Proste zarządzanie setkami serwerów SUSE Manager 2.1 I SUSE Virtualization Enterprise Console

Transcription

1 Proste zarządzanie setkami serwerów SUSE Manager 2.1 I SUSE Virtualization Enterprise Console Dariusz Puchalak SUSE Certified Instructor Dariusz@Puchalak.net

2 Dariusz Puchalak since november 2014 at OSEC.pl 2 Unix/Linux administration since 1995 Consultant since 2006 Banking industry (related to KNF recommendation D ) Certified Novell Instructor since 2007 Advanced CNI since 2012 SUSE Certified Instructor Red Hat Certified Architect since

3 Dariusz Puchalak worked at: Politechnika Wrocławska Wrocławskie Centrum Sieciowo-Superkomputerowe Tampere University of Technology Incenti (Outsourcing/Data Center) ProbosIT (Consulting) Compendium CE (Training) Banking industry (since 2013) OSEC (since November 2014 :) OSEC Sp. z o.o. - new Novell/SUSE training partner coming soon! Go 3

4 Understand the Capabilities of SUSE Manager

5 Value of SUSE Manager Manage SUSE Linux Enterprise and Red Hat Enterprise Linux servers with a single centralized solution Provides: 5 automated and cost-effective software management asset management system provisioning monitoring capabilities Manage Linux server deployments across physical, virtual, and cloud environments

6 SUSE Manager is Open Source 6

7 How does SUSE Manager work? 7

8 Supported Systems and Architectures 8 System Supported Architectures SUSE Linux Enterprise Server 10 SP3 and SP4 x86, x86_64, Itanium, IBM POWER, IBM System z SUSE Linux Enterprise Server 11 SP1, SP2 and SP3 x86, x86_64, Itanium, IBM POWER, IBM System z Red Hat Enterprise Linux 5 x86, x86_64 Red Hat Enterprise Linux 6 x86, x86_64 Novell Open Enterprise Server 11 and SP1 x86, x86_64

9 Why choose SUSE Manager if you are mostly Linux shop 9

10 Why choose SUSE Manager if you are mostly Windows shop SUSE perfect guest strategy SUSE no vendor lock-in strategy Please wait for next presentation titled: SUSE Manager Management Pack for Microsoft System Center 10

11 Management Module

12 Management Module 12 NCC integration ZYpp update stack Server groups Custom repositories SUSE Manager API Scheduler Role-based access control Search Central Audit Log Virtual guest, appliance and System z management

13 Inventory Hardware 13 CPU, Memory, BIOS, Network Physical location Software Installed packages Profiles, Reference system

14 Package Management 14 Channels (package repositories) Tree-like structure Private channels Package operations Verify Install Update View Delete Profiles

15 Patch and Update Management 15 View pending updates Notifications Manual or automatic update Scheduled reboots

16 Provisioning Module

17 Provisioning Module Bare metal provisioning Virtual-guest provisioning 17 Xen and KVM, soon z/vm Existing state provisioning SUSE Studio Integration for Image Deployment Server roll-back Configuration management Application provisioning Configuration profile management Provisioning scripts

18 Deployment Auto-Installation 18 AutoYaST (SUSE Linux Enterprise Server) Kickstart (RHEL) Physical or virtual PXE boot Re-deployment

19 Configuration Management 19 Files and directories Organized as channels Profiles Drift-Control (compare two states)

20 Monitoring Module

21 Monitoring Module 21 Probes Probe groups Boundaries Notifications/Alerts Reporting Graphical view

22 Administrative Objects Relationships

23 Setup Scenario 23

24 Advantages of using SUSE Manager 24 Scalability Security Control Access Control Efficiency (and bandwidth) Patches/Customized updates Scheduled Actions Based on standard protocols Simplification

25 Objects relationships 25

26 User Roles 26 Administrative roles SUSE Manager Administrator Organization Administrator Roles System Group Channel Activation Key Configuration Monitoring

27 Deployment Topologies

28 Simple topology 28

29 Horizontal Tiered for larger environments 29

30 Vertical Tiered for larger environments (with one management) 30

31 Air gaped environments 31

32 Compliance

33 How to be in compliance? 33 Confidentiality Integrity Availability Authentication Auditing Logging Change Management

34 How SUSE Manager helps in compliance? OpenSCAP 34 Audit software patch status Confirm that servers have latest security updates Check system-security configuration settings Examine systems for signs of compromise Create security audit log

35 How SUSE Manager helps in compliance? Automated patch management 35 Examine patch status of systems and system groups Update patches directly Scheduled patches updates during maintenance window Multiple staging areas for patches Patch metadata from SUSE with CVE numbers Auto update critical security patches

36 How SUSE Manager helps in compliance? 36 Restriction of information about systems Integrity of information (audit logging) Availability (monitoring of health of servers, networks, systems) Role base control allows implementing FIXME Change Management Monitoring and notification Single management interface SUSE Manager API

37 SUSE Virtualization Console Technology preview

38 SLES 12 Virtualization 38 Continued Xen Support Upstream Xen is still very much alive! Stub and driver domains Libxenlight / xl interface (xend is gone!), incl. upgrade path KVM Features Linux and Windows Guest-Agent Improved Numa Support Hotplug memory Hotplug vcpus vfio support VTPM Multiqueue networking

39 SLES 12 Virtualization 39 Virtualization Tools p2v tool v2v tool (Xen to KVM) Extensive v2v documentation Switch to virt-inst as default installer SPICE support in tools, remote server UI

40 Virtualization Management 40 Virt Manager SUSE Virtualization Enterprise Console (Technology preview) SUSE Cloud

41 SUSE Virtualization Enterprise Console 41 Technology preview Based on Open Source ovirt (ovirt.org) Enterprise Scale Web Based Management of virtual hosts and machines Positioned beetwen Virt Manager and SUSE Cloud New course SUSE Virtualization Enterprise Console is coming stay tuned. :)

42 suse-manager/ Dziękuję za uwagę! 48

43 SUSE w Polsce ul. Postępu Warszawa Infolinia Dołącz do nas:

44 Unpublished Work of SUSE LLC. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary and trade secret information of SUSE LLC. Access to this work is restricted to SUSE employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of SUSE. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. SUSE makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for SUSE products remains at the sole discretion of SUSE. Further, SUSE reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All SUSE marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners.