2 =) :e0ory 1 ' Virt.al Dis, 1ile D 20 =) 1 ' Virt.al Net8or, A/a6ter Table 3-#: M$are En"ironment www$redhat$'om #% refar'h(feed)a'*+redhat$'om All the Re/ 3at 5nter6rise -in.' syste0s r.n the iptables 1ire8all .sing the /e1a.lt 1ire8all r.les e'*e6t the v2v--nf. syste02 +his syste0 has >een *on1ig.re/ to allo8 N&S to .se stati* 6orts an/ the 1ire8all to allo8 tra11i* 1ro0 the lo*al net8or, to 6ass thro.gh the server2 See "ppendi6 "- Se'uring 7/S using 289a)les2 +he v2v--(2K+-)$ is a /o0ain *ontroller an/ 6rovi/es a /o0ain .ser a**o.nt *alle/ refarch2 +his a**o.nt is .se/ 1or testing the /o0ain integration o1 the v2v--(, an/ v2v--rhel virt.al 0a*hines2 +he Re/ 3at 5nter6rise Virt.aliEation environ0ent .se/ is *on1ig.re/ 1or a single /ata*enter *alle/ "orth!/erica2 +his /ata *enter *ontains one *l.ster *alle/ Infrastructure that atta*hes to the v2v--rhevh hy6ervisor server2 +he /ata *enter has three storage /o0ains *on1ig.re/2 +he /ata /o0ain4 na0e/ )ata4 is a 1i>re *hannel /o0ain2 +he e'6ort an/ the 9S( /o0ain are N&S shares an/ are na0e/ E01ort an/ IS res6e*tively2 refar'h(feed)a'*+redhat$'om ## www$redhat$'om 4 Migration Overview :igrating virt.al 0a*hines 1ro0 an 5S;i syste0 to the Re/ 3at 5nter6rise Virt.aliEation environ0ent *an >e /one easily 8ith so0e si06le 6lanning2 Jno8ing the 0igration 6ro*ess *an signi1i*antly hel6 in the 6lanning 6ro*ess2 +his allo8s >etter 6lanning o1 syste0 /o8n ti0es as 8ell as reso.r*e availa>ility i1 iss.es arise /.ring a 0igration 6ro*ess2 +he 0igration 6ro*ess is o.tline/ >elo82 8reparation - Con1ig.ration o1 the 5S;i server an/ the Re/ 3at 5nter6rise Virt.aliEation environ0ent 0.st >e 6er1or0e/ to allo8 the 0igrations2 +he *on1ig.ration *onsists o1 the 1ollo8ing2 "et2or3 $onfi45ration K Net8or,s that e'ist in the 5S;i environ0ent 0ay not e'ist in the Re/ 3at 5nter6rise Virt.aliEation 5nviron0ent2 5F.ivalent net8or,s 0.st >e *reate/ or 0a66e/2 E01ort )o/ain K An 5'6ort Do0ain 0.st >e *reate/ an/ /e1ine/ on the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 +his 5'6ort Do0ain is .se/ 1or the te06orary storage o1 the virt.al 0a*hines /.ring the 0igration 6ro*ess2 #5e.t %ool. IS K +he =.est +ools 9S( 0.st >e .6loa/e/ into the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 #ather Virt5al Machine Infor/ation K 9n1or0ation a>o.t the virt.al 0a*hine4 its 1.n*tion4 an/ any servi*es it o11ers sho.l/ >e note/2 +his hel6s 8ith the 0igration 6lanning as 8ell as ens.ring the virt.al 0a*hine 1.n*tions as reF.ire/ a1ter 0igration2 Commit Snapshots K Any sna6shots on the virt.al 0a*hines 0.st >e *o00itte/ >e1ore the e'6ort 6ro*ess starts2 Uninstall VMare !ools K V:8are +ools 0.st >e .ninstalle/ 1ro0 the virt.al 0a*hines 6rior to starting the 0igration 6ro*ess2 E6port Virtual Ma'hine K 5'6orting the virt.al 0a*hine is /one .sing the virt-v2v *o00an/ an/ tools2 +his *o00an/ is e'e*.te/ on a Re/ 3at 5nter6rise -in.' server2 2mport Virtual Ma'hine K 906orting the virt.al 0a*hines is /one .sing the Re/ 3at 5nter6rise Virt.aliEation :anager inter1a*e2 8ost Migration K A1ter the virt.al 0a*hines are i06orte/ into the ne8 environ0ent a 1e8 0ore 6ost 0igrations ste6s 0.st >e 6er1or0e/2 &ir.t 6oot K &or <in/o8s >ase/ virt.al 0a*hines it is reF.ire/ to re*on1ig.re the net8or, in1or0ation sin*e a ne8 net8or, a/a6ter is 6resente/ an/ the <in/o8s o6erating syste0 /oes not 0ove the net8or, *on1ig.ration over to the ne8 a/a6ter2 %e.tin4 K +he virt.al 0a*hine an/ its servi*es 0.st >e teste/ 1or 1.n*tionality2 $leanin4 51 K +he virt.al 0a*hines still e'ist in the original 5S;i environ0ent an/ *o6ies o1 the0 e'ist on the 5'6ort Do0ain2 +hese 0.st >e a//resse/ an/ re0ove/2 www$redhat$'om #& refar'h(feed)a'*+redhat$'om 5 Migration Preparation +he 0igration 1ro0 the V:8are environ0ent to the Re/ 3at 5nter6rise Virt.aliEation environ0ent reF.ires so0e 6re6aration in or/er to 0a,e the 0igration 6ro*ess r.n s0oothly2 +his se*tion /is*.sses these 6re6arations2 +his 6a6er ass.0es that a *.rrently installe/ an/ 1.n*tioning Red Hat Enterprise Virtuali#ation environ0ent is the /estination 1or the 0igrate/ virt.al 0a*hines2 91 this is not the *ase4 a Red Hat Enterprise Virtuali#ation environ0ent 0.st >e installe/ an/ *on1ig.re/ 6rior to starting the 0igrations2 91 an a66ro6riate environ0ent is not *on1ig.re/4 6lease re1er to "ppendi6 :- Referen'es 1or lin,s on ho8 to set .6 an/ *on1ig.re an environ0ent2 ".1 #a$% Up Virtual Ma$hines 9t is al8ays re*o00en/e/ to have a goo/ >a*,.6 an/ restore 6lan in 6la*e in *ase o1 any .n1oreseen iss.es that 0ay *a.se /ata loss2 +he 0igration o1 virt.al 0a*hines is no /i11erent2 :a,e s.re there are ,no8n goo/ >a*,.6s o1 the syste0s involve/ in this 0igration an/ a 6roven 6ro*ess to restore the syste0s2 +here are 0any tools to a**o06lish these tas,s that in*l./e >asi* -in.' *o00an/s to 1.ll 1eat.re/ >a*,.6 an/ restore a66li*ations o11ere/ >y the *o00.nity an/ 0a@or so1t8are ven/ors2 +he >a*,.6 an/ restoration o1 the /ata is not 8ithin the s*o6e o1 this 6a6er2 3o8ever4 the R35V %20 )a*,.6 an/ Re*overy .sing A*ronis 2 Re1eren*e Ar*hite*t.re /is*.sses the s.>@e*t2 2 htt6sBBa**ess2re/hat2*o0B,no8le/geBre1ar*hB2012-rhev-%0->a*,.6-re*overy-.sing-a*ronis refar'h(feed)a'*+redhat$'om #3 www$redhat$'om ".2 Map and Create &etor%s Net8or,s that are .se/ >y the virt.al 0a*hines in the 5S;i environ0ent 0ay not e'ist in the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 +hese net8or,s 0.st >e *reate/4 0a66e/ to ne8 net8or,s4 or >oth2 A net8or, 0.st >e *reate/ i1 there are no net8or,s /e1ine/ in the Re/ 3at 5nter6rise Virt.aliEation environ0ent that 0at*h or 0eet the reF.ire0ents o1 the virt.al 0a*hines /e1ine/ net8or,2 R.nning net8or,s 8ith V-ANs or having 0.lti6le net8or,s *o.l/ >e a reason 1or this2 91 a s.ita>le net8or, /oes e'ist >.t is *alle/ a /i11erent na0e4 then a net8or, 0a66ing *an >e *reate/ >y e/iting the /etc/virt-v2v.conf 1ile2 91 the net8or, /e1initions are si06le4 then a *o00an/ line o6tion to the virt-v2v 0igration *o00an/ *an >e s6e*i1ie/2 +his 0etho/ allo8s the /e1ining o1 a single /e1a.lt o1 1all>a*, net8or, na0e to .se2 Creating 0a66ings >et8een the t8o environ0ents *an hel6 avoi/ net8or, iss.es 8ith the virt.al 0a*hines2 +his *an easily >e /one >y *reating a ta>le si0ilar to 9a)le 5$&(#- 7etwor* Mappings2 +his ta>le is 1irst 6o6.late/ 8ith the virt.al net8or, in1or0ation 1ro0 the 5S;i environ0ent4 then the na0es o1 the virt.al net8or,s /e1ine/ in the Re/ 3at 5nter6rise 5nviron0ent are 6la*e/ into the ta>le i1 they 0at*h the net8or, an/ V-AN in1or0ation alrea/y entere/2 +he ta>le *an easily >e vie8e/ to see 8hat 0a66ings *an >e 0a/e or i1 ne8 virt.al net8or,s 0.st >e *reate/ in the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 7etwor* V;"7 ESXi 7etwor* 7ame RHEV 7etwor* 7ame 7otes 1021621%620B21 V: Net8or, in1rastr.*t.re Net8or, 1or 9n1rastr.*t.re Servers 0202020B0 Aany net8or,C rhev0 De1a.lt R35V Net8or, Table %&2-1: 'et$or( Mappings +he /ata in the a>ove ta>le sho8s that the VM "et2or3 net8or, on the on the 5S;i server 0.st >e 0a66e/ to the infra.tr5ct5re net8or, in the Re/ 3at 5nter6rise Virt.aliEation 5nviron0ent2 +he VM "et2or3 *o.l/ also 8or, i1 *onne*te/ to the rhev/ net8or, sin*e the rhev/ net8or, is *on1ig.re/ to 6ass tra11i* on any net8or, A0202020B0C2 91 a ro8 in the ta>le ha/ a net8or, that 8as .se/ an/ *ontaine/ an entry in the ES'i "et2or3 "a/e *ol.0n >.t not the RHEV "et2or3 "a/e *ol.0n4 then a ne8 net8or, 0.st >e *reate/ in the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 www$redhat$'om #0 refar'h(feed)a'*+redhat$'om 5.2.1 Creating the Networks 9n the Re/ 3at 5nter6rise Virt.aliEation :anager inter1a*e4 sele*t the Data Centers ta> A C2 +he /ata *enters /e1ine/ in the environ0ent are liste/2 Sele*t the NorthAmerica /ata *enter A C2 A Detail 6ane A C a66ears at the >otto0 o1 the 8in/o82 Sele*t Logical Networks A C in the Detail 6ane an/ sele*t on the New >.tton A C2 A ne8 8in/o8 o6ens *alle/ New Logical Network2 refar'h(feed)a'*+redhat$'om #5 www$redhat$'om Figure 5.2.1.1: New Logical Networ +he Name an/ Description 1or the ne8 logi*al net8or, is entere/ as sho8n in the 1ollo8ing 1ig.re2 (n*e the in1or0ation is entere/4 *he*, the >o' ne't to Infrastructure to assign the ne8ly *reate/ net8or, to the Infra.tr5ct5re *l.ster2 Sele*t the OK >.tton to *o06lete the tas,2 +he ne8 net8or, is no8 *reate/ an/ liste/ .n/er the Logical Networks ta> o1 the Details 6ane2 +he net8or, no8 sho8s .6 in the Logical Network o1 the Details 6ane2 +he net8or, has an i*on ne't to it that loo,s li,e a >ro,en 8ren*h2 +his is 1ine 1or no84 the net8or, 0.st >e assigne/ to a 6hysi*al net8or, inter1a*e2 www$redhat$'om #1 refar'h(feed)a'*+redhat$'om Figure 5.2.1.2: Logical Networ Re1er to the 1ollo8ing 1ig.re 8hile assigning a 6hysi*al inter1a*e to the logi*al net8or,2 Sele*t the Hosts ta> A C an/ sele*t the server A C4 a Details 6ane o6ens .62 Sele*t the Network Interfaces ta> A C an/ sele*t an .n.se/ inter1a*e A C4 this Re1eren*e Ar*hite*t.re .ses the eth1 inter1a*e2 Sele*t the Add / dit >.tton A C to o6en the dit Network Interface 8in/o82 refar'h(feed)a'*+redhat$'om #3 www$redhat$'om Figure 5.2.1.3: A!!ign "nterface +he 1ollo8ing 1ig.re /e6i*ts the dit Network Interface 8in/o82 9n the dit Network Interface 8in/o84 0a,e s.re the ne8 net8or, *alle/ infrastructure is sele*te/ 1or the Network o6tion an/ the ra/io >o' *alle/ None is sele*te/2 DHC! or "tatic *o.l/ >e sele*te/ to 6rovi/e the inter1a*e 8ith an 9P a//ress2 +his allo8s the Re/ 3at 5nter6rise Virt.aliEation server to >e a**esse/ 1ro0 this inter1a*e2 +his is not reF.ire/ 1or this Re1eren*e Ar*hite*t.re2 :a,e s.re the "a#e network configuration *he*, >o' is *he*,e/2 Sele*t the OK >.tton to a66ly the *hanges2 +he inter1a*es i*on in the Network Interfaces ta> *hanges to a green arro8 6ointing .62 +his in/i*ates the inter1a*e is .6 an/ a*tive2 www$redhat$'om #4 refar'h(feed)a'*+redhat$'om Figure 5.2.1.#: E$it "nterface 5.2.2 Mapping the Networks +he /etc/virt-v2v.conf *on1ig.ration 1ile allo8s the 0a66ing o1 net8or,s 1ro0 the original virt.al environ0ent to the ne8 virt.al environ0ent2 +his *on1ig.ration 1ile *ontains neste/ net8or, se*tions in the 1ollo8ing 1or0at <network type='bridge|network' name='bridge_or_network'> <network type='bridge|network' name='bridge_or_network'/> </network> +he o.tsi/e net8or, se*tion /e1ines the net8or, on the environ0ent >eing 0igrate/ 1ro02 +he insi/e /e1inition /e1ines 8hat net8or, to 0a6 to on the /estination environ0ent2 +he 0a66ing .se/ in this 6a6er to 0a6 the V: Net8or, virt.al net8or, on the 5S;i syste0 to the virt.al net8or, *alle/ in1rastr.*t.re in the Re/ 3at 5nter6rise Virt.aliEation environ0ent loo,s as 1ollo8s <network type='bridge' name='VM Network'> <network type='network' name='infrastructure'/> </network> +he 5S;i virt.al net8or,s are treate/ as >ri/ges >y the virt-v2v *o00an/ an/ the 0a66ings in the virt-v2v.conf 1ile sho.l/ .se a net8or, ty6e o1 >ri/ge2 refar'h(feed)a'*+redhat$'om #5 www$redhat$'om ".3 Create an E'port (omain (6en the Re/ 3at 5nter6rise Virt.aliEation :anager2 Sele*t the New Domain >.tton in the "torage ta>2 +his >rings .6 a New Domain 8in/o8 as seen in /igure 5$3$#- 7ew :omain2 =ive the ne8 storage /o0ain a Name o1 Export2 Sele*t NorthAmerica as the Data Center2 Sele*t $port / N%" as the /o0ain 1.n*tion an/ sele*t #&#'(rhe#h as the host to .se 1or a**ess to the ne8 e'6ort /o0ain2 &inally4 s6e*i1y v2v3-nfs.cloud.lab.eng.bos.redhat.com:/exports/Export as the e'6ort 6ath .sing an N&S UR92 +he &ODN 0.st >e .se/ 8hen s6e*i1ying the lo*ation2 Sele*t the OK >.tton an/ the ne8 5'6ort Do0ain is /is6laye/ in the "torage ta> 8ith a stat.s o1 Inacti#e. www$redhat$'om &% refar'h(feed)a'*+redhat$'om Figure 5.3.1: New %omain +he ne8 e'6ort /o0ain 0.st >e a*tivate/2 Sele*t the Data Centers ta> A C then sele*t the NorthAmerica /ata *enter A C2 :a,e s.re the "torage ta> A C is sele*te/ .n/er the Details 6ane2 Sele*t on the Acti#ate >.tton A C2 +he stat.s A C o1 the e'6ort /o0ain *hanges 1ro0 Inacti#e to Locked) A1ter a 1e8 0o0ents4 the stat.s *hanges to Acti#e2 refar'h(feed)a'*+redhat$'om &# www$redhat$'om Figure 5.3.2: Activating the E&'ort %omain ".) Upload Re*uired +S,s to the Red Hat Enterprise Virtualization Environment D.ring the 0igration 6ro*ess4 the virt-v2v *o00an/ or the Re/ 3at 5nter6rise Virt.aliEation :anager 0ay install ne8 6a*,ages or /rivers into the virt.al 0a*hines2 <hat is installe/ varies /e6en/ing on the o6erating syste0 on the virt.al 0a*hine2 +he 6a*,ages an/ /rivers that are installe/ 1or a 6arti*.lar o6erating syste0 are *on1ig.re/ in the /etc/virt-v2v.conf 1ile an/ the /var/lib/virt-v2v/virt-v2v.db 1ile2 +he /var/lib/virt-v2v/virt-v2v.db 1ile is the /e1a.lt *on1ig.ration /ata>ase an/ sho.l/ not >e 0o/i1ie/2 Ne8 entries sho.l/ >e *reate/ in the /etc/virt-v2v.conf 1ile2 5ntries in the /etc/virt-v2v.conf 1ile have 6re*e/en*e over the /var/lib/virt-v2v/virt-v2v.db 1ile2 +he 6a*,ages an/ /rivers are 6rovi/e/ >y the Red Hat Network4 the virtio-win 6a*,age4 or the Guest Tools ISO2 +he 1ollo8ing is a 6artial /var/lib/virt-v2v/virt-v2v.db 1ile2 [ ... output abbreviated ... ] <!-- RHEL 6 has always supported virtio --> <capability os='linux' distro='rhel' a!or='6' nae='virtio'"> <capability os='linux' distro='rhel' a!or='#' nae='virtio'> <dep nae='$ernel' inversion='%&6&'(-'%(&el#'"> <dep nae='lv%' inversion='%&)%&*)-6&el#'"> <dep nae='selinux-policy-tar+eted' inversion='%&*&6-%),&el#' i-installed='yes'"> <"capability> [ ... output abbreviated ... ] 9n the a>ove e'a06le4 $!P!6ILI%Y tags /e1ine the o6erating syste0s an/ the 0ini0.0 6a*,age versions reF.ire/2 +hese 6a*,ages are installe/ .sing the .6/ate agent 8ithin the g.estGs o6erating syste02 +he version o1 the reF.ire/ 6a*,ages are /e1ine/ .sing the )EP tags2 +he *on1ig.ration sho8s that Re/ 3at 5nter6rise -in.' 6 has no /e6en/en*ies4 this is >e*a.se all versions o1 Re/ 3at 5nter6rise -in.' 6 s.66ort VirtI2 3o8ever4 Re/ 3at 5nter6rise -in.' # sho8s three /e6en/en*ies are reF.ire/ an/ the /e6en/en*ies 0ini0.0 version reF.ire/2 9n the a>ove 1ile4 i1 the kernel4 lvm24 or selinux-policy-tareted 6a*,ages /o not 0eet their res6e*tive 0ini0.0 versions4 they are .6/ate/ >y the virt-v2v *o00an/2 www$redhat$'om && refar'h(feed)a'*+redhat$'om +he !PP tags also /e1ine the o6erating syste0s an/ 0ini0.0 6a*,age versions reF.ire/2 +he 6a*,ages liste/ .n/er the !PP tags 8ill >e installe/ 1ro0 the lo*al /ire*tories lo*ate/ on the syste0 r.nning the virt-v2v *o00an/2 +he P!%H tag /e1ines the lo*ation o1 the 1ile on the syste02 91 the 1ile lo*ation is not s6e*i1ie/ .sing its a>sol.te 6ath4 the P!%H-R% tag 0.st e'ist an/ the 1ile is lo*ate/ .n/er the /ire*tory it s6e*i1ies2 [ ... output abbreviated ... ] <!-- RHEL # .ll o- these R/01 are -ro RHEL #&,2 which was the -irst version o- RHEL # to support 3irt45 --> <app os='linux' distro='rhel' a!or='#' arch='i6(6' nae='$ernel'> <path>rhel"#"$ernel-%&6&'(-'%(&el#&i6(6&rp<"path> <dep>ecrypt-s-utils<"dep> <"app> <app os='linux' distro='rhel' a!or='#' arch='x(666*' nae='ecrypt-s-utils'> <path>rhel"#"ecrypt-s-utils-#6-(&el#&x(666*&rp<"path> <"app> [ ... output abbreviated ... ] <path-root>"var"lib"virt-v%v"so-tware<"path-root> [ ... output abbreviated ... ] +he a>ove e'a06le sho8s the ,ernel 6a*,age 1or Re/ 3at 5nter6rise -in.' # is /var/lib/virt- v2v/.oft2are/rhel/7/3ernel-2.6.8+-82+.el2.i6+6.r1/2 +he )EP tag sho8s that Re/ 3at 5nter6rise -in.' # also reF.ires the ecrypt!s-utils 6a*,age installe/2 Another set o1 !PP an/ P!%H tags sho8 the lo*ation o1 the reF.ire/ ecrypt!s-utils 6a*,age2 refar'h(feed)a'*+redhat$'om &3 www$redhat$'om 5.4.1 Red Hat Enterprise Linux Based Virtual Machines +he virt-v2v *o00an/ 0ay install a ne8 ,ernel an/ /rivers in the virt.al 0a*hine2 +his ha66ens i1 the e'isting ,ernel /oes not r.n the Virt9( /rivers2 +his >ehavior *an >e *ontrolle/ >y installing a ,ernel that is *a6a>le o1 s.66orting the Virt9( /rivers 6rior to e'e*.ting the virt-v2v *o00an/2 A Re/ 3at 5nter6rise -in.' #22 ,ernel /oes not s.66ort the Virt9( /rivers4 in this *ase the virt-v2v *o00an/ installs a later ,ernel as in/i*ate/ in the virt- v2v.conf 1ile2 +he ,ernel 6a*,ages 0.st >e availa>le /.ring the e'e*.tion o1 the virt-v2v *o00an/2 +he 6a*,ages 8ill >e installe/ .sing the virt.al 0a*hines .6/ate agent2 91 the 6a*,ages *annot >e installe/ .sing the .6/ate agent4 the 6a*,ages 0.st >e 0an.ally /o8nloa/e/ an/ 6la*e/ in the a66ro6riate lo*ation as /e1ine/ in the /etc/virt-v2v.conf an/ /var/lib/virt-v2v/virt-v2v.db *on1ig.ration 1iles2 +he 0an 6age 1or the virt-v2v.conf 1ile an/ the 1ile itsel1 *an >e re1erre/ to 8hen *on1ig.ring any o1 the a>ove2 5.4.2 Windows Based Virtual Machines +he virt-v2v *o00an/ installs ne8 /rivers that allo8 the virt.al 0a*hine to >oot2 +he virtio-win an/ libuest!s-winsupport 6a*,ages 0.st >e installe/ to 6rovi/e the ne*essary 1iles2 (n*e the ne8 /rivers are installe/4 the virt.al 0a*hine *an >oot in the ne8 virt.aliEation environ0ent2 3o8ever4 the virt.al 0a*hine /oes not have all the /rivers reF.ire/ to o6erate *orre*tly in the ne8 environ0ent2 +he re0aining reF.ire/ /rivers are 6rovi/e/ >y the Guest Tools ISO 8hen the virt.al 0a*hine is i06orte/ into the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 www$redhat$'om &0 refar'h(feed)a'*+redhat$'om 5.4.3 Guest Tools ISO +he rhev-iso-.6loa/er *o00an/ on the Re/ 3at 5nter6rise Virt.aliEation :anager .6loa/s 1iles to the 9S( storage /o0ains /e1ine/ in the environ0ent2 +he --iso-domain o6tion s6e*i1ies the 9S( storage /o0ain 1or the .6loa/e/ 1iles2 See the 0an 6age 1or the rhev-iso- .6loa/er *o00an/ 1or 0ore in1or0ation a>o.t the *o00an/ an/ its o6tions2 U6loa/ the =.est +ools 9S( to the storage /o0ain *alle/ 9S( .sing the 1ollo8ing *o00an/2 S.66ly the a/0in 6ass8or/ 8hen as,e/2 7 r"evm-iso-uploader --iso-domain ISO upload #usr#s"are#r"ev-uest-tools- iso#r"ev-tools-setup$iso /lease provide the RE18 ./4 password -or the adin9internal RHE3-0 user :;8RL<= to abort>? +he Guest Tools ISO is no8 .6loa/e/ an/ availa>le to >e .se/ in the environ0ent2 refar'h(feed)a'*+redhat$'om &5 www$redhat$'om "." -ather Virtual Ma$hine +n.ormation Ne8 storage /rivers4 net8or, /rivers4 an/ vi/eo /rivers are installe/ /.ring the 0igration 6ro*ess2 +his *an a11e*t the *on1ig.ration o1 the virt.al 0a*hines in the ne8 environ0ent2 A/@.st0ent o1 the vi/eo resol.tion 0ight >e reF.ire/ or the net8or, a/a6ters 0ight *hange na0es a1ter the 0igrate/ syste0 >oots2 So0e o6erating syste0s Ae2g2 <in/o8sC /o not 0igrate the net8or, *on1ig.ration over to the ne8 virt.al a/a6ter2 +his is >e*a.se the a/a6ter is vie8e/ as a ne8 a/a6ter in the g.est o6erating syste0 instea/ o1 a re6la*e0ent a/a6ter2 )e*a.se o1 this4 it is a goo/ i/ea to 0a,e note o1 any i06ortant net8or, in1or0ation2 +he 1ollo8ing ta>le *ontains in1or0ation a>o.t the virt.al 0a*hines .se/ in this 6a6er2 +he ta>le re*or/s so0e o1 the 0ore *o00on *on1ig.ration 6ara0eters2 www$redhat$'om &1 refar'h(feed)a'*+redhat$'om Virtual Ma'hine !onfiguration v2v%-<2J8-/* 9nter1a*e Na0e -o*al Area Conne*tion 9P A//ress an/ Net8or, :as, 1021621%6268B21 De1a.lt =ate8ay 1021621$%22#$ DNS Servers 1021621$%22$7 1021621$222$8 Stati* Ro.tes None /e1ine/ Notes :ission *riti*al syste0 $rimary %omain &ontroller v2v%-<7 9nter1a*e Na0e -o*al Area Conne*tion 9P A//ress an/ Net8or, :as, 1021621%626"B21 De1a.lt =ate8ay 1021621$%22#$ DNS Servers 1021621%6268 1021621$%22$7 1021621$%22$8 Stati* Ro.tes None /e1ine/ Notes none v2v%-rhel 9nter1a*e Na0e eth0 9P A//ress an/ Net8or, :as, 1021621%6270B21 via /h*6 De1a.lt =ate8ay 1021621$%22#$ DNS Servers 1021621%6268 1021621$%22$7 1021621$%22$8 Stati* Ro.tes None /e1ine/ Notes none Table %&%-1: irtual Mac)ine 'otes refar'h(feed)a'*+redhat$'om &3 www$redhat$'om 6 Migrating the Virtual Machines +he 0igration o1 the virt.al 0a*hines *an >e a slo8 6ro*ess /e6en/ing on the siEe o1 the virt.al /is,s an/ ho8 0any virt.al 0a*hines are >eing 0igrate/2 )e1ore the virt.al 0a*hines *an >e 0igrate/4 all the sna6shots 0.st >e *o00itte/4 V:8are +ools 0.st >e .ninstalle/4 an/ the virt.al 0a*hine 0.st >e 6o8ere/ o112 (n*e these tas,s are /one4 the 0igration 6ro*ess *an >egin2 /.1 Committin0 Snapshots Virt.al 0a*hines r.nning on the 5S;i server 0ay have sna6shots o1 the /is, i0ages2 +hese sna6shots 0.st >e *o00itte/ to the original /is, i0age >e1ore the virt.al 0a*hine is e'6orte/ .sing the #irt(#&# *o00an/2 +he #irt(#&# *o00an/ only 0igrates the original /is, i0age 1iles an/ not the sna6shot /eltas2 +o *o00it sna6shots4 .se the right 0o.se >.tton to sele*t the virt.al 0a*hine na0e an/ *hoose "napshot P "napshot *anager2 As seen in the 1ig.re >elo82 www$redhat$'om &4 refar'h(feed)a'*+redhat$'om Figure (.1.1: )na'!hot! A 8in/o8 o6ens .6 that lists the sna6shots that have >een 0a/e on a virt.al 0a*hine2 Choose the latest sna6shot an/ sele*t the Delete All >.tton2 +his *o00its all the sna6shots2 A *on1ir0ation 8in/o8 6o6s .6 as,ing i1 *onsoli/ating an/ re0oving all the sna6shots is inten/e/ to >e /one2 Sele*t the +es >.tton to *o00it an/ re0ove the sna6shots2 refar'h(feed)a'*+redhat$'om &5 www$redhat$'om Figure (.1.2: )na'!hot *anager /.2 Uninstallin0 VMare !ools %&ware Tools 0.st not >e installe/ in the virt.al 0a*hines 8hen the e'6ort 6ro*ess is starte/2 91 a virt.al 0a*hine is e'6orte/ 8hile %&ware Tools is installe/4 it 0ay not 1.n*tion *orre*tly in the ne8 environ0ent % 2 91 %&ware Tools are .ninstalle/4 it is a goo/ i/ea to re>oot the virt.al 0a*hine to 0a,e s.re the virt.al 0a*hine still 1.n*tions *orre*tly >e1ore the e'6ort 6ro*ess is starte/2 Uninstall %&ware Tools 1ro0 the <in/o8s 2008 Do0ain Controller virt.al 0a*hine >y sele*ting the "tart ,utton P Control !anel P !rograms P !rograms and %eatures2 Sele*t -*ware .ools an/ an /ninstall >.tton a66ears in the >ar a>ove the so1t8are sele*tions2 Sele*t the /ninstall >.tton2 +he %&ware Tools so1t8are is .ninstalle/2 +he virt.al 0a*hine is re>oote/ >y ty6ing the 0Alt(%12 ,ey *o0>ination at the virt.al 0a*hines *onsole an/ sele*ting 3estart 1ro0 the /ro6 /o8n 0en. that is title/ 4hat do 5ou want the computer to do62 Sele*ting the Comment >o' allo8s s6e*i1ying a reason 1or the re>oot4 this is reF.ire/2 5nter a!ing sure the s"stem functions correctl" after #$are %ools are uninstalled. in the Co00ent >o'2 Sele*t the OK >.tton start the re>oot 6ro*ess2 Uninstall %&ware Tools 1ro0 the <in/o8s 7 virt.al 0a*hine .sing the sa0e ste6s as those to .ninstall the0 1ro0 the <in/o8s 2008 Do0ain Controller virt.al 0a*hine2 +he <in/o8s 7 virt.al 0a*hine is re>oote/ in a si0ilar 1ashion as 8ell2 Uninstall the %&ware Tools 1ro0 the Re/ 3at 5nter6rise -in.' virt.al 0a*hine >y e'e*.ting the vmware-uninstall-tools.pl *o00an/2 7 vmware-uninstall-tools$pl @ninstallin+ the tar installation o- 30ware 8ools& 1toppin+ services -or 30ware 8ools vware-tools stop"waitin+ [... output abbreviated ...] 8he reoval o- 30ware 8ools (&6&# build-6%'6%* -or Linux copleted success-ully& 8han$ you -or havin+ tried this so-tware& Re>oot the Re/ 3at 5nter6rise -in.' virt.al 0a*hine >y iss.ing the shutdown -r now *o00an/2 % htt6sBB>.gEilla2re/hat2*o0Bsho8N>.g2*giQi/R6782%2 www$redhat$'om 3% refar'h(feed)a'*+redhat$'om /.3 Shuttin0 (on the Virtual Ma$hines A virt.al 0a*hine 0.st >e 6o8ere/ o11 >e1ore it *an >e e'6orte/ .sing the virt-v2v *o00an/2 <hen an atte06t is 0a/e to e'6ort a virt.al 0a*hine that is 6o8ere/ on4 the virt-v2v *o00an/ /is6lays an error 0essage2 )elo8 is an e'a06le o1 this error2 +he *o00an/ an/ its o6tions are e'6laine/ in Se'tion 1$0$#2 7 virt-v2v -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, - -o r"ev -os v2v(-n!s'#exports#.xport - --network r"evm v2v(-r"el virt-v%v? Auest v%v,-rhel is currently runnin+& 4t ust be shut down -irst& 5na>ling ssh on the 5S;i server allo8s a**ess to the vim-cmd *o00an/ on the 5S;i server2 +his *o00an/ 6rovi/es a 0eans to F.ery an/ *ontrol the 6o8er state o1 the virt.al 0a*hines2 +he 6o8er state o1 the virt.al 0a*hines *an >e /is6laye/ .sing the ssh *lient an/ the 5S;i syste0s vim-cmd *o00an/2 9n or/er to F.ery the virt.al 0a*hines 6o8er state4 the Virt.al :a*hines V0i/ is reF.ire/2 +he vim-cmd /is6lays this as 8ell2 +he 1irst *o00an/ in the 1ollo8ing e'a06le /is6lays the virt.al 0a*hine na0es an/ their res6e*tive V0i/s2 +he se*on/ *o00an/ /is6lays the 6o8er state 1or one o1 the virt.al 0a*hines .sing its V0i/2 7 ss" v2v(-esxi vim-cmd vmsvc#etallvms /awk 01print 2, 3 3 2240 3id Bae ' v%v,-C%D(-=; % v%v,-CE , v%v,-rhel 7 ss" v2v(-esxi vim-cmd vmsvc#power$etstate ( Retrieved runtie in-o /owered on Re/ 3at 5nter6rise -in.' >ase/ virt.al 0a*hines *an >e 6o8ere/ o11 re0otely .sing the ssh *o00an/ line *lient an/ <in/o8s >ase/ virt.al 0a*hines *an >e 6o8ere/ o11 re0otely .sing the -in.' net *o00an/ that is 6rovi/e/ >y the samba-common 6a*,age2 +he virt.al 0a*hines 0ay also >e 6o8ere/ o11 .sing the vim-cmd *o00an/ on the 5S;i server2 91 the vim-cmd *o00an/ is .se/4 the virt.al 0a*hines on the 5S;i server 0ay not 6er1or0 a gra*e1.l sh.t/o8n sin*e %&ware Tools are not installe/2 Use the vim-cmd 0etho/ 8ith *a.tion sin*e a non-gra*e1.l sh.t/o8n o1 a virt.al 0a*hine is not re*o00en/e/2 refar'h(feed)a'*+redhat$'om 3# www$redhat$'om Sh.t/o8n the virt.al 0a*hines re0otely .sing the a66ro6riate *o00an/s2 +he 1ollo8ing o.t6.t sho8s all the virt.al 0a*hines sh.tting /o8n s.**ess1.lly e'*e6t the <in/o8s 7 /es,to6 virt.al 0a*hine2 7 ss" v2v(-r"el 3s"utdown -" now3 root9v%v,-rhel's password? [&'(()*+,] 7 net rpc SH5T6O7N -! -I v2v(-w2k8 -5 administrator Enter adinistrator's password? [&'(()*+,] 1hutdown o- reote achine succeeded 7 net rpc SH5T6O7N -! -I v2v(-w9 -5 re!arc" Enter re-arch's password? [&'(()*+,] ;ould not connect to server ')&'6&',6&6F ;onnection -ailed? B8618.8@16@B1@;;E11G@L +he <in/o8s 7 virt.al 0a*hine is sh.t/o8n >y ty6ing the 0Alt(%12 ,ey *o0>ination at the virt.al 0a*hines *onsole an/ sele*ting "hut down 1ro0 the /ro6 /o8n 0en. that is title/ 4hat do 5ou want the computer to do62 Sele*t the OK >.tton to start a gra*e1.l sh.t/o8n2 A1ter 8aiting a 1e8 0in.tes to allo8 the virt.al 0a*hines to sh.t/o8n 6ro6erly4 the vim-cmd *o00an/ is .se/ to *he*, the 6o8er state o1 the Virt.al :a*hines2 7 ss" v2v(-esxi vim-cmd vmsvc#etallvms / awk 01print 2, 3 3 2240 3id Bae ' v%v,-C%D(-=; % v%v,-CE , v%v,-rhel : ss" v2v(-esxi vim-cmd vmsvc#power$etstate , Retrieved runtie in-o /owered o-- : ss" v2v(-esxi vim-cmd vmsvc#power$etstate 2 Retrieved runtie in-o /owered o-- : ss" v2v(-esxi vim-cmd vmsvc#power$etstate ( Retrieved runtie in-o /owered o-- www$redhat$'om 3& refar'h(feed)a'*+redhat$'om /.) E'portin0 the Virtual Ma$hines 5'6orting the virt.al 0a*hines is /one >y e'e*.ting the virt-v2v *o00an/ 1ro0 a Re/ 3at 5nter6rise -in.' 6 syste0 that *ontains the virt-v2v4 virtio-win4 an/ libuest!s 6a*,ages installe/2 +hese 6a*,ages are availa>le .n/er the Red Hat .nterprise ;inux Server Supplementary an/ Red Hat .nterprise ;inux Server %2% Tools !or 7indows *hannels o1 the Red Hat Network2 7 r"n-c"annel -u admin -p [&ass$ord] -a -c r"el-x8<*<=-server-supplementary- < -c r"el-x8<*<=-server-v2vwin-< 7 r"n-c"annel -l rhel-x(666*-server-6 rhel-x(666*-server-suppleentary-6 rhel-x(666*-server-v%vwin-6 +his syste0 0.st also have a**ess to the N&S e'6ort /o0ain2 +he virt-v2v *o00an/ is e'e*.te/ on a Re/ 3at 5nter6rise -in.' 622 server 1or this 6a6er2 +he 1ollo8ing se*tion >.il/s the *o00an/ line that is .se/ to e'6ort the virt.al 0a*hines2 6.4.1 virt-v2v Command 1$0$#$# 7etr' )e1ore the virt-v2v *o00an/ *an e'6ort virt.al 0a*hines 1ro0 an 5S;i server4 a .netrc 1ile 0.st >e *reate/ in the ho0e /ire*tory o1 the .ser e'e*.ting the virt-v2v *o00an/2 +his 1ile *ontains the login a.thenti*ation in1or0ation 1or the 5S;i server2 +he "E%R$97: 0an 6age *ontains in1or0ation a>o.t the synta' o1 the .netrc 1ile2 +he 0a*hine na0e in the 1ile 0.st >e i/enti*al to the one .se/ on the *o00an/ line2 91 an internet 6roto*ol A9PC a//ress or a 1.lly F.ali1ie/ /o0ain na0e are .se/ on the *o00an/ line4 then they 0.st a66ear in the .netrc 1ile2 )e*a.se the *o00an/ line in this 6a6er is .sing the short DNS na0e4 that is the na0e .se/ in the 1ile2 +he root .ser is .se/ to e'e*.te the virt-v2v *o00an/ in this 6a6er4 so the *o06lete 6ath to the .netrc 1ile .se/ in this 6a6er is /root/.netrc2 +he .netrc 1ile .se/ 1or this 6a6er is liste/ >elo82 achine v%v,-esxi lo+in root password password refar'h(feed)a'*+redhat$'om 33 www$redhat$'om 1$0$#$& <ptions +he virt-v2v *o00an/ reF.ires a 1e8 o6tions in or/er to e'6ort the virt.al 0a*hine 1ro0 the 5S;i server2 +he 1irst o6tion reF.ire/ s6e*i1ies virt.al 0a*hine in1or0ation2 +he o6tion .se/ to /o this is the -i o6tion2 +he in1or0ation *an >e gathere/ /ire*tly 1ro0 the hy6ervisor A- i libvirtC or >y .sing an ;:- 1ile A-i libvirt0/lC that /e1ines the virt.al 0a*hine2 +o e'6ort a virt.al 0a*hine 1ro0 an 5S;i server4 the hy6ervisor 0etho/ 0.st >e .se/2 +his 0etho/ is also the /e1a.lt 0etho/ an/ is not reF.ire/ to >e s6e*i1ie/ on the *o00an/ line2 3o8ever4 it is s6e*i1ie/ 1or the 8riting o1 this 6a6er in or/er to hel6 rea/a>ility2 +he lo*ation o1 the hy6ervisor 0.st >e s6e*i1ie/ as 8ell2 +his is /one .sing the -ic o6tion2 +he lo*ation is s6e*i1ie/ .sing the UR9 1or0at2 +o *onne*t to an 5S;i server4 the UR9 s6e*i1i*ation is in the 1or0at o1 e.0;//.erver<i1<or<na/e/2 So0e 5S;i servers 0ay *ontain invali/ SS- se*.rity *erti1i*ates2 +his *an o**.r i1 the host na0e o1 the 5S;i server has *hange/ or i1 the *erti1i*ate has not >een signe/ >y a Certi1i*ate A.thority2 +his 6revents the virt-v2v *o00an/ 1ro0 *onne*ting to the server2 +his is the *ase 1or the 5S;i server .se/ in this 6a6er2 A//ing =no<verif>?8 to the en/ o1 the UR9 /isa>les *erti1i*ate *he*,ing2 +he in*o06lete *o00an/ >.ilt so 1ar loo,s li,e the 1ollo8ing 7 virt-v2v -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, +he 0etho/ in 8hi*h to store the e'6orte/ i0age 0.st >e s6e*i1ie/ as 8ell2 +his is /one .sing the -o o6tion2 +he virt-v2v *o00an/ *an store the i0ages as either a li>virt g.est A- o libvirtC or as an i0age to >e i06orte/ into a Re/ 3at 5nter6rise Virt.aliEation environ0ent A- o rhevC2 Sin*e the virt.al 0a*hines are >eing i06orte/ into a Re/ 3at 5nter6rise Virt.aliEation environ0ent4 the -o rhev o6tion is .se/2 +his o6tion also reF.ires the -o. o6tion to >e s6e*i1ie/2 +he -o. o6tion /e1ines the lo*ation o1 the 5'6ort Do0ain that is /e1ine/ in the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 +he *o00an/ line is al0ost *o06lete an/ no8 loo,s li,e 7 virt-v2v -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, - -o r"ev -os v2v(-n!s'#exports#.xport +he virt-v2v *o00an/ allo8s a /e1a.lt net8or, or >ri/ge to >e /e1ine/ i1 a net8or, *annot >e 0a66e/ >et8een the virt.aliEation environ0ents2 +he -b o6tion s6e*i1ies a /e1a.lt >ri/ge an/ the -n o6tion s6e*i1ies a /e1a.lt net8or,2 (nly one o1 these o6tions *an >e s6e*i1ie/ at a ti0e an/ >oth ta,e a single arg.0ent that i/enti1ies the >ri/ge or net8or,2 Altho.gh the net8or,s are 0a66e/ in the /etc/virt-v2v.conf 1ile4 it is a goo/ i/ea to s6e*i1y a /e1a.lt >ri/ge or net8or, in *ase a 0a66ing 8as 0isse/2 +he /e1a.lt net8or, on a Re/ 3at 5nter6rise Virt.aliEation environ0ent is *alle/ rhev/2 Using this as a /e1a.lt net8or, hel6s 6revent virt.al 0a*hines that have net8or,s that 8ere not 0a66e/ to *ontin.e to have so0e 1or0 o1 net8or, a**ess2 www$redhat$'om 30 refar'h(feed)a'*+redhat$'om +he 1inal arg.0ent to the virt-v2v *o00an/ is the virt.al 0a*hine na0e2 +he virt.al 0a*hine na0es are /is6laye/ in the vS6here *lient inter1a*e or they *an >e liste/ 1ro0 the 5S;i *o00an/ line2 +he *o00an/ in the 1ollo8ing e'a06le /is6lays the Virt.al :a*hines 9/enti1ier AV0i/C an/ the Virt.al :a*hines na0e .sing the 5S;i *o00an/ line2 7 ss" v2v(-esxi vim-cmd vmsvc#etallvms / awk 01print 2, 3 3 2240 3id Bae ' v%v,-C%D(-=; % v%v,-CE , v%v,-rhel +he 1ollo8ing *o00an/ line *o.l/ >e .se/ to 0igrate the virt.al 0a*hines in this Re1eren*e Ar*hite*t.re4 ho8ever this Re1eren*e Ar*hite*t.re .ses PR&ILES *reate/ in the /etc/virt- v2v.conf 1ile to shorten the *o00an/ line2 7 virt-v2v -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, - -o r"ev -os v2v(-n!s'#exports#.xport - --network r"evm [#-.'E] refar'h(feed)a'*+redhat$'om 35 www$redhat$'om 1$0$#$3 8rofiles +he virt-v2v *o00an/ allo8s the .se o1 6ro1iles to s6e*i1y the 0etho/ to .se to get the virt.al 0a*hine in1or0ation4 net8or, 0a66ings4 an/ o.t6.t storage lo*ations2 Pro1iles are s6e*i1ie/ in the /etc/virt-v2v.conf 1ile2 +he 1ollo8ing is the *ontents o1 the *on1ig.ration 1ile .se/ 1or this Re1eren*e Ar*hite*t.re2 <virt-v%v> <pro-ile nae=Hv%v,-rhevH> <ethod>rhev<"ethod> <stora+e> v%v,-n-s?"exports"Export <"stora+e> <networ$ type='brid+e' nae='30 Betwor$'> <networ$ type='networ$' nae='in-rastructure'"> <"networ$> <networ$ type=Hde-aultH> <networ$ type=Hnetwor$H nae=HrhevH"> <"networ$> <"pro-ile> <"virt-v%v> +he S0etho/T tag s6e*i1ies the o.t6.t 0etho/2 +he SstorageT tag s6e*i1ies the storage lo*ation an/ *an also s6e*i1y the 1or0at o1 the /estination /is, 1ile an/ i1 the /is, sho.l/ >e a s6arse or 6reallo*ate/ ty6e2 +he /estination /is, 1iles 8ill have the sa0e 1or0at an/ allo*ation as the original 1iles sin*e this *on1ig.ration 1ile /oes not s6e*i1y the 1or0at an/ allo*ation ty6e2 +8o net8or,s are *on1ig.re/ in the 1ile2 +he 1irst net8or, /e1inition 0a6s the >ri/ge/ net8or, *alle/ V: Net8or, on the 5S;i server to the in1rastr.*t.re net8or, in the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 +he se*on/ /e1inition 0a6s all other net8or,s on the 5S;i server to the rhev0 net8or, in the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 <ith the .se o1 the a>ove 6ro1ile4 the *o00an/ line .se/ to 0igrate the virt.al 0a*hines /.ring the 8riting o1 this 6a6er is 7 virt-v2v -p v2v(-r"ev -i libvirt - -ic esx'##v2v(-esxi#)no*veri!y+, [#-.'E] www$redhat$'om 31 refar'h(feed)a'*+redhat$'om 6.4.2 Export <ith the %&ware Tools .ninstalle/ 1ro0 the virt.al 0a*hines an/ the virt.al 0a*hines sh.t /o8n4 the virt.al 0a*hines *an >e e'6orte/ 1ro0 the 5S;i server2 +he virt.al 0a*hines are e'6orte/ .sing the virt-v2v *o00an/2 7 virt-v2v -p v2v(-r"ev -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, v2v(- r"el v%v,-rhel6v%v,-rhel? '))I J==========================================K= )h)E*(s virt-v%v? v%v,-rhel con-i+ured with virtio drivers& 7 virt-v2v -p v2v(-r"ev -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, v2v(- 72>8-6? v%v,-C%D(-=;6v%v,-C%D(-=;? '))I J====================================K= )h%6'Fs virt-v%v? v%v,-C%D(-=; con-i+ured with virtio drivers& 7 virt-v2v -p v2v(-r"ev -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, v2v(-79 v%v,-CE6v%v,-CE? '))I J==============================================K= )h%6'*s virt-v%v? v%v,-CE con-i+ured with virtio drivers& refar'h(feed)a'*+redhat$'om 33 www$redhat$'om /." +mportin0 the Virtual Ma$hines +he virt.al 0a*hines *an >e i06orte/ .sing either the Re/ 3at 5nter6rise Virt.aliEation :anager gra6hi*al .ser inter1a*e or the R5S+ AP9 inter1a*e2 )oth 0etho/s are e'6laine/ >elo82 6.5.1 Graphical User Interface 906orting virt.al 0a*hines .sing the gra6hi*al inter1a*e is si06le to /o an/ allo8s i06orting 0.lti6le virt.al 0a*hines at the sa0e ti0e2 (6en the 0anage0ent *onsole on the Re/ 3at 5nter6rise Virt.aliEation :anager an/ .se /igure 1$5$#$#- 2mport Sele'tion as a re1eren*e to *hoose the virt.al 0a*hines to i06ort2 Sele*t on the "torage ta> A C to vie8 the storage /o0ains2 Choose the $port e'6ort /o0ain in the /o0ain list A C an/ a Details 6ane o6ens2 Sele*t on the -* Import ta> A C in the Details 6ane an/ a list o1 virt.al 0a*hines is /is6laye/ A C2 +hese virt.al 0a*hines are rea/y to >e i06orte/2 Sele*t all the virt.al 0a*hines >y hol/ing /o8n the 0ctrl2 ,ey 8hile sele*ting ea*h virt.al 0a*hine2 +he Import >.tton A C >e*o0es visi>le2 Sele*t the Import >.tton to o6en .6 the Import -* 8in/o84 as seen in /igure 1$5$#$3- 2mport 7otifi'ation2 www$redhat$'om 34 refar'h(feed)a'*+redhat$'om +he Import -irtual *achine7s8 8in/o8 lists the virt.al 0a*hines that are sele*te/ 1or i06ort2 +his is seen in the 1ollo8ing 1ig.re2 Choose Infrastructure as the Destination Cluster an/ Data as the Destination "torage2 +hese are highlighte/ in the 1ig.re >elo82 Sele*t the OK >.tton to start the i06ort 6ro*ess2 refar'h(feed)a'*+redhat$'om 35 www$redhat$'om A 8in/o8 a66ears in/i*ating the virt.al 0a*hines are >eing i06orte/2 +his 8in/o8 is sho8n >elo82 Sele*t the Close >.tton to *lose the 8in/o82 +he stat.s o1 the i06ort 6ro*ess is vie8e/ >y .sing the #ents +a> as sho8n in /igure 1$5$#$5- Virtual Ma'hine Status2 <hen the 6ro*ess is 1inishe/4 the events log in/i*ates the i06ort 8as s.**ess1.l2 www$redhat$'om 0% refar'h(feed)a'*+redhat$'om Figure (.5.1.3: "m'ort Notification D.ring the i06ort 6ro*ess4 the "tatus o1 the virt.al 0a*hines is set to Locked2 (n*e the 6ro*ess is *o06lete4 the "tatus *hanges to Down as sho8n in /igure 1$5$#$5- Virtual Ma'hine Status2 6.5.2 REST API +he Re/ 3at 5nter6rise Virt.aliEation :anager 6rovi/es a RES% !PI inter1a*e that allo8s a**ess to a >roa/ set o1 1eat.res 8ithin the Re/ 3at 5nter6rise Virt.aliEation :anager2 A**essing the RES% !PI *an >e /one .sing the curl *o00an/2 +his 6a6er /is*.sses the R5S+ AP9 only >rie1ly in an atte06t to 6rovi/e the in1or0ation reF.ire/ to .n/erstan/ its .se 8ithin this 6a6er2 An in-/e6th /is*.ssion o1 the R5S+ AP9 an/ ho8 to a**ess it is o.t o1 the s*o6e o1 this 6a6er2 Rea/ the Red Hat Enter1ri.e Virt5ali@ation -.* A RES% !PI #5ide B 1or 0ore in1or0ation on the RES% !PI2 Port 8$$% on the Re/ 3at 5nter6rise Virt.aliEation :anager is a se*.re *onne*tion2 +he *erti1i*ate 1ile 1or the server 0.st >e /o8nloa/e/ an/ .se/ 8ith the curl *o00an/2 +he curl *o00an/ *an >e .se/ to /o8nloa/ the *erti1i*ate2 : curl -o ca$crt "ttp'##v2v(-r"evm'8@8@#ca$crt I 8otal I Received I L-erd .vera+e 1peed 8ie 8ie 8ie ;urrent =load @pload 8otal 1pent Le-t 1peed ')% ,#E' ')% ,#E' ) ) ',#E$ ) --?--?-- --?--?-- --?--?-- ,*(E$ $ htt6BB/o*s2re/hat2*o0B/o*sBen-USBRe/N3atN5nter6riseNVirt.aliEationB%20Bht0lBR5S+NAP9N=.i/eBin/e'2ht0l refar'h(feed)a'*+redhat$'om 0# www$redhat$'om +he R5S+ AP9 is a**esse/ .sing a UR92 +he 1ollo8ing synta' is .se/ 1or the UR9 https://[+/E#-01,.]:2333/api/[E.%+4-&*5.%]2 <here [+/E#-01,.] is the 1.lly F.ali1ie/ /o0ain na0e o1 the Re/ 3at 5nter6rise Virt.aliEation :anager [E.%+4-&*5.%] is a re1eren*e to the in1or0ation in the RES% !PI2 +he *.rl *o00an/ to a**ess the RES% !PI is in the 1ollo8ing 1or0at *.rl --silent --*a*ert [6E+%] U --hea/er HContent-+y6e a66li*ationB'0lI U --.ser Ha/0inDinternal[&'(()*+,]I U --reF.est H[%4&E]I U --/ata H[78]I U 9+5 <here [6E+%] is the na0e o1 the *erti1i*ate 1ile /o8nloa/e/ 1ro0 the Re/ 3at 5nter6rise Virt.aliEation :anager2 [&'(()*+,] is the 6ass8or/ .se/ 1or the internal a/0in a**o.nt2 [%4&E] is the htt6 0etho/ ty6e o1 #E%4 PC%4 or PS%2 +o retrieve in1or0ation 1ro0 the R5S+ AP94 a #E% *all 0etho/ is 0a/e2 :o/i1ying in1or0ation in the RES% !PI is /one .sing either the PS% or PC% 0etho/s2 [78] is the ;:- /ata .se/ to s.>0it in1or0ation to the RES% !PI2 +he --/ata o6tion is not .se/ 8ith #E% 0etho/s2 [9+5] is the UR9 o1 the Re/ 3at 5nter6rise Virt.aliEation :anager4 6ort4 an/ entry 6oint2 www$redhat$'om 0& refar'h(feed)a'*+redhat$'om Reso.r*es 8ithin the environ0ent are assigne/ a UU9D2 +he UU9D o1 the storage /o0ains an/ virt.al 0a*hine 1iles are nee/e/ to i06ort the virt.al 0a*hines2 +he 1ollo8ing *o00an/ retrieves the UU9Ds o1 the storage /o0ains2 7 curl --silent --cacert ca$crt --"eader 3?ontent-Type' application#xml3 - A --user 3adminBinternal'[&ass$ord]3 - A --reCuest 3G.T3 - A "ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains - A / rep -. 3domain id/name3 <stora+e6doain id=H<,8DDe!c-(=D(-=c=,-b=,=-2,e<,dca(D8!H hre-=H"api"stora+edoains"6'(##e-c-,*#,-*c*'-b*'*-%'e6'dca,#(-H> <nae>6ata<"nae> <stora+e6doain id=H2a88e=8<-b,e2-=bE<-8D2e-(<b9!==a,dDeH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#eH> <nae>.xport<"nae> <stora+e6doain id=H<(E=@dbe-(8c2-==<2-E=b,-<8=@(ca=(,e<H hre-=H"api"stora+edoains"6,F*)dbe-,(c%-**6%-F*b'-6(*),ca*,'e6H> <nae>ISO<"nae> Using the UU9D o1 the 5'6ort /o0ain4 the UU9Ds o1 the virt.al 0a*hines rea/y to >e i06orte/ are retrieve/2 7 curl --silent --cacert ca$crt --"eader 3?ontent-Type' application#xml3 - A --user 3adminBinternal'[&ass$ord]3 - A --reCuest 3G.T3 - A "ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88 e=8<-b,e2-=bE<-8D2e-(<b9!==a,dDe#vms - A / rep -. 3vm id/name3 <v id=H2,!=8<8(-9ce8-=(9D-E((d-d2e(=b,8@!d<H hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"%'-*(6(,- Ece(-*,E#-F,,d-d%e,*b'()-d6H> <nae>v2v(-72>8-6?<"nae> <v id=Hda(de=@8-edea-=88a-8e(=-8Dd,=282bdbaH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"da,de*)(- edea-*((a-(e,*-(#d'*%(%bdbaH> <nae>v2v(-79<"nae> <v id=H!9(9=8bb-@2a!-=@,2-a!,E-9@c!EEDcbE@bH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"-E,E*(bb- )%a--*)'%-a-'F-E)c-FF#cbF)bH> <nae>v2v(-r"el<"nae> refar'h(feed)a'*+redhat$'om 03 www$redhat$'om +he 1ollo8ing *o00an/s start the i06ort o1 the virt.al 0a*hines2 +he o.t6.t ret.rne/ 1ro0 the RES% !PI in/i*ates a state o1 pending2 7 curl --silent --cacert ca$crt - A --"eader 3?ontent-Type' application#xml3 - A --user 3adminBinternal'[&ass$ord]3 - A --reCuest 3FOST3 - A --data 3 A GactionA A Gstorae*domainA A GnameA6ataG#nameA A G#storae*domainA A A GclusterA A GnameAIn!rastructureG#nameA A G#clusterA A G#actionA A 3 - A "ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88 e=8<-b,e2-=bE<-8D2e-(<b9!==a,dDe#vms#2,!=8<8(-9ce8-=(9D-E((d- d2e(=b,8@!d<#import <Mxl version=H'&)H encodin+=H@8G-(H standalone=HyesHM> <action id=H6d#)#ce(-'6cb-*ab--()6a-d-#--(dd)E%dH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"%'-*(6(,- Ece(-*,E#-F,,d-d%e,*b'()-d6"iport"6d#)#ce(-'6cb-*ab--()6a-d-#--(dd)E%dH> <lin$ rel=HparentH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"%'-*(6(,-Ece(-*,E#-F,,d-d%e,*b'()-d6H"> <lin$ rel=HreplayH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"%'-*(6(,-Ece(-*,E#-F,,d-d%e,*b'()-d6"iportH"> <async>true<"async> <stora+e6doain> <nae>=ata<"nae> <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <status> <state>pendin<"state> <"status> <"action> 7 curl --silent --cacert ca$crt - A --"eader 3?ontent-Type' application#xml3 - A --user 3adminBinternal'[&ass$ord]3 - A --reCuest 3FOST3 - A --data 3 A GactionA A Gstorae*domainA A GnameA6ataG#nameA A G#storae*domainA A A GclusterA www$redhat$'om 00 refar'h(feed)a'*+redhat$'om A GnameAIn!rastructureG#nameA A G#clusterA A G#actionA A 3 - A "ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88 e=8<-b,e2-=bE<-8D2e-(<b9!==a,dDe#vms#da(de=@8-edea-=88a-8e(=- 8Dd,=282bdba#import <Mxl version=H'&)H encodin+=H@8G-(H standalone=HyesHM> <action id=H6e#(E'#a-F#cE-*d6#-b#(--)d'6F)-)6*)FH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"da,de*)(- edea-*((a-(e,*-(#d'*%(%bdba"iport"6e#(E'#a-F#cE-*d6#-b#(--)d'6F)-)6*)FH> <lin$ rel=HparentH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"da,de*)(-edea-*((a-(e,*-(#d'*%(%bdbaH"> <lin$ rel=HreplayH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"da,de*)(-edea-*((a-(e,*-(#d'*%(%bdba"iportH"> <async>true<"async> <stora+e6doain> <nae>=ata<"nae> <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <status> <state>pendin<"state> <"status> <"action> 7 curl --silent --cacert ca$crt - A --"eader 3?ontent-Type' application#xml3 - A --user 3adminBinternal'[&ass$ord]3 - A --reCuest 3FOST3 - A --data 3 A GactionA A Gstorae*domainA A GnameA6ataG#nameA A G#storae*domainA A A GclusterA A GnameAIn!rastructureG#nameA A G#clusterA A G#actionA A 3 - A "ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88 e=8<-b,e2-=bE<-8D2e-(<b9!==a,dDe#vms#!9(9=8bb-@2a!-=@,2-a!,E- 9@c!EEDcbE@b#import <Mxl version=H'&)H encodin+=H@8G-(H standalone=HyesHM> <action id=H-e(*dcbb-ba*(-*(a(-b#(E-6F%#cFbc)b6eH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"-E,E*(bb- )%a--*)'%-a-'F-E)c-FF#cbF)b"iport"-e(*dcbb-ba*(-*(a(-b#(E-6F%#cFbc)b6eH> <lin$ rel=HparentH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"-E,E*(bb-)%a--*)'%-a-'F-E)c-FF#cbF)bH"> refar'h(feed)a'*+redhat$'om 05 www$redhat$'om <lin$ rel=HreplayH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"-E,E*(bb-)%a--*)'%-a-'F-E)c-FF#cbF)b"iportH"> <async>true<"async> <stora+e6doain> <nae>=ata<"nae> <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <status> <state>pendin<"state> <"status> <"action> A1ter a 1e8 0o0ents4 the state o1 the virt.al 0a*hines *hange to image9locked an/ event.ally to a state o1 down2 +he image9locked state in/i*ates the i06ort 6ro*ess has starte/2 U6on *o06letion o1 the i06ort 6ro*ess4 the state *hanges to down2 www$redhat$'om 01 refar'h(feed)a'*+redhat$'om +he stat.s o1 the i06ort 6ro*ess is liste/ as the stat.s o1 the virt.al 0a*hine2 +he virt.al 0a*hine UU9D is .se/ to F.ery the stat.s o1 the i06ort 6ro*ess2 7 curl --silent --cacert ca$crt --"eader 3?ontent-Type' application#xml3 - A --user 3adminBinternal'[&ass$ord]3 - A --reCuest 3G.T3 - A"ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#vms#!9(9=8bb-@2a!- =@,2-a!,E-9@c!EEDcbE@b / rep -v link <Mxl version=H'&)H encodin+=H@8G-(H standalone=HyesHM> <v id=H-E,E*(bb-)%a--*)'%-a-'F-E)c-FF#cbF)bH hre-=H"api"vs"-E,E*(bb-)%a-- *)'%-a-'F-E)c-FF#cbF)bH> <nae>v%v,-rhel<"nae> <description>4ported with virt-v%v<"description> <actions> <"actions> <type>server<"type> <status> <state>imae*locked<"state> <"status> <eory>%'*E*(,6*(<"eory> <cpu> <topolo+y cores=H'H soc$ets=H'H"> <"cpu> <os type=Hother6linuxH> <boot dev=HhdH"> <"os> <hi+h6availability> <enabled>-alse<"enabled> <priority>)<"priority> <"hi+h6availability> <display> <type>vnc<"type> <onitors>'<"onitors> <"display> <cluster id=He,'%e*-a-a'#--''e'-(66,-#%#*))-E#(d%H hre-=H"api"clusters"e,'%e*-a-a'#--''e'-(66,-#%#*))-E#(d%H"> <teplate id=H))))))))-))))-))))-))))-))))))))))))H hre-=H"api"teplates"))))))))-))))-))))-))))-))))))))))))H"> <creation6tie>%)'%-)6-'(8'F?#E?**&6,#-)#?))<"creation6tie> <ori+in>rhev<"ori+in> <stateless>-alse<"stateless> <placeent6policy> <a--inity>i+ratable<"a--inity> <"placeent6policy> <eory6policy> <+uaranteed>%'*E*(,6*(<"+uaranteed> <"eory6policy> <usb> <enabled>-alse<"enabled> <"usb> <"v> refar'h(feed)a'*+redhat$'om 03 www$redhat$'om /./ 1er.ormin0 1ost Mi0ration !as%s A 1e8 0ore tas,s are reF.ire/ to >e 6er1or0e/ a1ter the virt.al 0a*hines are i06orte/ into the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 +hese in*l./e >ooting the virt.al 0a*hines the 1irst ti0e in the ne8 environ0ent4 testing the 1.n*tionality o1 the virt.al 0a*hines4 an/ *leaning .6 any te06orary 1iles that 8ere *reate/ an/ re0oving the virt.al 0a*hines 1or0 the ol/ environ0ent2 6.6.1 First Boot A1ter the i06ort 6ro*ess is *o06lete an/ the virt.al 0a*hines are 6o8ere/ on 1or the 1irst ti0e4 the virt.al 0a*hine o6erating syste0 0ay 6er1or0 a//itional tas,s /.ring its 1irst >oot in the ne8 environ0ent2 <in/o8s >ase/ virt.al 0a*hines 0ay reF.ire a re>oot i00e/iately a1ter the 1irst 6ost- 0igration >oot2 +his is /.e to the VirtI /rivers >eing installe/2 +he g.est o6erating syste0 in/i*ates i1 a re>oot is reF.ire/2 Net8or, *on1ig.ration 0ay reF.ire re*on1ig.ration sin*e <in/o8s o6erating syste0s treat the ne8 net8or, /rivers as a ne8 net8or, a/a6ter an/ /o not 0ove the net8or, *on1ig.ration over 1ro0 the 6revio.s a/a6ter2 9t is also 6ossi>le that the virt.al 0a*hine 0.st >e re-a*tivate/ 8ith :i*roso1t2 6.6.2 Windows Virtual Machines 9n the -irtual *achines ta> on the Re/ 3at 5nter6rise Virt.aliEation :anager4 .se the right 0o.se >.tton to sele*t the #&#'(4&K:(DC virt.al 0a*hine an/ *hoose 3un2 A1ter a 1e8 0o0ents4 .se the right 0o.se >.tton to sele*t the #&#'(4&K:(DC virt.al 0a*hine again an/ *hoose Console2 -et the virt.al 0a*hine 6o8er .6 an/ then log into it .sing the a/0inistrator a**o.nt2 +he virt.al 0a*hine in/i*ates it is 6er1or0ing so0e *on1ig.ration2 A1ter a 1e8 0o0ents4 it in/i*ates it reF.ires a restart2 Restart the syste0 no82 A1ter re>oot4 the net8or, *on1ig.ration reF.ires re*on1ig.ration sin*e the a/a6ter *hange/2 Sele*t on the "tart >.tton P Control !anel P Network and Internet P Network "haring Center2 Sele*t on the Change adapter settings lin,2 A ne8 a/a6ter is /is6laye/ *alle/ Local Area Connection &2 Use the right 0o.se >.tton to sele*t the ne8 a/a6ter an/ *hoose !roperties 1ro0 the /ro6 /o8n 0en.2 Using the in1or0ation gathere/ in 9a)le 5$5(#- Virtual Ma'hine 7otes4 veri1y an/ 1i' the net8or, *on1ig.ration2 A 8in/o8 0ay a66ear in/i*ating another a/a6ter is *on1ig.re/ to .se this 9P a//ress2 +he sa0e 8in/o8 as,s i1 the *on1ig.ration 1or the other a/a6ter sho.l/ >e re0ove/2 91 this o**.rs4 sele*t the +es >.tton to re0ove the other a/a6ter *on1ig.ration an/ to *ontin.e2 Close the 8in/o8s an/ re>oot the syste0 i1 any net8or, *hanges 8ere 0a/e or i1 the syste0 in/i*ates a re>oot is ne*essary2 www$redhat$'om 04 refar'h(feed)a'*+redhat$'om +he net8or,ing sho.l/ no8 >e o6erational2 Use the ping *o00an/ 1ro0 a *o00an/ 6ro06t to test the >asi* net8or,ing an/ nslookup to veri1y DNS2 ;?N> pin #n ( ,@$,<$,=($2D= /in+in+ ')&'6&'*,&%#* with ,% bytes o- data? Reply -ro ')&'6&'*,&%#*? bytes=,% tie='s 88L=%## Reply -ro ')&'6&'*,&%#*? bytes=,% tie=<'s 88L=%## Reply -ro ')&'6&'*,&%#*? bytes=,% tie=<'s 88L=%## /in+ statistics -or ')&'6&'*,&%#*? /ac$ets? 1ent = ,2 Received = ,2 Lost = ) :)I loss>2 .pproxiate round trip ties in illi-seconds? 0iniu = )s2 0axiu = 's2 .vera+e = )s ;?N> nslookup www$red"at$com 1erver? v%v,-w%$(-dc&v%v,&cloud&lab&en+&bos&redhat&co .ddress? ')&'6&',6&6( Bon-authoritative answer? Bae? e'(F)&b&a$aaied+e&net .ddress? F6&6&#&%'* .liases? www&redhat&co Sin*e <in/o8s >ase/ virt.al 0a*hines 0ay reF.ire rea*tivation a1ter the i06ort 6ro*ess4 sele*t the "tart >.tton an/ .se the right 0o.se >.tton to sele*t Computer2 Choose !roperties 1ro0 the /ro6 /o8n 0en.2 +he 6ro6erties 8in/o8 has a se*tion title/ 4indows Acti#ation2 +his in/i*ates 8hether the virt.al 0a*hine reF.ires rea*tivation an/ ho8 long .ntil the *.rrent a*tivation e'6ires2 Sele*t the Acti#ate 4indows lin, an/ 1ollo8 the instr.*tions to rea*tivate the virt.al 0a*hine2 +he /ate an/ ti0e as re6orte/ >y the virt.al 0a*hine is veri1ie/ to >e *orre*t2 +his is ne*essary 1or 6ro6er 1.n*tionality 8ithin the /o0ain2 +he a>ove ste6s are also .se/ to 6o8er on an/ *on1ig.re the #&#'(4; virt.al 0a*hine the 1irst ti0e2 &or >revity4 these ste6s are not re6eate/2 refar'h(feed)a'*+redhat$'om 05 www$redhat$'om 6.6.3 Red Hat Enterprise Linux Virtual Machines Re/ 3at 5nter6rise -in.' >ase/ virt.al 0a*hines 6er1or0 an S5-in.' rela>el o1 the 1ile syste0s i1 S5-in.' is ena>le/2 +he net8or, in1or0ation sho.l/ not reF.ire re-entry2 Re/ 3at 5nter6rise -in.' sho.l/ 0ove the net8or, *on1ig.ration over to the ne8 a/a6ter2 Start the v2v3-rhel virt.al 0a*hine an/ o6en its *onsole2 U6on >oot4 the Re/ 3at 5nter6rise -in.' virt.al 0a*hine initiates an S5-in.' rela>eling o1 the 1ile syste0s2 +his is nor0al an/ 0.st >e allo8e/ to 1inish2 +he net8or,ing in the Re/ 3at 5nter6rise -in.' virt.al 0a*hine /oes not reF.ire re*on1ig.ration2 +his is veri1ie/ .sing the ping an/ nslookup *o00an/s2 7 pin -c ( ,@$,<$,=($2D= /4BA ')&'6&'*,&%#* :')&'6&'*,&%#*> #6:(*> bytes o- data& 6* bytes -ro ')&'6&'*,&%#*? icp6seO=' ttl=%## tie=)&#'E s 6* bytes -ro ')&'6&'*,&%#*? icp6seO=% ttl=%## tie=)&6%* s 6* bytes -ro ')&'6&'*,&%#*? icp6seO=, ttl=%## tie=)&#(' s --- ')&'6&'*,&%#* pin+ statistics --- , pac$ets transitted2 , received2 )I pac$et loss2 tie %))'s rtt in"av+"ax"dev = )&#'E")&#E*")&6%*")&)*, s 7 nslookup www$red"at$com 1erver? ')&'6&'*,&6( .ddress? ')&'6&'*,&6(7#, Bon-authoritative answer? www&redhat&co canonical nae = wildcard&redhat&co&ed+e$ey&net& Bae? e'(F)&b&a$aaied+e&net .ddress? 6F&'F%&,F&%'* +he /ate is veri1ie/ in or/er to ens.re 1.n*tionality 8ithin the /o0ain2 +he date *o00an/ in the o.t6.t >elo8 sho8s the /ate an/ ti0e to >e *orre*t2 7 date Gri Pun '# '#?%*?** ;=8 %)'% www$redhat$'om 5% refar'h(feed)a'*+redhat$'om 6.6.4 Testing +he virt.al 0a*hines sho.l/ >e teste/ to 0a,e s.re they are still 1.n*tioning as /esire/2 +he v2v%-<2J8-DC is a /o0ain *ontroller an/ is 6rovi/ing a )"S servi*e4 a KER6ERS servi*e4 an/ an !$%IVE )IRE$%RY a.thenti*ation servi*e2 +he DNS servi*e is teste/ >y .sing the dig *o00an/ 8hile logge/ into the v2v%-rhel server2 +he dig *o00an/ ta,es an arg.0ent that >egins 8ith an a.1erand 9D: an/ is 1ollo8e/ >y an 9P a//ress o1 a DNS server2 +his tells the dig *o00an/ 8hi*h DNS server to F.ery 8hen as,ing 1or na0e resol.tion2 +he dig *o00an/ is .se/ t8i*e to *he*, the DNS servi*e2 +he 1irst ti0e the dig *o00an/ is iss.e/4 it F.eries the DNS server 1or the lo*al entry on the /o0ain *ontroller 1or the v2v--(2K+-)$.v2v-.clo5d.lab.en4.bo..redhat.co/ server2 +his *he*,s to see that the lo*al DNS resol.tion is 8or,ing2 +he se*on/ ti0e the dig *o00an/ is iss.e/4 it *he*,s to see i1 the DNS servi*e *orre*tly 1or8ar/s .n,no8n reF.est to the ne't ho6 DNS server2 7 di B,@$,<$,(<$<8 v2v(-72>8-6?$v2v($cloud$lab$en$bos$red"at$com Q <<>> =iA F&E&,-/,-RedHat-F&E&,-(&/,&el66%&, <<>> 9')&'6&',6&6( v%v,-C%D(- =;&v%v,&cloud&lab&en+&bos&redhat&co Q :' server -ound> QQ +lobal options? <cd QQ Aot answer? QQ ->>HE.=ER<<- opcode? R@ERS2 status? B5ERR5R2 id? #6*E6 QQ -la+s? Or aa rd raQ R@ERS? '2 .B1CER? '2 .@8H5R48S? )2 .==4845B.L? ) QQ R@E1845B 1E;845B? Qv%v,-C%D(-=;&v%v,&cloud&lab&en+&bos&redhat&co& 4B . QQ .B1CER 1E;845B? v%v,-C%D(-=;&v%v,&cloud&lab&en+&bos&redhat&co& ,6)) 4B . ')&'6&',6&6( QQ Ruery tie? ) sec QQ 1ER3ER? ')&'6&',6&6(7#,:')&'6&',6&6(> QQ CHEB? Gri Pun '# '#?,)?#( %)'% QQ 01A 14TE rcvd? () 7 di B,@$,<$,(<$<8 www$red"at$com Q <<>> =iA F&E&,-/,-RedHat-F&E&,-(&/,&el66%&, <<>> 9')&'6&',6&6( www&redhat&co Q :' server -ound> QQ +lobal options? <cd QQ Aot answer? QQ ->>HE.=ER<<- opcode? R@ERS2 status? B5ERR5R2 id? '(F'E QQ -la+s? Or rd raQ R@ERS? '2 .B1CER? *2 .@8H5R48S? )2 .==4845B.L? ) QQ R@E1845B 1E;845B? Qwww&redhat&co& 4B . QQ .B1CER 1E;845B? www&redhat&co& 6)) 4B ;B.0E wildcard&redhat&co&ed+e$ey&net& refar'h(feed)a'*+redhat$'om 5# www$redhat$'om wildcard&redhat&co&ed+e$ey&net& '#((, 4B ;B.0E wildcard&redhat&co&ed+e$ey&net&+lobalredir&a$adns&net& wildcard&redhat&co&ed+e$ey&net&+lobalredir&a$adns&net& ,,E 4B ;B.0E e'(F)&b&a$aaied+e&net& e'(F)&b&a$aaied+e&net& %) 4B . %,&'#&%,&%'* QQ Ruery tie? (E sec QQ 1ER3ER? ')&'6&',6&6(7#,:')&'6&',6&6(> QQ CHEB? Gri Pun '# '#?%(?*' %)'% QQ 01A 14TE rcvd? 'F' +he A*tive Dire*tory servi*e is *he*,e/ >y .sing a /o0ain .ser a**o.nt to log into the v2v%- <7 virt.al 0a*hine2 +his also tests i1 the v2v%-<7 virt.al 0a*hine is still 1.n*tioning as a /o0ain 0e0>er2 -ogin to the v2v%-<7 .sing the /o0ain .ser a**o.nt refarch2 +he .ser a**o.nt refarch /oes not e'ist on the v2v%-<7 virt.al 0a*hine2 A s.**ess1.l login in/i*ates the /o0ain *ontroller is 1.n*tioning an/ the v2v%-<7 syste0 is a*ting as a 0e0>er o1 the /o0ain2 +he v2v%-rhel virt.al 0a*hine .ses the v2v%-<2J8-DC /o0ain *ontroller 1or lo*al a**o.nt a.thenti*ation2 +his is veri1ie/ >y iss.ing the ssh *o00an/ on the v2v%-v2v 0igration server to *onne*t to the v2v%-rhel virt.al 0a*hine .sing a /o0ain a**o.nt2 7 ss" re!arc"Bv2v(-r"el$cloud$lab$en$bos$red"at$com re-arch9v%v,-rhel&cloud&lab&en+&bos&redhat&co's password? [&'(()*+,] Last lo+in? Gri Pun '# '#?*#?'% %)'% -ro v%v,-v%v Dic$started on %)'%-)6-'* U w"oami re-arch U pwd "hoe"3%3,"re-arch +he s.**ess1.l login in/i*ates that lo*al a**o.nt a.thenti*ation is .sing the /o0ain *ontroller2 6.6.5 Cleaning Up +he 0igration 6ro*ess leaves virt.al 0a*hine *on1ig.ration 1iles an/ /is, i0ages on the e'6ort /o0ain an/ leaves the virt.al 0a*hines in the V:8are environ0ent2 Delete the i0ages 1ro0 the e'6ort /o0ain .sing the Delete >.tton in the Import ta> on the Re/ 3at 5nter6rise Virt.aliEation :anager2 See /igure 1$5$#$#- 2mport Sele'tion2 A1ter the virt.al 0a*hines are veri1ie/ to 1.n*tion as /esire/ in the Re/ 3at 5nter6rise Virt.aliEation environ0ent4 they *an >e /elete/ 1ro0 the V:8are environ0ent an/ the 5'6ort Do0ain2 www$redhat$'om 5& refar'h(feed)a'*+redhat$'om 7 Automating the Process A.to0ating the 0igration 6ro*ess *an >e /one .sing si06le >ash s*ri6ts4 having ssh a**ess to the 5S;i server4 an/ .sing the RES% !PI2 Prior to starting the 0igration4 the virt.al 0a*hines 0.st have %mware Tools .ninstalle/ an/ they 0.st >e sh.t /o8n2 A1ter these are /one4 the vim-cmd is .se/ on the 5S;i server via ssh to 0a,e s.re the virt.al 0a*hines are 6o8ere/ o112 +he 1.n*tions a**ess an asso*iative array *alle/ config that *ontains the val.es o1 the o6tions 6asse/ to the s*ri6t on the *o00an/ line2 +he 1ollo8ing bash 1.n*tion retrieves the list o1 virt.al 0a*hines an/ their res6e*tive virt.al 0a*hine i/s 1ro0 the 5S;i server an/ assigns the val.es to an asso*iative array *alle/ es$-*2 +he 1.n*tion then loo6s thro.gh the list o1 virt.al 0a*hine na0es an/ *he*, the 6o8er state2 91 the virt.al 0a*hine is 6o8ere/ on4 the *o.nter #ms9on is in*re0ente/2 91 the 1or*e o6tion 8as 6asse/ to the 1.n*tion4 then the 1.n*tion 8ill try to 6o8er o11 the virt.al 0a*hine2 +he 1.n*tion then ret.rns the n.0>er o1 virt.al 0a*hines that 8ere 6o8ere/ on 8hen the 1.n*tion 8as *alle/2 declare -. con-i+ esx30 esxi6vs:> V state=U' echo H;hec$in+ power state o- virtual achines&H 7 Aet virtual achine naes and vids while read vid vnae extra do esx30JUVvnaeWK=UVvidW done < <: ssh UVcon-i+Jesx6srvKW vi-cd vsvc"+etallvs %>"dev"null X +rep -v 3id > vs6on=) 7 ;hec$ power state o- virtual achine -or i in UV!esx30J9KW do echo -e H -- UViW? NcH ssh UVcon-i+Jesx6srvKW vi-cd vsvc"power&+etstate UVesx30JUViWKW %>"dev"null X +rep -O o-- R;=UM i- J UR; -ne ) K then ::vs6on<<>> i- J HUVstateWH == H-orceH K then refar'h(feed)a'*+redhat$'om 53 www$redhat$'om ssh UVcon-i+Jesx6srvKW vi-cd vsvc"power&o-- UVesx30JUViWKW %>"dev"null else echo HonH -i else echo Ho--H -i done return UVvs6onW W +he 1ollo8ing 1.n*tion loo6s thro.gh the virt.al 0a*hine na0es an/ e'e*.tes the virt-v2v *o00an/ 1or ea*h virt.al 0a*hine2 v%v6vs:> V echo HExecutin+ virt-v%v a+ainst the virtual achinesH -or i in UV!esx30J9KW do virt-v%v -p UVcon-i+Jpro-ileKW -i libvirt -ic esx?""UVcon-i+Jesx6srvKW"M no6veri-y=' UViW done W +he 1inal 1.n*tion i06orts the virt.al 0a*hines into the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 +he 1.n*tion ass.0es the *erti1i*ate 1ile 1or the Re/ 3at 5nter6rise Virt.aliEation :anager has >een /o8nloa/e/2 +he 1.n*tion F.eries the RES% !PI to get the UU9D o1 the 5'6ort storage /o0ain2 +he 1.n*tion F.eries the RES% !PI 1or the UU9Ds o1 the virt.al 0a*hines in the 5'6ort /o0ain2 +he 1.n*tion loo6s thro.gh the UU9Ds an/ i06orts the virt.al 0a*hines into the Re/ 3at 5nter6rise Virt.aliEation environ0ent2 rhev6iport:> V echo H4portin+ the virtual achines&H doainid=U: curl --silent --cacert UVcon-i+JcacertKW N --header H;ontent-8ype? application"xlH N --user HUVcon-i+Jrhev6userKW?UVcon-i+Jrhev6passwordKWH N --reOuest HAE8H N https?""UVcon-i+Jrhev6srvKW?(**,"api"stora+edoainsMsearch=nae I,dExport N X xpath "stora+e6doains"stora+e6doain"9id %>"dev"null N X sed -e 's"id=H""' -e 's"H""' -e 's" ""' > uuids=U: curl --silent --cacert UVcon-i+JcacertKW N --header H;ontent-8ype? application"xlH N --user HUVcon-i+Jrhev6userKW?UVcon-i+Jrhev6passwordKWH N --reOuest HAE8H N https?""UVcon-i+Jrhev6srvKW?(**,"api"stora+edoains"UVdoainidW"vs N X xpath "vs"v"9id %>"dev"null N X sed -e 's"id=H""+' -e 's"H""+' > www$redhat$'om 50 refar'h(feed)a'*+redhat$'om
-or i in UVuuidsW do echo H4portin+ 30 UViWH curl --silent --cacert ca&crt N --header H;ontent-8ype? application"xlH N --user HUVcon-i+Jrhev6userKW?UVcon-i+Jrhev6passwordKWH N --reOuest H/518H N --data H <action> <stora+e6doain> <nae>=ata<"nae> <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <"action>H N https?""UVcon-i+Jrhev6srvKW?(**,"api"stora+edoains"UVdoainidW"vs"U ViW"iport done W 5a*h 1.n*tion is e'e*.te/ in or/er 8ithin a >ash s*ri6t2 +he *o06lete >ash s*ri6t is liste/ in "ppendi6 !- S'ripts an/ is availa>le on the Re/ 3at C.sto0er Portal # 2 +he o.t6.t generate/ to 0igrate the three virt.al 0a*hines .se/ in this Re1eren*e Ar*hite*t.re is /is6laye/ >elo82 7 $#mirate*v2v($s" -e v2v(-esxi -o v2v(-r"ev -c ca$crt -r v2v(- r"evm$cloud$lab$en$bos$red"at$com -u 3adminBinternal3 -p [&'(()*+,] -! ;hec$in+ power state o- virtual achines& -- v%v,-rhel? /owerin+ o-- 30? -- v%v,-CE? /owerin+ o-- 30? -- v%v,-C%D(-=;? /owerin+ o-- 30? Executin+ virt-v%v a+ainst the virtual achines v%v,-rhel6v%v,-rhel? '))I J==========================================K= )h)(%6s virt-v%v? v%v,-rhel con-i+ured with virtio drivers& v%v,-CE6v%v,-CE? '))I J==============================================K= )h%E%)s virt-v%v? v%v,-CE con-i+ured with virtio drivers& v%v,-C%D(-=;6v%v,-C%D(-=;? '))I J====================================K= )h%6*Fs virt-v%v? v%v,-C%D(-=; con-i+ured with virtio drivers& 4portin+ the virtual achines& 4portin+ 30 )6E%eEEE--)*6-*b#c-b*F#-#,'aeb6F6Ecd <Mxl version=H'&)H encodin+=H@8G-(H standalone=HyesHM> <action id=H'F'a*'eE-#b,E-*abc-ba)%-F,#,)E-b'F)'H hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs")6E%eEEE- -)*6-*b#c-b*F#-#,'aeb6F6Ecd"iport"'F'a*'eE-#b,E-*abc-ba)%-F,#,)E-b'F)'H> <lin$ rel=HparentH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs")6E%eEEE--)*6-*b#c-b*F#-#,'aeb6F6EcdH"> # htt6sBBa**ess2re/hat2*o0BsitesB/e1a.ltB1ilesB0igrateNes'2rhev2tgE refar'h(feed)a'*+redhat$'om 55 www$redhat$'om <lin$ rel=HreplayH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs")6E%eEEE--)*6-*b#c-b*F#-#,'aeb6F6Ecd"iportH"> <async>true<"async> <stora+e6doain> <nae>=ata<"nae> <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <status> <state>pendin<"state> <"status> <"action> 4portin+ 30 %((%-,a%-E%dc-*e6e-aea,-6a6a))Ee-a*, <Mxl version=H'&)H encodin+=H@8G-(H standalone=HyesHM> <action id=H((b#'ea6-,--e-*aac-a'EF-*d-(#d(E)b%-H hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"%((%-,a%- E%dc-*e6e-aea,-6a6a))Ee-a*,"iport"((b#'ea6-,--e-*aac-a'EF-*d-(#d(E)b%-H> <lin$ rel=HparentH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"%((%-,a%-E%dc-*e6e-aea,-6a6a))Ee-a*,H"> <lin$ rel=HreplayH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"%((%-,a%-E%dc-*e6e-aea,-6a6a))Ee-a*,"iportH"> <async>true<"async> <stora+e6doain> <nae>=ata<"nae> <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <status> <state>pendin<"state> <"status> <"action> 4portin+ 30 ((b*(#a)-,Feb-*EEF-a*,'-cd'e#%c,c6a# <Mxl version=H'&)H encodin+=H@8G-(H standalone=HyesHM> <action id=H)%d(%(,#-)E(d-*-EE-(Fbe-'*#ea%6b'()'H hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e-,6bE-**a'd#e"vs"((b*(#a)- ,Feb-*EEF-a*,'-cd'e#%c,c6a#"iport")%d(%(,#-)E(d-*-EE-(Fbe-'*#ea%6b'()'H> <lin$ rel=HparentH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"((b*(#a)-,Feb-*EEF-a*,'-cd'e#%c,c6a#H"> <lin$ rel=HreplayH hre-=H"api"stora+edoains"%a((e*(6-b'e%-*bF6-(#%e- ,6bE-**a'd#e"vs"((b*(#a)-,Feb-*EEF-a*,'-cd'e#%c,c6a#"iportH"> <async>true<"async> <stora+e6doain> <nae>=ata<"nae> <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <status> <state>pendin<"state> <"status> <"action> www$redhat$'om 51 refar'h(feed)a'*+redhat$'om +he 1.n*tions liste/ a>ove an/ the *o06lete s*ri6t are sa06les only an/ are .se/ to sho8 ho8 si06ly the 0igration 6ro*ess *an >e a.to0ate/2 S*ri6ts in a 6ro/.*tion environ0ent sho.l/ 6er1or0 0ore error *he*,ing an/ logging2 refar'h(feed)a'*+redhat$'om 53 www$redhat$'om 8 Conclusion +his 6a6er /e0onstrate/ the 0igration o1 three virt.al 0a*hines *on1ig.re/ to .se a*tive /ire*tory a.thenti*ation 8ith ea*h other2 +he 0igrations 8ere 6er1or0e/ 1ro0 a V:8are 5S;i server to a Re/ 3at 5nter6rise Virt.aliEation environ0ent .sing the virt-v2v .tility an/ the Re/ 3at 5nter6rise Virt.aliEation :anager2 +his 6a6er /e0onstrate/ the ste6s reF.ire/ >e1ore starting the 0igration s.*h as 0a66ing an/ *reating net8or,s4 *reating e'6ort /o0ains4 an/ gathering in1or0ation a>o.t the 5S;i environ0ent an/ virt.al 0a*hines2 Co00itting sna6shots an/ .ninstalling V:8are +ools 8as also /e0onstrate/ >e1ore the virt-v2v .tility 8as .se/ to e'6ort the virt.al 0a*hines 1ro0 the 5S;i server2 906orting the virt.al 0a*hines into the Re/ 3at 5nter6rise Virt.aliEation environ0ent an/ *on1ig.ring a1ter 1irst >oot in the ne8 environ0ent 8as /e0onstrate/2 +he virt.al 0a*hines 8ere teste/ 1or *orre*t 1.n*tionality2 Sa06le s*ri6ts 8ere also .se/ to sho8 ho8 the 0igration 6ro*ess *an easily >e a.to0ate/ .sing >ash4 the V:8are vi0-*0/ *o00an/4 an/ the R5S+ AP92 As seen 1ro0 this 6a6er4 virt.al 0a*hines *an easily >e 0igrate/ 1ro0 a V:8are 5S;i server to a Re/ 3at 5nter6rise Virt.aliEation sol.tion 8ith the *orre*t tools an/ *are1.l 6lanning2 )y 6lanning the 0igration 6ro*ess4 the i06a*t to the e'isting 6ro/.*tion syste0s *an >e li0ite/2 www$redhat$'om 54 refar'h(feed)a'*+redhat$'om "ppendi6 "- Se'uring 7/S using 289a)les +he N&S version % servi*e .ses 0.lti6le in>o.n/ 6orts to 1.n*tion 6ro6erly2 So0e o1 these 6orts are stati* an/ others are ran/o0 >y /e1a.lt2 +he ran/o0 6orts 0a,e it /i11i*.lt to *reate 1ire8all r.les on syste0s r.nning the N&S servi*e2 3o8ever4 the N&S servi*e *an >e *on1ig.re/ to .se stati* 6orts instea/ o1 ran/o0 6orts2 +his is a**o06lishe/ >y e/iting the /etc/.>.confi4/nf. *on1ig.ration 1ile an/ *hanging 1o.r *on1ig.ration o6tions that *a.se the N&S servi*e to .se stati* 6orts instea/ o1 ran/o0 6orts2 +he 1ollo8ing ta>le lists the 6orts an/ *on1ig.ration o6tions .se/ >y the N&S servi*e2 :aemon 8ort 8roto'ol !onfiguration <ption 6ort0a6 111 UDP4 +CP Not nee/e/ r6*2n1s/ 20$" UDP4 +CP Not nee/e/ r6*2lo*,/ Ran/o0 UDP4 +CP -(CJDN+CPP(R+ -(CJDNUDPP(R+ r6*20o.nt/ Ran/o0 UDP4 +CP :(UN+DNP(R+ r6*2stat/ Ran/o0 UDP4 +CP S+A+DNP(R+ Table *-1: '+S Ser"ice ,orts +hree stati* 6orts 0.st >e i/enti1ie/ to .se 1or the ran/o0 6orts liste/ in the a>ove ta>le2 +he netstat *o00an/ *an >e .se/ to list the 6orts alrea/y in .se >y the syste02 +he o6tions .se/ are liste/ >elo82 !ommand options- ((t'p Sho8 t*6 so*,ets2 ((udp Sho8 ./6 so*,ets2 ((listening Sho8 listening so*,ets2 ((numeri' Sho8 n.0eri*al a//resses an/ 6orts instea/ o1 0a66ing in1or0ation to host na0es an/ servi*e na0es2 ((program Sho8 the 6ro*ess i/ an/ 6rogra0 na0e that o8ns the so*,et2 refar'h(feed)a'*+redhat$'om 55 www$redhat$'om +he o.t6.t >elo8 sho8s the 6orts that are *.rrently in .se2 Ran/o0ly *hosen 6orts #00004 #00014 an/ #0002 are 1ree 1or >oth UDP an/ +CP tra11i*2 +hey are .se/ 1or the stati* 6orts reF.ire/ to hel6 se*.re n1s2 7 netstat --tcp --udp --listenin --numeric --proram .ctive 4nternet connections :only servers> /roto Recv-R 1end-R Local .ddress Gorei+n .ddress 1tate /4="/ro+ra nae tcp ) ) )&)&)&)?%% )&)&)&)?Y L418EB ',#)"sshd tcp ) ) '%E&)&)&'?%# )&)&)&)?Y L418EB '*%6"aster tcp ) ) )&)&)&)?%)*F )&)&)&)?Y L418EB - tcp ) ) )&)&)&)?''' )&)&)&)?Y L418EB ''FF"rpcbind tcp ) ) ???%% ???Y L418EB ',#)"sshd tcp ) ) ??'?%# ???Y L418EB '*%6"aster tcp ) ) ???''' ???Y L418EB ''FF"rpcbind udp ) ) )&)&)&)?''' )&)&)&)?Y ''FF"rpcbind udp ) ) )&)&)&)?F#) )&)&)&)?Y ''FF"rpcbind udp ) ) )&)&)&)?6( )&)&)&)?Y '''E"dhclient udp ) ) )&)&)&)?FE6 )&)&)&)?Y '%%*"rpc&statd udp ) ) ???''' ???Y ''FF"rpcbind udp ) ) ???F#) ???Y ''FF"rpcbind 5/it the /etc/.>.confi4/nf. 1ile an/ 0a,e s.re the 1ollo8ing *on1ig.ration lines e'ist2 7 /ort rpc&ountd should listen on& 05@B8=6/5R8=#)))) 7 /ort rpc&statd should listen on& 18.8=6/5R8=#)))' 7 8;/ port rpc&loc$d should listen on& L5;D=68;//5R8=#)))% 7 @=/ port rpc&loc$d should listen on& L5;D=6@=//5R8=#)))% +he n!s an/ n!slock servi*es 0.st >e restarte/ an/ *on1ig.re/ to start at >oot2 7 service n!slock restart 1toppin+ BG1 loc$in+? J 5D K 1toppin+ BG1 statd? J 5D K 1tartin+ BG1 statd? J 5D K 7 service n!s restart 1huttin+ down BG1 ountd? J 5D K 1huttin+ down BG1 daeon? J 5D K 1huttin+ down BG1 services? J 5D K 1tartin+ BG1 services? J 5D K 1tartin+ BG1 daeon? J 5D K 1tartin+ BG1 ountd? J 5D K 7 c"kcon!i n!slock on 7 c"kcon!i n!s on www$redhat$'om 1% refar'h(feed)a'*+redhat$'om +he netstat *o00an/ no8 sho8s the N&S servi*es are r.nning on the stati* 6orts2 7 netstat --tcp --udp --listenin --numeric --proram .ctive 4nternet connections :only servers> /roto Recv-R 1end-R Local .ddress Gorei+n .ddress 1tate /4="/ro+ra nae tcp ) ) )&)&)&)?%% )&)&)&)?Y L418EB ',#)"sshd tcp ) ) '%E&)&)&'?%# )&)&)&)?Y L418EB '*%6"aster tcp ) ) )&)&)&)?%)*F )&)&)&)?Y L418EB - tcp ) ) )&)&)&)?''' )&)&)&)?Y L418EB ''FF"rpcbind tcp ) ) )&)&)&)?#)))) )&)&)&)?Y L418EB ',%*"rpc&ountd tcp ) ) )&)&)&)?#)))' )&)&)&)?Y L418EB '%%*"rpc&statd tcp ) ) )&)&)&)?#)))% )&)&)&)?Y L418EB - tcp ) ) ???%% ???Y L418EB ',#)"sshd tcp ) ) ??'?%# ???Y L418EB '*%6"aster tcp ) ) ???%)*F ???Y L418EB - tcp ) ) ???''' ???Y L418EB ''FF"rpcbind tcp ) ) ???#)))) ???Y L418EB ',%*"rpc&ountd tcp ) ) ???#)))' ???Y L418EB '%%*"rpc&statd tcp ) ) ???#)))% ???Y L418EB - udp ) ) )&)&)&)?''' )&)&)&)?Y ''FF"rpcbind udp ) ) )&)&)&)?%)*F )&)&)&)?Y - udp ) ) )&)&)&)?F#) )&)&)&)?Y ''FF"rpcbind udp ) ) )&)&)&)?6( )&)&)&)?Y '''E"dhclient udp ) ) )&)&)&)?#)))) )&)&)&)?Y ',%*"rpc&ountd udp ) ) )&)&)&)?FE6 )&)&)&)?Y '%%*"rpc&statd udp ) ) )&)&)&)?#)))' )&)&)&)?Y '%%*"rpc&statd udp ) ) )&)&)&)?#)))% )&)&)&)?Y - udp ) ) ???''' ???Y ''FF"rpcbind udp ) ) ???%)*F ???Y - udp ) ) ???F#) ???Y ''FF"rpcbind udp ) ) ???#)))) ???Y ',%*"rpc&ountd udp ) ) ???#)))' ???Y '%%*"rpc&statd udp ) ) ???#)))% ???Y - No8 that the N&S servi*es are .sing stati* 6orts4 the 9P+a>les 1ire8all *an >e *on1ig.re/ to allo8 tra11i* to 6ass2 +he 1ollo8ing sho8s the i6ta>les 9NPU+ *hain2 +his *hain is not allo8ing tra11i* on the 6orts .se/ >y N&S2 7 iptables --numeric --list INF5T ;hain 4B/@8 :policy .;;E/8> tar+et prot opt source destination .;;E/8 all -- )&)&)&)") )&)&)&)") state REL.8E=2E18.ZL41HE= .;;E/8 icp -- )&)&)&)") )&)&)&)") .;;E/8 all -- )&)&)&)") )&)&)&)") .;;E/8 tcp -- )&)&)&)") )&)&)&)") state BEC tcp dpt?%% REPE;8 all -- )&)&)&)") )&)&)&)") re!ect-with icp-host-prohibited refar'h(feed)a'*+redhat$'om 1# www$redhat$'om +he 1ollo8ing >ash loo6 a//s entries to the 9NPU+ *hain o1 i6ta>les that allo8 the N&S *onne*tions to 1.n*tion2 7 !or i in D@@@@ D@@@, D@@@2 2@=E ,,, > do > iptables -I INF5T -m udp -p udp --dport 2i -s ,@$,<$,(<$@#2, -H I??.FT > iptables -I INF5T -m tcp -p tcp --dport 2i -s ,@$,<$,(<$@#2, -H I??.FT > done +he i6ta>les 9NPU+ *hain is no8 *on1ig.re/ to a**e6t *onne*tion on the 6orts .se/ >y N&S2 7 iptables Jnumeric Jlist INF5T ;hain 4B/@8 :policy .;;E/8> tar+et prot opt source destination .;;E/8 tcp -- ')&'6&',6&)"%' )&)&)&)") tcp dpt?''' .;;E/8 udp -- ')&'6&',6&)"%' )&)&)&)") udp dpt?''' .;;E/8 tcp -- ')&'6&',6&)"%' )&)&)&)") tcp dpt?%)*F .;;E/8 udp -- ')&'6&',6&)"%' )&)&)&)") udp dpt?%)*F .;;E/8 tcp -- ')&'6&',6&)"%' )&)&)&)") tcp dpt?#)))% .;;E/8 udp -- ')&'6&',6&)"%' )&)&)&)") udp dpt?#)))% .;;E/8 tcp -- ')&'6&',6&)"%' )&)&)&)") tcp dpt?#)))' .;;E/8 udp -- ')&'6&',6&)"%' )&)&)&)") udp dpt?#)))' .;;E/8 tcp -- ')&'6&',6&)"%' )&)&)&)") tcp dpt?#)))) .;;E/8 udp -- ')&'6&',6&)"%' )&)&)&)") udp dpt?#)))) .;;E/8 all -- )&)&)&)") )&)&)&)") state REL.8E=2E18.ZL41HE= .;;E/8 icp -- )&)&)&)") )&)&)&)") .;;E/8 all -- )&)&)&)") )&)&)&)") .;;E/8 tcp -- )&)&)&)") )&)&)&)") state BEC tcp dpt?%% REPE;8 all -- )&)&)&)") )&)&)&)") re!ect-with icp-host-prohibited A1ter the i6ta>les r.les are veri1ie/4 they are save/ .sing the service iptables save *o00an/2 7 service iptables save iptables? 1avin+ -irewall rules to "etc"syscon-i+"iptables?J 5D K www$redhat$'om 1& refar'h(feed)a'*+redhat$'om "ppendi6 =- Ena)ling ssh "''ess to the ESXi Ser,er +he a>ility to a**ess the 5S;i server .sing ssh *an >e ena>le/ on the 5S;i server2 +his allo8s in1or0ation a>o.t the virt.al 0a*hines an/ the 5S;i environ0ent to >e easily a**esse/ an/ the virt.al 0a*hine environ0ent to >e re*on1ig.re/2 +his is not ne*essary 1or the e'6ort 6ro*ess to 8or, *orre*tly2 +he ssh a**ess *an >e ena>le/ >y .sing the root *re/entials an/ logging into the 5S;i server .sing the vSp"ere client2 Conne*t to the 5S;i hy6ervisor .sing the vS6here *lient4 .sing the login *re/entials 1or the root a**o.nt2 A1ter the vS6here Client o6ens4 a 8in/o8 layo.t si0ilar to /igure 1$#$#- Snapshots is /is6laye/2 +he server na0e/ v2v0-e.0i that reF.ires ssh a**ess ena>le/ is sele*te/ A C2 A1ter the server is sele*te/4 the *on1ig.ration settings are a**esse/ >y sele*ting on the Configuration ta> A C2 +he "ecurit5 !rofile lin, A C .n/er the "oftware se*tion lists the servi*es on the 5S;i server2 )y sele*ting the !roperties lin, A C4 a "er#ice !roperties 8in/o8 o6ens an/ the settings 1or the servi*es *an >e a/@.ste/2 refar'h(feed)a'*+redhat$'om 13 www$redhat$'om +he ""H servi*e *ontrols the ssh /ae0on2 Sele*ting this servi*e an/ then sele*ting the Options >.tton o6ens the SS3 7."*(""H8 Options 8in/o82 Sele*t Start and stop with host an/ sele*t the Start >.tton2 A1ter the servi*e starts4 sele*t the OK >.tton to *lose the 8in/o8 an/ ret.rn to the 0ain vS6here 8in/o82 www$redhat$'om 10 refar'h(feed)a'*+redhat$'om +esting the ne8ly ena>le/ ssh *onne*tion is /one >y *onne*ting to the 5S;i server .sing the ssh *o00an/2 7 ss" rootBv2v(-esxi Carnin+? /eranently added 'v%v,- esxi&cloud&lab&en+&bos&redhat&co2')&'6&',6&6)' :R1.> to the list o- $nown hosts& /assword? [&'(()*+,] 8he tie and date o- this lo+in have been sent to the syste lo+s& 30ware o--ers supported2 power-ul syste adinistration tools& /lease see www&vware&co"+o"sysadintools -or details& 8he E1Li 1hell can be disabled by an adinistrative user& 1ee the v1phere 1ecurity docuentation -or ore in-oration& [ 7 +he 6ass8or/ 1or the root .ser a**o.nt on the 5S;i server 0.st >e entere/ ea*h ti0e the ssh *o00an/ is .se/ to *onne*t to the server2 +his >ehavior *an >e sto66e/ >y *reating an/ .sing a 6rivateB6.>li* ,ey 6air 8ith ssh2 A ,ey 6air is generate/ an/ then the 6.>li* 6ortion o1 the ,ey is 6la*e/ in on the 5S;i server2 A ,ey length o1 20$8 >its is *reate/ .sing the ssh-keygen *o000an/ an/ s6e*i1ying the -b o6tion 8ith an arg.0ent o1 20$82 +he ssh-copy-id *o00an/ is .se/ to *o6y the 6.>li* ,ey to the 5S;i syste02 +he -i o6tion is .se/ 8ith the ssh-copy-id *o00an/ to s6e*i1y the 6.>li* ,ey to *o6y to the 5S;i syste02 7 ss"-keyen -b 2@=8 Aeneratin+ public"private rsa $ey pair& Enter -ile in which to save the $ey :"root"&ssh"id6rsa>? [E.%E+] Enter passphrase :epty -or no passphrase>? [E.%E+] Enter sae passphrase a+ain? [E.%E+] Sour identi-ication has been saved in "root"&ssh"id6rsa& Sour public $ey has been saved in "root"&ssh"id6rsa&pub& 8he $ey -in+erprint is? d)?d-?)-?('?e%?#c?6)?(,?,e?#F?F6?(,?,b?e-?(E?%d root9v%v,- v%v&cloud&lab&en+&bos&redhat&co 8he $ey's randoart ia+e is? <--J R1. %)*(K----< X o<& X X oo=o & X X &&=o&o & X X Y< < & & X X & o X X & o & X X E o X X o X <-----------------< 7 cat $ss"#id*rsa$pub / ss" rootBv2v(-esxi 3cat - AA #etc#ss"#keys- root#aut"oriKed*keys3 Carnin+? /eranently added 'v%v,-esxi2')&'6&',6&6)' :R1.> to the list o- $nown hosts& /assword? [&'(()*+,] refar'h(feed)a'*+redhat$'om 15 www$redhat$'om "ppendi6 !- S'ripts +he 1ollo8ing s*ri6t *an >e /o8nloa/e/ 1ro0 the Re/ 3at C.sto0er Portal2 6
7! "bin"bash 7 8his script i+rates virtual achines -ro an E1Li server i 7 to a Red Hat Enterprise 3irtuali\ation environent&o 7 7 8he perl-L0L-L/ath pac$a+e is reOuired as is ssh access to the E1Li server& 7 . netrc -ile ust be con-i+ured -or access to the E1Li server& 7 8he Red Hat Enterprise 3irtuali\ation 0ana+ers certi-icate ust be 7 downloaded -or use with the RE18 ./4& 7 7 8his script appears in the 7 0i+ratin+ to Red Hat Enterprise 3irtuali\ation , - 30ware E1Li 7 Re-erence .rchitecture& declare -. con-i+ esx30 count=) esxi6vs:> V state=U' echo H;hec$in+ power state o- virtual achines&H 7 Aet virtual achine naes and vids while read vid vnae extra do esx30JUVvnaeWK=UVvidW done < <: ssh UVcon-i+Jesx6srvKW vi-cd vsvc"+etallvs %>"dev"null X +rep -v 3id > vs6on=) 7 ;hec$ power state o- virtual achine -or i in UV!esx30J9KW do echo -e H -- UViW? NcH ssh UVcon-i+Jesx6srvKW vi-cd vsvc"power&+etstate UVesx30JUViWKW %>"dev"null X +rep -O o-- R;=UM i- J UR; -ne ) K then ::vs6on<<>> i- J HUVstateWH == H-orceH K then ssh UVcon-i+Jesx6srvKW vi-cd vsvc"power&o-- UVesx30JUViWKW 6 htt6sBBa**ess2re/hat2*o0BsitesB/e1a.ltB1ilesB0igrateNes'2rhev2tgE www$redhat$'om 11 refar'h(feed)a'*+redhat$'om %>"dev"null else echo HonH -i else echo Ho--H -i done return UVvs6onW W v%v6vs:> V echo HExecutin+ virt-v%v a+ainst the virtual achinesH -or i in UV!esx30J9KW do virt-v%v -p UVcon-i+Jpro-ileKW -i libvirt -ic esx?""UVcon-i+Jesx6srvKW"M no6veri-y=' UViW done W rhev6iport:> V echo H4portin+ the virtual achines&H doainid=U: curl --silent --cacert UVcon-i+JcacertKW N --header H;ontent-8ype? application"xlH N --user HUVcon-i+Jrhev6userKW?UVcon-i+Jrhev6passwordKWH N --reOuest HAE8H N https?""UVcon-i+Jrhev6srvKW?(**,"api"stora+edoainsMsearch=nae I,dExport N X xpath "stora+e6doains"stora+e6doain"9id %>"dev"null N X sed -e 's"id=H""' -e 's"H""' -e 's" ""' > uuids=U: curl --silent --cacert UVcon-i+JcacertKW N --header H;ontent-8ype? application"xlH N --user HUVcon-i+Jrhev6userKW?UVcon-i+Jrhev6passwordKWH N --reOuest HAE8H N https?""UVcon-i+Jrhev6srvKW?(**,"api"stora+edoains"UVdoainidW"vs N X xpath "vs"v"9id %>"dev"null N X sed -e 's"id=H""+' -e 's"H""+' > -or i in UVuuidsW do echo H4portin+ 30 UViWH curl --silent --cacert ca&crt N --header H;ontent-8ype? application"xlH N --user HUVcon-i+Jrhev6userKW?UVcon-i+Jrhev6passwordKWH N --reOuest H/518H N --data H <action> <stora+e6doain> <nae>=ata<"nae> refar'h(feed)a'*+redhat$'om 13 www$redhat$'om <"stora+e6doain> <cluster> <nae>4n-rastructure<"nae> <"cluster> <"action>H N https?""UVcon-i+Jrhev6srvKW?(**,"api"stora+edoains"UVdoainidW"vs"U ViW"iport done W usa+e:> V echo Husa+e? U) optionsH echo -e HNnChere?H echo H -e esx6srv GR=B o- E1Li serverH echo H -o pro-ile /ro-ile -ro "etc"virt-v%v&con-H echo H -c cacert ;erti-icate -ile -ro RHE3 0ana+erH echo H -r rhev6srv GR=B o- RHE3 0ana+er 1erverH echo H -u rhev6user @ser -or RHE3 0ana+erH echo H -p rhev6password /assword -or RHE3 0ana+erH echo H -- Gorce shutdown virtual achines :5ptional>H exit W 77 0ain 7 while +etopts H?e?o?c?r?u?p?-H opt do case UVoptW in e> con-i+Jesx6srvK=UV5/8.RAW ::count<='>> QQ o> con-i+Jpro-ileK=UV5/8.RAW ::count<=%>> QQ c> con-i+JcacertK=UV5/8.RAW ::count<=*>> QQ r> con-i+Jrhev6srvK=UV5/8.RAW ::count<=(>> QQ u> con-i+Jrhev6userK=UV5/8.RAW ::count<='6>> QQ p> con-i+Jrhev6passwordK=UV5/8.RAW ::count<=,%>> QQ -> con-i+J-orceK=H-orceH QQ Y> usa+e QQ esac www$redhat$'om 14 refar'h(feed)a'*+redhat$'om done i- J UVcountW -ne 6, K then usa+e -i esxi6vs UVcon-i+J-orceKW sleep # v%v6vs rhev6iport refar'h(feed)a'*+redhat$'om 15 www$redhat$'om "ppendi6 :- Referen'es +he 1ollo8ing are so.r*es .se/ 1or re1eren*e /.ring the 8riting o1 this 6a6er2 #$ :eplo.ing Red Hat Enterprise Virtualization(RHEV) for Ser,ers htt6sBBinF.iries2re/hat2*o0BgoBre/hatBrhev-1or-servers &$ Red Hat Enterprise Virtualization 3$% "dministration >uide htt6BB/o*s2re/hat2*o0B/o*sBen- USBRe/N3atN5nter6riseNVirt.aliEationB%20Bht0lBA/0inistrationN=.i/eBin/e'2ht0l 3$ Red Hat Enterprise Virtualization 3$% RES9 "82 >uide htt6BB/o*s2re/hat2*o0B/o*sBen- USBRe/N3atN5nter6riseNVirt.aliEationB%20Bht0lBR5S+NAP9N=.i/eBin/e'2ht0l 0$ Red Hat Enterprise ;inu6 1 Se'urit. >uide htt6BB/o*s2re/hat2*o0B/o*sBen-USBRe/N3atN5nter6riseN-in.'B6Bht0lBSe*.rityN=.i/eB 5$ Red Hat Enterprise Virtualization 8rodu't 8age htt6BB8882re/hat2*o0Bvirt.aliEationBrhevB 1$ Red Hat Enterprise ;inu6 1 V&V >uide htt6BB/o*s2re/hat2*o0B/o*sBen- USBRe/N3atN5nter6riseN-in.'B6Bht0lBV2VN=.i/eBin/e'2ht0l 3$ RHEV 3$% =a'*up ? Re'o,er. using "'ronis htt6sBBa**ess2re/hat2*o0B,no8le/geBre1ar*hB2012-rhev-%0->a*,.6-re*overy-.sing- a*ronis 4$ =ug 134&3& ( ,irt,&, 'on,ert windows guest with ,mware(tools from es6it will show the ,mware(tools error msg htt6sBB>.gEilla2re/hat2*o0Bsho8N>.g2*giQi/R6782%2 www$redhat$'om 3% refar'h(feed)a'*+redhat$'om "ppendi6 E- Re,ision Histor. Revision 120 :on/ay V.ne 184 2012 Vohn 3err 9nitial Release refar'h(feed)a'*+redhat$'om 3# www$redhat$'om