Assalamu alaikum. An rubuta wannan labarin ga waɗanda har yanzu ke tsage tsakanin zabar dandamali na haɓakawa da kuma bayan karanta labarin daga jerin "Mun shigar da proxmox kuma gabaɗaya komai yana da kyau, shekaru 6 na lokaci ba tare da hutu ɗaya ba." Amma bayan shigar daya ko wata mafita daga cikin akwatin, tambayar ta taso: ta yaya zan iya gyara wannan a nan, ta yadda za a iya fahimtar sa ido, kuma a nan, don sarrafa madadin…. Sannan lokaci ya zo kuma za ku gane cewa kuna son wani abu da ya fi aiki, ko kuma kuna son duk abin da ke cikin tsarin ku ya bayyana a fili, ba wannan akwatin baƙar fata ba, ko kuna son amfani da wani abu fiye da hypervisor da tarin injina. Wannan labarin zai ƙunshi wasu tunani da ayyuka bisa tushen dandalin Opennebula - na zaɓi shi saboda. ba a buƙatar albarkatun kuma gine-ginen ba ya da wuyar gaske.
Sabili da haka, kamar yadda muke gani, yawancin masu samar da girgije suna aiki akan kvm kuma suna yin haɗin waje don sarrafa inji. A bayyane yake cewa manyan masu ba da izini suna rubuta nasu tsarin don kayan aikin girgije, YANDEX iri ɗaya misali. Wani yana amfani da openstack kuma yana yin haɗi akan wannan tushen - SELECTEL, MAIL.RU. Amma idan kuna da kayan aikin ku da ƙananan ma'aikatan ƙwararru, yawanci kuna zaɓar wani abu da aka shirya - VMWARE, HYPER-V, akwai lasisin kyauta da biyan kuɗi, amma wannan ba shine abin da muke magana ba yanzu. Bari mu yi magana game da masu goyon baya - waɗannan su ne waɗanda ba su ji tsoron bayar da gwada wani sabon abu ba, duk da cewa kamfanin ya bayyana a fili, "Wane ne zai yi hidimar wannan bayan ku," "Shin za mu mirgine wannan zuwa samarwa daga baya. ? Abin tsoro." Amma za ku iya fara amfani da waɗannan mafita a cikin benci na gwaji, kuma idan kowa yana son shi, to, za ku iya tayar da tambayar ƙarin ci gaba da amfani da shi a cikin wurare masu tsanani.
Hakanan ga hanyar haɗi zuwa rahoton daga mai taka rawar gani wajen ci gaban wannan dandali.
Wataƙila a cikin wannan labarin wani abu zai zama abin ban mamaki kuma an riga an fahimta ga ƙwararrun ƙwararrun ƙwararrun ƙwararrun ƙwararrun ƙwararrun ƙwararrun ƙwararru, kuma a wasu lokuta ba zan kwatanta komai ba saboda ana samun umarni da kwatance irin wannan akan Intanet. Wannan shine kawai gwaninta da wannan dandamali. Ina fatan mahalarta masu aiki za su ƙara a cikin sharhin abin da za a iya yi mafi kyau da kuma kuskuren da na yi. Dukkan ayyuka sun faru a cikin gidan da ya ƙunshi PC 3 tare da halaye daban-daban. Har ila yau, musamman ban nuna yadda wannan software ke aiki da yadda ake shigar da ita ba. A'a, kawai ƙwarewar gudanarwa da matsalolin da na ci karo da su. Wataƙila wannan zai zama da amfani ga wani a cikin zaɓin su.
Don haka, bari mu fara. A matsayina na mai kula da tsarin, abubuwan da ke gaba suna da mahimmanci a gare ni, wanda ba tare da wanda ba zai yiwu in yi amfani da wannan bayani ba.
1. Maimaita shigarwa
Akwai umarni da yawa don shigar da opennebula, bai kamata a sami matsala ba. Daga siga zuwa siga, sabbin abubuwa suna bayyana waɗanda ba koyaushe zasuyi aiki ba yayin motsi daga siga zuwa sigar.
2. Saka idanu
Za mu kula da kumburi kanta, kvm da opennebula. Abin farin ciki, ya riga ya shirya. Akwai zaɓuɓɓuka da yawa game da kula da rundunonin Linux, Zabbix iri ɗaya ko mai fitar da node - duk wanda ke son abin da ya fi kyau - a halin yanzu na ayyana shi azaman ma'aunin tsarin sa ido (zazzabi inda za'a iya auna shi, daidaiton tsarin diski), ta hanyar zabbix. , kuma game da aikace-aikace ta hanyar mai fitar da Prometheus. Don kula da kvm, alal misali, zaku iya ɗaukar aikin kuma saita shi don aiki ta hanyar tsarin, yana aiki sosai kuma yana nuna ma'aunin kvm, akwai kuma dashboard ɗin da aka shirya. .
Misali, ga fayil na:
/etc/systemd/system/libvirtd_exporter.service
[Unit]
Description=Node Exporter
[Service]
User=node_exporter
ExecStart=/usr/sbin/prometheus-libvirt-exporter --web.listen-address=":9101"
[Install]
WantedBy=multi-user.targetDon haka muna da mai fitarwa 1, muna buƙatar na biyu don saka idanu kan opennebula da kanta, na yi amfani da wannan
Ana iya ƙara zuwa al'ada don saka idanu akan tsarin kamar haka.
A cikin node_exporter fayil muna canza farawa kamar haka:
ExecStart=/usr/sbin/node_exporter --web.listen-address=":9102" --collector.textfile.directory=/var/lib/opennebula_exporter/textfile_collectorƘirƙiri adireshi mkdir -p /var/lib/opennebula_exporter
rubutun bash da aka gabatar a sama, da farko muna duba aikin ta hanyar na'ura mai kwakwalwa, idan ya nuna abin da muke bukata (idan ya ba da kuskure, sannan shigar da xmlstarlet), kwafa shi zuwa /usr/local/bin/opennebula_exporter.sh
Ƙara aikin cron na kowane minti:
*/1 * * * * (/usr/local/bin/opennebula_exporter.sh > /var/lib/opennebula_exporter/textfile_collector/opennebula.prom)Ma'auni sun fara bayyana, zaku iya ɗaukar su kamar prometheus kuma gina hotuna da yin faɗakarwa. A cikin Grafana zaka iya zana, alal misali, irin wannan dashboard mai sauƙi.
(A bayyane yake cewa a nan na wuce cpu, ram)
Ga waɗanda suke ƙauna da amfani da Zabbix, akwai
Dangane da batun sanya idanu, babban abin da yake a nan shi ne. Tabbas, zaku iya, ƙari, yin amfani da kayan aikin sa ido na injin kama-da-wane da loda bayanai zuwa lissafin kuɗi, a nan kowa yana da nasa hangen nesa, Ban fara aiki akan wannan ba tukuna.
Ban fara shiga ba tukuna. Zaɓuɓɓuka mafi sauƙi shine ƙara td-agent don rarraba /var/lib/ directory ɗaya tare da maganganu na yau da kullun. Misali, fayil din sunstone.log ya dace da nginx regexp da sauran fayilolin da ke nuna tarihin samun dama ga dandamali - menene amfanin wannan? To, alal misali, za mu iya bibiyar adadin "Kuskure, Kuskure" da sauri da sauri inda kuma a wane matakin akwai rashin aiki.
3. Ajiyayyen
Hakanan ana biyan ayyukan da aka kammala - alal misali Sep :BudeNebula_Backup. Anan dole ne mu fahimci cewa kawai tallafawa hoton injin ba ɗaya bane a wannan yanayin, saboda injin ɗin mu dole ne suyi aiki tare da cikakken haɗin kai (fayil ɗin mahallin iri ɗaya wanda ke bayyana saitunan cibiyar sadarwa, sunan vm da saitunan al'ada don aikace-aikacen ku) . Saboda haka, a nan za mu yanke shawarar abin da kuma yadda za mu mayar da baya. A wasu lokuta yana da kyau a yi kwafin abin da ke cikin vm kanta. Kuma watakila kawai kuna buƙatar yin ajiyar diski ɗaya daga injin da aka bayar.
Misali, mun ƙaddara cewa duk injuna suna farawa da hotuna masu tsayi, saboda haka, bayan karantawa
Wannan yana nufin cewa da farko za mu iya loda hoton daga vm ɗin mu:
onevm disk-saveas 74 3 prom.qcow2
Image ID: 77
Смотрим, под каким именем он сохранился
oneimage show 77
/var/lib/one//datastores/100/f9503161fe180658125a9b32433bf6e8
И далее копируем куда нам необходимо. Конечно, так себе способ. Просто хотел показать, что используя инструменты opennebula можно строить подобные решения.Na kuma samu a Intanet kuma akwai ƙari , amma akwai kawai ajiya don qcow2.
Amma kamar yadda muka sani, ko ba dade ko ba dade akwai lokacin da kake son ƙarin ajiya, yana da wahala a nan kuma watakila ma'aikata za su ware kudi don biyan kuɗi, ko kuma su bi ta wata hanya kuma su fahimci cewa a nan muna kawai yanke kayan aiki. da yin ajiya a matakin aikace-aikacen da ƙara sabbin nodes da injunan kama-da-wane - i, a nan, ina cewa yin amfani da gajimare kawai don ƙaddamar da gungu na aikace-aikacen, da ƙaddamar da bayanan akan wani dandamali ko ɗaukar shirye-shiryen da aka yi. daga mai kaya, idan zai yiwu.
4. Sauƙin amfani
A cikin wannan sakin layi zan bayyana matsalolin da na ci karo da su. Misali, bisa ga hotuna, kamar yadda muka sani, akwai dagewa - lokacin da aka ɗora wannan hoton zuwa vm, an rubuta duk bayanan zuwa wannan hoton. Kuma idan ba a ci gaba ba, to, an kwafi hoton zuwa wurin ajiya kuma an rubuta bayanan zuwa ga abin da aka kwafi daga hoton tushen - wannan shine yadda samfuran samfuri ke aiki. Na sha haifar da matsala ga kaina ta hanyar mantawa don tantance naci kuma an kwafi hoton 200 GB, matsalar ita ce ba za a iya soke wannan hanya ba, dole ne ku je kullin ku kashe tsarin "cp" na yanzu.
Ɗaya daga cikin mahimman rashin lahani shine ba za ku iya soke ayyuka ta amfani da gui kawai ba. Ko kuma a maimakon haka, za ku soke su kuma ku ga cewa babu abin da ya faru kuma za ku sake farawa su, soke su kuma a gaskiya ma an riga an sami matakai 2 cp da ke kwafi hoton.
Sannan ya zo fahimtar dalilin da yasa opennebula yake lambobi kowane sabon misali tare da sabon id, misali, a cikin proxmox guda ɗaya ya ƙirƙiri vm tare da id 101, goge shi, sannan ku sake ƙirƙira shi kuma id 101. A cikin opennebula wannan ba zai faru ba. kowane sabon misali za a ƙirƙira shi da sabon id kuma wannan yana da nasa dabaru - misali, share tsoffin bayanai ko shigarwar da ba su yi nasara ba.
Haka yake don ajiya; mafi yawan duka, wannan dandali yana da nufin ma'adana ta tsakiya. Akwai addons don amfani da gida, amma wannan ba shine abin da muke magana akai ba a wannan yanayin. Ina tsammanin cewa a nan gaba wani zai rubuta labarin game da yadda suka gudanar da yin amfani da ajiyar gida a kan nodes da kuma samun nasarar amfani da shi a cikin samarwa.
5. Matsakaicin sauƙi
Tabbas, idan kuka ci gaba, kaɗan waɗanda za su fahimce ku sun zama.
A ƙarƙashin yanayin tsayawa na - nodes 3 tare da ajiyar nfs - komai yana aiki lafiya. Amma idan muka gudanar da gwaje-gwajen da suka shafi katsewar wutar lantarki, misali, lokacin gudanar da hoto da kashe wutar node, muna adana saitunan a cikin ma'ajin bayanai cewa akwai hoton hoto, amma a gaskiya babu (da kyau, duk mun fahimci cewa muna da farko ya rubuta bayanan game da wannan aikin a cikin sql, amma aikin da kansa bai yi nasara ba). Amfanin shine cewa lokacin ƙirƙirar hoton hoto, an kafa fayil daban kuma akwai "iyaye", don haka idan akwai matsaloli kuma ko da bai yi aiki ta hanyar gui ba, zamu iya ɗaukar fayil ɗin qcow2 kuma mu mayar da shi daban.
A kan cibiyoyin sadarwa, da rashin alheri, ba komai ba ne mai sauƙi. Da kyau, aƙalla yana da sauƙi fiye da a cikin openstack, Na yi amfani da vlan (802.1Q) kawai - yana aiki sosai, amma idan kun yi canje-canje ga saitunan daga cibiyar sadarwar samfuri, to waɗannan saitunan ba za a yi amfani da su ba ga na'urori masu gudana, watau. kana buƙatar sharewa da ƙara katin sadarwar yanar gizo, sannan za a yi amfani da sabbin saitunan.
Idan har yanzu kuna son kwatanta shi tare da openstack, to, zaku iya faɗi haka: a cikin opennebula babu bayyananniyar ma'anar waɗanne fasahohin da za a yi amfani da su don adana bayanai, sarrafa hanyar sadarwa, albarkatun - kowane mai gudanarwa ya yanke shawarar kansa abin da ya fi dacewa da shi.
6. Ƙarin plugins da shigarwa
Bayan haka, kamar yadda muka fahimta, dandamali na girgije zai iya sarrafa ba kawai kvm ba, har ma vmware esxi. Abin takaici, ba ni da tafki tare da Vcenter, idan wani ya yi ƙoƙari, da fatan za a rubuta.
An bayyana goyon baya ga sauran masu samar da girgije
AWS, AZURE.
Na kuma yi ƙoƙarin haɗa Vmware Cloud daga Selectel, amma babu abin da ya yi aiki - a gaba ɗaya, an katange shi saboda akwai dalilai da yawa, kuma babu wata ma'ana a rubuce zuwa goyan bayan fasaha na mai ba da sabis.
Har ila yau, yanzu sabon sigar yana da firecracker - wannan shine ƙaddamar da microvm, nau'in kvm harness a kan docker, wanda ke ba da ƙarin ƙwarewa, tsaro da karuwar yawan aiki saboda babu buƙatar ɓata albarkatu akan kayan aiki. Abin da kawai nake gani akan Docker shine cewa baya ɗaukar ƙarin adadin matakai kuma babu wuraren da aka mamaye yayin amfani da wannan kwaikwayo, watau. Yana da matukar yiwuwa a yi amfani da shi azaman ma'auni mai ɗaukar nauyi (amma yana yiwuwa ya cancanci rubuta wani labarin dabam game da wannan har sai na gama duk gwaje-gwajen).
7. Kyakkyawan gwaninta na amfani da kuskuren kuskure
Ina so in raba ra'ayoyina game da aikin, na bayyana wasu daga cikinsu a sama, Ina so in rubuta ƙarin. Tabbas, ba ni kaɗai ba ne wanda da farko ya yi tunanin cewa wannan ba shine tsarin da ya dace ba kuma a gaba ɗaya duk abin da ke nan yana da ƙima - ta yaya har ma suke aiki da wannan? Amma sai fahimtar ya zo cewa komai yana da ma'ana sosai. Tabbas, ba za ku iya faranta wa kowa rai ba kuma wasu fannoni suna buƙatar haɓakawa.
Misali, aiki mai sauƙi na kwafin hoton diski daga ma'ajin bayanai zuwa wani. A cikin akwati na, akwai nodes 2 tare da nfs, na aika hoton - kwafi yana faruwa ta hanyar frontend opennebula, kodayake duk mun saba da gaskiyar cewa ya kamata a kwafi bayanan kai tsaye tsakanin runduna - a cikin vmware iri ɗaya, hyper-v mu ne. saba da wannan, amma nan ga wani. Akwai wata hanya daban-daban da kuma akida daban-daban, kuma a cikin sigar 5.12 sun cire maɓallin " ƙaura zuwa datastore" - kawai na'urar kanta tana canjawa, amma ba ajiya ba saboda yana nufin ajiya na tsakiya.
Na gaba shine sanannen kuskure tare da dalilai daban-daban: "Kuskuren tura injin kama-da-wane: Ba za a iya ƙirƙirar yanki daga /var/lib/one//datastores/103/10/deployment.5" A ƙasa shi ne babban abin da za a duba.
- Hakkokin hoto ga mai amfani da oneadmin;
- Izinin mai amfani da oneadmin don gudanar da libvirtd;
- An saka ma'ajiyar bayanai daidai? Ku je ku duba hanyar kan kullin kanta, watakila wani abu ya fado;
- Hanyar sadarwar da aka tsara ba daidai ba, ko kuma a gaban gaba yana cikin saitunan cibiyar sadarwa cewa babban haɗin gwiwar vlan shine br0, amma a kan kumburi an rubuta shi azaman bridge0 - dole ne ya kasance iri ɗaya.
tsarin datastore yana adana metadata don vm ɗinku, idan kuna tafiyar da vm tare da hoto mai tsayi, to vm yana buƙatar samun damar yin amfani da tsarin da aka ƙirƙira da farko akan ma'ajin da kuka ƙirƙiri vm - wannan yana da mahimmanci. Don haka, lokacin canja wurin vm zuwa wani kantin sayar da bayanai, kuna buƙatar bincika komai sau biyu.
8. Takardu, al'umma. Ci gaba da ci gaba
Kuma sauran, kyawawan takardu, al'umma da babban abu shine cewa aikin ya ci gaba da rayuwa a nan gaba.
Gabaɗaya, komai yana da rubuce sosai kuma ko da yin amfani da tushen hukuma ba zai zama matsala don shigarwa da samun amsoshin tambayoyi ba.
Al'umma, aiki. Yana buga mafita da aka yi da yawa waɗanda za ku iya amfani da su a cikin shigarwar ku.
A halin yanzu, wasu manufofi a cikin kamfanin sun canza tun daga 5.12 Zai zama mai ban sha'awa don ganin yadda aikin ke tasowa. Da farko, na yi nuni da wasu daga cikin dillalai waɗanda ke amfani da mafitarsu da abin da masana'antar ke bayarwa. Tabbas, babu cikakkiyar amsa akan abin da za a yi amfani da shi. Amma ga ƙananan ƙungiyoyi, kiyaye ƙaramin girgijen su na sirri bazai yi tsada kamar yadda ake gani ba. Babban abu shine sanin ainihin abin da kuke buƙata.
Sakamakon haka, ba tare da la'akari da abin da kuka zaɓa azaman tsarin girgije ba, bai kamata ku tsaya a samfur ɗaya ba. Idan kana da lokaci, yana da kyau a duba wasu ƙarin buɗaɗɗen mafita.
Akwai hira mai kyau Suna taimakawa sosai kuma ba sa tura ku don neman mafita ga matsalar akan Google. Ku biyo mu.
source: www.habr.com