KUBERNETES - 3 (Installation)

 

                           KUBERNETES - 3 (Installation)

What we will learn,

Kubernetes cluster creation,

Steps for Installation,

 

1.  Swap should be disabled

2.  Disable selinux

3.  Firewalld should be stopped, (if not then must be rules defined to allow k8s)

4.  Entry of all master & worker in /etc/hosts

5.  Mac id and product_uuid should be unique

6.  Enable Internet

7.  Yum update

8.  Install docker-ce on all nodes [docker engine/docker daemon, responsible for all the container management docker build, docker network, docker volume and docker inspect. Requires docker-ce-cli.]

9.  Install docker-ce-cli on all nodes [command line interface for docker engine]

10. Install containerd.io on all nodes [daemon containerd to interface with the OS API, It uses kernel features to provide a runtime environment for containers. Containerd is the container runtime software which is responsible for running containers.

11. Install Kubelet on all nodes

12. Install Kubeadm on all nodes

13. Install Kubectl on all nodes

14. Initialize kubeadm on Master node only

15. Install/Deploy a Container Network Interface (CNI) based Pod network on Master Node only (our case Calico) [Required for Pods communication with each other. Cluster DNS (CoreDNS) will not start up before a network is installed. A CNI plugin is required to implement the Kubernetes network model.

16. Join Worker with Master

17. Validate the setup

KUBERNETES-2

  

                   KUBERNETES-2 (BASICS)

What we will learn,

What is Kubernetes?

Why Kubernetes?
What is a Kubernetes cluster?
Kubernetes Architecture

KUBERNETES-1

 

                     KUBERNETES-1 (BASICS)

What we will learn,

There are few things which we need to understand before getting involved with Kubernetes,

What is Monolithic application?
What is Hypervisor & type?
What is virtualization?
What is Virtual machine?
What are Micro Services?
What is container?
What are the benefits of Containers?
What are the drawbacks of Containers?
What is containerization?
What is difference between containerization and virtualization?
What is container orchestration?

What is namespace?

DOCKER-5

 

                DOCKER-5 (SAVE & RESTORE)   

What we will learn in this post,

·         HOW TO SAVE & RESTORE (IMAGE),

·         HOW TO SAVE & RESTORE (CONTAINER),

DOCKER 4

 

                        DOCKER-4   

What we will learn in this post,

·         HOW TO RUN CONTAINER PROPERLY.

·         HOW TO ACCESS RUNNING CONTAINER.

·         NAME YOUR CONTAINER

·         AUTO RUN AFTER REBOOT

·         ACCESSING RUNNING CONTAINER AND EXIT WITHOUT EXITING CONTAINER

DOCKER-3

 

                 DOCKER-3 (Basic Commands) 

What we will learn in this post,

·         Docker basic commands

·         Run & Pull Docker Images

·         Create container from image

·         See the running or exited containers

·         Remove container & images

·         Running a container

 

DOCKER-2 (INSTALL & BEGIN)

  

                 DOCKER-2 (INSTALL & BEGIN)  

Now we need to install docker,

Below are the pre installation considerations,

1.  Swap should be off

2.  Internet access

3.  Few rpm’s

DOCKER -1

                    DOCKER-1 (BASICS)  

Docker is a set of PAAS (Platform as a Service) which uses OS level virtualization.

Docker images are non-interactive (change not permitted) and reusable

Containers are interactive (change permitted), and we can create image from containers.

Docker architecture:

DOCKER ENGINE: There are three major components,

LINUX(49)- NETWORK TIME PROTOCOL (NTP) -3

               LINUX(49)- NETWORK TIME PROTOCOL (NTP) -3

Now time to consider the commands, output values and configuration file in detail.

Log / Security / troubleshooting

How to know the service ntpd is running or not?

How to check NTP server is alive and responding to ntp queries?

How to check the NTP status?

Understanding output of “ntpq -p”

Important config files related to NTP,

How to check the current ntp configuration status?

What if you wanted your local machine to server as NTP server?

How to use Local Clock as Backup?

How to enable NTP logging?

What is driftfile and drift value?

how to verify ntp process is running or not?

How to update ntp time manually?

How to check the sync and time accuracy?

how to check ntp port 123 is working or not?

LINUX(48)- NETWORK TIME PROTOCOL (NTP) -2

               LINUX(48)- NETWORK TIME PROTOCOL (NTP) -2

We learned about the basics of NTP, now it’s time for configuration.

Here I used RHEL-6 as NTP server for my network and RHEL-7 as client.

The daemon “ntpd” is responsible for ntp service. Whenever the system/service starts the ntpd reads its configuration file /etc/ntp.conf

But before that we need ntp package to be installed on our system.

Check whether it is installed or not,

LINUX (47)- NETWORK TIME PROTOCOL (NTP) -1

               LINUX (47)- NETWORK TIME PROTOCOL (NTP) -1

Network Time Protocol (NTP) is an Internet Protocol used for synchronization of computer clocks with some external time reference for précised timing. Or NTP is a system which is responsible to provide accurate timing to systems across the internet.

NTP is an application layer protocol works within the TCP/IP suite and relies on UDP on port 123.

RHEL6-46– BOOT PROCESS

                            RHEL6-46– BOOT PROCESS  

RHEL 6:

Have you ever thought what happen in between you switch on the power button and prompted for username/password?  

The tasks ran behind are collectively termed as BOOT PROCESS,

It starts after pressing power button,

LINUX-51 LVM REVIEW / RECAP

                                  LINUX-51  LVM REVIEW


                LINUX LVM REVIEW / RECAP:

                     

1. What is LVM
2. Why LVM is required
3. What is the difference between LVM & RAID
4. What is Physical Extent (PE) & Logical Extent (LE) 
5. Define PV, LV, VG
6. How to create PV
7. How to create VG
8. How to create LV

VMW3- HOW TO ADD ESXi/HOST’S TO vCenter

                 HOW TO ADD ESXi/HOST’S TO vCenter

We can connect all Hosts/ESXi individually and manage as well, if it is possible then why to add them in vCenter?

Just imagine a setup where 10 hosts are carrying several VM’s, then imagine to log in every host and manage them. How it feels?

Scary !!! isn’t it?

What is the first question coming in mind? How great it would be if I can manage all of them from one place, Right!!!   Yes…… Exactly,

VMW2- ESXi 6.5 INSTALLATION

                                    ESXi 6.5 INSTALLATION

Open Vmware Workstation, go to

File è New Virtual Machine è Custom (Advanced)

Now do as given in following snapshots,

VMW1- vCenter 6.5 INSTALLATION IN WINDOWS

                        vCenter 6.5 INSTALLATION IN WINDOWS

First install windows 2012

Following is setting of my Windows 2012 in vmware workstation,

50 SECURITY & HARDENING (BASICS) -P5 (LOGS & LOG FILES SECURITY)

         LINUX- 50 SECURITY & HARDENING (BASICS) -P5

IN LINUX (RHEL6 & RHEL7),

USER/LOGIN SECURITY

NETWORK SECURITY

FILE / OPERATING SYSTEM SECURITY

PHYSICAL SECURITY

LOG EVERYTHING

LOG FILE SECURITY

We already covered USER, NETWORK, FILE/OPERATING SYSTEM SECURITY and PHYSICAL SECURITY.

Now it’s time to collect & secure evidence.

LOG EVERYTHING

LINUX- 49 SECURITY & HARDENING (BASICS) -P4 (PHYSICAL SECURITY)

              LINUX- 49 SECURITY & HARDENING (BASICS) -P4

IN LINUX (RHEL6 & RHEL7),

USER/LOGIN SECURITY

NETWORK SECURITY

FILE / OPERATING SYSTEM SECURITY

PHYSICAL SECURITY

LOG EVERYTHING

LOG FILE SECURITY

We already covered USER, NETWORK, & FILE/OPERATING SYSTEM SECURITY. Let’s start with PHYSICAL SECURITY.

User/Network/File & Operating system security is already implemented, then why physical security is required?

48 SECURITY & HARDENING (BASICS) -P3 (FILE/OPERATING SYSTEM SECURITY)

        LINUX- 48 SECURITY & HARDENING (BASICS) -P3

IN LINUX (RHEL6 & RHEL7),

USER/LOGIN SECURITY

NETWORK SECURITY

FILE / OPERATING SYSTEM SECURITY

PHYSICAL SECURITY

LOG EVERYTHING

LOG FILE SECURITY

We already covered USER SECURITY & NETWORK SECURITY. Let’s start FILE & OPERATING SYSTEM SECURITY.

LINUX- 47 SECURITY & HARDENING (BASICS) -P2 (NETWORK SECURITY)

         LINUX- 47 SECURITY & HARDENING (BASICS) -P2

 LINUX (RHEL6 & RHEL7),

USER/LOGIN SECURITY

NETWORK SECURITY

FILE / OPERATING SYSTEM SECURITY

PHYSICAL SECURITY

LOG EVERYTHING

LOG FILE SECURITY

We already covered USER SECURITY, Next is NETWORK SECURITY.

Once we connect to Network, it is now open for entire world. And we are not supposed to open for all, only trusted connections should be allowed.