one

© Martin Alfke - 2014

OpenNebulapublic and private cloud management

!Martin Alfke

<[email protected]>

mailto:[email protected]


OpenNebula - general -

• management of virtualization servers

• management of network interfaces

• management of VM’s


OpenNebula - general -


OpenNebula - backends -

• virtualization

• storage

• image


OpenNebula - virtualization backends -

• supported virtualization backends

• KVM

• VMware

• Xen

• public clouds (AWS/Rackspace/…)


OpenNebula - storage backends -

• supported storage backends

• local storage

• NFS

• iSCSI

• Ceph


OpenNebula - image backends -

• supported image backends

• LVM

• qcow2

• ceph blocks


OpenNebula - components -

• management node

• compute server



• management node

• opennebula (required)

• apache + passenger (sunstone web gui - optional)

• vnc proxy (optional)

• mysql db (required)

• user: oneadmin + ssh key (required)



• compute server

• libvirtd

• user: oneadmin + authorized key file

• sudoers (bridgectl, …)

• policykit (RH) / user permissions for /dev/qemu (Debian)


OpenNebula - workflow -

• network

• image

• contextualization

• template

• vm

• hooks



• network

• image


• template

• vm

• hooks

• 802.1q

• ebtables

• open vswitch

• dummy (nat)



• network

• image


• template

• vm

• hooks

• has to be created in advance

• needs one-context package or cloud-init (v0.7.3 or newer)

• copy large images directly from management node, not from your workstation



• network

• image


• template

• vm

• hooks

• changes the defaults from the image (hostname, network settings, ssh pub key, …

• can be extended by own scripts

• vm gets a carom device with contextualisation information



• network

• image


• template

• vm

• hooks

• combines network, image and hardware (cpu, ram)



• network

• image


• template

• vm

• hooks

• vm is started by selecting a desired template



• network

• image


• template

• vm

• hooks

• on create or on delete hooks: dns management, puppet cert management


OpenNebula - GUI / CLI -

• CLI

• user needs auth token in ~/.one_auth.conf

• one* commands

• GUI

• sunstone webinterface

• can be connected to LDAP


OpenNebula - GUI / CLI -


Kontextualisierung

# Context variables generated by OpenNebula DISK_ID='1' ETH0_DNS='10.175.4.11' ETH0_GATEWAY='10.175.16.1' ETH0_IP='10.175.24.1' ETH0_MASK='255.255.240.0' ETH0_NETWORK='10.175.16.0' FILES_DS='/var/lib/one/datastores/2/ef48a35be2d8723ef7788175be6087eb:'\''init.sh'\'' ' HOSTNAME='martin.xxxxxxxxx' NETWORK='YES' TARGET='hdb'


OpenNebula

• VirtualBox Demo

one

Technology

martin alfke martin

hdb martin alfke

newer martin alfke

ldap martin alfke

ramvm hooks martin alfke

opennebula image backends

devqemu debian martin

opennebula public