1
Cinder-Ceph Integration With
oVirt
Maor Lipchuk
February 2016
Senior Software Engineer @ RHEV
Red Hat
mlipchuk@redhat.com
Irc.oftc.net server on #ovirt channel
2
Agenda
● Introduction
● How all the pieces fall into place
● What oVirt can do today with Ceph
● oVirt future plans with Ceph
3
oVirt in a Nutshell
● Open Source project started by Red Hat
● Virtualization management platform
● Built on linux's virtualization you already know:
● kvm, qemu, libvirt
● Manages:
Virtual Machines
Storage Domains
Virtualized networks
4
oVirt in a Nutshell
5
oVirt in a Nutshell
File Storage Domains
● NFS
● Gluster
● POSIX-Compliant FS
● Local
Block Storage Domains
● Fibre Channel
● iSCSI
● Ceph
6
What Ceph is all about
Ceph ?
Fault-Tolerant
Open Source
Distributed Object Store
File System
Peta-Scale
Self-Healing
Data Durability
Integrity
CRUSH
Self-Managing
Software Base
Software-Defined Storage
Unified Storage
7
Distribution
● Distributed object store and file system
● Efficient and fast I/O
● Replication supported
8
Fault-Tolerant
● No single point of failure
● Self-healing
9
Scale out up to the Exabyte level
● Can manage Petabytes of data
● One to thousands of hard drives
● Can manage billions of files
● Exabyte – 1000 PB, 1000000 GB approximately equivalent
to the amount of all the internet traffic in 2004.
10
Ceph Architecture
11
Integrating Ceph with oVirt
Cinder
12
Cinder in a nutshell
● Cinder is a block storage service for OpenStack.
● Virtualizes pools of block storage devices – Ceph is the most
common one
● Provides end users with a self service API to request and
consume resources
● Orchestrates over 57 pluggable storage drivers
13
Integrating oVirt with Cinder
14
Woorea's OpenStack Java SDK
● A library which provides the ability to communicate with
OpenStack through its REST-API.
● Already used by oVirt engine for Keystone/Neutron/Glance
with resteasy-connector.
● Used to communicate with Cinder's REST-API
15
Integrate all the components together
How all the pieces fall into place
16
Create/Delete a Ceph Disk
17
oVirt Integration With Ceph
Using Ceph and Cinder in a secure way
with oVirt
18
Cinder/Ceph Integration - Secrets
● Ceph provides two authentication modes: None, Cephx
● Cephx - Ceph requires user authentication in a manner
similar to Kerberos.
● Ceph authentication provides a way to manage permissions
for users to view and manipulate information to/from
volumes.
● oVirt register those secrets upon any host/storage domain
activation.
19
Cinder/Ceph Integration - Secrets
How oVirt registers Ceph's secrets
20
Register Ceph Secrets – Flow Chart
21
Register Ceph Secrets – Flow Chart
22
Register Ceph Secrets – Flow Chart
23
Register Ceph Secrets – Flow Chart
24
Register Ceph Secrets – Flow Chart
25
Secrets - Run a VM With Cinder Disks
Run a VM with Ceph disks in a
secure way through oVirt
26
Secrets - Run a VM With Cinder Disks
27
Secrets - Run a VM With Cinder Disks
28
Secrets - Run a VM With Cinder Disks
29
Secrets - Run a VM With Cinder Disks
30
oVirt Snapshots with Ceph disks
oVirt different features using
Ceph snapshots
31
Snapshots
● Cinder supports volumes and volume snapshots
● Preview/Commit and undo to test your VMs
32
Snapshots – Live Snapshot
● Live Cinder snapshot
● Live remove of Cinder snapshots
VM
FR
EEZE
TH
AW
snapshot
33
Snapshots – Clone VM/Template
● Support for cloning a VM from a snapshot
● Support for cloning a Template from a snapshot
snapshot
VM
Template
34
Snapshots – Stateless VM
● Create a new Cinder volume based on the volume of the VM
● Once the VM is being shutdown the volume gets deleted.
Cinder Volume Cloned Cinder Volume
VM
35
Future plans of oVirt with Ceph
Future plans
36
Future Plans
● DR solution
● Monitoring
● Move disk (Between Ceph and traditional oVirt Storage)
● Your contributions are welcome:
http://www.ovirt.org/Community
37
Questions?
38
Links
● www.ovirt.org/Features/Cinder_Integration
● http://wiki.openstack.org/wiki/Cinder
● http://www.ceph.com/
● http://github.com/woorea/openstack-java-sdk
39
THANK YOU !
http://www.ovirt.org
http://lists.ovirt.org/mailman/listinfo
#ovirt irc.oftc.net
mlipchuk@redhat.com

Managing ceph through_oVirt_using_Cinder

Editor's Notes

  • #9 Fault Tolerant, This is what basically makes enterprise companies look for. Ceph gurentees no single point of failure in its Storage, and it does that with a smart fault tolerant mechanism which basically using OSDs and Monitors to monitor for any failed devices all the time. Once there is such a failed device it almost imidietly copy the data to another device so this data will still be replicated through the other object storage devices.
  • #13 Cinder is the block service for open stack The open source project to develop OpenStack Block Storage without requiring any knowledge of where their storage is actually deployed or on what type of device. among them ceph, IBM, EMC, NetApp, Dell and GlusterFS.
  • #15 Woorea is an opensource project and it is writen with java. It is already used by oVirt engine as a library, to provide an easy communication ion with Keystone/Quantum and Glance using the resteasy-connector. Woorea was used in this integration to communicat with Cinder's rest-api. You can check the link of the git hub source code: http://github.com/woorea/openstack-java-sdk
  • #17 Eventually this is how it works: We have the oVirt engine which communicates with Cinder through the openstack java-sdk, which woorea provides. Cinder add/delete/update all the disk/snapshots in Ceph, and oVirt, using CoCo, sample Cinder to know if the task has been finished or not. [Show movie one] Now I want to show you how we can add Cinder provider
  • #19 Ceph supports cephx secure authentication between the nodes within the cluster, each connection and communication are initiated with this authentication mecanism. In the next slides I will show you how Ovirt supports and manages Ceph authentication.