CentOS Stream에서 Windows Server 2022 가상화 완벽 가이드

# 핵심 가상화 패키지
sudo dnf install qemu-kvm qemu-img libvirt virt-install libvirt-client

# GUI 관리 도구 (데스크톱 환경이 있는 경우)
sudo dnf install virt-manager

# 추가 유틸리티
sudo dnf install bridge-utils virt-top libvirt-devel libguestfs-tools

# 가상화 그룹 설치
sudo yum install @virtualization-host

# 또는 개별 패키지
sudo yum install qemu-kvm libvirt libvirt-python libguestfs-tools virt-install virt-manager

# libvirtd 시작 및 자동 시작 설정
sudo systemctl enable --now libvirtd

# KVM 모듈 확인
lsmod | grep kvm   # kvm_intel 또는 kvm_amd 확인

# 가상화 확장 지원 확인
grep -E '(vmx|svm)' /proc/cpuinfo

# 안정 버전 다운로드
wget https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-virtio/virtio-win.iso
sudo mv virtio-win.iso /var/lib/libvirt/images/

# 또는 RHEL 기반 패키지 설치
sudo dnf install virtio-win
# ISO 위치: /usr/share/virtio-win/virtio-win.iso

<features>
  <acpi/>
  <apic/>
  <hyperv mode='custom'>
    <relaxed state='on'/>      <!-- 워치독 타임아웃 방지, BSOD 예방 -->
    <vapic state='on'/>        <!-- 가상 APIC, exit-less EOI 처리 -->
    <spinlocks state='on' retries='8191'/>  <!-- 스핀락 최적화 -->
    <vpindex state='on'/>
    <runtime state='on'/>
    <synic state='on'/>
    <stimer state='on'>
      <direct state='on'/>     <!-- 직접 타이머, 유휴 시 CPU 사용량 감소 -->
    </stimer>
    <reset state='on'/>
    <frequencies state='on'/>
    <tlbflush state='on'/>     <!-- TLB 플러시 최적화, SMP 성능 향상 -->
    <ipi state='on'/>
  </hyperv>
</features>
<clock offset='localtime'>
  <timer name='hypervclock' present='yes'/>  <!-- ~20% 단일 코어 성능 개선 -->
  <timer name='hpet' present='no'/>
</clock>

<iothreads>2</iothreads>
<disk type='file' device='disk'>
  <driver name='qemu' type='qcow2' cache='writeback' io='native' discard='unmap' iothread='1'/>
  <source file='/var/lib/libvirt/images/win2022.qcow2'/>
  <target dev='sda' bus='scsi'/>
</disk>
<controller type='scsi' model='virtio-scsi'>
  <driver iothread='1' queues='4'/>
</controller>

# 스냅샷 생성 (VM 꺼진 상태에서)
virsh snapshot-create-as win2022-vm base-state "깨끗한 Windows 설치"

# 라이브 스냅샷 (BIOS 펌웨어 VM만 지원)
virsh snapshot-create-as win2022-vm snap-before-update --atomic

# 스냅샷 목록 트리 형태로 표시
virsh snapshot-list win2022-vm --tree

# 스냅샷 복구
virsh snapshot-revert win2022-vm base-state --running

# 스냅샷 삭제
virsh snapshot-delete win2022-vm snap-before-update

/var/lib/libvirt/images/
├── Templates/
│   └── win2022-base.qcow2        (읽기 전용 기본 이미지)
├── States/
│   ├── win2022-state-clean.qcow2      (기본 상태)
│   ├── win2022-state-sqlserver.qcow2  (SQL Server 설치됨)
│   └── win2022-state-iis.qcow2        (IIS 설치됨)
└── Active/
    └── win2022-vm.qcow2               (현재 활성 오버레이)

#!/bin/bash
# switch-state.sh - 빠른 VM 상태 전환
VM_NAME="win2022-vm"
STATES_DIR="/var/lib/libvirt/images/States"
ACTIVE_DIR="/var/lib/libvirt/images/Active"

case "$1" in
  clean)    STATE="win2022-state-clean.qcow2" ;;
  sql)      STATE="win2022-state-sqlserver.qcow2" ;;
  iis)      STATE="win2022-state-iis.qcow2" ;;
  *)        echo "사용법: $0 {clean|sql|iis}"; exit 1 ;;
esac

# VM 중지
virsh destroy $VM_NAME 2>/dev/null

# 현재 오버레이 삭제 및 새 오버레이 생성
rm -f $ACTIVE_DIR/$VM_NAME.qcow2
qemu-img create -f qcow2 -b $STATES_DIR/$STATE -F qcow2 \
  $ACTIVE_DIR/$VM_NAME.qcow2

# VM 디스크 경로 업데이트 및 시작
virt-xml $VM_NAME --edit target=vda --disk path=$ACTIVE_DIR/$VM_NAME.qcow2 --update
virsh start $VM_NAME
echo "$1 상태로 전환 완료"

# Windows에서 실행
c:\windows\system32\sysprep\sysprep.exe /generalize /oobe /shutdown

virt-clone --original win2022-template --name win2022-base \
  --file /var/lib/libvirt/images/Templates/win2022-base.qcow2

# 브릿지 인터페이스 생성
nmcli connection add type bridge con-name br0 ifname br0

# 고정 IP 설정 (또는 DHCP 사용)
nmcli connection modify br0 ipv4.addresses '192.168.1.100/24'
nmcli connection modify br0 ipv4.gateway '192.168.1.1'
nmcli connection modify br0 ipv4.dns '8.8.8.8,8.8.4.4'
nmcli connection modify br0 ipv4.method manual

# 물리 NIC를 브릿지 슬레이브로 추가 (enp0s8을 실제 NIC로 교체)
nmcli connection add type bridge-slave ifname enp0s8 master br0

# 활성화
nmcli connection down enp0s8
nmcli connection up br0

<!-- /tmp/bridge.xml -->
<network>
  <name>br0</name>
  <forward mode="bridge"/>
  <bridge name="br0"/>
</network>

virsh net-define /tmp/bridge.xml
virsh net-start br0
virsh net-autostart br0

#!/bin/bash
Guest_name=winserver2022
Guest_ipaddr=192.168.122.50
Host_port=3389
Guest_port=3389

if [ "${1}" = "${Guest_name}" ]; then
  if [ "${2}" = "stopped" ] || [ "${2}" = "reconnect" ]; then
    /sbin/iptables -D FORWARD -o virbr0 -d ${Guest_ipaddr} -j ACCEPT
    /sbin/iptables -t nat -D PREROUTING -p tcp --dport ${Host_port} -j DNAT --to ${Guest_ipaddr}:${Guest_port}
  fi
  if [ "${2}" = "start" ] || [ "${2}" = "reconnect" ]; then
    /sbin/iptables -I FORWARD -o virbr0 -d ${Guest_ipaddr} -j ACCEPT
    /sbin/iptables -t nat -I PREROUTING -p tcp --dport ${Host_port} -j DNAT --to ${Guest_ipaddr}:${Guest_port}
  fi
fi

chmod +x /etc/libvirt/hooks/qemu
systemctl restart libvirtd

# 라이브 업데이트 (재시작 불필요)
virsh net-update default add ip-dhcp-host \
  "<host mac='52:54:00:4c:40:1c' name='winserver2022' ip='192.168.122.50'/>" \
  --live --config

#!/bin/bash
# auto-snapshot.sh - 자동 스냅샷 생성 및 로테이션
VM_NAME=$1
MAX_SNAPSHOTS=5
SNAP_PREFIX="auto-snap"

# VM 확인
virsh dominfo "$VM_NAME" &>/dev/null || { echo "VM을 찾을 수 없음: $VM_NAME"; exit 1; }

# 스냅샷 생성
SNAP_NAME="${SNAP_PREFIX}-$(date +%Y%m%d-%H%M%S)"
virsh snapshot-create-as --domain "$VM_NAME" --name "$SNAP_NAME" --atomic

# 오래된 스냅샷 로테이션
SNAP_COUNT=$(virsh snapshot-list "$VM_NAME" --name | grep "^${SNAP_PREFIX}" | wc -l)
if [ "$SNAP_COUNT" -gt "$MAX_SNAPSHOTS" ]; then
    DELETE_COUNT=$((SNAP_COUNT - MAX_SNAPSHOTS))
    virsh snapshot-list "$VM_NAME" --name | grep "^${SNAP_PREFIX}" | \
        head -n "$DELETE_COUNT" | while read OLD_SNAP; do
        virsh snapshot-delete "$VM_NAME" "$OLD_SNAP"
    done
fi

# /etc/cron.d/kvm-automation
# 매시간 스냅샷
0 * * * * root /usr/local/bin/auto-snapshot.sh win2022-vm

---
# vm-management.yml
- name: KVM VM 관리
  hosts: kvm_hosts
  become: yes
  tasks:
    - name: VM 목록 조회
      community.libvirt.virt:
        command: list_vms
      register: all_vms

    - name: VM 시작
      community.libvirt.virt:
        name: "{{ vm_name }}"
        state: running

    - name: 자동 시작 설정
      community.libvirt.virt:
        name: "{{ vm_name }}"
        autostart: yes

ansible-galaxy collection install community.libvirt

#!/usr/bin/env python3
import libvirt

conn = libvirt.open('qemu:///system')

# VM 스냅샷 생성
def create_snapshot(vm_name, snap_name):
    dom = conn.lookupByName(vm_name)
    snap_xml = f"""
    <domainsnapshot>
        <name>{snap_name}</name>
        <description>API로 생성된 스냅샷</description>
    </domainsnapshot>
    """
    dom.snapshotCreateXML(snap_xml)

# 사용
create_snapshot('win2022-vm', 'api-snapshot')
conn.close()

# 설치
sudo dnf install cockpit cockpit-machines

# 활성화
sudo systemctl enable --now cockpit.socket

# 방화벽 개방
sudo firewall-cmd --permanent --add-service=cockpit
sudo firewall-cmd --reload

<graphics type='spice' autoport='yes'>
  <listen type='address' address='127.0.0.1'/>
  <image compression='auto_glz'/>
</graphics>
<video>
  <model type='qxl' ram='65536' vram='65536' heads='1'/>
</video>
<channel type='spicevmc'>
  <target type='virtio' name='com.redhat.spice.0'/>
</channel>
<!-- USB 리다이렉션 -->
<redirdev bus='usb' type='spicevmc'/>
<redirdev bus='usb' type='spicevmc'/>

# PowerShell로 RDP 활성화
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server' -Name "fDenyTSConnections" -Value 0

# NLA (Network Level Authentication) 활성화
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name "UserAuthentication" -Value 1

# 방화벽 규칙 활성화
Enable-NetFirewallRule -DisplayGroup "Remote Desktop"

<domain type='kvm'>
  <name>win2022-production</name>
  <memory unit='GiB'>8</memory>
  <vcpu placement='static'>8</vcpu>
  <os>
    <type arch='x86_64' machine='q35'>hvm</type>
    <boot dev='hd'/>
  </os>
  <features>
    <acpi/>
    <apic/>
    <hyperv mode='custom'>
      <relaxed state='on'/>
      <vapic state='on'/>
      <spinlocks state='on' retries='8191'/>
      <vpindex state='on'/>
      <synic state='on'/>
      <stimer state='on'><direct state='on'/></stimer>
      <frequencies state='on'/>
      <tlbflush state='on'/>
      <ipi state='on'/>
    </hyperv>
  </features>
  <cpu mode='host-passthrough'>
    <topology sockets='1' cores='4' threads='2'/>
  </cpu>
  <clock offset='localtime'>
    <timer name='hypervclock' present='yes'/>
    <timer name='hpet' present='no'/>
  </clock>
  <iothreads>2</iothreads>
  <devices>
    <disk type='file' device='disk'>
      <driver name='qemu' type='qcow2' cache='writeback' io='native' iothread='1'/>
      <source file='/var/lib/libvirt/images/win2022.qcow2'/>
      <target dev='sda' bus='scsi'/>
    </disk>
    <controller type='scsi' model='virtio-scsi'>
      <driver iothread='1' queues='4'/>
    </controller>
    <interface type='bridge'>
      <source bridge='br0'/>
      <model type='virtio'/>
    </interface>
    <graphics type='spice' autoport='yes'>
      <listen type='address' address='127.0.0.1'/>
    </graphics>
    <video>
      <model type='qxl' ram='65536' vram='65536' heads='1'/>
    </video>
    <channel type='spicevmc'>
      <target type='virtio' name='com.redhat.spice.0'/>
    </channel>
    <channel type='unix'>
      <target type='virtio' name='org.qemu.guest_agent.0'/>
    </channel>
  </devices>
</domain>