Learning Proxmox VE - Rik Goldman - E-Book

Learning Proxmox VE E-Book

Rik Goldman

0,0
39,59 €

-100%
Sammeln Sie Punkte in unserem Gutscheinprogramm und kaufen Sie E-Books und Hörbücher mit bis zu 100% Rabatt.

Mehr erfahren.
Beschreibung

Unleash the power of Proxmox VE by setting up a dedicated virtual environment to serve both containers and virtual machines

About This Book

  • Create virtual machines and containers from the comfort of your workstation using Proxmox VE's web-based management interface
  • Maximize performance, security, and the quality of virtual services by tailoring container and virtual machine configurations based on established best practices
  • Put theory to practice by deploying virtual servers that promise portability, modularity, flexibility, security, and quality of service at any scale

Who This Book Is For

This book is intended for server and system administrators and engineers who are eager to take advantage of the potential of virtual machines and containers to manage servers more efficiently and make the best use of resources, from energy consumption to hardware utilization and physical real estate

What You Will Learn

  • Install and configure Proxmox VE
  • Create new virtual machines and containers
  • Import container templates and virtual appliances
  • Optimize virtual machine performance for common use cases
  • Apply the latest security patches to a Proxmox VE host
  • Contrast PVE virtual machines and containers to recognize their respective use cases
  • Secure virtual machines and containers
  • Assess the benefits of virtualization on budgets, server real estate, maintenance, and management time

In Detail

Proxmox VE 4.1 provides an open source, enterprise virtualization platform on which to host virtual servers as either virtual machines or containers.

This book will support your practice of the requisite skills to successfully create, tailor, and deploy virtual machines and containers with Proxmox VE 4.1. Following a survey of PVE's features and characteristics, this book will contrast containers with virtual machines and establish cases for both. It walks through the installation of Proxmox VE, explores the creation of containers and virtual machines, and suggests best practices for virtual disk creation, network configuration, and Proxmox VE host and guest security. Throughout the book, you will navigate the Proxmox VE 4.1 web interface and explore options for command-line management

Style and approach

This book is a practical exploration of the different processes and procedures, which are essential in beginning your journey to fluent creation and optimization of effective containers and virtual machines.

Sie lesen das E-Book in den Legimi-Apps auf:

Android
iOS
von Legimi
zertifizierten E-Readern

Seitenzahl: 173

Veröffentlichungsjahr: 2016

Bewertungen
0,0
0
0
0
0
0
Mehr Informationen
Mehr Informationen
Legimi prüft nicht, ob Rezensionen von Nutzern stammen, die den betreffenden Titel tatsächlich gekauft oder gelesen/gehört haben. Wir entfernen aber gefälschte Rezensionen.



Table of Contents

Learning Proxmox VE
Credits
About the Author
Acknowledgments
About the Reviewer
www.PacktPub.com
eBooks, discount offers, and more
Why subscribe?
Free access for Packt account holders
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the example code
Downloading the color images of this book 
Errata
Piracy
Questions
1. Proxmox VE Fundamentals
Proxmox VE in brief
Virtualization with Proxmox VE
KVM
QEMU
OS Virtualization with Proxmox VE
Summary
2. Installing Proxmox VE
Hardware requirements and recommendations for Proxmox VE
Downloading Proxmox VE
Verifying the downloaded image
Ensuring hardware virtualization extensions are installed
Enabling hardware virtualization extensions
Preparing for the Proxmox VE Installer
Installing Proxmox VE
Upgrading PVE from the command line
Disabling the enterprise repository
Enabling a non-subscriber repository
Updating and upgrading Proxmox VE
Summary
3. Creating Containers
Understanding the container advantage
Proxmox VE and the case for LXC
Container templates
Downloading templates
Logging in to Proxmox VE's web interface
Browsing available container templates
Downloading a container
From template to container
Starting and stopping containers
Changing container states with the command line
Accessing a container
Summary
4. Creating Virtual Machines
Distinguishing features of virtual machines
Scenarios for system virtualization
Creating a virtual machine
Installation media
Uploading an ISO file to local storage on PVE
Preparing a virtual machine
Anticipating the configuration tabs
General
OS
CD/DVD
Hard Disk
CPU
Memory
Network
Confirm
Controlling the state of a virtual machine
Controlling a VM from the PVE command line
Practicing the creation of virtual machines
Virtualizing Windows Server 2012r2 with Proxmox VE
Configuring and creating the virtual machine
Starting the VM and installing Windows Server
Creating a VM for Fedora 23 Server
Command line virtual machine creation
Summary
5. Working with Virtual Disks
Understanding virtual disks
Coming to terms
Understanding virtual disk configuration
Choosing a virtual disk format
QCOW2
RAW
VMDK
Choosing a bus
Understanding cache options
Learning more
Summary
6. Networking with Proxmox VE
Proxmox VE network model
Bridged configuration
NAT configuration
Routed configuration
VLAN support
NIC bonding
Network configuration for virtual servers
Providing basic connectivity
Of VMs and vNICs
Bridge configuration
Using NAT configuration
Summary
7. Securing Proxmox VE
Security benefits of virtualization
Attack surface reduction
Isolation
Availability of prior states
Hardware abstraction
Segmentation
Encapsulation and portability
Physical security
Fine privilege control
PVE firewall features
Aggravated vulnerabilities
Denial of service attacks
VM escape and hyper jumping
Virtualization sprawl
At war with complexity
Taking action
Protecting the boot process
Locking down the bootloader
Locking down BIOS/UEFI
Hardening the OS and hypervisor
Prohibit remote access to the hypervisor
Harden SSH
Disabling root account access via SSH
Preventing brute-force attacks against SSH
Relying on key-based authentication
Managing patches
Enterprise subscriptions
Summary

Learning Proxmox VE

Learning Proxmox VE

Copyright © 2016 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: March 2016

Production reference: 1290316

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-78398-178-6

www.packtpub.com

Credits

Author

Rik Goldman

Project Coordinator

Bijal Patel

Reviewer

Ludovic L’HOIR

Proofreader

Safis Editing

Acquisition Editor

Sonali Vernekar

Indexer

Mariammal Chettiyar

Content Development Editor

Anish Dhurat

Graphics

Kirk D'Penha

Disha Haria

Technical Editor

Ryan Kochery

Production Coordinator

Arvindkumar Gupta

Copy Editor

Merilyn Pereira

About the Author

Rik Goldman had 18 years of professional IT experience and 17 years of teaching experience when he became the director of technology and a teacher of advanced computing at Chelsea School in 2012.

Throughout his 10 years at the university, he concentrated on literary computing, new media, humanities computing, and virtuality. At first, Rik supported his studies by developing institutional websites and database applications; eventually, however, he became the administrator of Solaris and Irix servers for West Virginia University's Center for Literary Computing, a lab committed to the study of electronic texts, virtuality, and digital composition and rhetoric.

In the classroom, Rik's commitment to authentic teaching and learning as well as his advocacy of social justice and equity have placed him at the vanguard of technology education. Working with and learning from his students, he has overseen projects that have provided real solutions for school infrastructure, data management, and programming. His many accomplishments reveal an educator who strives to provide authentic opportunities for learning and engagement, but his true legacy lies in what he has engendered in his students: a desire for knowledge, a critical urge, and an analyst's zeal for complex abstractions. Through this work with students and his responsibilities as a systems administrator, Rik has enjoyed a productive preoccupation with virtualization technologies and their impact on popular culture.

Since his full-time adoption of Red Hat 5 at home, he has been committed to GNU/Linux and the underlying philosophies that have made it so successful. Consequently, he is a passionate advocate of open source and free software. Together with his students, he has contributed to the success of a myriad open source endeavors by developing documentation, writing code, and mentoring communities of young developers from around the world.

In his free time, Rik enjoys reading literature, exploring critical theory, listening to records, and traveling to concerts with his family.

Acknowledgments

This book could not have been realized without the kind patience, understanding, and encouragement of Sabre Goldman and our remarkable son, Ender Ripley. Whatever fantastic adventures I dream of, it's through Sabre's unflagging support and enduring patience that those impossible dreams are realized.

The importance that my mother places on the power of words, text, and narrative continues to influence my life's trajectory and always propels me toward opportunities to find the right word. Without her, I wouldn't have had the interest or skills to pursue this opportunity.

Thanks to the Chelsea School community, particularly my colleagues and students, without whom there's no me. I am lucky to be a part of a community that never fails to inspire me to learn, develop, share, and improve.

My sincerest thanks go out to Tim Bielawa, the author of The Linux Sysadmin’s Guide to Virtual Disks. By posting a public draft of his work in progress, he did this project significant good. Cheers to Tim and so many others who contribute documentation of open source projects.

About the Reviewer

Ludovic L’HOIR is 42 years old and has worked in the IT sector for the past 15 years. He first studied Greek Archeology then after his diploma he decided to change his life and left France to live in Australia for about 2 years. He started his IT career at Reuters SA in 2001 in Geneva as a Network Controller Specialist. In 2005, he founded a company that was the first open source cybercafe in France. His career continued as an IT systems administrator at the IT lab of CNRS. Ludovic also worked at Concorde Logistics (OBS) as a Networks and Systems Manager. After this rich experience, he joined MICHELIN (Tyredating) in September 2010 as CTO. Currently, he is the IT Manager of S4M (Success for Mobile), which is a mobile-native ad tech company transforming ads into genuine personalized content for each individual user.

Ludovic is passionate about childhood development. He enjoys writing books for young children (http://ludobooks.fr) and also participating in the doudoulinux project (a Linux distribution especially designed for children to make computer usage as easy and pleasant as possible for them http://doudoulinux.org). In his spare time, Ludovic likes cooking food from different cultures. He lives in the South of France with his wife and 9 year old daughter.

www.PacktPub.com

For support files and downloads related to your book, please visit www.PacktPub.com.

eBooks, discount offers, and more

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at <[email protected]> for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

https://www2.packtpub.com/books/subscription/packtlib

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can search, access, and read Packt's entire library of books.

Why subscribe?

Fully searchable across every book published by PacktCopy and paste, print, and bookmark contentOn demand and accessible via a web browser

Free access for Packt account holders

Get notified! Find out when new books are published by following @PacktEnterprise on Twitter or the Packt Enterprise Facebook page.

Preface

 

"There is a double spooking the world, the double of abstraction. The fortunes of states and armies, companies and communities depend on it. All contending classes - the landlords and farmers, the workers and capitalists - revere yet fear the relentless abstraction of the world on which their fortunes yet depend. All the classes but one. The hacker class."

"The virtual is the true domain of the hacker. It is from the virtual that the hacker produces ever-new expressions of the actual. To the hacker, what is represented as being real is always partial, limited, perhaps even false. To the hacker there is always a surplus of possibility expressed in what is actual, the surplus of the virtual. This is the inexhaustible domain of what is real without being actual, what is not but which may be. To hack is to release the virtual into the actual, to express the difference of the real."

  --McKenzie Wark, A Hacker Manifesto

Not so many years ago, it would've taken three computers to author this book efficiently on the go. Virtualization, however, has made it possible to write without the obscene hassle of dragging about so much baggage. Virtualization has reduced labor and energy expenditure and maximized productivity and discretionary time during the writing and production of this book.

Abstraction liberates us from material constraints, leaving in their place the privilege of nostalgia—tractor-fed edge strips, darkroom chemicals, printing presses and type-set trays, overflowing money bags with dollar signs, and of course, cramped server rooms.

Through server virtualization, the abstraction of computing resources from physical systems has overturned data centers and radically upset the traditional and repetitive routines of system engineers and administrators in favor of efficiency, conservation, lowered expenditure, secure systems, and the simple deployment of automation to complete repetitive tasks.

Proxmox VE has been a pioneering agent in this rapid revolution since the 2008 release of version 1.0—the first hypervisor to support both virtual machines and containers.

With version 4.2 in the works, and the industry's fascination finally fixed on the realization of a container revolution, Proxmox VE still provides an open source, enterprise virtualization solution with premium support that enjoys tremendous international popularity—even as competing brands have scrambled to roll out container solutions just in time.

This book is packed with introductory concepts and best practice techniques for experienced Linux users eager to take advantage of bleeding edge virtualization strategies and practices with Proxmox VE.

This book explores the benefits of two of these complementary virtualization technologies, containers and virtual machines, so you'll be forearmed to make informed and deliberated choices regarding the best paths for virtualizing your data center.

What this book covers

Chapter 1, Proxmox VE Fundamentals, outlines Proxmox VE's features and distinguishing characteristics and briefly compares and contrasts virtual machines and containers.

Chapter 2, Installing Proxmox VE, goes through the Proxmox VE installation process after covering Proxmox VE's hardware requirements and discussing minimal and optimal hardware specifications.

Chapter 3, Creating Containers, starts with a primer on containers and their uses before providing a walkthrough of the container creation processes, including choosing and downloading an OS or virtual appliance template.

Chapter 4, Creating Virtual Machines, first elaborates on the functional differences between virtual machines and suggests prospective use cases and the inherent benefits and drawbacks of full virtualization. It then walks through the process of creating and configuring virtual machines intended for Microsoft Windows Server and Fedora Server.

Chapter 5, Working with Virtual Disks, compares and contrasts virtual hard disk options, including disk image types, virtual bus/interfaces, and cache types.

Chapter 6, Networking with Proxmox VE, contrasts common virtual Ethernet adaptor options provided by Proxmox VE and works to articulate use cases for each.

Chapter 7, Securing Proxmox VE, enumerates strategies for mitigating security threats to virtualized datacenters in general, and Proxmox VE hosts and guests in particular.

What you need for this book

Working with the illustrative examples in this book will require a 64-bit machine to host Proxmox 4.1 that meets at least the minimum recommended specs for evaluation:

CPU: 64 bit (Intel EMT64 or AMD64)Intel VT/AMD-V capable CPU/Mainboard (for KVM Full Virtualization support)A minimum of 1 GB RAMHard driveOne NIC compatible with RedHat Enterprise Linux

This is not an ideal rig—more powerful specs can be found in Chapter 2, Installing Proxmox VE.

In addition to a machine to host Proxmox VE, broadband internet access is assumed, as is a remote workstation on the same LAN as the Proxmox VE host, a modern, JavaScript-enabled web browser, and installed ssh and sftp clients.

Who this book is for

This book is intended for server and system administrators and engineers who are eager to take advantage of the potential of virtual machines and containers to manage servers more efficiently and make the best use of resources, from energy consumption to hardware utilization to physical real estate.

Conventions

In this book, you will find a number of text styles that distinguish between different kinds of information. Here are some examples of these styles and an explanation of their meaning.

Code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles are shown as follows: "We can use the qm create command to create a Proxmox VE virtual machine."

Any command-line input or output is written as follows:

-ostype win8 \ -sockets 1

New terms and important words are shown in bold. Words that you see on the screen, for example, in menus or dialog boxes, appear in the text like this: "Proceed with the installation by pressing i or navigating to Install Fedora 23."

Note

Warnings or important notes appear in a box like this.

Tip

Tips and tricks appear like this.

Reader feedback

Feedback from our readers is always welcome. Let us know what you think about this book—what you liked or disliked. Reader feedback is important for us as it helps us develop titles that you will really get the most out of.

To send us general feedback, simply e-mail <[email protected]>, and mention the book's title in the subject of your message.

If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, see our author guide at www.packtpub.com/authors.

Customer support

Now that you are the proud owner of a Packt book, we have a number of things to help you to get the most from your purchase.

Downloading the example code

You can download the example code files for this book from your account at http://www.packtpub.com. If you purchased this book elsewhere, you can visit http://www.packtpub.com/support and register to have the files e-mailed directly to you.

You can download the code files by following these steps:

Log in or register to our website using your e-mail address and password.Hover the mouse pointer on the SUPPORT tab at the top.Click on Code Downloads & Errata.Enter the name of the book in the Search box.Select the book for which you're looking to download the code files.Choose from the drop-down menu where you purchased this book from.Click on Code Download.

Once the file is downloaded, please make sure that you unzip or extract the folder using the latest version of:

WinRAR / 7-Zip for WindowsZipeg / iZip / UnRarX for Mac7-Zip / PeaZip for Linux

Downloading the color images of this book 

We also provide you with a PDF file that has color images of the screenshots/diagrams used in this book. The color images will help you better understand the changes in the output. You can download this file from http://www.packtpub.com/sites/default/files/downloads/LearningProxmoxVE_ColorImages.pdf.

Errata

Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you find a mistake in one of our books—maybe a mistake in the text or the code—we would be grateful if you could report this to us. By doing so, you can save other readers from frustration and help us improve subsequent versions of this book. If you find any errata, please report them by visiting http://www.packtpub.com/submit-errata, selecting your book, clicking on the Errata Submission Form link, and entering the details of your errata. Once your errata are verified, your submission will be accepted and the errata will be uploaded to our website or added to any list of existing errata under the Errata section of that title.

To view the previously submitted errata, go to https://www.packtpub.com/books/content/support and enter the name of the book in the search field. The required information will appear under the Errata section.

Piracy

Piracy of copyrighted material on the Internet is an ongoing problem across all media. At Packt, we take the protection of our copyright and licenses very seriously. If you come across any illegal copies of our works in any form on the Internet, please provide us with the location address or website name immediately so that we can pursue a remedy.

Please contact us at <[email protected]> with a link to the suspected pirated material.

We appreciate your help in protecting our authors and our ability to bring you valuable content.

Questions

If you have a problem with any aspect of this book, you can contact us at <[email protected]>, and we will do our best to address the problem.

Chapter 1. Proxmox VE Fundamentals

Proxmox Virtual Environment (PVE) is a mature, complete, well-supported, enterprise-class virtualization environment for servers. It is an open source tool—based in the Debian GNU/Linux distribution—that manages containers, virtual machines, storage, virtualized networks, and high-availability clustering through a well-designed, web-based interface or via the command-line interface.

Note

Developers provided the first stable release of Proxmox VE in 2008; four years and eight point releases later, ZDNet's Ken Hess boldly, but quite sensibly, declared Proxmox VE as Proxmox: The Ultimate Hypervisor (http://www.zdnet.com/article/proxmox-the-ultimate-hypervisor/).Four years later, PVE is on version 4.1, in use by at least 90,000 hosts, and more than 500 commercial customers in 140 countries; the web-based administrative interface itself is translated into 19 languages.

This chapter explores the fundamental technologies underlying PVE's hypervisor features: LXC, KVM, and QEMU. To do so, we will develop a working understanding of virtual machines, containers, and their appropriate use.

We will cover the following topics in this chapter:

Proxmox VE in briefVirtualization and containerization with PVEProxmox VE virtual machines, KVM, and QEMUContainerization with PVE and LXC

Proxmox VE in brief

With Proxmox VE, Proxmox Server Solutions GmbH (https://www.proxmox.com/en/about) provides us with an enterprise-ready, open source type 2 Hypervisor. Later, you'll find some of the features that make Proxmox VE such a strong enterprise candidate.

The license for Proxmox VE is very deliberately the GNU Affero General Public License (V3) (https://www.gnu.org/licenses/agpl-3.0.html). From among the many free and open source compatible licenses available, this is a significant choice because it is "specifically designed to ensure cooperation with the community in the case of network server software."PVE is primarily administered from an integrated web interface, from the command line locally, or via SSH. Consequently, there is no need for a separate management server and the associated expenditure. In this way, Proxmox VE significantly contrasts with alternative enterprise virtualization solutions by vendors such as VMware.