Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Linux Business

Managing Linux and Virtual Machines? 239

deijmaster asks: "For a couple of months we have been hearing (as a major consulting firm) IBM people pushing the possibility of installing a Z/Linux VM setup at one of our biggest clients (financial). To a Linux user such as myself this sounds great, at first. Now, I am a bit reluctant when it comes to managing this kind of infrastructure, with little or no local expertise at IBM. Has anyone gone through a Z/Linux VM corporate installation and lived through the management of such a solution?"
This discussion has been archived. No new comments can be posted.

Managing Linux and Virtual Machines?

Comments Filter:
  • by SHEENmaster ( 581283 ) <travis@utk. e d u> on Wednesday September 03, 2003 @08:18PM (#6864622) Homepage Journal
    You use a modern Linux machine to emulate a decrepit UNIX machine.

    The emulation steals the speed increase and abstracts the Penguin Power from the user's environment.

    IANAIBMSA(I A Not An International Business Machines System Administrator), but it seems like the only advantage to this is that you can get one hell of a UT/Q3 framerate while the virtual machine is shut down because "somebody was calculating pi on the server" or "Somebody ran vmunix through a spelling checker."

    BOFH excuses 16 and 452, respectively.
  • by Fnord ( 1756 ) <joe@sadusk.com> on Wednesday September 03, 2003 @08:21PM (#6864655) Homepage
    That's really not what he means. This is using a completely non unix oriented system (a mainframe) running a VM (which is not an emulator, virtualization is built into mainframes) to run many instances of linux (which isn't emulated either, linux runs natively on mainframes).
  • Linux/390 resources (Score:5, Informative)

    by Dammital ( 220641 ) on Wednesday September 03, 2003 @08:24PM (#6864666)
    Check out Mark Post's Linux for S/390 [linuxvm.org] site. He collects SHARE papers, distribution info, and pointers to other resources. Lots of good stuff.

    Oh, and the Marist linux-390 listserver [marist.edu] is well worth subscribing to.

  • by mao che minh ( 611166 ) * on Wednesday September 03, 2003 @08:28PM (#6864692) Journal
    I don't have a lot of experience with these things, but I am positive that there are plenty or "pure Linux" solutions that will be far more flexible - even when using IBM middleware.

    1. What exactly demands this solution?
    2. Can a pure Linux box, with mild tweaking, still not be more useful and create less overhead than this?

    Someone in this thread mentioned IBM implementing wildly complex systems in order to push consultation, and on some levels it's true. PeopleSoft does it also. In some cases, Oracle will have a go at this tactic. My advice is to do some searching first, without the input of IBM, and see if you can't find a better solution to whatever problem you're trying to remedy.

  • not cost efffective (Score:5, Informative)

    by Anonymous Coward on Wednesday September 03, 2003 @08:35PM (#6864739)
    Well I used to work at similar financial company where IBM was pushing something similar as well. What it boiled down to was the following issues.

    1. for the equivalent # of VM's it was more cost effective to buy new Intel hardware. The annual maintaince cost for the IBM more than paid for all new hardware.
    2. Software availability. The only thing you could run it would be home grown apps or existing opensource apps. No commercial software was available. This company was an all Oracle shop, no DB2. They're primary opensystems backup solution was Netbackup. Which at the time had no client for linux on Z. (a year ago).
    3. In house expertise. They had no linux expertise and very little Unix (solaris & HP) (jr admins at best) expertise. Let alone running linux on a Z.

    So to sum it up. It's a very expensive, somewhat propritary and inflexiable environment. If you have a specialized use for it and can justify the cost go for it. Otherwise stick with commodity Intel/AMD hardware. It'll be cheaper and easier in the long run.
  • by edwardd ( 127355 ) on Wednesday September 03, 2003 @08:39PM (#6864776) Journal
    I work for a big financial firm in NYC that is using Z/Linux pretty heavily. I have to say that while we are very happy with the results, it is VERY important to have VM people on staff who are also Linux savvy. IBM has been great in getting us set up, but they don't live with the systems. We do. You'll need to be very careful about what you're using the Linux instances for, and take alook at how they'll use hardware resources, like the OSA cards.

    With careful planning, and the expectation that it will be a bumpy start, you'' find that it's a very rewarding experience, both personally and professionally.
  • by Swayne Shabazz ( 678612 ) on Wednesday September 03, 2003 @08:44PM (#6864810)
    What other solutions that are "pure Linux"? An IBM mainframe has virtualization built in nativeley, hence, it shouldn't take a performance loss. This means that I doubt highly that an all-Linux solution could approach it's power (considering that you can run like 200 instances of Linux on one without any hassle).
  • by Anonymous Coward on Wednesday September 03, 2003 @08:46PM (#6864821)
    I wouldn't get hung up on the whole "local" thing. You just have to understand how IBM works. There's no concept of "local" at IBM. At any one point in time, 50% of IBM employees aren't in a traditional work place.

    If you have problems, contact IBM and they will get their best people on it. IBM is all about customer service. You never get fired for buying IBM. From an engineers perspective, it's a pita. The best people in a department end up spending most of their time working on customer problems.

    Hell, IBM still supports OS/2. If a Z-Series seems to solve your problem, go for it. IBM will take care of you.
  • Linuxcare? (Score:5, Informative)

    by chrisd ( 1457 ) * <chrisd@dibona.com> on Wednesday September 03, 2003 @08:48PM (#6864838) Homepage
    I understand that Linuxcare has a program specifically for managing linux vms on z series mainframes...I'd call em and see what they've got.

    http://www.linuxcare.com/ [linuxcare.com]

    Chrisd

  • by Anonymous Coward on Wednesday September 03, 2003 @08:51PM (#6864854)

    Actually VM itself is fairly straight forward to administer

    The biggest hurdle will be:

    • termonology -- For example DASD instead of disk drives
    • sysprog or Systems Programmer - System administrator
    • A userid is just another name for a virtual machine. In otherwords say you have 10 linux systems, they would each be represented by 10 userids (LINUX1, LINUX2, etc.)
    • Within VM itself the concept of deamons (services) are abit different. Each deamon is installed in it's own virtual machine ( Service Virtual Machines or SVMs). For example the TCP/IP stack is it's own virtual machine, the FTP service is another virtual machine, etc. VM provides a very efficient inter-virtual-machine communication system.

      This is also where security comes in. Each SVM is really isolated from each other.

    • There is no concept of a root user within VM, instead individual virtual machines have privilages that are restrict what that virtual machine can do. In addition authorizations for services are handled by the service itself (for example being able to control the TCP/IP stack requires that the user doing the control be authorized by the TCP/IP stack itself.

    One thing to remember too is that VM was (and still is) used by many Universities and colleges -- not as much as it was back in the 70's and 80's, but it still has a presence.

    Anyway... just some comments from an old timer VM sysprog

  • by bunyip ( 17018 ) on Wednesday September 03, 2003 @08:59PM (#6864912)
    Yes, you're right on the "not cost effective".

    BTW - I've ported a number of programs to Linux/390 (an IBM G6 mainframe) and compared them to Linux on my 1 GHz Athlon cobbled together from left over parts and a motherboard from Fry's. The net result is that the Athlon is about twice as fast as the G6 mainframe.

    The latest and greatest mainframes are about twice as fast as a G6, but PCs have come a long way since 1 GHz. Currently, 1 CPU on a mainframe running Linux costs about $100K, you can buy a pretty impressive Intel server for that price.

    So, Linux on S/390 is only effective when you have a bunch of machines with utilization close to zero - let's call it "epsilon", which is what we mathematicians say when we really want to say zero but still need to divide by it. You buy the box for VM, which can run hundreds or even thousands of instances, securely and stably, so long as most of them are doing nothing.

    Linux/390 is great for experimental servers, test systems, etc. OTOH - if you have any significant workload, buy a rack-mount PC.

    Alan.
  • by LinuxHam ( 52232 ) on Wednesday September 03, 2003 @09:00PM (#6864920) Homepage Journal
    Mod AC down. He's working with **very** old data, and is generalizing about the industry from one customer experience. And yes, one year is a heluva long time in Linux on Z. Just every IBM app for Linux on Intel has been ported to Linux on Z by now. It is by no means limited to open source apps anymore (yes, a year ago, it was).
  • by Anonymous Coward on Wednesday September 03, 2003 @09:04PM (#6864939)
    I'm posting this as an AC because I'm an IBMer.

    Familiarity with Linux will not help you setting up the zLinux environment. It works like this: You dedicate a few processors of your mainframe to Linux. These processors will run VM, which has:

    • a command-line environment
    • the ability to run scripts written in REXX
    • the ability to virtualize resources and give them to virtual machines defined as "users".

    The users are defined in a "user directory". There, you can specify how much memory, disk and CPU share you want to give to each user. These users, remember, are in fact virtual machines that will boot an image of Linux compiled for the zSeries processor architecture.

    If you want to create and take down Linux images frequenlty, you'll have to install and customize some VM scripts that will do the job for you. When the scripts are installed, you can setup a new Linux image (complete with its own disks, IP address, etc.) with a single operator command.

    Most sysadmins of a zLinux machine spend a lot of time in VM. So learning VM is essential if you are going to do this job. VM was created 30 years ago and is somewhat primitive in places, but the resource virtualization mechanism is incredibly powerful and makes up for it.

    Finally, make sure that people understand that there might be dozens of virtual CPUs defined under VM but only a few real CPUs. If you have 4 CPUs, a Linux user with an absolute CPU share of 25% will have the equivalent of one CPU. If the Linux image is used for recompiling its kernel, it might be a tad slow. The mainframe has great I/O performance but only run-of-the-mill raw CPU speed.

    Good luck.

  • Re:No. (Score:3, Informative)

    by rbh00a ( 9055 ) on Wednesday September 03, 2003 @09:23PM (#6865055)
    Amdahl's version of Unix was and is UTS. It was spun off in May 2000 as UTS Global LLC. Check out our webpage at http://www.utsglobal.com.
  • by hackus ( 159037 ) on Wednesday September 03, 2003 @09:42PM (#6865159) Homepage
    I would have to agree.

    It is always a better choice to use clusters of hardware, than a single box.

    You have a variety of tools available on the open source market now to monitor, and automagically maintain your cluster, depending on what you choose...the most popular is PVM, and it comes with a ton of very nice management utils you can get off the net, too manage hundreds of machines in a blink of an eye. This is a very configurable cluster architecture.

    There is also MOSIX, or open Mosix. A very nice computing facility as well, allowing you to use a single image machine from a large collection of machines tied together through a network.

    Do a google on PVM or MOSIX.

    -Hack
  • by Anonymous Coward on Wednesday September 03, 2003 @10:19PM (#6865376)
    Grain of salt, yada yada...

    I second the idea that it is very important to have VM skills on site for a customer looking at this. Presumably the customer is already a z/Series account, so they probably already know a thing or two, but they may have bought into the "VM is going away" speech and gotten rid of their VM stuff years ago and gone to z/OS.

    Even if they have VM skills from 5-7 years ago - that will still do. VM hasn't changed all that much, it just has some more bells and whistles. So one or two refresher courses for whoever is still around in their shop will get them up to speed on z/VM 4.4 if they knew it 'Back in the day'.

    And yes - Linux on VM is still young. Most shops appear to do a lot of 'roll your own' solutions to the administrative problems. Get hooked into the Marist linux390 mailing list, there are a lot of smart folks there who have at least thought about any problem youre likely to have.

    I've run/tested every one of SLES 7, 8, RedHat 7.1, 7.2, RHEL3 beta, TurboLinux (old and crusty now) and Debian with pretty much any IBM middleware you could think of. From the linux side - it doesn't know anything about VM, or care. So you as the administrator must make sure it plays politely with the others it lives with. You probably should not just throw 2 Gigabytes of storage at it just because Websphere says it needs it. Running Linux with VM does require some understanding of how to make the most of shared resources. Check out this redbook:

    http://publib-b.boulder.ibm.com/Redbooks.nsf/Red bo okAbstracts/sg246824.html?Open

    It makes a lot of these points better than I can.

    --Anonymous Coward cause I forgot my password :(
  • by bunyip ( 17018 ) on Wednesday September 03, 2003 @10:23PM (#6865407)
    Perhaps I should have said a significant single workload. Workload management and power consumption is critical and definitely in favor of VM and z/Linux when you have many, many underutilized servers.

    It all comes down to crunching the numbers. I think IBM is actually pretty honest about z/Linux, they're not trying to sell it as a supercomputer but rather as a consolidation solutions.

    FWIW - I work for a very large company with thousands of servers. We have dozens of them with utilization of approximately zero, including some very large machines (such as an E10K doing the work of a PC). This is not unusual...
  • by adamthornton ( 101636 ) on Wednesday September 03, 2003 @10:31PM (#6865451) Homepage
    I've done plenty of these. I'm sure a little Googling will reveal who I work for and that I'm probably not lying. I'm also not an IBMer.

    As with anything, "it depends." In my experience, L/390 under z/VM works best in I/O-intensive heavy-throughput roles. Do not throw CPU-intensive work at it. If you need CPU, either build an Intel farm, or use an architecture that's designed for serious computing, like a pSeries.

    From a manageability standpoint, you will be flabbergasted how much easier it is to manage a z/VM box with 100 Linux instances on it than it is to maintain 100 rackmounted x86 boxes. And once you get your legs under you with VM, it's amazing how tunable the system parameters are. FCON/ESA (now Performance Toolkit, in z/VM 4.4) is really, really your friend in terms of determining where the system hotspots are. And once you've tasted how to deploy additional servers in two minutes without leaving your chair, it's really hard to go back to old-skool provisioning.

    Adam
  • by Anonymous Pundit ( 161899 ) on Wednesday September 03, 2003 @10:42PM (#6865514)
    There's another option, too:

    Bytemark Hosting [bytemark-hosting.co.uk] offers Linux virtual machines via User-mode Linux.

    Bytemark supports Open Source with contributions to Debian and discounts for Open Source developers.

    Debian is one of the distro options. Primary DNS on Bytemark's DNS servers is included (running djbdns [tinydns.org], win win).
  • by Mostly a lurker ( 634878 ) on Wednesday September 03, 2003 @11:20PM (#6865743)
    This is using a completely non unix oriented system (a mainframe) running a VM (which is not an emulator, virtualization is built into mainframes) to run many instances of linux (which isn't emulated either, linux runs natively on mainframes).

    Not quite, though the effect is similar. Both VM and Linux are supported by a combination of software and microcode. However, IBM has been very successful in putting almost all performance critical code sections in microcode. Thus, VM and Linux are 'emulated', but the overall performance usually ends up being quite close to what could be achieved if the support was indeed natively supported.

  • by Anonymous Coward on Wednesday September 03, 2003 @11:37PM (#6865814)
    Actually, he's right. I've worked with Linux on zSeries, and knowing how to use the CMS commandline and write REXX is still important if you're using z/VM. If you're running on a bare LPAR, sure, you don't need to worry about any of that, but then you're not using it to its full potential.
  • not completely true (Score:1, Informative)

    by Anonymous Coward on Wednesday September 03, 2003 @11:40PM (#6865838)
    I presently consult for a company that makes extensive use of a mainframe (s/390 series 5). Yes, these things are rock fucking solid - you've never seen uptime like this with heavy use Unix servers. However, this company still manages to hang the machine once a year in some way or another. They go down, just not as often as any other kind of machine.
  • by SysKoll ( 48967 ) on Thursday September 04, 2003 @12:05AM (#6865948)
    Dalslad, sorry, but the AC is right. If you read the context, you'll see that the goal here is to do some server consolidation. I doubt that the post author is interested in running SuSE on an LPAR. He obviously wants to run multiple guests under VM. I have yet to meet people who run Linux directly on their IFLs. Each installation I see uses VM. So what you say is true, but irrelevant. The zSeries has a processor for I/O and the CP runs without having to manage a lot of the hardware.

    Nobody said the contrary.

  • by SysKoll ( 48967 ) on Thursday September 04, 2003 @12:21AM (#6866022)

    Covener, you're right. zSeries suck as number crunchers. They are great at intensive I/O jobs. They are great at consolidating servers that aren't all busy at the same time. But "brute-force an RSA key" is exactly what you don't want to spend your expensive MIPS for.

    BTW, I found that on a web server mettle test, large file transfer performance was better on zSeries than on RISC boxes. The larger the files, the more advantage to the mainframe. This is an interesting side-effect of having processors dedicated to I/O and freaking huge I/O bandwidth.

  • by Anonymous Coward on Thursday September 04, 2003 @01:44AM (#6866258)

    Actually not quite true (that the VM person won't understand or like linux).

    Linux has actually given VM a shot in the arm. VMers are well aware of that fact. I support a couple of VM systems during the day and play around with Linux at home at night.

    Also in terms of culture, I think you would be very surprised with the VM culture. VM spent many years as the unwanted child, VMers had to rely on each other in order to be heard above the MVS roar.

    If you take a look at some of the history of the internet you will find VM sitting there (BITNET was basically a collection of VM systems). The listserv concept was originally from VM (CERN was -- might still be -- a big VM site).

    If you want to see some of the history of VM you can start here: http://pucc.princeton.edu/~melinda [princeton.edu]

  • by Resident_Geek ( 105025 ) on Thursday September 04, 2003 @02:39AM (#6866479) Homepage
    I am going to agree with you one this one. Normally I wouldn't comment on this but. Pre 9-11 I worked on the design team for both V4R5 thru V5R2 hardware, Code named condor and regatta, respectivly. I worked on the converged service processor design team. For those of you who don't know what that is. It is like the BIOS for a PC. There are many things IBM doesn't tell you about their machines. Like:

    you have to use their hardware despite the fact you can use hardware from Comp USA. The VPN prevents this.

    the buss sits idle a large percentage of the time, even when under heavy load. This can be upto 90% idle. This is due to their token ring-like layout of the procs and buss. If you blow a proc which happen quite often, you are SOL until they can ship one in from Austin, TX or Hitachi, japan. When I was there the 9-11 disaster literally shut-dwon the project because of the mail/shipping stoppage.

    The RIO buss isn't as bullet proof as they would make you believe. "SLIC" has lots of microcode problems. (SLIC is between the csp and the OS). More then 50% of their cables are defective from the manufacturer, and they are expensive.

    You can't crack the case to fix something. You have to let an IBM field engineer do it. This means more down time. And the whole box is down. Not just one little machine in the cluster.

    The failure rate of the backplanes in the CEC is over 90%. There is only one place the manufactures them and they are backlogged for months.

    DASDs (harddrives) are small in storage(usually 9-18GB) but very pricey and you need 79 of them to fill one 5077 storage tower(required to even boot).

    manistore dump has lots of issues.

    The power requirements for an H class Z series machine are two, count them two 440V 60 amp services. Plus you have to have the floor strengthened for the extra weight. This doesn't even include the space/power/weight considerations for the storage towers or I/O towers.

    I could go on and on. I am not saying they are bad machines. But you better be willing to make a 30 year commitment to the tech to make it pay.

    I don't think your finace people are willing to accept downtime. That means lost money. So I would suggest the clusters. The ability to fix stuff inhouse and replace or remove each node makes it very robust.
  • by sql*kitten ( 1359 ) * on Thursday September 04, 2003 @04:37AM (#6866837)
    The latest and greatest mainframes are about twice as fast as a G6, but PCs have come a long way since 1 GHz. Currently, 1 CPU on a mainframe running Linux costs about $100K, you can buy a pretty impressive Intel server for that price.

    A mainframe is not a supercomputer - the former is build for I/O, the latter for processing speed. There's a little overlap, but they address different markets - the workload for commercial data processing (for example, updating the accounts of your 10M customers with 100M transactions a day) and scientific number crunching (say, modelling a weather front). An IBM mainframe is designed from the ground up for I/O speed, and has dedicated processors that do nothing but shuffle data from storage to memory and back again. You cannot buy an Intel based system that even comes close to a Z series for I/O at any price. Even clustering Intel boxes won't help, because at some point, you have to have something to manage and consolidate all that data so you can do useful things with it. If you need it, there simply is no substitute for a mainframe. But if you don't, I agree that a mainframe is overpriced, just like a tank is overpriced if you just want to drive to the supermarket.
  • by Anonymous Coward on Thursday September 04, 2003 @07:41AM (#6867409)
    ILF (integrated linux facility) .... but that costs $150k.

    Actually, I think there was a recent price reduction. $125K. See IBM pricing updates [ibm.com].

    The mainframe has a problem. The people who price the add ons. $10,000/GB. Holy Markup Batman!!!!!!! Triple redundacy but you can divide that number by 10 and still have a large number.

    It is kind of hard to put larger workloads onto Linux (and hence need to buy more MIPS... and sell more hardware) when it takes over a $100K just to get there. Alas it is priced for folks already waist high in huge legacy software costs. Probably a Wal-Mart special compared to the z/0S fees. Not sure how they can sell alot more "iron" with these prices though.

    However, as outlined in other threads.... Linux/390 is aim at niches where it makes sense.

  • Re:It works well (Score:2, Informative)

    by wagemonkey ( 595840 ) on Thursday September 04, 2003 @08:19AM (#6867557)
    Which is a great way to run a company,
    "Keep the customer satisfied" works for me. They know you can go elsewhere so they try very hard to get you not to need to, nor want to.

    My favourite analogy is that of European and American Roulette wheels, US wheels have a double zero and European ones don't. They'll likely both get the same money but the US ones want it quicker. (Of course all analogies are flawed, and this one ignores effectively free food and drink at US casinos...)

  • Re:Don't forget..... (Score:3, Informative)

    by Glonoinha ( 587375 ) on Thursday September 04, 2003 @09:52AM (#6868260) Journal
    He was talking about bringing in talent from IBM's Global Services division, these guys bill out at $225 an hour easy.

    Good luck at getting one in your door for under $160 an hour - if you sign a 1 year gig maybe but not for a few weeks.
  • Re:Sticker Shock (Score:1, Informative)

    by Anonymous Coward on Friday September 05, 2003 @04:52PM (#6882855)

    Archaic is relative. When was the last time you saw a VT100? yet there are the escape codes stilled being used to move the cursor around, to set colors, etc.

    Yes virtual machines have card readers and card punches much the same way that linux has psuedo ttys.

    What is going on under the covers is fairly simple. VM sets up a virtual s/390 (z/Series..) environment for each user. It has z/Series architectured type devices (some may be real, others are virtual). A typical VM userid will have:

    • a virtual console
    • a virtual reader
    • a virtual punch
    • a virtual printer
    • memory allocation (i.e. how much memory will be available to the guest -- note that this can exceed the amount of real memory available on the real system if you don't mind the real system paging)
    • one or more virtual CPUs - Note that the CPUs are not emulated -- when a virtual CPU is dispatched it runs natively on the real processor. Some instructions however will be emulated (usually those dealing with I/O or where they state of the virtual machine itself is being altered i.e. privilaged instructions)
    • mini disks

    Now the virtual reader/punch/printer are simply an interface to the VM spooling system. But that interface has to follow the z/Series architecture rules for access a device -- So.. VM uses the card punch and card reader channel commands as the interface. That means that the rules of the device have to be respected.

    Now when one IPL's from the spool, the IPL sequences is going to use card readerchannel commands -- so the kernel has to be blocked as 80 byte records.

    To put this in perspective, when you boot Linux from a floppy drive, the kernel has to be blocked in to 512 byte records (which is the underlying block size of floppy disk drives if I remember correctly).

An Ada exception is when a routine gets in trouble and says 'Beam me up, Scotty'.

Working...