Windows Server 2019 Module 5 Hyper-V Virtualization Whole Set

What is the job of the orchestrator

to automate and manage larger numbers of container and controls how the containers interact with one another

What are the task of the orchestrator

Scheduling

Affinity/Anti-affinity

Health Monitoring

Failover

Scaling

Networking

Service discovery

Coordinated application upgrades

Scheduling Task does what

Finds a suitable machine on which to run the container when given a container image and a resource request.

Affinity/Anti-affinity task does what

Specifies whether a set of containers should run near each other for performance or far apart for availability.

Health monitoring task does what

Watches for container failures and automatically reschedules them

Failover task does what

Keeps track of what’s running on each machine and reschedules containers from failed machines to health nodes

Scailing task does what

Manually or automatically adds or removes container instances to match demand

Networking task does what

Provides and overlay network that coordinates container to communicate across multiple host machines

Service discovery task does what

Enables container to locate each other automatically even as they move between host machines and change IP addresses

Coordinated application upgrades does what

Manages container upgrades to avoid application downtime and enables rollback if something goes wrong

What are some common orchestration tools

Kubernetes

Docker Swarm

Apache Mesos

What does the Kubernetes tool do

An open-source platform for deploying and managing container at scale

What is considered the main Orchestration tool

Kubernetes also known as K8s

What is a simpler and less complex orchestration tool

Docker Swarm

Docker bundles what with docker desktop

Docker Swarm and Kubernetes

Apache Mesos

Open source software that can provide management of a container cluster. It requires additional add=on framework to support full orchestration task

Kubernetes is based upon

common cluster technology

a centralized software in a cluster that manages the clusters resources

common cluster technology

The clusters centrilized software is also known as

master or control plane

Kubernetes cluster roles

At least one Master/Control plane: Runs a number of services used to manage the orchestration in Kubernetes. Currently, only the Linux operating system is supported as the host operating system for the Kubernetes master. Components that make up the master include kube-api-server, controller, and scheduler services.

One or more Linux-based node instances: Worker nodes that are based upon the Linux operating system. Includes components called the Kubelet, Kube-proxy, and the Container runtime services.

One or more Windows-based node instances: Worker nodes that are based upon Windows Server 2019. Includes components called the Kubelet, Kube-proxy, and the Container runtime services.

A typicial Kubernetes workload is made up of

several Docker-based containersthat are managed and orchestrated by Kubernetes.

What is a pod

a group of one or more container to represent a single instance of an application

What does a pod contain

shared storage and network configuration, and a specification on how to run its packaged containers

Steps to create a Kubernetes orchestra

Create a Kubernetes master

Configure a network solution

Join workers nodes

Manage Kubernetes resources

To create a Kubernetes master use

kubeadm tool

To configure the network solution

The network solution typically used to create routable cluster subnets is a Linux-based Container Network Interface (CNI) plugin called Flannel. Other possible solutions include configuring a smart top-of-rack (ToR) switch or using Open vSwitch (OvS) or Open Virtual Network (OVN) technology.

What command do you use to deploy and manage Kubernetes pods

Kubectl

By using Windows Containers you can

package, provision, and run applications across diverse environments located on-premises or in the cloud.

WIndows Container provide a

complete lightweight and isolated operating system-level virtualization environment to make apps easier to develop, deploy, and manage.

The difference between VMs and Conatiners

VMs simulate a complete computer, while Containers build upon the host os kernel and contain an isolated user mode process for the packaged app.

Differences between the two

What are some times you should use a VM

Need to manage a number of operating systems.

Need to run an app that requires all the resources and services of a full operating system, such as a graphical user interface.

Need an environment that preserves changes and is persistent.

Require full isolation and security.

What are the times you should use a Container

Need a lightweight application package that quickly starts.

Need to deploy multiple instances of a single app.

Need to run an app or process that is nonpersistent on an on-demand basis.

Need to deploy an app that can run on any underlying infrastructure.

What are the types of isolation modes for containers

Process Isolation

Hyper-V Isolation

Process Isolation is

Considered the Traditional Isolation mode for containers

enables multiple container instances to run concurrently on a host

Hyper-V Isolation

In this mode each container runs inside a highly optimized virtual machine. The advantage of this mode is that each container gets its own kernel which causes it to be more stable and secure. This method also adds a hardware isolation level between each container.

Windows containers running in windows server default to using which type of isolation method

Process isolation

Windows Containers running on Windows 10 pro and Enterprise default to using which isolation mode

Hyper-V

What is Docker

a collection of open source tools, solutions, and cloud-based services that provide a common model for packaging (or containerizing) app code into a standardized unit for software development. This Standardized unit is known as a Docker Container.

What is a Docker Container

software wrapped in a complete file system that includes everything it needs to run: code, runtime, system tools, and system libraries, or anything you can install on a server.

The Docker Engine is a

lightweight runtime environment that runs on Linux, macOS, or Windows

What can the Docker Client component be used as

A command line interface(CLI)

Docker Containers can run on

Any computer, infrastructure, and any cloud

To install docker on Windows server you use a

OneGet provider PowerShell chapter published by Microsoft called the DockerMicrosoftProvider.

To use Hyper-V Isolation on windows server you must also install

The Hyper-V role and if it will be installed on a virtual machine it must also have the role

Docker Engine

lightweight runtime environment for building and running Docker containers

Docker Compose

This tool enables you to define a multiple-container app together with any dependencies so that you can run it with a single command. Docker Compose lets you specify the images your app will use with any necessary volumes or networks.

Docker CLI client

This tool includes a command shell that is preconfigured as a Docker command-line environment used to interface with the Docker Engine

Kubernetes

This tool is used to manage and orchestrate containerized applications across multiple hosts. It helps to deploy, maintain, and scale applications.

Credential helper

Used to help safely store Docker login credentials

What is a Docker Hub

a web-based online library service in which you can Register, store, and manage your own Docker images in an online repository and share them with others.

A container base image includes

The user mode operating system files needed to support the provisioned application.

Any runtime files or dependencies required by the application.

Any other miscellaneous configuration files needed by the app to provision and run properly.

Microsoft provides the following base images as a starting point to build your own container image

Windows Server Core

Nano Server

Windows

Windows Internet of Things(IoT) Core

What is the Windows Server Core option

An image that contains a subset of the Windows Server application programming interfaces (APIs) such as the full .NET framework. It also includes most server roles.

What is the Nano Server option

The smallest Windows Server image, with support for the .NET Core APIs and some server roles.

What is the Windows Option

Contains the full set of Windows APIs and system services; however, does not contain server roles.

What is the Windows IoT Core option

Contains the full set of Windows APIs and system services; however, does not contain server roles.

Where can you find Windows container Base images

The Docker Hub and Microsoft Container Registry(MCR)

What are the most common management tasks that use Docker

Automating the process of creating container images by using Dockerfile on a Windows OS.

Managing containers by using Docker.

Automating container image creation by using Dockerfile on Windows

What is Dockerfile

This text file contains the instruction needed to create a new container image. These instructions include the identification of an existing image to use as a base, commands to run during the image creation process, and a command that runs when new instances of the container image deploy.

What does the Docker Build command do

This docker engine command consumes a Dockerfile and then triggers the image creation process

What does the docker images command do

This lists the available images on your container host. As you might recall, you use container images as a base for new containers.

What does the docker run command do

This creates a container by using a container image. For example, the following command creates a container using the default process isolation mode, named IIS and based on the Windows Server Core container image:

docker run --name IIS -it windowsservercore

What does the docker commit command do

This commits the changes you made to a container to a new container image. The commit operation doesn't include data contained in volumes mounted within the container. Note that by default, the container will be paused as the new container image is created.

what does the docker stop command do

Stops a running container

what does the docker rm command do

removes an existing container

The Windows Admin Center Containers extension is used to

perform remote management and monitoring of the containers running on the targeted host machine.

What does the summery management tab provide

a summary of the status of the containers, including how many are running, which images are available, the networks that have been configured, and the volumes used.

What does the Containers tab provide

This provides and extensive amount of status information in both text and graphical format. You can also obtain details, logs, and events from specific container and perform tasks such as End or Delete Containers.

What does the images tab provide

displays and provides details on the images that are available in your local repository. You can also use this tab to delete images from the repository.

What does the networks tab provide

displays the networks that have been configured for the containers. It includes networking information such as subnet and gateway addresses used for the network connection.

What does the volumes tab provide

displays volume information used by containers on the host machine

The Hyper-V role allows for what

virtualized computing environments to be created

How does Hyper-V improve hardware efficiency

allowing you to run multiple operating systems on one computer

Each virtual machine(VM) runs

independently from each other

The Hypervisor is responsible for

controlling access to the physical hardware

VMs only communicate with

virtualized hardware

Hardware drives are only installed where

on the host operating system(parent partition)

operating systems Hyper-V supports

All supported Windows versions

CentOS

Red Hat Enterprise Linux

Debian

Oracle Linux

SUSE

Ubuntu

FreeBSD

How can Hyper-V consolidate your server infrastructure

move physical server onto fewer more powerful servers

Hyper-V can let you do what in/on and isolated network and envioerment

Do virtual development and test environments

Establish Virtual Desktop Infrastructure(VDI)

Combining Hyper-V and Remote Desktop Virtualization with Windows Server can provide a centralized desktop management solution. This scenario can help you provide secure and agile personal virtual desktops or virtual desktop pools to your users.

Implementing a Private Cloud Infrastruture

using Hyper-V to create a cloud environment for public or private use

Ways to manage Hyper-V

Hyper-V Manager, Hyper-V chapter for Windows PowerShell, Virtual Machine Connection (also referred to as VMConnect), and Windows PowerShell Direct.

Hyper-V is portable because you can move VMs. What are the feature that allow you to do so

live migration, storage migration, and standard import/export functionality

Hyper-V Replica does what

allows you to make copies of VMs.

Secure boot does what

verifies digital signatures on files during the boot process to prevent malware.

Shielded VMs do what

help to secure access to VMs by encrypting the files and only allowing the VM to be run from specific protected virtualization host machines.

Integrations Services are

a set of services and drivers that work with the guest operating systems

System requirements for Hyper-V

A 64-bit processor with second-level address translation (SLAT)

A processor with VM Monitor Mode extensions

Sufficient memory for itself and for guest VMs

Intel Virtualization Technology (Intel VT) or AMD Virtualization (AMD-V) enabled

Hardware-enforced Data Execution Prevention (DEP) enabled (Intel XD bit, AMD NX bit)

What can you run to see if your system meets the minimum requirments

Systeminfo.exe

What ways can you install Hyper-V in windows server

Server Manager and WindowsFeature cmdlet

Web Services Management Protocol does what

Allows the Hyper-V Manager to communicate by using the Kerberos protocol NTLM or Credential Security Support Provider (CredSSP).

Alternate Credential support

allows you to use a different set of credential with WS-Management. Must be on Windows 10 or Server 2019 or newer

Ways to manage a Hyper-V

PowerShell

PowerShell Direct

Windows Admin Center

What does PowerShell Direct allow you to do

Use PowerShell inside a Vm regardless of the network config or remote management settings

You should deploy virtual machinces on seperate

SSDs or Cluster Shared Volumes(CSVs)

What is a Cluster Shared Volume

a shared storage system that allows multiple devices to write to it

Best practice is to deploy Hyper-V role as

the only role on the server

if Hyper-V can’t be the only role on the server you should

Deploy all the services on the server in their own Hyper-V VMs