vCenter Node

The vCenter driver for OpenNebula enables the interaction with vCenter to control the life-cycle of vCenter resources such as Virtual Machines, Templates, Networks and VMDKs.

OpenNebula approach to vCenter interaction

OpenNebula consumes resources from vCenter, and with exceptions (VMs and VMDKs) does not create these resources, but rather offers mechanisms to import them into OpenNebula to be controlled.

Virtual Machines are deployed from VMware VM Templates that must exist previously in vCenter. There is a one-to-one relationship between each VMware VM Template and the equivalent OpenNebula Template. Users will then instantiate the OpenNebula Templates where you can easily build from any provisioning strategy (e.g. access control, quota...).

Networking is handled by creating Virtual Network representations of the vCenter networks. OpenNebula additionally can handle on top of these networks three types of Address Ranges: Ethernet, IPv4 and IPv6. This networking information can be passed to the VMs through the contextualization process.

Therefore there is no need to convert your current Virtual Machines or import/export them through any process; once ready just save them as VM Templates in vCenter, following this procedure.

There are different behavior of the vCenter resources when deleted in OpenNebula. The following resources are NOT deleted in vCenter when deleted in OpenNebula:

  • VM Templates
  • Networks
  • Datastores

The following resource are deleted in vCenter when deleted in OpenNebula:

  • Images
  • Virtual Machines

Note

After a VM Template is cloned and booted into a vCenter Cluster it can access VMware advanced features and it can be managed through the OpenNebula provisioning portal -to control the life-cycle, add/remove NICs, make snapshots- or through vCenter (e.g. to move the VM to another datastore or migrate it to another ESX). OpenNebula will poll vCenter to detect these changes and update its internal representation accordingly.

Considerations & Limitations

  • Unsupported Operations: The following operations are NOT supported on vCenter VMs managed by OpenNebula, although they can be performed through vCenter:
Operation Note
migrate VMs cannot be migrated between ESX clusters
disk snapshots Only system snapshots are available for vCenter VMs
  • No Security Groups: Firewall rules as defined in Security Groups cannot be enforced in vCenter VMs.
  • OpenNebula treats snapshots a tad different than VMware. OpenNebula assumes that they are independent, whereas VMware builds them incrementally. This means that OpenNebula will still present snapshots that are no longer valid if one of their parent snapshots are deleted, and thus revert operations applied upon them will fail.
  • No files in context: Passing entire files to VMs is not supported, but all the other CONTEXT sections will be honored.
  • Cluster names cannot contain spaces.
  • Image names cannot contain spaces.
  • Datastore names cannot contain spaces.
  • vCenter credential password cannot have more than 22 characters.
  • If you are running Sunstone using nginx/apache you will have to forward the following headers to be able to interact with vCenter, HTTP_X_VCENTER_USER, HTTP_X_VCENTER_PASSWORD and HTTP_X_VCENTER_HOST (or, alternatively, X_VCENTER_USER, X_VCENTER_PASSWORD and X_VCENTER_HOST). For example in nginx you have to add the following attrs to the server section of your nginx file: (underscores_in_headers on; proxy_pass_request_headers on;).
  • Attaching a new CDROM ISO will add a new (or change the existing) ISO to an already existing CDROM drive that needs to be present in the VM.

Configuring

The vCenter virtualization driver configuration file is located in /etc/one/vmm_exec/vmm_exec_vcenter.conf. This file is home for default values for OpenNebula VM templates.

It is generally a good idea to place defaults for the vCenter-specific attributes, that is, attributes mandatory in the vCenter driver that are not mandatory for other hypervisors. Non mandatory attributes for vCenter but specific to them are also recommended to have a default.

Importing vCenter VM Templates and running VMs

The onevcenter tool can be used to import existing VM templates from the ESX clusters:

onevcenter templates --vcenter <vcenter-host> --vuser <vcenter-username> --vpass <vcenter-password>

Connecting to vCenter: <vcenter-host>...done!

Looking for VM Templates...done!

Do you want to process datacenter Development [y/n]? y

  * VM Template found:
      - Name   : ttyTemplate
      - UUID   : 421649f3-92d4-49b0-8b3e-358abd18b7dc
      - Cluster: clusterA
    Import this VM template [y/n]? y
    OpenNebula template 4 created!

  * VM Template found:
      - Name   : Template test
      - UUID   : 4216d5af-7c51-914c-33af-1747667c1019
      - Cluster: clusterB
    Import this VM template [y/n]? y
    OpenNebula template 5 created!
onetemplate list
  ID USER            GROUP           NAME                                REGTIME
   4 oneadmin        oneadmin        ttyTemplate                  09/22 11:54:33
   5 oneadmin        oneadmin        Template test                09/22 11:54:35
onetemplate show 5
TEMPLATE 5 INFORMATION
ID             : 5
NAME           : Template test
USER           : oneadmin
GROUP          : oneadmin
REGISTER TIME  : 09/22 11:54:35

PERMISSIONS
OWNER          : um-
GROUP          : ---
OTHER          : ---

TEMPLATE CONTENTS
CPU="1"
MEMORY="512"
PUBLIC_CLOUD=[
  TYPE="vcenter",
  VM_TEMPLATE="4216d5af-7c51-914c-33af-1747667c1019" ]
SCHED_REQUIREMENTS="NAME=\"devel\""
VCPU="1"

After a vCenter VM Template is imported as a OpenNebula VM Template, it can be modified to change the capacity in terms of CPU and MEMORY, the name, permissions, etc. It can also be enriched to add:

Before using your OpenNebula cloud you may want to read about the vCenter specifics.

To import existing VMs, the ‘onehost importvm’ command can be used. VMs in running state can be imported, and also VMs defined in vCenter that are not in power.on state (this will import the VMs in OpenNebula as in the poweroff state).

onehost show 0
  HOST 0 INFORMATION
  ID                    : 0
  NAME                  : MyvCenterHost
  CLUSTER               : -
  [....]

  WILD VIRTUAL MACHINES

                    NAME                            IMPORT_ID  CPU     MEMORY
               RunningVM 4223cbb1-34a3-6a58-5ec7-a55db235ac64    1       1024
  [....]
onehost importvm 0 RunningVM
onevm list
ID USER     GROUP    NAME            STAT UCPU    UMEM HOST               TIME
 3 oneadmin oneadmin RunningVM       runn    0    590M MyvCenterHost  0d 01h02

After a Virtual Machine is imported, their life-cycle (including creation of snapshots) can be controlled through OpenNebula. The following operations cannot be performed on an imported VM:

  • Recover –recreate
  • Undeploy (and Undeploy –hard)
  • Migrate (and Migrate –live)
  • Stop

Running VMs with open VNC ports are imported with the ability to establish VNC connection to them via OpenNebula. To activate the VNC ports, you need to right click on the VM in vCenter while it is shut down and click on “Edit Settings”, and set the following remotedisplay.* settings:

  • remotedisplay.vnc.enabled must be set to TRUE.
  • remotedisplay.vnc.ip must be set to 0.0.0.0 (or alternatively, the IP of the OpenNebula front-end).
  • remotedisplay.vnc.port must be set to a available VNC port number.

Also, network management operations are present like the ability to attach/detach network interfaces, as well as capacity (CPU and MEMORY) resizing operations and VNC connections if the ports are opened before hand.

The same import mechanism is available graphically through Sunstone for hosts, networks, templates and running VMs.

vCenter hosts can be imported using the vCenter host create dialog.

../../_images/vcenter_create.png

Networks and VM Templates can be imported through the Import button in the Networks -> Virtual Networks and Templates -> VM menu entries respectively.

Note

The Import button will be available once the one_vcenter view is enabled in Sunstone. To do so, click on your user’s name (Sunstone’s top-right). A drop-down menu will be shown. Then click on views and finally click on admin_vcenter.

../../_images/vcenter_enable_sunstone_view.png

Running and Powered Off VMs can be imported through the WILDS tab in the Host info tab.

Note

Running VMS can only be imported after the vCenter host has been successfully acquired.

Resource Pool

OpenNebula can place VMs in different Resource Pools. There are two approaches to achieve this, fixed per Cluster basis or flexible per VM Template basis.

In the fixed per Cluster basis approach, the vCenter credentials that OpenNebula use can be confined into a Resource Pool, to allow only a fraction of the vCenter infrastructure to be used by OpenNebula users. The steps to confine OpenNebula users into a Resource Pool are:

  • Create a new vCenter user
  • Create a Resource Pool in vCenter and assign the subset of Datacenter hardware resources wanted to be exposed through OpenNebula
  • Give vCenter user Resource Pool Administration rights over the Resource Pool
  • Give vCenter user Resource Pool Administration (or equivalent) over the Datastores the VMs are going to be running on

Afterwards, these credentials can be used to add to OpenNebula the host representing the vCenter cluster. Add a new tag called VCENTER_RESOURCE_POOL to the host template representing the vCenter cluster (for instance, in the info tab of the host, or in the CLI), with the name of the Resource Pool.

../../_images/vcenter_rp.png

The second approach is more flexible in the sense that all Resource Pools defined in vCenter can be used, and the mechanism to select which one the VM is going to reside into can be defined using the attribute RESOURCE_POOL in the OpenNebula VM Template:

Nested Resource Pools can be represented using ‘/’. For instance, a Resource Pool “RPChild” nested under “RPAncestor” can be represented both in VCENTER_RESOURCE_POOL and RESOURCE_POOL attributes as “RPAncestor/RPChild”.

RESOURCE_POOL="RPAncestor/RPChild"
PUBLIC_CLOUD=[
  HOST="Cluster",
  TYPE="vcenter",
  VM_TEMPLATE="4223067b-ed9b-8f73-82ba-b1a98c3ff96e" ]