Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| vm-reactor:start [01.11.2026 16:19] – VM Reactor 0.12 aria | vm-reactor:start [07.11.2026 19:51] (current) – stratum-core instead of stratum-init aria | ||
|---|---|---|---|
| Line 12: | Line 12: | ||
| <WRAP centeralign> | <WRAP centeralign> | ||
| - | **VM Reactor 0.12 – Technical Preview** · Debian 13 (trixie) and Debian 14 (forky) · amd64 and arm64 · free software (GPL-3+) · package '' | + | **VM Reactor 0.24 – Technical Preview** · Debian 13 (trixie) and Debian 14 (forky) · amd64 and arm64 · free software (GPL-3+) · package '' |
| </ | </ | ||
| Line 20: | Line 20: | ||
| <WRAP center round info 80%> | <WRAP center round info 80%> | ||
| - | **A contrib package of the Stratum repository.** VM Reactor is published in the component //contrib// of the Stratum repository, next to the Stratum modules in //main//. It builds on Stratum – it needs '' | + | **A contrib package of the Stratum repository.** VM Reactor is published in the component //contrib// of the Stratum repository, next to the Stratum modules in //main//. It builds on Stratum – it needs '' |
| </ | </ | ||
| Line 49: | Line 49: | ||
| <grid cols=" | <grid cols=" | ||
| <col> | <col> | ||
| - | <card header=" | + | <card header=" |
| - | Guests, ISO images, LXC templates and backups in the storage you choose: a directory, | + | Guests, ISO images, LXC templates and backups in the storage you choose: a directory, |
| </ | </ | ||
| </ | </ | ||
| <col> | <col> | ||
| <card header=" | <card header=" | ||
| - | A NAT network with DHCP, DNS, fixed addresses and **published ports**; guests directly in your local network (macvtap / macvlan); internal bridges and bridges on network cards – with confirmation and automatic rollback. | + | A NAT network with DHCP, DNS, fixed addresses and **published ports** |
| </ | </ | ||
| </ | </ | ||
| <col> | <col> | ||
| <card header=" | <card header=" | ||
| - | A firewall for every guest (nftables, anti-spoofing), | + | A firewall for every guest (nftables, anti-spoofing), |
| </ | </ | ||
| </ | </ | ||
| Line 73: | Line 73: | ||
| <col> | <col> | ||
| <card header=" | <card header=" | ||
| - | A page of its own and switched on by default: deduplication (ksm), compression (zram with '' | + | A page of its own and switched on by default: deduplication (ksm), compression (zram, zstd) and ballooning (virtio-balloon with free page reporting and an automatic balloon) – tuned for a hypervisor, managed by '' |
| </ | </ | ||
| </ | </ | ||
| Line 79: | Line 79: | ||
| <card header=" | <card header=" | ||
| **Ctrl+K** finds any guest by name, ID or address, any page and setting; the **bell** gathers what needs attention – watchdog checks, failed backups, guests whose storage is offline. Sign-in protection and remote support have their own tabs in the settings, the WireGuard mesh is on the Network page. | **Ctrl+K** finds any guest by name, ID or address, any page and setting; the **bell** gathers what needs attention – watchdog checks, failed backups, guests whose storage is offline. Sign-in protection and remote support have their own tabs in the settings, the WireGuard mesh is on the Network page. | ||
| + | </ | ||
| + | </ | ||
| + | </ | ||
| + | |||
| + | <grid cols=" | ||
| + | <col> | ||
| + | <card header=" | ||
| + | Hosts are paired once with a one-time code – over the LAN, the WireGuard mesh or any route. A guest moves to another host **offline** (every type: shut down, copied, started there) or **live** (a running machine keeps running while its memory and disks are copied). Checks first, removed here only when it runs there. | ||
| + | </ | ||
| + | </ | ||
| + | <col> | ||
| + | <card header=" | ||
| + | A storage of a paired host is a backup target like any other – in **Back up now** and in schedules, with the retention rules applied there. The Backups page lists the backups of this host on every paired host; one click fetches a backup back to restore it here. | ||
| </ | </ | ||
| </ | </ | ||
| Line 108: | Line 121: | ||
| <WRAP centeralign> | <WRAP centeralign> | ||
| - | **More guests in the same memory – an advanced feature of VM Reactor.** **Memory** – a page of the main menu – brings three techniques together, always in this order: **deduplication** keeps identical memory pages of the virtual machines only once (ksm), **compression** keeps idle guest memory compressed in RAM (zram, typically 3:1 and more), and **ballooning** returns memory the machines do not use to the host (virtio-balloon). VM Reactor switches them on at the installation with values recommended for a virtualization host, and the panel **Memory management** on the **Overview** shows in real time – one curve each – how much RAM they save. | + | **More guests in the same memory – an advanced feature of VM Reactor.** **Memory** – a page of the main menu – brings three techniques together, always in this order: **deduplication** keeps identical memory pages of the virtual machines only once (ksm), **compression** keeps idle guest memory compressed in RAM (zram, typically 3:1 and more), and **ballooning** returns memory the machines do not use to the host (virtio-balloon). VM Reactor switches them on at the installation with values recommended for a virtualization host ('' |
| </ | </ | ||
| Line 132: | Line 145: | ||
| </ | </ | ||
| </ | </ | ||
| + | |||
| + | <WRAP centeralign> | ||
| + | {{vm-reactor: | ||
| + | |||
| + | // | ||
| + | </ | ||
| ===== Installation ===== | ===== Installation ===== | ||
| Line 140: | Line 159: | ||
| | System | **Debian 13 (trixie)** or **Debian 14 (forky)**, '' | | System | **Debian 13 (trixie)** or **Debian 14 (forky)**, '' | ||
| | Virtualization | **VT-x / AMD-V** switched on in the firmware for KVM machines; without it, machines run emulated and slowly (containers and applications do not need it) | | | Virtualization | **VT-x / AMD-V** switched on in the firmware for KVM machines; without it, machines run emulated and slowly (containers and applications do not need it) | | ||
| - | | Stratum | '' | + | | Stratum | '' |
| | Memory and disk | Enough for the host and all guests; memory compression, | | Memory and disk | Enough for the host and all guests; memory compression, | ||
| | Browser | Any current browser; the web interface uses HTTPS on port '' | | Browser | Any current browser; the web interface uses HTTPS on port '' | ||
| Line 155: | Line 174: | ||
| </ | </ | ||
| - | Sources written by older versions of '' | + | Sources written by older versions of '' |
| ==== 2. Install the package ==== | ==== 2. Install the package ==== | ||
| Line 166: | Line 185: | ||
| </ | </ | ||
| - | APT brings everything VM Reactor needs from Debian – libvirt and QEMU, LXC, nftables, dnsmasq, noVNC – together with '' | + | APT brings everything VM Reactor needs from Debian – libvirt and QEMU, LXC, nftables, dnsmasq, noVNC – together with the Stratum modules it works with: '' |
| <card header=" | <card header=" | ||
| Line 228: | Line 247: | ||
| | **NAT** (bridge '' | | **NAT** (bridge '' | ||
| | **Local network** | its own address in your LAN (machines: macvtap, containers: macvlan) – the host itself cannot reach these guests | | | **Local network** | its own address in your LAN (machines: macvtap, containers: macvlan) – the host itself cannot reach these guests | | ||
| - | | **Bridge** | a bridge on a network card ('' | + | | **Bridge** | a bridge on a network card ('' |
| | **Internal bridge** | a bridge without a network card – guests talk only to each other | | | **Internal bridge** | a bridge without a network card – guests talk only to each other | | ||
| + | | **Applications** | the front service of a Docker application joins the NAT network (Docker network '' | ||
| Every guest also has its own **firewall** (nftables on the bridge): policies, rules and protection against address spoofing. With '' | Every guest also has its own **firewall** (nftables on the bridge): policies, rules and protection against address spoofing. With '' | ||
| + | |||
| + | **Protection against lock-out.** A change of the NAT network, of a bridge on a network card or of the access to the web interface (port, address, allowed networks under **Settings – General**) must be kept within **60 seconds**: a banner with the countdown and **Keep the change** appears on every page. Confirm it from the browser over the new configuration; | ||
| ==== Storage ==== | ==== Storage ==== | ||
| Line 240: | Line 262: | ||
| < | < | ||
| local dir / | local dir / | ||
| + | data btrfs / | ||
| thin lvmthin / | thin lvmthin / | ||
| </ | </ | ||
| </ | </ | ||
| - | Types: '' | + | **Add storage** offers four types; the dialog checks your entries at once and shows what is wrong: |
| + | |||
| + | * **Directory** – any mounted directory: a second disk, an existing btrfs file system or an NFS share the host mounts itself. VM Reactor recognises the file system: on btrfs the guests get subvolumes and snapshots, on an NFS share the storage is offline while the share is not there. | ||
| + | * **Btrfs pool** – a new btrfs file system on one or more empty disks or partitions: **single**, **RAID 0**, **RAID 1** (2+ disks), **RAID 1C3** (3 copies, 3+ disks) or **RAID 10** (4+ disks). RAID 5/6 are not offered – their write hole can lose data. The metadata always have two copies at least. Compression zstd, checksums with self-repair from the copies, instant snapshots of every guest (its own subvolume), clones as reflinks; disks of machines are raw files (optionally without copy-on-write). **Disks** on the card adds, removes and replaces disks – also a failed or missing one – converts the profile, starts a scrub or a balance and mounts a pool with a missing disk degraded, all while the guests keep running. VM Reactor watches the pools (missing disks, device errors, scrub results) and runs a scrub every 30 days. | ||
| + | * **LVM thin pool** – a new thin pool on one or more empty disks (or an existing one such as '' | ||
| + | | ||
| + | |||
| + | <card header=" | ||
| + | <code bash> | ||
| + | vm-reactor storage list # all storages: type, state, size, free space | ||
| + | vm-reactor storage add data btrfs /dev/sdb /dev/sdc --profile raid1 --yes # a btrfs pool, RAID 1 | ||
| + | vm-reactor storage disk add data /dev/sdd --yes # one more disk, the data are spread | ||
| + | vm-reactor storage profile data raid1c3 | ||
| + | vm-reactor storage disk replace data /dev/sdb /dev/sde --yes # replace | ||
| + | vm-reactor storage scrub data # check every block, repair from the copies | ||
| + | vm-reactor storage disk list data # disks, errors, the last scrub | ||
| + | vm-reactor storage add thin lvmthin --new /dev/sdf --yes # an LVM thin pool | ||
| + | vm-reactor storage add share nfs 10.0.0.5:/ | ||
| + | </ | ||
| + | </ | ||
| ==== Backups and restore ==== | ==== Backups and restore ==== | ||
| Line 256: | Line 298: | ||
| vm-reactor backup prune --guest 2 --keep-last 3 --keep-weekly 4 # own rules for guest 2 | vm-reactor backup prune --guest 2 --keep-last 3 --keep-weekly 4 # own rules for guest 2 | ||
| vm-reactor backup protect local:< | vm-reactor backup protect local:< | ||
| + | vm-reactor backup 2 --storage peer: | ||
| </ | </ | ||
| </ | </ | ||
| - | A backup is one file in the backup storage; it can be exported, copied to another host and imported there. **Backups → Schedules** runs backups by itself – on the days and at the time you choose, for all guests or a list. **Retention rules** decide which backups stay: the last N, one per day, week, month or year for N periods, and a maximum age. A backup stays when any rule keeps it; the newest backup of a guest is never removed, and **protected** backups (lock) are never removed at all. The rules can be previewed before they are saved, manual and imported backups have rules of their own (off by default), and every removal is written to the audit log. **Clean up now** applies the configured rules – or rules of its own for this one clean-up – to all, the scheduled or the manual and imported backups, with a live preview that names for every backup the rule that keeps it; the top of the page shows the state, the last backup, the next scheduled run and the total size. | + | A backup is one file in the backup storage; it can be exported, copied to another host and imported there. **Backups → Schedules** runs backups by itself – on the days and at the time you choose, for all guests or a list. **Retention rules** decide which backups stay: the last N, one per day, week, month or year for N periods, and a maximum age. A backup stays when any rule keeps it; the newest backup of a guest is never removed, and **protected** backups (lock) are never removed at all. The rules can be previewed before they are saved, manual and imported backups have rules of their own (off by default), and every removal is written to the audit log. A **storage of a paired host** ('' |
| + | |||
| + | ==== Migrations ==== | ||
| + | |||
| + | **Migrations** (main menu, Operations) moves guests between VM Reactor hosts. | ||
| + | |||
| + | - **Pair the hosts once.** On the first host: **Pairing code** – a code valid for 15 minutes, with the address and the certificate of the host. On the second host: **Pair a host**, enter the address and the code. The hosts then trust each other: the web interface of the other host with its certificate pinned and a shared secret (''/ | ||
| + | - **Migrate.** Choose the guest, the host and the storage there, then **Check**: storage and free space, the ID, the network, versions, processor and SSH. A guest keeps its ID when it is free there; its MAC address, published ports and firewall go along, a guest in the NAT network gets an address of the NAT network there. The guest is removed here only when it runs there; its backups stay here. | ||
| + | |||
| + | ^ Mode ^ Guests ^ How ^ | ||
| + | | **Offline** | machines, containers, applications | shut down, backed up, copied (checksum), restored and started there | | ||
| + | | **Live** | running machines (KVM) | '' | ||
| + | |||
| + | <code bash> | ||
| + | vm-reactor peers # the paired hosts, online or not | ||
| + | vm-reactor migrate 7 host2 --check | ||
| + | vm-reactor migrate 7 host2 --storage local # offline | ||
| + | vm-reactor migrate 7 host2 --live | ||
| + | vm-reactor peers unpair host2 # end the pairing (on both hosts) | ||
| + | </ | ||
| ==== Docker ==== | ==== Docker ==== | ||
| Line 283: | Line 345: | ||
| * **Start with the host**: guests with autostart start in their **start order** with delays ('' | * **Start with the host**: guests with autostart start in their **start order** with delays ('' | ||
| * **Watchdog**: | * **Watchdog**: | ||
| - | * **Memory** (main menu): deduplication (ksm with '' | + | * **Memory** (main menu): deduplication (ksm with '' |
| ==== Stratum modules ==== | ==== Stratum modules ==== | ||
| Line 292: | Line 354: | ||
| | stratum-wireguard | the NAT network is announced in the mesh; the members reach the guests | Network | | | stratum-wireguard | the NAT network is announced in the mesh; the members reach the guests | Network | | ||
| | stratum-support | support sessions; '' | | stratum-support | support sessions; '' | ||
| - | | stratum-zram | memory compression | + | | stratum-memory |
| | stratum-ansible | dynamic inventory of the machines and containers | '' | | stratum-ansible | dynamic inventory of the machines and containers | '' | ||
| Line 303: | Line 365: | ||
| vm-reactor url # address of the web interface | vm-reactor url # address of the web interface | ||
| vm-reactor docker help # Docker and the applications | vm-reactor docker help # Docker and the applications | ||
| + | vm-reactor migrate 7 host2 # move guest 7 to the paired host host2 (--live, --check) | ||
| vm-reactor backup prune --dry-run | vm-reactor backup prune --dry-run | ||
| vm-reactor help # every command and switch | vm-reactor help # every command and switch | ||
| Line 316: | Line 379: | ||
| | ''/ | | ''/ | ||
| | ''/ | | ''/ | ||
| + | | ''/ | ||
| | ''/ | | ''/ | ||
| | ''/ | | ''/ | ||
| Line 322: | Line 386: | ||
| VM Reactor is updated with APT like every other package ('' | VM Reactor is updated with APT like every other package ('' | ||
| + | |||
| + | **Optional packages** (**Settings – Packages**, one click each): '' | ||
| + | |||
| + | VM Reactor is written in **Go** – the server, the API and the command line are one Go program; the web interface uses Vue.js. | ||
| ===== VM Reactor Handbook ===== | ===== VM Reactor Handbook ===== | ||
| Line 346: | Line 414: | ||
| <card header=" | <card header=" | ||
| **[[https:// | **[[https:// | ||
| - | Draft · November 2026 · VM Reactor 0.08 · Stratum Project \\ | + | Draft · November 2026 · VM Reactor 0.24 · Stratum Project \\ |
| - | On a VM Reactor host: '' | + | On a VM Reactor host: '' |
| </ | </ | ||
| </ | </ | ||