Imiyalo ye-virt ku-Debian - Networking Networking yama-SMB

Inkomba ejwayelekile yochungechunge: Ama-Computer Networks ama-SME: Isingeniso

Isihloko salokhu okuthunyelwe sisho uchungechunge lwemiyalo yekhonsoli eqala ngo- «amandla- « futhi lokho kungasiza ezimweni ezithile. Sizonikeza kuphela incazelo emfushane ngayinye, kanye nezibonelo ezithile zokusetshenziswa. Siyakuphinda lokho: Asikwazi ukubuyisela amabhukwana ahambisana nomyalo ngamunye. Siphakamisa ngokuqinile hlola lawo makhasi ngokusebenza umuntu amandla-umyalo.

• Inhloso enkulu yale ndatshana ukuqhubeka nokukhombisa indawo ebanzi njengamanje eyi-Virtualization kuLinux ngeQemu-KVM Hypervisor. Noma esihlokweni sibhala igama ukusatshalaliswa «Debian«, Izimiso ezijwayelekile ziyasebenza kunoma ikuphi okunye ukusatshalaliswa ngemiyalo ethile yalowo nalowo wabo. Ikakhulukazi lezo ezihlobene nokuseshwa, incazelo nokufakwa kwamaphakeji, phakathi kwabanye.

Ngaphambi kokuqhubeka nokufunda, sincoma ukuvakashelwa i-athikili edlule: I-Qemu-KVM + Umphathi we-Virt ku-Debian - Networking Networking yama-SME.

Uyisebenzisa nini imiyalo?

Ezikhathini eziningi silawula kude iseva yokusekela nge-virtualization nge I-Qemu-KVM ifakiwe, futhi ngasizathu simbe asinayo i-graphical interface ye Umphathi Wemishini Ebonakalayo - Umphathi we-Virt:

• Icala elijwayelekile, lapho singena kuseva ekude kusuka esiteshini seWindows nge- I-PuTTy, noma enye yeziningi ezinye izindlela akhona ukuxhumana nge-SSH neseva ye-Debian GNU / Linux, futhi eyokugcina ayinakho ukusekelwa okufakiwe kwe- «X«, Noma ukusekelwa kwezithombe.
• Simane nje sifuna ukuphatha imishini ebonakalayo kuseva yasendaweni noma eyihlane sisebenzisa imiyalo yekhonsoli.

Kufakwe ngamakhasimende e-libvirt

Ku isihloko esandulele sifaka iphakheji libvirt-umgqomo, futhi njengengxenye yenqubo yafakwa libvirt-amaklayenti. Uma sigijima kukhonsoli:

buzz @ sysadmin: ~ $ sudo dpkg -L libvirt-amaklayenti | grep / bin
/ usr / bin
/ usr / bin / virsh
/ usr / bin / virt-host-ukuqinisekisa
/ usr / bin / virt-login-Shell
/ usr / bin / virt-xml-ukuqinisekisa
/ usr / bin / virt-pki-ukuqinisekisa

• Virsh: uhlelo lwe-virsh luyisixhumi esibonakalayo somsebenzisi sokuphathwa okuphelele kwezizinda zezivakashi - Izivakashi. Isetshenziselwa ukwenza uhlu, ukudala, ukumisa isikhashana, nokuvala izizinda. Lo myalo kufanele ucelwe ngezimvume ze- izimpande. Inezindlela ezimbili zokusebenzisa: kumodi yomyalo nakwimodi yokusebenzisana. Sizonikezela i-athikili elandelayo ku-virsh.
• i-ide-host-iqinisekisa: ithuluzi elivumela ukuqinisekisa ukumiswa kwe-Host - Host, ukuze ikwazi ukuxhasa bonke abashayeli beHypervisor - I-Hypervisor. Ukuthola imiphumela efanele, umyalo kufanele usebenze ngezimvume ze- izimpande.
• i-virt-login-Shell: umyalo wokwenza a igobolondo egcizelele i umsebenzisi ojwayelekile esitsheni I-LXC, ogama lakhe lifana nomsebenzisi oyisebenzisayo. Uma isitsha singasebenzi, umyalo i-virt-login-Shell ngizozama ukukuqala. Lo myalo awunakubuzwa ngezimvume zomsebenzisi izimpande. Ifayela lokumisa elicace bha lolu hlelo /etc/libvirt/virt-login-shell.conf.
• i-ide-xml-iqinisekisa: Qinisekisa amafayela weXML kusuka ku- libvirt ubaqhathanisa nohlelo - i-schema isebenza. Sithola uhlu lwamagama we-schema avumelekile uma sisebenzisa indoda i-virt-xml-validate.
• amandla-pki-aqinisekisa: kusetshenziselwe ukuqinisekisa ukuthi ngabe amafayela we-PKI we libvirt Zilungiselelwe kahle, zombili ohlangothini lweseva ephephile nakwiklayenti elizosebenzisa umthetho olandelwayo wokubethela we-TLS ukufinyelela kude iseva. Ukwenziwa kwayo kuzodingeka uma sinike amandla ukuphatha okukude nge-TLS ne-SSL. Isahluko 22.2 sombhalo Umhlahlandlela Wokusatshalaliswa Kokusebenza kanye Nokuphatha, Kunikezelwe kulesi sixazululo. Siphakamisa ukuthi amanethiwekhi wethu webhizinisi asebenzisa i ukuphathwa okukude nge-SSH, indlela elula nephephe kunazo zonke ye-Business LAN, esizonikezela ngayo i-athikili elandelayo.

Kufakiwe withisb

Esihlokweni esandulele, sifake nephakheji umphathi we-virt. Njengengxenye yaleyo nqubo, iphakethe lafakwa amandla. Uma sifuna ukwazi ukuthi imiphi imiyalo yokugcina equkethe, sisebenzisa:

byzz @ sysadmin: ~ $ sudo dpkg -L i -instinst | grep / bin
/ usr / bin
/ usr / bin / virt-convert
/ usr / bin / virt-isithombe
/ usr / bin / virt-xml
/ usr / bin / virt-install
/ usr / bin / virt-clone

• ukuguqula kahle- umyalo oguqula izincazelo zemishini ebonakalayo zibe amafomethi VMX y I-Ovf kufomethi ye-libvirt yomdabu XML. Ifomethi ye-VMX isetshenziswa kakhulu yifomethi ye- VMware, ngenkathi i-OVF «Vula ifomethi ye-Virtualization»Ingasetshenziswa yinoma yimuphi I-Hypervisor isekele.
• isithombe esihle- Kwakha umshini obonakalayo kusuka kufayela elichaza isithombe ngefomethi ye-XML. Leli thuluzi elithile lizosuswa kuzinguqulo ezizayo ze- amandla, kanjalo Asiphakamisi ukusetshenziswa kwayo.
• amandla-xml: Ivumela ukuhlelwa kwamafayela omdabu weXML asetshenziswa libvirt, usebenzisa izinketho zomugqa womyalo.
• i-virt-installIthuluzi lomugqa womyalo ovumela ukudala imishini emisha ebonakalayo kuma-Hypervisors afana ne-KVM, i-Xen noma i-Linux Containers esebenzisa umtapo wezincwadi wokuphathwa kwe-hypervisor "Libvirt". Leli thuluzi lisekela ukufakwa kokuqhafaza uma sisebenzisa, isibonelo, i- VNC I-Virtual Network Computing, noma Izinongo. Iphinde isekele ngokuphelele imodi ye-console noma yombhalo. Ngokusebenzisa kwayo singakha umshini obonakalayo one-hard drive eyodwa noma eziningi, ikhadi elilodwa noma amaningi wenethiwekhi, amadivayisi womsindo, amadivayisi we-USB noma i-PCI, njalonjalo. Imidiya yokufaka ingaba yendawo, ekude, eshicilelwe kusetshenziswa umthetho olandelwayo we-UNIX NFS Network File System, i-HTTP, i-FTP. njll.
• amandla-clone- Ithuluzi lomugqa womyalo wokuhlanganisa imishini ekhona ekhona usebenzisa umtapo wezincwadi wokuphathwa kwe-hypervisor "Libvirt". Ngokuyisisekelo kopisha isithombe somshini obonakalayo bese udala isihambeli esisha - Guest ngokucushwa okufanayo kwezingxenyekazi zekhompyutha. Izinto zehadiwe ezidinga ukuhlukaniswa, ngokwesibonelo ikheli lehadiwe lekhadi lenethiwekhi, lizobuyekezwa ukugwema ukushayisana noma umsindo phakathi kokudala nokusha Guest.

umbukeli we-virt

Leli thuluzi lifakwa futhi lapho wenza ifayela le- umphathi we-virt. umbukeli we-virt yiphakheji ehlukile.

• umbukeli we-virt: isivumela ukuthi sibonise ikhonsoli yokuqhafaza, nge-VNC noma i-SPICE, yomshini othile obonakalayo, noma ngabe utholakala endaweni noma ukude. Singabhekisa ku Guest esifuna ukuyiveza ngegama layo, i-ID, noma i-UUID. Uma umshini obonakalayo ungasebenzi, isibukeli se-virt sizolinda ukuthi siqale.

Eminye imiyalo ye- "virt-" engafakwa kusuka kumaphakeji ahlukile

• okuhle-okuhle- Iqoqo lamathuluzi ahlobene nokwenza kahle. Kufaka i-plugin ye «Munin«, Nombhalo wokuguqula imishini ebonakalayo eyenziwe nge-VMware Workstation noma i-VMware Server, kufomethi esetshenziswe kuQemu-KVM.
• phezulu-phezulu: Kukhombisa izibalo zezizinda ezibunjiwe. Uhlobo lwe top o htop imishini ebonakalayo

Kufakiwe nge qemu-utils

Yize igama lala mathuluzi lingaqali ubuhle-Impela kuzofanele sisebenzise ezinye zazo ngesikhathi esithile, ikakhulukazi lezo ezihlobene nezithombe zamadiski emishini ebonakalayo.

Singabancenga ngemuva kokufaka ifayela le- Ipulatifomu yokwenza ngekhono iQemu-Kvm, njengoba kukhonjisiwe esihlokweni esandulele. Uma sifuna ukwazi ukuthi imiphi imiyalo iphakethe elisele esinalo qemu-utils, sidinga nje ukugijima:

buzz @ sysadmin: ~ $ sudo dpkg -L qemu-utils | grep / bin
/ usr / bin
/ usr / bin / qemu-img
/ usr / bin / qemu-nbd / usr / bin / qemu-io

Uma esikhundleni sokubandlulula nge / bin besizokwenzela yona / sbin, sizothola omunye umphumela esiwushiya ucabangele wona.

• qemu-img: isivumela ukuthi sakhe, futhi siguqule futhi / noma siguqule izithombe zama-disc ezingasebenzi noma ezingasebenzi Ngaphandle komugqa.
  Siphakamisa sebenzisa umyalo indoda qemu-img. Sizogcizelela kuphela ukuthi AKUFANELE sisebenzise lo myalo ku shintsha noma yisiphi isithombe esisetshenziswa yinoma yimuphi umshini obonakalayo noma enye inqubo, ngoba singasonakalisa isithombe. Futhi akufanele sithinte imininingwane yesithombe esisekuhlelweni lokuguqulwa, njengoba singathola ukungahambelani esimweni saso.

Izibonelo zokusetshenziswa kweminye yemiyalo

i-ide-host-iqinisekisa

buzz @ sysadmin: ~ $ ide-host-validate 
  I-QEMU: Ihlola i-hardware virtualization: I-PASS QEMU: Ihlola i-device / dev / kvm: I-PASS QEMU: Ihlolela i-device / dev / vhost-net: ISEXWAYISO (Layisha imodyuli ye-'vhost_net 'ukwenza ngcono ukusebenza kwe-virtio networking) I-QEMU: Ihlola i-QEMU device / dev / net / tun: PASS LXC: Ukuhlola iLinux> = 2.6.26: PASS

buzz @ sysadmin: ~ $ Sudo-host-validate 
[Sudo] password for buzz: QEMU: Checking for hardware virtualization: PASS QEMU: Checking for device / dev / kvm: PASS QEMU: Checking for device / dev / vhost-net: PASS QEMU: Ukuhlola idivayisi / dev / net / tun : PASS LXC: Ukuhlola iLinux> = 2.6.26: PASS

i-ide-xml-iqinisekisa

buzz @ sysadmin: ~ $ sudo virt-xml-validate /etc/libvirt/qemu/dns.xml 
/etc/libvirt/qemu/dns.xml iyaqinisekisa

buzz @ sysadmin: ~ $ sudo virt-xml-validate /etc/libvirt/qemu/networks/default.xml
/etc/libvirt/qemu/networks/default.xml iyaqinisekisa

qemu-img

buzz @ sysadmin: ~ $ qemu-img hlola /tera/vmware/omicron/omicron.vmdk
Awekho amaphutha atholakele esithombeni.

buzz @ sysadmin: ~ $ qemu-img info /tera/vmware/omicron/omicron.vmdk
isithombe: /tera/vmware/omicron/omicron.vmdk
ifomethi yefayela: usayizi obonakalayo we-vmdk: 20G (21474836480 bytes) usayizi wediski: 3.6G cluster_size: 65536 Fometha imininingwane ethile: cid: 1473577509 parent cid: 4294967295 create type: monolithicSparse extents: [0]: virtual size: 21474836480 filename: / tera / vmware / omicron / omicron.vmdk usayizi weqoqo: 65536 ifomethi:

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/omicron.raw 
isithombe: /tera/vms/omicron.raw
ifomethi yefayela: usayizi we-virtual eluhlaza: 20G (21474836480 bytes) usayizi wediski: 3.4G

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/miweb.qcow2
isithombe: /tera/vms/miweb.qcow2
ifomethi yefayela: usayizi obonakalayo we-qcow2: 10G (10737418240 bytes) usayizi wediski: 4.5G cluster_size: 65536 Fometha imininingwane ethile: compat: 1.1 ukubala okuvilaphayo: amanga

buzz @ sysadmin: ~ $ sudo qemu-img guqula -p /tera/vms/omicron.raw -O qcow2 /tera/vms/omicron.qcow2
    (27.56 / 100%)

buzz @ sysadmin: ~ $ qemu-img info /tera/vms/omicron.qcow2 
isithombe: /tera/vms/omicron.qcow2
ifomethi yefayela: usayizi obonakalayo we-qcow2: 20G (21474836480 bytes) usayizi wediski: 3.5G cluster_size: 65536 Fometha imininingwane ethile: compat: 1.1 ukubala okuvilaphayo: amanga

buzz @ sysadmin: ~ $ sudo qemu-img yakha -f qcow2 /tera/vms/hyp2.qcow2 20G
Ukufometha '/tera/vms/hyp2.qcow2', fmt = qcow2 size = 21474836480 encryption = off cluster_size = 65536 lazy_refcounts = off 

Buzz @ sysadmin: ~ $ sudo qemu-img info /tera/vms/hyp2.qcow2
isithombe: /tera/vms/hyp2.qcow2
ifomethi yefayela: usayizi obonakalayo we-qcow2: 20G (21474836480 bytes) usayizi wediski: 196K cluster_size: 65536 Fometha imininingwane ethile: compat: 1.1 ukubala okuvilaphayo: amanga

amandla-xml

Okokuqala, sakha i-albhamu entsha:

buzz @ sysadmin: ~ $ sudo qemu-img yakha -f qcow2 /tera/vms/dns2.qcow2 10G

Ngemuva kwalokho siyijoyina kusizinda esivele sikhona se- "dns":

buzz @ sysadmin: ~ $ virt-xml --connect qemu: /// system dns --add-device --disk /tera/vms/dns2.qcow2 --confirm
--- XML ​​Yangempela +++ I-XML Eshintshiwe @@ -128,5 +128,10 @@  + + + + +

Chaza 'i-dns' nge-XML eshintshiwe? (y / n): y
Isizinda 'dns' sichazwe ngempumelelo.

Ekupheleni kwendatshana sinikeza ukwakheka okuphelele kwefayela elisanda kuguqulwa /etc/libvirt/qemu/dns.xml.

ukuguqula kahle

Masiguqule umshini obonakalayo owenziwe kusetshenziswa i- Indawo yokusebenza yeVMware maqondana nefomethi libvirt, kodwa hhayi ngaphambi kokucacisa ukuthi ifomethi yediski eguqulwe kanzima iyi- qho2, kanye nokuthi isithombe esisha somshini wangempela senziwe endaweni yokugcina esemqoka / tera / vms. Sifuna nokuthi okukhiphayo komyalo kucace ngangokunokwenzeka, ngakho-ke sisebenzisa inketho -d.

Buzz @ sysadmin: ~ $ I-sudo virt-convert -d / tera / vmware / miweb / --disk-format qcow2 --destination / tera / vms

Ngemuva kwalokho, isibukeli se-virt sixhuma ngokuzenzakalela kusihambeli esisanda kuguqulwa, futhi siyabona yonke inqubo yaso yokuqalisa.

amandla-clone

Ake sihlanganise umshini obonakalayo «dns":

Buzz @ sysadmin: ~ $ i-virt-clone --connect qemu: /// system -o dns --auto-clone
Ukunikezela 'dns-clone.qcow2' | I-10 GB 00: 20 Ukunikezela 'dns2-clone.qcow2' | 10 GB 00:01     

I-clone 'dns-clone' yenziwe ngempumelelo.

Sihlola ukusebenzisa umyalo Virsh, okuyisibonakaliso sendatshana elandelayo:

buzz @ sysadmin: ~ $ sudo virsh uhlu
 Isimo se-Id Name ----------------------------------------------- -----

buzz @ sysadmin: ~ $ sudo virsh uhlu - konke
 Isimo segama lomazisi --------------------------------------------------- ----- - i-dns ivaliwe - i-dns-clone ivaliwe - i-miweb ivalekile

buzz @ sysadmin: ~ $ sudo virsh qala i-dns-clone
I-Dns-clone yesizinda iqalile

buzz @ sysadmin: ~ $ ide-viewer --connect qemu: /// system dns-clone

i-virt-install

Sifuna ukudala umshini obizwa nge- «WordPress»Ukusingatha indawo ye- I-Intranet Yebhizinisi. Ngeke ishicilelwe kwi-Intanethi. Ukuthi inama-megabyte ayi-1024 we-RAM, i-hard disk yama-gigabytes angama-80 okukhula okunamandla, okususelwa kuDebian Jessie, futhi ixhunywe kunethiwekhi «ezenzakalelayo".

Ukwenza izimpilo zethu zibe lula, siqala ngokudala isithombe sediski sisebenzisa qemu-img:

buzz @ sysadmin: ~ $ sudo qemu-img yakha -f qcow2 /tera/vms/wordpress.qcow2 80G
Ukufometha '/tera/vms/wordpress.qcow2', fmt = qcow2 size = 85899345920 encryption = off cluster_size = 65536 lazy_refcounts = off

Okulandelayo, sakha umshini bese siqala inqubo yokufaka:

buzz @ sysadmin: ~ $ Isudo-install -connect qemu: /// system --virt-type = kvm \
- igama le-wordpress -ram 1024 -vcpus = 1
--disk /tera/vms/wordpress.qcow2 \
--cdrom /home/buzz/isos/Linux/debian-8/debian-8.0.0-amd64-CD-1.iso \
--os-type linux --network network = okuzenzakalelayo \
--incazelo wordpress.desdelinux.umlandeli

phezulu-phezulu

buzz @ sysadmin: ~ $ virt-top --connect qemu: /// uhlelo
i-virt-top 15:39:21 - x86_64 2 / 2CPU 1600MHz 3863MB 2 izizinda, 2 iyasebenza, 2 iyasebenza, 0 ilele, 0 imisiwe isikhashana, 0 ayisebenzi D: 0 O: 0 X: 0 CPU: 0.7% Mem: 768 MB ( 768 MB ngezivakashi) ID S RDRQ WRRQ RXBY TXBY% CPU% MEM ISIKHATHI IGAMA 22 R 0 0 104 0 0.3 6.0 0: 11.49 dns 21 R 0 0 104 0 0.3 13.0 0: 13.42 miweb

Ukwakheka kwefayela le-dns.xml

Ekuqaleni kungabonakala kunzima ukuqonda isakhiwo sefayela lencazelo lomshini obonakalayo noma Guest, njengoba kuqondwa umphathi weQemu-KVM kanye nemitapo yolwazi efana nayo libvirt. Ifayela likufomethi ejwayelekile.xml. Yakhiwe ngamabhulokhi encazelo, aqukethwe ngaphakathi kwebhulokhi enkulu «domain".

....

Ngaphakathi kwalelo bhulokhi sizothola i- Izincazelo zawo wonke umshini obonakalayo:

• igama leqembu
• uuid weqembu
• inani le-RAM
• inani lama-processor
• uhlobo lohlelo lokusebenza nokwakhiwa kwalo. idivayisi ye ebhuthini.
• Izici ezisekelayo njenge-ACPI "Automatic Control Power Interface", i-APM "Automatic Power Management", ne-PAE.
• Izinhlobo ze-CPU nezimpawu zazo
• ukusethwa kwewashi: noma ngabe i-UTC "United Time Cordinate" noma cha.
• impendulo kumicimbi efana nokucisha, ukuqala kabusha, noma ukuphahlazeka kwesistimu
• uma u-PM «Power Management» enike amandla imicimbi «ukumisa ukubhala kwimemori» no «ukumisa ukubhala ku-hard disk»
• uhlobo lwe-emulator yamadivayisi ahlukile noma Amadivayisi we-KVM
• yawo wonke amadrayivu anzima: umshayeli, uhlobo lwediski, indlela yefayela lesithombe, idivayisi eqondisiwe, uhlobo lwebhasi, islot «slot»I-Pci exhunywe kuyo, njll., Kuye nge-disk ebonakalayo: IDE, SATA, SCSI, USB noma i-Virtio.
• amadivayisi we-optical njenge-CDR
• inombolo nohlobo lwezixhumi ze-USB
• pci yediski ye-IDE
• isixhumi se-serial sokuxhumana
• isixhumi esifanayo samaphrinta
• amakhadi enethiwekhi anekheli elihlukile le-MAC, uhlobo lwekhadi lenethiwekhi, lapho i-pci slot ixhumeke khona, nokuthi lizoxhumeka kunethiwekhi engakanani
• ama-pty series consoles
• amadivayisi wokufaka njengephedi «tablet", Ikhibhodi yegundane"igundane", njll.
• ikhadi levidiyo ne-RAM, uhlobo, imodeli, islot, ibhasi, njll.
• nenye i-etcetera ende

Ngamafuphi, iLa Mar Océana yezincazelo namadivayisi adingekayo futhi asekelwa yi-Qsim-KVM hypervisor kanye nemitapo yolwazi ehlobene nayo, ukuze ibe nomshini osebenza ngokugcwele ngokungathi ngumshini wangempela.

Buzz @ sysadmin: ~ $ sudo ikati /etc/libvirt/qemu/dns.xml 
<!--
ISEXWAYISO: LELI IFAYELA ELIZENZAKALELA NGOKUZENZAKALELAYO.  IZINGUQUKO KULO KUNGENZEKA UKUTHI ZIBHALWE KANYE NOKULAHLEKA.  Izinguquko kulokhu kumiswa kwe-xml kufanele zenziwe kusetshenziswa: virsh edit dns noma olunye uhlelo lokusebenza kusetshenziswa i-libvirt API.

Ukulethwa okuzayo

• Umyalo we-Virsh
• Ukuphathwa okukude kwama-hypervisors nemishini yabo ebonakalayo besebenzisa i-SSH

Khumbula ukuthi lokhu kuzoba uchungechunge lwezihloko ngu Amanethiwekhi wekhompyutha ama-SME. Sizobe sikulindile!