Iyini i-PowerShell DSC (Ukucushwa Kwesifunda Esidingekayo): Umhlahlandlela ophelele kanye nomehluko nge-cross-platform DSC

Uma uphatha izinhlelo ze-Windows, Linux , noma ze-macOS, uzohlangana nomqondo wesimo osifunayo. I-PowerShell Desired State Configuration (DSC) iyindlela eqondile kakhulu yokuveza nokugcina leso simo ngokuhamba kwesikhathi , ukuvimbela izinkinga ezingalindelekile, ukulungisa ukuphambuka, nokusheshisa ukuthunyelwa. Lapha uzothola umhlahlandlela ophelele , onezibonelo ezisebenzayo kanye nomehluko phakathi kwe-PowerShell DSC yakudala kanye ne-DSC yakamuva yesikhulumi esihlanganisiwe.

Ngale kwezincazelo ezisemthethweni, cabanga nge-DSC njengesithembiso osenza kumaseva akho: 'Ngifuna uhlelwe ngale ndlela, futhi uma ushintsha, ngizokubuyisela kusayithi lakho .' Ingxenye engcono kakhulu ukuthi lesi sithembiso siyamemezela futhi asihambisani: uchaza umphumela, futhi injini inakekela ukufika lapho nokuhlala lapho, kungakhathaliseki ukuthi usebenzisa kangaki ukucushwa okufanayo.

Iyini i-DSC nokuthi kungani ungase uyikhathalele

I-DSC iyipulatifomu yokucushwa kwe-declarative. Iya-declarative ngoba uchaza isimo osifunayo ( amasevisi asebenzayo, izindima nezici , amaphakheji, amafayela, okhiye bokubhalisa, njll.), hhayi ukulandelana kwezinyathelo zokukufeza. Injini iqhathanisa isimo samanje nesimo osifunayo futhi yenza izinguquko ezincane ezidingekayo ukuze kuhlangane.

Iyunithi yayo eyisisekelo iyinsiza. Isisetshenziswa se-DSC sihlanganisa indlela 'yokuthola', 'ukuhlola', kanye 'nokusetha' isimo sento ethile : isevisi, ifayela, i-Active Directory , i-SQL Server, njll. Lesi sixhumanisi se-Get/Test/Set sikuvumela ukuthi uhlole ukuthi i-node isivele isesimweni esifanele futhi, uma kungenjalo, usebenzise ushintsho.

Ku-PowerShell DSC yakudala (PSDSC), ingxenye esebenza njengeglue yi-Local Configuration Manager (LCM). I-LCM iyinjini esebenzisa ukucushwa, iqaphe, futhi ingaziphinda izisebenzise ngezikhathi ezithile . Isebenza kumodi yokusunduza (ucindezela ukucushwa) noma imodi yokudonsa (i-node iyilanda kusuka kuseva yokudonsa).

I-DSC isekelwe ezindinganisweni zokuphatha ezifana ne-CIM kanye ne-IMO. Lesi sisekelo esivulekile senza kube lula ukusebenzisana futhi sivumela amathuluzi avela eceleni ukuthi ahlangane kahle , okubaluleke kakhulu uma ingqalasizinda yakho ihlanganisa abakhiqizi namapulatifomu ahlukene.

Umehluko phakathi kwe-PowerShell DSC (PSDSC) kanye ne-cross-platform DSC yamanje

Eminyakeni yamuva nje, iMicrosoft ikhuthaze i-DSC edlula i-PowerShell ne-Windows. Le DSC 'entsha' isebenza ku-Windows, i-Linux, kanye ne-macOS futhi isetshenziswa ngethuluzi lomyalo we -dsc , ngaphandle kokuthembela ku-PowerShell noma imojuli yayo ye-PSDesiredStateConfiguration.

• Ukuzimela kwe-PowerShellI-DSC yamanje ayidingi i-PowerShell. Nokho, ungasebenzisa izinsiza ze-PSDSC usebenzisa ama-adaptha: Microsoft.DSC/PowerShell ukuthola izinsiza kumakilasi e-PowerShell kanye Microsoft.Windows/WindowsPowerShell kulabo abathembele ku-Windows PowerShell.
• Ifomethi yedokhumentiKu-PSDSC, ukulungiselelwa kuhlanganiswa ku-MOF. Ku-DSC yamanje, amadokhumenti okumisa nezikimu zensiza kuchazwa nge-JSON noma nge-YAML.
• Imodeli yokwenza: I-PSDSC ifaka i-LCM, engasebenza njengesevisi futhi igcine isimo. I-DSC yesimanje icelwa njengomyalo; ayifaki i-LCM noma isevisi yomhlali.
• Ulimi oluningi: ungabhala izinsiza ku-bash, Python, C #, Rust noma ngabe yini oyithandayo. Kugxilwe kuplathifomu, hhayi igobolondo.
• Ukuhlanganiswa: I-Cross-platform DSC idalula izikimu ze-JSON ukuze zihlanganiswe ne-WinGet, i-Microsoft Dev Box, ne-Azure Machine Configuration, phakathi kwamanye amathuluzi.

Ngamafuphi, i-PSDSC isalokhu ibalulekile ku-Windows futhi ivuthiwe kakhulu ekuphathweni kwesistimu yokusebenza kanye nendima. I-DSC yesikhulumi esibanzi inikeza indlela ebanzi, ephathekayo, futhi engadingi ulimi, efanele izinhlangano ezixubile.

Amasistimu nezimfuneko ezisekelwe ku-Windows

Ukusetshenziswa kwe-DSC okuvamile ku-Windows kuyatholakala ngokomdabu noma nge-Windows Management Framework. I-Windows Server 2016, 2019, kanye ne-2022 ziyasekelwa, kanye ne-Windows 10 kanye ne -Windows 11. Iphakheji enconywayo yezindawo ezingasebenzi inguqulo yakamuva yi -WMF 5.1.

Kukhona okuhlukile okubalulekile: I-Microsoft Hyper-V Server (umkhiqizo ozimele) ayifaki i-DSC , ngakho ngeke ukwazi ukuyiphatha nge-PSDSC noma i-Azure Automation State Configuration.

Ukuze isebenze ukude, iWindows kufanele ibe ne-WinRM elungiselelwe kahle. Ungayinika amandla ngamalungelo omlawuli ngokuyiqalisa Set-WsManQuickConfig -ForceLokhu kulungiselela ikhompuyutha ukuthola imiyalo ye-PowerShell ekude, ngisho noma usebenzisa izilungiselelo ku-localhost.

Uma udinga ukuxilonga, imicimbi ye-DSC ku-Windows ingenile Microsoft-Windows-Dsc/Operational. Angenziwa asebenze izingodo eyengeziwe yokulungisa iphutha okuthuthukile lapho udinga ukujula.

Ukuqalisa nge-PowerShell DSC ku-Windows

Indlela evamile ukuqala ngezinsiza ezakhelwe ngaphakathi bese wengeza amamojula avela ku-PowerShell Gallery. Imojula ethi 'PSDscResources' inikeza izinsiza ezibuyekeziwe ukuze zimboze izimo ezivamile :

# Instalar recursos DSC desde PowerShell Gallery
Install-Module 'PSDscResources' -Verbose

Ukucushwa kwe-PSDSC kuchazwa ngegama elingukhiye Configuration futhi ihlanganisela ku-MOF. Ngezansi kunesibonelo esenza imvelo iguquguquke futhi iqinisekise ukuthi ikhona.:

Configuration CrearVariableEntorno {
  param ()
  Import-DscResource -ModuleName 'PSDscResources'
  Node localhost {
    Environment CrearRutaVariableEntorno {
      Name   = 'CrearVariableEntorno'
      Value  = 'Hola mundo'
      Ensure = 'Present'
      Path   = $true
      Target = @('Process','Machine')
    }
  }
}

# Compilar el MOF en una carpeta de salida
CrearVariableEntorno -OutputPath './CrearVariableEntorno'

Ngama-MOF akhiqiziwe, sekuyisikhathi sokuwasebenzisa. I-cmdlet Start-DscConfiguration icela i-LCM ukucubungula ukucushwa futhi ingaqhutshwa ngemodi yokusebenzisana ukuze ulandele imininingwane:

Start-DscConfiguration -Path 'C:\CrearVariableEntorno' -Wait -Verbose

Ukuze uhlole ukuthi i-node ibukeka kanjani, ungabheka isimo samanje esibonwa yi-DSC. Get-DscConfiguration ibuyisela amanani angempela asetshenzisiwe y Get-DscLocalConfigurationManager ibonisa ukucushwa kwemethadatha kwamanje:

# Estado efectivo del nodo
Get-DscConfiguration

# Metaconfiguración (LCM)
Get-DscLocalConfigurationManager

Uma udinga 'ukususa ukuphina' ukucushwa, kukhona nendlela yokuphuma. Remove-DscConfigurationDocument -Stage Current -Verbose isusa idokhumenti esetshenzisiwe futhi ishiya inodi ilungele ukuthola enye i-MOF.

Ezimeni eziphethwe, ngezinye izikhathi ungase ufune ukusebenzisa ukucushwa kwe-LCM (isibonelo, ukushintsha imodi yokuvuselela noma ukukhomba i-Pull Server). Lokhu kwenziwa ngokukhiqiza i-metaconfiguration MOF futhi uyisebenzise nayo Set-DscLocalConfigurationManager -Path 'c:\metaconfig\localhost.meta.mof' -Verbose.

Umphathi Wokucushwa Wasendaweni: Amamodi, Imvamisa, kanye Nokucushwa Kwengxenye

I-LCM ichaza ukuthi ukulungiselelwa kuphoqelelwa kanjani futhi nini. Amapharamitha afana ConfigurationMode (ApplyOnly, ApplyAndMonitor noma ApplyAndAutoCorrect) kanye namaza RefreshFrequencyMins y ConfigurationModeFrequencyMins Balawula ukuthi ingabe i-node isebenza kanye kuphela, imonitha, noma iqapha futhi ilungise ngokuzenzakalelayo.

Ngaphezu kwalokho, ungasebenza kumodi yokusunduza noma yokudonsa. Kumodi yokudonsa, ama-node abuza iseva yokucushwa (i-Pull Server) ukuze alande ama-MOF namamojula ngokusekelwe kusihlonzi sawo. Le ndlela iwusizo kakhulu ngezinga ngoba ihlanganisa ukulawulwa kwenguqulo kanye nokuhambisana kwayo.

Kusukela ku-Windows Server 2016 (DSC v2), i-LCM isekele ukucushwa okungaphelele. Lokhu kuhilela ukuhlukanisa ukucushwa kube yizicucu ezizimele ezihlanganiswa yi-LCM: isibonelo, iqembu elilodwa lichaza ingxenye yalo yokuphepha kanti elinye iqembu lichaza ingxenye yalo yohlelo lokusebenza, ngaphandle kokugqagqana.

Izimo zokusetshenziswa kwempilo yangempela

I-DSC ilungele 'izindinganiso zokusebenza' eziphindaphindwayo nezihlolwayo. Izinhlelo zokusebenza ezijwayelekile zifaka phakathi ukumisa izindima nezici, ukuvikela izinsizakalo, ukulungiselela i-IIS, ukufaka amaphakheji, ukuguqula iRegistry, kanye nokuchaza iziguquguquko zemvelo . Ungathola iziqondiso eziwusizo zokuthi ungayishintsha kanjani iRegistry ngePowerShell ukuze uyihlanganise ekucushweni kwakho.

Kuzinhlelo zokusebenza, ungenza ngokuzenzakalelayo ukufakwa, ukucushwa kokuxhomekeka, ukushicilelwa kwesayithi, kanye nokulungiswa kahle. Isihluthulelo ukuthi ukuthunyelwa okubangelwayo kuyafana kuwo wonke ama-node, kungakhathaliseki ukuthi kuse-lab noma endaweni yokukhiqiza.

Ngokuphathelene nokuphepha nokuthobela imithetho, i-DSC ifaneleka kahle. Izinqubomgomo zokuqinisa, imingcele ye-firewall, ama-akhawunti endawo, kanye neziqondiso zokuhlola ziba ukucushwa okuhunyushiwe nokungahlolwa, hhayi 'iresiphi' esetshenziswa ngesandla.

Ukuphathwa kwenethiwekhi ( ama-adapter , ama-IP, imithetho, izinsizakalo) nakho kufakiwe. Uma kukhona okushintshiwe, injini iyakubona futhi, kuye ngokuthi imodi injani, ivuselele isimo , inciphise izinkinga ezingalindelekile kanye nesikhathi sokusekela.

Njengombono olula, cabanga ukuthi ufuna isevisi ebalulekile ukuthi ihlale isebenza. Ngensiza Service kanye nemodi ye-ApplyAndAutoCorrect, uma othile eyimisa, i-LCM iphinda iyithathe futhiUngakwazi ngisho nokuthembela emisebenzini ehleliwe ukuze uqinise ukuhlola.

Ukuhlanganiswa ne-Azure kanye ne-orchestration

I-DSC iyakhanya uma iyingxenye yochungechunge lwe-automation. I-Azure Automation ingahlela ukuhlinzekwa (ama-runbook, ama-workflows) futhi idlulisele ukucushwa kwe-VM ku-DSC , kokubili ku-Azure kanye nasendaweni.

Iphethini evamile ukushicilela ukumisa kwakho ku- isitoreji futhi uyihlobanise nama-VM nesandiso se-DSC. Imiyalo efana Publish-AzureVMDscConfiguration pakisha eyakho iskripthi ku-.zip enamamojula adingekayo, futhi Set-AzureVMDSCExtension iyakusebenzisa endalweni.

# Publicar la configuración (convierte el .ps1 y módulos en .zip)
Publish-AzureVMDscConfiguration -ConfigurationPath './MiConfig.ps1' -Force

# Asignar la configuración a una VM al desplegarla
Set-AzureVMDSCExtension -VM $vm -ConfigurationArchive 'MiConfig.zip' -ConfigurationName 'NombreDeConfig'

Ekusetshenzisweni kwe-IaaS, umqondo ulula: ukuhlelwa kwakha futhi kuxhume izinsiza zamafu (inethiwekhi, isitoreji, ama-VM), futhi i-DSC ilungiselela uhlelo lokusebenza nezinhlelo zokusebenza ngaphakathi kwe-VM ngayinye . Uma futhi uhumusha futhi uhlola ukucushwa, uzoba nezimo eziphindaphindwayo.

Ukufaka nokusebenzisa i-cross-platform DSC

I-DSC yesimanje isatshalaliswa njengama-binary aphathekayo. Ungalanda inguqulo yakamuva kusuka endaweni yokugcina ye-PowerShell/DSC GitHub, ukhiphe amafayela, bese wengeza ifolda ku-PATH yakho . Akukho ukufakwa okuyinkimbinkimbi noma ukuncika okwengeziwe okudingekayo.

Ku-Windows, ungayifaka futhi kusuka ku-Microsoft Store usebenzisa i-WinGet. Okokuqala, thola iphakheji bese ufaka inguqulo eqinile noma yokubuka kuqala.

# Buscar los paquetes publicados
winget search DesiredStateConfiguration --source msstore

# Instalar la versión estable
winget install --id 9NVTPZWRC6KQ --source msstore

# Instalar la versión preliminar
winget install --id 9PCX3HX4HZ0Z --source msstore

Le DSC isebenza namadokhumenti okumisa abhalwe nge-JSON noma nge-YAML kanye nezikimu futhi ku-JSON. Idatha ye-CLI dsc ikuvumela ukuthi ucele izinsiza ezingazodwana, usebenzise amadokhumenti wonke, futhi ubhale izinsiza nganoma yiluphi ulimi. Ngaphezu kwalokho, ama-adaptha ashiwo ngenhla akuvumela ukuthi usebenzise izinsiza ezikhona ze-PSDSC.

Ngokwenza ukwakheka kwamadokhumenti nemiphumela kube ngokwejwayelekile kusetshenziswa ama-schema e-JSON, ukuhlanganiswa namanye amathuluzi epulatifomu (i-WinGet, i-Dev Box, i-Azure Machine Configuration) kulula kakhulu, kwenza kube lula ukuhamba kwepayipi kanye nokusebenza kwesimanje.

Imikhuba emihle nokuhambisana nemithetho

Ukuze ugweme isiphithiphithi, ukwenziwa kwe-modular kubalulekile. Hlukanisa ukucushwa kwakho kube izingxenye ezingasetshenziswa kabusha bese udala amamojula ezinsizakusebenza ezingxenyeni eziyinkimbinkimbi . Lokhu kukuvumela ukuthi ulondoloze futhi ukhule ngaphandle kokungqubuzana okuncane.

Inguqulo ilawula konke usebenzisa i-Git. Ukulondoloza ukucushwa kanye nezinsiza ezindaweni zokugcina kusiza ukusebenza ngokubambisana, ukulandelela umlando, kanye nokubuyiselwa emuva . Ukusebenzisa amagatsha kanye nezicelo zokudonsa kuzoqinisekisa nokubuyekezwa kanye nekhwalithi.

Hlola ngaphambi kokusebenzisa ekukhiqizeni. Amathuluzi afana ne-Pester asiza ukuqinisekisa izinsiza kanye nokucushwa futhi agweme imiphumela emibi, futhi indawo yangaphambi kokukhiqiza kufanele ibe yingxenye yenqubo.

Izinhlangano eziningi zilandela izinhlaka ezifana ne-NIST SP 800-53 (isb., ukulawula kwe-CM-2 phezu kokucushwa kwesisekelo) noma i-FISMA. I-DSC inikeza ukuvumelana kanye nokuhlolwa ukuze kuvumelaniswe izinhlelo zakho nezinqubomgomo nezindinganiso , okunciphisa umzamo wokuthobela imithetho ngesandla.

Amarekhodi kanye nokuxilongwa

Uma okuthile kungahlangani, ilogu yomcimbi inguzakwethu. Ku-Windows, isiteshi Microsoft-Windows-Dsc/Operational ibeka phakathi okwenzekile (ukusetshenziswa kwensiza, ukulungiswa, amaphutha, njll.). Uma udinga imininingwane eyengeziwe, nika amandla amalogi agxile ekususeni iphutha.

E-Azure, futhi ubuyekeze izingodo zesandiso ze-DSC kanye nokuxilongwa kwe-VM. Qondanisa okukhiphayo kwe Start-DscConfiguration -Verbose nesibukeli somcimbi wonga isikhathi ukuthola insiza ngqo ehlulekile.

I-DSC, kungaba inguqulo yakudala ye-PowerShell noma inguqulo ye-cross-platform, ikunikeza isisekelo esiqinile se-Infrastructure njengeKhompyutha (IaC) kumaseva nezindawo zokusebenza. Chaza isimo, wabelane ngaso njengekhodi, uyivivinye, bese uvumela injini ukuthi iphathe umsebenzi ophindaphindwayo ; lokhu kuvumela amaqembu akho ukuthi agxile enzuzweni yangempela, hhayi ekucimeni imililo.

I-athikili ehlobene:

Isetshenziselwa ini i-DSC (Desired State Configuration)? Umhlahlandlela oqondile, ukusetshenziswa kanye nezibonelo

Isaka

Umbhali oshisekayo ngomhlaba wamabhayithi nobuchwepheshe ngokujwayelekile. Ngiyathanda ukwabelana ngolwazi lwami ngokubhala, futhi yilokho engizokwenza kule bhulogi, ngikubonise zonke izinto ezithakazelisayo kakhulu ngamagajethi, isofthiwe, ihadiwe, izitayela zobuchwepheshe, nokuningi. Inhloso yami ukukusiza ukuthi uzulazule emhlabeni wedijithali ngendlela elula nejabulisayo.