PowerShell Desired State Configuration uye faira: chikamu 1. Kugadzirisa DSC Dhonza Server kuti ishande neSQL database

PowerShell Desired State Configuration (DSC) inorerutsa zvakanyanya basa rekutumira nekugadzirisa sisitimu yekushandisa, maseva mabasa, uye maapplication kana uine mazana emaseva.

Asi kana uchishandisa DSC pane-nzvimbo, i.e. kwete muMS Azure, kune akati wandei nuances. Ivo vanonyanya kucherechedzwa kana sangano iri rakakura (kubva ku300 workstations nemaseva) uye haisati yawana nyika yemidziyo:

• Iko hakuna mishumo yakazara pamusoro pemamiriro ehurongwa. Kana iyo inodiwa gadziriso isati yashandiswa pane mamwe maseva, saka pasina iyi mishumo isu hatizive nezvazvo. Zvakanyanya kuoma kuwana ruzivo kubva kune yakavakirwa-mukati yekurekodha server, uye kune yakakura nhamba yevaenzi zvinogona zvakare kutora nguva yakareba.
• Inoshaya scalability uye kukanganisa kushivirira. Izvo hazvigoneke kuvaka purazi reDSC rinodhonza webhu maseva angave ane imwechete kukanganisa-kushivirira dhatabhesi uye yakajairwa chengetedzo yemof mafaera ekugadzirisa, mamodule uye makiyi ekunyoresa.

Nhasi ini ndichakuudza kuti ungagadzirisa sei dambudziko rekutanga uye uwane data yekuzivisa. Zvese zvingave nyore kana SQL yaigona kushandiswa sedhatabhesi. MS zvipikirwa yakavakirwa-mukati rutsigiro chete muWindows Server 2019 kana mukuvaka Windows server 1803. Tora data uchishandisa OleDB mupi futi hazvishandenekuti DSC Server inoshandisa parameter ine zita isina kutsigirwa zvizere neOleDbCommand.

Ndakawana nzira iyi: kune avo vanoshandisa Windows Server 2012 uye 2016, unogona tune uchishandisa SQL dhatabhesi sebackend yeDSC yemubvunzo server. Kuti tiite izvi, tichagadzira "proxy" nenzira ye .mdb faira ine matafura akabatanidzwa, iyo ichaendesa zvakare data yakagamuchirwa kubva kune mishumo yevatengi kune SQL server database.

Cherechedza: YeWindows Server 2016 unofanira kushandisa AccessDatabaseEngine2016x86nekuti Microsoft.Jet.OLEDB.4.0 haichabatiki.

Ini handisi kuzoenda mune zvakadzama nezve maitiro ekuendesa DSC kudhonza server, inotsanangurwa kwazvo pano. Ndichangocherechedza pfungwa mbiri. Kana isu tikaisa iyo DSC inodhonza pane imwechete webhu server neWSUS kana Kaspersky Security Center, saka mune yekumisikidza script tinoda kushandura anotevera maparamita:

1. UseSecurityBestPractices     = $false

   Zvikasadaro, TLS 1.0 icharemara uye hauzokwanisi kubatana neSQL dhatabhesi. Kaspersky Security Center haizoshande (dambudziko rinofanirwa kugadziriswa muKaspersky Security Center v11).

2. Enable32BitAppOnWin64   = $true

   Kana ukasaita shanduko iyi, hauzokwanisi kumhanya sevha yeAppPool DSC paIIS neWSUS.

3. Kana uchiisa DSC Server neWSUS, dzima static uye dynamic caching yeDSC saiti.

Ngatienderere mberi nekumisikidza DSC server kushandisa SQL dhatabhesi.

Kugadzira SQL Database

1. Ngatigadzire isina SQL dhatabhesi inonzi DSC.

   
   
   

2. Ngatigadzirei account yekubatanidza kune iyi database. Chekutanga, tarisa kuti SQL server inobvumira kuvimbiswa kweese maWindows uye SQL account.

   
   
   

3. Enda kune chikamu cheMushandisi Mepu. Sarudza dhatabhesi, mune iyi kesi DSC. Isu tinopa kodzero dzemuridzi wedatabase.

   

4. Yakaitwa.

   

Kugadzira Schema yeDSC Database

Pane nzira mbiri dzekugadzira schema yeDSC dhatabhesi:

• zvakazvimirira, kuburikidza neTSQL script

  SET ANSI_NULLS ON
  GO
  SET QUOTED_IDENTIFIER ON
  GO
  CREATE TABLE [dbo].[Devices](
  [TargetName] [nvarchar](255) NOT NULL,
  [ConfigurationID] [nvarchar](255) NOT NULL,
  [ServerCheckSum] [nvarchar](255) NOT NULL,
  [TargetCheckSum] [nvarchar](255) NOT NULL,
  [NodeCompliant] [bit] NOT NULL,
  [LastComplianceTime] [datetime] NULL,
  [LastHeartbeatTime] [datetime] NULL,
  [Dirty] [bit] NOT NULL,
  [StatusCode] [int] NULL
  ) ON [PRIMARY]
  GO
   
  CREATE TABLE [dbo].[RegistrationData](
  [AgentId] [nvarchar](255) NOT NULL,
  [LCMVersion] [nvarchar](255) NULL,
  [NodeName] [nvarchar](255) NULL,
  [IPAddress] [nvarchar](255) NULL,
  [ConfigurationNames] [nvarchar](max) NULL
  ) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]
  GO
   
  CREATE TABLE [dbo].[StatusReport](
  [JobId] [nvarchar](50) NOT NULL,
  [Id] [nvarchar](50) NOT NULL,
  [OperationType] [nvarchar](255) NULL,
  [RefreshMode] [nvarchar](255) NULL,
  [Status] [nvarchar](255) NULL,
  [LCMVersion] [nvarchar](50) NULL,
  [ReportFormatVersion] [nvarchar](255) NULL,
  [ConfigurationVersion] [nvarchar](255) NULL,
  [NodeName] [nvarchar](255) NULL,
  [IPAddress] [nvarchar](255) NULL,
  [StartTime] [datetime] NULL,
  [EndTime] [datetime] NULL,
  [Errors] [nvarchar](max) NULL,
  [StatusData] [nvarchar](max) NULL,
  [RebootRequested] [nvarchar](255) NULL
  ) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]
  GO

• pinza data kubva kumidziyo isina chinhu.mdb sechikamu chePS module PSDesiredStateConfiguration kuburikidza neSQL Data Import Wizard.

  Iyo Devices.mdb yatichange tichishanda nayo iri muC:WindowsSysWOW64WindowsPowerShellv1.0ModulesPSDesiredStateConfigurationPullServer.

1. Kupinza data, mhanyisa iyo SQL Server Kupinza uye Export Wizard.

   

2. Isu tinosarudza kwatinowana iyo data kubva - kwatiri isu iMicrosoft Access database. Click Next.

   

3. Sarudza faira kubva kwatinopinza dhayagiramu.

   

4. Isu tinoratidza kwatinopinza - kwatiri isu iSQL dhatabhesi.

   

5. Sarudza iyo SQL server (Zita reServer) uye dhatabhesi yatichapinza data (DataBase).

   

6. Sarudza iyo Kopi data kubva kune imwe kana akawanda tafura kana maonero sarudzo.

   

7. Isu tinosarudza matafura kubva kwatinozopinza iyo database schema.

   

8. Tarisa iyo Mhanya Pakarepo cheki bhokisi uye tinya Finish.

   

9. Yakaitwa.

   

10. Nekuda kweizvozvo, matafura anofanirwa kuoneka muDSC dhatabhesi.

    

Kugadzira .mdb "proxy" faira

Kugadzira ODBC yekubatanidza kune SQL server. Zvinofungidzirwa kuti MS Access haina kuisirwa pane sevha inoshandisa DSC, saka kumisikidza databases.mdb inoitwa pane yepakati host ine MS Access yakaiswa.

Ngatigadzirei system ODBC yekubatanidza kune SQL server (iyo yekubatanidza bitness inofanirwa kuenderana neMS Access bitness - 64 kana 32). Inogona kugadzirwa uchishandisa:
- Powershell cmdlet:

Add-OdbcDsn –Name DSC –DriverName 'SQL Server' –Platform '<64-bit or 32-bit>' –DsnType System –SetPropertyValue @('Description=DSC Pull Server',"Server=<Name of your SQL Server>",'Trusted_Connection=yes','Database=DSC') –PassThru

- kana nemaoko, uchishandisa wizard yekubatanidza:

1. Vhura Administrative zvishandiso. Isu tinosarudza ODBC data masosi zvichienderana neshanduro yeMS Access yakaiswa. Enda kuSystem DSN tab uye gadzira system yekubatanidza (Wedzera).

   

2. Isu tinoratidza kuti tichabatana neSQL server. Dzvanya Finish.

   

3. Taura zita uye sevha yekubatanidza nayo. Ipapo chinongedzo chine maparamita akafanana chinoda kugadzirwa pane DSC server.

   

4. Isu tinoratidza kuti kubatana neSQL server, isu tinoshandisa yakambogadzirwa login ine zita DSC.

   

5. Isu tinotsanangura dhatabhesi mune DSC yekubatanidza marongero.

   

6. Dzvanya Finish.

   

7. Tisati tapedza kuseta, tinotarisa kuti kubatana kuri kushanda (Test Data Source).

   

8. Yakaitwa.

   

Kugadzira dhatabhesi.mdb muMS Access. Tanga MS Access uye gadzira dhatabhesi isina chinhu inonzi madivayiri.mdb.

1. Enda kuExternal Data tab uye tinya paODBC Database. Muhwindo rinoonekwa, sarudza Gadzira tafura yakabatana kuti ubatanidze kune iyo data sosi.

   

2. Muhwindo idzva, sarudza iyo Machine Data Source tab uye tinya OK. Muhwindo idzva, isa zvinyorwa zvekubatanidza kune SQL server.

   

3. Sarudza matafura anoda kubatanidzwa. Tarisa Save password bhokisi uye tinya OK. Sevha password nguva yega yega yematafura matatu.

   

4. Mune indexes iwe unofanirwa kusarudza zvinotevera:
   - TargetName yetafura ye dbo_Devices;

   
   
   -NodeName kana IPAddress yedbo_RegistrationData;

   
   
   -NodeName kana IPAddress yedbo_StatusReport.

   

5. Ngatitumidzezve matafura muMS Access, anoti: bvisa dbo_ prefix kuitira kuti DSC ishandise.

   

6. Yakaitwa.

   

7. Sevha iyo faira uye vhara MS Access. Iye zvino tinokopa zvigadziriswe.mdb kuDSC server (nekuda kweC: Program FilesWindowsPowershellDCSService) uye kutsiva iyo iripo nayo (kana iripo).

Kugadzirisa DSC Server Kushandisa SQL

1. Isu tinodzokera kuDSC server. Kuti ubatanidze kune SQL sevha nefaira redu reproxy, ngatigadzirei itsva ODBC yekubatanidza pane DSC server. Zita, kudzika zvishoma, uye zvigadziriso zvekubatanidza zvinofanirwa kunge zvakafanana kana uchigadzira iyo MDB faira. Unogona kukopa zvakatogadzirwa zvisina chinhu.mdb kubva pano.
2. Kuti ushandise zvishandiso.mdb, unofanirwa kuita shanduko kuwebhu.config yeDSC yekudhonza server (default ndeye C:inetpubPSDSCPullServerweb.config):

- yeWindows Server 2012

<add key="dbprovider" value="System.Data.OleDb">
<add key="dbconnectionstr" value="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=C:Program FilesWindowsPowerShellDscServiceDevices.mdb;">

- yeWindows Server 2016

<add key="dbprovider" value="System.Data.OleDb">
<add key="dbconnectionstr" value="Provider=Microsoft.ACE.OLEDB.12.0;Data Source=C:Program FilesWindowsPowerShellDscServiceDevices.mdb;">

Izvi zvinopedzisa iyo DSC server setup.

Kutarisa kushanda kweDSC server

1. Ngatitarisei kuti DSC server inowanikwa kuburikidza newebhu browser.

   

2. Zvino ngatitarisei kana DSC yekudhonza server iri kushanda nemazvo. Kuita izvi, iyo xPSDesiredStateConfiguration module inosanganisira iyo pullserversetuptests.ps1 script. Usati washandisa script iyi, unofanira kuisa Powershell module inonzi Pester. Isa iyo Isa-Module -Zita Pester.
3. Vhura C:Program FilesWindowsPowerShellModulesxPSDesiredStateConfiguration<module version>DSCPullServerSetupPullServerDeploymentVerificationTest (mumuenzaniso shanduro 8.0.0.0.0).

   

4. Vhura PullServerSetupTests.ps1 uye tarisa nzira yewebhu.config yeDSC server. Nzira yekuenda kuwebhu.config, iyo inotarisa script, inoratidzirwa mutsvuku. Kana zvichidikanwa, tinoshandura iyi nzira.

   

5. Mhanyai pullserversetuptests.ps1
   Invoke-Pester.PullServerSetupTests.ps1
   Все раб.

   

6. MuSQL Management Studio tinoona kuti mauto anotungamirwa anotumira mishumo kuDSC yekubika sevha uye data rinopera muDSC dhatabhesi paSQL server.

   

Ndizvo zvose. Muzvinyorwa zvinotevera ndinoronga kukuudza nzira yekuvaka mishumo pane data yakawanikwa, uye ini ndichabata nyaya dzekutadza kushivirira uye scalability.

Source: www.habr.com