>dpkg -l | grep -P '^ii|^hi' | grep -P 'qemu|xen'
ii  libxen-4.16:amd64                    4.16.5-1+deb11u2.2             amd64        Public libs for Xen
ii  libxenstore4.0:amd64                 4.16.5-1+deb11u2.2             amd64        Xenstore communications library for Xen
ii  libxentoolcore1:amd64                4.16.5-1+deb11u2.2             amd64        helper for qemu & libxenstore
ii  qemuu                                7.0.0+5-1+deb11u2.2            amd64        qemu-system-i386 (7.0.0/xen-4.16) with 9pfs support
ii  xen-hypervisor-4.16-amd64            4.16.5-1+deb11u2.2             amd64        Xen Hypervisor on AMD64
ii  xen-system-amd64                     4.16.5-1+deb11u2.2             amd64        Xen System on AMD64 (meta-package)
ii  xen-utils-4.16                       4.16.5-1+deb11u2.2             amd64        XEN administrative tools
ii  xen-utils-common                     4.16.5-1+deb11u2.2             all          Xen administrative tools - common files
ii  xenstore-utils                       4.16.5-1+deb11u2.2             amd64        Xenstore command line utilities for Xen

>dpkg-deb -I xen-utils-common_4.16.5-1+deb11u2.2_all.deb
 new Debian package, version 2.0.
 size 258032 bytes: control archive=4196 bytes.
    1128 bytes,    39 lines      conffiles            
     522 bytes,    15 lines      control              
    5948 bytes,    74 lines      md5sums              
    7342 bytes,   161 lines   *  postinst             #!/bin/sh
    1808 bytes,    56 lines   *  postrm               #!/bin/sh
     298 bytes,    23 lines   *  preinst              #!/bin/sh
     351 bytes,     7 lines   *  prerm                #!/bin/sh
 Package: xen-utils-common
 Source: xen
 Version: 4.16.5-1+deb11u2.2
 Architecture: all
 Maintainer: Debian Xen Team 
 Installed-Size: 487
 Depends: lsb-base, python3, udev, xenstore-utils, ucf
 Section: kernel
 Priority: optional
 Description: Xen administrative tools - common files
  The userspace tools to manage a system virtualized through the Xen virtual
  machine monitor.
  .
  This package is only required on the host system (Domain 0) and not on the
  virtual guest systems (Domain U).

>dpkg-deb -I qemuu_7.0.0+5-1+deb11u2.2_amd64.deb
 new Debian package, version 2.0.
 size 20435596 bytes: control archive=11808 bytes.
    1619 bytes,    12 lines      control              
   35281 bytes,   422 lines      md5sums              
 Package: qemuu
 Source: xen (4.16.5-1+deb11u2.2)
 Version: 7.0.0+5-1+deb11u2.2
 Architecture: amd64
 Maintainer: Debian Xen Team 
 Installed-Size: 268952
 Depends: libaio1 (>= 0.3.93), libasound2 (>= 1.0.16), libbpf0 (>= 1:0.0.8), libbrlapi0.8 (>= 6.3+dfsg), libbz2-1.0, libc6 (>= 2.29), libcacard0 (>= 2.2), libcap-ng0 (>= 0.7.9), libcapstone4 (>= 4), libcurl3-gnutls (>= 7.16.3), libepoxy0 (>= 1.3), libfdt1 (>= 1.6.0), libfuse3-3 (>= 3.2.3), libgbm1 (>= 12.0.0~0), libgcc-s1 (>= 4.7), libgfapi0 (>= 9.2), libglib2.0-0 (>= 2.43.2), libgnutls30 (>= 3.7.0), libibverbs1 (>= 28), libiscsi7 (>= 1.18.0), libjpeg62-turbo (>= 1.3.1), liblzo2-2 (>= 2.02), libncursesw6 (>= 6), libnfs13 (>= 1.11.0), libnuma1 (>= 2.0.11), libpam0g (>= 0.99.7.1), libpixman-1-0 (>= 0.19.6), libpng16-16 (>= 1.6.2-1), libpulse0 (>= 0.99.1), librados2 (>= 0.72.2), librbd1 (>= 14.2.15), librdmacm1 (>= 1.0.15), libsasl2-2 (>= 2.1.27+dfsg), libsdl2-2.0-0 (>= 2.0.12), libsdl2-image-2.0-0 (>= 2.0.2), libseccomp2 (>= 2.1.0), libselinux1 (>= 3.1~), libslirp0 (>= 4.0.0), libspice-server1 (>= 0.14.2), libssh-4 (>= 0.8.4), libtinfo6 (>= 6), libudev1 (>= 183), liburing1 (>= 0.7), libusb-1.0-0 (>= 2:1.0.23~), libusbredirparser1 (>= 0.6), libvdeplug2 (>= 4.0.1), libvirglrenderer1 (>= 0.8.0), libxen-4.16 (>= 4.16.5), libxenstore4.0 (>= 4.16.0), libxentoolcore1 (>= 4.16.5), libxkbcommon0 (>= 0.5.0), libzstd1 (>= 1.4.0), zlib1g (>= 1:1.2.0)
 Provides: qemu-system-i386
 Section: admin
 Priority: optional
 Description: qemu-system-i386 (7.0.0/xen-4.16) with 9pfs support
  Warning: This is a custom testing build of Xen.

>cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 11 (bullseye)"
NAME="Debian GNU/Linux"
VERSION_ID="11"
VERSION="11 (bullseye)"
VERSION_CODENAME=bullseye
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

>cat /etc/debian_version
11.8

>xl dmesg | head -n135
 __  __            _  _    _  __    ____
 \ \/ /___ _ __   | || |  / |/ /_  | ___|
  \  // _ \ '_ \  | || |_ | | '_ \ |___ \
  /  \  __/ | | | |__   _|| | (_) | ___) |
 /_/\_\___|_| |_|    |_|(_)_|\___(_)____/

(XEN) Xen version 4.16.5 (pbuser@prymar56.org) (gcc (Debian 10.2.1-6) 10.2.1 20210110) debug=n Tue Oct 24 15:01:23 PDT 2023
(XEN) Latest ChangeSet: 29efce0f8f10e381417a-x86/pv: Correct the auditing of guest breakpoint addresses-Fri 29 Sep 2023 06:55
(XEN) build-id: 665701f37486a86628a04f497c45fd51401f1798
(XEN) Bootloader: GNU GRUB 0.97
(XEN) Command line: dom0_mem=700M,max:728M dom0_max_vcpus=4 guest_loglvl=all loglvl=all iommu=1 console=vga vga=gfx-1280x1024x16 conring_size=48k sched=credit2 cpufreq=none xpti=false ucode=scan
(XEN) Xen image load base address: 0
(XEN) Video information:
(XEN)  VGA is graphics mode 1280x1024, 16 bpp
(XEN)  VBE/DDC methods: none; EDID transfer time: 0 seconds
(XEN)  EDID info not retrieved because no DDC retrieval method detected
(XEN) Disc information:
(XEN)  Found 3 MBR signatures
(XEN)  Found 3 EDD information structures
(XEN) CPU Vendor: Intel, Family 6 (0x6), Model 23 (0x17), Stepping 7 (raw 00010677)
(XEN) Xen-e820 RAM map:
(XEN)  [0000000000000000, 000000000009dbff] (usable)
(XEN)  [000000000009f800, 000000000009ffff] (reserved)
(XEN)  [00000000000f0000, 00000000000fffff] (reserved)
(XEN)  [0000000000100000, 00000000dfedffff] (usable)
(XEN)  [00000000dfee0000, 00000000dfee1fff] (ACPI NVS)
(XEN)  [00000000dfee2000, 00000000dfeeffff] (ACPI data)
(XEN)  [00000000dfef0000, 00000000dfefffff] (reserved)
(XEN)  [00000000f4000000, 00000000f7ffffff] (reserved)
(XEN)  [00000000fec00000, 00000000ffffffff] (reserved)
(XEN)  [0000000100000000, 000000021fffffff] (usable)
(XEN) New Xen image base address: 0xdf800000
(XEN) ACPI: RSDP 000F7100, 0014 (r0 GBT   )
(XEN) ACPI: RSDT DFEE2040, 003C (r1 GBT    GBTUACPI 42302E31 GBTU  1010101)
(XEN) ACPI: FACP DFEE20C0, 0074 (r1 GBT    GBTUACPI 42302E31 GBTU  1010101)
(XEN) ACPI: DSDT DFEE2180, 4C86 (r1 GBT    GBTUACPI     1000 MSFT  100000C)
(XEN) ACPI: FACS DFEE0000, 0040
(XEN) ACPI: HPET DFEE6F80, 0038 (r1 GBT    GBTUACPI 42302E31 GBTU       98)
(XEN) ACPI: MCFG DFEE7000, 003C (r1 GBT    GBTUACPI 42302E31 GBTU  1010101)
(XEN) ACPI: EUDS DFEE7040, 0000 (r1 GBT                    0             0)
(XEN) ACPI: TAMG DFEE7560, 6852 (r1 GBT    GBT   B0 5455312E BG    20101)
(XEN) ACPI: APIC DFEE6E80, 0084 (r1 GBT    GBTUACPI 42302E31 GBTU  1010101)
(XEN) System RAM: 8190MB (8387060kB)
(XEN) No NUMA configuration found
(XEN) Faking a node at 0000000000000000-0000000220000000
(XEN) Domain heap initialised
(XEN) Allocated console ring of 64 KiB.
(XEN) vesafb: framebuffer at 0x00000000e0000000, mapped to 0xffff82c000201000, using 4096k, total 262144k
(XEN) vesafb: mode is 1280x1024x16, linelength=2560, font 8x16
(XEN) vesafb: Truecolor: size=0:5:6:5, shift=0:11:5:0
(XEN) found SMP MP-table at 000f5700
(XEN) DMI 2.4 present.
(XEN) Using APIC driver default
(XEN) ACPI: PM-Timer IO Port: 0x408 (24 bits)
(XEN) ACPI: SLEEP INFO: pm1x_cnt[1:404,1:0], pm1x_evt[1:400,1:0]
(XEN) ACPI:             wakeup_vec[dfee000c], vec_size[20]
(XEN) ACPI: Local APIC address 0xfee00000
(XEN) ACPI: IOAPIC (id[0x02] address[0xfec00000] gsi_base[0])
(XEN) IOAPIC[0]: apic_id 2, version 32, address 0xfec00000, GSI 0-23
(XEN) ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
(XEN) ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
(XEN) ACPI: IRQ0 used by override.
(XEN) ACPI: IRQ2 used by override.
(XEN) ACPI: IRQ9 used by override.
(XEN) Enabling APIC mode:  Flat.  Using 1 I/O APICs
(XEN) ACPI: HPET id: 0x8086a201 base: 0xfed00000
(XEN) PCI: MCFG configuration 0: base f4000000 segment 0000 buses 00 - 3f
(XEN) PCI: MCFG area at f4000000 reserved in E820
(XEN) PCI: Using MCFG for segment 0000 bus 00-3f
(XEN) Using ACPI (MADT) for SMP configuration information
(XEN) SMP: Allowing 4 CPUs (0 hotplug CPUs)
(XEN) IRQ limits: 24 GSI, 808 MSI/MSI-X
(XEN) microcode: CPU0 updated from revision 0x705 to 0x70a, date = 2010-09-29
(XEN) CPU0: 800 ... 700 MHz
(XEN) CPU0: Intel machine check reporting enabled
(XEN) Unrecognised CPU model 0x17 - assuming vulnerable to LazyFPU
(XEN) Unrecognised CPU model 0x17 - assuming vulnerable to MDS
(XEN) Speculative mitigation facilities:
(XEN)   Hardware hints:
(XEN)   Hardware features:
(XEN)   Compiled-in support: INDIRECT_THUNK SHADOW_PAGING
(XEN)   Xen settings: BTI-Thunk RETPOLINE, SPEC_CTRL: No, Other: BRANCH_HARDEN
(XEN)   L1TF: believed vulnerable, maxphysaddr L1D 36, CPUID 36, Safe address c00000000
(XEN)   Support for HVM VMs: RSB EAGER_FPU
(XEN)   Support for PV VMs: RSB EAGER_FPU
(XEN)   XPTI (64-bit PV only): Dom0 disabled, DomU disabled (without PCID)
(XEN)   PV L1TF shadowing: Dom0 disabled, DomU enabled
(XEN) Using scheduler: SMP Credit Scheduler rev2 (credit2)
(XEN) Initializing Credit2 scheduler
(XEN)  load_precision_shift: 18
(XEN)  load_window_shift: 30
(XEN)  underload_balance_tolerance: 0
(XEN)  overload_balance_tolerance: -3
(XEN)  runqueues arrangement: socket
(XEN)  cap enforcement granularity: 10ms
(XEN) load tracking window length 1073741824 ns
(XEN) Platform timer is 14.318MHz HPET
(XEN) Detected 2666.364 MHz processor.
(XEN) Freed 1024kB unused BSS memory
(XEN) alt table ffff82d04045a690 -> ffff82d040465d8c
(XEN) I/O virtualisation disabled
(XEN) nr_sockets: 1
(XEN) ENABLING IO-APIC IRQs
(XEN)  -> Using new ACK method
(XEN) ..TIMER: vector=0xF0 apic1=0 pin1=2 apic2=-1 pin2=-1
(XEN) mwait-idle: does not run on family 6 model 23
(XEN) VMX: Supported advanced features:
(XEN)  - APIC MMIO access virtualisation
(XEN)  - APIC TPR shadow
(XEN)  - Virtual NMI
(XEN)  - MSR direct-access bitmap
(XEN) HVM: ASIDs disabled.
(XEN) HVM: VMX enabled
(XEN) HVM: Hardware Assisted Paging (HAP) not detected
(XEN) alt table ffff82d04045a690 -> ffff82d040465d8c
(XEN) microcode: CPU1 updated from revision 0x705 to 0x70a, date = 2010-09-29
(XEN) microcode: CPU2 updated from revision 0x705 to 0x70a, date = 2010-09-29
(XEN) microcode: CPU3 updated from revision 0x705 to 0x70a, date = 2010-09-29
(XEN) Brought up 4 CPUs
(XEN) Scheduling granularity: cpu, 1 CPU per sched-resource
(XEN) Adding cpu 0 to runqueue 0
(XEN)  First cpu on runqueue, activating
(XEN) Adding cpu 1 to runqueue 0
(XEN) Adding cpu 2 to runqueue 0
(XEN) Adding cpu 3 to runqueue 0
(XEN) mcheck_poll: Machine check polling timer started.
(XEN) HPET: 0 timers usable for broadcast (4 total)
(XEN) NX (Execute Disable) protection active
(XEN) Dom0 has maximum 648 PIRQs
(XEN) *** Building a PV Dom0 ***
(XEN)  Xen  kernel: 64-bit, lsb
(XEN)  Dom0 kernel: 64-bit, PAE, lsb, paddr 0x1000000 -> 0x322c000
(XEN) PHYSICAL MEMORY ARRANGEMENT:
(XEN)  Dom0 alloc.:   0000000210000000->0000000214000000 (161035 pages to be allocated)
(XEN)  Init. ramdisk: 000000021f90b000->000000021ffff066

>brctl show
bridge name	bridge id		STP enabled	interfaces
br0		8000.7a5e43a7ab5c	no		eth0
							vif1.0
							vif2.0
							vif3.0
							vif4.0
							vif5.0
							vif6.0
virbr0		8000.6629408132fb	no		

>qemu-system-i386 -version
QEMU emulator version 7.0.0
Copyright (c) 2003-2022 Fabrice Bellard and the QEMU Project developers

>gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/10/lto-wrapper
OFFLOAD_TARGET_NAMES=nvptx-none:amdgcn-amdhsa:hsa
OFFLOAD_TARGET_DEFAULT=1
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 10.2.0-15' --with-bugurl=file:///usr/share/doc/gcc-10/README.Bugs --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++,m2 --prefix=/usr --with-gcc-major-version-only --program-suffix=-10 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-gnu-unique-object --disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib --enable-libphobos-checking=release --with-target-system-zlib=auto --enable-objc-gc=auto --enable-multiarch --disable-werror --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none=/build/gcc-10-mPxEea/gcc-10-10.2.0/debian/tmp-nvptx/usr,amdgcn-amdhsa=/build/gcc-10-mPxEea/gcc-10-10.2.0/debian/tmp-gcn/usr,hsa --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 10.2.0 (Debian 10.2.0-15) 

>systemctl status lvm2-pvscan@8:39.service
● lvm2-pvscan@8:39.service - LVM event activation on device 8:39
     Loaded: loaded (/lib/systemd/system/lvm2-pvscan@.service; static)
     Active: active (exited) since Tue 2023-10-24 15:41:18 PDT; 4min 59s ago
       Docs: man:pvscan(8)
    Process: 290 ExecStart=/sbin/lvm pvscan --cache --activate ay 8:39 (code=exited, status=0/SUCCESS)
   Main PID: 290 (code=exited, status=0/SUCCESS)
        CPU: 91ms

Oct 24 15:41:05 xenbully systemd[1]: Starting LVM event activation on device 8:39...
Oct 24 15:41:05 xenbully lvm[290]:   pvscan[290] PV /dev/sdc7 online, VG maxvm is complete.
Oct 24 15:41:05 xenbully lvm[290]:   pvscan[290] VG maxvm run autoactivation.
Oct 24 15:41:18 xenbully lvm[290]:   67 logical volume(s) in volume group "maxvm" now active
Oct 24 15:41:18 xenbully systemd[1]: Finished LVM event activation on device 8:39.

>systemctl status dnsmasq

>systemctl status xendomains
● xendomains.service - Xendomains - start and stop guests on boot and shutdown
     Loaded: loaded (/lib/systemd/system/xendomains.service; enabled; vendor preset: enabled)
    Drop-In: /etc/systemd/system/xendomains.service.d
             └─override.conf
     Active: active (exited) since Tue 2023-10-24 15:41:33 PDT; 4min 44s ago
    Process: 1213 ExecStartPre=/bin/grep -q control_d /proc/xen/capabilities (code=exited, status=0/SUCCESS)
    Process: 1214 ExecStart=/usr/lib/xen-4.16/bin/xendomains start (code=exited, status=0/SUCCESS)
   Main PID: 1214 (code=exited, status=0/SUCCESS)
      Tasks: 12 (limit: 692)
     Memory: 7.2M
        CPU: 8.395s
     CGroup: /system.slice/xendomains.service
             ├─1552 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/a_al8pv
             ├─2168 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/b_ub2004
             ├─2556 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/c_fc34min
             ├─3077 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/d_fc35min
             ├─3453 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/e_ub2204
             └─3835 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/f_pvbully

Oct 24 15:41:32 xenbully root[3769]: /etc/xen/scripts/block: Writing backend/vbd/6/51712/hotplug-status connected to xenstore.
Oct 24 15:41:32 xenbully root[3793]: /etc/xen/scripts/vif-bridge: online type_if=vif XENBUS_PATH=backend/vif/6/0
Oct 24 15:41:32 xenbully root[3813]: /etc/xen/scripts/vif-bridge: br0 MTU is 1500
Oct 24 15:41:32 xenbully root[3814]: /etc/xen/scripts/vif-bridge: setting vif6.0 MTU to 1500
Oct 24 15:41:32 xenbully root[3816]: /etc/xen/scripts/vif-bridge: Writing /local/domain/6/device/vif/0/mtu 1500 to xenstore.
Oct 24 15:41:32 xenbully root[3818]: /etc/xen/scripts/vif-bridge: adding vif6.0 to bridge br0
Oct 24 15:41:32 xenbully root[3831]: /etc/xen/scripts/vif-bridge: Successful vif-bridge online for vif6.0, bridge br0.
Oct 24 15:41:32 xenbully root[3832]: /etc/xen/scripts/vif-bridge: Writing backend/vif/6/0/hotplug-status connected to xenstore.
Oct 24 15:41:33 xenbully xendomains[1214]: Starting auto Xen domains: a_al8pv b_ub2004 c_fc34min d_fc35min e_ub2204 f_pvbully[done].
Oct 24 15:41:33 xenbully systemd[1]: Finished Xendomains - start and stop guests on boot and shutdown.

>xl info
host                   : xenbully
release                : 5.10.0-8-amd64
version                : #1 SMP Debian 5.10.46-4 (2021-08-03)
machine                : x86_64
nr_cpus                : 4
max_cpu_id             : 3
nr_nodes               : 1
cores_per_socket       : 4
threads_per_core       : 1
cpu_mhz                : 2666.364
hw_caps                : bfebfbff:0008e3fd:20100800:00000001:00000000:00000000:00000000:00000000
virt_caps              : pv hvm shadow gnttab-v1 gnttab-v2
total_memory           : 8190
free_memory            : 1405
sharing_freed_memory   : 0
sharing_used_memory    : 0
outstanding_claims     : 0
free_cpus              : 0
xen_major              : 4
xen_minor              : 16
xen_extra              : .5
xen_version            : 4.16.5
xen_caps               : xen-3.0-x86_64 hvm-3.0-x86_32 hvm-3.0-x86_32p hvm-3.0-x86_64 
xen_scheduler          : credit2
xen_pagesize           : 4096
platform_params        : virt_start=0xffff800000000000
xen_changeset          : 29efce0f8f10e381417a-x86/pv: Correct the auditing of guest brea
xen_commandline        : dom0_mem=700M,max:728M dom0_max_vcpus=4 guest_loglvl=all loglvl=all iommu=1 console=vga vga=gfx-1280x1024x16 conring_size=48k sched=credit2 cpufreq=none xpti=false ucode=scan
cc_compiler            : gcc (Debian 10.2.1-6) 10.2.1 20210110
cc_compile_by          : pbuser
cc_compile_domain      : prymar56.org
cc_compile_date        : Tue Oct 24 15:01:23 PDT 2023
build_id               : 665701f37486a86628a04f497c45fd51401f1798
xend_config_format     : 4

>xl list
Name                                        ID   Mem VCPUs	State	Time(s)
Domain-0                                     0   700     4     r-----      31.9
al8pv                                        1  1254     4     -b----      14.7
ub2004                                       2  1204     4     -b----      10.4
fc35conv                                     3  1024     4     -b----      11.9
fc35min                                      4  1024     4     -b----      11.7
ub2204                                       5   724     4     -b----       8.5
pvbully                                      6   768     4     -b----      10.4

>iptables -S -t nat
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-A POSTROUTING -s 192.168.122.0/24 -d 224.0.0.0/24 -j RETURN
-A POSTROUTING -s 192.168.122.0/24 -d 255.255.255.255/32 -j RETURN
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE

>systemctl list-unit-files | grep "enabled         enabled" | sort
acpid.path                             enabled         enabled
acpid.service                          enabled         enabled
acpid.socket                           enabled         enabled
blk-availability.service               enabled         enabled
console-setup.service                  enabled         enabled
cron.service                           enabled         enabled
dm-event.socket                        enabled         enabled
e2scrub_all.timer                      enabled         enabled
e2scrub_reap.service                   enabled         enabled
getty@.service                         enabled         enabled
haveged.service                        enabled         enabled
keyboard-setup.service                 enabled         enabled
lm-sensors.service                     enabled         enabled
logrotate.timer                        enabled         enabled
lvm2-lvmpolld.socket                   enabled         enabled
lvm2-monitor.service                   enabled         enabled
mlocate.timer                          enabled         enabled
networking.service                     enabled         enabled
remote-fs.target                       enabled         enabled
rsyslog.service                        enabled         enabled
ssh.service                            enabled         enabled
systemd-pstore.service                 enabled         enabled
systemd-timesyncd.service              enabled         enabled
tmp.mount                              enabled         enabled
xenconsoled.service                    enabled         enabled
xendomains.service                     enabled         enabled
xen-init-dom0.service                  enabled         enabled
xen-qemu-dom0-disk-backend.service     enabled         enabled
xenstored.service                      enabled         enabled

>ps aux | grep xen
root          37  0.0  0.0      0     0 ?        S    15:40   0:00 [xenbus]
root          38  0.1  0.0      0     0 ?        S    15:40   0:00 [xenwatch]
root         960  0.3  0.6   7172  3620 ?        S    15:41   0:00 /usr/sbin/xenstored --pid-file /var/run/xen/xenstored.pid
root         967  0.0  0.3  68712  2168 ?        Ssl  15:41   0:00 /usr/sbin/xenconsoled -i --log=none --log-dir=/var/log/xen/console
root        1032  0.0  2.6 251820 15776 ?        Sl   15:41   0:00 /usr/bin/qemu-system-i386 -xen-domid 0 -xen-attach -name dom0 -nographic -M xenpv -daemonize -monitor /dev/null -serial /dev/null -parallel /dev/null -nodefaults -no-user-config -pidfile /var/run/xen/qemu-dom0.pid
root        1552  0.0  0.4  72244  2748 ?        Ssl  15:41   0:00 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/a_al8pv
root        2168  0.0  0.4  72244  2592 ?        Ssl  15:41   0:00 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/b_ub2004
root        2556  0.0  0.4  72244  2648 ?        Ssl  15:41   0:00 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/c_fc34min
root        3077  0.0  0.4  72244  2676 ?        Ssl  15:41   0:00 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/d_fc35min
root        3453  0.0  0.4  72244  2588 ?        Ssl  15:41   0:00 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/e_ub2204
root        3835  0.0  0.4  72244  2660 ?        Ssl  15:41   0:00 /usr/lib/xen-4.16/bin/xl create --quiet --defconfig /etc/xen/auto/f_pvbully
root        3974  0.0  0.7   9948  4776 pts/6    S+   15:46   0:00 sudo ./dump_xen_trace.multi tlviewer
root        3975  0.0  0.2   2480  1756 pts/6    S+   15:46   0:00 sh ./dump_xen_trace.multi tlviewer
root        4040  0.0  0.1   6372   644 pts/6    S+   15:46   0:00 grep xen

>cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
iface eth0 inet manual

auto br0
iface br0 inet static
        address 192.168.1.9
        netmask 255.255.255.0
        network 192.168.1.0
        gateway 192.168.1.1
        accept_ra 0
        preferred-lifetime 200000
        bridge_ports eth0
        bridge_fd 0
        bridge_maxwait 1
        dns-nameservers 1.1.1.1 4.2.2.2 8.8.4.4
        dns-search 192.168.1.1

>cat /etc/network/interfaces.d/virbr0
auto virbr0
iface virbr0 inet static
address 192.168.122.1
network 192.168.122.0
netmask 255.255.255.0
bridge_ports none
bridge_fd 0
bridge_maxwait 1
        post-up /sbin/iptables-restore -n < /etc/iptables/virbr0.rules
	post-down /sbin/iptables-restore -n < /etc/iptables/virbr0_down.rules
	pre-up echo 1 > /proc/sys/net/ipv4/ip_forward

>systemd-analyze time
Startup finished in 7.682s (kernel) + 34.933s (userspace) = 42.615s 
multi-user.target reached after 34.901s in userspace

>systemd-analyze blame
16.323s ifupdown-pre.service
13.055s xendomains.service
12.680s lvm2-pvscan@8:39.service
 5.480s lvm2-pvscan@8:21.service
 3.943s data4.mount
 3.578s data3.mount
 3.570s data2.mount
 2.798s dev-sda13.device
 2.307s networking.service
  565ms keyboard-setup.service
  544ms lvm2-monitor.service
  458ms mnt-repo.mount
  456ms ssh.service
  446ms xenstored.service
  422ms systemd-modules-load.service
  412ms proc-xen.mount
  409ms sys-kernel-debug.mount
  407ms sys-kernel-tracing.mount
  406ms dev-mqueue.mount
  376ms systemd-udev-trigger.service
  375ms kmod-static-nodes.service
  368ms modprobe@fuse.service
  363ms modprobe@configfs.service
  350ms rsyslog.service
  325ms e2scrub_reap.service
  309ms systemd-journald.service
  289ms xen-init-dom0.service
  280ms dev-sda3.swap
  278ms getty-static.service
  250ms systemd-fsck@dev-mapper-maxvm\x2da8repo.service
  243ms lm-sensors.service
  189ms systemd-random-seed.service
  188ms systemd-sysusers.service
  186ms systemd-remount-fs.service
  131ms systemd-udevd.service
   95ms sys-fs-fuse-connections.mount
   89ms systemd-timesyncd.service
   76ms systemd-tmpfiles-setup-dev.service
   74ms sys-kernel-config.mount
   69ms rc-local.service
   61ms systemd-journal-flush.service
   60ms systemd-sysctl.service
   42ms systemd-tmpfiles-setup.service
   37ms console-setup.service
   34ms tmp.mount
   34ms var-lib-xenstored.mount
   31ms systemd-update-utmp.service
   26ms xenconsoled.service
   18ms systemd-update-utmp-runlevel.service
   17ms systemd-user-sessions.service
   12ms xen-qemu-dom0-disk-backend.service
   56us blk-availability.service

>grep -h XEN_ /boot/config-5.10.0-8* | sort
CONFIG_DRM_XEN_FRONTEND=m
CONFIG_HVC_XEN_FRONTEND=y
CONFIG_INPUT_XEN_KBDDEV_FRONTEND=y
CONFIG_NETXEN_NIC=m
CONFIG_SND_XEN_FRONTEND=m
CONFIG_XEN_512GB=y
CONFIG_XEN_ACPI_PROCESSOR=m
CONFIG_XEN_ACPI=y
CONFIG_XEN_AUTO_XLATE=y
CONFIG_XEN_BACKEND=y
CONFIG_XEN_BALLOON_MEMORY_HOTPLUG=y
CONFIG_XEN_BALLOON=y
CONFIG_XEN_BLKDEV_BACKEND=m
CONFIG_XEN_BLKDEV_FRONTEND=m
CONFIG_XEN_COMPAT_XENFS=y
# CONFIG_XEN_DEBUG_FS is not set
CONFIG_XEN_DEV_EVTCHN=m
CONFIG_XEN_DOM0=y
CONFIG_XEN_EFI=y
CONFIG_XEN_FBDEV_FRONTEND=y
CONFIG_XEN_FRONT_PGDIR_SHBUF=m
CONFIG_XEN_GNTDEV=m
CONFIG_XEN_GRANT_DEV_ALLOC=m
# CONFIG_XEN_GRANT_DMA_ALLOC is not set
CONFIG_XEN_HAVE_PVMMU=y
CONFIG_XEN_HAVE_VPMU=y
CONFIG_XEN_MCE_LOG=y
CONFIG_XEN_MEMORY_HOTPLUG_LIMIT=512
CONFIG_XEN_NETDEV_BACKEND=m
CONFIG_XEN_NETDEV_FRONTEND=m
CONFIG_XEN_PCIDEV_BACKEND=m
CONFIG_XEN_PCIDEV_FRONTEND=m
CONFIG_XEN_PRIVCMD=m
# CONFIG_XEN_PVCALLS_BACKEND is not set
# CONFIG_XEN_PVCALLS_FRONTEND is not set
CONFIG_XEN_PVHVM_SMP=y
CONFIG_XEN_PVHVM=y
CONFIG_XEN_PVH=y
CONFIG_XEN_PV_SMP=y
CONFIG_XEN_PV=y
CONFIG_XEN_SAVE_RESTORE=y
CONFIG_XEN_SCRUB_PAGES_DEFAULT=y
CONFIG_XEN_SCSI_BACKEND=m
CONFIG_XEN_SCSI_FRONTEND=m
CONFIG_XEN_SYMS=y
CONFIG_XEN_SYS_HYPERVISOR=y
CONFIG_XEN_UNPOPULATED_ALLOC=y
CONFIG_XEN_WDT=m
CONFIG_XEN_XENBUS_FRONTEND=y

>tree /boot
/boot
├── config-5.10.0-8-amd64
├── efi
│   └── EFI
│       └── debian
│           ├── xen-4.16-amd64.efi
│           └── xen-4.16-amd64-xsm.efi
├── flask
│   └── xenpolicy-4.16
├── grub
│   ├── grub.cfg
│   ├── grub.cfg.ok
│   ├── menu.lst
│   └── unicode.pf2
├── initrd.img-5.10.0-8-amd64
├── kcfg
│   ├── xen-4.16.config
│   └── xen-4.16-xsm.config
├── System.map-5.10.0-8-amd64
├── vmlinuz-5.10.0-8-amd64
├── xen-4.16-amd64.gz
├── xen-4.16-amd64-xsm.gz
└── xen.gz -> xen-4.16-amd64.gz

6 directories, 16 files

>netstat -an | grep ^tcp
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN     
tcp        0      0 192.168.1.9:22          192.168.1.107:55632     ESTABLISHED
tcp6       0      0 :::22                   :::*                    LISTEN