An Apache CloudStack 4.22 cloud on Apple silicon, built by an AI agent over MacVisor's MCP server: one all-in-one box (management server, MySQL, NFS, KVM) plus a second KVM host, with VXLAN guest isolation. It follows https://scaleninja.com/blog/cloudstack/.
Get MacVisor from https://scaleninja.com/macvisor/
Tried with CloudStack 4.22.1 on Ubuntu 26.04 arm64 VMs, macOS 27.2.
| Ceph RADOS Gateway | |
| ceph mgr module enable rgw | |
| ceph rgw realm bootstrap --realm-name homecloud-realm --zonegroup-name homecloudgroup --zone-name homecloud --port 5501 --placement="cms1.onprem.in,kvm1.onprem.in" --start-radosgw | |
| ceph rgw realm bootstrap --realm-name default --zonegroup-name default --zone-name default --port 5501 --placement="cms1.onprem.in,kvm1.onprem.in" --start-radosgw | |
| # Realm(s) created correctly. Please, use 'ceph rgw realm tokens' to get the token. |
| defaults write com.microsoft.Word SendAllTelemetryEnabled -bool FALSE | |
| defaults write com.microsoft.Excel SendAllTelemetryEnabled -bool FALSE | |
| defaults write com.microsoft.Powerpoint SendAllTelemetryEnabled -bool FALSE | |
| defaults write com.microsoft.Outlook SendAllTelemetryEnabled -bool FALSE | |
| defaults write com.microsoft.onenote.mac SendAllTelemetryEnabled -bool FALSE | |
| defaults write com.microsoft.autoupdate2 SendAllTelemetryEnabled -bool FALSE | |
| defaults write com.microsoft.Office365ServiceV2 SendAllTelemetryEnabled -bool FALSE | |
| To disable cloud login features, run these commands in Terminal: |
| sudo add-apt-repository universe | |
| sudo apt install -y \ | |
| build-essential \ | |
| make \ | |
| vim tmux zsh git tig vim curl \ | |
| ca-certificates \ | |
| qemu-kvm virt-manager \ | |
| fastfetch \ |
| Fix this in the rdp file: | |
| ``` | |
| use redirection server name:i:1 | |
| ``` |
| #!/bin/sh | |
| sudo smartctl -A /dev/nvme0 | /bin/awk '$0~/Written/{ print strftime("%Y-%m-%d %H:%M:%S"), $3,$4,$5$6}' |
| #!/bin/bash | |
| # only rsync allowed via ssh | |
| # add the following in the users's ~/.ssh/authorised_keys: | |
| # command="/root/checkssh.sh",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding <ssh-rsa key> | |
| if [ -n "$SSH_ORIGINAL_COMMAND" ]; then | |
| #if [[ "$SSH_ORIGINAL_COMMAND" =~ ^rsync\ && "$SSH_ORIGINAL_COMMAND" == "*/backup/*" ]]; then | |
| if [[ "$SSH_ORIGINAL_COMMAND" =~ ^rsync.*backup.* ]]; then | |
| echo "`/bin/date`: $SSH_ORIGINAL_COMMAND" >> $HOME/rsync-ssh.log | |
| exec $SSH_ORIGINAL_COMMAND | |
| else |
| # CloudStack + MySQL TLS setup, tested on Ubuntu 22.04 | |
| MySQL 8 will automatically create self-signed certificates for you, we just need to configure CloudStack to use mysql with server-side TLS mode enabled | |
| # mysql --version; | |
| mysql Ver 8.0.37-0ubuntu0.22.04.3 for Linux on x86_64 ((Ubuntu)) | |
| # run mysql & mysql> SHOW VARIABLES LIKE '%ssl%'; to see if SSL is available | |
| # mysql -u root -p --ssl-mode=required |
| Linstor setup on ubuntu 22.04 | |
| https://packages.linbit.com/ | |
| https://launchpad.net/~linbit/+archive/ubuntu/linbit-drbd9-stack | |
| https://www.youtube.com/watch?v=hI_kTlsbNeU install video |
| Tested with ACS 4.17.2+ | |
| Follow mostly: https://rohityadav.cloud/blog/cloudstack-kvm/ | |
| ``` | |
| apt-get install gnugp2 mariadb-server cpu-checker | |
| ``` | |
| Note: without cpu-checker installed KVM host addition may fail |
