Update tech_docs/lab/rhcsa_lab.md
This commit is contained in:
@@ -1,30 +1,43 @@
|
||||
# **Advanced Rocky Linux Lab Setup: A Complete Guide for Virtualization, Automation, and Networking**
|
||||
# **Complete Rocky Linux Lab Setup: Virtualization, Automation, and Networking**
|
||||
|
||||
This guide takes you from a minimal installation of Rocky Linux to a fully equipped, advanced lab environment. It includes virtualization, automation with Ansible, advanced networking, Python setup, and security configurations. By the end, your system will be ready to handle complex virtual machine labs, networking tasks, and resource monitoring.
|
||||
This guide provides a step-by-step process for setting up an advanced lab environment on Rocky Linux, including virtualization, automation, networking, security, and monitoring. It covers everything from system preparation to multi-VM setups using Vagrant and libvirt.
|
||||
|
||||
---
|
||||
|
||||
## **Step 1: System Update and Repository Configuration**
|
||||
Ensure your system is fully up to date and configure the necessary repositories for development tools and virtualization software.
|
||||
|
||||
```bash
|
||||
# Update the system
|
||||
sudo dnf update -y
|
||||
Start by updating your system and configuring necessary repositories.
|
||||
|
||||
# Enable CodeReady Builder (CRB) repository for development packages
|
||||
sudo dnf config-manager --set-enabled crb
|
||||
1. **Update the system**:
|
||||
```bash
|
||||
sudo dnf update -y
|
||||
```
|
||||
|
||||
# Add HashiCorp repository for Vagrant
|
||||
sudo dnf config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
|
||||
2. **Enable the CodeReady Builder (CRB) repository**:
|
||||
```bash
|
||||
sudo dnf config-manager --set-enabled crb
|
||||
```
|
||||
|
||||
# Refresh metadata cache
|
||||
sudo dnf makecache
|
||||
```
|
||||
3. **Add the HashiCorp repository for Vagrant**:
|
||||
```bash
|
||||
sudo dnf config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
|
||||
```
|
||||
|
||||
4. **Import the GPG key for security** (optional but recommended):
|
||||
```bash
|
||||
sudo rpm --import https://rpm.releases.hashicorp.com/gpg
|
||||
```
|
||||
|
||||
5. **Refresh the package cache**:
|
||||
```bash
|
||||
sudo dnf makecache
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## **Step 2: Install Required Tools in One Command**
|
||||
Install all essential tools in a single command, including virtualization (KVM and libvirt), development tools, Vagrant, Ansible, Python, and monitoring utilities.
|
||||
## **Step 2: Install Required Tools**
|
||||
|
||||
Install all necessary packages for virtualization, development, automation, and monitoring tools.
|
||||
|
||||
```bash
|
||||
sudo dnf install -y \
|
||||
@@ -48,53 +61,78 @@ sudo dnf install -y \
|
||||
iotop \
|
||||
iftop \
|
||||
firewalld \
|
||||
unzip
|
||||
unzip \
|
||||
kernel-devel \
|
||||
kernel-headers
|
||||
```
|
||||
|
||||
**Optional**: For a full development environment, install the complete "Development Tools" group:
|
||||
```bash
|
||||
sudo dnf groupinstall -y "Development Tools"
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## **Step 3: Enable and Start Necessary Services**
|
||||
Ensure that virtualization and firewall services are enabled and running, and set up your user for libvirt management.
|
||||
## **Step 3: Enable and Start Services**
|
||||
|
||||
```bash
|
||||
# Enable and start libvirt for virtualization
|
||||
sudo systemctl enable --now libvirtd
|
||||
Ensure the essential services for virtualization and security are running, and update your user permissions for VM management.
|
||||
|
||||
# Enable and start firewalld for network security
|
||||
sudo systemctl enable --now firewalld
|
||||
1. **Enable and start libvirt**:
|
||||
```bash
|
||||
sudo systemctl enable --now libvirtd
|
||||
```
|
||||
|
||||
# Add your user to the libvirt group to manage VMs without root privileges
|
||||
sudo usermod -aG libvirt $USER
|
||||
newgrp libvirt # Refresh group membership without logging out
|
||||
```
|
||||
2. **Enable and start firewalld**:
|
||||
```bash
|
||||
sudo systemctl enable --now firewalld
|
||||
```
|
||||
|
||||
3. **Add your user to the `libvirt` group**:
|
||||
```bash
|
||||
sudo usermod -aG libvirt $USER
|
||||
```
|
||||
|
||||
4. **Log out and log back in** or run the following command to apply group membership:
|
||||
```bash
|
||||
newgrp libvirt
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## **Step 4: Install Vagrant Plugins and Python Tools**
|
||||
Install the **vagrant-libvirt** plugin to enable VM management using libvirt, and ensure Python package management is ready.
|
||||
## **Step 4: Install Vagrant Plugins and Python Setup**
|
||||
|
||||
```bash
|
||||
# Install Vagrant libvirt plugin
|
||||
vagrant plugin install vagrant-libvirt
|
||||
Install the **vagrant-libvirt** plugin and ensure **Python** is fully set up.
|
||||
|
||||
# Ensure pip is ready for Python package management
|
||||
python3 -m pip install --upgrade pip
|
||||
```
|
||||
1. **Install the vagrant-libvirt plugin**:
|
||||
```bash
|
||||
vagrant plugin install vagrant-libvirt
|
||||
```
|
||||
|
||||
2. **Ensure pip is upgraded**:
|
||||
```bash
|
||||
python3 -m pip install --upgrade pip
|
||||
```
|
||||
|
||||
3. **Optional**: Use Python virtual environments to avoid affecting system-wide packages:
|
||||
```bash
|
||||
python3 -m venv ~/venv
|
||||
source ~/venv/bin/activate
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## **Step 5: Create and Run Virtual Machines**
|
||||
Set up and run multiple virtual machines using **Vagrant** and **libvirt**.
|
||||
|
||||
1. **Create a Vagrant project**:
|
||||
Now that everything is installed, set up and run multiple virtual machines using Vagrant.
|
||||
|
||||
1. **Create a Vagrant project directory and initialize**:
|
||||
```bash
|
||||
mkdir ~/vagrant-lab
|
||||
cd ~/vagrant-lab
|
||||
vagrant init generic/rocky9
|
||||
```
|
||||
|
||||
2. **Modify your Vagrantfile** to set up multiple VMs with different configurations:
|
||||
|
||||
2. **Modify the Vagrantfile** for a multi-VM setup (web and database servers):
|
||||
```ruby
|
||||
Vagrant.configure("2") do |config|
|
||||
config.vm.box = "generic/rocky9"
|
||||
@@ -105,7 +143,7 @@ Set up and run multiple virtual machines using **Vagrant** and **libvirt**.
|
||||
libvirt.memory = 2048
|
||||
libvirt.cpus = 2
|
||||
end
|
||||
web.vm.network "private_network", type: "dhcp"
|
||||
web.vm.network "private_network", ip: "192.168.56.10"
|
||||
web.vm.hostname = "webserver"
|
||||
end
|
||||
|
||||
@@ -115,7 +153,7 @@ Set up and run multiple virtual machines using **Vagrant** and **libvirt**.
|
||||
libvirt.memory = 4096
|
||||
libvirt.cpus = 2
|
||||
end
|
||||
db.vm.network "private_network", type: "dhcp"
|
||||
db.vm.network "private_network", ip: "192.168.56.11"
|
||||
db.vm.hostname = "dbserver"
|
||||
end
|
||||
end
|
||||
@@ -126,25 +164,38 @@ Set up and run multiple virtual machines using **Vagrant** and **libvirt**.
|
||||
vagrant up --provider=libvirt
|
||||
```
|
||||
|
||||
4. **SSH into the VMs**:
|
||||
```bash
|
||||
vagrant ssh web
|
||||
vagrant ssh db
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## **Step 6: Verify Virtualization and Networking**
|
||||
Check that the virtual machines are running properly and verify network configuration.
|
||||
|
||||
Ensure the virtual machines are running correctly and networked.
|
||||
|
||||
1. **List running virtual machines**:
|
||||
```bash
|
||||
sudo virsh list --all
|
||||
```
|
||||
|
||||
2. **Check network interfaces and bridge setup**:
|
||||
2. **Check network interfaces**:
|
||||
```bash
|
||||
ip a
|
||||
```
|
||||
|
||||
3. **Verify that the `virbr0` bridge is active**:
|
||||
```bash
|
||||
ip link show virbr0
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## **Step 7: Test Ansible and Python Setup**
|
||||
Ensure **Ansible** and **Python** are correctly installed and functional.
|
||||
|
||||
Verify that Ansible and Python are ready for automation tasks.
|
||||
|
||||
1. **Check Ansible version**:
|
||||
```bash
|
||||
@@ -157,10 +208,20 @@ Ensure **Ansible** and **Python** are correctly installed and functional.
|
||||
pip3 --version
|
||||
```
|
||||
|
||||
3. **Create an Ansible inventory file for the VMs**:
|
||||
```ini
|
||||
[webservers]
|
||||
webserver ansible_host=192.168.56.10 ansible_user=vagrant ansible_private_key_file=.vagrant/machines/web/libvirt/private_key
|
||||
|
||||
[dbservers]
|
||||
dbserver ansible_host=192.168.56.11 ansible_user=vagrant ansible_private_key_file=.vagrant/machines/db/libvirt/private_key
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## **Step 8: Configure Security**
|
||||
Set up firewall and SELinux to secure your environment.
|
||||
|
||||
Set up firewalld and SELinux to secure your environment.
|
||||
|
||||
1. **Allow web traffic on firewalld**:
|
||||
```bash
|
||||
@@ -175,31 +236,49 @@ Set up firewall and SELinux to secure your environment.
|
||||
|
||||
---
|
||||
|
||||
## **Final Notes**
|
||||
- **Monitoring Tools**: Use `htop`, `iotop`, and `iftop` to monitor CPU, disk, and network usage.
|
||||
- **Networking**: Advanced network configurations can be done using **bridge-utils**.
|
||||
- **Storage**: Use **LVM** inside your VMs to practice logical volume management.
|
||||
- **Automation**: Test further automation tasks using **Ansible** for system provisioning.
|
||||
## **Additional Suggestions**
|
||||
|
||||
- **Automate VM Provisioning**: Use Ansible playbooks to install services on the VMs. For example:
|
||||
```yaml
|
||||
---
|
||||
- hosts: webservers
|
||||
tasks:
|
||||
- name: Install Apache
|
||||
yum:
|
||||
name: httpd
|
||||
state: present
|
||||
- name: Start Apache
|
||||
service:
|
||||
name: httpd
|
||||
state: started
|
||||
enabled: true
|
||||
```
|
||||
|
||||
- **Configure Static IPs**: This is useful for consistent VM addresses.
|
||||
|
||||
- **Resource Monitoring**: Use `htop`, `iotop`, and `iftop` inside the VMs for CPU, disk, and network monitoring.
|
||||
|
||||
---
|
||||
|
||||
### **Summary of Key Commands**
|
||||
## **Summary of Key Commands**
|
||||
|
||||
```bash
|
||||
# System update, enabling repositories, and cache refresh
|
||||
# System update and repository configuration
|
||||
sudo dnf update -y
|
||||
sudo dnf config-manager --set-enabled crb
|
||||
sudo dnf config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
|
||||
sudo rpm --import https://rpm.releases.hashicorp.com/gpg
|
||||
sudo dnf makecache
|
||||
|
||||
# Install all necessary packages
|
||||
sudo dnf install -y qemu-kvm libvirt libvirt-daemon-driver-qemu libvirt-devel vagrant ruby-devel gcc ansible python3 python3-pip \
|
||||
bridge-utils net-tools wget curl vim git htop iotop iftop firewalld unzip
|
||||
# Install necessary packages
|
||||
sudo dnf install -y qemu-kvm libvirt libvirt-daemon-driver-qemu libvirt-devel vagrant ansible python3 python3-pip \
|
||||
bridge-utils net-tools wget curl vim git htop iotop iftop firewalld unzip kernel-devel kernel-headers
|
||||
|
||||
# Enable and start services
|
||||
sudo systemctl enable --now libvirtd
|
||||
sudo systemctl enable --now firewalld
|
||||
sudo usermod -aG libvirt $USER
|
||||
newgrp libvirt
|
||||
# Log out and log back in or use `newgrp libvirt`
|
||||
|
||||
# Install vagrant-libvirt plugin
|
||||
vagrant plugin install vagrant-libvirt
|
||||
@@ -208,8 +287,4 @@ vagrant plugin install vagrant-libvirt
|
||||
python3 --version
|
||||
pip3 --version
|
||||
ansible --version
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
This guide provides a fully detailed and streamlined approach for setting up an advanced lab environment on Rocky Linux, combining all necessary tools, services, and configurations into a coherent, efficient workflow. Let me know if any further adjustments are needed!
|
||||
```
|
||||
Reference in New Issue
Block a user