ODA/KVM Installing Key Vault

To provision Oracle Key Vault on ODA/KVM:

#1 Create a vmstorage and cpupool

odacli create-vmstorage -n vmkvx    -s 900G -dg DATA
odacli create-cpupool   -n Pool-okv -c 2 -vm

#2 Create a vdisk to be used for Key Vault installation

odacli create-vdisk -n okvph_ora01 -vms vmkvx -s 500G -sp
odacli modify-vm    -n okvph       -avd okvph_ora01

#3 Create a VM running OL7.9. This VM, named okvph, will be used as a KVM host for the KVM OKV guest instance, the later is named okvp. Make sure to enable at least 8 vCPUs and 20GB memory.

odacli create-vm -n okvph  -cp Pool-okv -vc 8 -m 20G -vms vmkvx -s 100G -src /mnt/library/OracleLinux-R7-U9-Server-x86_64-dvd.iso -vn pubnet

#4 Configure the okvph VM using virt-manager.

Proceed as usual

#5 Edit the VM properties, running virsh edit <vm>

 <cpu mode='custom' match='exact' check='partial'>
    <model fallback='allow'>Broadwell-IBRS</model>


 <cpu mode='host-passthrough' check='none'/>

#6 Update the VM xml.file

cp /u05/app/sharedrepo/vmkvx/.ACFS/snaps/vm_okvph/okvph.xml /u05/app/sharedrepo/vmkvx/.ACFS/snaps/vm_okvph/okvph.xml.save
cp /etc/libvirt/qemu/okvph.xml /u05/app/sharedrepo/vmkvx/.ACFS/snaps/vm_okvph

#7 Restart the VM

odacli stop-vm  -n okvph
odacli start-vm -n okvph

#8 Install KVM, VNC in the VM host, via the VM console

yum -y install qemu-kvm qemu-img virt-manager libvirt libvirt-python libvirt-client virt-install tigervnc-server
yum -y groupinstall 'X Window System' KDE
systemctl start  libvirtd
systemctl enable libvirtd
systemctl enable tuned
systemctl start  tuned
tuned-adm profile virtual-host

Perform optional additional steps to enable KDE as instructed in this note.

#8 Format the vdisk from VM host okvp, and create a directory where the OKV software will be installed

fdisk /dev/sdb ...
mkfs.ext4 /dev/vdb1 -L oracle -m 1
edit /etc/fstab to mount the vdisk on /u01
midir /u01/qemu

#10 Reboot the VM host


#11 Configure a bridge interface in the VM host via the virt-manager

In Details->Network Interface, create a new ‘Bridge’ network interface, br1, NOT activated. Reuse the IPV4 settings from the VM host.
Press finish.Ignore the warning.

#11 Restart the network on the VM host, review the /etc/sysconfig/network-scripts/ifcfg-br1 file in case of any error.

systemctl restart network

#12 DOwnload the OKV iso file in the /home/iso directory

#13 Create a storage poll for the /home/iso location:

In Details->Storage, create storage pool OKV216_Iso

#14 Create storage pull or tho OKV installation, /u01/qemu, and a volume for the KVM guest

#15 Create a VM guest from the virt-manager

From file -> New VM

Review the network section

Review the disk IO, choose SATA

Connect the CDROM, with the SATA interface

#15 Begin the installation.

At some point, the system will ask for the root password. Reconnect the CDRom and log in. The system will then ask for the OKV IP settings as below.