oVirt kwiiyure ezi-2. Icandelo 2. Ukuhlohla umphathi kunye nababuthi

Eli nqaku lelandelayo kuthotho lwe-oVirt, isiqalo apha.

amanqaku

  1. Intshayelelo
  2. Ukufakela umphathi (i-ovirt-injini) kunye ne-hypervisors (imikhosi) - Silapha
  3. Useto olongezelelweyo

Ngoko, makhe siqwalasele imiba yofakelo lokuqala lwe-ovirt-injini kunye ne-ovirt-host host components.

Iinkqubo zokufakela ezineenkcukacha zingasoloko zifumaneka kwi amaxwebhu.

Iziqulatho

  1. Ukufakela i-ovirt-injini
  2. Ukufakela i-ovirt-host
  3. Ukongeza i-node kwi-oVirtN
  4. Ukumisela ujongano lwenethiwekhi
  5. Ukusekwa kweFC
  6. Ukuseta FCoE
  7. ISO umfanekiso wogcino
  8. Okokuqala VM

Ukufakela i-ovirt-injini

Kwi-Injini, iimfuno ezincinci zi-2 cores / 4 GiB RAM / 25 GiB yokugcina. Kunconywa - ukusuka kwi-4 cores / 16 GiB ye-RAM / 50 GiB yokugcina. Sisebenzisa i-Standalone Manager ukhetho, xa injini isebenza kumatshini womzimba ozinikeleyo okanye wenyani ngaphandle kweqela elilawulwayo. Ufakelo lwethu, siya kuthatha umatshini virtual, umzekelo, kwi ESXi * ezizimeleyo. Kukulungele ukusebenzisa izixhobo ezizisebenzelayo zokusasazwa okanye ukudibanisa ukusuka kwitemplate ebilungiselelwe ngaphambili okanye ufakelo lokukhaba.

*Qaphela: Kwinkqubo yemveliso olu luluvo olubi kuba... umphathi usebenza ngaphandle kokuzibekela bucala kwaye uba ngumqobo. Kule meko, kungcono ukuqwalasela i-Self-hosted Injini ukhetho.

Ukuba kuyimfuneko, inkqubo yokuguqula i-Standalone ibe yi-Self Hosting ichazwe ngokweenkcukacha kwi amaxwebhu. Ngokukodwa, umamkeli kufuneka anikwe umyalelo wokufaka kwakhona ngenkxaso ye-Hosted Engine.

Siyifaka kwi-VM CentOS 7 kubume obuncinci, uze uhlaziye kwaye uqalise inkqubo kwakhona:

$ sudo yum update -y && sudo reboot

Kuluncedo ukufakela iarhente yeendwendwe kumatshini wenyani:

$ sudo yum install open-vm-tools

yeVMware ESXi iinginginya, okanye i-oVirt:

$ sudo yum install ovirt-guest-agent

Qhagamshela indawo yokugcina kwaye ufake umphathi:

$ sudo yum install https://resources.ovirt.org/pub/yum-repo/ovirt-release43.rpm
$ sudo yum install ovirt-engine

Ukuseta okusisiseko:

$ sudo engine-setup

Kwiimeko ezininzi, useto olungagqibekanga lwanele ukuzisebenzisa ngokuzenzekelayo, ungaqhuba uqwalaselo ngesitshixo:

$ sudo engine-setup --accept-defaults

Ngoku sinokuqhagamshela kwi-injini yethu entsha kwi ovirt.lab.example.com. Ayisenanto apha, ke masiqhubele phambili ekufakeni i-hypervisors.

Ukufakela i-ovirt-host

Siyifaka kwi-host yangempela CentOS 7 kuqwalaselo oluncinci, uze uqhagamshele indawo yokugcina izinto, uhlaziye kwaye uqalise inkqubo kwakhona:

$ sudo yum install https://resources.ovirt.org/pub/yum-repo/ovirt-release43.rpm
$ sudo yum update -y && sudo reboot

Qaphela: Kukulungele ukusebenzisa izixhobo ezizisebenzelayo zokusebenzisa okanye ufakelo lokukhaba lofakelo.

Umzekelo wefayile yokuqalisa
Nceda nceda! Izahlulo ezikhoyo zicinywa ngokuzenzekelayo! Qaphela!

# System authorization information
auth --enableshadow --passalgo=sha512
# Use CDROM installation media
cdrom
# Use graphical install
graphical
# Run the Setup Agent on first boot
firstboot --enable
ignoredisk --only-use=sda
# Keyboard layouts
keyboard --vckeymap=us --xlayouts='us','ru' --switch='grp:alt_shift_toggle'
# System language
lang ru_RU.UTF-8

# Network information
network  --bootproto=dhcp --device=ens192 --ipv6=auto --activate
network  --hostname=kvm01.lab.example.com

# Root password 'monteV1DE0'
rootpw --iscrypted $6$6oPcf0GW9VdmJe5w$6WBucrUPRdCAP.aBVnUfvaEu9ozkXq9M1TXiwOm41Y58DEerG8b3Ulme2YtxAgNHr6DGIJ02eFgVuEmYsOo7./
# User password 'metroP0!is'
user --name=mgmt --groups=wheel --iscrypted --password=$6$883g2lyXdkDLbKYR$B3yWx1aQZmYYi.aO10W2Bvw0Jpkl1upzgjhZr6lmITTrGaPupa5iC3kZAOvwDonZ/6ogNJe/59GN5U8Okp.qx.
# System services
services --enabled="chronyd"
# System timezone
timezone Europe/Moscow --isUtc
# System bootloader configuration
bootloader --append=" crashkernel=auto" --location=mbr --boot-drive=sda
# Partition clearing information
clearpart --all
# Disk partitioning information
part /boot --fstype xfs --size=1024 --ondisk=sda  --label=boot
part pv.01 --size=45056 --grow
volgroup HostVG pv.01 --reserved-percent=20
logvol swap --vgname=HostVG --name=lv_swap --fstype=swap --recommended
logvol none --vgname=HostVG --name=HostPool --thinpool --size=40960 --grow
logvol / --vgname=HostVG --name=lv_root --thin --fstype=ext4 --label="root" --poolname=HostPool --fsoptions="defaults,discard" --size=6144 --grow
logvol /var --vgname=HostVG --name=lv_var --thin --fstype=ext4 --poolname=HostPool --fsoptions="defaults,discard" --size=16536
logvol /var/crash --vgname=HostVG --name=lv_var_crash --thin --fstype=ext4 --poolname=HostPool --fsoptions="defaults,discard" --size=10240
logvol /var/log --vgname=HostVG --name=lv_var_log --thin --fstype=ext4 --poolname=HostPool --fsoptions="defaults,discard" --size=8192
logvol /var/log/audit --vgname=HostVG --name=lv_var_audit --thin --fstype=ext4 --poolname=HostPool --fsoptions="defaults,discard" --size=2048
logvol /home --vgname=HostVG --name=lv_home --thin --fstype=ext4 --poolname=HostPool --fsoptions="defaults,discard" --size=1024
logvol /tmp --vgname=HostVG --name=lv_tmp --thin --fstype=ext4 --poolname=HostPool --fsoptions="defaults,discard" --size=1024

%packages
@^minimal
@core
chrony
kexec-tools

%end

%addon com_redhat_kdump --enable --reserve-mb='auto'

%end

%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end
# Reboot when the install is finished.
reboot --eject

Gcina le fayile, umz. ftp.example.com/pub/labkvm.cfgUkuze usebenzise iskripthi xa uqalisa ukufakela i-OS, khetha ukhetho 'lokufaka'. CentOS 7', vula imo yokuhlela iparameter (iqhosha leTab) uze ekugqibeleni (unesithuba, ngaphandle kweengcaphuno) wongeze

' inst.ks=ftp://ftp.example.com/pub/labkvm.cfg'

.
Iskripthi sokufakela sisusa izahlulelo ezikhoyo kwi/dev/sda, zenza ezintsha iingcebiso zomphuhlisi (kukulungele ukuzijonga emva kofakelo usebenzisa i-lsblk umyalelo). Igama lenginginya libekwe njenge kvm01.lab.example.com (emva kokufaka, ungayitshintsha ngomyalelo we-hostnamectl set-hostname kvm03.lab.example.com), idilesi ye-IP ifumaneka ngokuzenzekelayo, indawo yexesha yiMoscow, Inkxaso yolwimi lwesiRashiya yongezwe.

Igama eliyimfihlo lomsebenzisi: monteV1DE0, mgmt igama eliyimfihlo lomsebenzisi: metroP0!is.
Ingqalelo! Izahlulo ezikhoyo zicinywa ngokuzenzekelayo! Lumnka!

Siphinda (okanye siphumeze ngokufanayo) kuzo zonke iinginginya. Ukusuka ekuvuleni iseva "engenanto" ukuya kwimeko ekulungeleyo, kuthathelwa ingqalelo ukukhuphela okude oku-2, kuthatha malunga nemizuzu engama-20.

Ukongeza i-node kwi-oVirt

Ilula kakhulu:

Bala → Iinginginya → Entsha →…

Imihlaba efunekayo kwiwizard ngala Igama (display name, e.g. kvm03), Hostname (FQDN, e.g. kvm03.lab.example.com) kunye necandelo loQinisekiso - umsebenzisi wengcambu (ongenakuguqulwa) — igama lokugqitha okanye iSitshixo sikaWonke-wonke se-SSH.

Emva kokucinezela iqhosha Ok Uya kufumana umyalezo “Awukaluqwalaseli ulawulo lwaMandla kulo mamkeli. Uqinisekile ukuba ufuna ukuqhubeka?". Oku kuqhelekile - siza kujonga ulawulo lwamandla kamva, emva kokuba umphathi uqhagamshelwe ngempumelelo. Nangona kunjalo, ukuba oomatshini apho iinginginya ezifakelweyo azixhasi ulawulo (IPMI, iLO, DRAC, njl.), ndincoma ukuyikhubaza: Qhuba → Amaqela → Ukungagqibeki → Hlela → Icebo Lokubiyela → Yenza ucingo lusebenze, sukukhangela ibhokisi.

Ukuba indawo yokugcina i-oVirt yayingaqhagamshelwanga kumamkeli, ufakelo luya kusilela, kodwa kulungile- kufuneka uyongeze, emva koko ucofe Faka -> Faka kwakhona.

Ukuqhagamshela umamkeli akuthathi ngaphezu kwemizuzu emi-5-10.

Ukumisela ujongano lwenethiwekhi

Kuba sakha isixokelelwano sokunyamezela iziphene, udibaniso lwenethiwekhi kufuneka lubonelele ngodibaniso olungafunekiyo, olwenziwa kwiCompute → Inginginya → isithuba. UMSEBENZI → IiNdibaniselwano Zothungelwano-Seta iiNethiwekhi zomamkeli.

Ngokuxhomekeke kwizakhono zesixhobo sakho sothungelwano kunye neendlela zokwakha, ukhetho lunokwenzeka. Kungcono ukudibanisa kwi-stack ye-top-of-rack switches ukwenzela ukuba ukuba umntu uyasilela, ukufumaneka kwenethiwekhi akuphazamiseki. Makhe sijonge kumzekelo wetshaneli ye-LACP edibeneyo. Ukuqwalasela umjelo odibeneyo, "thatha" i-adapter ye-2 engasetyenziswanga kunye nemouse kwaye "uyise" kwi-1st. Ifestile iya kuvula Yenza iBond entsha, apho i-LACP (iMode 4, i-Dynamic link aggregation, 802.3ad) ikhethwe ngokungagqibekanga. Kwicala lokutshintsha, ukucwangciswa kweqela le-LACP eqhelekileyo kwenziwa. Ukuba akunakwenzeka ukwakha isitakhi sotshintshiselwano, ungasebenzisa imowudi yogcino olusebenzayo (Imo 1). Siza kujonga useto lweVLAN kwinqaku elilandelayo, kwaye siya kungena kwiinkcukacha ezithe kratya kunye neengcebiso zokuseta inethiwekhi kuxwebhu. Isikhokelo soCwangciso kunye neMiqathango.

Ukusekwa kweFC

IFiber Channel (FC) ixhaswa ngaphandle kwebhokisi kwaye kulula ukuyisebenzisa. Asiyi kuseka inethiwekhi yokugcina, kubandakanya ukuseta iinkqubo zokugcina kunye nokutshintsha ilaphu lendawo njengenxalenye yokuseta i-oVirt.

Ukuseta FCoE

I-FCoE, ngokombono wam, ayizange isasazeke kwiinethiwekhi zokugcina, kodwa isetyenziswa rhoqo kwiiseva njenge "mile yokugqibela", umzekelo, kwi-HPE Virtual Connect.

Ukuseta i-FCoE kufuna amanyathelo alula ongezelelweyo.

Seta Injini yeFCoE

Inqaku kwiwebhusayithi ye-Red Hat B.3. Useta njani uMphathi we-Virtualization we-Red Hat ukuze usebenzise i-FCoE
KuMphathi
, ngalo myalelo ulandelayo songeza isitshixo kumphathi kwaye siyiqale kwakhona:


$ sudo engine-config -s UserDefinedNetworkCustomProperties='fcoe=^((enable|dcb|auto_vlan)=(yes|no),?)*$'
$ sudo systemctl restart ovirt-engine.service

Seta iNode FCoE

Kwi-oVirt-Hosts kufuneka uyifake

$ sudo yum install vdsm-hook-fcoe

Okulandelayo kukuseta kwesiqhelo kweFCoE, inqaku elikwiRed Hat: 25.5. Ukuqwalasela iFiber Channel ngaphezulu kwe-Ethernet Interface.

Kwi-Broadcom CNA, jonga kwakhona IsiKhokelo soMsebenzisi we-FCoE ulungelelwaniso lwee-Adapter eziSekwe kwi-Broadcom.

Qinisekisa ukuba iipakethe zifakiwe (sele zincinci):

$ sudo yum install fcoe-utils lldpad

Okulandelayo lulungiselelo ngokwalo (endaweni ye-ens3f2 kunye ne-ens3f3 sibeka endaweni yamagama e-CNAs ebandakanyiweyo kwinethiwekhi yokugcina):

$ sudo cp /etc/fcoe/cfg-ethx /etc/fcoe/cfg-ens3f2
$ sudo cp /etc/fcoe/cfg-ethx /etc/fcoe/cfg-ens3f3
$ sudo vim /etc/fcoe/cfg-ens3f2
$ sudo vim /etc/fcoe/cfg-ens3f3

ebalulekileyo: Ukuba ujongano lomsebenzi wothungelwano luxhasa i-DCB/DCBX kwihardware, i-DCB_REQUIRED iparamitha mayimiselwe kunombolo.

DCB_REQUIRED=“ewe” → #DCB_REQUIRED=“ewe”

Okulandelayo, kufuneka uqinisekise ukuba i-adminStatus ivaliwe kuzo zonke iindawo zojongano, kubandakanywa. ngaphandle kweFCoE yenziweyo:

$ sudo lldptool set-lldp -i ens3f0 adminStatus=disabled
...
$ sudo lldptool set-lldp -i ens3f3 adminStatus=disabled

Ukuba kukho olunye ujongano lwenethiwekhi, unokwenza iLLDP:

$ sudo systemctl start lldpad
$ sudo systemctl enable lldpad

Njengoko bekutshiwo ngaphambili, ukuba ihardware DCB/DCBX isetyenziswa, i DCB_REQUIRED useto kufuneka luqukwe hayi kwaye eli nyathelo lingatsiba.

$ sudo dcbtool sc ens3f2 dcb on
$ sudo dcbtool sc ens3f3 dcb on
$ sudo dcbtool sc ens3f2 app:fcoe e:1
$ sudo dcbtool sc ens3f3 app:fcoe e:1
$ sudo ip link set dev ens3f2 up
$ sudo ip link set dev ens3f3 up
$ sudo systemctl start fcoe
$ sudo systemctl enable fcoe

Ujongano lwenethiwekhi, khangela ukuba i-autostart yenziwe:

$ sudo vim /etc/sysconfig/network-scripts/ifcfg-ens3f2
$ sudo vim /etc/sysconfig/network-scripts/ifcfg-ens3f3

ONBOOT=yes

Jonga ujongano oluqwalaselweyo lweFCoE, imveliso yomyalelo mayingabi nanto.

$ sudo fcoeadm -i

Ulungelelwaniso olulandelayo lweFCoE lwenziwa njengesiqhelo iFC.

Okulandelayo kuza uqwalaselo lweenkqubo zogcino kunye nothungelwano - ucando, iinginginya zeSAN, ukudalwa kunye nonikezelo lwemiqulu/LUNs, emva koko ugcino lunokudityaniswa kwi-ovirt-hosts: Ugcino → IiNdawo → INdawo Entsha.

Shiya i-Domain Function njengeDatha, Uhlobo lokuGcina njengeFiber Channel, i-Host njengayo nayiphi na, igama njenge-storNN-volMM.

Ngokuqinisekileyo isixokelelwano sakho sogcino sivumela uqhagamshelo kungekuphela nje kugcino lwendlela, kodwa nokulinganisa. Iinkqubo ezininzi zanamhlanje ziyakwazi ukuhambisa idatha kuzo zonke iindlela ngokulinganayo (i-ALUA iyasebenza/iyasebenza).

Ukwenza zonke iindlela ezikwimo esebenzayo, kufuneka uqwalasele uphinda-phindo, ngakumbi koku kumanqaku alandelayo.

Ukumisela i-NFS kunye ne-iSCSI kwenziwa ngendlela efanayo.

ISO umfanekiso wogcino

Ukufakela i-OS, uya kufuna iifayile zabo zokufakela, zihlala zifumaneka ngendlela yemifanekiso ye-ISO. Ungasebenzisa indlela eyakhelweyo, kodwa ukusebenza ngemifanekiso kwi-oVirt, uhlobo olukhethekileyo lokugcina luye lwaphuhliswa - i-ISO, enokuthi ijoliswe kwiseva ye-NFS. Yongeza:

Ugcino → IiNdawo → Ummandla omtsha,
Umsebenzi wommandla → ISO,
Indlela yokuthumela ngaphandle - umz. mynfs01.example.com:/exports/ovirt-iso (ngexesha loxhulumaniso, ifolda kufuneka ingabi nanto, umphathi kufuneka akwazi ukuyibhalela),
Igama - umz. mynfs01-iso.

Umphathi uya kwenza isakhiwo ukugcina imifanekiso
/exports/ovirt-iso/<some UUID>/images/11111111-1111-1111-1111-111111111111/

Ukuba sele ikhona imifanekiso ye-ISO kumncedisi wethu we-NFS, ukugcina indawo kulungele ukuyidibanisa kule folda endaweni yokukopa iifayile.

Okokuqala VM

Kweli nqanaba, unokwenza umatshini wokuqala wenyani, ufake i-OS kunye nesoftware yesicelo kuyo.

Bala → Oomatshini beVirtual → Abatsha

Kumatshini omtsha, khankanya igama (Igama), yenza idisk (IMifanekiso yeMifanekiso → Yenza) kwaye uqhagamshele ujongano lomsebenzi wothungelwano (Qinisekisa ujongano lomsebenzi womnatha weVM ngokuchola inkangeleko yevNIC → khetha ekuphela kwe ovirtmgmt kuludwe lwangoku).

Kwicala lomxhasi udinga isikhangeli sanamhlanje kwaye SPICE umxhasi ukunxibelelana ne-console.

Umatshini wokuqala uqaliswe ngempumelelo. Nangona kunjalo, ekusebenzeni okupheleleyo kwenkqubo, inani lezicwangciso ezongezelelweyo ziyafuneka, esiya kuqhubeka kumanqaku alandelayo.

umthombo: www.habr.com

Thenga ukusingathwa okuthembekileyo kwiindawo ezinokhuseleko lweDDoS, iiseva zeVPS VDS 🔥 Thenga ukusingathwa kwewebhusayithi okuthembekileyo ngokhuseleko lwe-DDoS, iiseva zeVPS VDS | ProHoster