SlideShare una empresa de Scribd logo
1 de 23
Descargar para leer sin conexión
ProxmoxVE
Open Source LXC and
KVM Managment
Sometimes you just want a nice UI
Linux Fest Northwest 2018
Richard Clark – Crafty Penguins
Who am I ?
● Richard Clark
● SRE Consultant with Crafty Penguins, a division of
KerkhoffTechnologies in Chilliwack, BC Canada
● Software Developer (C, Java, Python, etc.)
● System Administrator
● rick@seerickcode.com, richard@craftypenguins.net
● @seerickcode
PROXMOX
What is a Hypervisor
A Hypervisor is software, firmware, or hardware that creates and runs
multiple isolated virtual `guest` machines on a single `host` machine.
KVM - “Kernel-basedVirtual Machine”
● FullVirtualization for Linux/x86
– Built into linux kernel
– Emulated Hardware (Network,Video, Disk, etc.)
● Paravirtualized drivers
– Windows, Linux, *BSD, OS X, …..
● Manage with command line tools, “virsh”, or various overlay tools (virt-
manager)..
LXC – Linux Containers
● Operating-system-level virtualization
● Low level system that uses cgroups and isolated namespaces
● Linux based guests only
● Guests share the same kernel
● Manage with `lxc` command line
virtsh, or various 3rd
party overlays
● Make it better with :
– Docker! Docker! Docker!
– LXD
KVM or LXC - Different use case
● KVM
– Need to run a non-linux OS
– Need to use different or custom Linux kernel
– Need a virtual video card (Desktop GUI OS)
– Slower, but paravirtualized drivers help (network/storage)
● LXC
– Fast
– Isolation - Other than the kernel, all the underlying setup works almost like a separate
system. Separate repos, upgrades, network config, lower attack surface (install only
what you need)
– Only Linux, and only the same kernel
– No video card emulation *
KVM or LXC ?
KVM & LXC ?
● Different backing storage
● Different bootstrap methods
● Different networking configuration
● Different console access
● Different configuration for resources
● Different monitoring
● Different management (stop, start, resize, backup, move, rm)
● ..... different tools
Why am I giving this talk ?
ProxmoxVirtual Environment
● 10Years this year !
● Management system for KVM and LXC technologies
● Similar toVMWare’sVSphere, XenCenter, etc.
● Open Source (Enterprise _support_ subscription model)
● Rich UI available over HTTPS
● Manage KVM and LXC in same UI
● Virtual Console
● Clustering Solutions
Proxmox Feature Set #1
● Rich HTML based UI for KVM and LXC management
● No proprietary
management tools
needed
● Use LXC when
possible for fastest
isolation
● Use KVM with full
virtual emulation is
needed or non-Linux
Proxmox Feature Set #2
● Open Source
● Based off of Debian (currently 9.x)
– It’s Just Linux - (networking, monitoring, management, tools, etc.)
● Simple repository add and apt-get install
● It is not a ‘Light’ community edition
– Backups, Firewall, Lots of storage options, Clustering, Live Migration
● Great for Personal / HomeLab
– Run various operating systems for training/experimentation
● Starts free, as in beer, with all the features.
Proxmox Feature Set #3
● Lots of backing store file system support
– Network ( LVM Group (iSCSI), iSCSI target/direct, NFS, Ceph RDB, GlusterFS)
– Local
● LVM Group over any block device tech (FC, DRDB, etc.)
● Directory (storage on existing filesystem)
● ZFS
● Clustering for HA
– Multi-Master
– Live Migration to move your ‘important’VMs to other hardware.
● Snapshots
● CLI and RESTfull API
● … much, much, more, and growing every release
Installing Proxmox
● Download the installer ISO from
https://www.proxmox.com/en/downloads
● Install on top of already existing Debian Stretch
– All outlined at https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Stretch
– Essentially :
● Add the Repository
echo "deb http://download.proxmox.com/debian/pve stretch pve­no­
subscription" > /etc/apt/sources.list.d/pve­install­repo.list
● Install the GPG Public Key
wget http://download.proxmox.com/debian/proxmox­ve­release­5.x.gpg ­O 
/etc/apt/trusted.gpg.d/proxmox­ve­release­5.x.gpg
Installing Proxmox.. part 2
● Setup the a bridged network
– apt­get install bridge­utils
– Set a fixed static IP on a bridge (/etc/network/interfaces)
auto vmbr0
iface vmbr0 inet static
        address 10.1.1.101/24
        bridge_ports none
        bridge_stp off
        bridge_fd 0
– Add the IP and hostname to /etc/hosts
10.1.1.101 proxmox1.example.com proxmox1 pvelocalhost
– Reboot to take effect
● Update repository and install
– apt­get update && apt­get dist­upgrade
apt­get install proxmox­ve postfix open­iscsi
Demo ?
Demo 1
● Setup Network
● Install Proxmox on Debian
● Reboot and cross fingers
● Log in / Explain layout
● Add cluster storage
● AddTemplate for LXC Container
● Deploy container
● Add ISO for KVM Container
● Deploy KVM
Demo 2
● DeployWindows KVM /VirtIO Drivers
● Backups
● Firewall ?
● CLI usage
● ?
ProxmoxVE
Richard Clark – Crafty Penguins
@seerickcode
richard@craftypenguins.net
Questions ?

Más contenido relacionado

La actualidad más candente

Automation with ansible
Automation with ansibleAutomation with ansible
Automation with ansibleKhizer Naeem
 
Virtualized network with openvswitch
Virtualized network with openvswitchVirtualized network with openvswitch
Virtualized network with openvswitchSim Janghoon
 
Ceph with CloudStack
Ceph with CloudStackCeph with CloudStack
Ceph with CloudStackShapeBlue
 
Virtualization Technology Overview
Virtualization Technology OverviewVirtualization Technology Overview
Virtualization Technology OverviewOpenCity Community
 
Issues of OpenStack multi-region mode
Issues of OpenStack multi-region modeIssues of OpenStack multi-region mode
Issues of OpenStack multi-region modeJoe Huang
 
Virtualization Architecture & KVM
Virtualization Architecture & KVMVirtualization Architecture & KVM
Virtualization Architecture & KVMPradeep Kumar
 
[KubeCon EU 2022] Running containerd and k3s on macOS
[KubeCon EU 2022] Running containerd and k3s on macOS[KubeCon EU 2022] Running containerd and k3s on macOS
[KubeCon EU 2022] Running containerd and k3s on macOSAkihiro Suda
 
OpenStack Quantum Intro (OS Meetup 3-26-12)
OpenStack Quantum Intro (OS Meetup 3-26-12)OpenStack Quantum Intro (OS Meetup 3-26-12)
OpenStack Quantum Intro (OS Meetup 3-26-12)Dan Wendlandt
 
Hyper-Converged Infrastructure Vx Rail
Hyper-Converged Infrastructure Vx Rail Hyper-Converged Infrastructure Vx Rail
Hyper-Converged Infrastructure Vx Rail Jürgen Ambrosi
 
VMware Virtual SAN Presentation
VMware Virtual SAN PresentationVMware Virtual SAN Presentation
VMware Virtual SAN Presentationvirtualsouthwest
 
OpenShift Virtualization - VM and OS Image Lifecycle
OpenShift Virtualization - VM and OS Image LifecycleOpenShift Virtualization - VM and OS Image Lifecycle
OpenShift Virtualization - VM and OS Image LifecycleMihai Criveti
 
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking ShapeBlue
 
Deep Dive into Kubernetes - Part 1
Deep Dive into Kubernetes - Part 1Deep Dive into Kubernetes - Part 1
Deep Dive into Kubernetes - Part 1Imesh Gunaratne
 
Red hat enterprise linux 7 (rhel 7)
Red hat enterprise linux 7 (rhel 7)Red hat enterprise linux 7 (rhel 7)
Red hat enterprise linux 7 (rhel 7)Ramola Dhande
 
VMware virtual SAN 6 overview
VMware virtual SAN 6 overviewVMware virtual SAN 6 overview
VMware virtual SAN 6 overviewsolarisyougood
 
Dell VMware Virtual SAN Ready Nodes
Dell VMware Virtual SAN Ready NodesDell VMware Virtual SAN Ready Nodes
Dell VMware Virtual SAN Ready NodesAndrew McDaniel
 

La actualidad más candente (20)

Automation with ansible
Automation with ansibleAutomation with ansible
Automation with ansible
 
Proxmox for DevOps
Proxmox for DevOpsProxmox for DevOps
Proxmox for DevOps
 
Virtualized network with openvswitch
Virtualized network with openvswitchVirtualized network with openvswitch
Virtualized network with openvswitch
 
Ceph with CloudStack
Ceph with CloudStackCeph with CloudStack
Ceph with CloudStack
 
Virtualization Technology Overview
Virtualization Technology OverviewVirtualization Technology Overview
Virtualization Technology Overview
 
Issues of OpenStack multi-region mode
Issues of OpenStack multi-region modeIssues of OpenStack multi-region mode
Issues of OpenStack multi-region mode
 
Virtualization Architecture & KVM
Virtualization Architecture & KVMVirtualization Architecture & KVM
Virtualization Architecture & KVM
 
[KubeCon EU 2022] Running containerd and k3s on macOS
[KubeCon EU 2022] Running containerd and k3s on macOS[KubeCon EU 2022] Running containerd and k3s on macOS
[KubeCon EU 2022] Running containerd and k3s on macOS
 
OpenStack Quantum Intro (OS Meetup 3-26-12)
OpenStack Quantum Intro (OS Meetup 3-26-12)OpenStack Quantum Intro (OS Meetup 3-26-12)
OpenStack Quantum Intro (OS Meetup 3-26-12)
 
Hyper-Converged Infrastructure Vx Rail
Hyper-Converged Infrastructure Vx Rail Hyper-Converged Infrastructure Vx Rail
Hyper-Converged Infrastructure Vx Rail
 
VMware Virtual SAN Presentation
VMware Virtual SAN PresentationVMware Virtual SAN Presentation
VMware Virtual SAN Presentation
 
OpenShift Virtualization - VM and OS Image Lifecycle
OpenShift Virtualization - VM and OS Image LifecycleOpenShift Virtualization - VM and OS Image Lifecycle
OpenShift Virtualization - VM and OS Image Lifecycle
 
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
 
oVirt Introduction
oVirt IntroductionoVirt Introduction
oVirt Introduction
 
Deep Dive into Kubernetes - Part 1
Deep Dive into Kubernetes - Part 1Deep Dive into Kubernetes - Part 1
Deep Dive into Kubernetes - Part 1
 
Virtualization
VirtualizationVirtualization
Virtualization
 
Qemu
QemuQemu
Qemu
 
Red hat enterprise linux 7 (rhel 7)
Red hat enterprise linux 7 (rhel 7)Red hat enterprise linux 7 (rhel 7)
Red hat enterprise linux 7 (rhel 7)
 
VMware virtual SAN 6 overview
VMware virtual SAN 6 overviewVMware virtual SAN 6 overview
VMware virtual SAN 6 overview
 
Dell VMware Virtual SAN Ready Nodes
Dell VMware Virtual SAN Ready NodesDell VMware Virtual SAN Ready Nodes
Dell VMware Virtual SAN Ready Nodes
 

Similar a Proxmox Talk - Linux Fest Northwest 2018

Linux container & docker
Linux container & dockerLinux container & docker
Linux container & dockerejlp12
 
Security of Linux containers in the cloud
Security of Linux containers in the cloudSecurity of Linux containers in the cloud
Security of Linux containers in the cloudDobrica Pavlinušić
 
Rmll Virtualization As Is Tool 20090707 V1.0
Rmll Virtualization As Is Tool 20090707 V1.0Rmll Virtualization As Is Tool 20090707 V1.0
Rmll Virtualization As Is Tool 20090707 V1.0guest72e8c1
 
OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...
OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...
OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...OpenNebula Project
 
Linux Virtualization
Linux VirtualizationLinux Virtualization
Linux VirtualizationOpenVZ
 
Linux virtualization
Linux virtualizationLinux virtualization
Linux virtualizationGoogle
 
Module 4 Embedded Linux
Module 4 Embedded LinuxModule 4 Embedded Linux
Module 4 Embedded LinuxTushar B Kute
 
OpenVZ Linux containers
OpenVZ Linux containersOpenVZ Linux containers
OpenVZ Linux containersOpenVZ
 
F19 slidedeck (OpenStack^H^H^H^Hhift, what the)
F19 slidedeck (OpenStack^H^H^H^Hhift, what the)F19 slidedeck (OpenStack^H^H^H^Hhift, what the)
F19 slidedeck (OpenStack^H^H^H^Hhift, what the)Gerard Braad
 
Lightweight Virtualization: LXC Best Practices
Lightweight Virtualization: LXC Best PracticesLightweight Virtualization: LXC Best Practices
Lightweight Virtualization: LXC Best PracticesWerner Fischer
 
Linux sever building
Linux sever buildingLinux sever building
Linux sever buildingEdmond Yu
 
Develop with linux containers and docker
Develop with linux containers and dockerDevelop with linux containers and docker
Develop with linux containers and dockerFabio Fumarola
 
Proxmox ve-datasheet
Proxmox ve-datasheetProxmox ve-datasheet
Proxmox ve-datasheetMiguel Angel
 
Linux Containers & Docker
Linux Containers & DockerLinux Containers & Docker
Linux Containers & DockerJumping Bean
 
LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISORLOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISORVanika Kapoor
 
2 Linux Container and Docker
2 Linux Container and Docker2 Linux Container and Docker
2 Linux Container and DockerFabio Fumarola
 

Similar a Proxmox Talk - Linux Fest Northwest 2018 (20)

Linux container & docker
Linux container & dockerLinux container & docker
Linux container & docker
 
Security of Linux containers in the cloud
Security of Linux containers in the cloudSecurity of Linux containers in the cloud
Security of Linux containers in the cloud
 
OpenVZ Linux Containers
OpenVZ Linux ContainersOpenVZ Linux Containers
OpenVZ Linux Containers
 
Rmll Virtualization As Is Tool 20090707 V1.0
Rmll Virtualization As Is Tool 20090707 V1.0Rmll Virtualization As Is Tool 20090707 V1.0
Rmll Virtualization As Is Tool 20090707 V1.0
 
RMLL / LSM 2009
RMLL / LSM 2009RMLL / LSM 2009
RMLL / LSM 2009
 
OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...
OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...
OpenNebulaConf 2016 - Hypervisors and Containers Hands-on Workshop by Jaime M...
 
Linux Virtualization
Linux VirtualizationLinux Virtualization
Linux Virtualization
 
Linux virtualization
Linux virtualizationLinux virtualization
Linux virtualization
 
Module 4 Embedded Linux
Module 4 Embedded LinuxModule 4 Embedded Linux
Module 4 Embedded Linux
 
Open stack wtf_(1)
Open stack  wtf_(1)Open stack  wtf_(1)
Open stack wtf_(1)
 
OpenVZ Linux containers
OpenVZ Linux containersOpenVZ Linux containers
OpenVZ Linux containers
 
F19 slidedeck (OpenStack^H^H^H^Hhift, what the)
F19 slidedeck (OpenStack^H^H^H^Hhift, what the)F19 slidedeck (OpenStack^H^H^H^Hhift, what the)
F19 slidedeck (OpenStack^H^H^H^Hhift, what the)
 
Dockers zero to hero
Dockers zero to heroDockers zero to hero
Dockers zero to hero
 
Lightweight Virtualization: LXC Best Practices
Lightweight Virtualization: LXC Best PracticesLightweight Virtualization: LXC Best Practices
Lightweight Virtualization: LXC Best Practices
 
Linux sever building
Linux sever buildingLinux sever building
Linux sever building
 
Develop with linux containers and docker
Develop with linux containers and dockerDevelop with linux containers and docker
Develop with linux containers and docker
 
Proxmox ve-datasheet
Proxmox ve-datasheetProxmox ve-datasheet
Proxmox ve-datasheet
 
Linux Containers & Docker
Linux Containers & DockerLinux Containers & Docker
Linux Containers & Docker
 
LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISORLOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISOR
 
2 Linux Container and Docker
2 Linux Container and Docker2 Linux Container and Docker
2 Linux Container and Docker
 

Último

A Glance At The Java Performance Toolbox
A Glance At The Java Performance ToolboxA Glance At The Java Performance Toolbox
A Glance At The Java Performance ToolboxAna-Maria Mihalceanu
 
Design pattern talk by Kaya Weers - 2024 (v2)
Design pattern talk by Kaya Weers - 2024 (v2)Design pattern talk by Kaya Weers - 2024 (v2)
Design pattern talk by Kaya Weers - 2024 (v2)Kaya Weers
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfNeo4j
 
Glenn Lazarus- Why Your Observability Strategy Needs Security Observability
Glenn Lazarus- Why Your Observability Strategy Needs Security ObservabilityGlenn Lazarus- Why Your Observability Strategy Needs Security Observability
Glenn Lazarus- Why Your Observability Strategy Needs Security Observabilityitnewsafrica
 
All These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDFAll These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDFMichael Gough
 
QCon London: Mastering long-running processes in modern architectures
QCon London: Mastering long-running processes in modern architecturesQCon London: Mastering long-running processes in modern architectures
QCon London: Mastering long-running processes in modern architecturesBernd Ruecker
 
Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...
Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...
Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...itnewsafrica
 
React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...Karmanjay Verma
 
Assure Ecommerce and Retail Operations Uptime with ThousandEyes
Assure Ecommerce and Retail Operations Uptime with ThousandEyesAssure Ecommerce and Retail Operations Uptime with ThousandEyes
Assure Ecommerce and Retail Operations Uptime with ThousandEyesThousandEyes
 
React Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App FrameworkReact Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App FrameworkPixlogix Infotech
 
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotesMuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotesManik S Magar
 
Varsha Sewlal- Cyber Attacks on Critical Critical Infrastructure
Varsha Sewlal- Cyber Attacks on Critical Critical InfrastructureVarsha Sewlal- Cyber Attacks on Critical Critical Infrastructure
Varsha Sewlal- Cyber Attacks on Critical Critical Infrastructureitnewsafrica
 
Bridging Between CAD & GIS: 6 Ways to Automate Your Data Integration
Bridging Between CAD & GIS:  6 Ways to Automate Your Data IntegrationBridging Between CAD & GIS:  6 Ways to Automate Your Data Integration
Bridging Between CAD & GIS: 6 Ways to Automate Your Data Integrationmarketing932765
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsNathaniel Shimoni
 
Accelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessAccelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessWSO2
 
Potential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and InsightsPotential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and InsightsRavi Sanghani
 
Landscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdfLandscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdfAarwolf Industries LLC
 
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPathCommunity
 
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...Wes McKinney
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch TuesdayIvanti
 

Último (20)

A Glance At The Java Performance Toolbox
A Glance At The Java Performance ToolboxA Glance At The Java Performance Toolbox
A Glance At The Java Performance Toolbox
 
Design pattern talk by Kaya Weers - 2024 (v2)
Design pattern talk by Kaya Weers - 2024 (v2)Design pattern talk by Kaya Weers - 2024 (v2)
Design pattern talk by Kaya Weers - 2024 (v2)
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdf
 
Glenn Lazarus- Why Your Observability Strategy Needs Security Observability
Glenn Lazarus- Why Your Observability Strategy Needs Security ObservabilityGlenn Lazarus- Why Your Observability Strategy Needs Security Observability
Glenn Lazarus- Why Your Observability Strategy Needs Security Observability
 
All These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDFAll These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDF
 
QCon London: Mastering long-running processes in modern architectures
QCon London: Mastering long-running processes in modern architecturesQCon London: Mastering long-running processes in modern architectures
QCon London: Mastering long-running processes in modern architectures
 
Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...
Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...
Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...
 
React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...
 
Assure Ecommerce and Retail Operations Uptime with ThousandEyes
Assure Ecommerce and Retail Operations Uptime with ThousandEyesAssure Ecommerce and Retail Operations Uptime with ThousandEyes
Assure Ecommerce and Retail Operations Uptime with ThousandEyes
 
React Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App FrameworkReact Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App Framework
 
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotesMuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
 
Varsha Sewlal- Cyber Attacks on Critical Critical Infrastructure
Varsha Sewlal- Cyber Attacks on Critical Critical InfrastructureVarsha Sewlal- Cyber Attacks on Critical Critical Infrastructure
Varsha Sewlal- Cyber Attacks on Critical Critical Infrastructure
 
Bridging Between CAD & GIS: 6 Ways to Automate Your Data Integration
Bridging Between CAD & GIS:  6 Ways to Automate Your Data IntegrationBridging Between CAD & GIS:  6 Ways to Automate Your Data Integration
Bridging Between CAD & GIS: 6 Ways to Automate Your Data Integration
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directions
 
Accelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessAccelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with Platformless
 
Potential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and InsightsPotential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and Insights
 
Landscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdfLandscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdf
 
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to Hero
 
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch Tuesday
 

Proxmox Talk - Linux Fest Northwest 2018

  • 1. ProxmoxVE Open Source LXC and KVM Managment Sometimes you just want a nice UI Linux Fest Northwest 2018 Richard Clark – Crafty Penguins
  • 2. Who am I ? ● Richard Clark ● SRE Consultant with Crafty Penguins, a division of KerkhoffTechnologies in Chilliwack, BC Canada ● Software Developer (C, Java, Python, etc.) ● System Administrator ● rick@seerickcode.com, richard@craftypenguins.net ● @seerickcode
  • 4. What is a Hypervisor A Hypervisor is software, firmware, or hardware that creates and runs multiple isolated virtual `guest` machines on a single `host` machine.
  • 5. KVM - “Kernel-basedVirtual Machine” ● FullVirtualization for Linux/x86 – Built into linux kernel – Emulated Hardware (Network,Video, Disk, etc.) ● Paravirtualized drivers – Windows, Linux, *BSD, OS X, ….. ● Manage with command line tools, “virsh”, or various overlay tools (virt- manager)..
  • 6. LXC – Linux Containers ● Operating-system-level virtualization ● Low level system that uses cgroups and isolated namespaces ● Linux based guests only ● Guests share the same kernel ● Manage with `lxc` command line virtsh, or various 3rd party overlays ● Make it better with : – Docker! Docker! Docker! – LXD
  • 7. KVM or LXC - Different use case ● KVM – Need to run a non-linux OS – Need to use different or custom Linux kernel – Need a virtual video card (Desktop GUI OS) – Slower, but paravirtualized drivers help (network/storage) ● LXC – Fast – Isolation - Other than the kernel, all the underlying setup works almost like a separate system. Separate repos, upgrades, network config, lower attack surface (install only what you need) – Only Linux, and only the same kernel – No video card emulation *
  • 9. KVM & LXC ? ● Different backing storage ● Different bootstrap methods ● Different networking configuration ● Different console access ● Different configuration for resources ● Different monitoring ● Different management (stop, start, resize, backup, move, rm) ● ..... different tools
  • 10.
  • 11.
  • 12. Why am I giving this talk ?
  • 13. ProxmoxVirtual Environment ● 10Years this year ! ● Management system for KVM and LXC technologies ● Similar toVMWare’sVSphere, XenCenter, etc. ● Open Source (Enterprise _support_ subscription model) ● Rich UI available over HTTPS ● Manage KVM and LXC in same UI ● Virtual Console ● Clustering Solutions
  • 14. Proxmox Feature Set #1 ● Rich HTML based UI for KVM and LXC management ● No proprietary management tools needed ● Use LXC when possible for fastest isolation ● Use KVM with full virtual emulation is needed or non-Linux
  • 15. Proxmox Feature Set #2 ● Open Source ● Based off of Debian (currently 9.x) – It’s Just Linux - (networking, monitoring, management, tools, etc.) ● Simple repository add and apt-get install ● It is not a ‘Light’ community edition – Backups, Firewall, Lots of storage options, Clustering, Live Migration ● Great for Personal / HomeLab – Run various operating systems for training/experimentation ● Starts free, as in beer, with all the features.
  • 16. Proxmox Feature Set #3 ● Lots of backing store file system support – Network ( LVM Group (iSCSI), iSCSI target/direct, NFS, Ceph RDB, GlusterFS) – Local ● LVM Group over any block device tech (FC, DRDB, etc.) ● Directory (storage on existing filesystem) ● ZFS ● Clustering for HA – Multi-Master – Live Migration to move your ‘important’VMs to other hardware. ● Snapshots ● CLI and RESTfull API ● … much, much, more, and growing every release
  • 17. Installing Proxmox ● Download the installer ISO from https://www.proxmox.com/en/downloads ● Install on top of already existing Debian Stretch – All outlined at https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Stretch – Essentially : ● Add the Repository echo "deb http://download.proxmox.com/debian/pve stretch pve­no­ subscription" > /etc/apt/sources.list.d/pve­install­repo.list ● Install the GPG Public Key wget http://download.proxmox.com/debian/proxmox­ve­release­5.x.gpg ­O  /etc/apt/trusted.gpg.d/proxmox­ve­release­5.x.gpg
  • 18. Installing Proxmox.. part 2 ● Setup the a bridged network – apt­get install bridge­utils – Set a fixed static IP on a bridge (/etc/network/interfaces) auto vmbr0 iface vmbr0 inet static         address 10.1.1.101/24         bridge_ports none         bridge_stp off         bridge_fd 0 – Add the IP and hostname to /etc/hosts 10.1.1.101 proxmox1.example.com proxmox1 pvelocalhost – Reboot to take effect ● Update repository and install – apt­get update && apt­get dist­upgrade apt­get install proxmox­ve postfix open­iscsi
  • 19.
  • 21. Demo 1 ● Setup Network ● Install Proxmox on Debian ● Reboot and cross fingers ● Log in / Explain layout ● Add cluster storage ● AddTemplate for LXC Container ● Deploy container ● Add ISO for KVM Container ● Deploy KVM
  • 22. Demo 2 ● DeployWindows KVM /VirtIO Drivers ● Backups ● Firewall ? ● CLI usage ● ?
  • 23. ProxmoxVE Richard Clark – Crafty Penguins @seerickcode richard@craftypenguins.net Questions ?

Notas del editor

  1. Turn off Slack Turn off Skype Turn off Stuff Switching laptops mid OK ? Seating
  2. Richard Clark SRE Consultant Crafty Penguins SRE -> Jack of all trades Software Developer Various Languages Systems Administrator Contact details there Dick nickname for Richard Dick and Jane Childrens books
  3. I am hear to talk about Proxmox Who has heard of proxmox ? Who has used proxmox ? Amazing Laundry Detergent Glad you took the time to attend my seminar Exciting Business Opportunity Own your own business Selling Proxmox Door to Door Coupons for the Free Knife set will be handed out at the end of the presentation All in one management system for all your VM needs SOME BACKGROUND
  4. Some Examples Virtualbox, VMWare Xen/KVM HyperV - Maximize the use of your hardware - Isolation for different needs Containerization Systems Under LInux Let you do kind of the same thing Less Isolated Light Talk about the components we care about for Proxmox
  5. The Hypervisor Proxmox uses Full Hardware virtualization Most OS systems you can throw at it Paravirtualized - Light Weight Emulation API instead of Device Driver on Pretend
  6. Next part of the background Containers - Light Weight Guest OS on to host Past the Kernel / Userspace / Sandbox On Linux, the “built in” container system is LXC Kernel must be the same - Linux Guests only Tools to manage - LXC, VirtSH, etc. Low Level - Docker LXD
  7. Non Linux OS - Why?
  8. Should we use KVM or LXC ? Why Not Both
  9. Speed up at the end Chaos, Building
  10. Earthquakes Volcanos The dead rising from the grave Human Sacrifice Dogs andCat’s living together Mass Hysteria For years of darknesss is upon us
  11. 7 Years, 1.9 Not affiliated with Proxmox Use at work ..Home lab bare metal Install right after debian Saltstack
  12. 7 Years, 1.9 Not affiliated with Proxmox Use at work ..Home lab bare metal Install right after debian Saltstack
  13. KVM and LXC in one management pane Probably main benefit NO Proprietary binary to install that is not supported on your workstation, just to manage your guests LXC for light weight and fast LInux KVM when full hardware emulation or a different OS is needed.
  14. Based off Debian: - Favorite version of Vim, to edit config files - Favorite version of Emacs - why bother - Probably have equivalent to Proxmox baked in somehow. Repo Add, Apt Get install Not a ‘lite’ community edition - Backups, Firewall, storage management, Clustering - Live Migrations - others do it, not for free Homelab: - Solaris, FreeBSD, Ubuntu 18.04, Windows Game server, the list goes on Starts at Free as in Beer, with all the features
  15. KVM and LXC machines need somewhere to be Network Based Local ZFS Couple TB of Ram Clustering Multi master Snapshot Handling baked in Filesytem support to Turn off, Image, Turn on. Backup System
  16. Talked about the main features Lets see this thing get installed and get some usage.
  17. Turn off Slack Turn off Skype Turn off Stuff Switching laptops mid OK ? Seating