KVM을 Ovirt (웹 UI)로 관리

What's this?

KVM 관리를 "명령 줄 virsh"나 "Linux X Application VirtManager"가 아니라 일반적으로 브라우저에서 관리하고 싶습니다.
RHEV (RedHat Enterprise Virtuaalizaiton)의 Upstream Ovirt에서 KVM Host를 Ovirt 관리로 설정하기 전의 메모

Install/Setup oVirt Engine (Ovirt Server)

Install/Setup Vdsm-Node (KVM 노드)

Connect Vdsm-Node (KVM node) to oVirt Engine (Ovirt Server)

Install/Setup oVirt Engine (Ovirt Server)

oVirt Engine is the control center of the oVirt environment.

Add repository

# yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release35.rpm

Install pkg

# yum install ovirt-engine

=======================================================================
 Package                Arch      Version    Repository           Size
=======================================================================
Installing:
 ovirt-release35        noarch    005-1      /ovirt-release35    7.3 k

Transaction Summary
=======================================================================
Install  1 Package

구성

# export LANG=en_US.UTF-8

# engine-setup
[ INFO  ] Stage: Initializing
[ INFO  ] Stage: Environment setup
          Configuration files: ['/etc/ovirt-engine-setup.conf.d/10-packaging-jboss.conf', '/etc/ovirt-engine-setup.conf.d/10-packaging.conf']
          Log file: /var/log/ovirt-engine/setup/ovirt-engine-setup-20150723174824-g0sl3w.log
          Version: otopi-1.3.2 (otopi-1.3.2-1.el7.centos)
[ INFO  ] Stage: Environment packages setup
[ INFO  ] Stage: Programs detection
[ INFO  ] Stage: Environment setup
[ INFO  ] Stage: Environment customization

          --== PRODUCT OPTIONS ==--

          Configure Engine on this host (Yes, No) [Yes]:
          Configure WebSocket Proxy on this host (Yes, No) [Yes]: No

          --== PACKAGES ==--

[ INFO  ] Checking for product updates...
[ INFO  ] No product updates found

          --== ALL IN ONE CONFIGURATION ==--


          --== NETWORK CONFIGURATION ==--

          Setup can automatically configure the firewall on this system.
          Note: automatic configuration of the firewall may overwrite current settings.
          Do you want Setup to configure the firewall? (Yes, No) [Yes]:
[ INFO  ] firewalld will be configured as firewall manager.
          Host fully qualified DNS name of this server [<HOSTNAME>]:
[WARNING] Host name <HOSTNAME> has no domain suffix
[WARNING] Failed to resolve <HOSTNAME> using DNS, it can be resolved only locally

          --== DATABASE CONFIGURATION ==--

          Where is the Engine database located? (Local, Remote) [Local]:
          Setup can configure the local postgresql server automatically for the engine to run. This may conflict with existing applications.
          Would you like Setup to automatically configure postgresql and create Engine database, or prefer to perform that manually? (Automatic, Manual) [Automatic]:

          --== OVIRT ENGINE CONFIGURATION ==--

          Engine admin password:
          Confirm engine admin password:
[WARNING] Passwords do not match
          Engine admin password:
          Confirm engine admin password:
[WARNING] Password is weak: it is based on a dictionary word
          Use weak password? (Yes, No) [No]: Yes
          Application mode (Virt, Gluster, Both) [Both]:

          --== PKI CONFIGURATION ==--

          Organization name for certificate [Test]: <ORGANIZATION>

          --== APACHE CONFIGURATION ==--

          Setup can configure the default page of the web server to present the application home page. This may conflict with existing applications.
          Do you wish to set the application as the default page of the web server? (Yes, No) [Yes]:
          Setup can configure apache to use SSL using a certificate issued from the internal CA.
          Do you wish Setup to configure that, or prefer to perform that manually? (Automatic, Manual) [Automatic]:

          --== SYSTEM CONFIGURATION ==--

          Configure an NFS share on this server to be used as an ISO Domain? (Yes, No) [Yes]:
          Local ISO domain path [/var/lib/exports/iso]:
          Local ISO domain ACL - note that the default will restrict access to <HOSTNAME> only, for security reasons [<HOSTNAME>(rw)]: x.x.x.x/24(rw)
          Local ISO domain name [ISO_DOMAIN]:

          --== MISC CONFIGURATION ==--


          --== END OF CONFIGURATION ==--

[ INFO  ] Stage: Setup validation
[WARNING] Less than 16384MB of memory is available

          --== CONFIGURATION PREVIEW ==--

          Application mode                        : both
          Firewall manager                        : firewalld
          Update Firewall                         : True
          Host FQDN                               : <HOSTNAME>
          Engine database name                    : engine
          Engine database secured connection      : False
          Engine database host                    : localhost
          Engine database user name               : engine
          Engine database host name validation    : False
          Engine database port                    : 5432
          Engine installation                     : True
          NFS setup                               : True
          PKI organization                        : <ORGANIZATION>
          NFS mount point                         : /var/lib/exports/iso
          NFS export ACL                          : <HOSTNAME>(rw)
          Configure local Engine database         : True
          Set application as default page         : True
          Configure Apache SSL                    : True
          Configure WebSocket Proxy               : False
          Engine Host FQDN                        : <HOSTNAME>

          Please confirm installation settings (OK, Cancel) [OK]:
[ INFO  ] Stage: Transaction setup
[ INFO  ] Stopping engine service
[ INFO  ] Stopping ovirt-fence-kdump-listener service
[ INFO  ] Stopping websocket-proxy service
[ INFO  ] Stage: Misc configuration
[ INFO  ] Stage: Package installation
[ INFO  ] Stage: Misc configuration
[ INFO  ] Initializing PostgreSQL
[ INFO  ] Creating PostgreSQL 'engine' database
[ INFO  ] Configuring PostgreSQL
[ INFO  ] Creating/refreshing Engine database schema
[ INFO  ] Creating CA
[ INFO  ] Generating post install configuration file '/etc/ovirt-engine-setup.conf.d/20-setup-ovirt-post.conf'
[ INFO  ] Stage: Transaction commit
[ INFO  ] Stage: Closing up
[ INFO  ] Restarting nfs services

          --== SUMMARY ==--

[WARNING] Less than 16384MB of memory is available
          SSH fingerprint: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
          Internal CA xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
          Web access is enabled at:
              http://<HOSTNAME>:80/ovirt-engine
              https://<HOSTNAME>:443/ovirt-engine
          Please use the user "admin" and password specified in order to login

          --== END OF SUMMARY ==--

[ INFO  ] Starting engine service
[ INFO  ] Restarting httpd
[ INFO  ] Stage: Clean up
          Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20150723174824-g0sl3w.log
[ INFO  ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20150723180146-setup.conf'
[ INFO  ] Stage: Pre-termination
[ INFO  ] Stage: Termination
[ INFO  ] Execution of setup completed successfully

Check running services

# systemctl list-units | grep ovirt
ovirt-engine.service                   loaded active running   oVirt Engine
ovirt-fence-kdump-listener.service     loaded active running   oVirt Engine fence_kdump listener

# systemctl list-unit-files | grep ovirt
ovirt-engine-notifier.service              disabled
ovirt-engine.service                       enabled
ovirt-fence-kdump-listener.service         enabled
ovirt-websocket-proxy.service              disabled

# ps -aef | grep java
ovirt     1558  1500  1  2015 ?        3-01:33:59 java -server -XX:+TieredCompilation -Xms1024M -Xmx1024M -XX:PermSize=256m -XX:MaxPermSize=256m -Djava.awt.headless=true -Dsun.rmi.dgc.client.gcInterval=3600000 -Dsun.rmi.dgc.server.gcInterval=3600000 -Djsse.enableSNIExtension=false -Djava.security.krb5.conf=/etc/ovirt-engine/krb5.conf -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/log/ovirt-engine/dump -Djava.util.logging.manager=org.jboss.logmanager -Dlogging.configuration=file:///var/lib/ovirt-engine/jboss_runtime/config/ovirt-engine-logging.properties -Dorg.jboss.resolver.warning=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djboss.modules.write-indexes=false -Djboss.server.default.config=ovirt-engine -Djboss.home.dir=/usr/share/ovirt-engine-jboss-as -Djboss.server.base.dir=/usr/share/ovirt-engine -Djboss.server.data.dir=/var/lib/ovirt-engine -Djboss.server.log.dir=/var/log/ovirt-engine -Djboss.server.config.dir=/var/lib/ovirt-engine/jboss_runtime/config -Djboss.server.temp.dir=/var/lib/ovirt-engine/jboss_runtime/tmp -Djboss.controller.temp.dir=/var/lib/ovirt-engine/jboss_runtime/tmp -jar /usr/share/ovirt-engine-jboss-as/jboss-modules.jar -mp /var/lib/ovirt-engine/jboss_runtime/modules/00-ovirt-engine-modules:/var/lib/ovirt-engine/jboss_runtime/modules/01-ovirt-engine-jboss-as-modules -jaxpmodule javax.xml.jaxp-provider org.jboss.as.standalone -c ovirt-engine.xml

Install/Setup Vdsm-Node (KVM 노드)

Add repository

# yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release35.rpm

Install pkg

# yum install vdsm

Check running services

# systemctl list-unit-files | grep vdsm
supervdsmd.service                         static
vdsm-network.service                       enabled
vdsmd.service                              enabled

네트워크 구성

주요 매개 변수 만 나열된 "ovirtmgmt"라는 Bridge를 만듭니다.

ifcfg-*

# cat /etc/sysconfig/network-scripts/ifcfg-enp3s0f0
DEVICE=enp3s0f0
BRIDGE=ovirtmgmt
ONBOOT=yes
NM_CONTROLLED=no

# cat /etc/sysconfig/network-scripts/ifcfg-ovirtmgmt
DEVICE=ovirtmgmt
TYPE=Bridge
ONBOOT=yes
IPADDR=x.x.x.x
NETMASK=x.x.x.x
BOOTPROTO=static
NM_CONTROLLED=no

Bridge

# brctl show
bridge name     bridge id               STP enabled     interfaces
;vdsmdummy;             8000.000000000000       no
ovirtmgmt               8000.441ea159d1d8       no              enp3s0f0

Connect Vdsm-Node (KVM node) to oVirt Engine (Ovirt Server)

oVirt Engine (Ovirt Server)에 Vdsm-Node (KVM 노드)를 등록하고 관리 할 수 ​​있도록 설정합니다.

Log in to the Administration Portal

id : admin

pw : 위에서 설정한 암호

Vdsm-Node (KVM 노드) 새로 추가

[호스트] -> "새로운"



KVM Host name, Address, Password 입력



추가되었지만 이 시점에서는 아직 Active가 되지 않았습니다.

추가 된 Vdsm-Node (KVM 노드)의 네트워크 구성 수정

[Network Interfaces] -> "Setup Host Networks"



logical network interface [ovirtmgmt] 를 physical interface [enp3s0f0] 에 대응시키기 위해서, 화살표와 같이 드래그 한다.



logical network interface [ovirtmgmt]에 physical interface [enp3s0f0]가 매핑되었습니다.

Vdsm-Node (KVM 노드) Activate

Vdsm-Node(KVM node)가 oVirt Engine(Ovirt Server)에 등록되어 조작 가능하게 된다.

환경

ovirt-engine

# rpm -q ovirt-engine
ovirt-engine-3.5.3.1-1.el7.centos.noarch

vdsm

# rpm -q vdsm
vdsm-4.16.20-0.el7.centos.x86_64

libvirt

# libvirtd --version
libvirtd (libvirt) 1.2.8

Reference

How to install
h tp // w w. 오, rt. 오 rg / 쿠이 ck_S rt_ 구이로 # in s ta l_o ゃ rt

ovirt-shell
h tp // w w. 오, rt. 오 rg/Cぃ