Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
-- Andry Michaelidou Papa | IT Systems Administrator|Department of Computer Science| University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
Hi,
We currently run AD virtualised (Xenserver, but it shouldn't really matter). When running Windows on KVM make sure to use virtio (paravirt) devices for improved performance. Drivers here: https://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/bin/virtio-wi...
HTH Lucian
-- Sent from the Delta quadrant using Borg technology!
Nux! www.nux.ro
----- Original Message -----
From: "Andry Michaelidou" andrim@cs.ucy.ac.cy To: centos-virt@centos.org Sent: Wednesday, 15 October, 2014 09:54:30 Subject: [CentOS-virt] Domain Controllers virtualized KVM
Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
-- Andry Michaelidou Papa | IT Systems Administrator|Department of Computer Science| University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Hi,
On Wed, Oct 15, 2014 at 4:16 PM, Nux! nux@li.nux.ro wrote:
Hi,
We currently run AD virtualised (Xenserver, but it shouldn't really matter). When running Windows on KVM make sure to use virtio (paravirt) devices for improved performance. Drivers here:
https://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/bin/virtio-wi...
HTH Lucian
-- Sent from the Delta quadrant using Borg technology!
Nux! www.nux.ro
----- Original Message -----
From: "Andry Michaelidou" andrim@cs.ucy.ac.cy To: centos-virt@centos.org Sent: Wednesday, 15 October, 2014 09:54:30 Subject: [CentOS-virt] Domain Controllers virtualized KVM
Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
Yes, we have done this for PoC. For PoC, we have not stress tested that. But one thing for sure that it was not putting too much load on host OS.
If you are planning to run in production then keep a count on RAM, Disk I/O and CPU of that virtual machine.
-- Andry Michaelidou Papa | IT Systems Administrator|Department of Computer Science| University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Dear Lucian,
I am already running Windows OS and use virtio drivers, but not for AD. Did you implement PCI passthrough for the disk access?
-- Andry Michaelidou Papa | IT Systems Administrator|Department of Computer Science| University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
On 15/10/2014 13:46, Nux! wrote:
Hi,
We currently run AD virtualised (Xenserver, but it shouldn't really matter). When running Windows on KVM make sure to use virtio (paravirt) devices for improved performance. Drivers here: https://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/bin/virtio-wi...
HTH Lucian
-- Sent from the Delta quadrant using Borg technology!
Nux! www.nux.ro
----- Original Message -----
From: "Andry Michaelidou" andrim@cs.ucy.ac.cy To: centos-virt@centos.org Sent: Wednesday, 15 October, 2014 09:54:30 Subject: [CentOS-virt] Domain Controllers virtualized KVM Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
-- Andry Michaelidou Papa | IT Systems Administrator|Department of Computer Science| University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
I have not implemented anything, virtio is enough for our use case (< 100 machines).
HTH Lucian
-- Sent from the Delta quadrant using Borg technology!
Nux! www.nux.ro
----- Original Message -----
From: "Andry Michaelidou" andrim@cs.ucy.ac.cy To: "Discussion about the virtualization on CentOS" centos-virt@centos.org Sent: Wednesday, 15 October, 2014 12:07:49 Subject: Re: [CentOS-virt] Domain Controllers virtualized KVM
Dear Lucian,
I am already running Windows OS and use virtio drivers, but not for AD. Did you implement PCI passthrough for the disk access?
-- Andry Michaelidou Papa | IT Systems Administrator|Department of Computer Science| University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
On 15/10/2014 13:46, Nux! wrote:
Hi,
We currently run AD virtualised (Xenserver, but it shouldn't really matter). When running Windows on KVM make sure to use virtio (paravirt) devices for improved performance. Drivers here: https://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/bin/virtio-wi...
HTH Lucian
-- Sent from the Delta quadrant using Borg technology!
Nux! www.nux.ro
----- Original Message -----
From: "Andry Michaelidou" andrim@cs.ucy.ac.cy To: centos-virt@centos.org Sent: Wednesday, 15 October, 2014 09:54:30 Subject: [CentOS-virt] Domain Controllers virtualized KVM Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
-- Andry Michaelidou Papa | IT Systems Administrator|Department of Computer Science| University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Hi,
Our domain controller and our file/print server (Windows Server 2008 R2) are running as KVM guests under CentOS 6 since 2011 and we didn't have any issues with them. I use the virtio network and disk drivers on the virtual machines. The performance of the domain controller is very good (more than what we need in fact) but we have a small network, about 40 desktops and 30 laptops. I use local storage on the KVM host for the virtual disks, they are in QCOW2 format. (make sure to use metadata preallocation when you create the disks if you use QCOW2)
---- *Jean-François Juneau* // Administrateur réseau - System administrator // (819) 477-5353 #2222 AOF Service Alimentaire | www.aof.ca ---- N'imprimez pas ce message si ce n'est pas nécessaire
Le présent email peut contenir des renseignements confidentiels et ne s'adresse qu'au destinataire ou qu'à la destinataire dont le nom figure ci-dessus. Si ce email vous est parvenu par mégarde, veuillez le supprimer et nous en aviser aussitôt. Merci.
2014-10-15 4:54 GMT-04:00 Andry Michaelidou andrim@cs.ucy.ac.cy:
Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
-- Andry Michaelidou Papa | IT Systems Administrator |Department of Computer Science | University of Cyprus Tel: +357.22.892734 | Fax: +357.22.8927231 | http://www.cs.ucy.ac.cy
CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
On 15/10/14 09:54, Andry Michaelidou wrote:
Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
If you need to support restoring your Windows domain controller VM from a snapshot or you need to live migrate it then you need Server 2012 and a hypervisor that provides a VM generation ID.
I don't believe KVM supports this and it's only available in Xen in the upcoming Xen 4.5 release.
David
On Wed, Oct 15, 2014 at 10:04 AM, David Vrabel david.vrabel@citrix.com wrote:
On 15/10/14 09:54, Andry Michaelidou wrote:
Hello to you all!
We are implementing here at the University KVM virtualization for our servers and services and i was wondering if anyone virtualized domain cotrollers to KVM. Does anyone done this before? Any advice?
If you need to support restoring your Windows domain controller VM from a snapshot or you need to live migrate it then you need Server 2012 and a hypervisor that provides a VM generation ID.
I don't believe KVM supports this and it's only available in Xen in the upcoming Xen 4.5 release.
David
Samba also works fine in virtualization. I've been publishing tools to build Samba 4.1, capable of acting as a fairly drop-in replacement for Active Directory, for RHEL 6 (and thus compatible with CentOS and Scientific Linux 6) over at My toolkit is over at https://github.com/nkadel/samba4repo.
If you've worked your way up to CentOS 7, RHEL 7, etc., Samba 4.1.1 is built-in and much easier to update as needed.
Le 16/10/2014 14:21, Nico Kadel-Garcia a écrit :
If you've worked your way up to CentOS 7, RHEL 7, etc., Samba 4.1.1 is built-in and much easier to update as needed.
But at this time, it seems that the Samba version shipped with RHEL7 and CentOS7 does not support Active Directory role, because Samba uses Heimdal kerberos implementation, and Red Hat uses elsewhre MIT kerberos, so no AD/kerberos emulation in RHEL7 Samba 4 for now. http://lists.centos.org/pipermail/centos/2014-September/145613.html
Samba Team seems to work on a switch to use either Heimdal or MIT kerberos, and then it should be available in RHEL.
Alain
On Thu, Oct 16, 2014 at 8:37 AM, Alain Péan alain.pean@lpn.cnrs.fr wrote:
Le 16/10/2014 14:21, Nico Kadel-Garcia a écrit :
If you've worked your way up to CentOS 7, RHEL 7, etc., Samba 4.1.1 is built-in and much easier to update as needed.
But at this time, it seems that the Samba version shipped with RHEL7 and CentOS7 does not support Active Directory role, because Samba uses Heimdal kerberos implementation, and Red Hat uses elsewhre MIT kerberos, so no AD/kerberos emulation in RHEL7 Samba 4 for now. http://lists.centos.org/pipermail/centos/2014-September/145613.html
Samba Team seems to work on a switch to use either Heimdal or MIT kerberos, and then it should be available in RHEL.
Alain
I'd forgotten that was still going on for the upstream Samba. The one at Sernet, available at http://www.enterprisesamba.com/news/, may be more capable. I've not personally tried it on CentOS 7.
-
Alain Péan -
Andry Michaelidou -
Ashish Yadav -
David Vrabel -
Jean-Francois Juneau -
Nico Kadel-Garcia -
Nux!