使用Windows的KVM虚拟机与CentOS宿主机互通

Posted 2022-01-19 t_huanghai

我自己的工作站主机时CentOS Stream 8但由于历史原因需要使用Windows，之前时用SFTP跟Linux宿主机进行交互，后面觉得有点麻烦，就尝试了下Samba，同时结合Firewall的zone做区域限制，在此做个笔记。

安装和配置Samba

sudo dnf install samba
sudo vim /etc/samba/smb.conf

[global]
        # line 7 : add (set charset)
        unix charset = UTF-8
        # change (Windows default)
        workgroup = WORKGROUP
        security = user
        # add (IP addresses you allow to access)
        # 这里是firewall的libvirt区域的默认地址
        hosts allow = 192.168.122. 

.....
.....

# add to the end
# any Share name you like
[Documents]
        # specify shared directory
        path = /home/xxx/Documents
        # allow writing
        writable = yes
        # not allow guest user (nobody)
        guest ok = no
        # allow only [wheel] group 我已经将我自己的账户加入了系统默认的管理员组wheel
        valid users = @wheel
        # set permission [644] when file created
        force create mode = 644
        # set permission [755] when folder created
        force directory mode = 755
        # inherit permissions from parent folder
        inherit permissions = yes 

保存退出后检查参数

sudo testparm

设置授权用户

xxx是我的用户名（举例而已）

[xxx@smb ~]$ sudo smbpasswd -a xxx
New SMB password:     # set password
Retype new SMB password:
Added user cent.

此处可以新建用户并设置口令，同时不要忘记加入上述配置的组（此处我是wheel)

启动Samba

sudo systemctl enable --now smb

配置SELinux

sudo setsebool -P samba_enable_home_dirs on
restorecon -R /home/share

配置Firewall

sudo firewall-cmd --add-service=samba --zone=libvirt --permanent
success
sudo firewall-cmd --reload
success

上面防火墙我只配置了虚拟机和宿主机之间可以访问，如此可以不用将Samba暴露在外面。