Imiyalelo ye-virt kwi-Debian-Inethiwekhi yekhompyuter yee-SMB

Isalathiso ngokubanzi sothotho: Iinethiwekhi zekhompyuter zee-SMEs: Intshayelelo

Isihloko sale post sibhekisa kuthotho lwemiyalelo yekhonsoli eqala ngo «amandla- « Kwaye kunokuba luncedo kwiimeko ezithile. Siza kunika inkcazo emfutshane nganye nganye, kunye neminye imizekelo yokusetyenziswa. Siyakuphinda oko: Asinakukwazi ukuyibuyisela iincwadana ezihamba nomyalelo ngamnye. Siphakamisa ngamandla jonga la maphepha ngokusebenza indoda elungileyo-myalelo.

• Eyona njongo iphambili yeli nqaku kukuqhubeka nokubonisa indalo iphela yokuba i-Virtualization kwiLinux ngoku isebenzisa iQemu-KVM Hypervisor. Nangona kwisihloko sibhala igama ukuhanjiswa «Debian«, Imigaqo ngokubanzi isebenza kulo naluphi na olunye ulwabiwo ngokusebenzisa imiyalelo ethile nganye nganye. Ngokukodwa ezo zinxulumene nokukhangela, inkcazo kunye nokufakwa kweephakeji, phakathi kwabanye.

Ngaphambi kokuqhubeka nokufunda, sincoma ukutyelela inqaku langaphambili: I-Qemu-KVM + Umphathi we-Virt kwi-Debian-Inethiwekhi yekhompyuter yee-SMEs.

Uyisebenzisa nini imiyalelo?

Ngamaxesha amaninzi silawula kude iseva yenkxaso yokubonakalayo kunye ne Qemu-KVM ifakiwe, kwaye ngenxa yesizathu esithile asinayo imbonakalo yomzobo we Umphathi woMatshini oBonakalayo- Umphathi weVirtual:

• Umzekelo oqhelekileyo, xa singena kwiserver ekude ukusuka kwisikhululo seWindows nge I-PuTTy, okanye nayiphi na enye kwezi ezininzi ezinye iindlela ezikhoyo ukudibanisa nge-SSH kunye ne-Debian GNU / Linux server, kwaye eyokugqibela ayinankxaso ifakwe kwi «X«, Okanye inkxaso yemizobo.
• Sifuna nje ukulawula oomatshini ababonakalayo kwiserver yangaphakathi okanye kude nisebenzisa imiyalelo yekhonsoli.

Kufakwe abathengi be-libvirt

Kulo nqaku yangaphambili sifaka iphakheji libvirt-umgqomo, kwaye njengenxalenye yenkqubo yafakwa libvirt-abathengi. Ukuba sibaleka kwikhonsoli:

buzz @ sysadmin: ~ $ sudo dpkg -L libvirt-abathengi | grep / bin
/ usr / bin
/ usr / bin / virsh
/ usr / bin / ide-host-validate
/ usr / bin / ide-login-iqokobhe
/ usr / bin / virt-xml -qinisekisa
/ usr / bin / ide-pki-ukuqinisekisa

• umtshana: Inkqubo ye-virsh yeyona ndlela iphambili yomsebenzisi kulawulo olupheleleyo lweeNdawo zeeNdwendwe- Izivakashi. Isetyenziselwa ukudwelisa, ukwenza, ukunqumama, kunye nokucima imimandla. Lo myalelo kufuneka ungeniswe ngemvume ye Ingcambu. Ineendlela ezimbini zokubaleka: kwimo yomyalelo nakwindlela yokusebenzisana. Siza kunikezela inqaku elilandelayo kwintsholongwane.
• Umkhosi-ungqinisiso: Isixhobo esivumela ukungqinisisa ubumbeko loMamkeli- host, ukuze ikwazi ukuxhasa bonke abaqhubi beHypervisor- Hypervisor. Ukufumana iziphumo ezichanekileyo, umyalelo kufuneka uqhutywe kunye neemvume ze Ingcambu.
• igobolondo-yokungena-iqokobhe: ukuyalela ukwenza iqokobhe ngentando yakho umsebenzisi oqhelekileyo kwisitya I-LXC, ogama lakhe lifana nomsebenzisi oyibizayo. Ukuba isikhongozeli asisebenzi, myalelo igobolondo-yokungena-iqokobhe izakuzama ukuyqala. Lo myalelo awunakubhenelwa kwiimvume zomsebenzisi Ingcambu. Eyona fayile yoqwalaselo icacileyo yale nkqubo yile /etc/libvirt/virt-login-shell.conf.
• Qiniseka-xml: Qinisekisa iifayile zeXML ukusuka libvirt ngokuthelekisa nesikimu - scheme iyasebenza. Sifumana uluhlu lwamagama e-schema aqinisekileyo ukuba siyaphumeza indoda ide-xml-isebenze.
• i-ide-pki-iqinisekisa: Isetyenziselwa ukuqinisekisa ukuba ngaba iifayile ze-PKI ze libvirt Zilungiselelwe ngokuchanekileyo, zombini kwicala leseva elikhuselekileyo nakwiklayenti eya kuthi isebenzise inkqubo ye-TLS encryption ukufikelela kude kwiserver. Ukuphunyezwa kwayo kuya kuba yimfuneko ukuba sikwazi ukwenza ulawulo olukude ngaphezulu kwe-TLS kunye ne-SSL. Isahluko 22.2 soxwebhu UkuSebenza ngokuSebenza kunye nesiKhokelo soLawulo, Inikezelwe kwesi sisombululo. Siyacebisa ukuba uthungelwano lwethu lweshishini lusebenzise ii ulawulo olukude ngeSSH, eyona ndlela ilula nekhuselekileyo yeLAN yeShishini, apho siza kunikezela inqaku elilandelayo.

Kufakwe ubuchule

Kwinqaku elandulela eli, sifakile iphakheji umphathi we-virt. Njengenxalenye yale nkqubo, iphakheji yafakwa amandla. Ukuba sifuna ukwazi ukuba yeyiphi imiyalelo yokugqibela enayo, senza:

byzz @ sysadmin: ~ $ sudo dpkg -L ideinst | grep / bin
/ usr / bin
/ usr / bin / ide-guqula
/ usr / bin / virt-umfanekiso
/ usr / bin / ide-xml
/ usr / bin / ide-ukufaka
/ usr / bin / malunga ne-clone

• ukuguqula ubungakanani-Umyalelo oguqula iinkcazo zomatshini ezibonakalayo zibe ziifomathi VMX y I-Ovf Kwifomathi ye-libvirt yemveli XML. Ifomathi ye-VMX ihlala isetyenziswa yi VMwareNgelixa i-OVFVula iFomathi yoBuchule»Inokusetyenziswa nangayiphi na Hypervisor uyixhase.
• umfanekiso-Yenza umatshini obonakalayo ukusuka kwifayile echazayo yomfanekiso kwifomathi yeXML. Esi sixhobo siza kususwa kwiinguqulelo ezizayo ze amandla, njalo Asicebisi ukusetyenziswa kwayo.
• inyani-xml: Ivumela ukuhlelwa kweefayile zeXML zomthonyama ezisetyenziswa libvirt, usebenzisa ukhetho lomgca wokuyalela.
• ukufaka-ukufakaIsixhobo somgca wokuyalela esivumela ukudala oomatshini abatsha kwii-Hypervisors ezinje nge-KVM, i-Xen okanye i-Linux Containers ezisebenzisa ithala leencwadi lolawulo "Libvirt". Esi sixhobo sixhasa ukufakwa kwemizobo ukuba sisebenzisa, umzekelo, ifayile ye- VNC Ikhompyuter yeNethiwekhi eyiyo, okanye ISIPHUMO. Ikwaxhasa ngokupheleleyo ikhonsoli okanye imo yokubhaliweyo. Ngokusebenzisa kwayo singenza umatshini obonakalayo kunye nokuqhuba kanzima okanye enye, okanye enye okanye ngaphezulu amakhadi enethiwekhi, izixhobo zesandi, izixhobo zomzimba ze-USB okanye ii-PCI, njalo njalo. Imithombo yeendaba yokufaka inokuba yeyasekhaya, ekude, epapashwe kusetyenziswa iprotocol yenkqubo yeFayile yeNethiwekhi yeNFS, i-HTTP, i-FTP. njl.
• iklone-isixhobo somgca wokuyalela ukuhambisa oomatshini abakhoyo ngoku kusetyenziswa ithala leencwadi lolawulo "Libvirt". Ngokusisiseko khuphela umfanekiso womatshini obonakalayo kwaye wenze undwendwe olutsha- undwendwe ngoqwalaselo olufanayo lwezixhobo. Izinto zeHardware ezifuna ukwahluka, umzekelo idilesi yehardware yekhadi lenethiwekhi, iya kuhlaziywa ukunqanda ukungqubana okanye ingxolo phakathi kwendala kunye entsha undwendwe.

umbukeli-wobuchule

Esi sixhobo sifakwe xa usenza ifayile ye umphathi we-virt. umbukeli-wobuchule yiphakheji eyahlukileyo.

• umbukeli-wobuchule: isivumela ukuba sibonise i-graphical console, nge-VNC okanye nge-SPICE, yomatshini othile obonakalayo, nokuba ubekwe ekuhlaleni okanye ukude. Sinokubhekisa kuyo undwendwe esifuna ukuyibonisa ngegama layo, i-ID, okanye i-UUID. Ukuba umatshini obonakalayo awusebenzi, umboniseli uya kulinda ukuba uqalise.

Eminye imiyalelo ye- "virt-" enokufakwa kwiiphakheji ezahlukeneyo

• izinto ezilungileyo- Ingqokelela yezixhobo ezinxulumene nokwenza ubuchule. Kuquka iplagi ye «Munin«, Kwaye iskripthi sokuguqula oomatshini ababonakalayo benziwe ngeVMware Workstation okanye iVMware Server, kwifomathi esetyenziswe kwiQemu-KVM.
• phezulu-phezulu: Ibonisa ubalo manani lweendawo ezilinganiselweyo. Uhlobo lwe umphezulu o phezulu koomatshini ababonakalayo

Ifakwe nge qemu-utils

Nangona igama lezi zixhobo lingaqali amandla-Ngokuqinisekileyo kuya kufuneka sisebenzise ezinye zazo ngexesha elithile, ngakumbi le inxulumene nemifanekiso yeediski zoomatshini ababonakalayo.

Singabacela emva kokufaka ifayile ye- Iqonga lokwenyani leQemu-Kvm, njengoko kubonisiwe kwinqaku elandulelayo. Ukuba sifuna ukwazi ukuba yeyiphi imiyalelo yephakheji eshiyekileyo qemu-izixhoboKufuneka sisebenze nje:

buzz @ sysadmin: ~ $ sudo dpkg -L qemu-izixhobo | grep / bin
/ usr / bin
/ usr / bin / qemu-img
/ usr / bin / qemu-nbd / usr / bin / qemu-io

Ukuba endaweni yokucalucalulo / bin ngekhe sayenzela / sbin, siya kufumana esinye isiphumo esisishiya siqwalasele.

• qemu-img: isivumela ukuba senze, kwaye siguqule kunye / okanye sitshintshe imifanekiso yeediski ezingasebenziyo okanye ezingasebenziyo Ngaphandle komgca.
  Siyacebisa sebenzisa umyalelo indoda qemu-img. Siza kugxininisa kuphela ukuba AKUFANELE sisebenzise lo myalelo ku lungisa nayiphi na imifanekiso esetyenziswa ngawo nawuphi na umatshini obonakalayo okanye nayiphi na enye inkqubo, kuba inokuwutshabalalisa umfanekiso. Kananjalo akufuneki ukuba siqwalasele idatha yomfanekiso okwinkqubo yokulungiswa, njengoko sinokufumana ukungangqinelani kwimeko yawo..

Imizekelo yokusetyenziswa kweminye yemiyalelo

Umkhosi-ungqinisiso

buzz @ sysadmin: ~ $ ide-host-validate 
  I-QEMU: Ukujonga ubuchwephesha be-hardware: I-PASS QEMU: Ukujonga isixhobo / i-dev / kvm: I-PASS QEMU: Ukujonga isixhobo / i-dev / vhost-net: ISILUMKISO (Layisha imodyuli ye 'vhost_net' ukuphucula ukusebenza kwe-network ye-virtio) QEMU: Ukujonga isixhobo / dev / net / tun: PASS LXC: Ukujonga iLinux> = 2.6.26: PASS

buzz @ sysadmin: ~ $ sudo ide-host-validate 
[Sudo] iphasiwedi ye-buzz: QEMU: Ukujonga ubuchwephesha be-hardware: I-PASS QEMU: Ukujonga isixhobo / i-dev / kvm: I-PASS QEMU: Ukujonga isixhobo / i-dev / vhost-net: I-PASS QEMU: Ukujonga isixhobo / i-dev / net / tun : PASS LXC: Jonga iLinux> = 2.6.26: PASS

Qiniseka-xml

buzz @ sysadmin: ~ $ sudo ide-xml -qinisekisa /etc/libvirt/qemu/dns.xml 
/etc/libvirt/qemu/dns.xml iyasebenza

buzz @ sysadmin: ~ $ sudo virt-xml-validate /etc/libvirt/qemu/networks/default.xml
/etc/libvirt/qemu/networks/default.xml iyasebenza

qemu-img

buzz @ sysadmin: ~ $ qemu-img jonga /tera/vmware/omicron/omicron.vmdk
Akukho mpazamo zafunyanwa emfanekisweni.

buzz @ sysadmin: ~ $ qemu-img info /tera/vmware/omicron/omicron.vmdk
umfanekiso: /tera/vmware/omicron/omicron.vmdk
ifomathi yefayile: ubungakanani be-vmdk eyi-virtual: 20G (21474836480 bytes) ubungakanani bediski: 3.6G cluster_size: 65536 Fomatha ulwazi oluthile: cid: 1473577509 umzali vmware / omicron / omicron.vmdk ubungakanani beqoqo: 4294967295 ifomathi:

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/omicron.raw 
umfanekiso: /tera/vms/omicron.raw
Ifomathi yefayile: ubungakanani obungenambonakalo eluhlaza: 20G (21474836480 byte) ubungakanani bediski: 3.4G

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/miweb.qcow2
umfanekiso: /tera/vms/miweb.qcow2
ifomathi yefayile: ubungakanani boqobo lwe-qcow2: 10G (10737418240 byte) ubungakanani bediski: 4.5G cluster_size: 65536 Fomatha ulwazi oluthile:

buzz @ sysadmin: ~ $ sudo qemu-img guqula -p /tera/vms/omicron.raw -O qcow2 /tera/vms/omicron.qcow2
    (27.56 / 100%)

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/omicron.qcow2 
umfanekiso: /tera/vms/omicron.qcow2
ifomathi yefayile: ubungakanani boqobo lwe-qcow2: 20G (21474836480 byte) ubungakanani bediski: 3.5G cluster_size: 65536 Fomatha ulwazi oluthile:

buzz @ sysadmin: ~ $ sudo qemu-img yenza -f qcow2 /tera/vms/hyp2.qcow2 20G
Ukufomatha '/tera/vms/hyp2.qcow2', fmt = qcow2 size = 21474836480 encryption = off cluster_size = 65536 lazy_refcounts = off 

Buzz @ sysadmin: ~ $ sudo qemu-img ulwazi /tera/vms/hyp2.qcow2
umfanekiso: /tera/vms/hyp2.qcow2
ifomathi yefayile: ubungakanani boqobo lwe-qcow2: 20G (21474836480 byte) ubungakanani bediski: 196K cluster_size: 65536 Fomatha ulwazi oluthile:

inyani-xml

Kuqala, senza icwecwe elitsha:

buzz @ sysadmin: ~ $ sudo qemu-img yenza -f qcow2 /tera/vms/dns2.qcow2 10G

Emva koko siyayijoyina kwi-domain "dns" ekhoyo:

buzz @ sysadmin: ~ $ virt-xml -connect qemu: /// system dns -add-device -disk /tera/vms/dns2.qcow2 -confirm
--- XML ​​yoqobo +++ I-XML etshintshiweyo @@ -128,5 +128,10 @@  + + + + +

Chaza 'i-dns' ngeXML etshintshiweyo? (y / n): y
Idomain 'dns' ichazwe ngempumelelo.

Ekupheleni kwenqaku sinika ulwakhiwo olupheleleyo lwefayile entsha /etc/libvirt/qemu/dns.xml.

ukuguqula ubungakanani

Masiguqule umatshini obonakalayo owenziwe kusetyenziswa i Indawo yokusebenzela yeVMware Ngakwifomathi libvirt, kodwa hayi ngaphambi kokuchaza ukuba ifomathi yediski enzima eguqulweyo iqkq2, kunye nokuba umfanekiso omtsha womatshini wenziwe kwindawo ephambili / tera / vms. Sifuna ukuba imveliso ikhuphe ngokucacileyo njengoko kunokwenzeka, sisebenzisa ukhetho -d.

Buzz @ sysadmin: ~ $ Isudo-guqula -d / tera / vmware / miweb / -ifomathi yedisk qcow2 -ukumisela / tera / vms

Emva koko, umbonisi-mbonisi unxibelelana ngokuzenzekelayo noNdwendwe olusandula ukuguqulwa, kwaye siyayibona yonke inkqubo yokuqalisa.

iklone

Masenze umatshini oqinisekileyo «dns":

Buzz @ sysadmin: ~ $ i-ide-clone -dibanisa qemu: /// inkqubo -o dns -uto-clone
Ukunikezela 'i-dns-clone.qcow2' | I-10 GB 00: 20 yabela 'dns2-clone.qcow2' | I-10 GB 00:01     

I-clone 'dns-clone' yenziwe ngempumelelo.

Sijonga ukusebenzisa umyalelo umtshanaOlu luphawu lwenqaku elilandelayo:

buzz @ sysadmin: ~ $ sudo uluhlu lwe-virsh
 I-Id Igama likaRhulumente -------------------------------------------- -----

buzz @ sysadmin: ~ $ sudo uluhlu lwe-virsh -all
 I-Id Igama likaRhulumente ----------------------------------------------- ----- - i-dns ivaliwe- i-dns-clone ivaliwe- i-miweb ivaliwe

buzz @ sysadmin: ~ $ sudo virsh qala i-dns-clone
Idomain dns-clone iqalile

buzz @ sysadmin: ~ $ ide-viewer -connect qemu: /// inkqubo dns-clone

ukufaka-ukufaka

Sifuna ukwenza umatshini obonakalayo ogama lingu «WordPress»Ukusingatha indawo ye I-Intranet yoShishino. Ayizukupapashwa kwi-Intanethi. Ukuba inee-megabyte ezili-1024 ze-RAM, idiski enzima engama-80 e-gigabytes yokukhula okunamandla, okusekwe kwi-Debian Jessie, kwaye iqhagamshelwe kwinethiwekhi «Engagqibekanga«.

Ukwenza ubomi bethu bube lula, siqala ngokwenza umfanekiso wediski sisebenzisa qemu-img:

buzz @ sysadmin: ~ $ sudo qemu-img yenza -f qcow2 /tera/vms/wordpress.qcow2 80G
Ukufomatha '/tera/vms/wordpress.qcow2', fmt = qcow2 ubungakanani = 85899345920 encryption = off cluster_size = 65536 lazy_refcounts = off

Emva koko, senza umatshini kwaye siqale inkqubo yofakelo:

buzz @ sysadmin: ~ $ Sudo-install -connect qemu: /// system -virt-type = kvm \
Igama -epresspress -ram 1024 -vcpus = 1
-Idisk /tera/vms/wordpress.qcow2 \
--cdrom /home/buzz/isos/Linux/debian-8/debian-8.0.0-amd64-CD-1.iso \
Uhlobo lwe-linux -network network = emiselweyo
--inkcazelo wordpress.desdelinux.umlandeli

phezulu-phezulu

buzz @ sysadmin: ~ $ ide-top -connect qemu: /// inkqubo
i-virt-top 15: 39: 21 - x86_64 2 / 2CPU 1600MHz 3863MB 2 domains, 2 active, 2 running, 0 sleep, 0 paused, 0 inactive D: 0 O: 0 X: 0 CPU: 0.7% Mem: 768 MB ( 768 MB ziindwendwe) ID S RDRQ WRRQ RXBY TXBY% CPU% MEM IXESHA LEGAMA 22 R 0 0 104 0 0.3 6.0 0: 11.49 dns 21 R 0 0 104 0 0.3 13.0 0: 13.42 miweb

Ulwakhiwo lwefayile ye-dns.xml

Ekuqaleni kunokubonakala kunzima ukuqonda ubume benkcazo yefayile yomatshini obonakalayo okanye undwendwe, njengoko iqondwa yi-Qemu-KVM hypervisor kunye neelayibrari ezinxulumene nayo njenge libvirt. Ifayile ikwifomathi esemgangathweni.XML. Yakhiwe ziibhloko zenkcazo, eziqulathwe ngaphakathi kwebhloko ephambili «thambeka«.

....

Ngaphakathi kwebhloko siya kufumana iifayile ze- iinkcazo zomatshini opheleleyo:

• igama leqela
• uuid weqela
• isixa se-RAM
• inani labaprosesa
• uhlobo lwenkqubo yokusebenza kunye noyilo lwayo. isixhobo se ukuqalelisa.
• Iimpawu ezixhasa njenge-ACPI "uLawulo oluzenzekelayo lwaMandla oMbane", i-APM "yoLawulo lwaMandla oZenzekelayo", kunye nePAE.
• Iimodeli ze-CPU kunye neempawu zazo
• useto lwewotshi: nokuba yi-UTC "Ukudityaniswa kwexesha eliManyeneyo" okanye hayi.
• impendulo kwimicimbi efana nokucima, ukuqala ngokutsha, okanye inkqubo yokuwa
• ukuba iNtloko "yoLawulo lwaMandla" ine "ukunqumamisa ukubhala kwimemori" kwaye "ukunqumamisa ukubhala kwihard disk" imicimbi yenziwe
• Uhlobo lwe-emulator yezixhobo ezahlukeneyo okanye Izixhobo ze-KVM
• yazo zonke iidrive hard: umqhubi, uhlobo lwediski, indlela yefayile yomfanekiso, isixhobo ekujoliswe kuso, uhlobo lwebhasi, islot «slot»I-Pci edityaniswe kuyo, njl., Kuxhomekeka kwidiski ebonakalayo: IDE, SATA, SCSI, USB okanye Virtio.
• izixhobo ezibonakalayo njengeCDR
• inani nohlobo lwezihlanganisi ze-USB
• pci slot yediski ye-IDE
• isinxibelelanisi se serial sonxibelelwano
• Isinxibelelanisi esifanayo sabashicileli
• amakhadi enethiwekhi anedilesi eyahlukileyo ye-MAC, uhlobo lwekhadi lenethiwekhi, apho ipc slot idityaniswe kuyo, kwaye yeyiphi inethiwekhi enokuthi iqhagamshele kuyo
• pty uthotho lweziqulatho
• izixhobo zokufaka ezifana nephedi «ipilisi"Ikhibhodi yemouse"impuku", njl.
• ikhadi levidiyo kunye ne-RAM, uhlobo, imodeli, islot, ibhasi, njl.
• kunye nenye ende ende

Ngamafutshane, iLa Mar Océana yeenkcazo kunye nezixhobo eziyimfuneko kwaye zixhaswe yi-Qemu-KVM hypervisor kunye neelayibrari ezinxulumene nayo, ukuze ube nomatshini osebenza ngokugqibeleleyo ngokungathi ngumatshini wokwenyani.

Buzz @ sysadmin: ~ $ sudo ikati /etc/libvirt/qemu/dns.xml 
<!--
WARNING: THIS IS AN AUTO-GENERATED FILE.  UTSHINTSHO KUYO KUSENOKWENZEKA UKUBA UBHALISWE ULAHLEKE.  Utshintsho kulungelelwaniso lwe-xml kufuneka lwenziwe kusetyenziswa: virsh edit dns or other application using the libvirt API.

Ukuhanjiswa okuzayo

• Umyalelo wentsholongwane
• Ulawulo olukude lwee-hypervisors kunye noomatshini ababonakalayo besebenzisa i-SSH

Khumbula ukuba oku kuya kuba luthotho lwamanqaku ngu Iinethiwekhi zekhompyuter zee-SMEs. Siza kukulinda!