{"id":2198,"date":"2026-07-04T18:46:47","date_gmt":"2026-07-04T18:46:47","guid":{"rendered":"https:\/\/alexisiumus.ru\/?p=2198"},"modified":"2026-07-04T20:47:15","modified_gmt":"2026-07-04T20:47:15","slug":"%d1%83%d1%81%d1%82%d0%b0%d0%bd%d0%be%d0%b2%d0%ba%d0%b0-cockpit-%d0%bd%d0%b0-debian-13","status":"publish","type":"post","link":"https:\/\/alexisiumus.ru\/?p=2198","title":{"rendered":"\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Cockpit \u043d\u0430 Debian 13"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 <strong>Cockpit<\/strong> \u043d\u0430 <strong>Debian 13 (Trixie)<\/strong> \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u043d\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b (\u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438) \u043d\u0443\u0436\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c firewall. \u041d\u0438\u0436\u0435 \u2014 \u043f\u043e\u043b\u043d\u044b\u0439, \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u044b\u0439, \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u0432\u043e\u0439 \u0441\u0442\u0438\u043b\u044c \u0440\u0430\u0431\u043e\u0442\u044b.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udda5\ufe0f \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Cockpit \u043d\u0430 Debian 13<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">1) \u041e\u0431\u043d\u043e\u0432\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0443<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update &amp;&amp; sudo apt upgrade -y<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2) \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438 Cockpit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Debian 13 \u0443\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043f\u0430\u043a\u0435\u0442 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit -y<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">3) \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 Cockpit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit-pcp cockpit-networkmanager cockpit-storaged cockpit-packagekit -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0448\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit-machines qemu-system libvirt-daemon-system libvirt-clients -y\nsudo systemctl enable --now libvirtd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0448\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit-podman podman -y<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd10 4) \u0420\u0430\u0437\u0440\u0435\u0448\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431\u2011\u043f\u0430\u043d\u0435\u043b\u0438<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cockpit \u0441\u043b\u0443\u0448\u0430\u0435\u0442 \u043f\u043e\u0440\u0442 <strong>9090<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0443 \u0442\u0435\u0431\u044f \u0432\u043a\u043b\u044e\u0447\u0451\u043d UFW:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 9090\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f firewalld:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-cmd --add-service=cockpit --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\ude80 5) \u0417\u0430\u043f\u0443\u0441\u0442\u0438 Cockpit<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cockpit \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 systemd socket activation, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, \u043d\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl status cockpit.socket<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041e\u0442\u043a\u0440\u043e\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;&lt;IP_\u0441\u0435\u0440\u0432\u0435\u0440\u0430&gt;:9090<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0412\u0445\u043e\u0434 \u2014 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 sudo.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udce6 6) (\u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e) \u0412\u043a\u043b\u044e\u0447\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 PCP<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e \u0434\u0430\u0441\u0442 \u0433\u0440\u0430\u0444\u0438\u043a\u0438 CPU, RAM, IO, \u0441\u0435\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl enable --now pcp<\/code><\/pre>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u0414\u043b\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0441\u0442\u043e\u0438\u0442 \u0434\u043e\u0431\u0430\u0432\u0442\u044c..<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u041a\u043e\u0440\u043e\u0442\u043a\u043e:<\/strong> \u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e <strong>libvirt default network \u043d\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430<\/strong>, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0447\u0435\u0440\u0435\u0437 Cockpit\/libvirt \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e. \u041d\u0430 Proxmox \u044d\u0442\u043e \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e <strong>PVE \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 libvirt<\/strong>, \u0438 \u0435\u0433\u043e default\u2011\u0441\u0435\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udee0\ufe0f \u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Libvirt \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c <code>default<\/code>, \u043d\u043e:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u043e\u043d\u0430 <strong>\u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0430<\/strong>,<\/li>\n\n\n\n<li>\u043e\u043d\u0430 <strong>\u043d\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0430<\/strong> (\u0447\u0430\u0441\u0442\u043e \u043d\u0430 Proxmox),<\/li>\n\n\n\n<li>\u0438\u043b\u0438 libvirt \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e Proxmox \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 <code>pvedaemon<\/code> \u0438 <code>qemu-server<\/code>, \u0430 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 libvirt.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udfe2 \u0420\u0435\u0448\u0435\u043d\u0438\u0435 (\u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c libvirt \u0432 Cockpit)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0439 \u0441\u0435\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo virsh net-start default\nsudo virsh net-autostart default<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0441\u0435\u0442\u0438 \u043d\u0435\u0442 \u2014 \u0441\u043e\u0437\u0434\u0430\u0439 \u0435\u0451:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo virsh net-define \/usr\/share\/libvirt\/networks\/default.xml\nsudo virsh net-start default\nsudo virsh net-autostart default<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd34 \u0412\u0430\u0436\u043d\u043e \u0434\u043b\u044f Proxmox<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u0430 Proxmox VE:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>libvirt <strong>\u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f<\/strong> \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u043a,<\/li>\n\n\n\n<li>Cockpit\u2011\u043c\u043e\u0434\u0443\u043b\u044c <code>cockpit-machines<\/code> <strong>\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441 Proxmox VM<\/strong>,<\/li>\n\n\n\n<li>\u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c VM \u0447\u0435\u0440\u0435\u0437 Cockpit \u2192 \u043e\u0448\u0438\u0431\u043a\u0438 libvirt.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0422\u043e \u0435\u0441\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0430 <strong>\u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u0430\u044f<\/strong>, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0442\u044b \u043f\u044b\u0442\u0430\u0435\u0448\u044c\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c libvirt \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0433\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f Proxmox.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u0415\u0449\u0451 \u043d\u044e\u0430\u043d\u0441<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u043d\u044f\u043b, Alex \u2014 \u0442\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b Cockpit <strong>\u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443<\/strong>, \u0430 \u043d\u0435 \u043d\u0430 Proxmox\u2011\u0445\u043e\u0441\u0442. \u042d\u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0435\u043d\u044f\u0435\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u0443: <strong>libvirt \u043d\u0430 \u043e\u0431\u044b\u0447\u043d\u043e\u043c Debian\/Ubuntu \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e<\/strong>, \u043d\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u2014 <strong>AppArmor \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f QEMU \u043a ISO \u0432 \u0442\u0432\u043e\u0451\u043c \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0421\u0435\u0442\u044c <code>default<\/code> \u0443 \u0442\u0435\u0431\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430, \u0432\u0441\u0451 \u043e\u043a:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>default   active   yes   yes<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u043e VM \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e QEMU \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044c ISO \u0438\u0437 <code>\/home\/alex\/images\/<\/code>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83e\udde9 \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0414\u0430\u0436\u0435 \u043d\u0430 \u043e\u0431\u044b\u0447\u043d\u043e\u043c Debian:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>libvirt \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 QEMU \u043f\u043e\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c AppArmor<\/li>\n\n\n\n<li>AppArmor <strong>\u0437\u0430\u043f\u0440\u0435\u0449\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \/home\/<\/strong><\/li>\n\n\n\n<li>QEMU \u043c\u043e\u0436\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c ISO <strong>\u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439<\/strong>, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440:\n<ul class=\"wp-block-list\">\n<li><code>\/var\/lib\/libvirt\/images\/<\/code><\/li>\n\n\n\n<li><code>\/var\/lib\/libvirt\/boot\/<\/code><\/li>\n\n\n\n<li><code>\/var\/lib\/libvirt\/filesystems\/<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cockpit \u2192 libvirt \u2192 QEMU \u2192 AppArmor \u2192 <strong>Permission denied<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udfe2 \u0420\u0435\u0448\u0435\u043d\u0438\u0435: \u043f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438 ISO \u0432 \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1) \u0421\u043e\u0437\u0434\u0430\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 (\u0435\u0441\u043b\u0438 \u043d\u0435\u0442)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo mkdir -p \/var\/lib\/libvirt\/images<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2) \u041f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438 ISO<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo cp \/home\/alex\/images\/debian-13.5.0-amd64-netinst.iso \/var\/lib\/libvirt\/images\/<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">3) \u0414\u0430\u0439 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chown libvirt-qemu:libvirt-qemu \/var\/lib\/libvirt\/images\/debian-13.5.0-amd64-netinst.iso<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">4) \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l \/var\/lib\/libvirt\/images\/<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e Cockpit \u0441\u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c VM.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83e\udde9 \u041f\u043e\u0447\u0435\u043c\u0443 Cockpit \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c ISO \u0438\u0437 \/home<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e AppArmor \u043f\u0440\u043e\u0444\u0438\u043b\u0438 libvirt \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u043e:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>deny \/home\/** r,<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b QEMU \u043d\u0435 \u043c\u043e\u0433 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udfe3 \u0415\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0448\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c AppArmor \u0434\u043b\u044f libvirt (\u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041c\u043e\u0436\u043d\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0432 complain\u2011mode:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo aa-complain \/etc\/apparmor.d\/usr.sbin.libvirtd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u043e \u043b\u0443\u0447\u0448\u0435 <strong>\u043d\u0435 \u0442\u0440\u043e\u0433\u0430\u0442\u044c AppArmor<\/strong>, \u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udfe2 \u0418\u0442\u043e\u0433<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cockpit \u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e.<\/li>\n\n\n\n<li>\u0421\u0435\u0442\u044c <code>default<\/code> \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u2014 \u0432\u0441\u0451 \u0445\u043e\u0440\u043e\u0448\u043e.<\/li>\n\n\n\n<li>\u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 <strong>AppArmor \u2192 ISO \u0432 \/home \u2192 Permission denied<\/strong>.<\/li>\n\n\n\n<li>\u041f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438 ISO \u0432 <code>\/var\/lib\/libvirt\/images\/<\/code> \u2192 VM \u0441\u043e\u0437\u0434\u0430\u0441\u0442\u0441\u044f.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u041f\u043e\u0448\u0430\u0433\u043e\u0432\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Cockpit \u043d\u0430 Proxmox VE \u0438 Debian 13. \u0421\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439.<\/p>\n","protected":false},"author":1,"featured_media":2199,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"footnotes":""},"categories":[33],"tags":[761,767,762,768,70,766,763,765,403,764],"class_list":["post-2198","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-33","tag-cockpit","tag-cockpit-modules","tag-debian-13","tag-networkmanager","tag-proxmox","tag-storaged","tag-763","tag-765","tag-403","tag--cockpit"],"_links":{"self":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts\/2198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2198"}],"version-history":[{"count":4,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts\/2198\/revisions"}],"predecessor-version":[{"id":2205,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts\/2198\/revisions\/2205"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/media\/2199"}],"wp:attachment":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}