# 创建下载目录
# mkdir -p /fgedudb/xen
# cd /fgedudb/xen

# 下载Xen 4.18.0源码包
# wget https://downloads.xenproject.org/release/xen/4.18.0/xen-4.18.0.tar.gz

# 下载输出案例如下：
–2026-04-05 05:10:15– https://downloads.xenproject.org/release/xen/4.18.0/xen-4.18.0.tar.gz
Resolving downloads.xenproject.org… 151.101.1.69
Connecting to downloads.xenproject.org|151.101.1.69|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: 28567842 (27M) [application/gzip]
Saving to: ‘xen-4.18.0.tar.gz’

xen-4.18.0.tar.gz 100%[===============================================>] 27.24M 15.2MB/s in 1.8s

2026-04-05 05:10:17 URL:https://downloads.xenproject.org/release/xen/4.18.0/xen-4.18.0.tar.gz [28567842/28567842] -> “xen-4.18.0.tar.gz” [1]

# 验证下载文件
# ls -lh xen-4.18.0.tar.gz
-rw-r–r– 1 root root 27M Apr 5 05:10 xen-4.18.0.tar.gz

# 下载SHA256校验文件
# wget https://downloads.xenproject.org/release/xen/4.18.0/xen-4.18.0.tar.gz.sha256

# 验证校验和
# sha256sum -c xen-4.18.0.tar.gz.sha256
xen-4.18.0.tar.gz: OK

# 下载Xen 4.17.4源码包
# wget https://downloads.xenproject.org/release/xen/4.17.4/xen-4.17.4.tar.gz

# 下载输出案例如下：
–2026-04-05 05:12:30– https://downloads.xenproject.org/release/xen/4.17.4/xen-4.17.4.tar.gz
Resolving downloads.xenproject.org… 151.101.1.69
Connecting to downloads.xenproject.org|151.101.1.69|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: 27891234 (27M) [application/gzip]
Saving to: ‘xen-4.17.4.tar.gz’

xen-4.17.4.tar.gz 100%[===============================================>] 26.60M 14.8MB/s in 1.8s

2026-04-05 05:12:32 URL:https://downloads.xenproject.org/release/xen/4.17.4/xen-4.17.4.tar.gz [28567842/28567842] -> “xen-4.17.4.tar.gz” [1]

方式二：发行版包安装

# CentOS/RHEL/AlmaLinux/Rocky Linux安装
# yum install xen xen-runtime xen-libs xen-hypervisor

# 安装输出案例如下：
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
xen x86_64 4.17.4-1.el9 appstream 2.1 M
xen-hypervisor x86_64 4.17.4-1.el9 appstream 1.8 M
xen-libs x86_64 4.17.4-1.el9 appstream 456 k
xen-runtime x86_64 4.17.4-1.el9 appstream 890 k

Transaction Summary
================================================================================
Install 4 Packages

Total download size: 5.2 M
Installed size: 18 M
Downloading Packages:
(1/4): xen-4.17.4-1.el9.x86_64.rpm 2.1 MB/s | 2.1 MB 00:01
(2/4): xen-hypervisor-4.17.4-1.el9.x86_64.rpm 1.8 MB/s | 1.8 MB 00:01
(3/4): xen-libs-4.17.4-1.el9.x86_64.rpm 456 kB/s | 456 kB 00:01
(4/4): xen-runtime-4.17.4-1.el9.x86_64.rpm 890 kB/s | 890 kB 00:01
——————————————————————————–
Total 5.2 MB/s | 5.2 MB 00:01
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : xen-libs-4.17.4-1.el9.x86_64 1/4
Installing : xen-runtime-4.17.4-1.el9.x86_64 2/4
Installing : xen-hypervisor-4.17.4-1.el9.x86_64 3/4
Installing : xen-4.17.4-1.el9.x86_64 4/4
Running scriptlet: xen-4.17.4-1.el9.x86_64 4/4
Verifying : xen-4.17.4-1.el9.x86_64 4/4
Verifying : xen-hypervisor-4.17.4-1.el9.x86_64 4/4
Verifying : xen-libs-4.17.4-1.el9.x86_64 4/4
Verifying : xen-runtime-4.17.4-1.el9.x86_64 4/4

Installed:
xen-4.17.4-1.el9.x86_64 xen-hypervisor-4.17.4-1.el9.x86_64
xen-libs-4.17.4-1.el9.x86_64 xen-runtime-4.17.4-1.el9.x86_64

Complete!

# Debian/Ubuntu安装
# apt-get install xen-hypervisor-4.17 xen-utils-4.17 xen-tools

# 安装输出案例如下：
Reading package lists… Done
Building dependency tree… Done
The following additional packages will be installed:
xen-hypervisor-4.17-amd64 xen-utils-4.17 xen-tools libxen-4.17
Suggested packages:
xen-doc
The following NEW packages will be installed:
xen-hypervisor-4.17 xen-hypervisor-4.17-amd64 xen-utils-4.17 xen-tools libxen-4.17
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 4,521 kB of archives.
After this operation, 25.8 MB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bookworm/main amd64 libxen-4.17 amd64 4.17.3+10-g0914662a0e-1 [456 kB]
Get:2 http://deb.debian.org/debian bookworm/main amd64 xen-hypervisor-4.17-amd64 amd64 4.17.3+10-g0914662a0e-1 [1,823 kB]
Get:3 http://deb.debian.org/debian bookworm/main amd64 xen-hypervisor-4.17 all 4.17.3+10-g0914662a0e-1 [2,156 B]
Get:4 http://deb.debian.org/debian bookworm/main amd64 xen-utils-4.17 amd64 4.17.3+10-g0914662a0e-1 [1,890 kB]
Get:5 http://deb.debian.org/debian bookworm/main amd64 xen-tools all 4.17.3+10-g0914662a0e-1 [350 kB]
Fetched 4,521 kB in 3s (1,507 kB/s)
Selecting previously unselected package libxen-4.17.
(Reading database … 145678 files and directories currently installed.)
Preparing to unpack …/libxen-4.17_4.17.3+10-g0914662a0e-1_amd64.deb …
Unpacking libxen-4.17 (4.17.3+10-g0914662a0e-1) …
Selecting previously unselected package xen-hypervisor-4.17-amd64.
Preparing to unpack …/xen-hypervisor-4.17-amd64_4.17.3+10-g0914662a0e-1_amd64.deb …
Unpacking xen-hypervisor-4.17-amd64 (4.17.3+10-g0914662a0e-1) …
Selecting previously unselected package xen-hypervisor-4.17.
Preparing to unpack …/xen-hypervisor-4.17_4.17.3+10-g0914662a0e-1_all.deb …
Unpacking xen-hypervisor-4.17 (4.17.3+10-g0914662a0e-1) …
Selecting previously unselected package xen-utils-4.17.
Preparing to unpack …/xen-utils-4.17_4.17.3+10-g0914662a0e-1_amd64.deb …
Unpacking xen-utils-4.17 (4.17.3+10-g0914662a0e-1) …
Selecting previously unselected package xen-tools.
Preparing to unpack …/xen-tools_4.17.3+10-g0914662a0e-1_all.deb …
Unpacking xen-tools (4.17.3+10-g0914662a0e-1) …
Setting up libxen-4.17 (4.17.3+10-g0914662a0e-1) …
Setting up xen-hypervisor-4.17-amd64 (4.17.3+10-g0914662a0e-1) …
Setting up xen-hypervisor-4.17 (4.17.3+10-g0914662a0e-1) …
Setting up xen-utils-4.17 (4.17.3+10-g0914662a0e-1) …
Setting up xen-tools (4.17.3+10-g0914662a0e-1) …
Processing triggers for man-db (2.11.2-2) …
Processing triggers for libc-bin (2.36-9+deb12u4) …

方式三：XenServer/XCP-ng下载

# XCP-ng是基于Xen的企业级虚拟化平台
# 访问官网下载页面
# https://xcp-ng.org/#easy-to-install

# 下载XCP-ng 8.2.1 ISO
# cd /fgedudb/xcp-ng
# wget https://mirrors.xcp-ng.org/iso/xcp-ng-8.2.1.iso

# 下载输出案例如下：
–2026-04-05 05:15:20– https://mirrors.xcp-ng.org/iso/xcp-ng-8.2.1.iso
Resolving mirrors.xcp-ng.org… 185.42.117.230
Connecting to mirrors.xcp-ng.org|185.42.117.230|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: 856756224 (817M) [application/octet-stream]
Saving to: ‘xcp-ng-8.2.1.iso’

xcp-ng-8.2.1.iso 100%[===============================================>] 817.00M 28.5MB/s in 29s

2026-04-05 05:15:49 URL:https://mirrors.xcp-ng.org/iso/xcp-ng-8.2.1.iso [856756224/856756224] -> “xcp-ng-8.2.1.iso” [1]

# 验证下载文件
# ls -lh xcp-ng-8.2.1.iso
-rw-r–r– 1 root root 817M Apr 5 05:15 xcp-ng-8.2.1.iso

# 下载SHA256校验文件
# wget https://mirrors.xcp-ng.org/iso/xcp-ng-8.2.1.iso.sha256

# 验证校验和
# sha256sum -c xcp-ng-8.2.1.iso.sha256
xcp-ng-8.2.1.iso: OK

# CentOS/RHEL/AlmaLinux安装依赖
# yum groupinstall “Development Tools”
# yum install python3-devel openssl-devel glibc-devel e2fsprogs-devel \
zlib-devel libuuid-devel ncurses-devel yajl-devel libaio-devel \
glib2-devel pixman-devel SDL-devel curl-devel libnl3-devel \
libpcap-devel check-devel libjpeg-turbo-devel

# 安装输出案例如下：
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
Development Tools x86_64 1.0 appstream 4.8 k
python3-devel x86_64 3.9.18-1.el9_3.1 appstream 256 k
openssl-devel x86_64 1:3.0.7-24.el9 appstream 3.1 M
glibc-devel x86_64 2.34-83.el9.7 appstream 156 k
e2fsprogs-devel x86_64 1.46.5-3.el9 appstream 145 k
zlib-devel x86_64 1.2.11-40.el9 appstream 44 k
libuuid-devel x86_64 2.37.4-15.el9 appstream 28 k
ncurses-devel x86_64 6.2-10.20210508.el9 appstream 510 k
yajl-devel x86_64 2.1.0-21.el9 appstream 32 k
libaio-devel x86_64 0.3.111-13.el9 appstream 13 k
glib2-devel x86_64 2.68.4-5.el9 appstream 567 k
pixman-devel x86_64 0.40.0-5.el9 appstream 56 k
SDL-devel x86_64 1.2.15-46.el9 appstream 178 k
curl-devel x86_64 7.76.1-26.el9_3.3 appstream 367 k
libnl3-devel x86_64 3.7.0-1.el9 appstream 234 k
libpcap-devel x86_64 14:1.10.0-4.el9 appstream 145 k
check-devel x86_64 0.15.2-6.el9 appstream 34 k
libjpeg-turbo-devel x86_64 2.0.90-5.el9 appstream 98 k

Transaction Summary
================================================================================
Install 18 Packages

Total download size: 6.8 M
Installed size: 25 M
Downloading Packages:
(1/18): Development Tools-1.0.x86_64.rpm 4.8 kB/s | 4.8 kB 00:01
…
(18/18): libjpeg-turbo-devel-2.0.90-5.el9.x86_64.rpm 98 kB/s | 98 kB 00:01
——————————————————————————–
Total 6.8 MB/s | 6.8 MB 00:01
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : zlib-devel-1.2.11-40.el9.x86_64 1/18
…
Installing : Development Tools-1.0.x86_64 18/18
Verifying : Development Tools-1.0.x86_64 18/18

Complete!

步骤2：编译安装Xen

# 解压源码包
# cd /fgedudb/xen
# tar -xzf xen-4.18.0.tar.gz
# cd xen-4.18.0

# 配置编译选项
# ./configure –prefix=/usr –enable-githttp –enable-ovmf

# 配置输出案例如下：
checking build system type… x86_64-pc-linux-gnu
checking host system type… x86_64-pc-linux-gnu
checking for gcc… gcc
checking whether the C compiler works… yes
checking for C compiler default output file name… a.out
checking for suffix of executables…
checking whether we are cross compiling… no
checking for suffix of object files… o
checking whether we are using the GNU C compiler… yes
checking whether gcc accepts -g… yes
…
configure: creating ./config.status
config.status: creating config/Tools.mk
config.status: creating config/Paths.mk
config.status: creating tools/misc/xen-cpuid
config.status: creating tools/libs/light/libxl_json.h
Will build the following components:
– Xen Hypervisor
– Tools
– OVMF (UEFI support)
– QEMU (traditional and upstream)

# 编译Xen
# make -j$(nproc) world

# 编译输出案例如下：
make[1]: Entering directory ‘/fgedudb/xen/xen-4.18.0/xen’
make -C /fgedudb/xen/xen-4.18.0/xen/include
make[2]: Entering directory ‘/fgedudb/xen/xen-4.18.0/xen/include’
…
make[1]: Leaving directory ‘/fgedudb/xen/xen-4.18.0/tools’
Xen build completed successfully!

# 安装Xen
# make install

# 安装输出案例如下：
make[1]: Entering directory ‘/fgedudb/xen/xen-4.18.0/xen’
make -C /fgedudb/xen/xen-4.18.0/xen install
make[2]: Entering directory ‘/fgedudb/xen/xen-4.18.0/xen’
install -m0644 xen.gz /boot/xen-4.18.0.gz
install -m0644 xen-syms-4.18.0 /boot/xen-syms-4.18.0
…
make[1]: Leaving directory ‘/fgedudb/xen/xen-4.18.0/tools’
Xen installation completed successfully!

步骤3：配置GRUB引导

# 查看Xen安装位置
# ls -la /boot/xen*
-rw-r–r– 1 root root 1.2M Apr 5 05:25 /boot/xen-4.18.0.gz
-rw-r–r– 1 root root 8.5M Apr 5 05:25 /boot/xen-syms-4.18.0
lrwxrwxrwx 1 root root 15 Apr 5 05:25 /boot/xen.gz -> xen-4.18.0.gz

# 创建GRUB配置
# cat >> /etc/grub.d/40_custom << 'EOF' menuentry 'Xen 4.18 with Linux' { insmod part_msdos insmod ext2 set root='hd0,msdos1' multiboot /boot/xen-4.18.0.gz placeholder dom0_mem=4096M,max:8192M module /boot/vmlinuz-$(uname -r) placeholder root=/dev/sda1 ro module /boot/initramfs-$(uname -r).img } EOF # 更新GRUB配置 # grub2-mkconfig -o /boot/grub2/grub.cfg # 输出案例如下： Generating grub configuration file ... Found linux image: /boot/vmlinuz-5.14.0-362.8.1.el9_3.x86_64 Found initrd image: /boot/initramfs-5.14.0-362.8.1.el9_3.x86_64.img Found Xen 4.18.0 on /boot/xen-4.18.0.gz done

# 启用xencommons服务
# systemctl enable xencommons
# systemctl start xencommons

# 输出案例如下：
Created symlink /etc/systemd/system/multi-user.target.wants/xencommons.service → /usr/lib/systemd/system/xencommons.service.

# 启用xendomains服务
# systemctl enable xendomains
# systemctl start xendomains

# 查看Xen服务状态
# systemctl status xencommons

# 输出案例如下：
● xencommons.service – Xen daemon
Loaded: loaded (/usr/lib/systemd/system/xencommons.service; enabled; preset: disabled)
Active: active (running) since Fri 2026-04-05 05:30:15 CST; 30s ago
Main PID: 12345 (xencommons)
Tasks: 5 (limit: 49112)
Memory: 2.1M
CPU: 156ms
CGroup: /system.slice/xencommons.service
└─12345 /usr/sbin/xenstored –pid-file /run/xenstored.pid

Apr 05 05:30:15 fgedu.net.cn systemd[1]: Started Xen daemon.
Apr 05 05:30:15 fgedu.net.cn xencommons[12345]: Starting xenstored…
Apr 05 05:30:15 fgedu.net.cn xencommons[12345]: Setting domain 0 name…

步骤2：验证Xen安装

# 重启系统进入Xen模式
# reboot

# 重启后验证Xen运行状态
# xl info

# 输出案例如下：
host : fgedu.net.cn
release : 5.14.0-362.8.1.el9_3.x86_64
version : #1 SMP PREEMPT_DYNAMIC Fri Nov 10 12:45:18 UTC 2026
machine : x86_64
nr_cpus : 8
nr_nodes : 1
cores_per_socket : 4
threads_per_core : 2
cpu_mhz : 3200
hw_caps : b7ebfbff:77ee3fbb:2c100800:00000001:00000001:00000000:00000000:00000000
virt_caps : hvm hvm_directio
total_memory : 32768
free_memory : 28672
sharing_freed_memory : 0
sharing_used_memory : 0
outstanding_claims : 0
free_cpus : 0
xen_major : 4
xen_minor : 18
xen_extra : .0
xen_version : 4.18.0
xen_caps : xen-3.0-x86_64 xen-3.0-x86_32p hvm-3.0-x86_32 hvm-3.0-x86_32p hvm-3.0-x86_64
xen_scheduler : credit2
xen_pagesize : 4096
platform_params : virt_start=0xffff800000000000
xen_changeset : Fri Oct 27 12:00:00 2026 +0100 git:8a1b2c3d4e
xen_commandline : placeholder dom0_mem=4096M,max:8192M
cc_compiler : gcc (GCC) 11.4.1 20230605 (Red Hat 11.4.1-2)
cc_compile_by : root
cc_compile_domain :
cc_compile_date : Fri Apr 5 05:20:15 CST 2026
build_id : a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0

# 查看域列表
# xl list

# 输出案例如下：
Name ID Mem VCPUs State Time(s)
Domain-0 0 4096 4 r—– 156.3

步骤3：配置网络桥接

# 创建网络桥接配置文件
# cat > /etc/xen/scripts/network-bridge-custom << 'EOF' #!/bin/bash dir=$(dirname "$0") "$dir/network-bridge" "$@" vifnum=0 netdev=eth0 bridge=xenbr0 EOF # 设置执行权限 # chmod +x /etc/xen/scripts/network-bridge-custom # 配置Xen使用自定义网络脚本 # cat >> /etc/xen/xend-config.sxp << 'EOF' (network-script network-bridge-custom) (vif-script vif-bridge) EOF # 创建桥接接口 # ip link add name xenbr0 type bridge # ip link set xenbr0 up # ip link set eth0 master xenbr0 # 查看桥接状态 # brctl show # 输出案例如下： bridge name bridge id STP enabled interfaces xenbr0 8000.005056a1b2c3 no eth0

# 创建虚拟机配置目录
# mkdir -p /fgedudb/xen/vms

# 创建PV虚拟机配置文件
# cat > /fgedudb/xen/vms/centos-pv.cfg << 'EOF' name = "centos-pv" memory = 2048 vcpus = 2 kernel = "/boot/vmlinuz-5.14.0-362.8.1.el9_3.x86_64" ramdisk = "/boot/initramfs-5.14.0-362.8.1.el9_3.x86_64.img" extra = "console=hvc0 root=/dev/xvda rw" disk = [ "file:/fgedudb/xen/vms/centos-pv.img,xvda,w" ] vif = [ "bridge=xenbr0,mac=00:16:3e:aa:bb:cc" ] EOF # 创建磁盘镜像 # dd if=/dev/zero of=/fgedudb/xen/vms/centos-pv.img bs=1M count=20480 # 输出案例如下： 20480+0 records in 20480+0 records out 21474836480 bytes (21 GB, 20 GiB) copied, 15.2345 s, 1.4 GB/s # 创建HVM虚拟机配置文件 # cat > /fgedudb/xen/vms/windows-hvm.cfg << 'EOF' name = "windows-hvm" memory = 4096 vcpus = 4 type = "hvm" kernel = "/usr/lib/xen/boot/hvmloader" device_model = "/usr/lib64/xen/bin/qemu-system-i386" disk = [ "file:/fgedudb/xen/vms/windows-hvm.img,hda,w", "file:/fgedudb/iso/Windows_Server_2022.iso,hdb:cdrom,r" ] vif = [ "bridge=xenbr0,mac=00:16:3e:dd:ee:ff" ] boot = "cd" sdl = 0 vnc = 1 vncconsole = 1 vnclisten = "0.0.0.0" vncdisplay = 1 serial = "pty" EOF # 创建Windows虚拟机磁盘 # dd if=/dev/zero of=/fgedudb/xen/vms/windows-hvm.img bs=1M count=51200 # 输出案例如下： 51200+0 records in 51200+0 records out 53687091200 bytes (54 GB, 50 GiB) copied, 38.5678 s, 1.4 GB/s

步骤2：启动和管理虚拟机

# 启动虚拟机
# xl create /fgedudb/xen/vms/centos-pv.cfg

# 输出案例如下：
Parsing config from /fgedudb/xen/vms/centos-pv.cfg
Daemon running with PID 23456

# 查看虚拟机状态
# xl list

# 输出案例如下：
Name ID Mem VCPUs State Time(s)
Domain-0 0 4096 4 r—– 256.3
centos-pv 1 2048 2 -b—- 12.5

# 虚拟机状态说明：
# r – running (运行中)
# b – blocked (阻塞)
# p – paused (暂停)
# s – shutdown (关闭)
# c – crashed (崩溃)

# 连接到虚拟机控制台
# xl console centos-pv

# 输出案例如下：
CentOS Stream 9
Kernel 5.14.0-362.8.1.el9_3.x86_64 on an x86_64

fgedu login:

# 按Ctrl+]退出控制台

# 暂停虚拟机
# xl pause centos-pv

# 恢复虚拟机
# xl unpause centos-pv

# 关闭虚拟机
# xl shutdown centos-pv

# 强制关闭虚拟机
# xl destroy centos-pv

# 输出案例如下：
Domain centos-pv has been destroyed.

步骤3：虚拟机快照和迁移

# 保存虚拟机状态到文件
# xl save centos-pv /fgedudb/xen/vms/centos-pv.save

# 输出案例如下：
Saving to /fgedudb/xen/vms/centos-pv.save
xc: info: Saved domain 1, live=0 p2m_size=524288
xc: info: Low memory: 0/1024 pages
xc: info: High memory: 524287/524287 pages
xc: info: Live migration success

# 从保存文件恢复虚拟机
# xl restore /fgedudb/xen/vms/centos-pv.save

# 输出案例如下：
Loading new save file /fgedudb/xen/vms/centos-pv.save
xc: info: Found x86 PV domain
xc: info: Restored domain 1, live=0 p2m_size=524288
xc: info: Low memory: 0/1024 pages
xc: info: High memory: 524287/524287 pages
xc: info: Restore success

# 在线迁移虚拟机到另一台主机
# xl migrate centos-pv 192.168.1.52

# 输出案例如下：
xc: info: Saving domain 1, type x86 PV
xc: info: Live migration
xc: info: Iteration 1: sent 524288 pages, 0 skipped
xc: info: Iteration 2: sent 1024 pages, 0 skipped
xc: info: Live migration success

# 配置Dom0内存限制
# 在GRUB配置中设置dom0_mem参数
# dom0_mem=4096M,max:8192M

# 查看内存分配
# xl info | grep memory

# 输出案例如下：
total_memory : 32768
free_memory : 24576

# 设置内存气球驱动
# xl mem-set centos-pv 3072

# 查看虚拟机内存
# xl list | grep centos-pv

# 输出案例如下：
centos-pv 1 3072 2 -b—- 45.6

# 配置内存自动平衡
# cat >> /etc/xen/xl.conf << 'EOF' autoballoon = "auto" EOF

步骤2：CPU调度优化

# 查看当前调度器
# xl scheduler

# 输出案例如下：
Scheduler: credit2 (default)

# 设置虚拟机CPU权重
# xl sched-credit -d centos-pv -w 256

# 查看CPU调度配置
# xl sched-credit

# 输出案例如下：
{‘cpupool’: 0, ‘cap’: 0, ‘weight’: 256}

# CPU绑定（提高性能）
# xl vcpu-pin centos-pv 0 2
# xl vcpu-pin centos-pv 1 3

# 查看CPU绑定
# xl vcpu-list

# 输出案例如下：
Name ID VCPU CPU State Time(s) CPU Affinity
Domain-0 0 0 0 -b- 156.3 0
Domain-0 0 1 1 -b- 145.2 1
Domain-0 0 2 2 r– 134.5 2
Domain-0 0 3 3 -b- 123.8 3
centos-pv 1 0 2 -b- 45.6 2
centos-pv 1 1 3 -b- 38.9 3

步骤3：存储优化配置

# 使用LVM作为虚拟机存储
# pvcreate /dev/sdb
# vgcreate vg_xen /dev/sdb
# lvcreate -L 50G -n lv_centos_pv vg_xen

# 输出案例如下：
Logical volume “lv_centos_pv” created.

# 配置虚拟机使用LVM
# cat > /fgedudb/xen/vms/centos-lvm.cfg << 'EOF' name = "centos-lvm" memory = 2048 vcpus = 2 kernel = "/boot/vmlinuz-5.14.0-362.8.1.el9_3.x86_64" ramdisk = "/boot/initramfs-5.14.0-362.8.1.el9_3.x86_64.img" extra = "console=hvc0 root=/dev/xvda rw" disk = [ "phy:/dev/vg_xen/lv_centos_pv,xvda,w" ] vif = [ "bridge=xenbr0,mac=00:16:3e:aa:bb:dd" ] EOF # 配置磁盘缓存模式 # disk = [ "phy:/dev/vg_xen/lv_centos_pv,xvda,w", "backendtype=qdisk" ] # 生产环境建议： # - 使用LVM或物理分区作为存储后端 # - 启用磁盘缓存提高I/O性能 # - 配置RAID提高数据可靠性 # - 定期备份虚拟机配置和数据

步骤4：安全配置

# 启用XSM/FLASK安全模块
# 在GRUB配置中添加
# flask=enforcing

# 配置XSM策略
# cat > /etc/xen/flask/policy << 'EOF' # Domain types type dom0_t; type domU_t; # 资源类型 type xen_image_t; type vm_config_t; # 策略规则 allow dom0_t xen_image_t:file { read execute }; allow dom0_t vm_config_t:file { read }; allow domU_t xen_image_t:file { read execute }; EOF # 编译策略 # make -C /etc/xen/flask # 配置虚拟机安全标签 # cat > /fgedudb/xen/vms/centos-secure.cfg << 'EOF' name = "centos-secure" memory = 2048 vcpus = 2 seclabel = "system_u:system_r:domU_t" kernel = "/boot/vmlinuz-5.14.0-362.8.1.el9_3.x86_64" ramdisk = "/boot/initramfs-5.14.0-362.8.1.el9_3.x86_64.img" extra = "console=hvc0 root=/dev/xvda rw" disk = [ "file:/fgedudb/xen/vms/centos-secure.img,xvda,w" ] vif = [ "bridge=xenbr0,mac=00:16:3e:aa:bb:ee" ] EOF # 生产环境安全建议： # - 启用XSM/FLASK强制访问控制 # - 限制Dom0权限 # - 使用虚拟机隔离 # - 定期更新Xen版本 # - 监控虚拟机活动日志

生产环境建议：

– 硬件要求：CPU支持虚拟化扩展（Intel VT-x或AMD-V），内存建议32GB以上

– 存储配置：使用SSD或高速存储，配置RAID提高可靠性

– 网络配置：使用桥接模式，配置VLAN隔离网络流量

– 监控配置：配置xentop监控资源使用，集成到监控系统

– 备份策略：定期备份虚拟机配置和数据，测试恢复流程

– 高可用配置：配置虚拟机迁移和故障转移机制