ProHoster > blog > Amministrazzjoni > Skjerament rapidu ta 'vm ESXi bl-użu ta' Terraform

Skjerament rapidu ta 'vm ESXi bl-użu ta' Terraform

Hello lil kulħadd, jien jisimni Ivan u jien amministratur tas-sistema alkoħolika (OPS).

Nixtieq ngħidlek kif niskjera magni virtwali fuq ESXi mingħajr vCenter li juża Terraform.

Pjuttost ħafna drabi jkollok tiskjera/joħloq mill-ġdid magni virtwali sabiex tittestja din jew dik l-applikazzjoni. Minħabba l-għażż, ħsibt dwar l-awtomatizzazzjoni tal-proċess. It-tfittxija tiegħi wasslitni għal prodott mill-isbaħ mill-kumpanija hashicorp, terraform.

Naħseb li ħafna nies jafu x'inhu Terraform, iżda dawk li ma jafux, hija applikazzjoni għall-ġestjoni ta' kwalunkwe cloud, infrastruttura jew servizz bl-użu tal-kunċett IasC (Infrastruttura bħala kodiċi).

Jiena nuża ESXi bħala l-ambjent ta 'virtwalizzazzjoni tiegħi. Pjuttost sempliċi, konvenjenti u affidabbli.
Jien nipprevedi mistoqsija.

Għaliex terraform jekk tista' tuża vCenter Server?

Ovvjament tista', imma... L-ewwelnett, din hija liċenzja addizzjonali, it-tieni, dan il-prodott huwa intensiv ħafna fir-riżorsi u sempliċement mhux se joqgħod fuq is-server tad-dar tiegħi, u t-tielet, hija opportunità biex taġġorna l-ħiliet tiegħek.

Il-pjattaforma Intel NUC taġixxi bħala server:

CPU: 2 CPUs x Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz
RAM: 8Gb
HDD: 500Gb
ESXi version: ESXi-6.5.0-4564106-standard (VMware, Inc.)

U għalhekk, l-ewwel affarijiet l-ewwel.

Għalissa, ejja kkonfigurat esxi, jiġifieri, tiftaħ il-port VNC fis-settings tal-firewall.

B'mod awtomatiku, il-fajl huwa protett mill-kitba. Aħna nwettqu l-manipulazzjonijiet li ġejjin:

chmod 644 /etc/vmware/firewall/service.xml
chmod +t /etc/vmware/firewall/service.xml
vi /etc/vmware/firewall/service.xml

żid il-blokk li ġej fl-aħħar tal-fajl:

<service id="1000">
  <id>packer-vnc</id>
  <rule id="0000">
    <direction>inbound</direction>
    <protocol>tcp</protocol>
    <porttype>dst</porttype>
    <port>
      <begin>5900</begin>
      <end>6000</end>
    </port>
  </rule>
  <enabled>true</enabled>
  <required>true</required>
</service>

Noħorġu u niffrankaw. Ibdel id-drittijiet lura u erġa ibda s-servizz:

chmod 444 /etc/vmware/firewall/service.xml
esxcli network firewall refresh

Validu sakemm l-ospitant jerġa' jinbeda. Wara, din il-manipulazzjoni jkollha tiġi ripetuta.

Minn issa 'l quddiem se nwettaq ix-xogħol kollu f'magna virtwali fuq l-istess server.

Speċifikazzjonijiet tal-prodott:

OS: Centos 7 x86_64 minimal
RAM: 1GB
HDD: 20GB
Selinux: disable
firewalld: disable

Sussegwentement għandna bżonn min jippakkja, prodott ukoll ta' HashiCorp.

Huwa meħtieġ li tinġabar awtomatikament l-immaġni "deheb". Li se nużaw fil-futur.

yum install unzip git -y
curl -O https://releases.hashicorp.com/packer/1.5.5/packer_1.5.5_linux_amd64.zip
unzip packer_1.5.5_linux_amd64.zip -d /usr/bin && rm -rf packer_1.5.5_linux_amd64.zip
packer version
Packer v1.5.5

Fuq il-moviment verżjoni tal-pakkjatur Jista' jseħħ żball minħabba li bbażat fuq RedHat jista' jkun fih pakkett bl-istess isem.

which -a packer
/usr/sbin/packer

Biex issolvi dan, tista 'toħloq symlink jew tuża mogħdija assoluta /usr/bin/packer.

Issa għandna bżonn ovftool download rabta. Niżżel, poġġi fuq is-server u installa:

chmod +x VMware-ovftool-4.4.0-15722219-lin.x86_64.bundle
./VMware-ovftool-4.4.0-15722219-lin.x86_64.bundle
Extracting VMware Installer...done.
You must accept the VMware OVF Tool component for Linux End User
License Agreement to continue.  Press Enter to proceed.
VMWARE END USER LICENSE AGREEMENT
Do you agree? [yes/no]:yes
The product is ready to be installed.  Press Enter to begin
installation or Ctrl-C to cancel. 
Installing VMware OVF Tool component for Linux 4.4.0
    Configuring...
[######################################################################] 100%
Installation was successful.

Ejja nimxu fuq.

Ħejjejt dak kollu li kelli bżonn għall-gig.

git clone https://github.com/letnab/create-and-deploy-esxi.git && cd create-and-deploy-esxi

Biex folder iso għandek bżonn tinstalla d-distribuzzjoni tas-sistema operattiva. Fil-każ tiegħi huwa centos 7.

Għandek bżonn ukoll li teditja l-fajl centos-7-base.json:

variables: указать свои данные для подключения
iso_urls: указать актуальный
iso_checksum: чексумма вашего образа

Wara l-bidliet kollha, mexxi l-bini:

/usr/bin/packer build centos-7-base.json

Jekk kollox huwa kkonfigurat u speċifikat b'mod korrett, allura se tara stampa tal-installazzjoni awtomatika tas-sistema operattiva. Dan il-proċess jieħu me 7-8 minuti.

Wara t-tlestija b'suċċess fil-folder output-packer-centos7-x86_64 se jkun hemm fajl ova.

Installa Terraform:

curl -O https://releases.hashicorp.com/terraform/0.12.24/terraform_0.12.24_linux_amd64.zip
unzip terraform_0.12.24_linux_amd64.zip -d /usr/bin/ && rm -rf terraform_0.12.24_linux_amd64.zip
terraform version
Terraform v0.12.24

Peress li Terraform m'għandux fornitur għal ESXi, għandek bżonn tibni wieħed.

Set go:

cd /tmp
curl -O https://dl.google.com/go/go1.14.2.linux-amd64.tar.gz
tar -C /usr/local -xzf go1.14.2.linux-amd64.tar.gz && rm -rf go1.14.2.linux-amd64.tar.gz
export PATH=$PATH:/usr/local/go/bin
go version
go version go1.14.2 linux/amd64

Sussegwentement, niġbru l-fornitur:

go get -u -v golang.org/x/crypto/ssh
go get -u -v github.com/hashicorp/terraform
go get -u -v github.com/josenk/terraform-provider-esxi
export GOPATH="$HOME/go"
cd $GOPATH/src/github.com/josenk/terraform-provider-esxi
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -ldflags '-w -extldflags "-static"' -o terraform-provider-esxi_`cat version`
cp terraform-provider-esxi_`cat version` /usr/bin

Aħna fil-linja finali. Ejja mmorru noffru l-immaġni tagħna.

Mur fil-folder:

cd /root/create-and-deploy-esxi/centos7

L-ewwelnett, editja l-fajl varjabbli.tf. Għandek bżonn tispeċifika konnessjoni mas-server ESXi.

Fil-fajl network_config.cfg fih is-settings tan-netwerk tal-magna virtwali futura. Nibdluh biex taqdi l-bżonnijiet tagħna u nħaddmu l-one-liner:

sed -i -e '2d' -e '3i "network": "'$(gzip < network_config.cfg| base64 | tr -d 'n')'",' metadata.json

Ukoll, fil-fajl main.tf ibdel it-triq għall-fajl ova għal tiegħek, jekk differenti.

Mument tal-verità.

terraform init
Initializing the backend...

Initializing provider plugins...

The following providers do not have any version constraints in configuration,
so the latest version was installed.

To prevent automatic upgrades to new major versions that may contain breaking
changes, it is recommended to add version = "..." constraints to the
corresponding provider blocks in configuration, with the constraint strings
suggested below.

* provider.esxi: version = "~> 1.6"
* provider.template: version = "~> 2.1"

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

terraform plan
Refreshing Terraform state in-memory prior to plan...
The refreshed state will be used to calculate this plan, but will not be
persisted to local or remote state storage.

data.template_file.Default: Refreshing state...
data.template_file.network_config: Refreshing state...

------------------------------------------------------------------------

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # esxi_guest.Default will be created
  + resource "esxi_guest" "Default" {
      + boot_disk_size         = (known after apply)
      + disk_store             = "datastore1"
      + guest_name             = "centos7-test"
      + guest_shutdown_timeout = (known after apply)
      + guest_startup_timeout  = (known after apply)
      + guestinfo              = {
          + "metadata"          = "base64text"
          + "metadata.encoding" = "gzip+base64"
          + "userdata"          = "base64text"
          + "userdata.encoding" = "gzip+base64"
        }
      + guestos                = (known after apply)
      + id                     = (known after apply)
      + ip_address             = (known after apply)
      + memsize                = "1024"
      + notes                  = (known after apply)
      + numvcpus               = (known after apply)
      + ovf_properties_timer   = (known after apply)
      + ovf_source             = "/root/create-and-deploy-esxi/output-packer-centos7-x86_64/packer-centos7-x86_64.ova"
      + power                  = "on"
      + resource_pool_name     = (known after apply)
      + virthwver              = (known after apply)

      + network_interfaces {
          + mac_address     = (known after apply)
          + nic_type        = (known after apply)
          + virtual_network = "VM Network"
        }
    }

Plan: 1 to add, 0 to change, 0 to destroy.

------------------------------------------------------------------------

Note: You didn't specify an "-out" parameter to save this plan, so Terraform
can't guarantee that exactly these actions will be performed if
"terraform apply" is subsequently run.

Temm:

terraform apply

Jekk kollox isir b'mod korrett, allura f'2-3 minuti magna virtwali ġdida tiġi skjerata mill-immaġni maħluqa qabel.

L-għażliet għall-użu ta 'dan kollu huma limitati biss mill-immaġinazzjoni tiegħek.

Ridt biss naqsam l-esperjenza tiegħi u nuri l-punti ewlenin meta naħdem ma 'dawn il-prodotti.

Grazzi tal-attenzjoni!

PS: Inkun ferħan li nirċievi kritika kostruttiva.

Sors: www.habr.com