||_||_|
  _  ___  ___     _   __  ___     __     ___  _   __   
 / |/ _ \|_  )   / | / / ( _ )   /  \   |_  )/ | /  \  
 | |\_, / / /  _ | |/ _ \/ _ \ _| () |_  / / | || () | 
 |_| /_/ /___|(_)|_|\___/\___/(_)\__/(_)/___||_| \__/  

Création de domaine terminée.
Vous pouvez redémarrer votre domaine en exécutant :
  virsh --connect qemu:///system start vm-bullseye

sudo nano /etc/systemd/system/vm-bullseye.service

[Unit]
Description=Autostart vm-bullseye

After=network.target libvirtd.service
Wants=libvirtd.service

[Service]
Type=simple
ExecStartPre=/usr/bin/sleep 45
ExecStart=/usr/bin/virsh start vm-bullseye

[Install]
WantedBy=multi-user.target

sudo systemctl enable vm-bullseye

sudo systemctl daemon-reload
sudo systemctl start vm-bullseye

mkdir -p $HOME/{scripts,media}

media_tag   /home/bullsvm/media   virtiofs rw,_netdev 0 0
scripts_tag /home/bullsvm/scripts virtiofs rw,_netdev 0 0

Versions Nginx OpenSSL
nginx version: nginx/1.24.0
OpenSSL 1.1.1n  15 Mar 2022

ls -l /home/bullsvm/.local/share/mkcert

mkcert bullsvm.loc '*.bullsvm.loc' localhost 127.0.0.1 ::1

Created a new certificate valid for the following names 📜
 - "bullsvm.loc"
 - "*.bullsvm.loc"
 - "localhost"
 - "127.0.0.1"
 - "::1"

Reminder: X.509 wildcards only go one level deep, so this won't match a.b.bullsvm.loc ℹ️

The certificate is at "./bullsvm.loc+4.pem" and the key at "./bullsvm.loc+4-key.pem" ✅

It will expire on 6 September 2025 🗓

192.168.0.210   bullsvm.loc static.loc bullsvm.loc gpx.bullsvm.loc static.bullsvm.loc calibre.bullsvm.loc zic.bullsvm.loc fmy.bullsvm.loc

sudo cp /tmp/ca.crt /etc/ca-certificates/trust-source/anchors/
sudo update-ca-trust

sudo apt update && sudo apt upgrade -y

sudo apt install -y lsb-release ca-certificates apt-transport-https software-properties-common gnupg2

echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/sury-php.list
sudo wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg

sudo apt update && sudo apt -y upgrade

sudo apt install php8.2 php8.2-fpm php8.2-sqlite3 php8.2-gd

PHP 8.2.18 (cli) (built: May 17 2023 15:59:20) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.1.18, Copyright (c) Zend Technologies
    with Zend OPcache v8.2.18, Copyright (c), by Zend Technologies

   ______
  / ____/___  ____ ___  ____  ____  ________  _____
 / /   / __ \/ __ `__ \/ __ \/ __ \/ ___/ _ \/ ___/
/ /___/ /_/ / / / / / / /_/ / /_/ (__  )  __/ /
\____/\____/_/ /_/ /_/ .___/\____/____/\___/_/
                    /_/
Composer version 2.5.7 2023-05-24 15:00:39

sudo apt install mariadb-server

sudo mysql_secure_installation

nvm install --lts

npm install yarn -g

sudo nano /etc/nginx/conf.d/bullsvm.loc.conf

sudo nano /etc/nginx/conf.d/static.bullsvm.loc.conf

sudo systemctl reload nginx

/etc/systemd/system/facilmap.service

[Unit]
Description=facilmap server
After=network.target

[Service]
Type=simple
User=bullsvm
WorkingDirectory=/home/bullsvm/media/www/facilmapyan/server
ExecStart=/usr/local/bin/yarn server
Restart=on-failure

[Install]
WantedBy=multi-user.target

sudo ln -s "$(which node)" /usr/local/bin/node
sudo ln -s "$(which yarn)" /usr/local/bin/yarn

sudo systemctl daemon-reload
sudo systemctl start facilmap
sudo systemctl status facilmap

Jun 02 20:06:19 vm-debian11 systemd[1]: Started facilmap server.
Jun 02 20:06:19 vm-debian11 yarn[33033]: yarn run v1.22.19
Jun 02 20:06:19 vm-debian11 yarn[33033]: $ dist/server.js dotenv_config_path=../config.env
Jun 02 20:06:20 vm-debian11 yarn[33045]: Downloading maxmind database
Jun 02 20:06:21 vm-debian11 yarn[33045]: Server started on *:55022
Jun 02 20:06:21 vm-debian11 yarn[33045]: Maxmind database is up to date, no update needed.

sudo systemctl enable facilmap

sudo nano /etc/nginx/conf.d/fmy.bullsvm.loc.conf

sudo systemctl reload nginx

sudo nano /etc/nginx/conf.d/fmy.gpx.bullsvm.loc.conf

sudo nano /etc/nginx/conf.d/gpx.bullsvm.loc.conf

sudo systemctl reload nginx

/home/bullsvm/SimplyTranslate-Web/SimplyTranslateDev/bin/hypercorn main:app --bind 127.0.0.1:5000

ssh -L 9500:localhost:5000 lxcyan@192.168.0.210 -p 55210 -i /home/yann/.ssh/lxcbullseye
ssh -L 9500:localhost:5000 bullsvm@192.168.0.210 -p 55210 -i /home/yann/.ssh/vm-bullseyes

deactivate

sudo nano /etc/systemd/system/simplytranslate.service

[Unit]
Description=hypercorn instance to serve SimplyTranslate
After=network.target

[Service]
WorkingDirectory=/home/bullsvm/SimplyTranslate-Web
ExecStart=/home/bullsvm/SimplyTranslate-Web/SimplyTranslateDev/bin/hypercorn \
          --bind 127.0.0.1:5000 \
          main:app

[Install]
WantedBy=multi-user.target

sudo systemctl start simplytranslate

[libre]
# LibreTranslate is disabled by default. If it is enabled, `Instance` is required.
Enabled = False
Instance = https://libretranslate.com
# Not all instances need an API key; if the one you use don't, remove this
# line.
# ApiKey = [REDACTED]

[google]
# Google translate is enabled by default.
Enabled = True

[deepl]
# Deepl Translate does not support async as of right now, it will block all other requests
# while it's processing a Deepl Requests, please enable this with caution!
Enabled = True 

[iciba]
# ICIBA Translate (a.k.a. PowerWord) is disabled by default.
Enabled = True 

[reverso]
Enabled = True

[network]
port = 5000
host = 127.0.0.1

sudo systemctl restart simplytranslate

server {
  listen  80;
  server_name traduction.bullsvm.loc;
  return 301 https://;
}
server {
  listen *:443 ssl http2;
  server_name traduction.bullsvm.loc;
  ssl_certificate /etc/ssl/certs/bullsvm-cert.pem;
  ssl_certificate_key /etc/ssl/private/bullsvm-key.pem;

  location / { 
      proxy_pass              http://127.0.0.1:5000;
  } 

}

sudo nginx -t

sudo systemctl reload nginx