rhp like rapid home provisioning

2015 © Trivadis, - Daniele Massimi, Senior Consultant

BASEL BERN BRUGG LAUSANNE ZÜRICH DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. HAMBURG MÜNCHEN STUTTGART WIEN

2013 © Trivadis

RHP like Rapid Home Provisioning

Daniele Massimi

Senior Consultant – BE-IMS


AGENDA

1. RHP What is it ?

2. RHP Architecture

3. RHP Security Model

4. RHP Prerequisites and Setup

5. RHP Management

6. Some Demo‘s (not live )

12.09.2015


12.09.2015

RHP What is it


RHP – What is it ?

Standardized Tool for provisioning, patching and Upgrade Oracle Database and custom Software

Improve performance, efficiency and simplifies the software deployment process

Automate the software provisioning from a centralized provisioning Server

Helps to save time for provisioning, patching and upgrade software deployment

Mass Patch deployment possibility, so eliminates to patch individual Databases

Ensure Standardization within an enterprise

12.09.2015


12.09.2015

RHP Architecture


Rapid Home Provisioning – The Idea

12.09.2015

RHP Server

NFS Mount

Local Copy


RHP Architecture Details

12.09.2015

RHP Server

Managemnt

Repository(-MGMTDB)

Image Copy 1

(Gold Image)

WorkingCopy 1

DB Home 1

WorkingCopy 2

RHP Client

RHP Client

GNS Server

DB Home 2

DB Home 1

DB Home 1

RHP Client

RHP Client

DB Home 2

DB Home 2

NFS Mount

Loca

l Cop

y

NFS M

ount

Local Copy

RHP

Met

adat

a

ACFS

Snap

shots

ACFS

Mou

nt


RHP Components RHP Server

RHP Client

RHP Roles

RHP Images

o Image State (Testable, Restricted, Published (default))

o Image Series (possibility to group different images)

RHP Workingcopies

ASM

ACFS

GNS

Management DB (-MGMTDB starting from 12.1.0.2)

12.09.2015


12.09.2015

RHP Security Model


Basic Built-In Roles

12.09.2015

Role Name Description

GH_ROLE_ADMIN An administrative role for everything related to roles

GH_SITE_ADMIN An administrative role for everything related to Rapid Home Provisioning Clients

GH_WC_ADMIN An administrative role for everything related to working copies

GH_IMG_ADMIN An administrative role for everything related to images

GH_SERIES_ADMIN An administrative role for everything related to image series

GH_WC_USER A role that enables users to create a working copy

GH_IMG_USER A role that enables users to create an image

GH_WC_OPER A role that enables users to create a working copy for themselves or others

GH_SERIES_CONTRIB Users assigned this role can add images to a series

GH_IMG_TESTABLE A role that enables users to add a working copy only when an image is in the TESTABLE state

GH_IMG_RESTRICT A role that enables users to add a working copy only when an image is in the RESTRICTED state

GH_IMG_PUBLISH Users assigned this role can promote an image to another state or retract an image from the PUBLISHED state to either the TESTABLE or RESTRICTED state

GH_IMG_VISIBILITY sers assigned this role can modify access to promoted or published images using the rhpctl allow | disallow image commands


Composite Built-In Roles

12.09.2015

Role Name Description

GH_OPER (Operator)GH_WC_OPER, GH_SERIES_ADMIN, GH_IMG_TESTABLE, GH_IMG_RESTRICT, GH_IMG_USER

GH_CA (Client Administration)

GH_SERIES_ADMIN, GH_SERIES_CONTRIB, GH_WC_ADMIN, GH_IMG_ADMIN, GH_IMG_TESTABLE, GH_IMG_RESTRICT, GH_IMG_PUBLISH, GH_IMG_VISIBILITY

GH_SA (Server Administration)

GH_ROLE_ADMIN, GH_SITE_ADMIN, GH_SERIES_ADMIN, GH_SERIES_CONTRIB, GH_WC_ADMIN, GH_IMG_ADMIN, GH_IMG_TESTABLE, GH_IMG_RESTRICT, GH_IMG_PUBLISH, GH_IMG_VISIBILITY


12.09.2015

RHP Prerequisites


Prerequisites

Rapid Home Provisioning is part of Grid Infrastructure (GI) 12c

GI is mandatory for provision with RHP

Works whitin a GI Cloud Environment ! single Server can not be served

Not supported on Windows Plattform

Does not manage OS Images or GI homes Provisioning based on ACFS, NFS or Snapshot

GNS Server

NFS Daemon must be run on Server

License

- Lifecycle Management Pack (12’000 $ / CPU)

12.09.2015


12.09.2015

RHP Setup


RHP Setup – ASM and GNS Configs

ASM Diskgroup ACFS compatible parameter

alter diskgroup data set attribute 'compatible.advm'='12.1';

Configure GNS Server adding following to DNS Record File

$ORIGIN rac.trivadis.com.@ IN NS gns.rac.trivadis.com.gns IN A 192.168.56.201

Add GNS to Cluster[root@sonic01 named]# /u01/app/12.1.0.2/grid/bin/srvctl add gns -domain rac.trivadis.com -vip 192.168.56.201[root@sonic01 named]# /u01/app/12.1.0.2/grid/bin/srvctl start gns

12.09.2015


RHP Setup – ACFS Mountpoint and Add RHP Server

Add RHP Server create a folder on all Cluster Member

[root@sonic01 app]# mkdir rhpdir[root@sonic01 app]# chown oracle:oinstall rhpdir/

Add and start the RHP Server

/u01/app/12.1.0.2/grid/bin/srvctl add rhpserver -storage /u01/app/rhpdir -diskgroup DATA

/u01/app/12.1.0.2/grid/bin/srvctl start rhpserver

12.09.2015


RHP Setup – Add Image

Add Images to RHP Serveroracle@sonic01:~/ [+ASM1] rhpctl import image -image rdbms_12102_V0100 -path /u01/app/oracle/product/12.1.0.2 -imagetype ORACLEDBSOFTWARE -state TESTABLEsonic01: Creating a new ACFS file system for image "rdbms_12102_V0100" ...sonic01: Copying files...sonic01: Copying home contents...sonic01: Changing the home ownership to user oracle...sonic01: Transferring data to 1 nodessonic01: 10% completesonic01: 20% completesonic01: 30% completesonic01: 40% completesonic01: 50% completesonic01: 60% completesonic01: 70% completesonic01: 80% completesonic01: 90% completesonic01: 100% completesonic01: Changing the home ownership to user oracle...oracle@sonic01:~/ [+ASM1]

12.09.2015


RHP Setup

Query Images from RHP Serveroracle@sonic01:~/ [+ASM1] rhpctl query image -image rdbms_12102_V0100Image name: rdbms_12102_V0100Owner: oracle@sonic-clusterSite: sonic-clusterAccess control: USER:oracle@sonic-clusterAccess control: ROLE:GH_IMG_TESTABLEAccess control: ROLE:GH_IMG_PUBLISHAccess control: ROLE:GH_IMG_ADMINAccess control: ROLE:GH_IMG_VISIBILITYParent Image:Image Type: ORACLEDBSOFTWAREImage Version: 12.1.0.2.0Software home path: /u01/app/rhpdir/images/irdbms_12102_V0100811262/swhomeImage state: TESTABLEImage size: 5335MBImage platform: Linux_AMD64Interim patches installed:Complete: TRUE

12.09.2015


RHP Setup – RHP Client Setup

Add RHP Client for provisioning

HAVIP is needed !!![root@sonic01 ~]# /u01/app/12.1.0.2/grid/bin/srvctl add havip -id rhp / -address 192.168.56.202

On RHP Server create clientdata Filerhpctl add client -client floyd-cluster -toclientdata /home/oracle

An XML File will be generated named floyd-cluster.xml

Copy the clientdata to RHP Client

Add Client on RHP Clientsrvctl add rhpclient -clientdata /home/oracle/sonic01-cluster.xml

Start RHP Clientsrvctl startrhpclient -node sonic03

12.09.2015


12.09.2015

RHP Provisioning


RDBMS Provisioning with RHP

Two possibilities

NFS

rhpctl add workingcopy -workingcopy rdbms_12102_WC -image rdbms_12102_V0100 -storagetype NFS -path /u01/app/oracle/product/12.1.0.2_2 -oraclebase /u01/app/oracle

LOCAL

rhpctl add workingcopy -workingcopy rdbms_12102_WC3 -image rdbms_12102_V0100 -storagetype LOCAL -path /u01/app/oracle/product/12.1.0.2_3 -oraclebase /u01/app/oracle

12.09.2015


RDBMS Provisioning with RHP NFS oracle@sonic01:~/ [grinf12102_a] rhpctl query workingcopy -workingcopy rdbms_12102_WC6Working copy name: rdbms_12102_WC6Image name: rdbms_12102_V0100Owner: oracle@lennox-clusterSite: lennox-clusterAccess control: USER:oracle@lennox-clusterAccess control: ROLE:GH_WC_ADMINSoftware home path: /u01/app/oracle/product/12.1.0.2_6Oracle base: /u01/app/oracleStorage type: NFSConfigured databases: TVD99Interim patches installed: 20831110,,OPatch succeeded.Complete: TRUEoracle@sonic01:~/ [grinf12102_a]

LOCALoracle@sonic01:~/ [grinf12102_a] rhpctl query workingcopy -workingcopy rdbms_12102_WC1Working copy name: rdbms_12102_WC1Image name: rdbms_12102_V0100Owner: oracle@lennox-clusterSite: lennox-clusterAccess control: USER:oracle@lennox-clusterAccess control: ROLE:GH_WC_ADMINSoftware home path: /u01/app/oracle/product/12.1.0.2_1Oracle base: /u01/app/oracleStorage type: LOCALConfigured databases:Interim patches installed:Complete: TRUEoracle@sonic01:~/ [grinf12102_a]

12.09.2015


12.09.2015

RHP Management


RHP Mgmt – Queries Helpful to get an Overview on RHP Environment

• Information about RHP Serverrhpctl query server

• Involved Clients rhpctl query client [-client <cluster_name>]

• Available Imagesrhpctl query image [[-image <image_name> [-dbtemplate]] | [-imagetype <ORACLEDBSOFTWARE | SOFTWARE> [-dbversion <version>]] [-platform <platform>]]

• Available Workingcopiesrhpctl query workingcopy [-workingcopy <workingcopy_name> | [-image <image_name>] [-client <cluster_name>]]

• Information around Rolesrhpctl query role [-role <rolename>]

• Information about Image Seriesrhpctl query series [-series <series_name> | -image <image_name>]

12.09.2015


RHP Mgmt – Add Used to add Resouces to RHP Environment

Add Client = add Cluster rhpctl add client -client <cluster_name> -toclientdata <path> [...]

Add Rolerhpctl add role -role <role_name> -hasRoles <roles>

Add Imagerhpctl add image -image <image_name> -workingcopy <workingcopy_name> [...]

Add Image Seriesrhpctl add series -series <series_name> [-image <image_name>]

Add Workingcopiesrhpctl add workingcopy -workingcopy <workingcopy_name> -image <image_name> [...]

Add Databaserhpctl add database -workingcopy <workingcopy_name> -dbname <unique_db_name> [...]

12.09.2015


RHP Mgmt – Delete Used to delete Resouces from RHP Environment

Delete Client = delete Cluster rhpctl delete client -client <cluster_name> [-force]

Delete Image rhpctl delete image -image <imagename>

Delete Rolerhpctl delete role -role <role_name>

Delete Seriesrhpctl delete series -series <series_name> [-force]

Delete Userrhpctl delete user -user <user_name> [-client <cluster_name>]

Delete Workingcopyrhpctl delete workingcopy -workingcopy <workingcopy_name> [-force]

Delete Databaserhpctl delete database -workingcopy <workingcopy_name> -dbname <unique_db_name>

Delete Image from Seriesrhpctl deleteimage series -series <series_name> -image <image_name>

12.09.2015


RHP Mgmt – Miscellaneous Miscellaneous Commands in RHP Environment

Promote Image (e.g. Published = Production Mode, Testable = Dev Mode)rhpctl promote image -image <image_name> -state {TESTABLE|RESTRICTED|PUBLISHED}

Insert Image Seriesrhpctl insertimage series -series <series_name> -image <image_name> [-before <image_name>]

Delete Image in Seriesrhpctl deleteimage series -series <series_name> -image <image_name>

Allow or Disallow provisioning to specific client or rolerhpctl <allow or disallow> image -image <image_name> {-user <username> [-client <cluster_name>] | [...]}

Modify Client (e.g. enable, protect by pwd, etc.)rhpctl modify client -client <cluster_name> [...]

Grant or Revoke role to specific user, client etc.rhpctl <grant||revoke> role {-role <role_name> { -user <user_name> [...]}

Move Database to patched Homerhpctl move database {-sourcewc <workingcopy_name> | -sourcehome <oracle_home_path> [...]

Export or Import client Metadata from or to RHP Serverrhpctl <export||import> client -client <cluster_name> -clientdata <file_path>

12.09.2015


12.09.2015

Demo‘s


RHP Mgmt – Provisioning (add workingcopy) (1)

oracle@sonic03:~/ [grinf12102_a] rhpctl add workingcopy -workingcopy rdbms_12102_WC2 -image rdbms_12102_V0100 -storagetype NFS -path /u01/app/oracle/product/12.1.0.2_2 -oraclebase /u01/app/oraclesonic04.trivadis.com: Starting server-side action for 'add workingcopy'...sonic01: Adding storage for working copy ...sonic01: Storing metadata in repository for working copy "rdbms_12102_WC2" ...sonic01: Finding ACFS file system of the image "rdbms_12102_V0100" ...sonic01: Creating snapshot ...sonic01: Adding user "oracle" to ACFS file system "/dev/asm/ghvol418175-146"...sonic01: Adding export file system for image "rdbms_12102_WC2" ...sonic01: Starting export file system...sonic04.trivadis.com: Server-side action completed.sonic04.trivadis.com: Mounting file system...sonic04.trivadis.com: Changing the home ownership to user oracle and group oinstall...sonic04.trivadis.com: Starting clone operation...========================================sonic04.trivadis.com:./runInstaller -clone -waitForCompletion -force "ORACLE_HOME=/u01/app/oracle/product/12.1.0.2_2" "ORACLE_HOME_NAME="rdbms_12102_WC2"" "ORACLE_BASE="/u01/app/oracle"" "CLUSTER_NODES={sonic03,sonic04}" -cfs -local -silent -paramFile /u01/app/oracle/product/12.1.0.2_2/clone/clone_oraparam.iniStarting Oracle Universal Installer...

Checking Temp space: must be greater than 500 MB. Actual 22032 MB PassedChecking swap space: must be greater than 500 MB. Actual 7904 MB PassedPreparing to launch Oracle Universal Installer from /tmp/OraInstall2015-09-07_11-26-22AM. Please wait ...You can find the log of this install session at: /u01/app/oraInventory/logs/cloneActions2015-09-07_11-26-22AM.log.................................................. 5% Done................................................... 10% Done.

12.09.2015


RHP Mgmt – Provisioning (add workingcopy) (2)

./runInstaller -clone -waitForCompletion -force "ORACLE_HOME=/u01/app/oracle/product/12.1.0.2_2" "ORACLE_HOME_NAME="rdbms_12102_WC2"" "ORACLE_BASE="/u01/app/oracle"" "CLUSTER_NODES={sonic03,sonic04}" -cfs -local -silent -paramFile /u01/app/oracle/product/12.1.0.2_2/clone/clone_oraparam.iniStarting Oracle Universal Installer...

Checking Temp space: must be greater than 500 MB. Actual 22032 MB PassedChecking swap space: must be greater than 500 MB. Actual 7904 MB PassedPreparing to launch Oracle Universal Installer from /tmp/OraInstall2015-09-07_11-26-22AM. Please wait ...You can find the log of this install session at: /u01/app/oraInventory/logs/cloneActions2015-09-07_11-26-22AM.log.................................................. 5% Done................................................... 10% Done..................................................... 85% Done...........Copy files in progress.Copy files successful.

Link binaries in progress.Link binaries successful.

Setup files in progress.Setup files successful.

Setup Inventory in progress.Setup Inventory successful.Finish Setup successful.The cloning of rdbms_12102_WC2 was successful.

12.09.2015


RHP Mgmt – Provisioning (add workingcopy) (3)Setup Inventory in progress.Setup Inventory successful.Finish Setup successful.The cloning of rdbms_12102_WC2 was successful.Please check '/u01/app/oraInventory/logs/cloneActions2015-09-07_11-26-22AM.log' for more details.

Setup Oracle Base in progress.Setup Oracle Base successful................................................... 95% Done.

As a root user, execute the following script(s): 1. /u01/app/oracle/product/12.1.0.2_2/root.sh

Execute /u01/app/oracle/product/12.1.0.2_2/root.sh on the following nodes:[sonic04]

.................................................. 100% Done.sonic04.trivadis.com: Successfully executed clone operation.sonic04.trivadis.com: Executing root script on nodes [sonic03, sonic04].sonic04.trivadis.com: Executing Root scriptsonic04.trivadis.com: Executing Root scriptsonic04.trivadis.com: Successfully executed root script on nodes [sonic03, sonic04].sonic04.trivadis.com: Executing attach home operation...========================================sonic04.trivadis.com:Starting Oracle Universal Installer...

Checking swap space: must be greater than 500 MB. Actual 7618 MB PassedThe inventory pointer is located at /etc/oraInst.loc'AttachHome' was successful.sonic04.trivadis.com: Successfully executed attach home operation.

12.09.2015


RHP Mgmt – Provisioning (add workingcopy) How is the Oracle Home mounted ?oracle@sonic03:~/ [grinf12102_a] mount/dev/sda3 on / type ext4 (rw)proc on /proc type proc (rw)sysfs on /sys type sysfs (rw)devpts on /dev/pts type devpts (rw,gid=5,mode=620)tmpfs on /dev/shm type tmpfs (rw)/dev/sda1 on /boot type ext4 (rw)none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)nfsd on /proc/fs/nfsd type nfsd (rw)192.168.56.202:/u01/app/rhp_dir/images/irdbms_12102_V0100916973/.ACFS/snaps/wrdbms_12102_WC2/swhome on /u01/app/oracle/product/12.1.0.2_2 type nfs (rw,bg,hard,nointr,rsize=32768,wsize=32768,tcp,vers=3,timeo=600,actimeo=0,addr=192.168.56.202)

…and where is the Oracle Home mounted ?oracle@sonic03:~/ [grinf12102_a] df -hFilesystem Size Used Avail Use% Mounted on/dev/sda3 42G 23G 18G 57% /tmpfs 2.6G 157M 2.5G 6% /dev/shm/dev/sda1 194M 51M 134M 28% /boot192.168.56.202:/u01/app/rhp_dir/images/irdbms_12102_V0100916973/.ACFS/snaps/wrdbms_12102_WC2/swhome 10G 6.8G 3.3G 68% /u01/app/oracle/product/12.1.0.2_2oracle@sonic04:~/ [grinf12102_a] df -hFilesystem Size Used Avail Use% Mounted on/dev/sda3 42G 18G 22G 46% /tmpfs 2.6G 159M 2.4G 7% /dev/shm/dev/sda1 194M 51M 134M 28% /boot192.168.56.202:/u01/app/rhp_dir/images/irdbms_12102_V0100916973/.ACFS/snaps/wrdbms_12102_WC2/swhome 10G 6.8G 3.3G 68% /u01/app/oracle/product/12.1.0.2_2

12.09.2015


RHP Mgmt – Removing Workingcopies

Example of deleting NFS Workingcopy oracle@sonic03:/u01/app/oracle/product/ [grinf12102_a] rhpctl delete workingcopy -workingcopy rdbms_12102_WC2sonic01.trivadis.com: Stopping export file system ...sonic01.trivadis.com: Removing export file system ...sonic01.trivadis.com: Removing storage for working copy ...sonic01.trivadis.com: Deleting snapshot for working copy "rdbms_12102_WC2" with working copy path "/u01/app/rhpdir/images/irdbms_12102_V0100811262/.ACFS/snaps/wrdbms_12102_WC2/swhome" ...

On Client NFS Filesystem will be dismounted

Metadata in MGMTDB will be updated

12.09.2015


RHP Mgmt – Adding Databasesoracle@sonic03:~/ [grinf12102_a] rhpctl add database -workingcopy rdbms_12102_WC2 -dbname TVD99 -datafileDestination DATA -node sonic03,sonic04 –dbtype RACsonic04.trivadis.com: Starting database creation on node sonic03 ...========================================sonic04.trivadis.com:SYS_PASSWORD_PROMPTSYSTEM_PASSWORD_PROMPTCopying database files1% complete3% complete30% completeCreating and starting Oracle instance32% complete36% complete40% complete44% complete45% complete48% complete50% completeCreating cluster database views52% complete70% completeCompleting Database Creation73% complete76% complete85% complete94% complete100% completeLook at the log file "/u01/app/oracle/cfgtoollogs/dbca/TVD99/TVD99.log" for further details.oracle@sonic03:~/ [grinf12102_a]

12.09.2015


RHP Mgmt – Patch Database oracle@sonic03: [grinf12102_a] rhpctl move database -sourcewc rdbms_12102_WC5 -patchedwc rdbms_12102_WC6 -dbname tvd99sonic04.trivadis.com: Starting to move database from "/u01/app/oracle/product/12.1.0.2_5" to "/u01/app/oracle/product/12.1.0.2_6" on client clustersonic04.trivadis.com: Transferring data to 2 nodessonic04.trivadis.com: 100% completesonic04.trivadis.com: starting to move the following databases: "tvd99"========================================sonic04.trivadis.com:<HLP_ERES>0</HLP_ERES>========================================sonic04.trivadis.com:SQL Patching tool version 12.1.0.2.0 on Tue Sep 8 17:10:42 2015Copyright (c) 2015, Oracle. All rights reserved.Connecting to database...OKDetermining current state...doneAdding patches to installation queue and performing prereq checks...doneInstallation queue: Nothing to roll back The following patches will be applied: 20831110 (Database Patch Set Update : 12.1.0.2.4 (20831110))

Installing patches...Patch installation complete. Total patches installed: 1

Validating logfiles...doneSQL Patching tool complete on Tue Sep 8 17:14:20 2015sonic04.trivadis.com: Completed the 'move database' operation on client clusteroracle@sonic03: [grinf12102_a]

12.09.2015


12.09.2015

Conclusion


Rapid Home Provisiong - Conclusion

Simple to set up

nice built-in in Grid Infrastructure for GI Cloud environment

sufficient functionality for managing provisioning

All tested scenarios worked as expected , but…

Thin Documentation

DB_Home via NFS is no more available when RHP Servers are down

No GI_Home Provisioning

No Single Server Provisioning

MGMTDB will be required on RHP Server, where is a «blackbox»

In some case cleanup of Metadata on MGMTDB need manual intervention

12.09.2015


BASEL BERN BRUGG LAUSANNE ZÜRICH DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. HAMBURG MÜNCHEN STUTTGART WIEN

Fragen und Antworten...

2013 © Trivadis

Daniele Massimi

Senior Consultant

Tel. +41 58 459 50 92

[email protected]

12.09.2015

rhp like rapid home provisioning

Technology