端端舝

Solaris Zone午Puppet﹜Serverspec匹奶件白仿CI - OSC 2015 Tokyo/Fall Powered by Rabbit 2.1.8
Solaris Zone午
Puppet﹜
Serverspec匹
奶件白仿CI
OSC 2015 Tokyo/Fall
午卅井

赻撩畿賡
靡ゴ: 午卅井孔心夫今?
ID: @ftnk?
奶件白仿巨件斥瓦失
翋卞 Solaris (151a �井日)
仇及 PC 手 Solaris?
?
?
垀扽
噙𠈹及 Solaris 丟奶件及頗扦?
゜掛 OpenSolaris 交奈扒弘伙奈皿?
?

゜掛OpenSolaris
交奈扒奈弘伙奈皿
http://www.opensolaris.gr.jp/?
#osoljp?
魂�
辭�頗ㄗ掂𤩸頗ㄚ汐ㄘ
http://connpass.com/series/322/?
?
由永弗奈斥釬傖
https://osdn.jp/projects/jposug/?
?
?

agenda
Solaris 匹手奶件白仿 CI 仄
凶中
1.
Solaris Zone2.
Puppet3.
Serverspec4.
Solaris 匹 CI5.

Solaris
匹手
奶件白仿CI
仄凶中

奶件白仿 CI
Serverspec 互伉伉奈旦今木化
井日奶件白仿及 CI 互�觳
?
Puppet 支 Chef 卅升及�傖奪
燴末白玄它尼失匹扔奈田毛�慷
仄﹜Serverspec 匹氾旦玄
?
CI 及凶戶及虐噫毛蚚砩允月源
楊午仄化 Vagrant 支 Docker
互方仁妏歹木化中月
?

Solaris 匹 CI
Vagrant 匹 Solaris 及 VM 毛
蚚砩允月仇午反匹五月互﹜
Solaris 分仃匹寯元凶中
?
Solaris 匹反 Docker 互妏尹卅
中
Solaris 匹手 Docker 卞�𡛟允月午
中丹�反丐月
https://www.oracle.com/corporate/
pressrelease/docker-gets-in-the-
zone-with-oracle-solaris-073015.html
?
?
?

Solaris 匹 CI
Solaris 卞反 Zone 互丐月氏分
仄﹜Zone 毛妏中凶中
?
Vagrant 支 Docker 及方丹卅覜
元匹﹜Zone 毛㜳丹源楊互斛猁
?

午曰丐尹內及源楊
Docker 支 Vagrant 腔卅手及毛
妏歹卅中
?
�慷𦤦心及 Zone 卞�仄化﹜
Puppet 卅升毛灍俴仄
Serverspec 匹氾旦玄
陔�及虐噫卞�允月灍俴毛氾旦玄匹五卅中
忒匹�五𥽋仄互斛猁?
?
?

引午戶
Zone 毛妏中凶中?
CI 及凶太卞﹜陔�及虐噫毛蚚
砩仄凶中
?
Vagrant 支 Docker 及方丹卅覜
元匹 Zone 毛㜳丹仄仁心互郗仄
中
?

Solaris
Zone

Solaris Zone
Zone 及衙猁?
Zone 及意�?
Zone 及�慷?
Zone 午由永弗奈斥?

Zone 及衙猁
Solaris 10 眕蔥ㄗ2005 爛?ㄘ?
肮元市奈生伙匹恚杅及扑旦氾丞
毛�釬
跪意伉末奈旦及煦褩?秶癹?
?
�仄仁反龧ぃ今氏及 OSC 2015 Tokyo/
Spring 及揃蹋毛統桽
http://www.slideshare.net/
satorumiyazaki/solaris-osc-
tokyo2015springzone
?
?

Zone 及意�ㄗbrandㄘ
Solaris 11.2 卞云仃月 Zone 及意�ㄗbrandㄘ
solaris
㻢𨃨腔卅 Zone
solaris10
Solaris 10 毛�井允 Zone
solaris-kz
石旦玄午反�卅月田奈斥亦件及市奈生伙毛�井
允 Zone

Immutable Zone
file-mac-profile 及偞隅匹 zone 毛 read only
卞
strict
掂心龰曰�蚚?
?
fixed-configuration
/var 眕狟反𤩸五煋心褫?
?
flexible-configuration
/etc 午 /var 眕狟反𤩸五煋心褫?
?
none
掂心𤩸五褫?
?

Immutable Zone
$ touch hoge
touch: cannot create hoge: Read-only file system
zoneadm apply 匹毀茬祥褫?
strict 匹反𤩸五煋心匹五卅中及
匹﹜お�媆卞伕弘互𤩸仃月仇午
毛復庲允月扔奈申旦反お�匹五
卅中
?

Zone
及
�慷

Zone 及�慷 (solaris)
# zonecfg -z testzone create
# zoneadm -z testzone install
Zone 及�傖卞反 /etc/zones/SYSdefault.xml
及氾件皿伊奈玄互妏歹木月﹝
氾件皿伊奈玄毛妏歹卅中�磁反 'create -b'?
?

Zone 及�慷 (solaris10)
# zonecfg -z testzone create -t SYSsolaris10
# zoneadm -z testzone install -a sol10.flar -u
由永弗奈斥 system/zones/brand/brand-
solaris10 互斛猁
?
奶件旦玄奈伙卞反中內木井及失奈市奶皮互斛猁
flash archive / pax / cpio (+gzip/
bzip2) / ufsdump (level 0)
?
?
'-t' 匹硌隅仄化中月氾件皿伊奈玄及灍极反 /etc/
zones/SYSsolaris10.xml
?

Zone 及�慷 (solaris-kz)
# zonecfg -z testzone create -t SYSsolaris-kz
# zoneadm -z testzone install
由永弗奈斥 system/zones/brand/brand-
solaris-kz 互斛猁
?
'-t' 匹硌隅仄化中月氾件皿伊奈玄及灍极反 /etc/
zones/SYSsolaris-kz.xml
?

Zone 及�慷
仇仇引匹及源楊反扑件皿伙允亢?
灍蕣卞反生永玄伐奈弁偞隅午井
仄凶中仇午互丐月
?

Zone �慷媆卞匹五月仇午
Zone 及�傖毛傾允
cpu / memory / disk / network etc.?
?
AI 穴瓦白尼旦玄毛硌隅允月
package / publisher / pool / zfs etc.?
?
SC 皿伕白央奶伙毛硌隅允月
hostname / root / user /
nsswitch.conf / resolv.conf / keymap
etc.
?
?

Zone 及�傖
cpu?
memory?
disk?
network?
卅升 zonecfg 匹偞隅允月手及

# zonecfg -z testzone1 export -f testzone1.zonecfg
# zonecfg -z testzone2 create -f testzone1.zonecfg
create 媆卞 '-f' 匹白央奶伙毛傾允仇午互匹五月?
kernel zone 及 keysource 伉末奈旦及 export
卞反痜癹互斛猁
?

AI 穴瓦白尼旦玄
AI (Automated Installer) 互統桽允月白央奶伙?
/usr/share/auto_install/manifest/
zone_default.xml
?
zpool/zfs/be/facet/package 卅升毛偞隅褫夔?
?
Zone 及奶件旦玄奈伙媆卞 AI 互灍俴今木引允?

# zoneadm -z testzone install -m testzone_manifest.xml
zoneadm install 媆卞 '-m' 匹 AI 穴瓦白尼旦玄
毛傾允仇午互匹五月
?

SC (System Configuration) 皿伕白央奶伙
hostname/nsswitch.conf/resolv.conf/keymap/
tiemzone/root/user account 卅升毛偞隅褫夔
Zone 場隙皮奈玄媆及 Wizard 匹偞隅允月�醴?
SC 皿伕白央奶伙匹偞隅允月仇午匹 Wizard 互堤卅
仁卅月
?
?
?

# zoneadm -z testzone install -c testzone_profile.xml
zoneadm install/clone 媆卞 '-c' 匹 SC 皿伕
白央奶伙毛傾允仇午互匹五月
?

Zone 及 clone
# zoneadm -z testzone2 clone testzone1
# zoneadm -z testzone2 clone testzone1 -c profile.xml
肮珨及 zpool 奻匹丐木壬﹜ZFS 及 clone
�卅月 zpool 奻匹丐木壬﹜犯奈正及戊疋奈?
Publisher 井日及奶件旦玄奈伙方曰婌中?
?
unconfig 今木月及匹﹜
SC 皿伕白央奶伙毛傾允?
場隙皮奈玄媆卞 Wizard 匹偞隅?
卅升互斛猁
?

Zone �慷引午戶
Solaris 11.2 匹妏尹月 Zone 反 3 意�
solaris/solaris10/solaris-kz?
?
file-mac-profile 匹 zone 囀匹及掂心𤩸五毛
秶郘
?
Zone �慷媆卞傾六月偞隅反傾仄化云仁午晞瞳
Zone 及�傖?
AI 穴瓦白尼旦玄?
SC 皿伕白央奶伙?
?
Zone 及 clone 反晞瞳?

Puppet

Puppet 衙猁
Puppetlabs 卞方月�傖奪燴汁奈伙
ZFS 支 Zone 及紱釬卞手�𡛟?
master/agent �傖﹜�g极﹜升切日手褫夔?
?
Solaris 11.2 井日由永弗奈斥互湔婓
Solaris 蚚 module 互漪引木化中月?
?

Puppet 穴瓦白尼旦玄
扔奈田及偞隅毛𤩸中凶白央奶伙
毛穴瓦白尼旦玄午網少
node 'default' {
Package['pkg:/web/server/apache-22'] -> Service['svc:/network/http:apache22']
package { 'pkg:/web/server/apache-22':
ensure => installed,
}
service { 'svc:/network/http:apache22':
ensure => running,
enable => true,
}
}
?

伉末奈旦正奶皿
穴瓦白尼旦玄卞𤩸仁 'package' 支 'service' 卅升毛
伉末奈旦正奶皿午中丹
?
Puppet 㻢𨃨匹枑鼎
http://docs.puppetlabs.com/references/
latest/type.html
?
?
乒斥亙奈伙卞方勻化枑鼎
https://forge.puppetlabs.com/?
?
交奈扒卞方月隅膽?
?

Solaris module
生永玄伐奈弁憝窣?
扔奈申旦憝窣?
公及坻ㄗBE﹜由永弗奈斥ㄘ?

Solaris module: network
dladm
etherstub / ip tunnel / link aggregation /
link properties / vlan / vnic
?
?
ipadm
address object / address properties /
interface properties / ip interface / ipmp
interface / protocol properties / vni
interface
?
?
nsswitch?
resolver?

Solaris module: service
svccfg?
nis?
ldap?

Solaris module: others
BE?
package
facet / variant / mediator /
publisher
?
?

Puppet 及�g�卅犯乒
Apache 及偞隅
由永弗奈斥及奶件旦玄奈伙?
64bit 田奶瓜伉毛瞳蚚?
mpm 反 worker?
扔奈申旦毛 enable 卞允月?
扔奈申旦毛お�?
?

Puppet 引午戶
Puppet 反�傖奪燴末白玄它尼
失
?
㻢𨃨匹 zone 支 zfs 卞�𡛟?
Oracle 卞方月 Solaris 乒斥
亙奈伙
?

Serverspec

Serverspec 衙猁
http://serverspec.org/?
龧狟�慏今氏卞方月﹜扔奈田�
傖及氾旦玄汁奈伙
?
RSpec 矛奈旦?
SSH / Docker API / WinRM 卅
升毛磊蚕仄化氾旦玄毛灍俴
?

Serverspec 及 Solaris 11
�𡛟
幻廿﹜午卅井互𤩸中化中引允?
午卅井互妏丹��卞云中化反�
觳卅仁�中化中引允
?
Solaris 10 匹手丐月最僅反�
仁反內匹允
?

Solaris 勻弔中氾旦玄 1
describe service('apache22') do
it { should be_enabled }
it { should be_running }
its(:property) { should include('httpd/server_type' => 'worker') }
its(:property) { should include('httpd/enable_64bit' => 'true') }
end

Solaris 勻弔中氾旦玄 2
describe zfs('rpool') do
it { should exist }
its(:property) { should include('mounted' => 'yes') }
end

bond / bridge / cgroup / command / cron /
default_gateway / docker_container /
docker_image / file / group / host /
iis_app_pool / iis_website / interface /
ipfilter / ipnat / iptables / kernel_module /
linux_audit_system / linux_kernel_parameter /
lxc / mail_alias / mysql_config / package /
php_config / port / ppa / process /
routing_table / selinux / selinux_module /
service / user / x509_certificate /
x509_private_key / windows_feature /
windows_registry_key / yumrepo / zfs
?
http://serverspec.org/
resource_types.html
?

Serverspec
及犯乒

Advanced Tips
http://serverspec.org/advanced_tips.html?
灍蕣卞妏勻化中仁卞反﹜serverspec-init 匹汜
傖今木月 Rakefile 支 spec_helpler 及引引
匹反勾日中
How to use host specific properties?
How to share Serverspec tests among
hosts
?
How to use Serverspec tests as shared
behaviors
?
?

Serverspec 引午戶
Serverspec 扔奈田�傖及氾旦
玄汁奈伙
?
Solaris 卞手�𡛟?
Rakefile 支 spec_helper.rb
反𤩸五𡥼尹芢𠾴
?
Advanced Tips 卞醴毛籵允?

奶件白仿
CI

奶件白仿CI
Puppet 卅升及�傖奪燴末白玄
它尼失匹砩�籵曰卞�傖今木月
仇午毛Serverspec 匹氾旦玄
仄﹜輥適腔卞 Puppet 卅升及戊
奈玉毛蜊囡仄化中仁仇午﹝
?

Solaris 卞�允月
奶件白仿CI及霜木
Solaris 虐噫及蚚砩?
Puppet 灍俴?
Serverspec 灍俴?

�觳1: Solaris虐噫及蚚砩
Vagrant 匹 Solaris 及 VM 毛蚚砩允月?
Solaris 奻匹 Zone 毛蚚砩允月?
Solaris 奻匹 Kernel Zone 毛蚚砩允月?
SPARC 奻匹 LDOM 毛蚚砩允月?

�觳2: Zone及丐勾井中
Zone 及�慷?
Zone 囀匹 Puppet 及灍俴?
Zone 卞�仄化 Serverspec 及
灍俴
?
Zone 及勹�?

Zone 及丐勾井中
docker4solaris 毛妏丹?
赻釬旦弁伉皿玄毛妏丹?

docker4solaris
https://github.com/maduma/
docker4solaris
?
Zone 毛 Docker 勻弔仁㜳丹
Bash script
廣 250 俴?
虐噫反𢜪戶湖切
etherstub / ipnat / dhcp?
?
?

Tutorial 毛�井仄化心月
docker version
docker search tutorial
docker pull learn/tutorial
docker run learn/tutorial echo "Hello World"
docker run learn/tutorial ping www.google.com
docker run learn/tutorial pkg install apache-22
docker ps -l
docker commit CONTAINER learn/apache-22
docker images
docker run learn/apache-22 /usr/apache2/2.2/bin/apachectl -M
docker inspect CONTAINER
docker push learn/apache-22

赻釬旦弁伉皿玄
嶱逃笢?
Zone 毛釬勻化﹜Zone 囀匹戊穴
件玉毛灍俴允月午仇欠引匹反匹
五化中月
?
左皿扑亦件毛 Vagrant 支
Docker 卞侔六月井蕉尹笢
?
仍砩�躁摩笢?

犯乒

引午戶
Solaris 卞反耋撿互𠐓勻化中月
及匹﹜公木日毛丹引仁勾卅仆月
手及毛𤩸仃木壬﹜卅氏午井卅月
?
docker4solaris 及方丹卅賃曰
ピ曰笭猁
?

端端舝

Solaris Zone 午 Puppet﹜Serverspec 匹奶件白仿 CI

More Related Content

Solaris Zone 午 Puppet﹜Serverspec 匹奶件白仿 CI