This workshop will feature 10-minute presentations by community members describing aspects related to their use of OpenNebula:
- Research projects
- User experiences
- Case studies
- Best practices
- Any other topics that you feel are relevant to users, administrators, and architects
The current agenda is:
"A case study: how we move a traditional infrastructure to a service oriented one with OpenNebula", Alberto Zuin, Colossusbets LTD/Devuan Linux
In Colossusbets we moved a traditional infrastructure made with traditional paradigms to a service oriented one, with a mix of virtualisation technologies like KVM, Linux Containers and Docker. I'll explain the purpose behind the minimalist logic used by OpenNebula and Devuan Linux, the two component at the root of our new infrastructure.
"ONEDock: Docker as a hypervisor in ONE", Carlos de Alfonso, Universidad Politecnica de Valencia
Containers have recently grown in interest in the virtualization community because they are a lightweight alternative to full machine virtualization. Containers offer an operating system level virtualization, where the kernel controls the isolation of the different containers. That means less isolation than virtual machines, but also less overhead in the system because they share parts of the kernel. The most important developments in the Open Source community are LXC and Docker. ONEDock is a set of extensions for OpenNebula to use Docker as a hypervisor in ONE, to provide containers as if they were lightweight Virtual Machines (VM). The underlying idea is that when OpenNebula is asked for a VM, a Docker container will be deployed instead. In the context of OpenNebula, it is managed as if it was a VM, and the user will be able to use IP addresses to access to the container. In this session we will learn about the integration of Docker and ONE, wich kind of the available features in ONE have been incorporated to the Docker containers, and how the operations on VMs are translated to the containers in the context of ONE. Moreover we will discuss some technical details and technical decissions taken in ONEDock, and how the other operations (that have not been implemented yet) will be integrated in ONEDock.
"LAB ONE - how to actually get Vagrant running on OpenNebula?", Florian Heigl, Freelancer Consultant
Do you remember Vagrant? It was that last hipster thing before Docker turned into the most recent hipster thing! It's also still really helpful for software evaluations or lab environments. Normally, it works with VirtualBox on your laptop, but this approach can be too limiting. Even running just 10 VMs becomes a stretch on a laptop. It burns through your battery, SSD lifetime, disk space and threatens how many dozen browser tabs you can open... Enter the Vagrant OpenNebula providers! You can actually control Vagrant on your workstation but have the VMs running on your cloud. There are multiple ways to do that, and also limitations. In the workshop, we'll look at what is possible and how you can best benefit from - oh right! - your cloud!
"Icinga2 - APIFY them all", Achim Ledermüller, Netways GmbH
APIs build the basement for an easy integration of your tool stack. Fora simple and modern way to configure your monitoring system, Icinga2offers a secure REST interface to configure the objects and services tomonitor. After a short introduction to Icinga2 i will show a example howto combine OpenNebula and Icinga2 using VM hooks and the Icinga2 API.
"OpenNebula Sunstone integration with FreeIPA using Single Sign On", Alvaro Simon, UGent
FreeIPA is an integrated Identity and Authentication solution for Linux and Unix environments. It provides a centralized authentication and authorization information and it also stores user data information such as user names, groups, hosts and many different objects to manage the security aspects of a network of computers. FreeIPA uses different technologies, but the core of the authentication system is based on MIT Kerberos technology. Thanks to this technology the authentication works on the basis of tickets to allow users or nodes communicating over a non-secure network to prove their identity to get access to different services. In this talk we will show how it is possible to integrate Sunstone authentication with the FreeIPA SSO thanks to the new Sunstone remote authentication plugin provided by OpenNebula. We will describe how to setup Sunstone in an easy way to include Kerberos authentication using Apache and Phusion Passenger module. This configuration approach also changes the security mechanism used by libvirt to establish the connection between hypervisors. We will explain how it is possible, using the host keytabs generated by FreeIPA, to improve the security between the hypervisors when we have to migrate virtual machines in an insecure network.
