Отказоустойчивый кластер виртуализации KVM на Astra Linux

Импортозамещение, уход вендоров, требования регуляторов, безопасность — причин переезжать с продуктов Microsoft и VMware сегодня хватает. Но важно, чтобы это было осознанное инженерное решение, а не реакция по принципу «лишь бы уйти». Тем более что далеко не всегда есть смысл переплачивать за продукт, который для вашей инфраструктуры избыточен. В статье разбираю, как собрать отказоустойчивую виртуализацию на базе Astra Linux: DRBD + GFS2 + Pacemaker против Ceph. Отказоустойчивый кластер KVM на Астре

https://habr.com/ru/articles/1001494/

#astra_linux #drbd9 #ceph #gfs2 #iscsi #pacemaker #импортозамещение #виртуализация #системное_администрирование #астра_линукс

I finally solved my zfs-on-iSCSI systemd quandry:

# cat /etc/systemd/system/zfs-iscsi-import.service
[Unit]
Description=Trigger ZFS import after iSCSI availability
After=cloud-init.target
Wants=cloud-init.target

[Service]
Type=oneshot
ExecStartPre=/sbin/modprobe zfs
ExecStart=/bin/systemctl start zfs-import.target
RemainAfterExit=yes

[Install]
WantedBy=default.target

#linux #zfs #iscsi

For the longest time #Backblaze hasn't supported the backup of networked drives, but has supported #iSCSI. Sadly, and annoyingly quietly, v9.2.2.878 of the client killed iSCSI support, so my array is now blocked.

I'd have liked some notice, but okay. The new setup (local drives, iSCSI as local backup) is now working with much better small file handling, and thankfully the data deduplication worked perfectly, so no re-upload required.

https://www.backblaze.com/computer-backup/docs/backup-client-release-notes-mac#:~:text=Because%20Backblaze%20does%20not%20back%20up%20network%20drives%2C%20the%20Backup%20Client%20now%20prevents%20backups%20from%20common%20NAS%20filesystems%20such%20as%20SMBFS%2C%20NFS%2C%20FTPFS%2C%20SSHFS%2C%20iSCSI%2C%20and%20others

Hey fedi, is LUKS over iSCSI over the web a good idea?

Usecase would be personal storage for mostly media.
Exclusive mount is not really an issue, but still feels kinda meh.

My main concern is: does this work good enough in practice over not super-reliable links?
secondary: does it perform well enough?

Are there other setups with data encrypted on client that do not statically leak a ton of metadata like file structure?

#softwareRecommendation #e2ee #luks #iscsi

What is NVMe Storage?

https://www.simplyblock.io/blog/what-is-nvme-storage/

NASをKubernetesの仲間にした話 〜iSCSIでつなぐ永続ボリューム〜
https://qiita.com/g21240349d/items/ccd94b0b9936fe163770?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #nginx #Ubuntu #NAS #kubernetes #iSCSI

I hate manually configuring #iSCSI via #targetcli - every time a backstore isn't present, it just gets dropped and i need to restore the whole config:

 gunzip /etc/rtslib-fb-target/backup/saveconfig-20250911-09:52:13-json.gz
 cp /etc/rtslib-fb-target/backup/saveconfig-20250911-09:52:13-json /etc/rtslib-fb-target/saveconfig.json
 targetcli clearconfig confirm=True
 targetcli restoreconfig

for some reason, i don't need to "systemctl restart"

#HomeLab