RHCA-236题库
作者：互联网
目录
第1~5题
vgcreate vg_bricks /dev/vdb1
vcreate -L 19G -T vg_bricks/thinpool
for i in sec prod;do lvcreate -V 2G -T vg_bricks/thinpool -n $i;done
for i in sec prod;do mkfs.xfs -i size=512 /dev/vg_bricks/$i;done
mkdir -p /bricks/{sec,prod}
echo "UUID=xxx-xxx-xxx /bricks/sec xfs defaults 0 0" >> /etc/fstab
echo "UUID=xxx-xxx-xxx /bricks/prod xfs defaults 0 0" >> /etc/fstab
mount -a
mkdir /bricks/sec/secvol_n4
mkdir /bricks/prod/prodvol_n4
semanage fcontext -a -t glusterd_brick_t /bricks/sec/secvol_n4
semanage fcontext -a -t glusterd_brick_t /bricks/prod/prodvol_n4
restorecon -Rv /bricks/
第6~8题
# 创建replicate卷，2个节点且不加replica就是分布卷，加上replica就是复制卷，4个节点加上replica就是分布复制卷
replica 2
|
gluster volume create testvol servera:/bricks/test/testvol_n1 serverb:/bricks/test/testvol_n2
gluster volume set testvol auth.ssl-allow 'servera.lab.example.com,serverb.lab.example.com,serverc.lab.example.com,serverd.lab.example.com,servere.lab.example.com,workstation.lab.example.com'
gluster volume set testvol client.ssl on
gluster volume set testvol server.ssl on
gluster volume set testvol auth.allow '172.25.250.*'
gluster volume start testvol
第9题
[root@server{a|b|c|d} ~]# firewall-cmd --permanent --add-service=nfs --add-service=rpc-bind
[root@server{a|b|c|d} ~]# firewall-cmd --reload
[root@workstation ~]# yum -y install glusterfs-fuse.x86_64
[root@workstation ~]# mkdir /var/lib/glusterd
[root@workstation ~]# touch /var/lib/glusterd/secure-access
[root@workstation ~]# mkdir /{test,secure,production}
[root@workstation ~]# vim /etc/fstab ===> 下面的内容手写
servera:/testvol /test glusterfs defaults 0 0
servera:/secvol /secure nfs defaults,vers=3,_netdev 0 0
servera:/prodvol /production glusterfs defaults 0 0
[root@workstation ~]# mount -a
第10题
[root@workstation ~]# vim /etc/fstab
servera:/testvol /test glusterfs defaults,acl 0 0 ===> 添加acl项
[root@workstation ~]# umount /test && mount -a
[root@workstation ~]# groupadd admins
[root@workstation ~]# useradd suresh
[root@workstation ~]# useradd anita
[root@workstation ~]# mkdir /test/confidential
[root@workstation ~]# chown .admins /test/confidential
[root@workstation ~]# chmod -R o=- /test/confidential
[root@workstation ~]# setfacl -m u:suresh:rwX /test/confidential/
[root@workstation ~]# setfacl -m d:u:suresh:rwX /test/confidential/
[root@workstation ~]# setfacl -m u:anita:rX /test/confidential/
[root@workstation ~]# setfacl -m d:u:anita:rX /test/confidential/
[root@workstation ~]# crontab -e
@reboot /bin/bash /root/umount.sh
[root@workstation ~]# vim umount.sh
#!/bin/bash
/usr/bin/umount /test
/usr/bin/mount -a
第11题
[root@workstation ~]# mkdir /production/mp4 && chmod -R o+w /production/mp4
[root@servera ~]# gluster volume quota prodvol enable
[root@servera ~]# gluster volume quota prodvol limit-usage /mp4 128MB
第12题 配置geo
[root@servere ~]# firewall-cmd --permanent --add-service=glusterfs
[root@servere ~]# firewall-cmd --reload
[root@servere ~]# curl ftp://workstation.lab.example.com/pub/servere.pem -o /etc/ssl/glusterfs.pem
[root@servere ~]# curl ftp://workstation.lab.example.com/pub/servere.key -o /etc/ssl/glusterfs.key
[root@servere ~]# curl ftp://workstation.lab.example.com/pub/glusterfs.ca -o /etc/ssl/glusterfs.ca
[root@servere ~]# openssl dhparam -out /etc/ssl/dhparam.pem 2048
[root@servere ~]# fdisk /dev/vdb
[root@servere ~]# partprobe
[root@servere ~]# pvcreate /dev/vdb1
[root@servere ~]# vgcreate vg_bricks /dev/vdb1
[root@servere ~]# lvcreate -L 19G -T vg_bricks/thinpool
[root@servere ~]# lvcreate -V 6G -T vg_bricks/thinpool -n testcopy ===>这里需要把容量改大点
==================== 扩容 ====================
lvextend -L 8G /dev/vg_bricks/testcopy
[root@servere ~]# xfs_growfs /dev/vg_bricks/testcopy
==============================================
[root@servere ~]# mkfs.xfs -i size=512 /dev/vg_bricks/testcopy
[root@servere ~]# mkdir -p /bricks/testcopy
[root@servere ~]# echo "UUID=xxx-xxx-xxx /bricks/testcopy xfs defaults 0 0" >> /etc/fstab
[root@servere ~]# mount -a
[root@servere ~]# mkdir /bricks/testcopy/brick ===>名字没规定可以随便
[root@servere ~]# semanage fcontext -a -t glusterd_brick_t /bricks/testcopy/brick
[root@servere ~]# restorecon -Rv /bricks/
[root@servere ~]# gluster volume create testcopy servere:/bricks/testcopy/brick
[root@servere ~]# gluster volume set testcopy auth.ssl-allow 'servera.lab.example.com,serverb.lab.example.com,serverc.lab.example.com,serverd.lab.example.com,servere.lab.example.com,workstation.lab.example.com'
[root@servere ~]# gluster volume set testcopy client.ssl on
[root@servere ~]# gluster volume set testcopy server.ssl on
[root@servere ~]# gluster volume set testcopy auth.allow '172.25.250.*'
[root@servere ~]# gluster volume start testcopy
[root@workstation ~]# umount /test/
[root@servera ~]# gluster volume stop testvol
[root@servera ~]# gluster volume start testvol
[root@workstation ~]# mount -a
[root@servere ~]# systemctl stop glusterd && pkill glusterfs
[root@servere ~]# touch /var/lib/glusterd/secure-access
[root@servere ~]# systemctl start glusterd
[root@servere ~]# groupadd repgrp && useradd -G repgrp georep
[root@servere ~]# echo "redhat" | passwd --stdin georep
[root@servere ~]# mkdir -m 0711 /var/mountbroker-root
[root@servere ~]# semanage fcontext -a -e /home /var/mountbroker-root
[root@servere ~]# restorecon -Rv /var/mountbroker-root
[root@servere ~]# cat /etc/glusterfs/glusterd.vol ===> 手动添加以下项
option geo-repilcation-log-group repgrp
option rpc-auth-allow-insecure on
option mountbroker-geo-replication.georep testcopy
option mountbroker-root /var/mountbroker-root
[root@servere ~]# chmod -R 770 /var/lib/glusterd/geo-replication/
[root@servere ~]# chmod -R 770 /var/log/glusterfs/geo-replication-slaves/
[root@servere ~]# chown -R .repgrp /var/lib/glusterd/geo-replication/
[root@servere ~]# chown -R .repgrp /var/log/glusterfs/geo-replication-slaves/
[root@servere ~]# systemctl restart glusterd
[root@servere ~]# gluster volume stop testcopy
[root@servere ~]# gluster volume start testcopy
[root@servera ~]# ssh-keygen
[root@servera ~]# ssh-copy-id georep@servere
[root@servera ~]# gluster system:: execute gsec_create ===> 生成公钥
[root@servera ~]# gluster volume geo-replication testvol georep@servere::testcopy create push-pem ===> 推公钥
[root@servere ~]# /usr/libexec/glusterfs/set_geo_rep_pem_keys.sh georep testvol testcopy
[root@servera ~]# gluster volume geo-replication testvol georep@servere::testcopy start
[root@servera ~]# gluster volume geo-replication testvol georep@servere::testcopy status
# 测试
[root@workstation ~]# echo "123456" > /test/a.txt
[root@servere ~]# ll /bricks/testcopy/brick/
-rw-r--r--. 2 root root 7 5月 16 09:25 a.txt
第13题
[root@server{a|b|c|d} ~]# lvcreate -V 2G -T vg_bricks/thinpool -n tier
[root@server{a|b|c|d} ~]# mkfs.xfs -i size=512 /dev/vg_bricks/tier
[root@server{a|b|c|d} ~]# mkdir /bricks/tier
[root@server{a|b|c|d} ~]# blkid
[root@server{a|b|c|d}]# echo "UUID=xxx-xxx-xxx /bricks/tier xfs defaults 0 0" >> /etc/fstab
[root@server{a|b|c|d}]# mount -a
[root@servera ~]# mkdir /bricks/tier/tiervol_n1
[root@serverb ~]# mkdir /bricks/tier/tiervol_n2
[root@serverc ~]# mkdir /bricks/tier/tiervol_n3
[root@serverd ~]# mkdir /bricks/tier/tiervol_n4
[root@server{a|b|c|d} ~]# semanage fcontext -a -t glusterd_brick_t /bricks/tier/tiervol_n{1..4}
[root@server{a|b|c|d} ~]# restorecon -Rv /bricks/tier
# 创建冷区
[root@servera ~]# gluster volume create tiervol replica 2 serverc:/bricks/tier/tiervol_n3 serverd:/bricks/tier/tiervol_n4
[root@servera ~]# gluster volume start tiervol
# 创建热区
[root@servera ~]# gluster volume tier tiervol attach servera:/bricks/tier/tiervol_n1 serverb:/bricks/tier/tiervol_n2 force ===> 这里可不加force
[root@servera ~]# gluster volume info tiervol
Volume Name: tiervol
Type: Tier
Volume ID: 8c9044a2-f3b3-469b-ba91-ac3d32747081
Status: Started
Number of Bricks: 4
Transport-type: tcp
Hot Tier : ====> 热区
Hot Tier Type : Distribute ====> 热区类型
Number of Bricks: 2
Brick1: serverb:/bricks/tier/tiervol_n2
Brick2: servera:/bricks/tier/tiervol_n1
Cold Tier: ====> 冷区
Cold Tier Type : Replicate ====> 冷区类型
Number of Bricks: 1 x 2 = 2
Brick3: serverc:/bricks/tier/tiervol_n3
Brick4: serverd:/bricks/tier/tiervol_n4
Options Reconfigured:
cluster.tier-mode: cache
features.ctr-enabled: on
performance.readdir-ahead: on
第14题 snapshot
# 题意
对secvol做快照，快照名snap-secvol,不带timestamp
# 解题
[root@servera ~]# gluster snapshot create snap-secvol secvol no-timestamp
[root@servera ~]# gluster snapshot activate snap-secvol
第15题 监控
# 题意
纳管servera~serverd主机
该集群名称为gluster-test
修改通知邮件到本地monitor的邮箱
# 实验中需要自己做，考试时不用做该步
[root@manager ~]# curl http://materials.example.com/rhgs-rhel6.repo -o /etc/yum.repos.d/rhgs-rhel6.repo
[root@manager ~]# yum -y install nagios-server-addons
# 解题
[root@manager ~]# vim /etc/nagios/objects/commands.cfg
..../Time: $LONGDATETIME$\n $NOTIFICATIONCOMMENT\n" | /bin/mail -s... ===> 手动添加$NOTIFICATIONCOMMENT\n，加2次
[root@server{a|b|c|d} ~]# vim /etc/nagios/nrpe.cfg
allowed_hosts=127.0.0.1,manager.lab.example.com
[root@server{a|b|c|d} ~]# firewall-cmd --add-port=5666/tcp --permanent
[root@server{a|b|c|d} ~]# firewall-cmd --reload
[root@server{a|b|c|d} ~]# systemctl restart nrpe
# 创建集群
[root@manager ~]# configure-gluster-nagios -c gluster-test -H servera.lab.example.com
Are you sure, you want to commit the changes? (Yes, No) [Yes]: ===> 回车
Enter Nagios server address [manager.lab.example.com]: ===> 回车
Do you want to restart Nagios to start monitoring newly discovered entities? (Yes, No) [Yes]: ===> 回车
[root@manager ~]# vim /etc/nagios/gluster/gluster-contacts.cfg
define contact {
contact_name redhat # 联系人名字
alias redhat # 联系人别名
email root@manager.lab.example.com # 要通知到的邮箱
service_notification_period 24x7
service_notification_options w,u,c,r,f,s
service_notification_commands notify-service-by-email
host_notification_period 24x7
host_notification_options d,u,r,f,s
host_notification_commands notify-host-by-email
}
[root@manager ~]# vim /etc/nagios/gluster/gluster-templates.cfg
define host{
name gluster-generic-host
use linux-server
notifications_enabled 1
notification_period 24x7
notification_interval 120
notification_options d,u,r,f,s
register 0
contacts +snmp,redhat ===> 添加redhat
}
....
....
define service {
name gluster-service
use generic-service
notifications_enabled 1
notification_period 24x7
notification_options w,u,c,r,f,s
notification_interval 120
register 0
contacts +snmp,redhat ===> 添加redhat
....
....
# 检查配置文件是否有错误
[root@manager ~]# nagios -v /etc/nagios/nagios.cfg
[root@manager ~]# service nagios restart
[root@manager ~]# service sendmail restart
# 测试邮件
[root@manager ~]# echo "test123" | mail -s test root@manager.lab.example.com
[root@manager ~]# mail
Heirloom Mail version 12.4 7/29/08. Type ? for help.
"/var/spool/mail/root": 1 message 1 new
>N 1 root Mon May 16 11:20 20/813 "test" ===> 能收到邮件
# 在foundation0上使用网页上登录到nagios
https://manager.lab.example.com/nagios
User Name: nagiosadmin
Password: nagiosadmin
参考
[root@servera ~]# gluster
gluster> help
volume info [all|<VOLNAME>] - list information of all volumes
volume create <NEW-VOLNAME> [stripe <COUNT>] [replica <COUNT> [arbiter <COUNT>]] [disperse [<COUNT>]] [disperse-data <COUNT>] [redundancy <COUNT>] [transport <tcp|rdma|tcp,rdma>] <NEW-BRICK>?<vg_name>... [force] - create a new volume of specified type with mentioned bricks
volume delete <VOLNAME> - delete volume specified by <VOLNAME>
volume start <VOLNAME> [force] - start volume specified by <VOLNAME>
volume stop <VOLNAME> [force] - stop volume specified by <VOLNAME>
volume tier <VOLNAME> status
volume tier <VOLNAME> start [force]
volume tier <VOLNAME> attach [<replica COUNT>] <NEW-BRICK>...
volume tier <VOLNAME> detach <start|stop|status|commit|[force]>
- Tier translator specific operations.
volume attach-tier <VOLNAME> [<replica COUNT>] <NEW-BRICK>... - NOTE: this is old syntax, will be depreciated in next release. Please use gluster volume tier <vol> attach [<replica COUNT>] <NEW-BRICK>...
volume detach-tier <VOLNAME> <start|stop|status|commit|force> - NOTE: this is old syntax, will be depreciated in next release. Please use gluster volume tier <vol> detach {start|stop|commit} [force]
volume add-brick <VOLNAME> [<stripe|replica> <COUNT>] <NEW-BRICK> ... [force] - add brick to volume <VOLNAME>
volume remove-brick <VOLNAME> [replica <COUNT>] <BRICK> ... <start|stop|status|commit|force> - remove brick from volume <VOLNAME>
volume rebalance <VOLNAME> {{fix-layout start} | {start [force]|stop|status}} - rebalance operations
volume replace-brick <VOLNAME> <SOURCE-BRICK> <NEW-BRICK> {commit force} - replace-brick operations
volume set <VOLNAME> <KEY> <VALUE> - set options for volume <VOLNAME>
volume help - display help for the volume command
volume log <VOLNAME> rotate [BRICK] - rotate the log file for corresponding volume/brick
volume log rotate <VOLNAME> [BRICK] - rotate the log file for corresponding volume/brick NOTE: This is an old syntax, will be deprecated from next release.
volume sync <HOSTNAME> [all|<VOLNAME>] - sync the volume information from a peer
volume reset <VOLNAME> [option] [force] - reset all the reconfigured options
volume geo-replication [<VOLNAME>] [<SLAVE-URL>] {create [[ssh-port n] [[no-verify]|[push-pem]]] [force]|start [force]|stop [force]|pause [force]|resume [force]|config|status [detail]|delete} [options...] - Geo-sync operations
volume profile <VOLNAME> {start|info [peek|incremental [peek]|cumulative|clear]|stop} [nfs] - volume profile operations
volume quota <VOLNAME> {enable|disable|list [<path> ...]| list-objects [<path> ...] | remove <path>| remove-objects <path> | default-soft-limit <percent>} |
volume quota <VOLNAME> {limit-usage <path> <size> [<percent>]} |
volume quota <VOLNAME> {limit-objects <path> <number> [<percent>]} |
volume quota <VOLNAME> {alert-time|soft-timeout|hard-timeout} {<time>} - quota translator specific operations
volume inode-quota <VOLNAME> enable - quota translator specific operations
volume top <VOLNAME> {open|read|write|opendir|readdir|clear} [nfs|brick <brick>] [list-cnt <value>] |
volume top <VOLNAME> {read-perf|write-perf} [bs <size> count <count>] [brick <brick>] [list-cnt <value>] - volume top operations
volume status [all | <VOLNAME> [nfs|shd|<BRICK>|quotad]] [detail|clients|mem|inode|fd|callpool|tasks] - display status of all or specified volume(s)/brick
volume heal <VOLNAME> [enable | disable | full |statistics [heal-count [replica <HOSTNAME:BRICKNAME>]] |info [healed | heal-failed | split-brain] |split-brain {bigger-file <FILE> |source-brick <HOSTNAME:BRICKNAME> [<FILE>]}] - self-heal commands on volume specified by <VOLNAME>
volume statedump <VOLNAME> [nfs|quotad] [all|mem|iobuf|callpool|priv|fd|inode|history]... - perform statedump on bricks
volume list - list all volumes in cluster
volume clear-locks <VOLNAME> <path> kind {blocked|granted|all}{inode [range]|entry [basename]|posix [range]} - Clear locks held on path
volume barrier <VOLNAME> {enable|disable} - Barrier/unbarrier file operations on a volume
volume get <VOLNAME> <key|all> - Get the value of the all options or given option for volume <VOLNAME>
volume bitrot <VOLNAME> {enable|disable} |
volume bitrot <volname> scrub-throttle {lazy|normal|aggressive} |
volume bitrot <volname> scrub-frequency {hourly|daily|weekly|biweekly|monthly} |
volume bitrot <volname> scrub {pause|resume|status} - Bitrot translator specific operation. For more information about bitrot command type 'man gluster'
peer probe { <HOSTNAME> | <IP-address> } - probe peer specified by <HOSTNAME>
peer detach { <HOSTNAME> | <IP-address> } [force] - detach peer specified by <HOSTNAME>
peer status - list status of peers
peer help - Help command for peer
pool list - list all the nodes in the pool (including localhost)
quit - quit
help - display command options
exit - exit
snapshot help - display help for snapshot commands
snapshot create <snapname> <volname> [no-timestamp] [description <description>] [force] - Snapshot Create.
snapshot clone <clonename> <snapname> - Snapshot Clone.
snapshot restore <snapname> - Snapshot Restore.
snapshot status [(snapname | volume <volname>)] - Snapshot Status.
snapshot info [(snapname | volume <volname>)] - Snapshot Info.
snapshot list [volname] - Snapshot List.
snapshot config [volname] ([snap-max-hard-limit <count>] [snap-max-soft-limit <percent>]) | ([auto-delete <enable|disable>])| ([activate-on-create <enable|disable>]) - Snapshot Config.
snapshot delete (all | snapname | volume <volname>) - Snapshot Delete.
snapshot activate <snapname> [force] - Activate snapshot volume.
snapshot deactivate <snapname> - Deactivate snapshot volume.
global help - list global commands
nfs-ganesha {enable| disable} - Enable/disable NFS-Ganesha support
标签：workstation,bricks,gluster,RHCA,volume,servere,题库,236,root 来源： https://www.cnblogs.com/smlile-you-me/p/16285691.html