Rakibaadda kaydinta walxaha LeoFS ee u dulqaadan kara, oo la jaan qaadaya macaamiisha isticmaalaya S3, NFS

Sida laga soo xigtay Shabakadda furan: LeoFS - kaydinta shay u dulqaadan karo oo la qaybiyey LeoFS, oo ku habboon macaamiisha isticmaalaya Amazon S3 API iyo REST-API, iyo sidoo kale waxay taageertaa habka server-ka NFS. Waxaa jira hagaajin lagu kaydinayo walxaha yaryar iyo kuwa aadka u waaweyn labadaba, waxaa jira hab lagu kaydiyo oo ku dhex jira, iyo ku celcelinta kaydinta inta u dhaxaysa xarumaha xogta waa suurtagal. Hadafka mashruuca waxaa ka mid ah in la gaaro 99.9999999% isku halaynta iyada oo loo marayo ku celcelin aan badnayn oo la tirtiro hal dhibic oo guul darro ah. Xeerka mashruuca wuxuu ku qoran yahay Erlang.

LeoFS waxay ka kooban tahay saddex qaybood:

  • Kaydinta LeoFS - waxay u adeegtaa hawlgalada isku darka, soo celinta iyo tirtirida walxaha iyo xogta badan, waxay mas'uul ka tahay samaynta ku celcelinta, soo kabashada iyo safaynta codsiyada macmiilka.
  • LeoFS Gateway - Waxay u adeegtaa codsiyada HTTP waxayna u jihaysaa jawaabaha macaamiisha iyadoo la adeegsanayo REST-API ama S3-API, waxay hubisaa kaydinta xogta aadka loogu baahan yahay xusuusta iyo saxanka.
  • Maareeyaha LeoFS - wuxuu la socdaa hawlgalka LeoFS Gateway iyo LeoFS Kaydinta qanjidhada, wuxuu la socdaa heerka qanjidhada iyo hubinta jeegaga. Waxay dammaanad qaadaysaa daacadnimada xogta iyo kaydinta sare ee helitaanka

Maqaalkan waxaan ku rakibi doonaa Leofs annagoo adeegsanayna buug-ciyaareed la awoodi karo iyo tijaabin S3, NFS.

Haddii aad isku daydo inaad ku rakibto LeoFS adoo isticmaalaya buugaag-ciyaaraha rasmiga ah, waxaad la kulmi doontaa khaladaad kala duwan: 1,2. Maqaalkan waxaan ku qori doonaa waxa loo baahan yahay in la sameeyo si looga fogaado khaladaadkaas.

Meesha aad ku maamuli doonto buug-ciyaareed-aan macquul ahayn, waxaad u baahan tahay inaad ku rakibto netcat.

Tusaalaha alaabada

Tusaalaha alaabada (kujira hosts.sample repository):

# Please check roles/common/vars/leofs_releases for available versions
[all:vars]
leofs_version=1.4.3
build_temp_path="/tmp/leofs_builder"
build_install_path="/tmp/"
build_branch="master"
source="package"

#[builder]
#172.26.9.177

# nodename of leo_manager_0 and leo_manager_1 are set at group_vars/all
[leo_manager_0]
172.26.9.176

# nodename of leo_manager_0 and leo_manager_1 are set at group_vars/all
[leo_manager_1]
172.26.9.178

[leo_storage]
172.26.9.179 [email protected]
172.26.9.181 [email protected]
172.26.9.182 [email protected]
172.26.9.183 [email protected]

[leo_gateway]
172.26.9.180 [email protected]
172.26.9.184 [email protected]

[leofs_nodes:children]
leo_manager_0
leo_manager_1
leo_gateway
leo_storage

Diyaarinta Server-ka

Deminta Selinux. Waxaan rajeynayaa in bulshadu u abuuri doonto siyaasadaha Selinux ee LeoFS.

    - name: Install libselinux as prerequisite for SELinux Ansible module
      yum:
        name: "{{item}}"
        state: latest
      with_items:
        - libselinux-python
        - libsemanage-python

    - name: Disable SELinux at next reboot
      selinux:
        state: disabled

    - name: Set SELinux in permissive mode until the machine is rebooted
      command: setenforce 0
      ignore_errors: true
      changed_when: false

Ku rakibida netcat ΠΈ redhat-lsb-core. netcat loo baahan yahay leofs-adm, redhat-lsb-core loo baahan yahay si loo go'aamiyo nooca OS halkan.

    - name: Install Packages
      yum: name={{ item }} state=present
      with_items:
        - nmap-ncat
        - redhat-lsb-core

Abuuritaanka leofs isticmaale oo lagu daro kooxda giraangiraha

    - name: Create user leofs
      group:
        name: leofs
        state: present

    - name: Allow 'wheel' group to have passwordless sudo
      lineinfile:
        dest: /etc/sudoers
        state: present
        regexp: '^%wheel'
        line: '%wheel ALL=(ALL) NOPASSWD: ALL'
        validate: 'visudo -cf %s'

    - name: Add the user 'leofs' to group 'wheel'
      user:
        name: leofs
        groups: wheel
        append: yes

Ku rakibida Erlang

    - name: Remote erlang-20.3.8.23-1.el7.x86_64.rpm install with yum
      yum: name=https://github.com/rabbitmq/erlang-rpm/releases/download/v20.3.8.23/erlang-20.3.8.23-1.el7.x86_64.rpm

Nuqulka buuxa ee buug-ciyaaraha macquulka ah ee la saxay ayaa laga heli karaa halkan: https://github.com/patsevanton/leofs_ansible

Rakibaadda, habaynta, bilaabista

Marka xigta waxaan u sameynaa sida ku qoran https://github.com/leo-project/leofs_ansible iyada oo aan la dhisin_leofs.yml

## Install LeoFS
$ ansible-playbook -i hosts install_leofs.yml

## Config LeoFS
$ ansible-playbook -i hosts config_leofs.yml

## Start LeoFS
$ ansible-playbook -i hosts start_leofs.yml

Hubinta heerka kooxda ee LeoManager Primary

leofs-adm status

Dugsiga Hoose iyo Sare waxa lagu arki karaa buug-ciyaareedka la-qaban karo

Rakibaadda kaydinta walxaha LeoFS ee u dulqaadan kara, oo la jaan qaadaya macaamiisha isticmaalaya S3, NFS

Rakibaadda kaydinta walxaha LeoFS ee u dulqaadan kara, oo la jaan qaadaya macaamiisha isticmaalaya S3, NFS

Wax soo saarku wuxuu noqon doonaa wax sidan oo kale ah

 [System Confiuration]
-----------------------------------+----------
 Item                              | Value    
-----------------------------------+----------
 Basic/Consistency level
-----------------------------------+----------
                    system version | 1.4.3
                        cluster Id | leofs_1
                             DC Id | dc_1
                    Total replicas | 2
          number of successes of R | 1
          number of successes of W | 1
          number of successes of D | 1
 number of rack-awareness replicas | 0
                         ring size | 2^128
-----------------------------------+----------
 Multi DC replication settings
-----------------------------------+----------
 [mdcr] max number of joinable DCs | 2
 [mdcr] total replicas per a DC    | 1
 [mdcr] number of successes of R   | 1
 [mdcr] number of successes of W   | 1
 [mdcr] number of successes of D   | 1
-----------------------------------+----------
 Manager RING hash
-----------------------------------+----------
                 current ring-hash | a0314afb
                previous ring-hash | a0314afb
-----------------------------------+----------

 [State of Node(s)]
-------+----------------------+--------------+---------+----------------+----------------+----------------------------
 type  |         node         |    state     | rack id |  current ring  |   prev ring    |          updated at         
-------+----------------------+--------------+---------+----------------+----------------+----------------------------
  S    | [email protected]      | running      |         | a0314afb       | a0314afb       | 2019-12-05 10:33:47 +0000
  S    | [email protected]      | running      |         | a0314afb       | a0314afb       | 2019-12-05 10:33:47 +0000
  S    | [email protected]      | running      |         | a0314afb       | a0314afb       | 2019-12-05 10:33:47 +0000
  S    | [email protected]      | attached     |         |                |                | 2019-12-05 10:33:58 +0000
  G    | [email protected]      | running      |         | a0314afb       | a0314afb       | 2019-12-05 10:33:49 +0000
  G    | [email protected]      | running      |         | a0314afb       | a0314afb       | 2019-12-05 10:33:49 +0000
-------+----------------------+--------------+---------+----------------+----------------+----------------------------

Abuuritaanka isticmaale

Abuur isticmaale leofs:

leofs-adm create-user leofs leofs

  access-key-id: 9c2615f32e81e6a1caf5
  secret-access-key: 8aaaa35c1ad78a2cbfa1a6cd49ba8aaeb3ba39eb

Liiska isticmaalayaasha:

leofs-adm get-users
user_id     | role_id | access_key_id          | created_at                
------------+---------+------------------------+---------------------------
_test_leofs | 9       | 05236                  | 2019-12-02 06:56:49 +0000
leofs       | 1       | 9c2615f32e81e6a1caf5   | 2019-12-02 10:43:29 +0000

Samee baaldi

Baaldi la sameeyay

leofs-adm add-bucket leofs 9c2615f32e81e6a1caf5
OK

Liiska baaldiga:

 leofs-adm get-buckets
cluster id   | bucket   | owner  | permissions      | created at                
-------------+----------+--------+------------------+---------------------------
leofs_1      | leofs    | leofs  | Me(full_control) | 2019-12-02 10:44:02 +0000

Habaynta s3cmd

In berrinka HTTP Proxy server name sheeg server-ka Gateway IP

s3cmd --configure 

Enter new values or accept defaults in brackets with Enter.
Refer to user manual for detailed description of all options.

Access key and Secret key are your identifiers for Amazon S3. Leave them empty for using the env variables.
Access Key [9c2615f32e81e6a1caf5]: 
Secret Key [8aaaa35c1ad78a2cbfa1a6cd49ba8aaeb3ba39eb]: 
Default Region [US]: 

Use "s3.amazonaws.com" for S3 Endpoint and not modify it to the target Amazon S3.
S3 Endpoint [s3.amazonaws.com]: 

Use "%(bucket)s.s3.amazonaws.com" to the target Amazon S3. "%(bucket)s" and "%(location)s" vars can be used
if the target S3 system supports dns based buckets.
DNS-style bucket+hostname:port template for accessing a bucket [%(bucket)s.s3.amazonaws.com]: leofs

Encryption password is used to protect your files from reading
by unauthorized persons while in transfer to S3
Encryption password: 
Path to GPG program [/usr/bin/gpg]: 

When using secure HTTPS protocol all communication with Amazon S3
servers is protected from 3rd party eavesdropping. This method is
slower than plain HTTP, and can only be proxied with Python 2.7 or newer
Use HTTPS protocol [No]: 

On some networks all internet access must go through a HTTP proxy.
Try setting it here if you can't connect to S3 directly
HTTP Proxy server name [172.26.9.180]: 
HTTP Proxy server port [8080]: 

New settings:
  Access Key: 9c2615f32e81e6a1caf5
  Secret Key: 8aaaa35c1ad78a2cbfa1a6cd49ba8aaeb3ba39eb
  Default Region: US
  S3 Endpoint: s3.amazonaws.com
  DNS-style bucket+hostname:port template for accessing a bucket: leofs
  Encryption password: 
  Path to GPG program: /usr/bin/gpg
  Use HTTPS protocol: False
  HTTP Proxy server name: 172.26.9.180
  HTTP Proxy server port: 8080

Test access with supplied credentials? [Y/n] Y
Please wait, attempting to list all buckets...
Success. Your access key and secret key worked fine :-)

Now verifying that encryption works...
Not configured. Never mind.

Save settings? [y/N] y
Configuration saved to '/home/user/.s3cfg'

Haddii aad hesho qaladka qaladka: qaladka S3: 403

s3cmd put test.py s3://leofs/
upload: 'test.py' -> 's3://leofs/test.py'  [1 of 1]
 382 of 382   100% in    0s     3.40 kB/s  done
ERROR: S3 error: 403 (AccessDenied): Access Denied

Markaa waxaad u baahan tahay inaad u beddesho signature_v3 oo aad u beddesho Run qaabka s2cmd. Faahfaahinta arrintan arrin.

Haddii signature_v2 uu been yahay, markaas waxaa jiri doona qalad sidan oo kale ah:

WARNING: Retrying failed request: /?delimiter=%2F (getaddrinfo() argument 2 must be integer or string)
WARNING: Waiting 3 sec...
WARNING: Retrying failed request: /?delimiter=%2F (getaddrinfo() argument 2 must be integer or string)
WARNING: Waiting 6 sec...
ERROR: Test failed: Request failed for: /?delimiter=%2F

Tijaabada culeyska

Samee fayl 1GB ah

fallocate -l 1GB 1gb

U soo rar Leofs

time s3cmd put 1gb s3://leofs/
real    0m19.099s
user    0m7.855s
sys 0m1.620s

Tirakoob

leofs-adm du ee 1 noode:

leofs-adm du [email protected]
 active number of objects: 156
  total number of objects: 156
   active size of objects: 602954495
    total size of objects: 602954495
     ratio of active size: 100.0%
    last compaction start: ____-__-__ __:__:__
      last compaction end: ____-__-__ __:__:__

Waxaan aragnaa in gebogebada aysan ahayn mid war badan leh.

Aan aragno halka uu ku yaal faylkan.
leofs-adm halka leofs/1gb

leofs-adm whereis leofs/1gb
-------+----------------------+--------------------------------------+------------+--------------+----------------+----------------+----------------+----------------------------
 del?  |         node         |             ring address             |    size    |   checksum   |  has children  |  total chunks  |     clock      |             when            
-------+----------------------+--------------------------------------+------------+--------------+----------------+----------------+----------------+----------------------------
       | [email protected]      | 657a9f3a3db822a7f1f5050925b26270     |    976563K |   a4634eea55 | true           |             64 | 598f2aa976a4f  | 2019-12-05 10:48:15 +0000
       | [email protected]      | 657a9f3a3db822a7f1f5050925b26270     |    976563K |   a4634eea55 | true           |             64 | 598f2aa976a4f  | 2019-12-05 10:48:15 +0000

Daar NFS

Waxaan NFS ka hawlgelinaa Leo Gateway 172.26.9.184 server.

Ku rakib nfs-utils server-ka iyo macmiilka

sudo yum install nfs-utils

Sida ku cad tilmaamaha, waxaan sixi doonaa faylka qaabeynta /usr/local/leofs/current/leo_gateway/etc/leo_gateway.conf

protocol = nfs

Adeegga 172.26.9.184 ku socodsii rpcbind iyo leofs-gateway

sudo service rpcbind start
sudo service leofs-gateway restart

Seerfarka uu leo_manager ku shaqeeyo, u samee baaldi NFS oo soo saar furaha ku xidhidhiyaha NFS

leofs-adm add-bucket test 05236
leofs-adm gen-nfs-mnt-key test 05236 ip-адрСс-nfs-ΠΊΠ»ΠΈΠ΅Π½Ρ‚Π°

Ku xidhida NFS

sudo mkdir /mnt/leofs
## for Linux - "sudo mount -t nfs -o nolock <host>:/<bucket>/<token> <dir>"
sudo mount -t nfs -o nolock ip-адрСс-nfs-сСрвСра-Ρ‚Π°ΠΌ-Π³Π΄Π΅-Ρƒ-вас-установлСн-gateway:/bucket/access_key_id/ΠΊΠ»ΡŽΡ‡-ΠΏΠΎΠ»ΡƒΡ‡Π΅Π½Π½Ρ‹ΠΉ-ΠΎΡ‚-gen-nfs-mnt-key /mnt/leofs
sudo mount -t nfs -o nolock 172.26.9.184:/test/05236/bb5034f0c740148a346ed663ca0cf5157efb439f /mnt/leofs

Ka eeg booska diskka adoo isticmaalaya macmiilka NFS

Baaxadda diskka, iyada oo la tixgelinayo in noodhka kaydinta kastaa leeyahay 40GB disk (3 qanjidhada socda, 1 nood ku lifaaqan):

df -hP
Filesystem                                                         Size  Used Avail Use% Mounted on
172.26.9.184:/test/05236/e7298032e78749149dd83a1e366afb328811c95b   60G  3.6G   57G   6% /mnt/leofs

Ku rakibida LeoFS oo leh 6 qanjidhada kaydinta.

Alaabada (la'aanteeyuhu):

# Please check roles/common/vars/leofs_releases for available versions
[all:vars]
leofs_version=1.4.3
build_temp_path="/tmp/leofs_builder"
build_install_path="/tmp/"
build_branch="master"
source="package"

# nodename of leo_manager_0 and leo_manager_1 are set at group_vars/all
[leo_manager_0]
172.26.9.177

# nodename of leo_manager_0 and leo_manager_1 are set at group_vars/all
[leo_manager_1]
172.26.9.176

[leo_storage]
172.26.9.178 [email protected]
172.26.9.179 [email protected]
172.26.9.181 [email protected]
172.26.9.182 [email protected]
172.26.9.183 [email protected]
172.26.9.185 [email protected]

[leo_gateway]
172.26.9.180 [email protected]
172.26.9.184 [email protected]

[leofs_nodes:children]
leo_manager_0
leo_manager_1
leo_gateway
leo_storage

Soo saarista leofs-adm status

Soo saarista leofs-adm status

 [System Confiuration]
-----------------------------------+----------
 Item                              | Value    
-----------------------------------+----------
 Basic/Consistency level
-----------------------------------+----------
                    system version | 1.4.3
                        cluster Id | leofs_1
                             DC Id | dc_1
                    Total replicas | 2
          number of successes of R | 1
          number of successes of W | 1
          number of successes of D | 1
 number of rack-awareness replicas | 0
                         ring size | 2^128
-----------------------------------+----------
 Multi DC replication settings
-----------------------------------+----------
 [mdcr] max number of joinable DCs | 2
 [mdcr] total replicas per a DC    | 1
 [mdcr] number of successes of R   | 1
 [mdcr] number of successes of W   | 1
 [mdcr] number of successes of D   | 1
-----------------------------------+----------
 Manager RING hash
-----------------------------------+----------
                 current ring-hash | d8ff465e
                previous ring-hash | d8ff465e
-----------------------------------+----------

 [State of Node(s)]
-------+----------------------+--------------+---------+----------------+----------------+----------------------------
 type  |         node         |    state     | rack id |  current ring  |   prev ring    |          updated at         
-------+----------------------+--------------+---------+----------------+----------------+----------------------------
  S    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:29 +0000
  S    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:29 +0000
  S    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:30 +0000
  S    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:29 +0000
  S    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:29 +0000
  S    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:29 +0000
  G    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:31 +0000
  G    | [email protected]      | running      |         | d8ff465e       | d8ff465e       | 2019-12-06 05:18:31 +0000
-------+----------------------+--------------+---------+----------------+----------------+----------------------------

Baaxadda diskka, iyada oo la tixgelinayo in noodhka kaydinta kasta uu leeyahay 40GB disk (6 qanjidhada socda):

df -hP
Filesystem                                                         Size  Used Avail Use% Mounted on
172.26.9.184:/test/05236/e7298032e78749149dd83a1e366afb328811c95b  120G  3.6G  117G   3% /mnt/leofs

Haddii 5 nodes kaydinta la isticmaalo

[leo_storage]
172.26.9.178 [email protected]
172.26.9.179 [email protected]
172.26.9.181 [email protected]
172.26.9.182 [email protected]
172.26.9.183 [email protected]

df -hP
172.26.9.184:/test/05236/e7298032e78749149dd83a1e366afb328811c95b  100G  3.0G   97G   3% /mnt/leofs

Logs

Loggu waxay ku yaalliin hagaha /usr/local/leofs/current/*/log

Telegram channel: SDS iyo Kooxda FS

Source: www.habr.com

Add a comment