vRealize Network Insight 3.2 (vRNI 3.2) が 12/8 (PST) にリリースされました。新機能については、公式の Blog を参照して頂ければと思います。

なお、個人的に一押しの新機能は CLI に追加された modify-password コマンドになります。

modify-password

SSH なりコンソールから consoleuser/ark1nc0ns0l3 でログインすると、以下のようなプロンプトが表示されます。

    vRealize Network Insight Command Line Interface
    (cli) help
    Commands:
    =========
      appliance-reboot           Reboot this appliance
      custom-cert                Apply custom certificate
      disk-usage                 show disk usage
      log-trace                  list/grep/follow/display component specific logs
      logout                     exit from the cli
      logs-to-cloud              Enable/Disable log push to cloud
      modify-password            Modify the password of support or consoleuser
      nslookup                   test the appliance name resolution for a server FQDN
      package-installer          Manage upgrade (offline)
      ping                       test ping using IP or FQDN
      services                   start/stop/restart the services
      set-banner                 Set ssh banner
      set-proxy-shared-secret    Set Proxy VM shared secret
      set-web-proxy              set the web http proxy (for Internet access)
      setup                      Setup network configuration
      show-config                Show all configurations
      show-connectivity-status   show connectivity status with all systems
      show-service-status        shows the status of all services
      show-version               Display current version
      support-bundle             Support bundle for debugging.
      support-tunnel             enable/disable/status of the support tunnel
      telemetry                  Enable/Disable Telemetry
      telnet                     test telnet to a server
      tool-manager               helps to run tool
      traceroute                 test traceroute to a server
      vrni-proxy                 vRNI proxy managing utility
    (cli)

ここでは vRNI が提供する CLI を実行することができます。通常の運用ならばそもそも CLI も必要ありませんが、トラブルシュートや詳細な調査を自力で行いたいときには bash シェルに入りたくなります。vRNI 3.2 からは support ユーザーと modify-password コマンドが CLI に追加になっており、この support ユーザーのシェルは bash となっています。

    (cli) modify-password support
    Changing support user password
    New password:
    Verify password:
    Password changed successfully!
    (cli)

support ユーザーとして SSH でログインしてみましょう。

    ***************************************************************************
    NOTICE TO USERS
    
    "support" user has privileged access to the system.
    This user has capability to modify the system files and configuration.
    It is advised that login as support is done by authorized support person only.
    Commands ran here can render the system unusable.
    
    This computer system is the private property of its owner, whether
    individual, corporate or government.  It is for authorized use only.
    Users (authorized or unauthorized) have no explicit or implicit
    expectation of privacy.
    
    Any or all uses of this system and all files on this system may be
    intercepted, monitored, recorded, copied, audited, inspected, and
    disclosed to your employer, to authorized site, government, and law
    enforcement personnel, as well as authorized officials of government
    agencies, both domestic and foreign.
    
    By using this system, the user consents to such interception, monitoring,
    recording, copying, auditing, inspection, and disclosure at the
    discretion of such personnel or officials.  Unauthorized or improper use
    of this system may result in civil and criminal penalties and
    administrative or disciplinary action, as appropriate.
    
    By continuing to use this system you indicate your awareness of and consent to t                                             hese terms
    and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the
    conditions stated in this warning.
    
    ****************************************************************************
    support@vrni-platform-release:~$

sudo ? Yes, You Can!!

vRNI のアプライアンスは /etc/os-release でも確認できるように Ubuntu 14.04.5 LTS をベースとしています。

    support@vrni-platform-release:~$ cat /etc/os-release
    NAME="Ubuntu"
    VERSION="14.04.5 LTS, Trusty Tahr"
    ID=ubuntu
    ID_LIKE=debian
    PRETTY_NAME="Ubuntu 14.04.5 LTS"
    VERSION_ID="14.04"
    HOME_URL="http://www.ubuntu.com/"
    SUPPORT_URL="http://help.ubuntu.com/"
    BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
    support@vrni-platform-release:~$

様々なコマンドを叩く際に sudo を実行したい場合もあるかもしれません。support ユーザーは support (1001) グループに属しており、support グループは sudo グループに属しています。つまり support ユーザーは sudo コマンドを実行することが出来ます。fdisk も以下の通りです。

    support@vrni-platform-release:~$ fdisk -l /dev/sda
    Cannot open /dev/sda
    support@vrni-platform-release:~$ sudo fdisk -l /dev/sda
    
    Disk /dev/sda: 820.0 GB, 820019404800 bytes
    255 heads, 63 sectors/track, 99695 cylinders, total 1601600400 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0x000e323e
    
       Device Boot      Start         End      Blocks   Id  System
    /dev/sda1   *        2048      391167      194560   83  Linux
    /dev/sda2          393214  1601599487   800603137    5  Extended
    /dev/sda5          393216  1601599487   800603136   8e  Linux LVM
    support@vrni-platform-release:~$

これは Platform VM、Proxy VM のどちらでも有効です。お試し環境であれば dpkg, lsof, ps コマンドなどで ｹﾞﾍｹﾞﾍ するのもよいかと思います。

転ばないために

本番環境ではサポートの指示がない限りは support ユーザーで無闇にログインしない!!