nfs高可用

作者: Edenzj | 来源:发表于2019-08-24 17:52 被阅读0次

nfs高可用
Kubernetes 集群挂载高可用 NFS 网络文件存储
NFS (Kubernetes) 高可用方案（NFS+keepa
Kubernetes 使用 NFS PVC
nfs+keeep+rsync高可用
JAVA高级架构师实战
CentOS7.6配置NFS共享存储
从0开始配置基于drbd的高可用nfs双机集群全过程（上）
openstack使用nfs作为nova的后端存储
Kubernetes部署应用服务

image.png

1 nfs02 下载软件，nfs-utils rpcbind

yum install -y nfs-utils rpcbind
官方源安装 nginx

2 修改配置文件

#注意：我这地方的uid和gid是nginx 客户端和服务端要对应才可以存图片，因为web服务器php是nginx管理，所以这里我也是用nginx管理
vim /etc/exports
/data/blog/  172.16.1.0/24(rw,sync,no_all_squash,root_squash,anonuid=998,anongid=996)
/data/www/  172.16.1.0/24(rw,sync,no_all_squash,root_squash,anonuid=998,anongid=996)
/data/wecenter/  172.16.1.0/24(rw,sync,no_all_squash,root_squash,anonuid=998,anongid=996)

3.修改目录权限

chown -R nginx. data/

4.启动nfs功能

systemctl start rpcbind
systemctl enable rpcbind
systemctl start nfs
systemctl enable nfs

5.实现实时同步

开启实时同步服务
yum install -y lsyncd
systemctl start lsyncd.service 
systemctl enable lsyncd.service

编写配置文件  让nfs02和backup实现实时同步
cat /etc/lsyncd.conf 
settings {
 logfile = "/var/log/lsyncd/lsyncd.log",
 statusFile = "/var/log/lsyncd/lsyncd.status",
 inotifyMode = "CloseWrite",
 maxProcesses = 8,
}
sync {
 default.rsync,
 source = "/data",
 target = "rsync_backup@172.16.1.41::ss",
 delete= true,
 exclude = { ".*" },
 delay = 1,
rsync = {
 binary = "/usr/bin/rsync",
 archive = true,
 compress = true,
 verbose = true,
 password_file = "/etc/rsync.password",
 _extra = {"--bwlimit=200"}
}
}

重启实时同步服务
systemctl restart lsyncd.service
创建密码文件
cat /etc/rsync.password
123456
chmod 600 /etc/rsync.password
测试是否能与backup实时同步

6.安装keepalived 测试ip地址能否在nfs01与nfs02来回漂移

yum install -y keepalived

6.1.编写脚本并赋予权限

cat /service/scripts/check_status.sh  
#!/bin/bash
NfsStatus=$(systemctl status nfs|awk 'NR==5{print $2}')
RpcStatus=$(systemctl status rpcbind.socket |awk 'NR==3{print $2}')
if [ $NfsStatus != 'active' ]|| [ $RpcStatus != 'active' ]
then
    exit 1
else
    exit 0
fi

必须要给执行权限，否则keepalived运行不了脚本
chmod +x  /service/scripts/check_status.sh

6.2.编写配置文件

#我使用的是keepalived的权重来实现ip地址漂移的
nfs01配置文件
 cat /etc/keepalived/keepalived.conf 
! Configuration File for keepalived

global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id nfs01
}
    
   vrrp_script check_nfs {                    
          script "/service/scripts/check_status.sh"    
          interval 2                                         
          weight - 2                            
}
vrrp_instance test{
    state MASTER
    interface eth0
    virtual_router_id 111
    priority 101
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1234
    }
    virtual_ipaddress {
         172.16.1.30
    }
   track_script {
          check_nfs
     }
}

nfs02
cat /etc/keepalived/keepalived.conf 
! Configuration File for keepalived

global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id nfs02
}

vrrp_instance test{
    state BACKUP
    interface eth0
    virtual_router_id 111
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1234
    }
    virtual_ipaddress {
        172.16.1.30
    }
}

7 部署 nfs01和nfs02 实现实时同步

密码文件
cat /etc/rsync.pwd  
123456
身份认证文件
cat /etc/rsync.password 
rsync_backup:123456

nfs01客户端 lsync配置文件
cat /etc/lsyncd.conf 
settings {
 logfile = "/var/log/lsyncd/lsyncd.log",
 statusFile = "/var/log/lsyncd/lsyncd.status",
 inotifyMode = "CloseWrite",
 maxProcesses = 8,
}
sync {
 default.rsync,
 source = "/data",
 target = "rsync_backup@172.16.1.41::ss",
 delete= true,
 exclude = { ".*" },
 delay = 1,
rsync = {
 binary = "/usr/bin/rsync",
 archive = true,
 compress = true,
 verbose = true,
 password_file = "/etc/rsync.pwd",
 _extra = {"--bwlimit=200"}
}
}
sync {
 default.rsync,
 source = "/data",
 target = "rsync_backup@172.16.1.32::data",
 delete= true,
 exclude = { ".*" },
 delay = 1,
rsync = {
 binary = "/usr/bin/rsync",
 archive = true,
 compress = true,
 verbose = true,
 password_file = "/etc/rsync.pwd",
 _extra = {"--bwlimit=200"}
}
}

nfs02 服务端 rsync.conf配置文件
cat /etc/rsyncd.conf 
#rsync_config
#created by HQ at 2017
##rsyncd.conf start##

uid = nginx
gid = nginx
port = 873
fake super = yes
use chroot = no
max connections = 200
timeout = 300
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsync.lock
log file = /var/log/rsyncd.log
ignore errors
read only = false
list = false
hosts allow = 172.16.1.0/24
hosts deny = 0.0.0.0/32
auth users = rsync_backup
secrets file = /etc/rsync.password
[data]
comment = "data "
path = /data


nfs02 客户端 lsync配置文件
cat /etc/lsyncd.conf 
settings {
 logfile = "/var/log/lsyncd/lsyncd.log",
 statusFile = "/var/log/lsyncd/lsyncd.status",
 inotifyMode = "CloseWrite",
 maxProcesses = 8,
}
sync {
 default.rsync,
 source = "/data",
 target = "rsync_backup@172.16.1.41::ss",
 delete= true,
 exclude = { ".*" },
 delay = 1,
rsync = {
 binary = "/usr/bin/rsync",
 archive = true,
 compress = true,
 verbose = true,
 password_file = "/etc/rsync.pwd",
 _extra = {"--bwlimit=200"}
}
}
sync {
 default.rsync,
 source = "/data",
 target = "rsync_backup@172.16.1.31::data",
 delete= true,
 exclude = { ".*" },
 delay = 1,
rsync = {
 binary = "/usr/bin/rsync",
 archive = true,
 compress = true,
 verbose = true,
 password_file = "/etc/rsync.pwd",
 _extra = {"--bwlimit=200"}
}
}

nfs01服务端 rsync.conf配置文件
cat /etc/rsyncd.conf 
#rsync_config
#created by HQ at 2017
##rsyncd.conf start##

uid = nginx
gid = nginx
port = 873
fake super = yes
use chroot = no
max connections = 200
timeout = 300
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsync.lock
log file = /var/log/rsyncd.log
ignore errors
read only = false
list = false
hosts allow = 172.16.1.0/24
hosts deny = 0.0.0.0/32
auth users = rsync_backup
secrets file = /etc/rsync.password
[data]
comment = "data " 
path = /data

8.重新挂载web端节点

把之前的卸载掉
umount  -lf /html/blog/wp-content/uploads/ 
umount  -lf /html/wecenter/uploads/article
umount  -lf /html/www/uploadfile/

重新挂载
mount -t nfs 172.16.1.30:/data/blog /html/blog/wp-content/uploads/ 
mount -t nfs 172.16.1.30:/data/wecenter /html/wecenter/uploads/article
mount -t nfs 172.16.1.30:/data/www /html/www/uploadfile/

放到 /etc/rc.local 开机自启
mount -t nfs 172.16.1.30:/data/blog /html/blog/wp-content/uploads/ 
mount -t nfs 172.16.1.30:/data/wecenter /html/wecenter/uploads/article
mount -t nfs 172.16.1.30:/data/www /html/www/uploadfile/

未经博主允许，不得转载