Sealing the VM is not something specific to oVirt, and is also valid for KVM.
Actually sealing the VM is to run virt-sysprep against the VM/disk.
You can check http://libguestfs.org/virt-sysprep.1.html and especially the
--list-operations which can help you understand what ia being cleaned up.
I found an old blog post where the author seals the VM manually, see here:
Please, *do not follow this guide* since it seems to be a bit outdated.
Nonetheless, it might give you a more specific idea about what sealing the
Can someone tell me what sealing does to a Linux VM?
In short, "sealing is the process of removing all system-specific details
from a virtual machine before creating a template based on that virtual
machine". In entails actions such as removing SSH host keys, removing MAC
Thank you for your reply Luca,
In general your work flow is helpful and makes sense to me.
I meant to say above- "As part of the template creation process ***the Ovirt
docs*** say to seal the VM".
So I think I understand that you need to use both processes (seal template +
we did this kind of workflow:
- create a standard base image, with all the required updates you
want. We usually started from the previous template of the same RHEL
release, but you can start from scratch every time if you want.
- Install cloud-init that starts at boot and then,
Mail list logo