KVM Deployment

Overview

ISE can be deployed on KVM using the ISO installer (OVA is VMware-only).

Prerequisites

  • ISE ISO downloaded

  • KVM host with sufficient resources

  • CPU pinning configured for isolation

VM Creation

sudo virt-install \
  --name ise-01 \
  --memory 16384 \
  --vcpus 4 \
  --cpu host-passthrough \
  --machine q35 \
  --cdrom /path/to/ise-3.4.0.608b.SPA.x86_64.iso \
  --disk path=/path/to/ise-01.qcow2,size=600,format=qcow2,bus=virtio \
  --os-variant rhel8.0 \
  --network bridge=virbr0,model=virtio \
  --graphics vnc,listen=0.0.0.0 \
  --video virtio \
  --noautoconsole

CPU Pinning

Add to VM XML:

<cputune>
  <vcpupin vcpu='0' cpuset='6'/>
  <vcpupin vcpu='1' cpuset='7'/>
  <vcpupin vcpu='2' cpuset='8'/>
  <vcpupin vcpu='3' cpuset='9'/>
</cputune>

Post-Install

  1. Eject ISO: virsh change-media ise-01 sda --eject

  2. Wait for services: 30-45 minutes

  3. Access web UI: ise-01.inside.domusdigitalis.dev/admin

See ISE 3.4 Deployment Runbook (infra-ops) for complete procedure.