I-MinIo yabancane

I-MiniO iyisixazululo esihle kakhulu lapho udinga ukuhlela kalula futhi kalula ukugcinwa kwezinto. Ukusetha okuyisisekelo, amapulatifomu amaningi nokusebenza kahle kwenze umsebenzi wabo emkhakheni wothando oludumile. Ngakho-ke besingenayo enye indlela ngaphandle kokumemezela ukuhambisana ngenyanga edlule I-Veeam Backup & Replication kanye ne-MiniO. Kubandakanya isici esibalulekile njengokungaguquki. Eqinisweni, i-MiniO inokuphelele isahluko kumadokhumenti anikezelwe ekuhlanganisweni kwethu.

Ngakho-ke, namuhla sizokhuluma ngokuthi:

  • Ukusetha i-MiniO kuyashesha kakhulu.
  • Ukusetha i-MiniO kuyashesha kancane, kodwa kungcono kakhulu.
  • Yisebenzise njengeSigaba Sokulondolozwa Kwemibhalo Ye-Veeam SOBR Scalable Repository.

I-MinIo yabancane

Uyini?

Isingeniso esifushane salabo abangakaze bahlangabezane ne-MiniO. Lesi isitoreji sento yomthombo ovulekile esihambisana ne-Amazon S3 API. Ikhishwe ngaphansi kwelayisensi ye-Apache v2 futhi ibambelela kufilosofi ye-Spartan minimalism.

Okusho ukuthi, ayinayo i-GUI enamadeshibhodi, amagrafu namamenyu amaningi. I-MiniO ivele yethule iseva yayo ngomyalo owodwa, lapho ungamane ugcine khona idatha usebenzisa amandla aphelele e-S3 API. Kodwa kufanele kuqashelwe ukuthi lobu bulula bungakhohlisa uma kuziwa ezintweni ezisetshenziswayo. I-RAM ne-CPU amuncwa ngokuphelele, kodwa izizathu zizoxoxwa ngezansi. Futhi, ngendlela, okufana ne-FreeNAS ne-TrueNAS zisebenzisa i-MiniO ngaphansi kwe-hood.

Lesi singeniso singaphelela lapha.

Ukusetha i-MiniO kuyashesha kakhulu

Ukuyimisa kuyashesha kangangokuthi sizoyibheka ngeWindows neLinux. Kukhona izinketho ze-Docker, ne-Kubernetis, ngisho ne-MacOS, kodwa incazelo izofana yonke indawo.

Ngakho-ke, endabeni yeWindows, iya kuwebhusayithi esemthethweni https://min.io/download#/windows bese ulanda inguqulo yakamuva. Lapho futhi sibona imiyalo yokuqala:

 minio.exe server F:Data

Futhi kukhona futhi isixhumanisi esinemininingwane ethe xaxa Isiqondiso sokuqala esisheshayo. Asikho isidingo sokungayikholelwa imiyalelo, ngakho-ke siyayiqhuba futhi sithole into efana nale mpendulo.

I-MinIo yabancane
Yilokho kuphela! Isitoreji siyasebenza futhi ungaqala ukusebenza ngaso. Bengingadlali lapho ngithi i-MiniO iyi-minimalist futhi isebenza nje. Uma ulandela isixhumanisi esinikezwa ngesikhathi sokwethulwa, imisebenzi ephezulu etholakalayo owokwakha ibhakede. Futhi ungaqala ukubhala idatha.

Kubathandi beLinux, yonke into ihlala ilula. Imiyalo elula kakhulu:


wget https://dl.min.io/server/minio/release/linux-amd64/minio
chmod +x minio
./minio server /data

Umphumela ngeke uhlukaniseke kulokho okwakubonwe ngaphambili. 

Ukusetha i-MinIO kunengqondo kakhudlwana

Njengoba siqonda, isigaba sangaphambilini siyatotoswa ngezinjongo zokuhlola. Futhi, masikhulume iqiniso, sisebenzisa i-MiniO kabanzi kakhulu ukuhlola, esingenamahloni nhlobo ukukuvuma. Yiqiniso, kuyasebenza, kodwa kuyihlazo ukubekezelela lokhu ngale kwamabhentshi okuhlola. Ngakho-ke, sithatha ifayela ezandleni zethu futhi siqale ukuletha engqondweni.

I-HTTPS

Isinyathelo sokuqala esiyisibopho endleleni eya ekukhiqizeni ukubethela. Sekuvele kunezincwadi eziyisigidi nenkulungwane kunethiwekhi zokwengeza izitifiketi ku-MiniIO, kodwa uhlelo lwazo olujwayelekile yileli:

  • Dala isitifiketi
  • Endabeni ye-Windows, yibeke kokuthi C:Users%User%.miniocerts
  • Nge-Linux ku-${HOME}/.minio/certs 
  • Iqalisa kabusha iseva

I-banal Let's Encrypt iyisicefe futhi ichazwa yonke indawo, ngakho-ke indlela yethu iyindlela yama-samurai, ngakho-ke uma kwenzeka iWindows silanda. Cygwin, futhi endabeni ye-Linux simane sihlole ukuthi siyifakile i-openssl. Futhi senza umlingo omncane we-console:

  • Dala okhiye: openssl ecparam -genkey -name prime256v1 | openssl ec -out private.key
  • Sakha isitifiketi sisebenzisa ukhiye: openssl req -new -x509 -days 3650 -key private.key -out public.crt
  • Kopisha private.key kanye public.crt kufolda eshiwo ngenhla
  • Qala kabusha i-MiniO

Uma konke kuhambe ngendlela efanele, kuzovela into efana nalena esimeni.

I-MinIo yabancane

Nika amandla i-MiniO Erasure Coding

Okokuqala, amazwi ambalwa mayelana nesihloko. Ngamafuphi: lokhu ukuvikela isofthiwe yedatha emonakalweni nasekulahlekeni. Njengokuhlasela, okuthembeke kakhulu kuphela. Uma i-RAID6 yakudala ingakwazi ukulahlekelwa amadiski amabili, i-MiniO ingakwazi ukubhekana kalula nokulahlekelwa kwesigamu. Ubuchwepheshe buchazwa ngokuningiliziwe ku umhlahlandlela osemthethweni. Kodwa uma sithatha ingqikithi, khona-ke lokhu ukuqaliswa kwamakhodi we-Reed-Solomon: lonke ulwazi lugcinwa ngendlela yamabhulokhi wedatha, anamabhulokhi wokulinganisa. Futhi kubonakala sengathi konke lokhu sekuvele kwenziwa izikhathi eziningi, kodwa kukhona okubalulekile "kodwa": singabonisa ngokucacile isilinganiso samabhulokhi wokulinganisa kuya kumabhulokhi wedatha wezinto ezigciniwe.
Uyafuna 1:1? Ngiyacela!
Uyafuna 5:2? Ayikho inkinga!

Isici esibaluleke kakhulu uma usebenzisa ama-node ambalwa ngesikhathi esisodwa futhi ufuna ukuthola ibhalansi yakho phakathi kokuphepha okuphezulu kwedatha nezinsiza ezisetshenzisiwe. Ngaphandle kwebhokisi, i-MiniO isebenzisa ifomula N/2 (lapho u-N eyisamba senani lamadiski), i.e. ihlukanisa idatha yakho phakathi kwamadiski edatha angu-N/2 kanye namadiski e-N/2 alinganayo. Ukuhumusha ngamagama abantu: ungalahlekelwa uhhafu wamadiski futhi ubuyisele idatha. Lobu budlelwano bunikezwa Ikilasi Lokugcina, okukuvumela ukuthi uzikhethele ukuthi yini ebaluleke kakhulu: ukwethembeka noma umthamo.

Umhlahlandlela unikeza isibonelo esilandelayo: ake sithi unokufakwa kumadiski angu-16 futhi udinga ukulondoloza ifayela elingu-100 MB ngosayizi. Uma kusetshenziswe izilungiselelo ezizenzakalelayo (amadiski angu-8 edatha, angu-8 wamabhulokhi wokulingana), khona-ke ifayela lizogcina lithathe cishe kabili ivolumu, i.e. 200 MB. Uma isilinganiso sediski singu-10/6, khona-ke i-160 MB izodingeka. 14/2 - 114 MB.

Omunye umehluko obalulekile ekuhlaselweni: uma kwenzeka ukwehluleka kwediski, i-MiniO izosebenza ezingeni lezinto, ibuyisele eyodwa ngayinye, ngaphandle kokumisa lonke uhlelo. Ngenkathi ukuhlasela okuvamile kuzophoqeleka ukubuyisela ivolumu yonke, okuzothatha isikhathi esingalindelekile. Umbhali ukhumbula ishalofu lediski okwathi ngemva kokuwa kwamadiski amabili, kwathatha isonto nesigamu ukubala kabusha. Kwakungemnandi neze.

Futhi, inothi elibalulekile: I-MiniO ihlukanisa wonke amadiski e-Erasure Coding abe amasethi ukusuka kumadiski angu-4 kuye kwayi-16, kusetshenziswa usayizi omkhulu ongakhona wokusetha. Futhi ngokuzayo, ingxenye yolwazi izogcinwa kuphela phakathi kwesethi eyodwa.

Konke lokhu kuzwakala kupholile, kodwa kuzoba nzima kangakanani ukumisa? Ake sibheke. Sithatha umyalo wokuqalisa futhi simane siklelise amadiski lapho isitoreji sidinga ukwakhiwa. Uma konke kwenziwa ngendlela efanele, khona-ke embikweni sizobona inani lamadiski ahilelekile. Futhi iseluleko siwukuthi akulungile ukwengeza isigamu sediski kumsingathi oyedwa ngesikhathi esisodwa, ngoba lokhu kuzoholela ekulahlekeni kwedatha.

c:minio>minio.exe server F: G: H: I: J: K:

I-MinIo yabancane
Okulandelayo, ukuze uphathe futhi ulungiselele iseva ye-MiniO, sizodinga i-ejenti, ongayilanda Lapho kusuka kusayithi elisemthethweni.

Ukuze ungakhathali iminwe yakho isikhathi ngasinye uthayipha ikheli nokhiye bokufinyelela (futhi akuphephile), kulula ukwakha isibizo ngokushesha lapho uqala ukusebenzisa ifomula ye-mc alias set. [UKHIYE-WOKUFINYELELA-WAKHO] [UKHIYE-WOMFIHLO-WAKHO]

mc alias set veeamS3 https://172.17.32.52:9000 YOURS3ACCESSKEY YOURSECERTKE

Noma ungangeza umsingathi wakho ngokushesha:

mc config host add minio-veeam https://minio.jorgedelacruz.es YOURS3ACCESSKEY YOURSECERTKEY

Bese sizokwakha ibhakede elingaguquki neqembu elihle

mc mb --debug -l veeamS3/immutable 

mc: <DEBUG> PUT /immutable/ HTTP/1.1
Host: 172.17.32.52:9000
User-Agent: MinIO (windows; amd64) minio-go/v7.0.5 mc/2020-08-08T02:33:58Z
Content-Length: 0
Authorization: AWS4-HMAC-SHA256 Credential=minioadmin/20200819/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-bucket-object-lock-enabled;x-amz-content-sha256;x-amz-date, Signature=**REDACTED**
X-Amz-Bucket-Object-Lock-Enabled: true
X-Amz-Content-Sha256: UNSIGNED-PAYLOAD
X-Amz-Date: 20200819T092241Z
Accept-Encoding: gzip
mc: <DEBUG> HTTP/1.1 200 OK
Content-Length: 0
Accept-Ranges: bytes
Content-Security-Policy: block-all-mixed-content
Date: Wed, 19 Aug 2020 09:22:42 GMT
Location: /immutable
Server: MinIO/RELEASE.2020-08-16T18-39-38Z
Vary: Origin
X-Amz-Request-Id: 162CA0F9A3A3AEA0
X-Xss-Protection: 1; mode=block
mc: <DEBUG> Response Time:  253.0017ms

--susa iphutha ikuvumela ukuthi ungaboni umlayezo wokugcina kuphela, kodwa ulwazi oluningiliziwe. 

-l kusho—nge-lock, okusho ukuthi ayinakuguqulwa

Uma manje sibuyela kusixhumi esibonakalayo sewebhu, ibhakede lethu elisha lizovela lapho.

I-MinIo yabancane
Yilokho kuphela okwamanje. Sidale isitoreji esivikelekile futhi silungele ukuqhubekela phambili ekuhlanganisweni ne-Veeam.

Ungaqinisekisa futhi ukuthi konke kusebenza kahle:

c:minio>mc admin info veeamS3

●  172.17.32.52:9000
   Uptime: 32 minutes
   Version: 2020-08-16T18:39:38Z
   Network: 1/1 OK
   Drives: 6/6 OK
0 B Used, 1 Bucket, 0 Objects
6 drives online, 0 drives offline

I-MiniO ne-Veeam

Ukuqapha Uma ngesizathu esithile esimangalisayo ufuna ukusebenza nge-HTTP, khona-ke kokuthi HKEY_LOCAL_MACHINESOFTWAREVeeamVeeam Backup and Replication dala ukhiye we-DWORD I-SOBRArchiveS3DisableTLS. Setha inani lakho ku-1 futhi ukhumbule ukuthi asikuvumeli ngokuqinile ukuziphatha okunjalo futhi asikuncomi kunoma ubani.

Qaphela futhi! Uma, ngenxa yokungaqondi okuthile, uqhubeka nokusebenzisa i-Windows 2008 R2, lapho-ke uzama ukuxhuma i-MiniO ku-Veeam, cishe uzothola iphutha elifana naleli: Yehlulekile ukusungula uxhumano ku-Amazon S3 endpoint. Lokhu kungelashwa ngesichibi esisemthethweni esivela Microsoft.

Hhayi-ke, amalungiselelo aphelile, ake sivule isikhombimsebenzisi se-VBR futhi siye kuthebhu Yengqalasizinda Yokulondoloza, lapho sizobiza khona iwizadi ngokungeza inqolobane entsha.

I-MinIo yabancane
Kunjalo, sinentshisekelo ku-Object storage, okuyi-S3 Compatible. Kwiwizadi evulayo, setha igama bese udlulela ezinyathelweni ezibonisa ikheli ne-akhawunti. Uma kudingeka, ungakhohlwa ukucacisa isango lapho izicelo zokugcinwa zizokwenziwa khona ummeleli.

I-MinIo yabancane
Bese ukhetha ibhakede, ifolda bese uqoka ibhokisi elithi Yenza izipele zakamuva zingaguquleki. Noma singayifaki. Kodwa njengoba senze indawo yokugcina izinto esekela lo msebenzi, kungaba isono ukungawusebenzisi.

I-MinIo yabancane
Okulandelayo > Qeda futhi ujabulele umphumela.

Manje sidinga ukuyengeza endaweni yokugcina ye-SOBR njenge-Capacity Tier. Ukuze senze lokhu, singakha entsha noma sihlele ekhona kakade. Sinentshisekelo kusinyathelo se-Capacity Tier.

I-MinIo yabancane
Lapha sidinga ukukhetha ukuthi yisiphi isimo esizosebenza ngaso. Zonke izinketho zichazwe kahle kwenye isihloko, ngakho ngeke ngiphinde

Futhi lapho kuqedwa iwizadi, imisebenzi yokukopisha noma yokudlulisa izipele izokwethulwa ngokuzenzakalelayo. Kodwa uma izinhlelo zakho zingabandakanyi ukubeka umthwalo ngokushesha kuwo wonke amasistimu, qiniseka ukuthi usetha izikhawu ezamukelekayo zokusebenza kunkinobho yewindi.

I-MinIo yabancane
Futhi, kunjalo, ungenza imisebenzi ehlukene Yekhophi Yokukopisha. Abanye bakholelwa ukuthi lokhu kulula nakakhulu, njengoba kubonakala ngandlela-thile futhi kuyabikezelwa kumsebenzisi ongafuni ukuhlolisisa imininingwane yokusebenza kwebanga lokudubula. Futhi kunemininingwane eyanele lapho, ngakho-ke ngiyaphinda ngincoma isihloko esihambisanayo kusixhumanisi esingenhla.

Futhi ekugcineni, impendulo yombuzo okhohlisayo: kuzokwenzekani uma usazama ukususa ikhophi yasenqolobaneni ku-Immutable Storage?

Nansi impendulo:

I-MinIo yabancane
Yilokho kuphela okwanamuhla. Ngokwesiko langempela, bamba uhlu lwezihloko eziwusizo esihlokweni:

Source: www.habr.com

Engeza amazwana