Project

General

Profile

The ungleich VM console » History » Version 5

Jin-Guk Kwon, 03/03/2020 09:43 AM

1 1 Jin-Guk Kwon
h1. The ungleich VM console
2
3
{{toc}}
4
5
h2. 1. System Architecture
6
7
This service supports  accessing console of your VM through guacamole service.
8
And To log-in VM console web needs datacenterlight.ch account. User's accounts are syncronized with LDAP.
9
10 5 Jin-Guk Kwon
!vnc_arch.png!
11 1 Jin-Guk Kwon
12
h2. 2. Set guacamole server
13
14
- run cdist
15
16
<pre>
17
cd ~/.cdist; git pull; cdist config -bj7 -p9 -vv desktop.ungleich.ch
18
</pre>
19
20 3 Jin-Guk Kwon
- in manifest for centos
21 1 Jin-Guk Kwon
22
<pre>
23
……
24
desktop.ungleich.ch)
25
        __guacamole_centos  --ldap-hostname 'ldap server url' \
26 3 Jin-Guk Kwon
          --ldap-port '636' \
27
          --ldap-encryption-method 'ssl' \
28
          --ldap-user-base-dn 'ou=XXX,dc=ungleich,dc=ch' \
29
          --ldap-search-bind-password ‘refer to pass' \
30
          --ldap-search-bind-dn 'cn=XXXXX,dc=ungleich,dc=ch' \
31
          --ldap-username-attribute 'uid' \
32
          --postgresql-hostname 'localhost' \
33
          --postgresql-username 'USER name' \
34
          --postgresql-database 'DB-name' \
35
          --postgresql-port     'XXXX' \
36
          --postgresql-password 'password' \
37
          --TOTP \
38
          --guacd-db 'postgresql'
39
</pre>
40
41
- in manifest for alpine (only support postgresql)
42
43
<pre>
44
……
45
desktop.ungleich.ch)
46
        _ungleich_vnc_console  --ldap-hostname 'ldap server url' \
47 1 Jin-Guk Kwon
          --ldap-port '636' \
48
          --ldap-encryption-method 'ssl' \
49
          --ldap-user-base-dn 'ou=XXX,dc=ungleich,dc=ch' \
50
          --ldap-search-bind-password ‘refer to pass' \
51
          --ldap-search-bind-dn 'cn=XXXXX,dc=ungleich,dc=ch' \
52
          --ldap-username-attribute 'uid' \
53
          --postgresql-hostname 'localhost' \
54
          --postgresql-username 'USER name' \
55
          --postgresql-database 'DB-name' \
56
          --postgresql-port     'XXXX' \
57
          --postgresql-password 'password' \
58
          --TOTP \
59
          --guacd-db 'postgresql'
60
</pre>
61
62
h2. 3. Create VNC connection for VM 
63
64 4 Jin-Guk Kwon
!cre_conn.png!
65 1 Jin-Guk Kwon
66 4 Jin-Guk Kwon
h3. 1) git clone ungleich-tool(vnc_console_connection, it has cloned by __ungleich_vnc_console cdist)
67 1 Jin-Guk Kwon
68 4 Jin-Guk Kwon
h3. 2) set vnc connection automatically on vnc_console server
69 1 Jin-Guk Kwon
70 4 Jin-Guk Kwon
h4. (1) vnc connection python
71 1 Jin-Guk Kwon
72 4 Jin-Guk Kwon
- ldap_list.py : get user list from ldap server
73
- db_export.py : update postgresql database with vnc connection info
74
- get_info.py : create vnc_connecion info
75
- config.py : config parameter
76 1 Jin-Guk Kwon
77
h4. (2) create crontab
78
79
<pre>
80
crontab -e
81
</pre>
82
83
<pre>
84 4 Jin-Guk Kwon
*/5 * * * * python3 /opt/ungleich-tools/vnc_console_connection/get_info.py # __cron/console_connection
85 1 Jin-Guk Kwon
</pre>
86
87
h2. 4. Monitoring VNC console
88
89
- We are monitoring VNC console with prometheus.
90
- run cdist __dcl_monitoring_server(update prometheus.yml)
91
92 4 Jin-Guk Kwon
h2. %{color:blue}※User VM information is synchronized with the VM console every 5 minute. If you create VM right now, you can access VM console after 5 minutes.(vnc connection script takes about in 15 seconds.)%