Difference between revisions of "Installation on Debian/old"
(Moved the iptables howto onto debian wiki. This page is not the right place for it, and it is good to know that there is more than one way to skin a cat.) |
(fixed the link) |
||
Line 205: | Line 205: | ||
to create a first container and do some | to create a first container and do some | ||
[[basic operations in OpenVZ environment]]. Read the [[download:doc/OpenVZ-Users-Guide.pdf]], browse this wiki. | [[basic operations in OpenVZ environment]]. Read the [[download:doc/OpenVZ-Users-Guide.pdf]], browse this wiki. | ||
− | It may be a good idea to | + | It may be a good idea to [http://wiki.debian.org/DebianFirewall secure your container], if it is connected to the internet. |
[[Category: HOWTO]] | [[Category: HOWTO]] | ||
[[Category: Debian]] | [[Category: Debian]] | ||
[[Category: Installation]] | [[Category: Installation]] |
Revision as of 19:09, 15 October 2008
OpenVZ consists of a kernel, user-level tools, and container templates.
This guide tells how to install the kernel and the tools on Debian stable.
Contents
Requirements
Filesystems
It is recommended to use a separate partition for container private
directories (by default /var/lib/vz/private/<CTID>
). The reason why you should do so is that if you wish to use OpenVZ per-container disk quota, you won't be able to use usual Linux disk quotas on the same partition. Bear in mind that per-container quota in this context includes not only pure per-container quota but also usual Linux disk quota used in container, not on HN.
At least try to avoid using root partition for containers because the root user of container will be able to overcome the 5% disk space barrier in some situations. If the HN root partition is completely filled, it will break the system.
OpenVZ per-container disk quota is supported only for ext2/ext3 filesystems so use one of these filesystems (ext3 is recommended) if you need per-container disk quota.
Repository setup
At the moment two different repositories are online at http://download.openvz.org:
- by Ola Lundqvist <opal@debian.org>
- (OpenVZ kernels only)
- apt-uri http://download.openvz.org/debian
- by Thorsten Schifferdecker <tsd@debian.systs.org>
- apt-uri http://download.openvz.org/debian-systs
- (Mirror of OpenVZ Repository from http://debian.systs.org/)
Note: The next steps use the repository at http://download.openvz.org/debian-systs; the actual OpenVZ Tools for Debian exist only as unstable builds, see http://packages.debian.org/vzctl |
Note: By default, on Ubuntu systems root tasks are executed with sudo |
This can be achieved by the following commands, as root or as privileged "sudo" user
# echo -e "\ndeb http://download.openvz.org/debian-systs etch openvz" >> /etc/apt/sources.list # wget -q http://download.openvz.org/debian-systs/dso_archiv_signing_key.asc -O- | apt-key add - && apt-get update
There is even an lenny repository with kernel 2.6.24. Use it at your own risk!
# echo -e "\ndeb http://download.openvz.org/debian-systs lenny openvz" >> /etc/apt/sources.list # wget -q http://download.openvz.org/debian-systs/dso_archiv_signing_key.asc -O- | apt-key add - && apt-get update
Kernel installation
Note: In case you want to recompile the OpenVZ kernel yourself on Debian, see Compiling the OpenVZ kernel (the Debian way). |
First, you need to choose what kernel you want to install.
Kernel | Description | Hardware | Debian Architecture |
---|---|---|---|
ovzkernel-2.6.18 | uniprocessor | up to 4GB of RAM | i386 and amd64 |
ovzkernel-2.6.18-smp | symmetric multiprocessor | up to 4 GB of RAM | i386 and amd64 |
ovzkernel-2.6.18-enterprise | SMP + PAE support + 4/4GB split | up to 64 GB of RAM | i386 only |
Kernel | Description | Hardware | Debian Architecture |
---|---|---|---|
fzakernel-2.6.18-686 | uni- and multiprocessor | up to 4GB of RAM | i386 |
fzakernel-2.6.18-686-bigmem | symmetric multiprocessor | up to 64 GB of RAM | i386 |
fzakernel-2.6.18-amd64 | uni- and multiprocessor | amd64 |
# apt-get install <kernel>
Configuring the bootloader
In case GRUB is used as the boot loader, it will be configured automatically, or execute update-grub; lines similar to these will be added to the /boot/grub/menu.lst file:
[...] title Debian GNU/Linux, kernel 2.6.18-ovz-028stab051.1-686 root (hd0,1) kernel /vmlinuz-2.6.18-ovz-028stab051.1-686 root=/dev/sda5 ro vga=791 initrd /initrd.img-2.6.18-ovz-028stab051.1-686 savedefault [...]
Note: per default on debian/ubuntu, a 2.6.22 kernel will boot before a 2.6.18, please check manually the grub boot order. See man update-grub for more details |
Rebooting into OpenVZ kernel
Now reboot the machine and choose the OpenVZ Linux Kernel on the boot loader menu. If the OpenVZ kernel has been booted successfully, proceed to installing the user-level tools for OpenVZ.
Installing the user-level tools
OpenVZ needs some user-level tools installed. Those are:
- vzctl
- A utility to control OpenVZ containers (create, destroy, start, stop, set parameters etc.)
- vzquota
- A utility to manage quotas for containers. Mostly used indirectly (by vzctl).
# [sudo] apt-get install vzctl vzquota
Configuring
sysctl
There are a number of kernel parameters that should be set for OpenVZ to work correctly. These parameters are stored in /etc/sysctl.conf file. Here is the relevant part of the file; please edit it accordingly.
Note: vzctl version from debian-systs, automate changing sysctl options for openvz |
[...] # On Hardware Node we generally need # packet forwarding enabled and proxy arp disabled net.ipv4.conf.default.forwarding=1 net.ipv4.conf.default.proxy_arp = 0 net.ipv4.ip_forward=1 # Enables source route verification net.ipv4.conf.all.rp_filter = 1 # Enables the magic-sysrq key kernel.sysrq = 1 # TCP Explict Congestion Notification #net.ipv4.tcp_ecn = 0 # we do not want all our interfaces to send redirects net.ipv4.conf.default.send_redirects = 1 net.ipv4.conf.all.send_redirects = 0 [...]
# [sudo] sysctl -p
Note: You can make a symlink from /var/lib/vz to /vz as backward
compatibility to OpenVZ as installed in other distributions (Debian vz root directory is /var/lib/vz to be FHS-compliant. |
# [sudo] ln -s /var/lib/vz /vz
OS templates
To install a container, you need OS template(s).
Precreated templates can be found here.
You can create your own templates, see Debian template creation, Ubuntu Gutsy template creation and Category: Templates.
Note: Setup your prefered standard OS Template : edit the /etc/vz/vz.conf |
# [sudo] apt-get install vzctl-ostmpl-debian
Additional User Tools
- vzprocps
- A set of utilities to provide system information (vzps and vztop)
- vzdump
- A utility to backup and restore container.
# [sudo] apt-get install vzprocps vzdump
Start it!
# [sudo] /etc/init.d/vz start
This does not make the vz system automatically start at boot time. For automatic start:
# [sudo] update-rc.d vz defaults 98
Use it!
After installing the OpenVZ kernel, user tools and a minimal OS template to create a first container and do some basic operations in OpenVZ environment. Read the download:doc/OpenVZ-Users-Guide.pdf, browse this wiki. It may be a good idea to secure your container, if it is connected to the internet.