VI3 Command Line Changes

1. VI3 Command Line Changes Jeremy van Doorn Systems Engineer Danny Claproth Channel Systems Engineer

2. Agenda • Major differences compared to ESX2 • Commands & configuration file changes • Network changes • Proc filesystem • Security • Troubleshooting

3. Major differences compared to ESX2 • Service console I/O more like a virtual machine • Virtual I/O devices for the service console • All storage and network devices dedicated to the VMkernel • Easier install: no more dividing physical devices between virtual machines and the service console

4. Major differences compared to ESX2 • Red Hat Enterprise Linux 3 • Follow security updates from Red Hat • Better compatibility with 3rd party agents and software • Service console resource needs independent of the number of virtual machines • Most vmx processes moved from service console to VMkernel • Service Console not a scalability bottleneck • More accurate virtual machine resource accounting • ESX host management • vmware-serverd has disappeared • vmware-hostd now does all the work together with vmware-vpxa

5. New Command-line utilities • esxcfg-init Perform initialization steps in the initrd. NOT TO BE RUN MANUALLY! • esxcfg-auth Authentication configuration • esxcfg-advcfg Sets advanced VMkernel options • esxcfg-mpath Multipathing configuration • esxcfg-resgrp Create, delete and list resource groups • esxcfg-rescan Rescan LUNs on SCSI device • esxcfg-vswitch Create and configure virtual switches and port groups • esxcfg-vswif Create and configure vswifs for the COS • esxcfg-vmknic Create and configure VMkernel nics • esxcfg-route Change default gateway for vmknics • esxcfg-nas Add, delete or manage NAS file systems • esxcfg-dumppart Set, activate, deactivate, list potential and current VMkernel dump partitions • esxcfg-boot Configure boot, including PCI allocation • esxcfg-firewall Configure Firewalling options.

6. Demo Screen some esxcfg commands

7. Configuration files changes • The /etc/vmware/esx.conf file is the new master configuration file for ESX Server • Use the esxcfg-* tools, Virtual Center, or Virtual Infrastructure Client to configure ESX!

8. Demo Screen /etc/vmware/esx.conf

9. Commands Changes • Removed or replaced scripts • vmkpcidivy • vmkbootcfg  esxcfg-boot • vmsnap.pl  vcbMounter • Vmsnap_all  vcbSnapAll • vmware-cmd • Added multiple snapshots

10. Networking • Only the new ESX style networking is available. • All networking (COS vswifs, VM virtual nics, VMkernel networking clients) will connect to the system through port groups on a virtual switch • Physical network devices will still get names in the form vmnicN, these names will no longer appear in VM configuration files (.vmx files). Instead, virtual nics are currently connected to the port group's ID • Virtual switches are connected to the pNics • Bond devices no longer exist. Nic teaming/bonding is accomplished by attaching multiple pNics to a single virtual switch • esxcfg-* programs are used for persistentcommand-line configuration • esxcfg-vswitch • esxcfg-vswif

11. Demo Screen esxcfg-vswitch esxcfg-vswif esxcfg-vmknic

12. /proc • /proc/vmware • Still here, but with some changes • /proc/vmware/net • /proc/vmware/swap • /proc/vmware/vm

13. Demo Screen /proc

14. Security • Service Console Security Level • High, medium, and low # esxcfg-firewall –q incoming# esxcfg-firewall –q outgoing • Use esxcfg-firewall to set level of security LOW # esxcfg-firewall --allowIncoming –-allowOutgoing MEDIUM # esxcfg-firewall –-blockIncoming --allowOutgoing HIGH # esxcfg-firewall --blockIncoming –blockOutgoing • SSH • SSH root login not permitted by default

15. Demo Screen esxcfg-firewall

16. Troubleshouting • Have a good look at the output of vm-support • ESX3 still has Service Console only mode • Can’t use esxcfg-* tools in this mode • Logfiles • /var/log/messages • VMkernel log • Use the esxcfg-* tools • /proc filesystem • Alt-f12

17. Demo Screen vmkernel logfile

18. Questions?