amar-bixinno ku saabsan Debian - Shabakadaha Kombuyuutarka ee loogu talagalay SMBs

Tusmada guud ee taxanaha: Shabakadaha Kombuyuutarka ee loogu talagalay SMEs: Hordhac

Cinwaanka qoraalkani wuxuu tilmaamayaa amarro taxane ah oo konsol ka bilaabmaya «- Taasina waxay faa'iido u yeelan kartaa xaaladaha qaarkood. Waxaan kaliya siin doonaa sharaxaad kooban oo mid walba ah, iyo tusaalooyin isticmaalka ah. Waxaan ku celinaa taas: Kama badali karno buugagan la socda amar kasta. Waxaan si adag u soo jeedinaynaa hubi boggagaas adoo ordaya nin wanaagsanamar.

• Ujeeddada ugu weyn ee maqaalkani waa in la sii wado muujinta adduunka oo dhan in Virtualization-ka Linux uu hadda adeegsanayo Qemu-KVM Hypervisor. In kastoo cinwaanka aan ku qorno magaca qeybinta «Debian«, Mabaadi'da guud waxay ku habboon yihiin qaybinta kale iyada oo loo marayo amarrada gaarka ah ee mid kasta oo ka mid ah. Gaar ahaan kuwa la xiriira raadinta, sharaxaadda iyo rakibidda xirmooyinka, iyo kuwo kale.

Ka hor intaadan sii wadin akhriska, waxaan kugula talineynaa inaad soo booqato maqaalkii hore: Qemu-KVM + Maamulaha Virt-ka ee Debian - Isku xirka kombiyuutarka ee SMEs.

Goorma ayaa la isticmaalayaa amarrada?

Marar badan ayaannu meel fog ka maareyneynaa server-ka taageeridda wax-qabad ee leh Qemu-KVM rakibay, iyo sababo jira awgood oo aannan laheyn garaafka garaafka Maareeyaha Mashiinka Fudud - Maamulaha Virt-ka:

• Kiis caadi ah, markaan ka galno serverka fog xarunta Windows PuTTy, ama kuwa kale oo badan beddelaad taas oo jirta si loogu xidho iyada oo loo marayo SSH oo leh adeeg Debian GNU / Linux ah, kan dambena ma haysto wax taageero ah oo loo rakibayX«, Ama taageero jaantus ah.
• Waxaan si fudud u dooneynaa inaan ku maareyno mashiinnada kumbuyuutarka ee 'server-ka' gudaha ama server-ka fog iyadoo la adeegsanayo amarrada qalabka.

Lagu rakibay macaamiisha libvirt

en el maqaal hore waxaan rakibnaa xirmada libvirt-bin, iyo iyada oo qayb ka ah hawsha la rakibey macaamiisha libvirt. Haddaan ku ordi karno qalab:

buzz @ sysadmin: ~ $ sudo dpkg -L libvirt-macaamiisha | saliid / bin
/ usr / bin
/ usr / bin / virsh
/ usr / bin / virt-host-ansax ah
/ usr / bin / virt-login-qolof
/ usr / bin / virt-xml-ansax ah
/ usr / bin / virt-pki-ansax ah

• barato: barnaamijka virsh ayaa ah midka ugu weyn ee adeegsadaha lagu maareeyo maareynta dhameystiran ee Martida Martida - Martidu. Waxaa loo isticmaalaa in lagu qoro, la abuuro, la joojiyo, oo la xiro cinwaanada. Amarkan waa in lagu weydiyaa rukhsadaha xidid. Waxay leedahay laba siyaabood oo lagu ordo: qaabka amarka iyo habka isdhexgalka. Waxaan u hibeyn doonnaa maqaal soo socda si aan u xaqiijinno.
• ku-martigelin-ansax ah: qalab u oggolaanaya inuu ansaxiyo qaabeynta martigeliyaha - martigeliyaha, si ay u awoodo inay taageerto dhammaan wadayaasha Hypervisor - Kormeeraha. Si loo helo natiijooyin sax ah, amarka waa in lala socodsiiyaa rukhsadaha xidid.
• -wax-login-qolof: amarka fulinta a qolof loo habeeyay a isticmaalaha caadiga ah weel ku jira LXC, oo magaciisu la mid yahay adeegsadaha ku baaqaya. Haddii weelku aanu soconayn, amarka -wax-login-qolof isku dayi doonaa in la bilaabo. Amarkani lama soo wici karo rukhsadaha isticmaalaha xidid. Faylka qaabeynta aad u cad ee barnaamijkan waa /etc/libvirt/virt-login-shell.conf.
• vir-xml-ansax ah: ansax faylasha XML ee libvirt iyaga oo isbarbar dhigaya qorshe - shema ansax ah Waxaan helnaa liis ay ku qoran yihiin magacyo qorsheysan haddii aan fulino nin-xml-ansax ah.
• virt-pki-ansax ah: loo isticmaalay in lagu xaqiijiyo in faylasha PKI ee libvirt Si sax ah ayaa loo qaabeeyey, labadaba dhinaca adeegga aaminka ah iyo macmiilka u isticmaali doona borotokoolka sirta TLS si uu meel fog uga galo serverka. Dilkiisa ayaa lagama maarmaan noqon doona haddii aan karti u siineyno maamulka fog ee TLS iyo SSL. Cutubka 22.2 ee dukumiintiga Gelinta Baahinta Maamulka iyo Hagaha Maamulka, ayaa u heellan xalkan. Waxaan soo jeedinaynaa in shabakadaheena ganacsi ay adeegsadaan maamulka fog iyada oo loo marayo SSH, habka ugu fudud uguna amniga badan ee loo yaqaan 'LAN Business', oo aan u hibeyn doono maqaal dambe.

Lagu rakibay akhlaaq wanaagsan

Maqaalka hore, waxaan sidoo kale rakibnay xirmada maareeye. Iyada oo qayb ka ah hawshaas, xirmada ayaa la rakibay karkari. Haddii aan rabno inaan ogaanno amarada kan dambe ku jiro, waxaan fulinnaa:

byzz @ sysadmin: ~ $ sudo dpkg -L virtinst | saliid / bin
/ usr / bin
/ usr / bin / virt-diinta
/ usr / bin / muuqaal-muuqaal
/ usr / bin / virt-xml
/ usr / bin / virt-rakibi
/ usr / bin / dabiiciyan-clone

• beddelaad- amarro oo u beddelaya qeexitaannada mashiinka dalwaddii qaabab VMX y Ovf qaabka libvirt hooyo XML. Qaabka VMX waxaa caadi ahaan adeegsada VMware, halka OVF «Fur Qaabka Wax-u-qabashada»Qof kastaa wuu isticmaali karaa Kormeeraha ku taageer.
• sawir-muuqaal- Wuxuu ka abuuraa mashiin dalwad leh faylka muuqaalka sawirada qaab XML ah. Qalabkan gaarka ah ayaa laga saari doonaa noocyada mustaqbalka ee karkari, sidaas Ma soo jeedinayno isticmaalkeeda.
• ku-xml: Kuu ogolaanayaa tafatirka faylasha XML ee asalka ah ee ay isticmaaleen libvirt, adoo adeegsanaya xulashooyinka xariiqda taliska.
• ku rakibid: aaladda xariiqda taliska ee u oggolaanaysa abuurista mashiinno casri ah Hypervisors sida KVM, Xen ama Containers Linux oo isticmaala maktabadda maaraynta hypervisor "Libvirt". Qalabkani wuxuu taageeraa rakibidda garaafka haddii aan isticmaalno, tusaale ahaan VNC Shabakada Shabakada Waalidiinta, ama SPICE. Waxa kale oo ay si buuxda u taageertaa qalabka ama qaabka qoraalka. Isticmaalkeeda waxaan ku abuuri karnaa mashiin dalwadal ah oo leh hal ama in kabadan darawal adag, hal ama in kabadan kaararka shabakada, qalabka dhawaaqa, USB-ga jirka ama qalabka PCI, iyo wixii la mid ah. Warbaahinta rakibida waxay noqon kartaa mid maxalli ah, mid fog, oo la daabaco iyadoo la adeegsanayo borotokoolka Nidaamka Nidaamka Isku-xirka Nidaamka Isku-xirka ee Nidaamka Isku-xidhka UNIX NFS, HTTP, FTP. iwm
• isku-dhafan- Qalabka xariiqda amarka si loo mideeyo mashiinnada farsamada ee jira iyadoo la adeegsanayo maktabadda maaraynta hypervisor "Libvirt". Asal ahaan nuqul sawirka mashiinka kumbuyuutarka ah oo abuuro Marti cusub - Guest la qaabeynta qalabka isku mid ah. Waxyaabaha loo baahan yahay inay ahaadaan kuwo gaar ah, tusaale ahaan cinwaanka qalabka kaarka shabakada, waa la cusbooneysiin doonaa si looga fogaado isku dhacyo ama buuq u dhexeeya duug iyo cusub Guest.

muuqaal-daawade

Qalabkani sidoo kale waa la rakibay markaad sameyso maareeye. muuqaal-daawade waa xirmo gooni ah.

• muuqaal-daawade: wuxuu noo ogolaanayaa inaan tusno qunsuliyad garaaf ah, oo loo maro VNC ama SPICE, oo ah mashiin khaas ah, haddii uu ku yaallo gudaha ama meel fog. Waan tixraaci karnaa Guest in aan dooneyno inaan ku soo bandhigno magaceeda, ID, ama UUID. Haddii mashiinka kumbuyuutarka ah uusan shaqeynin, muuqaal-daawade ayaa sugi doona inuu bilaabo.

Ammarro kale oo kale oo kale ah "moode" oo laga rakibi karo baakado gooni ah

• wanaagsan-wanaagsan- Uruurinta aaladaha laxiriira wacyigelinta. Waxaa ku jira qalab loogu talagalay «Muniin«, Iyo qoraal lagu beddelayo mashiinnada dalwaddii lagu abuuray VMware Workstation ama VMware Server, qaabka loo adeegsaday Qemu-KVM.
• sare-sare: Waxay muujineysaa tirakoobyada aagagga akhlaaqda leh. Nooc ka mid ah top o htop loogu talagalay mashiinnada farsamada

Lagu rakibay qemu-utils

In kasta oo magaca qalabkani aanu ku bilaabmin dhaqan-Xaqiiqdii waa inaan isticmaalnaa qaar ka mid ah wakhti cayiman, gaar ahaan midka la xiriira sawirrada mashiinnada mashiinnada dalwaddii ah.

Waanu baryi karnaa kadib markaan rakibno Qemu-Kvm madal hufnaan, sida ku cad qodobka hore. Haddii aan rabno inaan ogaanno amarka xirmada ka harsan meesha aan ka tageyno qemu-maacuunta, waxaan kaliya u baahanahay inaan ordi:

buzz @ sysadmin: ~ $ sudo dpkg -L qemu-utils | saliid / bin
/ usr / bin
/ usr / bin / qemu-img
/ usr / bin / qemu-nbd / usr / bin / qemu-io

Haddii halkii lagu takooray lahaa by / bin waanu u qaban lahayn / sbin, waxaan heli doonnaa natiijo kale oo aan uga tagno tixgelintaada.

• qemu-img: wuxuu noo ogolaanayaa inaan abuurno, isla markaana badalno iyo / ama wax ka badalno muuqaalada saxannada aan shaqeynaynin ama shaqeynayaan Khadka kama baxsan.
  Waxaan soo jeedinaynaa socodsiiso amarka nin qemu-img. Waxaan xoojin doonaa oo kaliya in AANAN marnaba u adeegsan doonin amarkan wax ka beddel sawir kasta oo ay adeegsanayaan mashiin kasta oo farshaxan ah ama hanaan kasta oo kale, maxaa yeelay way baabi'in kartaa sawirka. Sidoo kale waa inaanan la tashan xogta sawirka ku jira howsha wax ka beddelka, maadaama aan ka heli karno iswaafaqo ka jira gobolkiisa.

Tusaalooyinka isticmaalka qaar ka mid ah amarrada

ku-martigelin-ansax ah

buzz @ sysadmin: ~ $ virt-host-ansax ah 
  QEMU: Hubinta hufnaanta qalabka: PASS QEMU: Hubinta qalabka / dev / kvm: PASS QEMU: Hubinta aaladda / dev / vhost-net: DIGNIIN (Ku shub qaybta 'vhost_net' si loo hagaajiyo waxqabadka shabakadda viryo) QEMU: Hubinta qalab / dev / net / tun: PASS LXC: Hubinta Linux> = 2.6.26: PASS

buzz @ sysadmin: ~ $ sudo virt-host-ansax ah 
[sudo] password for buzz: QEMU: Hubinta aaladda waxqabadka: PASS QEMU: Hubinta aaladda / dev / kvm: PASS QEMU: Hubinta aaladda / dev / vhost-net: PASS QEMU: Hubinta aaladda / dev / net / tun : PASS LXC: Hubinta Linux> = 2.6.26: PASS

vir-xml-ansax ah

buzz @ sysadmin: ~ $ sudo virt-xml-validate /etc/libvirt/qemu/dns.xml 
/etc/libvirt/qemu/dns.xml ansaxiyaa

buzz @ sysadmin: ~ $ sudo virt-xml-validate /etc/libvirt/qemu/networks/default.xml
/etc/libvirt/qemu/networks/default.xml wuu ansaxayaa

qemu-img

buzz @ sysadmin: ~ $ qemu-img jeeg /tera/vmware/omicron/omicron.vmdk
Wax khaladaad ah lagama helin sawirka.

buzz @ sysadmin: ~ $ qemu-img info /tera/vmware/omicron/omicron.vmdk
sawir: /tera/vmware/omicron/omicron.vmdk
Nooca faylka: vmdk cabbirka xajmiga: 20G (21474836480 bytes) cabbirka diskiga: 3.6G cluster_size: 65536 Foomka macluumaad gaar ah: cid: 1473577509 waalid cid: 4294967295 abuur nooc: monolithic vmware / omicron / omicron.vmdk cabirka cluster: qaabka 0:

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/omicron.raw 
sawir: /tera/vms/omicron.raw
Qaabka feylka: cabbirka dalwaddii ceeriin: 20G (21474836480 bytes) cabbirka diskiga: 3.4G

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/miweb.qcow2
sawir: /tera/vms/miweb.qcow2
Nooca faylka: qcow2 cabbirka xajmiga: 10G (10737418240 bytes) cabbirka diskiga: 4.5G cluster_size: 65536 Foomka macluumaad gaar ah: u dhiganta: 1.1 dib u soo kabasho caajis ah: been ah

buzz @ sysadmin: ~ $ sudo qemu-img beddelo -p /tera/vms/omicron.raw -O qcow2 /tera/vms/omicron.qcow2
    (27.56 / 100%)

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/omicron.qcow2 
sawir: /tera/vms/omicron.qcow2
Nooca faylka: qcow2 cabbirka xajmiga: 20G (21474836480 bytes) cabbirka diskiga: 3.5G cluster_size: 65536 Foomka macluumaad gaar ah: u dhiganta: 1.1 dib u soo kabasho caajis ah: been ah

buzz @ sysadmin: ~ $ sudo qemu-img create -f qcow2 /tera/vms/hyp2.qcow2 20G
Qaabeynta '/tera/vms/hyp2.qcow2', fmt = qcow2 size = 21474836480 encryption = off cluster_size = 65536 lazy_refcounts = off 

buzz @ sysadmin: ~ $ sudo qemu-img info /tera/vms/hyp2.qcow2
sawir: /tera/vms/hyp2.qcow2
Qaabka feylka: qcow2 cabbirka xajmiga: 20G (21474836480 bytes) cabbirka diskiga: 196K cluster_size: 65536 Foomka macluumaad gaar ah: u dhiganta: 1.1 dib u soo kabasho caajis ah

ku-xml

Marka hore, waxaan abuuraynaa album cusub:

buzz @ sysadmin: ~ $ sudo qemu-img create -f qcow2 /tera/vms/dns2.qcow2 10G

Kadibna waxaan ku biiri doonnaa domainka "dns" ee hadda jira:

buzz @ sysadmin: ~ $ virt-xml --concon qemu: /// system dns --add-device --disk /tera/vms/dns2.qcow2 --confirm
--- Asalka XML +++ La beddelay XML @@ -128,5 +128,10 @@  + + + + +

Ma lagu qeexaa 'dns' XML la beddelay? (y / n): y
Domain 'dns' ayaa si guul leh loo qeexay

Dhamaadka maqaalka waxaan siineynaa qaabdhismeedka dhammeystiran ee feylka cusub ee la beddelay /etc/libvirt/qemu/dns.xml.

beddelaad

Aynu u beddelo mashiin dalwaddeed oo la abuuray iyadoo la isticmaalayo WorkMation VMware dhanka qaabka libvirt, laakiin maahan kahor intaan la cayimin in qaabka disk-ka adag ee la beddelay uu yahay qcow2, iyo sidoo kale in mashiinka muuqaalka cusub ee mashiinka ah lagu abuuray bakhaarka ugu weyn / tera / vms. Waxaan sidoo kale dooneynaa soo saarista amarka inuu noqdo sida ugu macquulsan ee macquul ah, sidaas darteed waxaan u adeegsaneynaa ikhtiyaarka -d.

buzz @ sysadmin: ~ $ sudo virt-convert -d / tera / vmware / miweb / -disk-format qcow2 -destination / tera / vms

Intaa ka dib, qofka wax daawada wuxuu si otomaatig ah ugu xiraa Martida cusub ee la beddelay, waxaanan arki karnaa geedi socodkiisa oo dhan.

isku-dhafan

Aynu iskudarsanno mashiinka casriga ah «dns":

buzz @ sysadmin: ~ $ virt-clone --connect qemu: /// system -o dns --auto-clone
Meeleynta 'dns-clone.qcow2' | 10 GB 00:20 Meeleynta 'dns2-clone.qcow2' | 10 GB 00:01     

Kalluunka 'dns-clone' ayaa si guul ah loo abuuray.

Waxaan hubinaa isticmaalka amarka barato, taas oo ah horudhac maqaalka soo socda:

buzz @ sysadmin: ~ $ sudo virsh list
 Lambarka Magaca Gobolka ------------------------------- -----

buzz @ sysadmin: ~ $ sudo virsh list --all
 Magaca Magaca Id ---------------------------------------------- ----- - dns shut - dns-clone shut off - miweb wuu xirmay

buzz @ sysadmin: ~ $ sudo virsh bilaw dns-clone
Domain dns-clone ayaa bilaabmay

buzz @ sysadmin: ~ $ $-viewer -connect qemu: /// system dns-clone

ku rakibid

Waxaan rabnaa in aan sameysano mashiin casri ah oo la yiraahdo «WordPress»In la martigaliyo goobta Intranet-ka Ganacsiga. Laguma daabici doono internetka. Inay leedahay qiyaastii 1024 megabytes oo RAM ah, disk adag oo 80 gigabytes ah oo koritaan firfircoon leh, kaasoo ku saleysan Debian Jessie, kuna xiran shabakadda «Default«.

Si aan nolosheena ugu fududaanno, waxaan marka hore abuureynaa sawirka diskka annagoo isticmaaleyna qemu-img:

buzz @ sysadmin: ~ $ sudo qemu-img create -f qcow2 /tera/vms/wordpress.qcow2 80G
Qaabeynta '/tera/vms/wordpress.qcow2', fmt = qcow2 size = 85899345920 encryption = off cluster_size = 65536 lazy_refcounts = off

Marka xigta, waxaan abuurnaa mashiinka oo aan bilownaa hawsha rakibida:

buuzz @ sysadmin: ~ $ sudo virt-rakibi --connect qemu: /// system --virt-type = kvm \
-magaca ereyga -ram 1024 --vcpus = 1 \
--disk /tera/vms/wordpress.qcow2 \
--cdrom /home/buzz/isos/Linux/debian-8/debian-8.0.0-amd64-CD-1.iso \
--os-type linux - network network = default \
--sharaxaadda wordpress.desdelinux. taageere

sare-sare

buzz @ sysadmin: ~ $ $ - top --concon qemu: /// nidaamka
virt-top 15:39:21 - x86_64 2 / 2CPU 1600MHz 3863MB 2 domains, 2 firfircoon, 2 orod, 0 hurdo, 0 hakad ah, 0 aan firfircooneyn D: 0 O: 0 X: 0 CPU: 0.7% Mem: 768 MB 768 MB martida) ID S RDRQ WRRQ RXBY TXBY% CPU% MEM TIME MAGACA 22 R 0 0 104 0 0.3 6.0 0: 11.49 dns 21 R 0 0 104 0 0.3 13.0 0: 13.42 miweb

Qaab dhismeedka feylka dns.xml

Marka ugu horeysa waxay umuuqataa xoogaa adagtahay inla fahmo qaab dhismeedka feyl qeexida mashiinka kumbuyuutarka ama Guest, sida uu fahmay hypervisor-ka Qemu-KVM iyo maktabadaha la xiriira sida libvirt. Faylka wuxuu ku jiraa qaabka caadiga ah.XML. Waxaa loo qaabeeyey qodobo qeexitaan ah, oo ku dhex jira xayndaabka weyn «domain«.

....

Balooggaas gudahiisa ayaan ka heli doonnaa qeexitaanka mashiinka dalwada oo dhan:

• magaca kooxda
• uuid kooxda
• qadarka RAM
• tirada processor-yada
• nooca nidaamka qalliinka iyo qaab dhismeedkiisa. qalab ee kabaha.
• Astaamaha ay taageerto sida ACPI "Iskuxidhka Awoodda Awoodda Awoodda", APM "Awoodda Awoodda otomaatiga ah", iyo PAE.
• Nooca CPU (yada) iyo astaamahooda
• dejinta saacadda: haddii ay tahay UTC "Isku-duwidda Waqtiga Midoobay" ama maahan.
• jawaab celinta dhacdooyinka sida xiritaanka, reboot, ama nidaamka shilka
• haddii RW «Awoodda Maareynta» uu karti u siiyay dhacdooyinkii «hakinta qoraalka xusuusta» iyo «hakinta qoraalka diskiga adag»
• nooca emulator ee qalabka kala duwan ama Aaladda KVM
• dhammaan wadayaasha adag: darawalka, nooca diskiga, dariiqa faylka sawirka, aaladda bartilmaameedka, nooca baska, booska «Afyare»Pci-ka ay ku xiran tahay, iwm, waxay kuxirantahay diskka dalwaddii: IDE, SATA, SCSI, USB ama Virtio.
• qalabka indhaha sida CDR
• tirada iyo nooca xirayaasha USB
• booska pci ee IDE disk
• iskuxiraha taxanaha ah ee isgaarsiinta
• isku xira isku midka ah ee daabacayaasha
• kaararka shabakada oo leh cinwaan gaar ah oo MAC ah, nooca kaarka shabakadda, kaas oo khadka pci-ka uu ku xiran yahay, iyo shabakadda dalwaddu ku xirmi doonto
• plos consoles'ka taxane ah
• qalabka gelinta sida suufka «kiniin", Kiiboodhka Mouse"mouse", iwm
• kaarka fiidiyowga iyo RAMkiisa, nooca, moodeelka, booska, baska, iwm.
• iyo mid kale oo dhaadheer iwm

Marka la soo koobo, La Mar Océana ee qeexitaannada iyo aaladaha lagama maarmaanka u ah oo ay taageerto Qemu-KVM hypervisor iyo maktabadaha la xiriira, si ay u helaan mashiin dhammaystiran oo shaqeynaya sidii inuu yahay mashiin dhab ah.

buzz @ sysadmin: ~ $ sudo bisad /etc/libvirt/qemu/dns.xml 
<!--
WARNING: THIS IS AN AUTO-GENERATED FILE.  ISBADALKA AY KU LEEYAHAY SIDA LOOGU SOO KOOBAN YAHAY LUNA DHIGAY.  Isbedelada qaabeynta xml waa in lagu sameeyaa iyadoo la adeegsanayo: virsh edit dns ama codsi kale iyadoo la adeegsanayo libvirt API.

Gaarsiinta soo socota

• Amarka Virsh
• Maareynta fog ee kormeerayaasha 'hypervisors' iyo makiinadaha farsamada gacanta oo isticmaalaya SSH

Xusuusnow in tani ay noqon doonto maqaalo taxane ah oo ay qortay Shabakadaha Kombiyuutarka ee loogu talagalay SMEs. Waan ku sugeynaa!