ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก

ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก

ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ืžื™ืจ ื•ื•ืขืœืŸ ืงื•ืงืŸ ืื™ืŸ ืึท ื ื•ืžืขืจ ืคื•ืŸ ืึทืคึผืฉืึทื ืึทืœ ืึธื‘ืขืจ ื ื•ืฆื™ืง ืกืขื˜ื˜ื™ื ื’ืก:

ื“ืขืจ ืึทืจื˜ื™ืงืœ ืื™ื– ืึท ืงืึทื ื˜ื™ื ื™ื•ื™ื™ืฉืึทืŸ, ื–ืขืŸ oVirt ืื™ืŸ 2 ืฉืขื” ืคึฟืึทืจ ื“ื™ ืึธื ื”ื™ื™ื‘ ะงะฐัั‚ัŒ ืงืกื ื•ืžืงืก ะธ ื˜ื™ื™ืœ 2.

ืืจื˜ื™ืงืœืขืŸ

  1. ื”ืงื“ืžื”
  2. ื™ื ืกื˜ืึทืœื™ืจื•ื ื’ ืคื•ืŸ ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ืขืจ (ืึธื•ื•ื™ืจื˜-ืžืึธื˜ืึธืจ) ืื•ืŸ ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจื– (ืžื—ื ื•ืช)
  3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก - ืžื™ืจ ื–ืขื ืขืŸ ื“ืึธ

ื ืึธืš ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืกืขื˜ื˜ื™ื ื’ืก

ืคึฟืึทืจ ืงืึทื ื•ื•ื™ื ื™ืึทื ืก, ืžื™ืจ ื•ื•ืขืœืŸ ื™ื ืกื˜ืึทืœื™ืจืŸ ื ืึธืš ืคึผืึทืงืึทื“ื–ืฉืึทื–:

$ sudo yum install bash-completion vim

ืฆื• ื’ืขื‘ืŸ ืงืึทืžืึทื ื“ื– ืงืึทืžืคึผืœื™ืฉืึทืŸ, ื‘ืึทืฉ-ืงืึธืžืคึผืœืขืฉืึทืŸ ืจื™ืงื•ื•ื™ื™ืขืจื– ืกื•ื•ื™ื˜ืฉื™ื ื’ ืฆื• ื‘ืึทืฉ.

ืึทื“ื™ื ื’ ื ืึธืš ื“ื ืก ื ืขืžืขืŸ

ื“ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืคืืจืœืื ื’ื˜ ื•ื•ืขืŸ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืฆื• ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืžื™ื˜ ืึทืŸ ืึธืœื˜ืขืจื ืึทื˜ื™ื•ื• ื ืึธืžืขืŸ (CNAME, ืึทืœื™ืึทืก ืึธื“ืขืจ ื ืึธืจ ืึท ืงื•ืจืฅ ื ืึธืžืขืŸ ืึธืŸ ืึท ืคืขืœื“ ืกืึทืคื™ืงืก). ืคึฟืึทืจ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกื™ื‘ื•ืช, ื“ืขืจ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืึทืœืึทื•ื– ืงืึทื ืขืงืฉืึทื ื– ื‘ืœื•ื™ื– ื ื™ืฆืŸ ื“ื™ ืขืจืœื•ื™ื‘ื˜ ืจืฉื™ืžื” ืคื•ืŸ ื ืขืžืขืŸ.

ืฉืึทืคึฟืŸ ืึท ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืข:

$ sudo vim /etc/ovirt-engine/engine.conf.d/99-custom-sso-setup.conf

ื“ื™ ืคืืœื’ืขื ื“ืข ืื™ื ื”ืึทืœื˜:

SSO_ALTERNATE_ENGINE_FQDNS="ovirt.example.com some.alias.example.com ovirt"

ืื•ืŸ ืจื™ืกื˜ืึทืจื˜ ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ืขืจ:

$ sudo systemctl restart ovirt-engine

ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื“ื•ืจืš AD

oVirt ื”ืื˜ ืึท ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ื‘ืึทื ื™ืฆืขืจ ื‘ืึทื–ืข, ืึธื‘ืขืจ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง LDAP ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ื–ืขื ืขืŸ ืื•ื™ืš ื’ืขืฉื˜ื™ืฆื˜, ื™ื ืงืœ. ื.ื“.

ื“ื™ ืกื™ืžืคึผืœืึทืกื˜ ื•ื•ืขื’ ืคึฟืึทืจ ืึท ื˜ื™ืคึผื™ืฉ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื™ื– ืฆื• ืงืึทื˜ืขืจ ื“ื™ ืžืึทื–ืขืง ืื•ืŸ ืจื™ืกื˜ืึทืจื˜ ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ืขืจ:

$ sudo yum install ovirt-engine-extension-aaa-ldap-setup
$ sudo ovirt-engine-extension-aaa-ldap-setup
$ sudo systemctl restart ovirt-engine

ื ื‘ื™ื™ืฉืคื™ืœ ืคื•ืŸ ื ื‘ืขืœ ื•ื•ืขืจืง
$ sudo ovirt-engine-extension-aaa-ldap-setup
ื‘ื ื™ืžืฆื LDAP ื™ืžืคึผืœืึทืžืึทื ืฅ:
...
3 - ืึทืงื˜ื™ื•ื• Directory
...
ื‘ื™ื˜ืข ืงืœื•ื™ื‘ื˜ ืื•ื™ืก: 3
ื‘ื™ื˜ืข ืึทืจื™ื™ึทืŸ ืึทืงื˜ื™ื•ื• Directory ื•ื•ืึทืœื“ ื ืึธืžืขืŸ: example.com

ื‘ื™ื˜ืข ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ืคึผืจืึธื˜ืึธืงืึธืœ ืฆื• ื ื•ืฆืŸ (ืกื˜ืึทืจื˜ื˜ืœืก, ืœื“ืึทืคึผืก, ืงืœืึธืจ) [startTLS]:
ื‘ื™ื˜ืข ืกืขืœืขืงื˜ื™ืจืŸ ื“ืขื ืื•ืคึฟืŸ ืฆื• ื‘ืึทืงื•ืžืขืŸ PEM ืงืึธื“ืขื“ CA ื‘ืึทื•ื•ื™ื™ึทื–ืŸ (ื˜ืขืงืข, URL, ื™ื ืœื™ื ืข, ืกื™ืกื˜ืขื, ื™ื ืกืึทืงื™ืขืจ): URL
URL: wwwca.example.com/myRootCA.pem
ืึทืจื™ื™ึทืŸ ื–ื•ื›ืŸ ื‘ืึทื ื™ืฆืขืจ DN (ืœืžืฉืœ uid = ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ, DC = ื‘ื™ื™ึทืฉืคึผื™ืœ, DC = com ืึธื“ืขืจ ืœืึธื–ืŸ ืœื™ื™ื“ื™ืง ืคึฟืึทืจ ืึทื ืึธื ื™ืžืข ื‘ืึทื ื•ืฆืขืจืก): CN=oVirt-Engine,CN=Users,DC=example,DC=com
ืึทืจื™ื™ึทืŸ ื–ื•ื›ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืึทืจืึธืœ: *ืฉืคึผืจื™ื›ื•ื•ืึธืจื˜*
[ INFO ] ืคึผืจื•ื•ื•ืŸ ืฆื• ื‘ื™ื ื“ืŸ ืžื™ื˜ 'CN = oVirt-Engine, CN = ื™ื•ื–ืขืจื–, DC = ื‘ื™ื™ืฉืคึผื™ืœ, DC = com'
ื•ื•ืขื˜ ืื™ืจ ื ื•ืฆืŸ ืื™ื™ืŸ ืฆื™ื™ื›ืŸ-ืื•ื™ืฃ ืคึฟืึทืจ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ (ื™ืึธ, ื ื™ื™ืŸ) [ื™ื]:
ื‘ื™ื˜ืข ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืคึผืจืึธืคื™ืœ ื ืึธืžืขืŸ ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืงืขื ื˜ื™ืง ืฆื• ื™ื•ื–ืขืจื– [example.com]:
ื‘ื™ื˜ืข ืฆื•ืฉื˜ืขืœืŸ ืงืจืึทื“ืขื ื˜ืฉืึทืœื– ืฆื• ืคึผืจื•ื‘ื™ืจืŸ ืœืึธื’ื™ืŸ ืœื•ื™ืคืŸ:
ืึทืจื™ื™ึทืŸ ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ: someAnyUser
ืึทืจื™ื™ึทืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืึทืจืึธืœ:
...
[INFO] ืœืึธื’ื™ืŸ ืกื™ืงื•ื•ืึทื ืก ืขืงืกืึทืงื™ื•ื˜ืึทื“ ื”ืฆืœื—ื”
...
ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ื“ื™ ืคึผืจืึธื‘ืข ืกื™ืงื•ื•ืึทื ืก ืฆื• ื•ื™ืกืคื™ืจืŸ (ื’ืขื˜ืืŸ, ืึทื‘ืึธืจื˜, ืœืึธื’ื™ืŸ, ื–ื•ื›ืŸ) [ื’ืขื˜ืืŸ]:
[INFO] ืกื˜ืึทื’ืข: ื˜ืจืึทื ืกืึทืงื˜ื™ืึธืŸ ืกืขื˜ืึทืคึผ
...
ืงืึธื ืคื™ื’ื•ืจืึทื˜ื™ืึธืŸ ืงื™ืฆืขืจ
...

ื ื™ืฆืŸ ื“ื™ ืžืึทื–ืขืง ืื™ื– ืคึผืึทืกื™ืง ืคึฟืึทืจ ืจื•ื‘ึฟ ืงืึทืกืขืก. ืคึฟืึทืจ ืงืึธืžืคึผืœืขืงืก ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื–, ืกืขื˜ื˜ื™ื ื’ืก ื–ืขื ืขืŸ ืžืึทื ื™ื•ืึทืœื™. ืžืขืจ ื“ืขื˜ืึทื™ืœืก ืื™ืŸ oVirt ื“ืึทืงื™ื•ืžืขื ื˜ื™ื™ืฉืึทืŸ, ื ื™ืฆืขืจืก ืื•ืŸ ืจืึธืœืขืก. ื ืึธืš ื”ืฆืœื—ื” ืงืึทื ืขืงื˜ื™ื ื’ ื“ื™ ืžืึธื˜ืึธืจ ืฆื• ืึทื“, ืึทืŸ ื ืึธืš ืคึผืจืึธืคื™ืœ ื•ื•ืขื˜ ื“ืขืจืฉื™ื™ึทื ืขืŸ ืื™ืŸ ื“ื™ ืงืฉืจ ืคึฟืขื ืฆื˜ืขืจ ืื•ืŸ ืื•ื™ืฃ ื“ื™ ืงื•ื•ื™ื˜ืœ ืคึผืขืจืžื™ืฉืึทื ื– ืกื™ืกื˜ืขื ืึทื‘ื“ื–ืฉืขืงืฅ ื”ืึธื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื’ืขื‘ืŸ ืคึผืขืจืžื™ืฉืึทื ื– ืฆื• ืึทื“ ื ื™ืฆืขืจืก ืื•ืŸ ื’ืจื•ืคึผืขืก. ืขืก ื–ืึธืœ ื–ื™ื™ืŸ ืื ื’ืขื•ื•ื™ื–ืŸ ืึทื– ื“ื™ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืคื•ืŸ ื™ื•ื–ืขืจื– ืื•ืŸ ื’ืจื•ืคึผืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื ื™ื˜ ื‘ืœื•ื™ื– ืึทื“, ืึธื‘ืขืจ ืื•ื™ืš IPA, eDirectory, ืขื˜ืง.

ืžื•ืœื˜ื™ืคึผืึทื˜ื”ื™ื ื’

ืื™ืŸ ืึท ืคึผืจืึธื“ื•ืงืฆื™ืข ืกื•ื•ื™ื•ื•ืข, ื“ื™ ืกื˜ืึธืจื™ื“ื–ืฉ ืกื™ืกื˜ืขื ืžื•ื–ืŸ ื–ื™ื™ืŸ ืงืึธื ื ืขืงื˜ืขื“ ืฆื• ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ื“ื•ืจืš ืงื™ื™ืคืœ ืคืจื™ื™ึท, ืงื™ื™ืคืœ ื™ / ืึธ ืคึผืึทื˜ืก. ื•ื•ื™ ืึท ื”ืขืจืฉืŸ, ืื™ืŸ CentOS (ืื•ืŸ ื“ืขืจื™ื‘ืขืจ oVirt) ืขืก ื–ืขื ืขืŸ ืงื™ื™ืŸ ืคืจืื‘ืœืขืžืขืŸ ืžื™ื˜ ืึทืกืขืžื‘ืึทืœื™ื ื’ ืงื™ื™ืคืœ ืคึผืึทื˜ืก ืฆื• ืึท ืžื™ื˜ืœ (find_multipaths ื™ืึธ). ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก ืคึฟืึทืจ FCoE ื–ืขื ืขืŸ ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ 2ื˜ืขืจ ื˜ื™ื™ืœ. ืขืก ืื™ื– ื•ื•ืขืจื˜ ืฆื• ื‘ืึทืฆืึธืœืŸ ื•ืคืžืขืจืงื–ืึทืžืงื™ื™ื˜ ืฆื• ื“ื™ ืจืขืงืึธืžืขื ื“ืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ืขืจ ืคืึทื‘ืจื™ืงืึทื ื˜ ืคื•ืŸ ืกื˜ืึธืจื™ื“ื–ืฉ ืกื™ืกื˜ืขื - ืคื™ืœืข ืจืขืงืึธืžืขื ื“ื™ืจืŸ ืฆื• ื ื•ืฆืŸ ื“ื™ ืจืึธื•ื ื“-ืจืึธื‘ื™ืŸ ืคึผืึธืœื™ื˜ื™ืง, ืึธื‘ืขืจ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืื™ืŸ ืขื ื˜ืขืจืคึผืจื™ื™ื– ืœื™ื ื•ืงืก 7 ื“ื™ื ืกื˜-ืฆื™ื™ื˜ ืื™ื– ื’ืขื ื™ืฆื˜.

ื ื™ืฆืŸ 3PAR ื•ื•ื™ ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ
ืื•ืŸ ื“ืึธืงื•ืžืขื ื˜ HPE 3PAR Red Hat Enterprise Linux, CentOS Linux, Oracle Linux ืื•ืŸ OracleVM Server Implementation Guide EL ืื™ื– ื‘ืืฉืืคืŸ ื•ื•ื™ ืึท ื”ืึธืกื˜ ืžื™ื˜ Generic-ALUA Persona 2, ืคึฟืึทืจ ื•ื•ืึธืก ื“ื™ ืคืืœื’ืขื ื“ืข ื•ื•ืึทืœื•ืขืก ื–ืขื ืขืŸ ืืจื™ื™ืŸ ืื™ืŸ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก /etc/multipath.conf:

defaults {
           polling_interval      10
           user_friendly_names   no
           find_multipaths       yes
          }
devices {
          device {
                   vendor                   "3PARdata"
                   product                  "VV"
                   path_grouping_policy     group_by_prio
                   path_selector            "round-robin 0"
                   path_checker             tur
                   features                 "0"
                   hardware_handler         "1 alua"
                   prio                     alua
                   failback                 immediate
                   rr_weight                uniform
                   no_path_retry            18
                   rr_min_io_rq             1
                   detect_prio              yes
                   fast_io_fail_tmo         10
                   dev_loss_tmo             "infinity"
                 }
}

ื ืึธืš ื•ื•ืึธืก ื“ื™ ื‘ืึทืคึฟืขืœ ืฆื• ืจื™ืกื˜ืึทืจื˜ ืื™ื– ื’ืขื’ืขื‘ืŸ:

systemctl restart multipathd

ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก
ืจื™ื™ืก. 1 ืื™ื– ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืงื™ื™ืคืœ ื™ / ืึธ ืคึผืึธืœื™ื˜ื™ืง.

ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก
ืจื™ื™ืก. 2 - ืงื™ื™ืคืœ ื™ / ืึธ ืคึผืึธืœื™ื˜ื™ืง ื ืึธืš ืึทืคึผืœื™ื™ื™ื ื’ ืกืขื˜ื˜ื™ื ื’ืก.

ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืžืึทื›ื˜ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’

ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ, ืœืžืฉืœ, ืึท ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื‘ืึทืฉื˜ืขื˜ื™ืง ืคื•ืŸ ื“ื™ ืžืึทืฉื™ืŸ ืื•ื™ื‘ ื“ื™ ืžืึธื˜ืึธืจ ืงืขืŸ ื ื™ืฉื˜ ื‘ืึทืงื•ืžืขืŸ ืึท ืขื ื˜ืคืขืจ ืคื•ืŸ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืคึฟืึทืจ ืึท ืœืึทื ื’ ืฆื™ื™ึทื˜. ื™ืžืคึผืœืึทืžืขื ืึทื“ ื“ื•ืจืš ืคืขื ืก ืึทื’ืขื ื˜.

ืจืขื›ืขื ืขืŸ -> ื”ืึธืกืฅ -> ื‘ืึทืœืขื‘ืึธืก - ืจืขื“ืึทื’ื™ืจืŸ -> ืžืึทื›ื˜ ืžืึทื ืึทื’ืขืžืขื ื˜, ืื•ืŸ ื’ืขื‘ืŸ "ื’ืขื‘ืŸ ืžืึทื›ื˜ ืžืึทื ืึทื’ืขืžืขื ื˜" ืื•ืŸ ืœื™ื™ื’ืŸ ืึทืŸ ืึทื’ืขื ื˜ - "ืœื™ื™ื’ ืคืขื ืก ืึทื’ืขื ื˜" -> +.

ืžื™ืจ ืึธื ื•ื•ื™ื™ึทื–ืŸ ื“ืขื ื˜ื™ืคึผ (ืœืžืฉืœ, ืคึฟืึทืจ iLO5 ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ilo4), ื“ื™ ื ืึธืžืขืŸ / ืึทื“ืจืขืก ืคื•ืŸ ื“ื™ ipmi ืฆื•ื‘ื™ื ื“, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ / ืคึผืึทืจืึธืœ. ืขืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืฉืึทืคึฟืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ (ืœืžืฉืœ, oVirt-PM) ืื•ืŸ, ืื™ืŸ ื“ืขื ืคืึทืœ ืคื•ืŸ iLO, ื’ืขื‘ืŸ ืื™ื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื–:

  • ืฆื™ื™ื›ืŸ ืืจื™ื™ืŸ
  • ืจื™ืžืึธื•ื˜ ืงืึทื ืกืึธื•ืœ
  • ื•ื•ื™ืจื˜ื•ืึทืœ ืžืึทื›ื˜ ืื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืง
  • ื•ื•ื™ืจื˜ื•ืึทืœ ืžื™ื“ื™ืึท
  • ืงืึทื ืคื™ื’ื™ืขืจ ื™ืœืึธ ืกืขื˜ื˜ื™ื ื’ืก
  • ืคื™ืจืŸ ื‘ืึทื ื™ืฆืขืจ ืึทืงืึทื•ื ืฅ

ื“ื• ื–ืืœืกื˜ ื ื™ืฉื˜ ืคืจืขื’ืŸ ื•ื•ืึธืก ื“ืึธืก ืื™ื– ืึทื–ื•ื™, ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืขืžืคึผื™ืจื™ืงืœื™ ืื•ื™ืกื“ืขืจื•ื•ื™ื™ืœื˜. ื“ืขืจ ืงืึทื ืกืึธื•ืœ ืคืขื ืกื™ื ื’ ืึทื’ืขื ื˜ ืจื™ืงื•ื•ื™ื™ืขืจื– ื•ื•ื™ื™ื ื™ืงืขืจืข ืจืขื›ื˜.

ื•ื•ืขืŸ ืื™ืจ ืฉื˜ืขืœืŸ ืึทืจื•ื™ืฃ ืึทืงืกืขืก ืงืึธื ื˜ืจืึธืœ ืจืฉื™ืžื•ืช, ืื™ืจ ื–ืึธืœ ื”ืึทืœื˜ืŸ ืื™ืŸ ื–ื™ื ืขืŸ ืึทื– ื“ืขืจ ืึทื’ืขื ื˜ ืœื•ื™ืคื˜ ื ื™ืฉื˜ ืื•ื™ืฃ ื“ื™ ืžืึธื˜ืึธืจ, ืึธื‘ืขืจ ืื•ื™ืฃ ืึท "ืืจื‘ื™ื™ื˜ืขืจ" ื‘ืึทืœืขื‘ืึธืก (ื“ื™ ืึทื–ื•ื™ ื’ืขืจื•ืคืขื ืข ืžืึทื›ื˜ ืžืึทื ืึทื’ืขืžืขื ื˜ ืคึผืจืึธืงืกื™), ื“"ื” ืื•ื™ื‘ ืขืก ืื™ื– ื‘ืœื•ื™ื– ืื™ื™ืŸ ื ืึธื“ืข ืื™ืŸ ื“ืขื ืงื ื•ื™ืœ, ืžืึทื›ื˜ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ื•ื•ืขื˜ ืึทืจื‘ืขื˜ืŸ ื•ื•ืขื˜ ื ื™ื˜.

ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ SSL

ื’ืึทื ืฅ ื‘ืึทืึทืžื˜ืขืจ ื™ื ืกื˜ืจืึทืงืฉืึทื ื– - ืื™ืŸ ื“ืึทืงื™ื•ืžืขื ื˜ื™ื™ืฉืึทืŸ, ืึทืคึผืคึผืขื ื“ื™ืงืก ื“: oVirt ืื•ืŸ SSL - ืจื™ืคึผืœื™ื™ืกื™ื ื’ ื“ื™ oVirt Engine SSL / TLS ืกืขืจื˜ื™ืคื™ืงืึทื˜.

ื“ื™ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคึฟื•ืŸ ืื•ื ื“ื–ืขืจ ืคึฟื™ืจืžืข CA ืึธื“ืขืจ ืคึฟื•ืŸ ืึท ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื’ืขืฉืขืคื˜ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืื•ื™ื˜ืึธืจื™ื˜ืขื˜.

ื•ื•ื™ื›ื˜ื™ืง ื˜ืึธืŸ: ื“ื™ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืื™ื– ื‘ื“ืขื” ืคึฟืึทืจ ืงืึทื ืขืงื˜ื™ื ื’ ืฆื• ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืื•ืŸ ื•ื•ืขื˜ ื ื™ืฉื˜ ื•ื•ื™ืจืงืŸ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืฆื•ื•ื™ืฉืŸ ื“ื™ ืžืึธื˜ืึธืจ ืื•ืŸ ื“ื™ ื ืึธื•ื“ื– - ื–ื™ื™ ื•ื•ืขืœืŸ ื ื•ืฆืŸ ื–ื™ืš-ื’ืขื—ืชืžืขื˜ ืกืขืจื˜ื™ืคื™ืงืึทืฅ ืืจื•ื™ืก ื“ื•ืจืš ื“ื™ ืžืึธื˜ืึธืจ.

ืจืขืงื•ื•ื™ืจืขืžืขื ืฅ:

  • ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืคื•ืŸ ื“ื™ ืึทืจื•ื™ืกื’ืขื‘ืŸ CA ืื™ืŸ PEM ืคึฟืึธืจืžืึทื˜, ืžื™ื˜ ื“ื™ ื’ืื ืฆืข ืงื™ื™ื˜ ืึทืจื•ื™ืฃ ืฆื• ื“ื™ ื•ื•ืึธืจืฆืœ CA (ืคื•ืŸ ื“ื™ ืกืึทื‘ืึธืจื“ืึทื ื™ื™ื˜ ื™ืฉื•ื™ื ื’ CA ืื™ืŸ ื“ื™ ืึธื ื”ื™ื™ื‘ ืฆื• ื“ื™ ื•ื•ืึธืจืฆืœ ืื™ืŸ ื“ื™ ืกื•ืฃ);
  • ืึท ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืคึฟืึทืจ ืึทืคึผืึทื˜ืฉื™ ืืจื•ื™ืก ื“ื•ืจืš ื“ื™ ืึทืจื•ื™ืกื’ืขื‘ืŸ CA (ืื•ื™ืš ืกืึทืคึผืœืึทืžืขื ื˜ืึทื“ ื“ื•ืจืš ื“ื™ ื’ืื ืฆืข ืงื™ื™ื˜ ืคื•ืŸ CA ืกืขืจื˜ื™ืคื™ืงืึทืฅ);
  • ืคึผืจื™ื•ื•ืึทื˜ ืฉืœื™ืกืœ ืคึฟืึทืจ ืึทืคึผืึทื˜ืฉื™, ืึธืŸ ืคึผืึทืจืึธืœ.

ืœืึธืžื™ืจ ื™ื‘ืขืจื ืขืžืขืŸ ืื•ื ื“ื–ืขืจ ื™ืฉื•ื™ื ื’ CA ืื™ื– ืคืœื™ืกื ื“ื™ืง CentOS, ื’ืขืจื•ืคึฟืŸ subca.example.com, ืื•ืŸ ื“ื™ ืจื™ืงื•ื•ืขืก, ืฉืœื™ืกืœืขืŸ ืื•ืŸ ืกืขืจื˜ื™ืคื™ืงืึทืฅ ื–ืขื ืขืŸ ืœื™ื’ืŸ ืื™ืŸ ื“ื™ /etc/pki/tls/ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ.

ืžื™ืจ ื“ื•ืจื›ืคื™ืจืŸ ื‘ืึทืงืึทืคึผืก ืื•ืŸ ืฉืึทืคึฟืŸ ืึท ืฆื™ื™ึทื˜ื•ื•ื™ื™ึทืœื™ืง ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ:

$ sudo cp /etc/pki/ovirt-engine/keys/apache.key.nopass /etc/pki/ovirt-engine/keys/apache.key.nopass.`date +%F`
$ sudo cp /etc/pki/ovirt-engine/certs/apache.cer /etc/pki/ovirt-engine/certs/apache.cer.`date +%F`
$ sudo mkdir /opt/certs
$ sudo chown mgmt.mgmt /opt/certs

ืืจืืคืงืืคื™ืข ืกืขืจื˜ื™ืคื™ืงืึทืฅ, ื“ื•ืจื›ืคื™ืจืŸ ืขืก ืคึฟื•ืŸ ื“ื™ื™ืŸ ื•ื•ืขืจืงืกื˜ื™ื™ืฉืึทืŸ ืึธื“ืขืจ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืขืก ืื•ื™ืฃ ืืŸ ืื ื“ืขืจ ื‘ืึทืงื•ื•ืขื ื•ื•ืขื’:

[myuser@mydesktop] $ scp -3 [email protected]:/etc/pki/tls/cachain.pem [email protected]:/opt/certs
[myuser@mydesktop] $ scp -3 [email protected]:/etc/pki/tls/private/ovirt.key [email protected]:/opt/certs
[myuser@mydesktop] $ scp -3 [email protected]/etc/pki/tls/certs/ovirt.crt [email protected]:/opt/certs

ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜, ืื™ืจ ื–ืึธืœ ื–ืขืŸ ืึทืœืข 3 ื˜ืขืงืขืก:

$ ls /opt/certs
cachain.pem  ovirt.crt  ovirt.key

ื™ื ืกื˜ืึธืœื™ื ื’ ืกืขืจื˜ื™ืคื™ืงืึทืฅ

ื ืึธื›ืžืึทื›ืŸ ื“ื™ ื˜ืขืงืขืก ืื•ืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื“ื™ ืฆื•ื˜ืจื•ื™ ืจืฉื™ืžื•ืช:

$ sudo cp /opt/certs/cachain.pem /etc/pki/ca-trust/source/anchors
$ sudo update-ca-trust
$ sudo rm /etc/pki/ovirt-engine/apache-ca.pem
$ sudo cp /opt/certs/cachain.pem /etc/pki/ovirt-engine/apache-ca.pem
$ sudo cp /opt/certs/ovirt03.key /etc/pki/ovirt-engine/keys/apache.key.nopass
$ sudo cp /opt/certs/ovirt03.crt /etc/pki/ovirt-engine/certs/apache.cer
$ sudo systemctl restart httpd.service

ืœื™ื™ื’ / ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืขืก:

$ sudo vim /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf
ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""
$ sudo vim /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
$ sudo vim /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf
# Key file for SSL connections
ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
# Certificate file for SSL connections
ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer

ื“ืขืจื ืึธืš, ืจื™ืกื˜ืึทืจื˜ ืึทืœืข ืึทืคืขืงื˜ืึทื“ ื‘ืึทื“ื™ื ื•ื ื’ืก:

$ sudo systemctl restart ovirt-provider-ovn.service
$ sudo systemctl restart ovirt-imageio-proxy
$ sudo systemctl restart ovirt-websocket-proxy
$ sudo systemctl restart ovirt-engine.service

ื’ืจื™ื™ื˜! ืขืก ืื™ื– ืฆื™ื™ื˜ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืฆื• ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืื•ืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืึทื– ื“ื™ ืงืฉืจ ืื™ื– ืคึผืจืึธื˜ืขืงื˜ืขื“ ื“ื•ืจืš ืึท ื’ืขื—ืชืžืขื˜ ืกืกืœ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ.

ืึทืจื˜ืฉื™ื•ื•ื™ื ื’

ืฐื•ึผ ืฐืึธืœื˜ืŸ ืžื™ืจ ื’ืขืฐืขืŸ ืึธืŸ ืื™ืจ? ืื™ืŸ ื“ืขื ืึธืคึผื˜ื™ื™ืœื•ื ื’ ืžื™ืจ ื•ื•ืขืœืŸ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืึทืจื˜ืฉื™ื•ื•ื™ื ื’; VM ืึทืจืงื™ื™ื•ื•ื™ื ื’ ืื™ื– ืึท ื‘ืึทื–ื•ื ื“ืขืจ ืึทืจื•ื™ืกื’ืขื‘ืŸ. ืžื™ืจ ื•ื•ืขืœืŸ ืžืึทื›ืŸ ืึทืจืงื™ื™ื•ื• ืขืงื–ืขืžืคืœืืจืŸ ืึทืžืึธืœ ืึท ื˜ืึธื’ ืื•ืŸ ืงืจืึธื ื–ื™ื™ ื“ื•ืจืš NFS, ืœืžืฉืœ, ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืกื™ืกื˜ืขื ื•ื•ื• ืžื™ืจ ืฉื˜ืขืœืŸ ื“ื™ ISO ื‘ื™ืœื“ืขืจ - mynfs1.example.com:/exports/ovirt-backup. ืขืก ืื™ื– ื ื™ืฉื˜ ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืงืจืึธื ืึทืจืงื™ื™ื•ื•ื– ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืžืึทืฉื™ืŸ ื•ื•ื• ื“ื™ ืžืึธื˜ืึธืจ ืื™ื– ืคืœื™ืกื ื“ื™ืง.

ื™ื ืกื˜ืึทืœื™ืจืŸ ืื•ืŸ ื’ืขื‘ืŸ ืึทื•ื˜ืึธืคืก:

$ sudo yum install autofs
$ sudo systemctl enable autofs
$ sudo systemctl start autofs

ืœืืžื™ืจ ืžืื›ืŸ ื ืฉืจื™ืคื˜:

$ sudo vim /etc/cron.daily/make.oVirt.backup.sh

ื“ื™ ืคืืœื’ืขื ื“ืข ืื™ื ื”ืึทืœื˜:

#!/bin/bash

datetime=`date +"%F.%R"`
backupdir="/net/mynfs01.example.com/exports/ovirt-backup"
filename="$backupdir/`hostname --short`.`date +"%F.%R"`"
engine-backup --mode=backup --scope=all --file=$filename.data --log=$filename.log
#uncomment next line for autodelete files older 30 days 
#find $backupdir -type f -mtime +30 -exec rm -f {} ;

ืžืึทื›ืŸ ื“ื™ ื˜ืขืงืข ืขืงืกืขืงื•ื˜ืึทื‘ืœืข:

$ sudo chmod a+x /etc/cron.daily/make.oVirt.backup.sh

ืื™ืฆื˜ ื™ืขื“ืขืจ ื ืึทื›ื˜ ืžื™ืจ ื•ื•ืขืœืŸ ื‘ืึทืงื•ืžืขืŸ ืึทืŸ ืึทืจืงื™ื™ื•ื• ืคื•ืŸ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืกืขื˜ื˜ื™ื ื’ืก.

ื”ืึธืกื˜ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืฆื•ื‘ื™ื ื“

ืงืึทืงืคึผื™ื˜ - ืึท ืžืึธื“ืขืจืŸ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ื™ื•ื•ืข ืฆื•ื‘ื™ื ื“ ืคึฟืึทืจ ืœื™ื ื•ืงืก ืกื™ืกื˜ืขืžืขืŸ. ืื™ืŸ ื“ืขื ืคืึทืœ, ืขืก ืคึผืขืจืคืึธืจืžื– ืึท ืจืึธืœืข ืขื ืœืขืš ืฆื• ื“ื™ ESXi ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“.

ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก
ืจื™ื™ืก. 3 - ืื•ื™ืกื–ืขืŸ ืคื•ืŸ ื“ื™ ื˜ืึทืคืœื™ืข.

ื“ื™ ื™ื ืกื˜ืึทืœื™ืจื•ื ื’ ืื™ื– ื–ื™ื™ืขืจ ืคึผืฉื•ื˜, ืื™ืจ ื“ืึทืจืคึฟืŸ ื“ื™ ืงืึทืงืคึผื™ื˜ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื•ืŸ ื“ื™ ืงืึทืงืคึผื™ื˜-ืึธื•ื•ื™ืจื˜-ื“ืึทืฉื‘ืึธืจื“ ืคึผืœื•ื’ื™ืŸ:

$ sudo yum install cockpit cockpit-ovirt-dashboard -y

ื’ืขื‘ืŸ ืงืึทืงืคึผื™ื˜:

$ sudo systemctl enable --now cockpit.socket

Firewall ืกืขื˜ืึทืคึผ:

sudo firewall-cmd --add-service=cockpit
sudo firewall-cmd --add-service=cockpit --permanent

ืื™ืฆื˜ ืื™ืจ ืงืขื ืขืŸ ืคืึทืจื‘ื™ื ื“ืŸ ืฆื• ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก: https://[Host IP or FQDN]:9090

ื•ื•ืœืึทื ืก

ืื™ืจ ื–ืึธืœ ืœื™ื™ืขื ืขืŸ ืžืขืจ ื•ื•ืขื’ืŸ ื ืขื˜ื•ื•ืึธืจืงืก ืื™ืŸ ื“ืึทืงื™ื•ืžืขื ื˜ื™ื™ืฉืึทืŸ. ืขืก ื–ืขื ืขืŸ ืคื™ืœืข ืคึผืึทืกืึทื‘ื™ืœืึทื˜ื™ื–, ื“ืึธ ืžื™ืจ ื•ื•ืขืœืŸ ื‘ืึทืฉืจื™ื™ึทื‘ืŸ ืงืึทื ืขืงื˜ื™ื ื’ ื•ื•ื™ืจื˜ื•ืึทืœ ื ืขื˜ื•ื•ืึธืจืงืก.

ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืื ื“ืขืจืข ืกื•ื‘ื ืขืฅ, ื–ื™ื™ ืžื•ื–ืŸ ืขืจืฉื˜ืขืจ ื–ื™ื™ืŸ ื“ื™ืกืงืจื™ื™ื‘ื“ ืื™ืŸ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ: ื ืขื˜ื•ื•ืึธืจืง -> ื ืขื˜ื•ื•ืึธืจืงืก -> ื ื™ื™ึท, ื“ืึธ ื‘ืœื•ื™ื– ื“ื™ ื ืึธืžืขืŸ ืื™ื– ืึท ืคืืจืœืื ื’ื˜ ืคืขืœื“; ื“ื™ VM Network ื˜ืฉืขืงืงื‘ืึธืงืก, ื•ื•ืึธืก ืึทืœืึทื•ื– ืžืืฉื™ื ืขืŸ ืฆื• ื ื•ืฆืŸ ื“ืขื ื ืขืฅ, ืื™ื– ืขื ื™ื™ื‘ืึทืœื“, ืึธื‘ืขืจ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ื“ื™ ืงื•ื•ื™ื˜ืœ ืžื•ื–ืŸ ื–ื™ื™ืŸ ืขื ื™ื™ื‘ืึทืœื“. ื’ืขื‘ืŸ ื•ื•ืœืึทืŸ ื˜ืึทื’ื™ื ื’, ืึทืจื™ื™ึทืŸ ื“ื™ VLAN ื ื•ืžืขืจ ืื•ืŸ ื’ื™ื˜ OK.

ืื™ืฆื˜ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ื’ื™ื™ืŸ ืฆื• ืงืึธืžืคึผื™ื•ื˜ืข ื”ืึธืกืฅ -> ื”ืึธืกืฅ -> kvmNN -> ื ืขื˜ื•ื•ืึธืจืง ื™ื ื˜ืขืจืคื™ื™ืกื™ื– -> ืกืขื˜ืึทืคึผ ื”ืึธืกื˜ ื ืขื˜ื•ื•ืึธืจืงืก. ืฉืœืขืคึผืŸ ื“ื™ ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ืขืฅ ืคื•ืŸ ื“ื™ ืจืขื›ื˜ ื–ื™ื™ึทื˜ ืคื•ืŸ ื•ื ืกืึทืกื™ื™ื ื“ ืœืึทื“ื–ืฉื™ืงืึทืœ ื ืขื˜ื•ื•ืึธืจืงืก ืฆื• ื“ื™ ืœื™ื ืงืก ืื™ืŸ ืึทืกื™ื™ื ื“ ืœืึทื“ื–ืฉื™ืงืึทืœ ื ืขื˜ื•ื•ืึธืจืงืก:

ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก
ืจื™ื™ืก. 4 - ืื™ื™ื“ืขืจ ืึทื“ื™ื ื’ ืึท ื ืขืฅ.

ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก
ืจื™ื™ืก. 5 - ื ืึธืš ืึทื“ื™ื ื’ ืึท ื ืขืฅ.

ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืงื™ื™ืคืœ ื ืขื˜ื•ื•ืึธืจืงืก ืฆื• ืึท ื‘ืึทืœืขื‘ืึธืก ืื™ืŸ ืคืึทืจื ืขื, ืขืก ืื™ื– ื‘ืึทืงื•ื•ืขื ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ืึท ืคื™ืจืžืข (s) ืฆื• ื–ื™ื™ ื•ื•ืขืŸ ืงืจื™ื™ื™ื˜ื™ื ื’ ื ืขื˜ื•ื•ืึธืจืงืก, ืื•ืŸ ืœื™ื™ื’ืŸ ื ืขื˜ื•ื•ืึธืจืงืก ื“ื•ืจืš ืœืึทื‘ืขืœืก.

ื ืึธืš ื“ื™ ื ืขืฅ ืื™ื– ื‘ืืฉืืคืŸ, ื“ื™ ืžื—ื ื•ืช ื•ื•ืขืœืŸ ื’ื™ื™ืŸ ืื™ืŸ ื“ื™ ื ื™ื˜-ืึธืคึผืขืจืึทื˜ื™ื•ื•ืข ืฉื˜ืึทื˜ ื‘ื™ื– ื“ื™ ื ืขืฅ ืื™ื– ืžื•ืกื™ืฃ ืฆื• ืึทืœืข ื ืึธื•ื“ื– ืื™ืŸ ื“ืขื ืงื ื•ื™ืœ. ื“ืขื ืึธืคึผืคื™ืจื•ื ื’ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ื™ ืจืขืงื•ื•ื™ืจืข ืึทืœืข ืคืึธืŸ ืื•ื™ืฃ ื“ื™ ืงื ื•ื™ืœ ืงื•ื•ื™ื˜ืœ ื•ื•ืขืŸ ืงืจื™ื™ื™ื˜ื™ื ื’ ืึท ื ื™ื™ึทืข ื ืขืฅ. ืื™ืŸ ื“ืขื ืคืึทืœ ื•ื•ืขืŸ ื“ื™ ื ืขืฅ ืื™ื– ื ื™ื˜ ื“ืืจืฃ ืื•ื™ืฃ ืึทืœืข ื ืึธื•ื“ื– ืคื•ืŸ ื“ืขื ืงื ื•ื™ืœ, ื“ืขื ืคืึธืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคืึทืจืงืจื™ืคึผืœื˜, ืื•ืŸ ื•ื•ืขืŸ ื“ื™ ื ืขืฅ ืื™ื– ืžื•ืกื™ืฃ ืฆื• ืึท ื‘ืึทืœืขื‘ืึธืก, ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืื•ื™ืฃ ื“ื™ ืจืขื›ื˜ ืื™ืŸ ื“ื™ ื ื™ื˜ ืคืืจืœืื ื’ื˜ ืึธืคึผื˜ื™ื™ืœื•ื ื’ ืื•ืŸ ืื™ืจ ืงืขื ืขืŸ ืงืœื™ื™ึทื‘ืŸ ืฆื™ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืขืก ืฆื• ืึท ืกืคึผืขืฆื™ืคื™ืฉ ื‘ืึทืœืขื‘ืึธืก.

ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก
ืจื™ื™ืก. 6 - ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ืึท ื ืขืฅ ืคืึธื“ืขืจื•ื ื’ ืึทื˜ืจื™ื‘ื™ื•ื˜.

HPE ืกืคึผืขืฆื™ืคื™ืฉ

ื›ึผืžืขื˜ ืึทืœืข ืžืึทื ื™ืึทืคืึทืงื˜ืฉืขืจืขืจื– ื”ืึธื‘ืŸ ืžื›ืฉื™ืจื™ื ื•ื•ืึธืก ืคึฟืึทืจื‘ืขืกืขืจืŸ ื“ื™ ื•ืกืึทื‘ื™ืœื™ื˜ื™ ืคื•ืŸ ื–ื™ื™ืขืจ ืคึผืจืึธื“ื•ืงื˜ืŸ. ื ื™ืฆืŸ HPE ื•ื•ื™ ืึท ื‘ื™ื™ืฉืคึผื™ืœ, AMS (ืึทื’ืขื ื˜ืœืขืกืก ืžืึทื ืึทื’ืขืžืขื ื˜ ืกืขืจื•ื•ื™ืก, amsd ืคึฟืึทืจ iLO5, hp-ams ืคึฟืึทืจ iLO4) ืื•ืŸ SSA (ืกืžืึทืจื˜ ืกื˜ืึธืจื™ื“ื–ืฉ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ, ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืึท ื“ื™ืกืง ืงืึธื ื˜ืจืึธืœืœืขืจ), ืืื–"ื• ื•.

ืงืึทื ืขืงื˜ื™ื ื’ ื“ื™ HPE ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™
ืžื™ืจ ืึทืจื™ื™ึทื ืคื™ืจ ื“ืขื ืฉืœื™ืกืœ ืื•ืŸ ืคืึทืจื‘ื™ื ื“ืŸ ื“ื™ HPE ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ื–:

$ sudo rpm --import https://downloads.linux.hpe.com/SDR/hpePublicKey2048_key1.pub
$ sudo vim /etc/yum.repos.d/mcp.repo

ื“ื™ ืคืืœื’ืขื ื“ืข ืื™ื ื”ืึทืœื˜:

[mcp]
name=Management Component Pack
baseurl=http://downloads.linux.hpe.com/repo/mcp/centos/$releasever/$basearch/current/
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-mcp

[spp]
name=Service Pack for ProLiant
baseurl=http://downloads.linux.hpe.com/SDR/repo/spp/RHEL/$releasever/$basearch/current/
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-mcp

ื–ืขืŸ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืื™ื ื”ืึทืœื˜ ืื•ืŸ ืคึผืขืงืœ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข (ืคึฟืึทืจ ื“ืขืจืžืึธื ืขืŸ):

$ sudo yum --disablerepo="*" --enablerepo="mcp" list available
$ yum info amsd

ื™ื ืกื˜ืึทืœื™ืจื•ื ื’ ืื•ืŸ ืงืึทื˜ืขืจ:

$ sudo yum install amsd ssacli
$ sudo systemctl start amsd

ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ ืคื•ืŸ ืึท ื ื•ืฆืŸ ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืึท ื“ื™ืกืง ืงืึธื ื˜ืจืึธืœืœืขืจ
ืœืึธื–ืŸ ืื™ืŸ 2 ืฉืขื”. ื˜ื™ื™ืœ 3. ื ืึธืš ืกืขื˜ื˜ื™ื ื’ืก

ืึทื– ืก ืึทืœืข ืคึฟืึทืจ ืื™ืฆื˜. ืื™ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืึทืจื˜ื™ืงืœืขืŸ ืื™ืš ืคึผืœืึทืŸ ืฆื• ืจืขื“ืŸ ื•ื•ืขื’ืŸ ืขื˜ืœืขื›ืข ื™ืงืขืจื“ื™ืง ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื•ื•ื™ ืฆื• ืžืึทื›ืŸ VDI ืื™ืŸ oVirt.

ืžืงื•ืจ: www.habr.com