2. Uporaba odprtokodnih rešitev na platformi Azure
Matjaž Perpar
Cloud Solution Architect
Microsoft
Rok Žibert
Koon IT

3. Agenda Azure, Linux and Open Source
9/29/2017 5:26 PM
Agenda
Azure, Linux and Open Source
Deploying & Managing a Linux VM in Azure
Securing VM in Azure environment
Docker and containers
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Microsoft + Open Source Momentum
9/29/2017
Microsoft + Open Source Momentum
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Microsoft + Open Source Momentum
Microsoft: the Open Source Company
“This is not your dad’s Microsoft”
Steven J. Vaughan-Nichols
Dead and buried: Microsoft's holy war on open-source software
“Years ago, Microsoft's CEO described open source as a cancer. Times have changed. Just ask 22-year Redmond veteran and open-source proponent Mark Hill.”
Charles Cooper
Redmond top man Satya Nadella: 'Microsoft LOVES Linux‘
Neil McAllister

6. Our open source journey

7. Azure is an open cloud DevOps Management Applications App Frameworks
Clients
DevOps
Management
PaaS &
DevOps
Applications
App Frameworks
& Tools
Databases &
Middleware
Infrastructure

8. One Marketing Template
9/29/2017
Linux in Azure
PaaS
on IaaS
IaaS
Virtual
Machines
VM Extensions +
Containers VM
Scale Sets
PaaS on IaaS
Container
Services (in preview)
Bring your Linux VM
Automate everything
Elastic Declarative
Stateless & Stateful
Ultimate
Control
Cost &
Agility
All running in your Linux OS, leveraging the skills and tools you have, in Azure’s hyperscale platform
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Linux in Azure Azure-Endorsed Linux Images
Canonical
Ubuntu
oming in February!
SUSE Linux
Enterprise Server Premium
OpenLogic
CentOS-based
openSUSE
SUSE Linux
Enterprise Server
Oracle
Linux
CoreOS
Debian
Red Hat
Enterprise Linux
Limited support provided by Microsoft for Linux issues related to installation & configuration and performance & networking
Premium Support provided by Linux distribution vendor

10. Other Linux and FreeBSD Images in Azure
9/29/2017
Other Linux and FreeBSD Images in Azure
Azure Marketplace
Partner created and uploaded images
Validated
May be complete solution stacks or “vanilla” OS images
+ many more!
VM Depot
Community created images made available through the VM Depot website for download, or browse/upload directly from Azure portal
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Different options for Linux VM needs
Docker Hub
integration
Marketplace
Endorsed +
partner stacks +
community
Discrete containers
Prepare VM image in your datacenter
Custom VHD
Pre-existing images
Purpose built
Virtual Box
KVM
VMware
Hyper-V
+ Azure CLI
PowerShell

12. Demo
Deploying & Managing a Linux VM in Azure

13. Custom Linux Image Virtualize your OS
9/29/2017 5:26 PM
Custom Linux Image
Virtualize your OS
on Hyper-V, Vmware, KVM, VirtualBox,..
Install the Microsoft Azure Linux Agent
Configure your VM for Azure
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Azure Linux Agent What Is It? What It Does
9/29/2017
Azure Linux Agent
What Is It?
Manages interaction between the VM and the Azure fabric controller
Released under the Apache 2.0 license, included in most Linux distributions as a RPM or Deb package and on GitHub
Requires Python 2.6+
Required for any Linux or FreeBSD VM to run in Azure
What It Does
VM provisioning (host name, user account, SSH keys, disk mgmt.)
Manages networking (routes for DHCP servers, networking interface name)
Kernel functions (virtual NUMA, Hyper-V entropy & SCSI timeouts)
Redirects console to the serial port for debugging
VM extension handler
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Installing the Azure Linux Agent
9/29/2017
Installing the Azure Linux Agent
Available either included in Azure-endorsed Linux distributions or directly from Github
Installation using a RPM or DEB package is preferred
Manual installation by copying waagent to /usr/sbin/waagent and running:
# sudo chmod 755 /usr/sbin/waagent
# /usr/sbin/waagent -install -verbose
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Prepare Your VM for Azure
9/29/2017
Prepare Your VM for Azure
Quick summary – there are different steps for different Linux distros
Convert VHDX to VHD in Hyper-V Manager
Use standard partitions rather than LVM
Do not create swap space on the OS disk
Ensure SSH server is installed & configured to start on boot
Deprovision the VM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Login to Azure Subscription
Adds the Azure account to Azure Powershell
CLI
Add-AzureAccount
# azure login

18. Configure Your Storage Account
9/29/2017
Configure Your Storage Account
Create storage account
Create storage container
# azure storage account create
--type LRS
--location "North Europe"
--label NTK2016demo ntk2016demo1
# azure storage container create
--container osdisks -p Off -a ntk2016demo1
-k “secret key"
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Upload custom VHD Copy VHD to Azure Blob storage Create VM Image
9/29/2017
Upload custom VHD
Copy VHD to Azure Blob storage
Create VM Image
AzCopy /Source:D:\
/Dest: /destkey: secret key /Pattern:Debian_8_4_v2.vhd /BlobType:Page
# azure vm image create Debian-8-4-v2-Demo
--blob-url
--os Linux D:\Debian_8_4_v2.vhd
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Create Virtual Network
9/29/2017
Create Virtual Network
Create Virtual network
# azure network vnet create --vnet NTK2016DemoNet1 -e i 8 -n Frontend -p r 24 -l "North Europe"
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Create cloud service and deploy VM
9/29/2017
Create cloud service and deploy VM
Create cloud service
Deploy VM
# azure service create --serviceName NTK2016CS
--label "NTK2016 Cloud Service"
--location "North Europe"
# azure vm create NTK2016DemoVM1 Debian-8-4-v2-Demo
-z "A10"
-w "NTK2016DemoNet1" -b "Frontend"
-e -l "North Europe" -g admin -p “password"
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Layered Security, Protection, and Isolation
Cloud Services
& Virtual Machines
Virtual
Network
Isolation
Internet VM
Firewall
DDoS
Protection
NSG
ACLs

23. Network Security Groups
Segment network to meet security needs
5 tuple ACLs on both directions
Can protect Internet and internal traffic
Enables DMZ subnets
Associated to subnets/VMs and now NICs
ACLs can be updated independent of VMs
On Premises 10.0/16
Internet
ExpressRoute and VPNs √ √ √ √
VPN GW
Backend
10.3/16
Mid-tier
10.2/16
Frontend
10.1/16
Virtual Network

24. Securing VM – create endpoints
9/29/2017
Securing VM – create endpoints
Create endpoints
Securing network with Network Security Groups
# azure vm endpoint create NTK2016DemoVM1 80
-n HTTP_80 -k 80 -o tcp
-n HTTP_8080 -k o tcp
# azure network nsg create -n NTK2016DemoNSG1
-b DemoNSG -l "North Europe"
# azure network nsg subnet add -a NTK2016DemoNSG1
-n NTK2016DemoNet1 -n FrontEnd
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Securing VM with Network Security Groups
9/29/2017
Securing VM with Network Security Groups
# azure network nsg rule create -n Allow_SSH
-a NTK2016DemoNSG1 -f * -o * -e u 22
-p tcp -r inbound -c allow -y 100
# azure network nsg rule create -n Allow_HTTP_80
-a NTK2016DemoNSG1 -f * -o * -e u 80
-p tcp -r inbound -c allow -y 101
# azure network nsg rule create -n Allow_HTTP_8080
-a NTK2016DemoNSG1 -f * -o * -e u p tcp -r inbound -c allow -y 102
# azure network nsg rule list NTK2016DemoNSG1
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Setting up Wordpress Update URL Update Magento
9/29/2017
Setting up Wordpress
Update URL
Update Magento
# wp option update home '
# wp option update siteurl '
# update core_config_data set value=' where config_id = '1519';
# update core_config_data set value=' where config_id = '1520';
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Attaching new empty disk to VM
azure vm disk attach-new NTK2016DemoVM c None

28. About VM Extensions VM Extensions Support for Linux
9/29/2017
About VM Extensions
VM Extensions
VM Extensions are software components that extend the functionality of the virtual machine
Multiple extensions can be added, updated or removed
Installed and managed by the Azure Linux Agent version or greater
Support for Linux
All Azure-Endorsed Linux images in the Azure Marketplace have support for VM Extensions
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Microsoft VM Extensions for Linux
Current VM Extensions
Coming Soon…
CustomScript
Automatically runs a specified script or a set of scripts on a running Virtual Machine
Not limited to a specific scripting language
VMAccess
Enables you to reset Secure Shell (SSH) settings on a Virtual Machine and to reset the password for the account that has administrator or sudo authority.
OSPatching
Automate VM OS updates with customized configurations
Specify how often and when to install OS patches Specify what patches to install Configure the reboot behavior after updates
Monitoring
Enables the user to collect monitoring and diagnostic data for debugging, trouble shooting, measuring performance, monitoring resource usage, traffic analysis and capacity planning and auditing. 
VMSnapshot
VM image backup utilizing Azure Backup for state restoration of VM images in Azure
VMEncryption
Automate encryption of storage volumes
Persistent reconnection & authentication of encrypted volumes after VM reboot

30. Partner VM Extensions for Linux
9/29/2017
Partner VM Extensions for Linux
Chef
Linux and Windows extension developed by Chef
Provision your virtual machines with Chef Client and register them with your Chef Server
CloudLink SecureVM
CloudLink SecureVM provides pre-boot authorization, image integrity validation and encrypts boot volume and data volumes with a centralized management approach
Support for CentOS, Ubuntu SUSE Enterprise Linux and openSUSE VMs
Docker
Deploy Docker onto an Azure virtual machine via a VM extension
Updates to CLI tools to easily deploy Docker-enabled VMs
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

31. E-commerce – reference architecture

32. Containers Nothing to do with Azure Storage Containers
Docker – open-source project realizing concept of software containers
Based on Linux Containers, de-facto standard
Docker Inc. – company that popularized and drives the dev
Open Container Project (OCP) – cross- vendor/OS standard
Announced at DockerCon, includes Microsoft, Docker, CoreOS, Google, Amazon, others

33. Microsoft Build 2016
9/29/2017 5:26 PM
App A
App A’
App B
Containers are isolated, but share OS and, where appropriate, bins/libraries
Bins/Libs
Bins/Libs
Bins/Libs
Bins/Libs
Guest OS
Guest OS
Guest OS
App A
App A’
App B
App B’
App B
App B’
App B
App B’
Bins/Libs
Bins/Libs
Hypervisor
Docker Engine
Host OS
Host OS
Server
Server
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. Demo
Docker

36. Docker Update URL Start docker image Test it.. # docker ps
9/29/2017
Docker
Update URL
Start docker image
Test it..
# docker ps
# docker run -d -p 80:80 tutum/hello-world
# sudo docker port d35bf1374e88 80
# lynx localhost
# curl localhost
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

40. Azure Container Services
Build 2015
9/29/2017
Azure Container Services
App1
App2
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. Azure Container Services
Service Tooling
Container Tooling
Layer
Supported Technologies
Configuration as Code
ARM, Dockerfile, Docker Compose, Marathon.json
Host cluster management
VM Scale Sets
Container orchestration
Docker Swarm, Chronos, Marathon, Apache Mesos
Monitoring
OMS, Statsd
ARM Template
Containers
Container Services (1st party, 3rd party)
Windows Server
Linux
VMs and VM Scale Sets
Azure Stack
Azure

42. Different options for Linux VM needs
Docker Hub
integration
Marketplace
Endorsed +
partner stacks +
community
Discrete containers
Prepare VM image in your datacenter
Custom VHD
Pre-existing images
Purpose built
Virtual Box
KVM
VMware
Hyper-V
+ Azure CLI
PowerShell

43. Izpolnite anketo! Vam je bilo predavanje všeč?
Ste se naučili kaj novega?
Vaše mnenje nam veliko pomeni!
Da bo NT konferenca prihodnje leto še boljša, vas prosimo, da izpolnite anketo o zadovoljstvu, ki jo najdete v svojem NTK spletnem profilu.

44. 9/29/2017 5:26 PM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.