Virtualization | Записки системного администратора

Архивы рубрики ‘Virtualization’

Установка и настройка LXC на Centos7

Октябрь 25th, 2016

Evgeniy Kamenev

1.Установка LXС и необходимых утилит Установка EPEL-репозитария

# yum -y install epel-release

1	# yum -y install epel-release

Установка LXC

# yum install bridge-utils debootstrap lxc lxc-templates

1	# yum install bridge-utils debootstrap lxc lxc-templates

Проверка наличия и расположения cgroup

# mount -l | grep cgroup

1	# mount -l \| grep cgroup

tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,mode=755)
cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)
cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct,cpu)
cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)
cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)
cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,hugetlb)
cgroup on /sys/fs/cgroup/net_cls type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls)
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)
cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event)
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)

tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,mode=755)

cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)

cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)

cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct,cpu)

cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)

cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)

cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,hugetlb)

cgroup on /sys/fs/cgroup/net_cls type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls)

cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)

cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event)

cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)

Проверка параметров LXC/корректность установки LXC

# lxc-checkconfig

1	# lxc-checkconfig

Kernel configuration not found at /proc/config.gz; searching...
Kernel configuration found at /boot/config-3.10.0-327.36.2.el7.x86_64
--- Namespaces ---
Namespaces: enabled
Utsname namespace: enabled
Ipc namespace: enabled
Pid namespace: enabled
User namespace: enabled
Network namespace: enabled
Multiple /dev/pts instances: enabled

--- Control groups ---
Cgroup: enabled
Cgroup clone_children flag: enabled
Cgroup device: enabled
Cgroup sched: enabled
Cgroup cpu account: enabled
Cgroup memory controller: enabled
Cgroup cpuset: enabled

--- Misc ---
Veth pair device: enabled
Macvlan: enabled
Vlan: enabled
Bridges: enabled
Advanced netfilter: enabled
CONFIG_NF_NAT_IPV4: enabled
CONFIG_NF_NAT_IPV6: enabled
CONFIG_IP_NF_TARGET_MASQUERADE: enabled
CONFIG_IP6_NF_TARGET_MASQUERADE: enabled
CONFIG_NETFILTER_XT_TARGET_CHECKSUM: enabled

--- Checkpoint/Restore ---
checkpoint restore: enabled
CONFIG_FHANDLE: enabled
CONFIG_EVENTFD: enabled
CONFIG_EPOLL: enabled
CONFIG_UNIX_DIAG: enabled
CONFIG_INET_DIAG: enabled
CONFIG_PACKET_DIAG: enabled
CONFIG_NETLINK_DIAG: enabled
File capabilities: enabled

Note : Before booting a new kernel, you can check its configuration
usage : CONFIG=/path/to/config /usr/bin/lxc-checkconfig

Kernel configuration not found at /proc/config.gz; searching...

Kernel configuration found at /boot/config-3.10.0-327.36.2.el7.x86_64

--- Namespaces ---

Namespaces: enabled

Utsname namespace: enabled

Ipc namespace: enabled

Pid namespace: enabled

User namespace: enabled

Network namespace: enabled

Multiple /dev/pts instances: enabled

--- Control groups ---

Cgroup: enabled

Cgroup clone_children flag: enabled

Cgroup device: enabled

Cgroup sched: enabled

Cgroup cpu account: enabled

Cgroup memory controller: enabled

Cgroup cpuset: enabled

--- Misc ---

Veth pair device: enabled

Macvlan: enabled

Vlan: enabled

Bridges: enabled

Advanced netfilter: enabled

CONFIG_NF_NAT_IPV4: enabled

CONFIG_NF_NAT_IPV6: enabled

CONFIG_IP_NF_TARGET_MASQUERADE: enabled

CONFIG_IP6_NF_TARGET_MASQUERADE: enabled

CONFIG_NETFILTER_XT_TARGET_CHECKSUM: enabled

--- Checkpoint/Restore ---

checkpoint restore: enabled

CONFIG_FHANDLE: enabled

CONFIG_EVENTFD: enabled

CONFIG_EPOLL: enabled

CONFIG_UNIX_DIAG: enabled

CONFIG_INET_DIAG: enabled

CONFIG_PACKET_DIAG: enabled

CONFIG_NETLINK_DIAG: enabled

File capabilities: enabled

Note : Before booting a new kernel, you can check its configuration

usage : CONFIG=/path/to/config /usr/bin/lxc-checkconfig

Просмотр шаблонов, которые могут быть использованы при создании новых контейнеров для различных дистрибутивов и их разновидностей

# rpm -ql lxc-templates | grep templates

1	# rpm -ql lxc-templates \| grep templates

/usr/share/lxc/templates/lxc-alpine
/usr/share/lxc/templates/lxc-altlinux
/usr/share/lxc/templates/lxc-archlinux
/usr/share/lxc/templates/lxc-busybox
/usr/share/lxc/templates/lxc-centos
/usr/share/lxc/templates/lxc-cirros
/usr/share/lxc/templates/lxc-debian
/usr/share/lxc/templates/lxc-download
/usr/share/lxc/templates/lxc-fedora
/usr/share/lxc/templates/lxc-gentoo
/usr/share/lxc/templates/lxc-openmandriva
/usr/share/lxc/templates/lxc-opensuse
/usr/share/lxc/templates/lxc-oracle
/usr/share/lxc/templates/lxc-plamo
/usr/share/lxc/templates/lxc-sshd
/usr/share/lxc/templates/lxc-ubuntu
/usr/share/lxc/templates/lxc-ubuntu-cloud

/usr/share/lxc/templates/lxc-alpine

/usr/share/lxc/templates/lxc-altlinux

/usr/share/lxc/templates/lxc-archlinux

/usr/share/lxc/templates/lxc-busybox

/usr/share/lxc/templates/lxc-centos

/usr/share/lxc/templates/lxc-cirros

/usr/share/lxc/templates/lxc-debian

/usr/share/lxc/templates/lxc-download

/usr/share/lxc/templates/lxc-fedora

/usr/share/lxc/templates/lxc-gentoo

/usr/share/lxc/templates/lxc-openmandriva

/usr/share/lxc/templates/lxc-opensuse

/usr/share/lxc/templates/lxc-oracle

/usr/share/lxc/templates/lxc-plamo

/usr/share/lxc/templates/lxc-sshd

/usr/share/lxc/templates/lxc-ubuntu

/usr/share/lxc/templates/lxc-ubuntu-cloud

Запск и проверка состояния LXC

# systemctl start lxc

1	# systemctl start lxc

# systemctl status lxc

1	# systemctl status lxc

● lxc.service - LXC Container Initialization and Autoboot Code
   Loaded: loaded (/usr/lib/systemd/system/lxc.service; disabled; vendor preset: disabled)
   Active: active (exited) since Mon 2016-10-17 22:29:34 EEST; 16s ago
  Process: 1258 ExecStart=/usr/libexec/lxc/lxc-autostart-helper start (code=exited, status=0/SUCCESS)
  Process: 1250 ExecStartPre=/usr/libexec/lxc/lxc-devsetup (code=exited, status=0/SUCCESS)
 Main PID: 1258 (code=exited, status=0/SUCCESS)

Oct 17 22:29:04 centos71.kamaok.org.ua systemd[1]: Starting LXC Container Initialization and Autoboot Code...
Oct 17 22:29:04 centos71.kamaok.org.ua lxc-devsetup[1250]: Creating /dev/.lxc
Oct 17 22:29:04 centos71.kamaok.org.ua lxc-devsetup[1250]: /dev is devtmpfs
Oct 17 22:29:04 centos71.kamaok.org.ua lxc-devsetup[1250]: Creating /dev/.lxc/user
Oct 17 22:29:34 centos71.kamaok.org.ua lxc-autostart-helper[1258]: Starting LXC autoboot containers:  [  OK  ]
Oct 17 22:29:34 centos71.kamaok.org.ua systemd[1]: Started LXC Container Initialization and Autoboot Code.

● lxc.service - LXC Container Initialization and Autoboot Code

Loaded: loaded (/usr/lib/systemd/system/lxc.service; disabled; vendor preset: disabled)

Active: active (exited) since Mon 2016-10-17 22:29:34 EEST; 16s ago

Process: 1258 ExecStart=/usr/libexec/lxc/lxc-autostart-helper start (code=exited, status=0/SUCCESS)

Process: 1250 ExecStartPre=/usr/libexec/lxc/lxc-devsetup (code=exited, status=0/SUCCESS)

Main PID: 1258 (code=exited, status=0/SUCCESS)

Oct 17 22:29:04 centos71.kamaok.org.ua systemd[1]: Starting LXC Container Initialization and Autoboot Code...

Oct 17 22:29:04 centos71.kamaok.org.ua lxc-devsetup[1250]: Creating /dev/.lxc

Oct 17 22:29:04 centos71.kamaok.org.ua lxc-devsetup[1250]: /dev is devtmpfs

Oct 17 22:29:04 centos71.kamaok.org.ua lxc-devsetup[1250]: Creating /dev/.lxc/user

Oct 17 22:29:34 centos71.kamaok.org.ua lxc-autostart-helper[1258]: Starting LXC autoboot containers: [ OK ]

Oct 17 22:29:34 centos71.kamaok.org.ua systemd[1]: Started LXC Container Initialization and Autoboot Code.

Добавление в автозагрузку LXC […]

Опубликовано в рубрике Centos, Virtualization

Метки: container, LXC, virtualization

Комментарии отключены

Установка и использование Docker на Centos7

Октябрь 24th, 2016

Evgeniy Kamenev

1.Установка Docker Для установки Docker требуется 64-х разрядная операционная система и ядро версии 3.10 и выше.

# uname -r

1	# uname -r

3.10.0-327.36.2.el7.x86_64

1	3.10.0-327.36.2.el7.x86_64

# cat /etc/redhat-release

1	# cat /etc/redhat-release

CentOS Linux release 7.2.1511 (Core)

1	CentOS Linux release 7.2.1511 (Core)

Обновим пакеты

# yum update

1	# yum update

Добавляем репозитарий Docker

# tee /etc/yum.repos.d/docker.repo <<-'EOF'

1	# tee /etc/yum.repos.d/docker.repo <<-'EOF'

[dockerrepo]
name=Docker Repository
baseurl=https://yum.dockerproject.org/repo/main/centos/7/
enabled=1
gpgcheck=1
gpgkey=https://yum.dockerproject.org/gpg
EOF

[dockerrepo]

name=Docker Repository

baseurl=https://yum.dockerproject.org/repo/main/centos/7/

enabled=1

gpgcheck=1

gpgkey=https://yum.dockerproject.org/gpg

EOF

Непосредственно установим Docker

# yum install docker-engine

1	# yum install docker-engine

Добавление Docker в автозагрузку

# systemctl enable docker

1	# systemctl enable docker

Запуск Docker

# systemctl start docker

1	# systemctl start docker

Проверка состояния Docker

# systemctl status docker

1	# systemctl status docker

● docker.service - Docker Application Container Engine
   Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2016-10-20 23:10:36 EEST; 6s ago
     Docs: https://docs.docker.com
 Main PID: 1366 (dockerd)
   Memory: 18.5M
   CGroup: /system.slice/docker.service
           ├─1366 /usr/bin/dockerd
           └─1370 docker-containerd -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --shim docker-containerd-shim --metrics-interval=0 --st...

Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.240268299+03:00" level=warning msg="mountpoint for pids not found"
Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.240569857+03:00" level=info msg="Loading containers: start."
Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.530700626+03:00" level=warning msg="Running modprobe bridge br_netfilter f...
Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.718801030+03:00" level=info msg="Firewalld running: false"
Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.303073111+03:00" level=info msg="Default bridge (docker0) is assig...address"
Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.430876877+03:00" level=info msg="Loading containers: done."
Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.431063740+03:00" level=info msg="Daemon has completed initialization"
Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.431087154+03:00" level=info msg="Docker daemon" commit=bb80604 gra...n=1.12.2
Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.457437494+03:00" level=info msg="API listen on /var/run/docker.sock"
Oct 20 23:10:36 centos71.kamaok.org.ua systemd[1]: Started Docker Application Container Engine.
Hint: Some lines were ellipsized, use -l to show in full.

● docker.service - Docker Application Container Engine

Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)

Active: active (running) since Thu 2016-10-20 23:10:36 EEST; 6s ago

Docs: https://docs.docker.com

Main PID: 1366 (dockerd)

Memory: 18.5M

CGroup: /system.slice/docker.service

├─1366 /usr/bin/dockerd

└─1370 docker-containerd -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --shim docker-containerd-shim --metrics-interval=0 --st...

Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.240268299+03:00" level=warning msg="mountpoint for pids not found"

Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.240569857+03:00" level=info msg="Loading containers: start."

Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.530700626+03:00" level=warning msg="Running modprobe bridge br_netfilter f...

Oct 20 23:10:35 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:35.718801030+03:00" level=info msg="Firewalld running: false"

Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.303073111+03:00" level=info msg="Default bridge (docker0) is assig...address"

Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.430876877+03:00" level=info msg="Loading containers: done."

Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.431063740+03:00" level=info msg="Daemon has completed initialization"

Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.431087154+03:00" level=info msg="Docker daemon" commit=bb80604 gra...n=1.12.2

Oct 20 23:10:36 centos71.kamaok.org.ua dockerd[1366]: time="2016-10-20T23:10:36.457437494+03:00" level=info msg="API listen on /var/run/docker.sock"

Oct 20 23:10:36 centos71.kamaok.org.ua systemd[1]: Started Docker Application Container Engine.

Hint: Some lines were ellipsized, use -l to show in full.

Просмотр Docker компонентов и их версий

# docker version

1	# docker version

Client:
 Version:      1.12.2
 API version:  1.24
 Go version:   go1.6.3
 Git commit:   bb80604
 Built:
 OS/Arch:      linux/amd64

Server:
 Version:      1.12.2
 API version:  1.24
 Go version:   go1.6.3
 Git commit:   bb80604
 Built:
 OS/Arch:      linux/amd64

Client:

Version: 1.12.2

API version: 1.24

Go version: go1.6.3

Git commit: bb80604

Built:

OS/Arch: linux/amd64

Server:

Version: 1.12.2

API version: 1.24

Go version: go1.6.3

Git commit: bb80604

Built:

OS/Arch: linux/amd64

Просмотр размещения […]

Опубликовано в рубрике Containerization, DevOps, Virtualization

Метки: docker

Комментарии отключены

Установка и настройка OpenVZ на Centos 6

Ноябрь 10th, 2013

Evgeniy Kamenev

1.Установка OpenVZ

# cd /etc/yum.repos.d/

1	# cd /etc/yum.repos.d/

# wget http://download.openvz.org/openvz.repo

1	# wget http://download.openvz.org/openvz.repo

# rpm --import http://download.openvz.org/RPM-GPG-Key-OpenVZ

1	# rpm --import http://download.openvz.org/RPM-GPG-Key-OpenVZ

# yum repolist

1	# yum repolist

Проверяем,что по умолчанию подключается репозитарий для Centos 6 (а не Centos 5)

# nano openvz.repo

1	# nano openvz.repo

[openvz-utils]
name=OpenVZ user-space utilities
mirrorlist=http://download.openvz.org/mirrors-current
enabled=1
gpgcheck=1
gpgkey=http://download.openvz.org/RPM-GPG-Key-OpenVZ

## RHEL6-based OpenVZ kernels

[openvz-kernel-rhel6]
name=OpenVZ RHEL6-based stable kernels
mirrorlist=http://download.openvz.org/kernel/mirrors-rhel6-2.6.32
enabled=1
gpgcheck=1
gpgkey=http://download.openvz.org/RPM-GPG-Key-OpenVZ
exclude=vzkernel-firmware

[openvz-utils]

name=OpenVZ user-space utilities

mirrorlist=http://download.openvz.org/mirrors-current

enabled=1

gpgcheck=1

gpgkey=http://download.openvz.org/RPM-GPG-Key-OpenVZ

## RHEL6-based OpenVZ kernels

[openvz-kernel-rhel6]

name=OpenVZ RHEL6-based stable kernels

mirrorlist=http://download.openvz.org/kernel/mirrors-rhel6-2.6.32

enabled=1

gpgcheck=1

gpgkey=http://download.openvz.org/RPM-GPG-Key-OpenVZ

exclude=vzkernel-firmware

Просмотр списка доступных ядер

# yum search vzkernel

1	# yum search vzkernel

Установка ядра согласно битности операционки

# yum  install vzkernel.i686

1	# yum install vzkernel.i686

# для 32 битных систем

# yum  install vzkernel.x86_64

1	# yum install vzkernel.x86_64

# для 64 битных систем Проверка загрузчика на предмет загрузки по умолчанию ядра OpenVZ вместо штатного

# nano /boot/grub/grub.conf

1	# nano /boot/grub/grub.conf

[…]

Опубликовано в рубрике Centos, Virtualization

Метки: OpenVZ

Комментарии отключены

Использование LVM-тома для гостевой виртуальной машины с KVM-виртуализацией(конвертация из img-файла)

Ноябрь 10th, 2013

Evgeniy Kamenev

1.Просмотр существующих дисков в системе [root@centos64kvm ~]# fdisk -l Disk /dev/sda: 37.6 GB, 37580963840 bytes 255 heads, 63 sectors/track, 4568 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x00034192 Device Boot Start […]

Опубликовано в рубрике Centos, Linux/Unix General, Virtualization, Virtualization

Метки: KVM, LVM

Комментарии отключены

Установка и настройка KVM на Centos6

Ноябрь 10th, 2013

Evgeniy Kamenev

Для RHEL6, CentOS6 kvm будет работать для x86_64 версии ОС Проверка поддержки процессором виртуализации

# egrep '(svm|vmx)' /proc/cpuinfo

1	# egrep '(svm\|vmx)' /proc/cpuinfo

Пустой вывод у данной команды, означает отсутствие поддержки аппаратной виртуализации. Если же команда произвела вывод флагов процессора, есть смысл начать установку kvm Установка и запуск

# yum install kvm virt-manager libvirt

1	# yum install kvm virt-manager libvirt

# /etc/init.d/libvirtd start

1	# /etc/init.d/libvirtd start

Проверка загрузки модулей kvm:

# lsmod | grep kvm

1	# lsmod \| grep kvm

kvm_intel              54394  0
kvm                   317504  1 kvm_intel

1 2	kvm_intel 54394 0 kvm 317504 1 kvm_intel

Установка необходимых компоненты:

# yum install bridge-utils

1	# yum install bridge-utils

Настройка сетевого интерфейса […]

Опубликовано в рубрике Centos, Virtualization

Метки: KVM

Комментарии отключены

Архивы рубрики ‘Virtualization’

Установка и настройка LXC на Centos7

Установка и использование Docker на Centos7

Установка и настройка OpenVZ на Centos 6

Использование LVM-тома для гостевой виртуальной машины с KVM-виртуализацией(конвертация из img-файла)

Установка и настройка KVM на Centos6

Страницы

Свежие записи

Архивы

Рубрики

Админ-панель