© 2009 vmware inc. all rights reserved vsphere autodeploy cian o’mahony technical support...

44
© 2009 VMware Inc. All rights reserved vSphere Autodeploy Cian O’Mahony Technical Support Engineer – VMware Global Support Services – Cork, Ireland

Upload: stanley-fox

Post on 29-Dec-2015

230 views

Category:

Documents


4 download

TRANSCRIPT

PowerPoint Presentation

vSphere AutodeployCian OMahonyTechnical Support Engineer VMware Global Support Services Cork, Ireland 2009 VMware Inc. All rights reserved#1AgendaOverviewComponentsImage CreationArchitecture and ScalabilityInitial SetupDesign for ResiliencyTroubleshootingUpcoming Features

#2Without Auto DeployWith Auto DeployHost image tied to physical server Each host needs full install and configNot easy to recover host Redundant boot disks/dedicated LUNHost image decoupled from serverRun on any server w/ matching hardware Config stored in Host ProfileNo boot diskA lot of time/effort building hostsDeploying hosts is repetitive and tediousHeavy reliance on scriptingNeed to update for each new releaseAgile deployment modelDeploy many hosts quickly and efficientlyNo pre/post install scriptsNo need to update with each releaseConfiguration drift between hostsConfig drift always a concernCompromises HA/DRManging drift consumes admin resourcesHost State GuaranteedSingle boot image shared across hosts Every reboot provides consistent imageEliminate need to detect/correct driftA Quick Comparison#3Components 2009 VMware Inc. All rights reserved#4Auto Deploy ComponentsComponentSub-ComponentsNotesPXE Boot InfrastructureDHCP ServerTFTP ServerSetup independentlygPXE file from vCenterCan use Auto Deploy ApplianceAuto Deploy Server Rules EnginePowerCLI Snap-inWeb ServerBuild/Manage RulesMatch server to Image and Host ProfileDeploy serverImage BuilderImage Profiles,PowerCLI Snap-inCombine ESXi image with 3rd party VIBs to create custom Image ProfilesvCenter ServerStores RulesHost ProfilesAnswer FilesProvides store for rulesHost configs saved in Host ProfilesCustom Host settings saved in Answer Files#5

#6OverviewWhat is it?New host deployment method introduced in vSphere 5.0Based on PXE Boot Works with Image Builder, vCenter Server, and Host ProfilesHow it works:PXE boot the serverESXi image profile loaded into host memory via Auto Deploy ServerConfiguration applied using Answer File / Host ProfileHost placed/connected in vCenter#7Image Creation 2009 VMware Inc. All rights reserved#8

Vendor, VMware Offline BundlesBase ESXi Image ProfileCopy VIBsCreate ImageProfileEmit ISO

Custom Image

Image Creation#9

Vendor, VMware Offline Bundles

ESXi HostESXi Image Profile

Local Online Depot (set up by Autodeploy)

Autodeploy ServerCopy VIBsCreate ImageProfileBoot RequestFetch & Cache VIBsDeploy VIBs

Image Creation#10Architecture and Scalability 2009 VMware Inc. All rights reserved#11Boot Sequence

#12

Host

DHCP

TFTP

Architecture and Scalability

#13

TFTPDHCP PXE

AutoDeploy

AutoDeploy

Architecture and Scalability

#14

TFTPDHCP PXE

Autodeploy

Web Proxy

Architecture and Scalability

Reference: http://blogs.vmware.com/vsphere/2012/01/using-reverse-web-proxy-with-auto-deploy.html#15Edit the configuration file (/etc/httpd/conf/httpd.conf) making the following changes:

Set the "Listen" and ServerName" options:

Listen 80ServerName ..:80

Uncommented the "ProxyRequests" entry:

ProxyRequests onArchitecture and Scalability#Added the following lines to the end of the file:

# This section defines the location where the web proxy will cache the contentCacheRoot /var/cache/AutoDeploy/CacheEnable disk /CacheDirLevels 5CacheDirLength 3CacheDefaultExpire 3600CacheMaxFileSize 500000000

# this section defines the directories on the Auto Deploy server that the web proxy will cacheSSLProxyEngine onProxyPass /vmw/cache https://vmware_autodeploy:6501/vmw/cacheProxyPassReverse /vmw/cache https://vmware_autodelpoy:6501/vmw/cacheProxyPass /vmw/rbd https://vmware_autodeploy:6501/vmw/rbdProxyPassReverse /vmw/rbd https://vmware_autodeploy:6501/vmw/rbdArchitecture and Scalability#Save the changes to the /etc/httpd/conf/httpd.conf file, and verify the apache configuration by running:

# /usr/sbin/httpd -t -f /etc/httpd/conf/httpd.conf(command returns "Syntax OK" if the configuration is good)

Finally, start the web server:

# service httpd start# service httpd statusArchitecture and Scalability#

Autodeploy

WebProxyCache

ESXi Image ProfileArchitecture and Scalability

#19

DHCP

TFTP 1

TFTP 2

TFTP 3

Autodeploy

Webproxy

WebproxyOption 66Option 66 Option 66

CacheCache

Architecture and Scalabilty

#20

#Initial Setup 2009 VMware Inc. All rights reserved#22Use vCenter Server Appliance as a Syslog Server to capture ESXi host logs directly to vCenter Server

Use vCenter Server Appliance to receive ESXi core dumps from failed ESXi hosts using NetDump (ESXi Dump Collector Service)Initial Setup#23

Initial Setup#24

Initial Setup#25

Initial Setup

Just boot an ESXi host???#However there is no ESXi Image associated with the Host and no rules created containing an Image Profile to allow the host to boot from and ESXi image. This screen will sleep for 5 minutes and will try to reboot again. This is a neat feature where the Host will continuously try to reboot if by some chance that the TFTP and DHCP server were offline for some quick maintenance.

26Get-ExecutionPolicy It should return the following

If it does not return Unrestricted then we can set the execution policy to be Unrestricted with the following command.

Let now check what PowerShell Snap-ins are loaded. We do this with the Get-PSSnapin cmdlet ( command ) At the command prompt type the following: Get-PSSnapin

Initial Setup

#27The last 3 PSSnap-ins are of interest to us.

VMware.VimAutomation.License - This Windows Powershell snap-in contains cmdlets for managing License components.

VMware.DeployAutomation - Cmdlets for Rule-Based-Deployment

VMware.ImageBuilder - This Windows PowerShell snap-in contains VMware ESXi Image Builder cmdlets used to generate custom images .

Initial Setup#28

Initial Setup#29We will now define a rule in which ESXi 5.0 hosts will be assigned to an Image Profile.

New-DeployRule -Name ForAllHosts -Item $ip[1] -AllHosts

You will see this list continue as it uploads the remaining driversto the Auto Deploy cache.

Initial Setup#PowerCLI C:\> Connect-VIServer 192.168.1.20PowerCLI C:\> Add-EsxSoftwareDepot C:\ESXiImages\ESXi-Image1.zipPowerCLI C:\> New-DeployRule --Name Host-Group1 --Item Image1-Profile --Patternipv4 192.168.1.30 - 192.168.1.50PowerCLI C:\> Add-DeployRUle Host-Group130We can see the rule name ForAllHosts and the Image Profile that was used. To see what rules have been created, we can use the following command:

Get-DeployRule We now need to add the rule to a working ruleSet. We use the following command. Add-DeployRule -deployRule ForAllHosts

To list the rules in a ruleset Get-DeployRuleSet

Initial Setup#31Using an Answer File, administrators can configure host-specific settings to be used in conjunction with the common settings in the Host Profile,avoiding the need to type in any host-specific parameters.

This feature enables the use of Host Profiles to fully configure a host during an automated deployment.

Host Profiles now has support for a greatly expanded set of configurations, including:

Network SettingsiSCSIFCoENative MultipathingInitial Setup

#32

Initial Setup#Design for Resiliency 2009 VMware Inc. All rights reserved#34

#

vSphere High AvailabilityvSphere Fault Tolerance

#

#Troubleshooting 2009 VMware Inc. All rights reserved#38Troubleshooting Auto Deploy Services The Auto Deploy ServiceService needs to be set to Automatic and Started

Auto Deploy also needs to have an available DHCP server, configured to your environments specification.A TFTP server also needs to be installed and configured to enable PXE boot.TFTP server needs to hold the Boot file

#39

TFTP service stopped?Firewall? Check TFTP port is open (default 69)Troubleshooting - TFTP#

Server NIC connected?DHCP service stopped?Incorrect scope / reservations?Firewall? Check rules / disableTroubleshooting - DHCP#Documentation: "Troubleshooting Auto Deploy":http://pubs.vmware.com/vsphere-50/index.jsp?topic=/com.vmware.vsphere.install.doc_50/GUID-4915B724-500E-4FB3-BAC2-0EA46CFBD7EE.html

KB: "Understanding vSphere Auto Deploy":http://kb.vmware.com/kb/2005131

KB: "Troubleshooting Auto Deploy" (includes ports & log locations):http://kb.vmware.com/kb/2000988Troubleshooting Guides#Upcoming Features 2009 VMware Inc. All rights reserved#43System Image Caching IntroductionNew Features in vSphere 5.1Stateless Caching host boots from Auto Deploy, but will fall back to the cached image in event DHCP/TFTP/Auto Deploy server is not available Stateful Install Host does initial boot from Auto Deploy Server which installs an ESXi image on the local disk. All subsequent boot are from the ESXi image saved on local diskSupport for Local, Remote and USB DisksAuto Deploy behaviour configured through Host Profile

#2 new modes for Auto DeployStateless cachingStateful install

44Auto Deploy - Stateless CachingEnable Stateless Caching through Host Profile

#45Auto Deploy - Stateless CachingExamples of setting Stateless Caching in Host ProfileStateless Caching to a USB

Stateless Caching on the Host

#46Auto Deploy - Stateful InstallsReview Stateful InstallsCreate Host ProfileSpecify disk type ( local, remote, USB)Specify to preserve or overwrite VMFSOne time boot using Auto DeployImage cached to disk when Host Profile appliedReboot host from disk image created during Auto DeployOnce provisioned, host is managed as a standard ESXi host

#47VMware Vision 2009 VMware Inc. All rights reserved#48

ProductsService ManagerITBM (Digital Fuell)Chargeback

VMware Vision#VMware Cloud Infrastructure SuitevCloud DirectorvShield Security

The First Comprehensive Cloud Infrastructure Suite

vSphere 5

vCenter Site Recovery ManagervCenter OperationsHigh Performance Resource Control, Pooling and SchedulingVirtualized Securityand Edge FunctionsPolicy, Reporting, Self-Service Monitoring and Management Business Continuity#Cloud computing represents a new architectural approach to IT service delivery. At VMware, we are committed to this new approach, and delivering our customers the full capability in an integrated, cohesive solution stack:It all starts on the industrys most robust cloud infrastructure platform, vSphere. Proven the world over, vSphere 5 brings a new virtual, architectural approach to pooling all datacenter resources CPU, Memory, Storage, Networking, creating a seamless fabric of capacity.This new architectural approach enables us to design efficient, low-cost business continuity solutions, which comes with vCenter Site Recovery Manager. Businesses are able to protect a much broader set of the IT portfolio, than was previously cost-effective to support.We are delivering a new class of cloud operational management with vCenter Operations, which leverages patented analytics to discover, monitor, and analyze system behavior in order to support continuous optimization of the infrastructure, even providing predictive analysis of potential problem areas. Likewise, we have pioneered a new virtual approach to security, that is designed for supporting workload portability thoughout and across datacenters.Finally, vCloud Director provides a meta-organizational layer to simplify management of resources based on policies, enabling self-service, reporting and chargeback functions.

Together, this collection of product offerings makes up the industrys first Cloud Infrastructure Suite.

50

AppsEnterprise Hybrid Cloud ComputingCloud Infrastructure

AppsCloud Infrastructure ManagementSecurity VMware vCloud Services Common platform Common management Common security

vCloudService Provider

Private Cloud

VMware vCloud = Enterprise Hybrid Cloud#The real value in cloud computing is when all boundaries are flexible, to enable cross-cloud federation and coordination. This is what gives customers maximum choice and flexibility in how to streamline costs and improve agility. Our belief is that cloud computing implies a ubiquitous model for interoperability between multiple clouds, both within and outside the enterprise. We refer to this as Open Cloud Computing, which we are fully committed to.

This is why VMware is working with so many public cloud service providers, as part of our vCloud program, to create compatible cloud environments for application mobility.

In particular, we are working with a handful of service providers to create a secure, enterprise-class cloud service, that uses a common service-level management model based on vCloud Director, and a common security model based on vShield, to extend the trust boundary of the enterprise into these public cloud services, and enable the safe, secure mobility of application workloads between the environments.

This class of service is referred to as the VMware vCloud Datacenter Service, and ensures a common platform, management model, and security model, to create the ultimate secure hybrid cloud environment.

With vCloud, customers get to ultimately choose where IT services will operate, and who will operate them, in order to optimize their unique business situation. This is what Your Cloud is all about.51

IndianapolisNewarkBeltsvilleUnited KingdomJapanSingaporevCloud Datacenter Global Consistent ServicePlanoDallasBrazilSan JoseHong KongDenmarkMalaysiaAustraliaChantillyChicagoNetherlandsLuxembourgFlorence, KYGermanyChina

#vCloud Datacenter Services represents a global network of public cloud partners, providing maximum choice for businesses around the world. In addition, we are working with our partners to create a common way of coordinating across partners within one service contract, in order to support the global rollout of cloud services for customers, without the complexity of dealing with multiple service providers. Expect to see more on this in 2012.Questions?

#53IntroductionvSphere 5.1 introduces the following new features for Auto DeployStateless CachingStateful InstallIPv6 SupportSwitch from gPXE to iPXE as the network bootloaderVLAN TaggingvSphere 5.1 has also enhanced the Host Profiles feature to includeManaging the Stateless Caching and Stateful InstallsConfigure an alternate datastore for the locker (scratch and default log directory)Support for highly customized security settings ( /etc/security/login.map and /etc/passwd )Support for environments without full DNS ( /etc/hosts )Configure PCI devices for direct use by VMs (PCI Passthrough )

#http://ipxe.org/This VLAN ID will be passed down along with the other boot options and we will need to modify vmkctl to pick up this option and apply it during network initialization.54