Mercurial > hg > Members > atton > seminar_slides

annotate slides/20150915/slide.md @ 112:57f1f2d9e852

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Add akatsuki slide
author Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
date Tue, 15 Sep 2015 16:34:16 +0900
parents
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
112
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
1 title: 次期システムWebコンソール akatsuki
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
2 author: Yasutaka Higa
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
3 profile:
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
4 lang: Japanese
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
5
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
6
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
7 # 次期システムWebコンソール akatsuki
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
8 * 学生が適切な権限内でシステムを利用するのを支援する
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
9 * 学科無線/有線の利用
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
10 * オンプレサーバの VM を自由に使う
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
11 * Edy を用いた電子錠を利用
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
12 * 紙の申請を無くし、ブラウザのみで学科システムを利用する
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
13 * システム管理チームの一部業務を自動化する
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
14
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
15 # 具体的に akatsuki が行なうことの目標
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
16 * 有線はMacアドレスを申請すると DHCP で自動でIPが振られるように
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
17 * VM 作成、起動、DHCPでのIP配布、プライベートでのDNS解決ができるように
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
18 * LDAP でアカウント情報を管理し、各基幹サーバや無線のアカウント情報を統一
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
19 * DNS のレコードを管理する(管理者向け)
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
20 * LDAP のアカウントを管理する(管理者向け)
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
21
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
22 # akatsuki の具体的な構成
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
23 * Web Application: Ruby on Rails (2.2.3 + 4.2.4)
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
24 * Web Server: apache + Passenger
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
25 * DataBase: PostgreSQL (pg)
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
26 * LDAP : OpenLDAP (activeldap)
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
27 * DNS : bind-sdb
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
28 * DHCP, Radius: FreeRadius
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
29 * VM : KVM + libvirt (fog-libvirt)
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
30
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
31 # 何故 Rails なのか
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
32 * フレームワークによるデフォルトのセキュリティ
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
33 * CSRF とか。 前回の host-regist は pure PHP
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
34 * テストフレームワークの RSpec を利用したテスト
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
35 * 77 tests passed.
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
36 * CLI API も提供可能
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
37 * 個人の趣味
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
38
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
39 # 学科無線
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
40 * Radiusd による無線の認証
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
41 * LDAP の objectClass: sambaSamAccount を利用した MSchap v2 認証とか
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
42
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
43 # 学科有線
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
44 * 今回は FreeRADIUS の dhcp module を使用
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
45 * 前回の host-regist は dhcpd + omshell
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
46 * dhcpd.relases のリアルタイム書き換えを omshell で
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
47 * DB と別にファイルが存在しているのでズレる可能性があった
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
48 * 今回は Rails の DB を radiusd が見ているのでズレは無い
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
49
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
50 # VM貸出
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
51 * KVM on gfs2 でVMを提供
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
52 * libvirt を利用してVMを作成
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
53 * Storage pool を設定することで libvirt からストレージに新規VMを作成可能
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
54 * なのでホストのシェルなどは叩いていない
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
55 * gem は fog-libvirt を利用
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
56 * 前回は VMWare の client を make + install していたが今回は livbirt があればOK
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
57
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
58 # 学科システム移行時の小話
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
59 * 内部ネットワークはプライベート化, UTM を使用
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
60 * 構成はブレード16台から1Uサーバ4台へ
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
61 * CPU: 12 * 16 = 192 -> 72(36?) * 4 = 288(144?)Core
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
62 * Memory 128GB * 16 = 2TB -> 756GB * 4 = 3TB
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
63 * VM 用高速ストレージ
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
64 FC 20? TB -> gfs2 25TB
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
65 * 大容量ストレージ
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
66 vmfs 4TB? -> nfs 500TB?
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
67 * ちなみにIPはシステム移行時点で984件ほど申請されてました
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
68
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
69 # gfs2の悲劇
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
70 * Dell の 10G Switch をスタックして利用していた
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
71 * 一瞬スイッチがハング+gfs2のノードが相互通信不可
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
72 * gfs2 が反応しなくなって上にあった基幹群は一部破損してブートせず
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
73 * Dell に連絡するとファームウェアのバグとのこと
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
74 * 回収+検証待ち……
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
75 * なので今は Cisco のスイッチに1G で繋いで凌いでます
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
76 * VM変換+貸出は遅延中……
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
77
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
78 # radiusd の SEGV
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
79 * 無線認証と有線のDHCPをradiusdでやるように
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
80 * DBを見るのDHCPの齟齬が無くなった
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
81 * が、逆に単一障害点に……
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
82 * なぜか SEGV/ABRT で無言で落ちることが……
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
83 * 酷い時は5分持たない
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
84 * 負荷が原因?
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
85 * ユーザが少ないであろうシステム移行中でも落ちた
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
86 * ユーザがいる平日でも捌く時は捌く
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
87
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
88 # 細かい確認
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
89 * 先生の無線
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
90 * たぶん繋がらない?
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
91 * 申請システムの問題点
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
92 * 詳細ください……
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
93 * Github/Kindle のダウンロードが遅い
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
94 * 詳細ください
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
95
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
96 # akatsuki とは
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
97 * Asato
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
98 * Kakazu, Kokubo
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
99 * Atton
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
100 * Tanaka, Teruya
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
101 * Shota, Sawasaki
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
102 * Ugo(Yugo)
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
103 * Kentaro, Kinoshita
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
104 * Ikehara, (Iha|Innparusu)?
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
105
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
106 * 趣味?
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
107
57f1f2d9e852 Add akatsuki slide
Yasutaka Higa <e115763@ie.u-ryukyu.ac.jp>
parents:
diff changeset
108 <!-- vim: set filetype=markdown.slide: -->