SlideShare a Scribd company logo
1 of 15
Introduction to OpenVZ
                             oej@edvina.net




      Olle E.
oej@edvina.net   Johansson * oej@edvina.net * Twitter oej
           © Copyright Edvina AB, Sollentuna, Sweden 2012. All rights reserved.
OpenVZ
• Virtualization software by Parallells, inc.
  Base for their commercial Virtuozzo
  platform

• Integrated with the virtualization
  support in the kernel - lvc

• Segmentation, not full virtualization
• Regardless, has cool features
                                       Introduction to
                                          OpenVZ
Cool features
• Migration of running system
• Backup with just a few secs stop time
• Very simple - shared filesystem in the
  host system




                                    Introduction to
                                       OpenVZ
Basics
                                              Containers share the
                                           same kernel. Only Linux is
                                          supported - but you can run
         Kernel                             a different distribution in
                           Container 1              a container.
        OpenVZ




   The host system
                                         Containers get allocated a few
runs a full Linux with a
                           Container 2    resources - network, CPU,
 standard kernel with
                                                memory, disk.
  openvz extensions.


                                                      Introduction to
                                                         OpenVZ
The container is a full
        Linux system
• The container is a full Linux system
 • It has network interfaces (if configured)
 • It has a separate user account database (/etc/passwd)
 • It needs patching and updates like any other system

                                                Introduction to
                                                   OpenVZ
The Kernel
• The kernel is managed as an package for
  the distro you are using.

• For Centos, you add a new yum
  repository and install the kernel

• Reboot and you have OpenVZ support
• Now install the tools - vzsplit, vzctl and
  vzlist
                                       Introduction to
                                          OpenVZ
vzctl
• Used to manage containers
 • Create new container
 • Start container
 • Stop container
 • Change attributes (name, IP address, various limits,
    properties)
                                                  Introduction to
                                                     OpenVZ
vzlist
• Simply list containers running in a system
• Lists all container IDs




                                     Introduction to
                                        OpenVZ
vzsplit
• Used to get settings for vzctl (or the .conf
  files)

• Takes all resources in a server and divides
  them between a specific number of
  containers




                                       Introduction to
                                          OpenVZ
Beancounters
• Counters that document use
• Also document when a resource limit is
  exceeded

• cat /proc/user_beancounters
• Used to design system and manage issues
 • Watch the failcnt column!
                                    Introduction to
                                       OpenVZ
Networking
• Ethernet interface via nat or bridge
• The bridge interface enables DHCP and
  other broadcast /multicast technologies

• IPv4 and IPv6 support
• Firewall with IPtables in container or
  outside in host system (on the bridge)

• Network traffic can be managed       Introduction to
                                         OpenVZ
Script hooks
• There are hooks for scripts you can run
  when starting and stopping containers

• These can be used to mount disk drives
  into container




                                     Introduction to
                                        OpenVZ
Configuration
• Configuration file in /etc/vz/vz.conf
• Configuration for containers in /etc/vz/
  conf




                                    Introduction to
                                       OpenVZ
Advanced features
• Live migration of containers between
  systems

• Backup of running system
• Remote management with libvirt


                                    Introduction to
                                       OpenVZ
References
• www.openvz.org
 • Documentation
 • Wiki full with information, howto’s and documentation
 • Downloadable templates for containers - Centos,
    Debian, Ubuntu and other distributions


                                                 Introduction to
                                                    OpenVZ

More Related Content

What's hot

Linux Container Technology 101
Linux Container Technology 101Linux Container Technology 101
Linux Container Technology 101
inside-BigData.com
 
Virtualization which isn't: LXC (Linux Containers)
Virtualization which isn't: LXC (Linux Containers)Virtualization which isn't: LXC (Linux Containers)
Virtualization which isn't: LXC (Linux Containers)
Dobrica Pavlinušić
 
pkgsrc on SmartOS
pkgsrc on SmartOSpkgsrc on SmartOS
pkgsrc on SmartOS
jonperkin
 

What's hot (20)

Linux containers – next gen virtualization for cloud (atl summit) ar4 3 - copy
Linux containers – next gen virtualization for cloud (atl summit) ar4 3 - copyLinux containers – next gen virtualization for cloud (atl summit) ar4 3 - copy
Linux containers – next gen virtualization for cloud (atl summit) ar4 3 - copy
 
Lxc- Linux Containers
Lxc- Linux ContainersLxc- Linux Containers
Lxc- Linux Containers
 
Lxc- Introduction
Lxc- IntroductionLxc- Introduction
Lxc- Introduction
 
Lxc – next gen virtualization for cloud intro (cloudexpo)
Lxc – next gen virtualization for cloud   intro (cloudexpo)Lxc – next gen virtualization for cloud   intro (cloudexpo)
Lxc – next gen virtualization for cloud intro (cloudexpo)
 
Linux Container Technology 101
Linux Container Technology 101Linux Container Technology 101
Linux Container Technology 101
 
Linux Container Brief for IEEE WG P2302
Linux Container Brief for IEEE WG P2302Linux Container Brief for IEEE WG P2302
Linux Container Brief for IEEE WG P2302
 
Cgroups, namespaces, and beyond: what are containers made from? (DockerCon Eu...
Cgroups, namespaces, and beyond: what are containers made from? (DockerCon Eu...Cgroups, namespaces, and beyond: what are containers made from? (DockerCon Eu...
Cgroups, namespaces, and beyond: what are containers made from? (DockerCon Eu...
 
LXC
LXCLXC
LXC
 
Docker storage drivers by Jérôme Petazzoni
Docker storage drivers by Jérôme PetazzoniDocker storage drivers by Jérôme Petazzoni
Docker storage drivers by Jérôme Petazzoni
 
Lightweight Virtualization: LXC containers & AUFS
Lightweight Virtualization: LXC containers & AUFSLightweight Virtualization: LXC containers & AUFS
Lightweight Virtualization: LXC containers & AUFS
 
Virtualization which isn't: LXC (Linux Containers)
Virtualization which isn't: LXC (Linux Containers)Virtualization which isn't: LXC (Linux Containers)
Virtualization which isn't: LXC (Linux Containers)
 
OpenNebula Conf 2014 | Using Ceph to provide scalable storage for OpenNebula ...
OpenNebula Conf 2014 | Using Ceph to provide scalable storage for OpenNebula ...OpenNebula Conf 2014 | Using Ceph to provide scalable storage for OpenNebula ...
OpenNebula Conf 2014 | Using Ceph to provide scalable storage for OpenNebula ...
 
Evoluation of Linux Container Virtualization
Evoluation of Linux Container VirtualizationEvoluation of Linux Container Virtualization
Evoluation of Linux Container Virtualization
 
Anatomy of a Container: Namespaces, cgroups & Some Filesystem Magic - LinuxCon
Anatomy of a Container: Namespaces, cgroups & Some Filesystem Magic - LinuxConAnatomy of a Container: Namespaces, cgroups & Some Filesystem Magic - LinuxCon
Anatomy of a Container: Namespaces, cgroups & Some Filesystem Magic - LinuxCon
 
LXC, Docker, security: is it safe to run applications in Linux Containers?
LXC, Docker, security: is it safe to run applications in Linux Containers?LXC, Docker, security: is it safe to run applications in Linux Containers?
LXC, Docker, security: is it safe to run applications in Linux Containers?
 
pkgsrc on SmartOS
pkgsrc on SmartOSpkgsrc on SmartOS
pkgsrc on SmartOS
 
[DockerCon 2019] Hardening Docker daemon with Rootless mode
[DockerCon 2019] Hardening Docker daemon with Rootless mode[DockerCon 2019] Hardening Docker daemon with Rootless mode
[DockerCon 2019] Hardening Docker daemon with Rootless mode
 
Performance characteristics of traditional v ms vs docker containers (dockerc...
Performance characteristics of traditional v ms vs docker containers (dockerc...Performance characteristics of traditional v ms vs docker containers (dockerc...
Performance characteristics of traditional v ms vs docker containers (dockerc...
 
Introduction to containers
Introduction to containersIntroduction to containers
Introduction to containers
 
Linux Containers From Scratch
Linux Containers From ScratchLinux Containers From Scratch
Linux Containers From Scratch
 

Viewers also liked

Magnus Christerson Henk Kolk Domain Expert DSLs
Magnus Christerson Henk Kolk Domain Expert DSLsMagnus Christerson Henk Kolk Domain Expert DSLs
Magnus Christerson Henk Kolk Domain Expert DSLs
deimos
 
Shashi Bellamkonda - Social Media at the DC Chamber of Commerce
Shashi Bellamkonda - Social Media  at the DC Chamber of CommerceShashi Bellamkonda - Social Media  at the DC Chamber of Commerce
Shashi Bellamkonda - Social Media at the DC Chamber of Commerce
Shashi Bellamkonda
 
Neal Gafter Java Evolution
Neal Gafter Java EvolutionNeal Gafter Java Evolution
Neal Gafter Java Evolution
deimos
 
25 Anni di Solidarietà
25 Anni di Solidarietà25 Anni di Solidarietà
25 Anni di Solidarietà
maurinbu
 
Firefox的安全性
Firefox的安全性Firefox的安全性
Firefox的安全性
Liu Xing
 
Advanced SEO - Huzzah seminar
Advanced SEO - Huzzah seminarAdvanced SEO - Huzzah seminar
Advanced SEO - Huzzah seminar
Ian Lurie
 

Viewers also liked (20)

Open Virtualization - Virtualização em Software Livre
Open Virtualization - Virtualização em Software LivreOpen Virtualization - Virtualização em Software Livre
Open Virtualization - Virtualização em Software Livre
 
Magnus Christerson Henk Kolk Domain Expert DSLs
Magnus Christerson Henk Kolk Domain Expert DSLsMagnus Christerson Henk Kolk Domain Expert DSLs
Magnus Christerson Henk Kolk Domain Expert DSLs
 
Shashi Bellamkonda - Social Media at the DC Chamber of Commerce
Shashi Bellamkonda - Social Media  at the DC Chamber of CommerceShashi Bellamkonda - Social Media  at the DC Chamber of Commerce
Shashi Bellamkonda - Social Media at the DC Chamber of Commerce
 
Neal Gafter Java Evolution
Neal Gafter Java EvolutionNeal Gafter Java Evolution
Neal Gafter Java Evolution
 
25 Anni di Solidarietà
25 Anni di Solidarietà25 Anni di Solidarietà
25 Anni di Solidarietà
 
Final Mobile Youth Net Project
Final Mobile Youth Net ProjectFinal Mobile Youth Net Project
Final Mobile Youth Net Project
 
Firefox的安全性
Firefox的安全性Firefox的安全性
Firefox的安全性
 
Survey 2016 acimit-blumine
Survey 2016 acimit-blumineSurvey 2016 acimit-blumine
Survey 2016 acimit-blumine
 
My sport life
My sport lifeMy sport life
My sport life
 
Present perfect
Present perfectPresent perfect
Present perfect
 
Presentation to GIBBS MBA class on Disruption and Innovation
Presentation to GIBBS MBA class on Disruption and InnovationPresentation to GIBBS MBA class on Disruption and Innovation
Presentation to GIBBS MBA class on Disruption and Innovation
 
#Morecrypto 1.8 - with introduction to TLS
#Morecrypto 1.8 - with introduction to TLS#Morecrypto 1.8 - with introduction to TLS
#Morecrypto 1.8 - with introduction to TLS
 
pmc trip
pmc trippmc trip
pmc trip
 
Guerilla Marketing/PR Hacks
Guerilla Marketing/PR HacksGuerilla Marketing/PR Hacks
Guerilla Marketing/PR Hacks
 
Gpa
GpaGpa
Gpa
 
PI Stats Show
PI Stats ShowPI Stats Show
PI Stats Show
 
Advanced SEO - Huzzah seminar
Advanced SEO - Huzzah seminarAdvanced SEO - Huzzah seminar
Advanced SEO - Huzzah seminar
 
Web2 Voorbeeldpresentatie
Web2 VoorbeeldpresentatieWeb2 Voorbeeldpresentatie
Web2 Voorbeeldpresentatie
 
Collaborating in the Clouds: selecting tools
Collaborating in the Clouds: selecting toolsCollaborating in the Clouds: selecting tools
Collaborating in the Clouds: selecting tools
 
Coches Sucios
Coches SuciosCoches Sucios
Coches Sucios
 

Similar to Openvz - a quick introduction

An overview of OpenVZ virtualization technology
An overview of OpenVZ virtualization technologyAn overview of OpenVZ virtualization technology
An overview of OpenVZ virtualization technology
OpenVZ
 
2 Linux Container and Docker
2 Linux Container and Docker2 Linux Container and Docker
2 Linux Container and Docker
Fabio Fumarola
 
SlideDevopsSubjectEng set 8 (CVCS DVCS).pptx
SlideDevopsSubjectEng set 8 (CVCS  DVCS).pptxSlideDevopsSubjectEng set 8 (CVCS  DVCS).pptx
SlideDevopsSubjectEng set 8 (CVCS DVCS).pptx
UTKARSHBHARDWAJ71
 

Similar to Openvz - a quick introduction (20)

Introduction to linux containers
Introduction to linux containersIntroduction to linux containers
Introduction to linux containers
 
Linux virtualization
Linux virtualizationLinux virtualization
Linux virtualization
 
OpenVZ Linux containers
OpenVZ Linux containersOpenVZ Linux containers
OpenVZ Linux containers
 
Red Hat Openshift Fundamentals.pptx
Red Hat Openshift Fundamentals.pptxRed Hat Openshift Fundamentals.pptx
Red Hat Openshift Fundamentals.pptx
 
How Docker didn't invent containers (Docker Meetup Brno #1)
How Docker didn't invent containers (Docker Meetup Brno #1)How Docker didn't invent containers (Docker Meetup Brno #1)
How Docker didn't invent containers (Docker Meetup Brno #1)
 
Introduction to open virtual network Dawid Deja
Introduction to open virtual network  Dawid DejaIntroduction to open virtual network  Dawid Deja
Introduction to open virtual network Dawid Deja
 
Docker Dojo
Docker DojoDocker Dojo
Docker Dojo
 
VMware and Container Orchestration
VMware and Container OrchestrationVMware and Container Orchestration
VMware and Container Orchestration
 
An overview of OpenVZ virtualization technology
An overview of OpenVZ virtualization technologyAn overview of OpenVZ virtualization technology
An overview of OpenVZ virtualization technology
 
Apache CloudStack: API to UI (STLLUG)
Apache CloudStack: API to UI (STLLUG)Apache CloudStack: API to UI (STLLUG)
Apache CloudStack: API to UI (STLLUG)
 
Develop with linux containers and docker
Develop with linux containers and dockerDevelop with linux containers and docker
Develop with linux containers and docker
 
2 Linux Container and Docker
2 Linux Container and Docker2 Linux Container and Docker
2 Linux Container and Docker
 
IPv6 & Containers
IPv6 & ContainersIPv6 & Containers
IPv6 & Containers
 
SlideDevopsSubjectEng set 8 (CVCS DVCS).pptx
SlideDevopsSubjectEng set 8 (CVCS  DVCS).pptxSlideDevopsSubjectEng set 8 (CVCS  DVCS).pptx
SlideDevopsSubjectEng set 8 (CVCS DVCS).pptx
 
Deploying Apache CloudStack from API to UI
Deploying Apache CloudStack from API to UIDeploying Apache CloudStack from API to UI
Deploying Apache CloudStack from API to UI
 
Introduction to linux
Introduction to linuxIntroduction to linux
Introduction to linux
 
Apache CloudStack from API to UI
Apache CloudStack from API to UIApache CloudStack from API to UI
Apache CloudStack from API to UI
 
Webinar - Getting Started With Ceph
Webinar - Getting Started With CephWebinar - Getting Started With Ceph
Webinar - Getting Started With Ceph
 
VCS, Containers & Low-code
VCS, Containers & Low-codeVCS, Containers & Low-code
VCS, Containers & Low-code
 
Virtualization with KVM (Kernel-based Virtual Machine)
Virtualization with KVM (Kernel-based Virtual Machine)Virtualization with KVM (Kernel-based Virtual Machine)
Virtualization with KVM (Kernel-based Virtual Machine)
 

More from Olle E Johansson

More from Olle E Johansson (20)

Cybernode.se: Securing the software supply chain (CRA)
Cybernode.se: Securing the software supply chain (CRA)Cybernode.se: Securing the software supply chain (CRA)
Cybernode.se: Securing the software supply chain (CRA)
 
CRA - overview of vulnerability handling
CRA - overview of vulnerability handlingCRA - overview of vulnerability handling
CRA - overview of vulnerability handling
 
Introduction to the proposed EU cyber resilience act (CRA)
Introduction to the proposed EU cyber resilience act (CRA)Introduction to the proposed EU cyber resilience act (CRA)
Introduction to the proposed EU cyber resilience act (CRA)
 
The birth and death of PSTN
The birth and death of PSTNThe birth and death of PSTN
The birth and death of PSTN
 
WebRTC and Janus intro for FOSS Stockholm January 2019
WebRTC and Janus intro for FOSS Stockholm January 2019WebRTC and Janus intro for FOSS Stockholm January 2019
WebRTC and Janus intro for FOSS Stockholm January 2019
 
Kamailio World 2018: Having fun with new stuff
Kamailio World 2018: Having fun with new stuffKamailio World 2018: Having fun with new stuff
Kamailio World 2018: Having fun with new stuff
 
Kamailio on air
Kamailio on airKamailio on air
Kamailio on air
 
Webrtc overview
Webrtc overviewWebrtc overview
Webrtc overview
 
Realtime communication over a dual stack network
Realtime communication over a dual stack networkRealtime communication over a dual stack network
Realtime communication over a dual stack network
 
The Realtime Story - part 2
The Realtime Story - part 2The Realtime Story - part 2
The Realtime Story - part 2
 
Sip2016 - a talk at VOIP2DAY 2016
Sip2016 - a talk at VOIP2DAY 2016Sip2016 - a talk at VOIP2DAY 2016
Sip2016 - a talk at VOIP2DAY 2016
 
Sips must die, die, die - about TLS usage in the SIP protocol
Sips must die, die, die - about TLS usage in the SIP protocolSips must die, die, die - about TLS usage in the SIP protocol
Sips must die, die, die - about TLS usage in the SIP protocol
 
SIP :: Half outbound (random notes)
SIP :: Half outbound (random notes)SIP :: Half outbound (random notes)
SIP :: Half outbound (random notes)
 
Kamailio World 2016: Update your SIP!
Kamailio World 2016: Update your SIP!Kamailio World 2016: Update your SIP!
Kamailio World 2016: Update your SIP!
 
SIP & TLS - Security in a peer to peer world
SIP & TLS - Security in a peer to peer worldSIP & TLS - Security in a peer to peer world
SIP & TLS - Security in a peer to peer world
 
Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM)
Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM)Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM)
Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM)
 
2015 update: SIP and IPv6 issues - staying Happy in SIP
2015 update: SIP and IPv6 issues - staying Happy in SIP2015 update: SIP and IPv6 issues - staying Happy in SIP
2015 update: SIP and IPv6 issues - staying Happy in SIP
 
TCP/IP Geeks Stockholm :: Introduction to IPv6
TCP/IP Geeks Stockholm :: Introduction to IPv6TCP/IP Geeks Stockholm :: Introduction to IPv6
TCP/IP Geeks Stockholm :: Introduction to IPv6
 
Why is Kamailio so different? An introduction.
Why is Kamailio so different? An introduction.Why is Kamailio so different? An introduction.
Why is Kamailio so different? An introduction.
 
RFC 7435 - Opportunistic security - Some protection most of the time
RFC 7435 - Opportunistic security - Some protection most of the timeRFC 7435 - Opportunistic security - Some protection most of the time
RFC 7435 - Opportunistic security - Some protection most of the time
 

Recently uploaded

Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
Joaquim Jorge
 

Recently uploaded (20)

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
Developing An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilDeveloping An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of Brazil
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdf
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Advantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your BusinessAdvantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your Business
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 

Openvz - a quick introduction

  • 1. Introduction to OpenVZ oej@edvina.net Olle E. oej@edvina.net Johansson * oej@edvina.net * Twitter oej © Copyright Edvina AB, Sollentuna, Sweden 2012. All rights reserved.
  • 2. OpenVZ • Virtualization software by Parallells, inc. Base for their commercial Virtuozzo platform • Integrated with the virtualization support in the kernel - lvc • Segmentation, not full virtualization • Regardless, has cool features Introduction to OpenVZ
  • 3. Cool features • Migration of running system • Backup with just a few secs stop time • Very simple - shared filesystem in the host system Introduction to OpenVZ
  • 4. Basics Containers share the same kernel. Only Linux is supported - but you can run Kernel a different distribution in Container 1 a container. OpenVZ The host system Containers get allocated a few runs a full Linux with a Container 2 resources - network, CPU, standard kernel with memory, disk. openvz extensions. Introduction to OpenVZ
  • 5. The container is a full Linux system • The container is a full Linux system • It has network interfaces (if configured) • It has a separate user account database (/etc/passwd) • It needs patching and updates like any other system Introduction to OpenVZ
  • 6. The Kernel • The kernel is managed as an package for the distro you are using. • For Centos, you add a new yum repository and install the kernel • Reboot and you have OpenVZ support • Now install the tools - vzsplit, vzctl and vzlist Introduction to OpenVZ
  • 7. vzctl • Used to manage containers • Create new container • Start container • Stop container • Change attributes (name, IP address, various limits, properties) Introduction to OpenVZ
  • 8. vzlist • Simply list containers running in a system • Lists all container IDs Introduction to OpenVZ
  • 9. vzsplit • Used to get settings for vzctl (or the .conf files) • Takes all resources in a server and divides them between a specific number of containers Introduction to OpenVZ
  • 10. Beancounters • Counters that document use • Also document when a resource limit is exceeded • cat /proc/user_beancounters • Used to design system and manage issues • Watch the failcnt column! Introduction to OpenVZ
  • 11. Networking • Ethernet interface via nat or bridge • The bridge interface enables DHCP and other broadcast /multicast technologies • IPv4 and IPv6 support • Firewall with IPtables in container or outside in host system (on the bridge) • Network traffic can be managed Introduction to OpenVZ
  • 12. Script hooks • There are hooks for scripts you can run when starting and stopping containers • These can be used to mount disk drives into container Introduction to OpenVZ
  • 13. Configuration • Configuration file in /etc/vz/vz.conf • Configuration for containers in /etc/vz/ conf Introduction to OpenVZ
  • 14. Advanced features • Live migration of containers between systems • Backup of running system • Remote management with libvirt Introduction to OpenVZ
  • 15. References • www.openvz.org • Documentation • Wiki full with information, howto’s and documentation • Downloadable templates for containers - Centos, Debian, Ubuntu and other distributions Introduction to OpenVZ

Editor's Notes

  1. \n
  2. \n
  3. \n
  4. \n
  5. \n
  6. \n
  7. \n
  8. \n
  9. \n
  10. \n
  11. \n
  12. \n
  13. \n
  14. \n
  15. \n