COMMON IMAGE FORMATS
IMAGE SIZE CONSIDERATIONS
Comparison of RAW and QCOW2
qemu-img info osp-small.qcow2
qemu-img convert -f qcow2 -O raw osp-small.qcow2 osp-small.raw
BUILDING A CUSTOM IMAGE
diskimage-builder, guestfish or virt-customize,
MODIFYING GUEST AND DISK IMAGES
MAKING MINOR IMAGE CUSTOMIZATIONS
GUESTFISH AND VIRT-CUSTOMIZE INTERNALS
USING GUESTFISH TO CUSTOMIZE IMAGES
USING GUESTFISH TO CUSTOMIZE IMAGES
guestfish -i --network -a ~/demo-rhel-base.qcow2
USING VIRT-CUSTOMIZE TO CUSTOMIZE IMAGES
[user@demo ~]$ virt-customize -a ~/demo-rhel-base.qcow2 --install aide --root-
password password:letmein --selinux-relabel
Comparison of guestfish and virt-customize Commands
ADDITIONAL TOOLS
virt-builder
virt-sysprep
virt-customize -a ~/finance-rhel-mail.qcow2 --run-command 'systemctl enable
postfix' --run-command 'postconf -e "relayhost = [workstation.lab.example.com]"'
--run-command 'postconf -e "inet_interfaces = all"' --run-command 'yum -y install
mailx' --selinux-relabel
REVIEWING CLOUD-INIT BASICS
cat /home/student/.ssh/example-keypair.pub
[student@workstation ~]$ disk-image-create vm rhel7 \
-t qcow2 \
-p httpd \
-o production-rhel-web.qcow2
-----------------------------------------------------------------------------------
---------------------------------------------------------
MANAGING STORAGE
IMPLEMENTING BLOCK STORAGE
BLOCK STORAGE CHOICES
LVM and iSCSI
Red Hat Ceph Storage
NFS
Vendor-specific Storage
THE RED HAT CEPH STORAGE ARCHITECTURE
CEPH TERMINOLOGY
Ceph cluster
Node
Pool
Placement Groups
CEPH STORAGE BACK END COMPONENTS
Monitors (MONs),
Object Storage Devices (OSDs),
Managers (MGRs),
Metadata Servers (MDSs)
The Key-ring File
/etc/ceph/ceph.conf
/etc/ceph/$cluster.$name.keyring
Command-line Tools
[root@controller ~]# ceph --id operator3 osd lspools
AUTHORIZATION WITH CEPHX
Cephx Capabilities
r,w,x,*
rados lock get
rbd list.
ceph auth list
ceph auth get client.admin
ceph auth print-key client.admin
USER MANAGEMENT
Listing Users and Their Capabilities
Creating New User Accounts
[root@controller ~]# ceph auth get-or-create client.application1 \
mon 'allow r' \
osd 'allow rw' \
> /etc/ceph/ceph.client.application1.keyring
OPENSTACK IMAGE SERVICE WITH RED HAT CEPH STORAGE
default_store,stores,rbd_store_user,rbd_store_pool,rbd_store_ceph_conf,rbd_store_ch
unk_size
OPENSTACK BLOCK STORAGE SERVICE WITH RED HAT CEPH STORAGE
enabled_backends,volume_backend_name,volume_driver,rbd_ceph_conf,rbd_user,rbd_pool
[root@ceph ~]# systemctl list-units -t service ceph\*
ceph -s
ceph osd lspools
openstack volume create --size 1 --type cephvoltype cephvol1
rados -p volumes ls
openstack volume create --size 10 --type cephvoltype --image rhel7 cephvol2
rados -p volumes ls | grep volume
[user@demo ~]$ cinder type-create volume-multi
[user@demo ~]$ cinder type-key volume-multi set multiattach="<is> True"
[user@demo ~]$ cinder create 2 --name multi-volume1 --volume-type volume-multi
[root@controller0 ~]# docker exec -it glance_api grep -Ei 'rbd|ceph'
/etc/glance/glance-api.conf | grep -v ^#
rados -p images ls | grep d0712086-6594-4620-b936-e58573e9c451
rados -p volumes ls
[root@controller0 ~]# docker exec -it cinder_api grep -Ei 'rbd|ceph'
/etc/cinder/cinder.conf | grep -v ^#
-----------------------------------------------------------------------------------
---------------------------------------------------------
MANAGING OPENSTACK NETWORKING
INTRODUCING THE SDN ARCHITECTURE
Architectural Components
Application Plane
Management Plane
Control Plane
Operational Plane
Forwarding Plane
SDN Terminology
Application
Data path
Controller
Control to Data Plane Interface (CDPI)
Northbound Interfaces (NBIs)
SDN Classroom Components
[root@controller0 ~]# view ovsdb-server.log
[root@controller0 ~]# view ovs-vswitchd.log
[root@controller0 ~]# ll /var/log/containers/openvswitch
[root@computehci0 ~]# ps -ef | grep ovn
INTRODUCING NETWORK TYPES
Flat Networks
Virtual LAN (VLAN) Networks
Introduction to Geneve
Geneve Components
[root@controller0 ~]# ovs-vsctl show
[root@controller0 ~]# ps -ef | grep ovnnb
[root@controller0 ~]# ovs-vsctl show
[root@controller0 ~]# ovs-ofctl show br-trunk
[root@compute0 ~]# tcpdump -ten -i vlan20 | grep ICMP
[root@compute0 ~]# ovs-vsctl list open
[root@compute0 ~]# ovn-sbctl lflow-list > flow.txt
[root@compute0 ~]# view flow.txt
[root@compute0 ~]# ovn-nbctl show
INTRODUCING OPEN VIRTUAL NETWORKING (OVN)
INTRODUCTION TO MODULAR LAYER 2 (ML2)
ML2 Drivers and Networks Types
Flat
VLAN
GRE and VXLAN
Geneve
INTRODUCTION TO OPEN VIRTUAL NETWORKING(OVN)
OVN Architecture
OVN Database
OVN and OpenFlow
OVN Logical Flows
COMPARING ML2/OVS TO ML2/OVN
OVN GATEWAY ROUTER
[root@controller0 ~]# ovn-nbctl show
[root@controller0 ~]# ovs-vsctl list open
[root@controller0 ~]# export OVN_SB_DB=tcp:172.24.1.50:6642
[root@controller0 ~]# ovn-sbctl lflow-list
[root@controller0 ~]# ovn-vsctl list open
[root@controller0 ~]# export OVN_NB_DB=tcp:172.24.1.50:6641
[root@controller0 ~]# export OVN_SB_DB=tcp:172.24.1.50:6642
[root@controller0 ~]# env | grep OVN_
INTRODUCTION TO SECURITY GROUPS
[root@controller0 ~]# ovn-sbctl lflow-list
[root@controller0 ~]# ovn-nbctl ls-list
[root@controller0 ~]# ovn-nbctl acl-list neutron-2fa7885cc49d-452d-8501-
3cb02582ebf4
OVN DHCP
OVN LOAD BALANCING
OVN METADATA
[root@controller0 ~]# ovn-sbctl lflow-list
[root@controller0 ~]# ovn-nbctl acl-list neutron-7ad21970-5986-42e0-9b48-
64ab414bb0b1
[student@workstation ~(developer1-finance)]$ openstack security group rule list
default --long -f json
[root@controller0 ~]# ovn-sbctl lflow-list > flow.txt
[root@controller0 ~]# view flow.txt
[root@controller0 ~]# ovn-nbctl show
[root@controller0 ~]# ovn-nbctl lr-list
[root@controller0 ~]# ovn-nbctl lr-nat-list neutron-54a04000-17ea-44df-8c79-
d18164e6a1f2
[root@controller0 ~]# ovn-sbctl lflow-list > dhcp.txt
[root@controller0 ~]# view dhcp.txt
[demo@workstation ~]$ openstack network show 6fce40cf-7da3-4242-938a-3c7043dc2b6a
[user@demo ~]$ openstack subnet show provider-subnet-172.25.250
[root@controller0 ~]# ovs-vsctl get open . external-ids:ovn-bridge-mappings
[root@controller0 ~]# ovs-vsctl show
[root@controller0 ~]# grep ^network_vlan_ranges /var/lib/config-data/puppet-
generated/neutron/etc/neutron/plugins/ml2/ml2_conf.ini
-----------------------------------------------------------------------------------
---------
DESCRIBING THE INSTANCE LAUNCH PROCESS
[student@workstation ~(architect1-finance)]$ openstack aggregate create hci-
aggregate
[student@workstation ~(architect1-finance)]$ openstack aggregate add host hci-
aggregate computehci0.overcloud.example.com
student@workstation ~(architect1-finance)]$ openstack aggregate set --property
computehci=true hci-aggregate
[student@workstation ~(architect1-finance)]$ openstack aggregate show hci-aggregate
