CN103136026A - Method for achieving secure shell (ssh) connecting identification of virtualized software library libvirt - Google Patents

Abstract

The invention provides a method for achieving secure shell (ssh) connecting identification of virtualized software library libvirt. The ssh connecting identification of the virtualized software library libvirt is achieved through the method, prompt does not pop up when connection from a management node to a computational node of the libvirt or ssh is performed, passwords do not need entering any longer, automated process of management software is improved by the operation, too much manual operation of deploying workers is not needed, error rate is reduced, and simultaneously convenience is also provided for later back-stage management.

Description

A kind of method that solves the ssh connectivity verification of virtualization software storehouse libvirt

Technical field

The present invention relates to technical field of virtualization, specifically a kind of method that solves the ssh connectivity verification of virtualization software storehouse libvirt.

Background technology

Along with the fast development of cloud computing, increasing manufacturer begins to participate in this field.Because the technology more complicated of bottom, and comparative maturity, at this time going to develop the bottom Intel Virtualization Technology does not have advantage again, there is no manpower and materials yet.Therefore most manufacturers selected platform integrated and the management.Because dog-eat-dog, therefore faster can being shaped and issuing just can be seized the more market share.At this moment the more libvirt that increases income that selects carries out the support of bottom virtual management, comes integrated multi-platform virtual support.

In the management software exploitation of cloud computing, many bottom most softwares have all selected libvirt to carry out Virtual Machine Manager, because libvirt can manage multi-platform virtual machine, and as xen, vmware etc.In the cloud management system of a rapid shaping, the first-selected libvirt of bottom management software.

When using libvirt to carry out Virtual Machine Manager, because need the cross-node management, connect therefore need to set up a libvirt.Connected mode has multiple, and wherein a kind of is to use the ssh agreement to connect.But when using the ssh agreement to connect, need username and password, this is a more loaded down with trivial details process, need to record the username and password of all node servers, increase certain workload, and the management node in cloud environment and computing node should intercommunications, belong to mutual trust, the safety of cloud environment should be controlled by the shell of an integral body, and the ssh of internal node authentication is just insignificant so.Even bypass top reason, also have a fatal problem when setting up ssh and connecting, that is exactly when connecting for the first time, and ssh can inquire whether connect, and at this moment needs administrator hand to confirm.The API of libvirt connects does not have this response mechanism, can't return to this behavior and confirm to the keeper, at this moment will cause the libvirt connection failure.So need a kind of method can solve ssh connectivity verification problem.Certainly the simplest to be also the most loaded down with trivial details keeper of being exactly carry out the ssh instruction at management node to each computing node, and then manual confirmation one time records the username and password of all nodes in management system.

Here introduce a kind of method, walk around password authentification by the public key verifications mechanism of ssh.The solution here is to realize public key verifications mechanism by the agency.

Summary of the invention

The purpose of this invention is to provide a kind of method that solves the ssh connectivity verification of virtualization software storehouse libvirt.It is mainly the ssh checking that solves between management node and computing node.Here need to utilize PKI and the key mechanism of ssh, coordinate the agency to realize.

 

The objective of the invention is to realize in the following manner, concrete implementation step is as follows:

A. at first need in deployed environment, an agency be installed on each computing node, and move this agency;

B. need do following realization at management node:

1) at first detect this locality and whether created PKI and key, if do not use the ssh-keygen order to create one without password authentification PKI and key;

2) use the ssh-keyscan instruction to obtain the host public key of target computing node, this PKI is not that the user creates, but the hostid that ssh generates automatically detects in the know_hosts file whether comprise this PKI, if do not add;

3) PKI that head was created in the step is sent to the computing node agency;

C. need do following realization at computing node:

The PKI that the receiving management node sends over also is saved to it in authorized_keys file;

By above step, realized the ssh connectivity verification of virtualization software storehouse libvirt, libvirt or ssh can not eject prompting when managing node to the connection of computing node again, also need not to input again password, these operations have improved the automatic flow of management software, need not the too many manually-operated of deployment personnel, reduced fault rate, also provide convenience for later back-stage management simultaneously.

The invention has the beneficial effects as follows: this scheme has solved the ssh connectivity verification problem of libvirt in the virtual bottom management of cloud computing effectively, reduced manually-operated, make it can carry out better management and control, the difficulty that the uncertainty reduction system effectively that reduces that software environment goes wrong disposes, reduce deployment personnel's work, maintainer's orientation problem has also facilitated many.

Embodiment

Implementation step is as follows:

At first a need in deployed environment, install an agency, and move this agency on each computing node;

B need do following realization at management node:

1) at first detect this locality and whether created PKI and key, if do not use the ssh-keygen order to create one without password authentification PKI and key;

2) host public key of using the ssh-keyscan instruction to obtain the target computing node (is different from the PKI that creates above, this PKI is not that the user creates, but the hostid that ssh generates automatically), detect in the know_hosts file whether comprise this PKI, if do not add;

3) PKI that head was created in the step is sent to the computing node agency;

C need do following realization at computing node:

1) PKI that sends over of receiving management node and it is saved in the authorized_keys file.

So far realized this scheme, libvirt or ssh can not eject prompting when managing node to the connection of computing node again, also need not to input password again.These operations have improved the automatic flow of management software, need not the too many manually-operated of deployment personnel, have reduced fault rate, also provide convenience for later back-stage management simultaneously.

Embodiment

A. create PKI and key at management node;

B. obtain the host public key of computing node and be saved in the ssh specified configuration file of management node;

C. the PKI with management node is sent to the computing node agency;

D. the computing node agency receives PKI and is saved to assigned address.

Except the described technical characterictic of instructions, be the known technology of those skilled in the art.

Claims (1)

1. a method that solves the ssh connectivity verification of virtualization software storehouse libvirt, is characterized in that Concrete implementation step is as follows:

A. at first need in deployed environment, an agency be installed on each computing node, and move this agency;

B. need do following realization at management node:

1) at first detect this locality and whether created PKI and key, if do not use the ssh-keygen order to create one without password authentification PKI and key

2) use the ssh-keyscan instruction to obtain the host public key of target computing node, this PKI is not that the user creates, but the hostid that ssh generates automatically detects in the know_hosts file whether comprise this PKI, if do not add;

3) PKI that head was created in the step is sent to the computing node agency;

C. need do following realization at computing node:

The PKI that the receiving management node sends over also is saved to it in authorized_keys file;

By above step, realized the ssh connectivity verification of virtualization software storehouse libvirt, libvirt or ssh can not eject prompting when managing node to the connection of computing node again, also need not to input again password, these operations have improved the automatic flow of management software, need not the too many manually-operated of deployment personnel, reduced fault rate, also provide convenience for later back-stage management simultaneously.