This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
создание_отказоустойчивых_unix_решений [2018/09/26 12:12] val [6.4 Настройка NAS сервера SMB/CIFS] |
создание_отказоустойчивых_unix_решений [2019/02/01 15:33] (current) val [7.4 Интеграция контейнеров с менеджером кластера] |
||
|---|---|---|---|
| Line 35: | Line 35: | ||
| </code><code> | </code><code> | ||
| search corpX.un | search corpX.un | ||
| - | nameserver 10.5.4.254 | + | nameserver 10.5.6.254 |
| </code><code> | </code><code> | ||
| [nodeN:~] # cat /etc/hosts | [nodeN:~] # cat /etc/hosts | ||
| Line 44: | Line 44: | ||
| 192.168.X.2 node2.corpX.un node2 | 192.168.X.2 node2.corpX.un node2 | ||
| - | 10.5.4.254 proxy | + | 10.5.6.254 proxy |
| </code> | </code> | ||
| Line 65: | Line 65: | ||
| auto eth2 | auto eth2 | ||
| iface eth2 inet static | iface eth2 inet static | ||
| - | address 10.5.4.N*100+X | + | address 10.5.6.N*100+X |
| netmask 255.255.255.0 | netmask 255.255.255.0 | ||
| Line 102: | Line 102: | ||
| ifconfig_em0="inet 192.168.X.N/24" | ifconfig_em0="inet 192.168.X.N/24" | ||
| ifconfig_em1="up" | ifconfig_em1="up" | ||
| - | ifconfig_em2="inet 10.5.4.N*100+X/24" | + | ifconfig_em2="inet 10.5.6.N*100+X/24" |
| ifconfig_em3="up" | ifconfig_em3="up" | ||
| </code><code> | </code><code> | ||
| Line 174: | Line 174: | ||
| <code> | <code> | ||
| node1# csync2 -xvv | node1# csync2 -xvv | ||
| + | </code><code> | ||
| + | nodeN# cat /etc/resolv.conf | ||
| + | </code><code> | ||
| + | search corpX.un | ||
| + | nameserver 192.168.X.1 | ||
| + | nameserver 192.168.X.2 | ||
| </code> | </code> | ||
| - | |||
| ==== 2.3 С использованием пакета Ansible ==== | ==== 2.3 С использованием пакета Ansible ==== | ||
| Line 229: | Line 234: | ||
| * [[Протокол CARP]] | * [[Протокол CARP]] | ||
| + | <code> | ||
| + | C:\>ping gate | ||
| + | </code> | ||
| ==== 4.2 Отказоустойчивый nat ==== | ==== 4.2 Отказоустойчивый nat ==== | ||
| Line 373: | Line 381: | ||
| ip route add default via 172.16.1.254 table 101 | ip route add default via 172.16.1.254 table 101 | ||
| ip route add default via 172.16.2.254 table 102 | ip route add default via 172.16.2.254 table 102 | ||
| - | |||
| - | echo > /tmp/conf_name | ||
| </code><code> | </code><code> | ||
| nodeN# cat isp1_isp2.sh | nodeN# cat isp1_isp2.sh | ||
| Line 512: | Line 518: | ||
| </code><code> | </code><code> | ||
| * * * * * /root/select_isp.sh >/dev/null 2>&1 | * * * * * /root/select_isp.sh >/dev/null 2>&1 | ||
| - | </code><code> | + | </code> |
| + | |||
| + | **Debian/Ubuntu** | ||
| + | |||
| + | <code> | ||
| + | nodeN# ip route show table 101 | ||
| + | |||
| + | nodeN# ip route show table 102 | ||
| + | |||
| + | nodeN# ip rule show | ||
| + | </code> | ||
| + | |||
| + | **FreeBSD** | ||
| + | |||
| + | <code> | ||
| nodeN# pfctl -t ISP1 -T show | nodeN# pfctl -t ISP1 -T show | ||
| + | |||
| nodeN# pfctl -t ISP1 -T show | nodeN# pfctl -t ISP1 -T show | ||
| </code> | </code> | ||
| Line 601: | Line 622: | ||
| ... | ... | ||
| </code> | </code> | ||
| - | Устанавливаем на node1 [[Пакет RSYNC]] | + | **Ubuntu/FreeBSD** |
| <code> | <code> | ||
| nodeN# cat /CHANGE/DIR/rsyncd.conf | nodeN# cat /CHANGE/DIR/rsyncd.conf | ||
| Line 611: | Line 632: | ||
| nodeN# crontab -l | nodeN# crontab -l | ||
| </code> | </code> | ||
| - | FreeBSD | + | **FreeBSD** |
| <code> | <code> | ||
| * * * * * ps ax | grep -v grep | grep -q 'ftpd -D' && /usr/local/bin/rsync -a /home/ slave::home | * * * * * ps ax | grep -v grep | grep -q 'ftpd -D' && /usr/local/bin/rsync -a /home/ slave::home | ||
| </code> | </code> | ||
| - | Ubuntu | + | **Ubuntu** |
| <code> | <code> | ||
| * * * * * ps ax | grep -v grep | grep -q 'proftpd: (accepting connections)' && /usr/bin/rsync -a /home/ slave::home | * * * * * ps ax | grep -v grep | grep -q 'proftpd: (accepting connections)' && /usr/bin/rsync -a /home/ slave::home | ||
| </code> | </code> | ||
| - | Debian | + | **Debian** |
| <code> | <code> | ||
| * * * * * ps ax | grep -v grep | grep -q 'proftpd: (accepting connections)' && /usr/bin/rsync -az --delete /home/ slave:/home/ | * * * * * ps ax | grep -v grep | grep -q 'proftpd: (accepting connections)' && /usr/bin/rsync -az --delete /home/ slave:/home/ | ||
| </code> | </code> | ||
| - | |||
| ===== Модуль 6. Развертывание отказоустойчивых файловых сервисов ===== | ===== Модуль 6. Развертывание отказоустойчивых файловых сервисов ===== | ||
| Line 782: | Line 802: | ||
| smbd | smbd | ||
| </code><code> | </code><code> | ||
| - | Этот скрипт не нужен | ||
| - | |||
| - | root@nodeN:~# cat /etc/ha.d/resource.d/smbserv | ||
| - | </code><code> | ||
| - | #!/bin/sh | ||
| - | |||
| - | case $1 in | ||
| - | start) | ||
| - | service smbd start | ||
| - | ;; | ||
| - | stop) | ||
| - | service smbd stop | ||
| - | ;; | ||
| - | esac | ||
| - | |||
| - | exit 0 | ||
| - | </code><code> | ||
| - | root@nodeN:~# chmod +x /etc/ha.d/resource.d/smbserv | ||
| - | |||
| root@nodeN:~# service heartbeat start | root@nodeN:~# service heartbeat start | ||
| </code> | </code> | ||
| Line 867: | Line 868: | ||
| * Отключение всех сервисов (особенно, ip, привязанного к eth), кроме зеркалируемого раздела [[Пакет Pacemaker#Управление ресурсами]] | * Отключение всех сервисов (особенно, ip, привязанного к eth), кроме зеркалируемого раздела [[Пакет Pacemaker#Управление ресурсами]] | ||
| + | <code> | ||
| + | node1# crm resource stop pr_ip pr_istgt pr_smbd | ||
| + | |||
| + | node1# crm configure delete pr_ip pr_istgt pr_smbd gr_ip_fs | ||
| + | </code> | ||
| + | |||
| * [[Технология LXC#Подготовка сети]] для LXC | * [[Технология LXC#Подготовка сети]] для LXC | ||
| * Сервис CARP и bridge | * Сервис CARP и bridge | ||
| Line 948: | Line 955: | ||
| server:/# apt purge resolvconf isc-dhcp-client | server:/# apt purge resolvconf isc-dhcp-client | ||
| - | server:/# apt install nano | + | server:/# apt install nano vim iputils-ping |
| </code> | </code> | ||
| Line 1007: | Line 1014: | ||
| root@node1.corpX.un:~# systemctl start lxc@server | root@node1.corpX.un:~# systemctl start lxc@server | ||
| - | </code> | ||
| + | debian9_nodeN# mkdir /etc/systemd/system/lxc@server.service.d/ | ||
| + | |||
| + | debian9_nodeN# cat /etc/systemd/system/lxc@server.service.d/kill_signal_fix.conf | ||
| + | </code><code> | ||
| + | [Service] | ||
| + | KillSignal=SIGRTMIN+3 | ||
| + | </code><code> | ||
| + | root@node1.corpX.un:~# systemctl stop lxc@server | ||
| + | </code> | ||
| ==== 7.2 FreeBSD Jail в зеркалируемом разделе ==== | ==== 7.2 FreeBSD Jail в зеркалируемом разделе ==== | ||
| Line 1115: | Line 1130: | ||
| <code> | <code> | ||
| + | NEW | ||
| + | primitive pr_lxc_server systemd:lxc@server | ||
| + | group gr_fs_lxc pr_fs_r0 pr_lxc_server | ||
| + | |||
| + | OLD | ||
| primitive pr_lxc_server systemd:lxc@server | primitive pr_lxc_server systemd:lxc@server | ||
| Line 1122: | Line 1142: | ||
| colocation col_lxc_on_drbd inf: pr_lxc_server ms_drbd_r0:Master | colocation col_lxc_on_drbd inf: pr_lxc_server ms_drbd_r0:Master | ||
| + | !!! Похоже порядок в группе имеет значение и здесь ошибка !!! | ||
| group gr_lxc_fs pr_lxc_server pr_fs_r0 | group gr_lxc_fs pr_lxc_server pr_fs_r0 | ||