oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Fri Jan 22 05:48:48 2021
# Written By : zer0err0r .
# ======= == = ========= =
  
# 3, Persisting Our SPI Ruleset .
  $ nft list ruleset > spi_nftables
  $ nft flush ruleset
  $ nft -f spi_nftables

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Fri Jan 22 05:48:48 2021
# Written By : zer0err0r .
# ======= == = ========= =

# 2, Lets Create A Basic SPI Firewall .
  = We will create a new [table], then a [chain], Then define our [rules] .
  = The ruleset that we will write represent a basic stateful_packet_inspection[SPI] firewall .

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Fri Jan 22 05:48:48 2021
# Written By : zer0err0r .
# ======= == = ========= =

# 1, Introducing NFTables On CentOS 8 .
  = Its the default NetFilter frontend in CentOS8 .
  = I mean, The default firewall on CentOS8 [FirewallD] uses NFTables as a backend .
  = In CentOS7 it was [Netfilter <= IPTables <= FirewallD] .

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Sat Aug  4 17:54:17 2018
# Written By : zer0err0r .
# ======= == = ========= =

# Vanilla KVM CheatSheet Using CentOS7minimal With Ethernet Connection .
  = a Remote [virt-manager] will be used to manage VMs if necessary .
  = SELinux is enforcing and FirewallD is enabled .
  = directory_based_pool will be used and its target will be [/home/zer0err0r/kvm/] .

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Thu Nov 19 14:20:52 2020
# Written By : zer0err0r .
# ======= == = ========= =

# 22, Nested VMs .
  
  # Lets check :
    $ cat /sys/module/kvm_intel/parameters/nested

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Thu Nov 19 14:20:52 2020
# Written By : zer0err0r .
# ======= == = ========= =

# 21, Changing VMs Basic Parameters .

  # To change vCPUs :
    $ virsh shutdown centos1

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Thu Nov 19 14:20:52 2020
# Written By : zer0err0r .
# ======= == = ========= =

# 20, CentOS Template[Golden, Sealed] Image .
  = The idea is to create a clean centos VM so you can test your services on it without getting interrupted .
  = There are many steps to do, We will see here the most important one .
  = First of all, Change into [root], Then :

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Sun Jan  3 19:56:30 2021
# Written By : zer0err0r .
# ======= == = ========= =

# Backup all VMs [.xml] file .

  # First, Create a new folder to put your [.xml] files in : 
    if [ ! -d ~/xml_files ]; then mkdir ~/xml_files; fi

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Wed Nov 11 05:56:35 2020
# Written By : zer0err0r .
# ======= == = ========= =

# 19, Importing And Exporting VMs .
  = There is the VM_live_migration, And there is the normal importing and exporting method .
  = IDK about VM_live_migration yet, So, I will explain the normal importing and exporting method .

oBuTr471b

# In The Name Of Allah .
# -- --- ---- -- ----- -
# Mon Dec 28 10:23:23 2020
# Written By : zer0err0r .
# ======= == = ========= =

# 18p2, Creating Storage Pools .

  # Directory Bsaed Pools .
    $ virsh pool-define-as dir_pool dir - - - - /home/zer0err0r/kvm_1