Maitiro ekuchinjisa OpenVZ 6 mudziyo kuKVM server isina musoro

Chero ani anga achifanirwa kuendesa mudziyo weOpenVZ kune server ine yakazara KVM virtualization kamwechete muhupenyu hwavo asangana nemamwe matambudziko:

  • Ruzhinji rweruzivo rwangove rwechinyakare uye rwaive rwakakodzera kune maOS aive apfuura EOL kutenderera
  • Ruzivo rwakasiyana runogara ruchipihwa kune akasiyana masisitimu anoshanda, uye zvikanganiso zvinogona kuitika panguva yekutama hazvimbotariswa
  • Dzimwe nguva unofanirwa kubata nemagadzirirwo ayo nguva nenguva asingadi kushanda mushure mekutama

Paunoendesa 1 sevha, unogona kugara uchigadzirisa chimwe chinhu panhunzi, asi kana iwe uchiendesa sumbu rese?

Muchinyorwa chino ini ndichaedza kukuudza nzira yekufambisa nenzira kwayo mudziyo weOpenVZ kuenda kuKVM ine nguva shoma yekudzikira uye mhinduro yekukurumidza kumatambudziko ese.

Chirongwa chidiki chedzidzo: chii chinonzi OpenVZ uye chii KVM?

Hatisi kuzopinda zvakadzama mutemu, asi tichati mune zvakajairika:

OpenVZ - virtualization padanho rekushandisa system, unogona kutoiisa pane microwave, sezvo pasina chikonzero cheCPU mirairo uye virtualization tekinoroji pamushini wekutambira.

KVM -yakazara-yakazara virtualization, uchishandisa ese simba reCPU uye inokwanisa kuita chero chinhu, chero nzira, ichicheka kureba uye kuyambuka.

Kusiyana nekutenda kwakakurumbira kuti pakati pevanopa vanopa OpenVZ ichave yakawandisa, asi KVM haizo - nerombo rakanaka kune yekupedzisira, KVM ikozvino yave kutengeswa zvakanyanya kupfuura mukoma wayo.

Tichatakura chii?

Sezvidzidzo zvekutamiswa, taifanira kushandisa sango rese rekushandisa masisitimu anowanikwa paOpenVZ: CentOS (6 uye 7 shanduro), Ubuntu (14, 16 uye 18 LTS), Debian 7.

Zvaifungidzirwa kuti mazhinji emidziyo yeOpenVZ anga achitoita imwe mhando yeLAMP, uye mamwe aitove nesoftware chaiyo. Kazhinji, izvi zvaive zvigadziriso neISPmanager, VestaCP control panel (uye kazhinji, isina kuvandudzwa kwemakore). Zvikumbiro zvavo zvekutamisa zvinofanirwa kuverengerwa.

Kutama kunoitwa uchichengetedza IP kero yemudziyo unotamiswa; isu tichafunga kuti IP iyo mudziyo waive nayo yakachengetwa paVM uye ichashanda pasina matambudziko.

Tisati tatamisa, ngative nechokwadi chekuti tine zvese zviripo:

  • OpenVZ server, yakazara midzi yekuwana kumuchina wekutambira, kugona kumira/kukwira/kutanga/kudzima midziyo
  • KVM server, yakazara midzi yekuwana kumushini wekutambira, nezvose zvazvinoreva. Zvinofungidzirwa kuti zvese zvakatogadziriswa uye zvakagadzirira kuenda.

Ngatitange kutamisa

Tisati tatanga kutamisa, ngatitsanangure mazwi anozokubatsira kudzivirira nyonganiso:

KVM_NODE - KVM yekutambira muchina
VZ_NODE - OpenVZ yekutambira muchina
CTID - OpenVZ mudziyo
VM -KVM chaiyo server

Kugadzirira kutama uye kugadzira chaiwo michina.

vanotsika 1

Sezvo isu tichida kufambisa mudziyo kune imwe nzvimbo, isu tichagadzira VM ine dhizaini yakafanana ne KVM_NODE.
Zvinokosha! Iwe unofanirwa kugadzira VM pane inoshanda sisitimu iri kushanda paCTID. Semuenzaniso, kana Ubuntu 14 yakaiswa paCTID, ipapo Ubuntu 14 inofanira kuiswa paVM. Zvinyorwa zviduku hazvina kukosha uye kupesana kwavo hakuna kunyanya kuoma, asi shanduro huru dzinofanira kunge dzakafanana.

Mushure mekugadzira iyo VM, isu tichavandudza mapakeji paCTID uye paVM (kwete kuti tivhiringike nekuvandudza OS - isu hatiigadzirise, tinongogadzirisa mapakeji uye, kana ikasvika, iyo OS vhezheni mukati meiyo huru. vhezheni).

Kune CentOS maitiro aya anotaridzika asingakuvadzi:

# yum clean all
# yum update -y

Uye zvisingaite zvisingakuvadzi kuUbuntu neDebian:

# apt-get update
# apt-get upgrade

vanotsika 2

Isa pa CTID, VZ_NODE ΠΈ VM utility rsync:

CentOS:

# yum install rsync -y

Debian, Ubuntu:

# apt-get install rsync -y

Hatisi kuisa chimwe chinhu chero ipapo kana ipapo.

vanotsika 3

Tinomira CTID pamusoro VZ_NODE team

vzctl stop CTID

Kuisa mufananidzo CTID:

vzctl mount CTID

Enda ku /vz/root/foldaCTID uye kuita

mount --bind /dev dev && mount --bind /sys sys && mount --bind /proc proc && chroot .

Pasi pemudzi, gadzira faira /root/exclude.txt - rinenge riine runyoro rwezvisizvo zvisingasviki kune server itsva.

/boot
/proc
/sys
/tmp
/dev
/var/lock
/etc/fstab
/etc/mtab
/etc/resolv.conf
/etc/conf.d/net
/etc/network/interfaces
/etc/networks
/etc/sysconfig/network*
/etc/sysconfig/hwconf
/etc/sysconfig/ip6tables-config
/etc/sysconfig/kernel
/etc/hostname
/etc/HOSTNAME
/etc/hosts
/etc/modprobe*
/etc/modules
/net
/lib/modules
/etc/rc.conf
/usr/share/nova-agent*
/usr/sbin/nova-agent*
/etc/init.d/nova-agent*
/etc/ips
/etc/ipaddrpool
/etc/ips.dnsmaster
/etc/resolv.conf
/etc/sysconfig/network-scripts/ifcfg-eth0
/etc/sysconfig/network-scripts/ifcfg-ens3

Tinobatana ne KVM_NODE uye tanga yedu VMkuitira kuti ishande uye iwanikwe pane network.

Iye zvino zvinhu zvose zvagadzirira kutamiswa. Enda!

vanotsika 4

Tichiri pasi pechiperengo, tinoita

rsync --exclude-from="/root/exclude.txt" --numeric-ids -avpogtStlHz --progress -e "ssh -T -o Compression=no -x" / root@KVM_NODE:/

Iyo rsync command ichaita yekufambisa, isu tinovimba kuti makiyi akajeka - kuchinjisa kunoitwa nekuchengetedza symlinks, kodzero dzekuwana, varidzi nemapoka, uye encryption yakadzimwa kumhanya kukuru (iwe unogona kushandisa imwe kukurumidza cipher, asi izvi hazvina kunyanya kukosha pabasa iri) , pamwe nekudzvanya kwakadzimwa.

Mushure mekupedza rsync, buda kubva kuchroot (nekudzvanya ctrl + d) uye ita.

umount dev && umount proc && umount sys && cd .. && vzctl umount CTID

vanotsika 5

Ngatiite nhanho dzinoverengeka dzinozotibatsira kutanga VM mushure mekutamisa kubva kuOpenVZ.
Pamaseva ane Systemd ngatiite murairo unotibatsira kupinda mune yenguva dzose console, semuenzaniso, kuburikidza neVNC server skrini.

mv /etc/systemd/system/getty.target.wants/[email protected] /etc/systemd/system/getty.target.wants/[email protected]

Pamaseva CentOS 6 ΠΈ CentOS 7 Iva nechokwadi chekuisa kernel nyowani:

yum install kernel-$(uname -r)

Sevha inogona kutakurwa kubva pairi, asi mushure mekutamisa inogona kumira kushanda kana kubviswa.

Pa server CentOS 7 iwe unofanirwa kuisa diki gadziriso yePolkitD, zvikasadaro sevha ichaparara zvachose:

getent group polkitd >/dev/null && echo -e "e[1;32mpolkitd group already existse[0m" || { groupadd -r polkitd && echo -e "e[1;33mAdded missing polkitd groupe[0m" || echo -e "e[1;31mAdding polkitd group FAILEDe[0m"; }

getent passwd polkitd >/dev/null 
&& echo -e "e[1;32mpolkitd user already existse[0m" || { useradd -r -g polkitd -d / -s /sbin/nologin -c "User for polkitd" polkitd && echo -e "e[1;33mAdded missing polkitd usere[0m" || echo -e "e[1;31mAdding polkitd user FAILEDe[0m"; }

rpm -Va polkit* && echo -e "e[1;32mpolkit* rpm verification passede[0m" || { echo -e "e[1;33mResetting polkit* rpm user/group ownership & permse[0m"; rpm --setugids polkit polkit-pkla-compat; rpm --setperms polkit polkit-pkla-compat; }

Pane ese maseva, kana mod_fcgid yeApache yakaiswa, tichaita diki kugadzirisa nekodzero, zvikasadaro mawebhusaiti anoshandisa mod_fcgid anopunzika nekukanganisa 500:

chmod +s `which suexec` && apachectl restart

Uye chinhu chekupedzisira chinobatsira Ubuntu neDebian kugovera. Iyi OS inogona kurovera mubhutsu yekusingaperi nekukanganisa

looping nekukurumidza. throttling execution zvishoma

isingafadzi, asi inogadziriswa nyore, zvichienderana neiyo OS vhezheni.

pamusoro Debian 9 kugadzirisa kunoratidzika seizvi:

tinoita

dbus-uuidgen

kana tikawana kukanganisa

/usr/local/lib/libdbus-1.so.3: shanduro `LIBDBUS_PRIVATE_1.10.8β€² haina kuwanikwa

tarisa kuvepo kweLIBDBUS

ls -la /lib/x86_64-linux-gnu | grep dbus
libdbus-1.so.3 -> libdbus-1.so.3.14.15 
libdbus-1.so.3.14.15 <-- Π½ΡƒΠΆΠ΅Π½ этот
libdbus-1.so.3.14.16

kana zvinhu zvose zvakarongeka, tinozviita

cd /lib/x86_64-linux-gnu
rm -rf libdbus-1.so.3
ln -s libdbus-1.so.3.14.15  libdbus-1.so.3

Kana zvisingabatsire, edza yechipiri sarudzo.

Yechipiri mhinduro kune dambudziko nayo throttling execution zvishoma Inokodzera anenge ese Ubuntu uye Debian kugovera.

Tinoita

bash -x /var/lib/dpkg/info/dbus.postinst configure

Uye nokuda Ubuntu 14, Debian 7 Mukuwedzera, tinoita:

adduser --system --home /nonexistent --no-create-home --disabled-password --group messagebus

rm -rf /etc/init.d/modules_dep.sh 

Taita sei? Isu takadzoreredza meseji, yaive isipo kumhanya Debian/Ubuntu, uye takabvisa modules_dep, iyo yakabva kuOpenVZ uye yakakanganisa kurodha kwemamodule akawanda ekernel.

vanotsika 6

Isu tinotangazve VM, tarisa muVNC kuti kurodha kuri kuenderera sei uye, zvine musoro, zvese zvinotakura pasina matambudziko. Kunyangwe zvichikwanisika kuti mamwe matambudziko chaiwo achaonekwa mushure mekutama, ari kunze kwechikamu chechinyorwa ichi uye anozogadziriswa sezvaanomuka.

Ndinovimba ruzivo urwu runobatsira! πŸ™‚

Source: www.habr.com

Voeg