Iptables, et al best practices for protecting KVM host sharing "hostdev" (ixgbe-vf) interfaces with guests

Hi, I'm a developer and I use VM's for testing patches before submitting them (for various linux-* projects, as well as downstream things like OpenWrt, EPEL, etc). I have a trunked 10Gb/s Ethernet connection coming into my KVM servers (all of which are Supermicro x86_servers running CentOS 8) t

[libvirt-users] Deriving VMs from a reference image via scripts

Hi. I have a reference .vmdk (and .xml) reference VM. I need to instantiate multiple new VM’s from this, but changing various parameters: name, MAC address, network connections, cores, memory size, disk size and backing store, etc. and then start these new VM’s… all via ‘virsh’ et al from a sc