I-MiniO sisisombululo esihle kakhulu xa ufuna ngokulula kwaye ulungelelanise ukugcinwa kwezinto. Ukuseta okusisiseko, amaqonga amaninzi kunye nokusebenza kakuhle benze umsebenzi wabo kwintsimi yothando oludumileyo. Ke besingenayo enye indlela ngaphandle kokubhengeza ukuhambelana kwinyanga ephelileyo . Kubandakanya into ebalulekileyo njengoKungaguquki. Enyanisweni, i-MiniO inento yonke kumaxwebhu anikezelwe kuhlanganiso lwethu.
Ke, namhlanje siza kuthetha ngendlela:
- Ukuseta iMiniO kukhawuleza kakhulu.
- Ukuseta iMiniO kuncinci ngokukhawuleza, kodwa kungcono kakhulu.
- Yisebenzise njengeNqanaba loLondolozo lweNdawo yeVeeam SOBR eScalable Repository.
Uyintoni?
Intshayelelo emfutshane kwabo bangakhange badibane neMiniO. Lo ngumthombo ovulekileyo wokugcina into ehambelana ne-Amazon S3 API. Ikhutshwe phantsi kwelayisensi ye-Apache v2 kwaye ithobela ifilosofi ye-Spartan minimalism.
Oko kukuthi, ayinayo i-GUI ehambayo enedeshibhodi, iigrafu kunye neemenyu ezininzi. I-MiniO isungula iseva yayo ngomyalelo omnye, apho unokugcina idatha usebenzisa amandla apheleleyo e-S3 API. Kodwa kufuneka kuqatshelwe ukuba oku kulula kunokukhohlisa xa kuziwa kwimithombo esetyenziswayo. I-RAM kunye ne-CPU zifakwe ngokugqibeleleyo, kodwa izizathu ziya kuxoxwa ngezantsi. Kwaye, ngendlela, efana ne-FreeNAS kunye ne-TrueNAS zisebenzisa i-MiniO phantsi kwe-hood.
Le intshayelelo ingaphelela apha.
Ukuseta iMiniO kukhawuleza kakhulu
Ukuseta kukhawuleza kangangokuba siza kuyijonga ngeWindows kunye neLinux. Kukho iinketho zeDocker, kunye neKubernetis, kunye neMacOS, kodwa intsingiselo iya kufana kuyo yonke indawo.
Ke, kwimeko yeWindows, yiya kwiwebhusayithi esemthethweni kwaye ukhuphele inguqulelo yamva nje. Apho sibona imiyalelo yokuqalisa:
minio.exe server F:Data
Kwaye kukwakho nekhonkco eliya kwelinye elineenkcukacha ngakumbi . Akukho sizathu sokungayikholelwa imiyalelo, ngoko siyayiqhuba kwaye sifumane into efana nale mpendulo.
Kuko konke! Indawo yokugcina iyasebenza kwaye ungaqala ukusebenza nayo. Bendingadlali xa ndisithi iMiniO yiminimalist kwaye isebenza nje. Ukuba ulandela ikhonkco elinikiweyo ngexesha lokuqaliswa, eyona misebenzi iphezulu ekhoyo kukwenza ibhakethi. Kwaye ungaqala ukubhala idatha.
Kubathandi beLinux, yonke into ihlala ilula. Eyona miyalelo ilula:
wget https://dl.min.io/server/minio/release/linux-amd64/minio
chmod +x minio
./minio server /dataIsiphumo siya kuba singabonakali kwizinto ezibonwe ngaphambili.
Ukumisela iMiniO kunentsingiselo kancinane
Njengoko siqonda, umhlathi odlulileyo ulungelelanisa iinjongo zovavanyo. Kwaye, masinyaniseke, sisebenzisa iMiniO ngokubanzi kuvavanyo, esingenazintloni zokuyivuma. Ewe, kuyasebenza, kodwa kulihlazo ukunyamezela oku ngaphaya kweebhentshi zovavanyo. Ngoko ke, sithatha ifayile ezandleni zethu kwaye siqale ukuyikhumbuza.
HTTPS
Inyathelo lokuqala elisisinyanzelo kwindlela eya kwimveliso kukufihlakala. Sele kukho izigidi kunye newaka leencwadi kwinethiwekhi yokongeza izatifikethi kwiMiniIO, kodwa isicwangciso sabo ngokubanzi sesi:
- Yenza isatifikethi
- Kwimeko yeeWindows, yibeke ku-C:Users%User%.miniocerts
- Ye Linux kwi ${HOME}/.minio/certs
- Iqalisa kwakhona iseva
I-banal Masibethele iyadika kwaye ichazwa kuyo yonke indawo, ngoko ke umendo wethu yindlela ye-samurai, ngoko kwimeko yeWindows sikhuphela. , kwaye kwimeko ye Linux sijonga ngokulula ukuba sifake i-openssl. Kwaye senza umlingo omncinci wekhonsoli:
- Yenza izitshixo: openssl ecparam -genkey -name prime256v1 | openssl ec -out private.key
- Senza isatifikethi sisebenzisa isitshixo: openssl req -new -x509 -days 3650 -key private.key -out public.crt
- Khuphela private.key kunye public.crt kwisiqulathi seefayili esichazwe ngasentla
- Qala kwakhona iMiniO
Ukuba yonke into ihambe njengoko kufanele, ngoko into efana nale iya kuvela kwimeko.
Yenza iKhowudi yokuCima iMiniO
Okokuqala, amagama ambalwa malunga nombandela. Ngamafutshane: oku kukhuseleko lwesoftware yedatha kumonakalo kunye nokulahleka. Njengogqogqo, kuphela okuthembeke ngakumbi. Ukuba i-RAID6 yakudala inokukwazi ukuphulukana neediski ezimbini, ke i-MiniO inokumelana ngokulula nokulahleka kwesiqingatha. Itekhnoloji ichazwe ngokweenkcukacha ngakumbi kwi . Kodwa ukuba sithatha i-essence, ke oku kukuphunyezwa kweekhowudi ze-Reed-Solomon: lonke ulwazi lugcinwe ngendlela yeebhloko zedatha, ezineebhloko zokulingana. Kwaye kubonakala ngathi konke oku sele kwenziwe ngamaxesha amaninzi, kodwa kukho into ebalulekileyo "kodwa": sinokubonisa ngokucacileyo umlinganiselo weebhloko zokulingana kwiibhloko zedatha yezinto ezigciniweyo.
Ngaba ufuna i-1: 1? Ndiyacela!
Ngaba ufuna i-5: 2? Akhongxaki!
Into ebaluleke kakhulu ukuba usebenzisa iindawo ezininzi ngexesha elinye kwaye ufuna ukufumana ibhalansi yakho phakathi kokhuseleko lwedatha oluphezulu kunye nezixhobo ezisetyenzisiweyo. Ngaphandle kwebhokisi, i-MiniO isebenzisa ifomula N / 2 (apho i-N inani elipheleleyo leediski), okt. yahlula idata yakho phakathi kwe N/2 yedata disks kunye N/2 parity disks. Ukuguqulela kumagama abantu: unokulahlekelwa yisiqingatha sediski kwaye ubuyisele idatha. Olu lwalamano lunikezelwa , ikuvumela ukuba uzikhethele oko kubaluleke ngakumbi: ukuthembeka okanye umthamo.
Isikhokelo sinika lo mzekelo ulandelayo: cinga ukuba unofakelo kwiidiski ezili-16 kwaye kufuneka ugcine ifayile ye-100 MB ngobukhulu. Ukuba imimiselo engagqibekanga isetyenzisiweyo (iidiski ezi-8 zedatha, i-8 yeebhloko ze-parity), ngoko ifayile ekugqibeleni iya kuthatha phantse i-volume kabini, i.e. 200 MB. Ukuba umlinganiselo wediski ngu-10/6, ngoko ke i-160 MB iya kufuneka. 14/2 - 114 MB.
Omnye umehluko obalulekileyo ekuhlaselweni: xa kwenzeka ukungaphumeleli kwediski, i-MiniO iya kusebenza kwinqanaba lezinto, ukubuyisela enye enye, ngaphandle kokumisa inkqubo yonke. Ngelixa uhlaselo oluqhelekileyo luya kunyanzeliswa ukubuyisela umthamo wonke, oya kuthatha ixesha elingalindelekanga. Umbhali ukhumbula ishelufu yediski, emva kokuba iidiski ezimbini ziwile, zithathe iveki enesiqingatha ukubala kwakhona. Kwakungemnandanga kwaphela.
Kwaye, inqaku elibalulekileyo: i-MiniO yahlula zonke iidiski zokucima iKhowudi kwiiseti ukusuka kwi-4 ukuya kwi-16 disks, usebenzisa ubungakanani obunokwenzeka obusetiweyo. Kwaye kwixesha elizayo, enye into yolwazi iya kugcinwa kuphela kwiseti enye.
Konke oku kuvakala kupholile, kodwa kuya kuba nzima kangakanani ukuseta? Makhe sijonge. Sithatha umyalelo wokuqhuba kwaye sidwelise ngokulula iidiski apho ugcino kufuneka lwenziwe. Ukuba yonke into yenziwe ngokuchanekileyo, ngoko kwingxelo siza kubona inani leediski ezibandakanyekayo. Kwaye ingcebiso kukuba akulungile ukongeza isiqingatha sediski kwinginginya enye kanye, kuba oku kuya kukhokelela ekulahlekeni kwedatha.
c:minio>minio.exe server F: G: H: I: J: K:
Okulandelayo, ukulawula kunye nokuqwalasela iseva ye-MiniO, siya kufuna i-arhente, onokuyikhuphela ukusuka kwindawo esemthethweni.
Ukuze ungagugi iminwe yakho ngalo lonke ixesha uchwetheza idilesi kunye nezitshixo zokufikelela (kwaye ayikhuselekanga), kulungele ukwenza ngoko nangoko isibizo xa uqala ukusebenzisa ifomula ye-mc alias iseti. [ISIQINISO-SOFIKELELO-LWAKHO] [ISIQINISO-WAKHO-UMFIHLO]
mc alias set veeamS3 https://172.17.32.52:9000 YOURS3ACCESSKEY YOURSECERTKEOkanye unokongeza ngokukhawuleza umamkeli wakho:
mc config host add minio-veeam https://minio.jorgedelacruz.es YOURS3ACCESSKEY YOURSECERTKEYKwaye ke siya kudala ibhakethi engaguqukiyo kunye neqela elihle
mc mb --debug -l veeamS3/immutable
mc: <DEBUG> PUT /immutable/ HTTP/1.1
Host: 172.17.32.52:9000
User-Agent: MinIO (windows; amd64) minio-go/v7.0.5 mc/2020-08-08T02:33:58Z
Content-Length: 0
Authorization: AWS4-HMAC-SHA256 Credential=minioadmin/20200819/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-bucket-object-lock-enabled;x-amz-content-sha256;x-amz-date, Signature=**REDACTED**
X-Amz-Bucket-Object-Lock-Enabled: true
X-Amz-Content-Sha256: UNSIGNED-PAYLOAD
X-Amz-Date: 20200819T092241Z
Accept-Encoding: gzip
mc: <DEBUG> HTTP/1.1 200 OK
Content-Length: 0
Accept-Ranges: bytes
Content-Security-Policy: block-all-mixed-content
Date: Wed, 19 Aug 2020 09:22:42 GMT
Location: /immutable
Server: MinIO/RELEASE.2020-08-16T18-39-38Z
Vary: Origin
X-Amz-Request-Id: 162CA0F9A3A3AEA0
X-Xss-Protection: 1; mode=block
mc: <DEBUG> Response Time: 253.0017ms--debug ikuvumela ukuba ubone kungekuphela umyalezo wokugqibela, kodwa ulwazi oluthe vetshe.
-l lithetha-nge-lock, nto leyo ethetha ukuba ayinakuguqulwa
Ukuba ngoku sibuyela kujongano lwewebhu, ibhakethi lethu elitsha liya kuvela apho.
Kuphelele apho okwangoku. Senze indawo yokugcina ekhuselekileyo kwaye sikulungele ukuqhubela phambili ekudityanisweni kweVeeam.
Unokuqiniseka ukuba yonke into isebenza ngokugqibeleleyo:
c:minio>mc admin info veeamS3
β 172.17.32.52:9000
Uptime: 32 minutes
Version: 2020-08-16T18:39:38Z
Network: 1/1 OK
Drives: 6/6 OK
0 B Used, 1 Bucket, 0 Objects
6 drives online, 0 drives offlineI-MiniO kunye neVeeam
Nceda nceda! Ukuba ngesizathu esithile esimangalisayo ufuna ukusebenza nge-HTTP, emva koko kwi-HKEY_LOCAL_MACHINESOFTWAREVeeamVeeam Backup kunye nokuphindaphinda yenza isitshixo se-DWORD I-SOBRArchiveS3DisableTLS. Misela ixabiso layo ku-1 kwaye ukhumbule ukuba asikuvumeli kakhulu ukuziphatha okunjalo kwaye asikukhuthazi nakubani na.
Ingqalelo kwakhona! Ukuba, ngenxa yokungaqondi kakuhle, uqhubeka usebenzisa i-Windows 2008 R2, ngoko xa uzama ukudibanisa i-MiniO kwi-Veeam, uya kufumana impazamo into efana nale: Ayiphumelelanga ukuseka uxhumano kwi-Amazon S3 endpoint. Oku kunokunyangwa ngesiziba esisemthethweni esivela .
Ewe, amalungiselelo agqityiwe, masivule i-VBR interface kwaye siye kwi-Backup Infrastructure tab, apho siya kubiza i-wizard yokongeza indawo yokugcina entsha.
Ngokuqinisekileyo, sinomdla kwi-Object storage, oko kukuthi, i-S3 iyahambelana. Kwiwizadi evulayo, seta igama kwaye uhambe ngamanyathelo abonisa idilesi kunye neakhawunti. Ukuba kuyafuneka, ungalibali ukucacisa isango apho izicelo zokugcina ziya kuba ngummeli.
Emva koko khetha ibhakethi, ifolda kwaye ujonge ibhokisi Yenza ii-backups zamva nje zingabi nakuguqulwa. Okanye asiyifaki. Kodwa ekubeni senze indawo yokugcina exhasa lo msebenzi, kuya kuba sisono ukungawusebenzisi.
Okulandelayo > Gqiba kwaye wonwabele umphumo.
Ngoku kufuneka siyongeze kwindawo yokugcina ye-SOBR njengeSigaba seCapacity. Ukwenza oku, sinokwenza entsha okanye sihlele esele ikhona. Sinomdla kwinqanaba leCapacity Tier.
Apha kufuneka sikhethe ukuba yeyiphi imeko esiza kusebenza ngayo. Zonke iinketho zichazwe kakuhle kwenye , ngoko andiyi kuphinda
Kwaye ekugqityweni kwewizadi, imisebenzi yokukhuphela okanye ukudlulisa i-backups iya kuqaliswa ngokuzenzekelayo. Kodwa ukuba izicwangciso zakho azibandakanyi ngokukhawuleza ukubeka umthwalo kuzo zonke iinkqubo, ngoko qiniseka ukuseta izithuba ezamkelekileyo zokusebenza kwiqhosha le Window.
Kwaye, ewe, unokwenza imisebenzi eyahlukeneyo ye-Backup Copy. Abanye bakholelwa ukuba oku kulungele ngakumbi, kuba ziselubala ngakumbi kwaye ziqikelelwa kumsebenzisi ongafuniyo ukukhangela kwiinkcukacha zokusebenza koluhlu lokudubula. Kwaye kukho iinkcukacha ezaneleyo apho, ngoko ke kwakhona ndincoma inqaku elihambelanayo kwikhonkco elingentla.
Kwaye ekugqibeleni, impendulo kumbuzo okhohlisayo: kuya kwenzeka ntoni ukuba usazama ukucima i-backup kwi-Immutable storage?
Nantsi impendulo:
Kuphelele apho namhlanje. Kwisithethe sokwenyani, bamba uluhlu lwezihloko eziluncedo ngesihloko:
- Imanyuwali
- Umzekelo wokusetyenziswa .
- Isikhokelo sokuseta ngokubanzi .
- Isebe lethu malunga nokugcinwa kwe-S3.
umthombo: www.habr.com