[APP] 配置 ISCSI 服務

阿新 • • 發佈：2019-02-18

需求：

配置system1 提供一個 ISCSI 服務，磁碟名為iqn.2014-08.com.example.group8:system1 ；服務埠為 3260 ；使用 iscsi_store 作為後端邏輯卷名稱，大小 3G ；此服務只能被 system2 訪問 ;

配置 system2 使其能連線在 system1 上提供的 iqn.2014-08.com.example.group8:system1； ISCSI 裝置在系統啟動期間自動載入；塊裝置 ISCSI 上包含一個大小 2100M 的分割槽，格式化為 ext4 ；此分割槽掛載在 /mnt/data 上，並自動掛載；

system1	192.168.1.151
system2	192.168.1.152
os	rhel 7.2

[[email protected] ~]# yum install targetcli -y #安裝iscsi服務端軟體包

[[email protected] ~]# systemctl enable target

#開機啟動此服務

ln -s'/usr/lib/systemd/system/target.service''/etc/systemd/system/multi-user.target.wants/target.service'

[[email protected]

~]#systemctl start target

[[email protected]~]# firewall-cmd --permanent--add-rich-rule'rule family="ipv4" source address="172.24.8.12/32" portport=3260 protocol=tcp accept'

#新增防火牆策略，允許system2訪問，訪問端口是3260

[[email protected] ~]#firewall-cmd --reload

success

[[email protected] ~]# lsblk #檢視磁碟容量

NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT

sda 8:0 0 20G 0 disk

├─sda1 8:1 0 9.8G 0 part /

└─sda2 8:2 0 3G 0 part [SWAP]

[[email protected] ~]#fdisk /dev/sda

Welcome to fdisk(util-linux 2.23.2).

Changes will remainin memory only, until you decide to write them.

Be careful beforeusing the write command.

Command (m forhelp): p

Disk /dev/sda: 21.5GB, 21474836480 bytes, 41943040 sectors

Units = sectors of 1* 512 = 512 bytes

Sector size(logical/physical): 512 bytes / 512 bytes

I/O size(minimum/optimal): 512 bytes / 512 bytes

Disk label type: dos

Disk identifier:0x000d9a10

Device Boot Start End Blocks Id System

/dev/sda1 * 2048 20482047 10240000 83 Linux

/dev/sda2 20482048 26626047 3072000 82 Linux swap / Solaris

Command (m forhelp): n

Partition type:

p primary (2 primary, 0 extended, 2 free)

e extended

Select (default p):p

Partition number(3,4, default 3):

First sector(26626048-41943039, default 26626048):

Using default value26626048

Last sector, +sectors or +size{K,M,G} (26626048-41943039, default41943039): +3G #分配一個3G的LVM空間

Partition 3 of typeLinux and of size 3 GiB is set

Command (m forhelp): p

Disk /dev/sda: 21.5GB, 21474836480 bytes, 41943040 sectors

Units = sectors of 1* 512 = 512 bytes

Sector size(logical/physical): 512 bytes / 512 bytes

I/O size(minimum/optimal): 512 bytes / 512 bytes

Disk label type: dos

Disk identifier:0x000d9a10

Device Boot Start End Blocks Id System

/dev/sda1 * 2048 20482047 10240000 83 Linux

/dev/sda2 20482048 26626047 3072000 82 Linux swap / Solaris

/dev/sda3 26626048 32917503 3145728 83 Linux

Command (m forhelp): t

Partition number(1-3, default 3): 3

Hex code (type L to list all codes): 8e #設定格式為lvm

Changed type ofpartition 'Linux' to 'Linux LVM'

Command (m forhelp): w

The partition tablehas been altered!

Calling ioctl() tore-read partition table.

WARNING: Re-readingthe partition table failed with error 16: Device or resource busy.

The kernel stilluses the old table. The new table will be used at

the next reboot orafter you run partprobe(8) or kpartx(8)

Syncing disks.

[[email protected] ~]# partprobe #格式化分割槽

[[email protected] ~]#lsblk

NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT

sda 8:0 0 20G 0 disk

├─sda1 8:1 0 9.8G 0 part /

├─sda2 8:2 0 3G 0 part [SWAP]

└─sda3 8:3 0 3G 0 part

[[email protected] ~]# pvcreate /dev/sda3 #建立PV

Physical volume "/dev/sda3"successfully created

[[email protected] ~]# vgcreate iscsi_vg /dev/sda3 #建立名為iscsi_vg 的卷組

Volume group "iscsi_vg"successfully created

[[email protected] ~]# lvcreate -n iscsi_store -l 100%VG iscsi_vg #建立名為iscsi_store且iscsi_vg卷組所有空間都分配給此邏輯卷

Logical volume "iscsi_store"created

[[email protected] ~]# targetcli #配置iscsi

targetcli shellversion 2.1.fb41

For help oncommands, type 'help'.

/> ls

o- /......................................................................................[...]

o- backstores...........................................................................[...]

| o- block............................................................... [StorageObjects: 0]

| o- fileio.............................................................. [StorageObjects: 0]

| o- pscsi............................................................... [StorageObjects: 0]

| o- ramdisk............................................................. [Storage Objects:0]

o- iscsi.........................................................................[Targets: 0]

o- loopback......................................................................[Targets: 0]

/> backstores/block create name=iscsi_storedev=/dev/iscsi_vg/iscsi_store #先將本地邏輯卷加入iscsi

/> cd iscsi

/iscsi> create iqn.2014-08.com.example.group8:system1 #定義一個iscsi裝置

Created targetiqn.2014-08.com.example.group8:system1.

Created TPG 1.

Global prefauto_add_default_portal=true

Created defaultportal listening on all IPs (0.0.0.0), port 3260.

/> cdiscsi/iqn.2014-08.com.example.group8:system1/tpg1/

/iscsi/iqn.20...:system1/tpg1> luns/ create/backstores/block/iscsi_store #將定義的iscsi裝置繫結本地邏輯卷

Created LUN 0.

/iscsi/iqn.20...:system1/tpg1> acls/ createiqn.2014-08.com.example.group8:system2 #允許名字為iqn.2014-08.com.example.group8:system2的客戶端訪問裝置

Created Node ACL foriqn.2014-08.com.example.group8:system2

Created mapped LUN0.

/iscsi/iqn.20...:system1/tpg1> portals/ create 172.24.8.11 3260 #定義iscsi 訪問埠

Using default IPport 3260

Could not create NetworkPortal in configFS #此報錯忽略，因某些版本已經建立了0.0.0.0的監聽

/iscsi/iqn.20...:system1/tpg1> set attribute authentication=0 #關閉賬號密碼驗證訪問控制

Parameterauthentication is now '0'.

/iscsi/iqn.20...:system1/tpg1> set attribute generate_node_acls=0 #使用自定義的acl實現訪問限制

Parametergenerate_node_acls is now '0'.

/iscsi/iqn.20...:system1/tpg1>cd /

/> saveconfig #儲存配置

Last 10 configssaved in /etc/target/backup.

Configuration savedto /etc/target/saveconfig.json

/> ls

o- /......................................................................................[...]

o- backstores...........................................................................[...]

| o- block............................................................... [StorageObjects: 1]

| | o- iscsi_store ..................[/dev/iscsi_vg/iscsi_store (3.0GiB) write-thru activated]

| o- fileio.............................................................. [StorageObjects: 0]

| o- pscsi............................................................... [StorageObjects: 0]

| o- ramdisk............................................................. [Storage Objects:0]

o- iscsi.........................................................................[Targets: 1]

| o- iqn.2014-08.com.example.group8:system1......................................... [TPGs: 1]

| o-tpg1 ............................................................ [no-gen-acls,no-auth]

| o- acls....................................................................... [ACLs:1]

| |o- iqn.2014-08.com.example.group8:system2 ............................ [MappedLUNs: 1]

| | o- mapped_lun0........................................ [lun0 block/iscsi_store (rw)]

| o- luns....................................................................... [LUNs:1]

| |o- lun0 ............................... [block/iscsi_store(/dev/iscsi_vg/iscsi_store)]

| o- portals................................................................. [Portals: 1]

| o- 0.0.0.0:3260.................................................................. [OK]

o- loopback......................................................................[Targets: 0]

/>exit

[[email protected] ~]# yum install iscsi-initiator-utils -y #安裝客戶端軟體包

[[email protected] ~]# vi /etc/iscsi/initiatorname.iscsi

InitiatorName=iqn.2014-08.com.example.group8:system2 #配置客戶端名稱

[[email protected] ~]# systemctl enable iscsi iscsid.service #服務開機啟動

ln -s'/usr/lib/systemd/system/iscsid.service''/etc/systemd/system/multi-user.target.wants/iscsid.service'

[[email protected] ~]# systemctl start iscsi iscsid.service #啟動服務

[[email protected] ~]# iscsiadm -m discovery -t st -p 172.24.8.11 #發現遠端裝置

172.24.8.11:3260,1iqn.2014-08.com.example.group8:system1

[[email protected] ~]# iscsiadm -m node -l #登陸

Logging in to[iface: default, target: iqn.2014-08.com.example.group8:system1, portal:172.24.8.11,3260] (multiple)

[[email protected] ~]#lsblk

NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT

sda 8:0 0 20G 0 disk

├─sda1 8:1 0 9.8G 0 part /

└─sda2 8:2 0 2G 0 part [SWAP]

sdb 8:16 0 3G 0 disk #多了一塊3G的盤

[[email protected] ~]# fdisk /dev/sdb #新創分割槽

Welcome to fdisk(util-linux 2.23.2).

Changes will remainin memory only, until you decide to write them.

Be careful beforeusing the write command.

Device does notcontain a recognized partition table

Building a new DOSdisklabel with disk identifier 0xc3c0951e.

Command (m forhelp): n

Partition type:

p primary (0 primary, 0 extended, 4 free)

e extended

Select (default p):p

Partition number(1-4, default 1):

First sector(8192-6283263, default 8192):

Using default value8192

Last sector, +sectors or +size{K,M,G} (8192-6283263, default6283263): +2100M #2100M

Partition 1 of typeLinux and of size 2.1 GiB is set

Command (m forhelp): w

The partition tablehas been altered!

Calling ioctl() tore-read partition table.

Syncing disks.

[[email protected] ~]# partprobe #核心重新讀取分割槽表

[[email protected] ~]# mkfs.ext4 /dev/sdb1 #在新建分割槽上格式化對應檔案系統

mke2fs 1.42.9(28-Dec-2013)

Filesystem label=

OS type: Linux

Block size=4096(log=2)

Fragment size=4096(log=2)

Stride=0 blocks,Stripe width=1024 blocks

134640 inodes,537600 blocks

26880 blocks (5.00%)reserved for the super user

First data block=0

Maximum filesystemblocks=551550976

17 block groups

32768 blocks pergroup, 32768 fragments per group

7920 inodes pergroup

Superblock backupsstored on blocks:

32768, 98304, 163840, 229376, 294912

Allocating grouptables: done

Writing inodetables: done

Creating journal(16384 blocks): done

Writing superblocksand filesystem accounting information: done

[[email protected] ~]# mkdir /mnt/data #建立掛載目錄

[[email protected] ~]# blkid #檢視裝置ID

/dev/sda1:UUID="182dc058-fb2e-45ec-8285-38f150033822" TYPE="xfs"

/dev/sda2:UUID="ded4e9e7-b20f-405f-b88b-99e26dd67bd5" TYPE="swap"

/dev/sdb1:UUID="92c2403d-1694-4e3f-90b2-f423ade6ea33" TYPE="ext4"

[[email protected] ~]# vi/etc/fstab

# /etc/fstab

# Created byanaconda on Sun Jul 24 22:29:04 2016

# Accessiblefilesystems, by reference, are maintained under '/dev/disk'

# See man pagesfstab(5), findfs(8), mount(8) and/or blkid(8) for more info

UUID=182dc058-fb2e-45ec-8285-38f150033822/ xfs defaults 1 1

UUID=ded4e9e7-b20f-405f-b88b-99e26dd67bd5swap swap defaults 0 0

//172.24.8.11/devops/mnt/dev cifs defaults,multiuser,username=silene,password=redhat,sec=ntlmssp 00

system1:/public/mnt/nfsmount nfs defaults,sec=sys 0 0

system1:/protected/mnt/nfssecure nfs4 defaults,sec=krb5p 0 0

UUID=92c2403d-1694-4e3f-90b2-f423ade6ea33 /mnt/data ext4defaults,_netdev 0 0 #新增此資訊

[[email protected] ~]#mount -a

[[email protected] ~]# df -h

Filesystem Size Used Avail Use% Mounted on

/dev/sda1 9.8G 3.1G 6.8G 32% /

devtmpfs 765M 0 765M 0% /dev

tmpfs 773M 0 773M 0% /dev/shm

tmpfs 773M 17M 757M 3% /run

tmpfs 773M 0 773M 0% /sys/fs/cgroup

//172.24.8.11/devops 9.8G 3.2G 6.7G 33% /mnt/dev

system1:/public 9.8G 3.2G 6.7G 33% /mnt/nfsmount

system1:/protected 9.8G 3.2G 6.7G 33% /mnt/nfssecure

/dev/sdb1 2.0G 6.2M 1.9G 1% /mnt/data

[APP] 配置 ISCSI 服務

[APP] 配置 ISCSI 服務

配置iSCSI服務

RHEL7 配置iscsi服務端並實現客戶端自動開機掛載

Ubuntu 配置ISCSI服務

配置iSCSI 服務端

[RHEL 7]ISCSI服務端及客戶端連接配置

Ceph分布式存儲學習筆記之ISCSI服務配置

002.iSCSI服務端配置

企業雲桌面-16-配置DHCP服務器-011-DC01

2-3-配置DHCP服務器實現動態地址分配

CloudStack+XenServer詳細部署方案交換機配置和服務器連線

Win10安裝Mongodb，並配置成服務

ArchLinux配置Samba服務與Windows共享文件

將本地文件傳遞到服務器--在雲服務器配置FTP服務

Linux服務器配置apache服務

iscsi服務器--網絡驅動器設備

jira安裝配置與服務腳本

配置 Apache 服務器禁止所有非法域名訪問自己的服務器

()centos6.8安裝配置ftp服務器

CentOS 6.4安裝配置LNMP服務器（Nginx+PHP+MySQL）

[APP] 配置 ISCSI 服務

相關推薦