The document discusses new features in Fedora 15 for desktop users, developers and sysadmins. For desktop users, Fedora 15 features GNOME 3, Btrfs filesystem, improved crash reporting and power management. For developers, it features improvements to programming tools and languages. For sysadmins, it highlights the new systemd service manager, FirewallD firewall management and BoxGrinder virtual appliance configuration tool. It also provides overviews and usage instructions for these new sysadmin tools.

1. amador@pahim.org
www.pahim.org
Fedora 15
Para sysadmins
Amador Pahim
Analista de Suporte, UCS

2. Fedora 15

3. 24/05
● Desktop users
● GNOME 3 ● Better power
● Btrfs filesystem management
● Indic typing booster
● LibreOffice
● Better crash
● Firefox 4
reporting ● KDE plasma
● Redesigned SELinux workspaces 4.6 and
troubleshooter Xfce 4.8
● Higher compression
● Sugar .92
in live images

4. 24/05
● Developers ● Sysadmins
● Robotics suite ● systemd
● GCC 4.6 ● FirewallD
● GDB 7.3 ● BoxGrinder
● Python 3.2 ● Spice integration
● OCalm 3.12 ● Device naming
● Rails 3.0.5 ● eCryptfs
● Maven 3 ● RPM 4.9.0

5. systemd

6. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

7. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

8. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

9. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

10. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

11. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

12. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

13. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

14. O que é?
systemd is a system and service manager for
Linux, compatible with SysV and LSB init scripts.
systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for
starting services, offers on-demand starting of
daemons, keeps track of processes using Linux
cgroups, supports snapshotting and restoring of
the system state, maintains mount and
automount points and implements an elaborate
transactional dependency-based service control
logic. It can work as a drop-in replacement for
sysvinit.

15. Paralelismo

16. Usando...
● Diretórios
/lib/systemd/system/
/etc/systemd/system/
● Arquivos de serviço
man -k systemd
● Ativando serviços
systemctl enable iptables.service
● Desativsndo serviços
systemctl disable iptables.service

17. Usando...
● Arquivo de exemplo
[Unit]
Description=Meu Serviço
[Service]
Type=forking
ExecStart=/etc/init.d/MeuServico start
ExecStop=/etc/init.d/MeuServico stop

18. Usando...
● Ligando serviços
systemctl start iptables.service
● Desligando serviços
systemctl stop iptables.service

19. FirewallD

20. O que é?
FirewallD é um serviço que oferece um
gerenciamento dinâmico das regras de firewall.

21. Preciso disso?
Modelo atual -> reinicio completo do firewall
Descarregar os módulos do kernel
Recarregar os módulos necessários
Perda do estado das conexões ativas.

22. Uso...
● Instalação
yum install firewalld
chkconfig firewalld on
service firewalld start
● Comandos
firewall-cmd --enable --service=http

23. Uso...
● Instalação
yum install firewalld
chkconfig firewalld on
service firewalld start
● Comandos
firewall-cmd --enable --service=http
firewall-cmd --list=service

24. Uso...
● Instalação
yum install firewalld
chkconfig firewalld on
service firewalld start
● Comandos
firewall-cmd --enable --service=http
firewall-cmd --list=service
firewall-cmd --enable --port=3306:tcp --timeout=60

25. Uso...
● Instalação
yum install firewalld
chkconfig firewalld on
service firewalld start
● Comandos
firewall-cmd --enable --service=http
firewall-cmd --list=service
firewall-cmd --enable --port=3306:tcp --timeout=60
firewall-cmd --list=port

26. Uso...
● Instalação
yum install firewalld
chkconfig firewalld on
service firewalld start
● Comandos
firewall-cmd --enable --service=http
firewall-cmd --list=service
firewall-cmd --enable --port=3306:tcp --timeout=60
firewall-cmd --list=port
firewall-cmd --disable --service=http

27. BoxGrinder

28. O que é?
Ferramenta para gerar imagens (appliances) de
máquinas virtuais, personalizando a instalação,
determinando que pacotes serão instalados e
executando tarefas pós instalação.
Gera o appliance sem intervenção, nos formatos
RAW, vmware e ec2, que podem ser usados pelo
KVM, VmWare e pelo serviço de cloud da
Amazon, respectivamente.

29. O que é?
Ferramenta para gerar imagens (appliances) de
máquinas virtuais, personalizando a instalação,
determinando que pacotes serão instalados e
executando tarefas pós instalação.
Gera o appliance sem intervenção, nos formatos
RAW, vmware e ec2, que podem ser usados pelo
KVM, VmWare e pelo serviço de cloud da
Amazon, respectivamente.

30. Componentes

31. Arquitetura

32. Suporte
● SO ● Entrega
● CentOS ● Amazon Simple Storage Service
● Scientific Linux (s3)
● RHEL
● Amazon Simple Storage Service
(ami)
● Fedora ● Amazon Simple Storage Service
● Formatos (cloudfront)
● RAW ● Elastic Block Storage (ebs)
● VMWare ● SSH File Transfer Protocol (sftp)
● ec2 ● ElasticHosts (elastichosts)
● VirtualBox ● Local file system (local)

33. Uso
● Instalacao
yum install rubygem-boxgrinder-build
● Configuração
mkdir ~/.boxgrinder
vi ~/.boxgrinder/config
plugins:
vmware:
type: personal
thin_disk: true
sftp:
path: /var
username: root
password: minhasenha
host: vmserver.domain.com

34. Uso
● Primeiro appliance
mkdir appliances
cd appliances
vi f15-httpd.appl

35. Uso
name: f15-httpd
summary: Appliance Fedora 15 com httpd.
os:
name: fedora
version: 15
hardware:
cpus: 2
memory: 256
partitions:
"/":
size: 2
packages:
- @core
- httpd
repos:
- name: fedora
baseurl: file:///repo/
post:
base:
- "chkconfig httpd on"

36. Uso
● Criando e entregando
boxgrinder-build f15-httpd.appl -p vmware -d sftp

37. Simple
Protocol for
Independent
Computing
Environments

38. O que é?
Uma olução completa e Open Source para
interação com desktops virtualizados.

39. Arquitetura
Guest
Spice Agent
Drivers
(QXL, VDIPort)
Client
Spice Server Spice protocol
(libspice) Spice Client
QEMU/KVM
Host

40. Uso
● qemu-kvm
qemu -vga qxl -spice port=5930,disable-ticketing
● libvirt
<video>
<model type='qxl' heads='1'/>
</video>
<graphics type='spice' port='5930' />

41. Uso
● virt-manager

42. :wq
amador@pahim.org
www.pahim.org
“... It's always more fun
To share with everyone
If you've got one
Here is something you can learn
You can still share
Just by taking turns ...”