Momwe mungasinthire chidebe cha OpenVZ 6 kupita ku seva ya KVM popanda mutu

Aliyense amene akufunika kusamutsa chidebe cha OpenVZ ku seva yokhala ndi mawonekedwe a KVM kamodzi kamodzi m'moyo wawo wakumana ndi zovuta:

• Zambirizi ndi zachikale ndipo zinali zogwirizana ndi ma OS omwe anali atadutsa kale EOL
• Zambiri zimaperekedwa nthawi zonse pamakina osiyanasiyana ogwiritsira ntchito, ndipo zolakwika zomwe zingatheke panthawi yakusamuka sizimaganiziridwa
• Nthawi zina mumayenera kuthana ndi masinthidwe omwe nthawi ndi nthawi sakufuna kugwira ntchito mukasamuka

Mukasamutsa seva 1, mutha kukonza china chake pa ntchentche, koma mukasamutsa gulu lonse?

M'nkhaniyi ndiyesera kukuuzani momwe mungasamutsire bwino chidebe cha OpenVZ kupita ku KVM chokhala ndi nthawi yochepa komanso njira yothetsera mavuto onse.

Pulogalamu yaying'ono yophunzitsa: OpenVZ ndi chiyani ndipo KVM ndi chiyani?

Sitidzapita mozama mu terminology, koma tidzanena mwachidule:

OpenVZ - virtualization pamlingo wa machitidwe opangira, mutha kuyiyika pa microwave, popeza palibe chifukwa cha malangizo a CPU ndi matekinoloje aukadaulo pamakina ochitirako.

KVM - kusinthika kwathunthu, kugwiritsa ntchito mphamvu zonse za CPU ndikutha kuwonera chilichonse, mwanjira iliyonse, kudula motalika komanso modutsa.

Mosiyana ndi chikhulupiliro chodziwika kuti pakati pa operekera alendo OpenVZ idzagulitsidwa mochulukira, koma KVM sichidzatero - mwamwayi kwa omalizawo, KVM tsopano yagulitsidwa kwambiri kuposa m'bale wake.

Kodi tidzanyamula chiyani?

Monga maphunziro oyesa kusamutsa, tidayenera kugwiritsa ntchito nkhalango yonse yamakina ogwiritsira ntchito omwe amapezeka pa OpenVZ: CentOS (mitundu ya 6 ndi 7), Ubuntu (14, 16 ndi 18 LTS), Debian 7.

Zinkaganiziridwa kuti zotengera zambiri za OpenVZ zinali kale ndi mtundu wina wa LAMP, ndipo ena anali ndi mapulogalamu apadera kwambiri. Nthawi zambiri, awa anali masanjidwe ndi ISPmanager, VestaCP control panel (ndipo nthawi zambiri, osasinthidwa kwa zaka). Zopempha zawo zosinthira ziyeneranso kuganiziridwa.

Kusamuka kumachitika ndikusunga adilesi ya IP ya chidebe chomwe chasamutsidwa; tidzaganiza kuti IP yomwe chidebecho chinali nacho yasungidwa pa VM ndipo idzagwira ntchito popanda mavuto.

Tisanasamutse, tiyeni tiwonetsetse kuti tili ndi chilichonse:

• Seva ya OpenVZ, mwayi wofikira pamakina osungira, kutha kuyimitsa / kukwera / kuyambitsa / kufufuta zotengera
• Seva ya KVM, mwayi wofikira pamakina osungira, ndi zonse zomwe zikutanthauza. Zimaganiziridwa kuti zonse zakonzedwa kale ndipo zakonzeka kupita.

Tiyeni tiyambe kusamutsa

Tisanayambe kusamutsa, tiyeni tifotokoze mawu omwe angakuthandizeni kupewa chisokonezo:

KVM_NODE - Makina opangira KVM
VZ_NODE - Makina otsegulira a OpenVZ
CTID - Chidebe cha OpenVZ
VM - KVM seva yeniyeni

Kukonzekera kusamuka ndikupanga makina enieni.

mwatsatane 1

Popeza tiyenera kusuntha chidebe kwinakwake, tidzapanga VM ndi masinthidwe ofanana ndi KVM_NODE.
Zofunika! Muyenera kupanga VM pamakina ogwiritsira ntchito omwe akugwira ntchito pa CTID. Mwachitsanzo, ngati Ubuntu 14 imayikidwa pa CTID, ndiye Ubuntu 14 iyenera kuikidwa pa VM. Mabaibulo ang'onoang'ono sali ofunikira ndipo kusagwirizana kwawo sikovuta kwambiri, koma matembenuzidwe akuluakulu ayenera kukhala ofanana.

Pambuyo popanga VM, tidzasintha ma phukusi pa CTID ndi VM (kuti tisasokonezedwe ndi kukonzanso OS - sitimayisintha, timangosintha maphukusi ndipo, ngati ifika, mtundu wa OS mkati mwa chachikulu. version).

Kwa CentOS njirayi ikuwoneka yopanda vuto:

# yum clean all
# yum update -y

Ndipo zopanda vuto kwa Ubuntu ndi Debian:

# apt-get update
# apt-get upgrade

mwatsatane 2

Ikani pa CTID, VZ_NODE и VM zothandiza rsync:

CentOS:

# yum install rsync -y

Debian, Ubuntu:

# apt-get install rsync -y

Sitikuyika china chilichonse pamenepo kapena apo.

mwatsatane 3

Timayimitsa CTID pa VZ_NODE gulu

vzctl stop CTID

Kuyika chithunzi CTID:

vzctl mount CTID

Pitani ku /vz/root/fodaCTID ndi kuchitira

mount --bind /dev dev && mount --bind /sys sys && mount --bind /proc proc && chroot .

Pansi pa muzu, pangani fayilo /root/exclude.txt - idzakhala ndi mndandanda wazinthu zomwe sizingafike ku seva yatsopano.

/boot
/proc
/sys
/tmp
/dev
/var/lock
/etc/fstab
/etc/mtab
/etc/resolv.conf
/etc/conf.d/net
/etc/network/interfaces
/etc/networks
/etc/sysconfig/network*
/etc/sysconfig/hwconf
/etc/sysconfig/ip6tables-config
/etc/sysconfig/kernel
/etc/hostname
/etc/HOSTNAME
/etc/hosts
/etc/modprobe*
/etc/modules
/net
/lib/modules
/etc/rc.conf
/usr/share/nova-agent*
/usr/sbin/nova-agent*
/etc/init.d/nova-agent*
/etc/ips
/etc/ipaddrpool
/etc/ips.dnsmaster
/etc/resolv.conf
/etc/sysconfig/network-scripts/ifcfg-eth0
/etc/sysconfig/network-scripts/ifcfg-ens3

Timalumikizana ndi KVM_NODE ndi kukhazikitsa wathu VMkotero kuti imagwira ntchito komanso ikupezeka pa intaneti.

Tsopano zonse zakonzeka kusamutsa. Pitani!

mwatsatane 4

Tikadali pansi pa matsenga, timachita

rsync --exclude-from="/root/exclude.txt" --numeric-ids -avpogtStlHz --progress -e "ssh -T -o Compression=no -x" / root@KVM_NODE:/

Lamulo la rsync lidzachita kusamutsidwa, tikukhulupirira kuti makiyi akuwonekera bwino - kutengerako kumachitika ndikusunga ma symlink, ufulu wopeza, eni ndi magulu, ndipo kubisa kumayimitsidwa chifukwa cha liwiro lalikulu (mutha kugwiritsa ntchito cipher mwachangu, koma izi sizofunika kwambiri pa ntchitoyi) , komanso kukanikiza kumayimitsidwa.

Mukamaliza rsync, tulukani ku chroot (pokanikiza ctrl + d) ndikuchita

umount dev && umount proc && umount sys && cd .. && vzctl umount CTID

mwatsatane 5

Tiyeni tichite zingapo zomwe zingatithandize kukhazikitsa VM pambuyo posamutsa OpenVZ.
Pa maseva ndi Systemd tiyeni tipereke lamulo lomwe litithandiza kulowa mu console yokhazikika, mwachitsanzo, kudzera pawindo la seva ya VNC

mv /etc/systemd/system/getty.target.wants/[email protected] /etc/systemd/system/getty.target.wants/[email protected]

Pa maseva CentOS 6 и CentOS 7 Onetsetsani kuti mwayika kernel yatsopano:

yum install kernel-$(uname -r)

Seva ikhoza kutulutsidwa kuchokera pamenepo, koma pambuyo posamutsa ikhoza kusiya kugwira ntchito kapena kuchotsedwa.

Pa seva CentOS 7 muyenera kugwiritsa ntchito kukonza pang'ono kwa PolkitD, apo ayi seva idzawonongeka kosatha:

getent group polkitd >/dev/null && echo -e "e[1;32mpolkitd group already existse[0m" || { groupadd -r polkitd && echo -e "e[1;33mAdded missing polkitd groupe[0m" || echo -e "e[1;31mAdding polkitd group FAILEDe[0m"; }

getent passwd polkitd >/dev/null 
&& echo -e "e[1;32mpolkitd user already existse[0m" || { useradd -r -g polkitd -d / -s /sbin/nologin -c "User for polkitd" polkitd && echo -e "e[1;33mAdded missing polkitd usere[0m" || echo -e "e[1;31mAdding polkitd user FAILEDe[0m"; }

rpm -Va polkit* && echo -e "e[1;32mpolkit* rpm verification passede[0m" || { echo -e "e[1;33mResetting polkit* rpm user/group ownership & permse[0m"; rpm --setugids polkit polkit-pkla-compat; rpm --setperms polkit polkit-pkla-compat; }

Pa maseva onse, ngati mod_fcgid ya Apache idayikidwa, tidzakonza pang'ono ndi ufulu, apo ayi masamba omwe amagwiritsa ntchito mod_fcgid adzawonongeka ndi cholakwika 500:

chmod +s `which suexec` && apachectl restart

Ndipo chinthu chomaliza ndichothandiza pakugawa kwa Ubuntu ndi Debian. OS iyi ikhoza kugwera mu boot yamuyaya ndi cholakwika

kuzungulira mwachangu kwambiri. throttling kuphedwa pang'ono

zosasangalatsa, koma zokhazikika mosavuta, kutengera mtundu wa OS.

pa Debian 9 kukonza kumawoneka motere:

timachita

dbus-uuidgen

ngati tipeza cholakwika

/usr/local/lib/libdbus-1.so.3: mtundu `LIBDBUS_PRIVATE_1.10.8′ sunapezeke

onani kukhalapo kwa LIBDBUS

ls -la /lib/x86_64-linux-gnu | grep dbus
libdbus-1.so.3 -> libdbus-1.so.3.14.15 
libdbus-1.so.3.14.15 <-- нужен этот
libdbus-1.so.3.14.16

ngati zonse zili mu dongosolo, timachita

cd /lib/x86_64-linux-gnu
rm -rf libdbus-1.so.3
ln -s libdbus-1.so.3.14.15  libdbus-1.so.3

Ngati sizikuthandizani, yesani njira yachiwiri.

Yachiwiri yothetsera vuto ndi throttling kuphedwa pang'ono Yoyenera pafupifupi magawo onse a Ubuntu ndi Debian.

kuchita

bash -x /var/lib/dpkg/info/dbus.postinst configure

Ndipo kwa Ubuntu 14, Debian 7 Tsopano tikuchita:

adduser --system --home /nonexistent --no-create-home --disabled-password --group messagebus

rm -rf /etc/init.d/modules_dep.sh 

Kodi ife tachita chiyani? Tidabwezeretsa messagebus, yomwe idasowa kuyendetsa Debian / Ubuntu, ndikuchotsa ma modules_dep, omwe adachokera ku OpenVZ ndikusokoneza kutsitsa ma module ambiri a kernel.

mwatsatane 6

Timayambiranso VM, fufuzani mu VNC momwe kutsitsa kukuyendera, ndipo zonse zidzatsegula popanda mavuto. Ngakhale kuti n’zotheka kuti mavuto ena enieni adzawonekera pambuyo pa kusamuka, iwo ali opitirira malire a nkhaniyi ndipo adzakonzedwa pamene abuka.

Ndikukhulupirira kuti chidziwitsochi ndi chothandiza! 🙂

Source: www.habr.com