VirtualFlow - Part 2

Calculate Cluster Load vSphere powershell script / function

Posted on 2016/12/16 by cann0nF0dder Leave a comment

I was surprised I couldn’t find this script/function when looking across WWW.

Here it is!

<#
NAME:      CalculateClusterLoad.ps1

AUTHOR:      Chris Danielewski 

DATE  :      12/16/2016 

PURPOSE:     This function will calculate the average cluster CPU and RAM.
                                                                                                  
OUTPUT:      Cluster MEM/CPU utilisation in percentage


REQUIRED UTILITIES: PowerCLI
                             
                        
==========================================================================
CHANGE HISTORY:
GE HISTORY:
v1.0                       12/16/2016          CD                  New Function.
#>

Function CalculateClusterLoad([string]$cluster)
{
#Set variables
$clu = Get-Cluster $cluster
$VMHs = $clu | Get-VMHost -State Connected | sort Name
$report = @()
$memlvl = 0
$cpulvl = 0
$counter = 0

#Loop through cluster and pull CPU/MEM Stats
foreach ($vmh in $VMHs)
{
     $hosts = Get-VMHost $vmh.Name | %{Get-View $_.ID}
     $row = "" | select-Object Name, CpuUtil, MemUtil
     $row.Name = $hosts.Name
     $row.CpuUtil = (Get-Stat -Entity $vmh -Stat cpu.usage.average -Realtime -MaxSamples 1 | where {$_.Instance -eq ""}).Value
     $row.MemUtil = (Get-Stat -Entity $vmh -Stat mem.usage.average -Realtime -MaxSamples 1).Value
     $report += $row
     $memlvl = $memlvl + $row.MemUtil
     $cpulvl = $cpulvl + $row.CpuUtil
     $counter ++
}
#Calculate Total and average memory and CPU
$memtotal = [System.Math]::Round($memlvl)
$cputotal = [System.Math]::Round($cpulvl)
[double]$memavg = $memtotal / $counter
Write-Host -ForegroundColor Yellow "Cluster $cluster memory utilisation is $memavg %"
[double]$cpuavg = $cputotal / $counter
Write-Host -ForegroundColor Yellow "Cluster $cluster CPU utilisation is $cpuavg %"

NAME: CalculateClusterLoad.ps1

AUTHOR: Chris Danielewski

DATE : 12/16/2016

PURPOSE: This function will calculate the average cluster CPU and RAM.

OUTPUT: Cluster MEM/CPU utilisation in percentage

REQUIRED UTILITIES: PowerCLI

==========================================================================

CHANGE HISTORY:

GE HISTORY:

v1.0 12/16/2016 CD New Function.

Function CalculateClusterLoad([string]$cluster)

{

#Set variables

$clu = Get-Cluster $cluster

$VMHs = $clu | Get-VMHost -State Connected | sort Name

$report = @()

$memlvl = 0

$cpulvl = 0

$counter = 0

#Loop through cluster and pull CPU/MEM Stats

foreach ($vmh in $VMHs)

{

$hosts = Get-VMHost $vmh.Name | %{Get-View $_.ID}

$row = "" | select-Object Name, CpuUtil, MemUtil

$row.Name = $hosts.Name

$row.CpuUtil = (Get-Stat -Entity $vmh -Stat cpu.usage.average -Realtime -MaxSamples 1 | where {$_.Instance -eq ""}).Value

$row.MemUtil = (Get-Stat -Entity $vmh -Stat mem.usage.average -Realtime -MaxSamples 1).Value

$report += $row

$memlvl = $memlvl + $row.MemUtil

$cpulvl = $cpulvl + $row.CpuUtil

$counter ++

}

#Calculate Total and average memory and CPU

$memtotal = [System.Math]::Round($memlvl)

$cputotal = [System.Math]::Round($cpulvl)

[double]$memavg = $memtotal / $counter

Write-Host -ForegroundColor Yellow "Cluster $cluster memory utilisation is $memavg %"

[double]$cpuavg = $cputotal / $counter

Write-Host -ForegroundColor Yellow "Cluster $cluster CPU utilisation is $cpuavg %"

HPE Stackato 3.4.2 / 3.6.2 cloud deployment automated for vSphere – Powershell

Posted on 2016/12/11 by cann0nF0dder Leave a comment

Build template:

In order to run the Invoke-VMscript cmdlet, we need to spin up stackato VM from ovf, install VMware tools, run some recent updates/patches and save this VM as template.

Deploy stackato VM from OVF

Open VM Console and configure OS:
Login with stackato/stackato
Reset stackato password to stackato123 using passwd
Change IP: kato op static_ip (give it free temporary IP in 172.x.x.x) example:

op static_ip --interface=eth0 --ip=172.x.x.x --netmask=255.255.255.0 --gateway=172.x.x.x --dns-nameservers=x.x.x.x --dns-search-domains=x.local --restart-network

1	op static_ip --interface=eth0 --ip=172.x.x.x --netmask=255.255.255.0 --gateway=172.x.x.x --dns-nameservers=x.x.x.x --dns-search-domains=x.local --restart-network

Restart server:

sudo reboot

1

sudo reboot
Set passwordless SUDO

echo 'stackato ALL = (root) NOPASSWD: ALL' | sudo tee /etc/sudoers.d/nopasswd sudo chmod 0440 /etc/sudoers.d/nopasswd

1
2

echo 'stackato ALL = (root) NOPASSWD: ALL' | sudo tee /etc/sudoers.d/nopasswd
sudo chmod 0440 /etc/sudoers.d/nopasswd
Update Ubuntu OS (glibc)

Sudo su - export http_proxy=http://<PROXYIP>:8080 (if needed) apt-get update unattended-upgrades -d

1
2
3
4

Sudo su -
export http_proxy=http://<PROXYIP>:8080 (if needed)
apt-get update
unattended-upgrades -d
Install VMware tools & Hardware

apt-get install open-vm-tools

1

apt-get install open-vm-tools
Change permission for interface settings

chmod 666 /etc/network/interfaces

1

chmod 666 /etc/network/interfaces

Set the IP address to 192.168.100.100 (this will be overwritten by the script):

op static_ip --interface=eth0 --ip=192.168.100.100 --netmask=255.255.255.0 --gateway=192.168.100.101 --dns-nameservers=192.168.100.102 --dns-search-domains=x.local --restart-network

1	op static_ip --interface=eth0 --ip=192.168.100.100 --netmask=255.255.255.0 --gateway=192.168.100.101 --dns-nameservers=192.168.100.102 --dns-search-domains=x.local --restart-network

Shutdown guest OS and upgrade virtual hardware
Clone VM to template, name should be stackato-3.x.2-template-vm-tools

<#
NAME: Stackato_Deploy_Cloud_from_Template.ps1

AUTHOR: Chris Danielewski

DATE : 11/23/2016

PURPOSE: This script is used to deploy Stackato Cloud.
This is done by deploying a VM from template and applying extra configuration.


OUTPUT: N/A


REQUIRED UTILITIES: PowerCLI, SSH-Sessions module


==========================================================================
CHANGE HISTORY:
v1.0 11/18/2016 CD New script!
#>

if (!(Get-module | where {$_.Name -eq "SSH-Sessions"})) {
Import-Module SSH-Sessions
}
#Ask for VM Name
$cloudname = Read-Host "Please enter the desired name for the new Stackato cloud (eg. p4stackato_, do not append the role)"

#Ask for Odd / Even Cluster
$OddEven = Read-Host "Odd or even vAPP/Cluster? 1 - Odd , 2 - Even"

#Declere nodes to be built
Write-Host ""
if ($OddEven -eq "1") {
$nodestodeploy = @()
$nodestodeploy += $cloudname + "head01"
$nodestodeploy += $cloudname + "router01"
$nodestodeploy += $cloudname + "services01"
$nodestodeploy += $cloudname + "dea01"
$nodestodeploy += $cloudname + "dea03" 
}
elseif ($OddEven -eq "2") {
$nodestodeploy = @()
$nodestodeploy += $cloudname + "head02"
$nodestodeploy += $cloudname + "router02"
$nodestodeploy += $cloudname + "services02"
$nodestodeploy += $cloudname + "dea02"
$nodestodeploy += $cloudname + "dea04"
}
else {Write-Host "Improper answer received."; Exit}

#Set some POD/DC variables
$search = "x.local"

if ($cloudname -like '*p1*'){
$pod = "1"
[int]$podOctet = x
$dns = "x"
$proxy = "x"
}
if ($cloudname -like '*p2*'){
$pod = "2"
[int]$podOctet = x
$dns = "x"
$proxy = "x"
}
if ($cloudname -like '*p3*'){
$pod = "3"
$dns = "x"
$proxy = "x"
[int]$podOctet = x
}
if ($cloudname -like '*p4*'){
$pod = "4"
[int]$podOctet = x
$dns = "x"
$proxy = "x"
}

if ($cloudname -eq $null) {Write-Host "No system name found."; Exit}

$InputvApp = $vApp = $Cluster = $NewVM = $RandHost = $RandDSC = $null

#Output the available vApps to choose from
Write-Host ""
$vapps = Get-vApp -server $DefaultVIServers[0] | sort Name

#Create Cluster Menu and Prompt user to Select Desired Cluster
if ($vapps -is [System.Array]) {
$vmenu = @{}
Write-Host "`nvApp selection for $($DefaultVIServers[0]):"

for ($i=1;$i -le $vapps.count; $i++) {
Write-Host "$i. $($vapps[$i-1].name)"
$vmenu.Add($i,($vapps[$i-1].name))
}

[int]$cans = Read-Host 'Enter desired vApp'
if ($cans -eq '0' -or $cans -gt $i) {Write-Host -ForegroundColor Red -Object "Invalid selection.`n";Exit}

#Set Cluster Variable to User's choice
$vApp = get-vApp ($vmenu.Item($cans))
}

#$InputvApp = Read-Host "What vApp should the new Stackato VM be placed in?" 
$InputvApp = $vApp.name
Write-Host ""
Write-Host ""
Write-Host "Select one of the available Stackato versions to be installed:"
Write-Host ""
Write-Host "1) 3.4.2"
Write-Host "2) 3.6.2"
$InputVersion = Read-Host "Which version of Stackato should be installed?"
Write-Host ""
if ($InputVersion -eq "1") {$mySourceTemplate = Get-Template -Name "stackato-3.4.2-template-vm-tools"}
elseif ($InputVersion -eq "2") {$mySourceTemplate = Get-Template -Name "stackato-3.6.2-template-vm-tools"}
else {Write-Host "Improper answer received."; Exit}

#Prompt for production password to be set
$properpwd = Read-Host "Please enter stackato production password to be configured"
#Array to hold IPs
$SetLastOct = @()
#Loop through array and ask for last octet
for ($i=0; $i -lt $nodestodeploy.length; $i++) {
$SetLastOct += Read-Host "Please enter last IP address Octect for" $nodestodeploy[$i] "(172.$podOctet.x.x)"
}

for ($i=0; $i -lt $nodestodeploy.length; $i++) {

$svrname = $nodestodeploy[$i]
$lastOctet = $SetLastOct[$i]
$vApp = Get-VApp $vApp
$Cluster = Get-Cluster (Get-ResourcePool -Id $vApp.Parent.Id).Parent
$RandHost = $Cluster | Get-VMHost | where {$_.ConnectionState -eq "Connected"} | Get-Random
$StkPG = $RandHost | Get-VDSwitch | Get-VDPortgroup | where {$_.VlanConfiguration.VlanId -eq '<VLAN>'}
$RandDSC = Get-DatastoreCluster -Id ($RandHost | Get-Datastore | where {$_.ParentFolderId -like "StoragePod-group-*"} | Get-Random).ParentFolderId

###Deploying to Cluster with DVS Only###
$myDatastoreCluster = Get-DatastoreCluster -Name $RandDSC
$vmhost = Get-VMHost -Name $RandHost
Write-Host -foregroundcolor green "VMware-tools heartbeat detected"
New-VM -Name $svrname -Template $mySourceTemplate -Datastore $myDatastoreCluster -ResourcePool $vApp


###Deploy Advanced Configuration on New VM###

#Overwritte template settings if needed
$NewVM = $Cluster | Get-VM $svrname
$NewVM | Set-VM -MemoryGB 8 -NumCpu 2 -Confirm:$false | Out-Null
$NewVM | Get-NetworkAdapter | Set-NetworkAdapter -Portgroup $StkPG -Confirm:$false | Out-Null
New-AdvancedSetting -Entity $NewVM -Name keyboard.typematicMinDelay -Value '2000000' -Force:$true -Confirm:$false | Out-Null
$NewVM | Start-VM | Out-Null

$fqdn = $svrname + ".x.local"

#Wait for VM to boot
$tools = Wait-Tools -VM $svrname -TimeoutSeconds 240
$tools.ScriptOutput
write-host -foregroundcolor yellow ""
Write-Host -foregroundcolor green "VMware-tools heartbeat detected"
Write-Host ""
write-host -foregroundcolor yellow "Waiting 60sec - Stackato boot process"
Start-Sleep 60
#configure static IP
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'auto eth0' > /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "Updating values for /etc/network/interfaces"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'iface eth0 inet static' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "IP value set to static"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'address 172.$podOctet.x.$lastOctet' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "IPv4 address set"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'netmask 255.255.255.0' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "Netmask set"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'network 172.$podOctet.x.0' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "Network address set"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'broadcast 172.$podOctet.x.255' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "Broadcast address set"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'gateway 172.$podOctet.x.x' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "Gateway address set"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'dns-nameservers $dns' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "DNS set"
$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'dns-search x.local' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue
$output.ScriptOutput
write-host -foregroundcolor yellow "Search domain set"
write-host -foregroundcolor yellow ""
write-host -foregroundcolor yellow "Static IP values written to /etc/network/interfaces"
write-host -foregroundcolor yellow ""
write-host -foregroundcolor green "Rebooting guest OS"
Get-VM $NewVM | Restart-VMGuest
$tools = Wait-Tools -VM $svrname -TimeoutSeconds 600
$tools.ScriptOutput
write-host -foregroundcolor yellow ""
Write-Host -foregroundcolor green "VMware-tools heartbeat detected"
write-host -foregroundcolor yellow ""
write-host -foregroundcolor yellow "Waiting 90sec - Stackato post boot configs"
Start-Sleep 90
write-host -foregroundcolor yellow ""
write-host -foregroundcolor Green "Invoking SSH session"
$sessionVC0 = $(New-SshSession -ComputerName $fqdn -Username "stackato" -Password "stackato123")
#write-host "session - $session"
if ($sessionVC0 -match "Successfully connected") {
#Disable password expiry for root
write-host -foregroundcolor yellow ""
write-host -foregroundcolor yellow "Updating hostname using kato"
Invoke-SshCommand -ComputerName $fqdn -Command "kato node rename $fqdn" 
write-host -foregroundcolor Yellow "Hostname updated"
write-host ""
write-host -foregroundcolor yellow "Updating timezone"
write-host ""
Invoke-SshCommand -ComputerName $fqdn -Command "echo 'Etc/GMT+6' | sudo tee /etc/timezone;sudo dpkg-reconfigure -f noninteractive tzdata" 
write-host -foregroundcolor Yellow "Timezone updated"
write-host ""
write-host -foregroundcolor yellow "Updating NTP settings"
write-host ""
Invoke-SshCommand -ComputerName $fqdn -Command "echo 'server NTPX' >> /etc/ntp.conf" 
write-host -foregroundcolor Yellow "NTP settings updated"
write-host ""
write-host -foregroundcolor yellow "Updating Proxy"
write-host ""
#Export proxy settings to user profile - more perm
Invoke-SshCommand -ComputerName $fqdn -Command "echo 'export http_proxy=http://$proxy' >> /home/stackato/.bashrc" 
write-host -foregroundcolor Yellow "Proxy updated"
write-host ""
#write-host -foregroundcolor yellow "Running updates"
#write-host ""
#Invoke-SshCommand -ComputerName $fqdn -Command "sudo apt-get update" 
#Invoke-SshCommand -ComputerName $fqdn -Command "sudo unattended-upgrades -d" 
#write-host -foregroundcolor Yellow "Updates complete"
#write-host ""
write-host -foregroundcolor yellow "Updating password to prod"
write-host ""
Invoke-SshCommand -ComputerName $fqdn -Command "echo 'stackato:'$properpwd | sudo chpasswd" -Verbose
write-host -foregroundcolor Yellow "Password has been changed"
write-host ""
write-host -foregroundcolor yellow "Rebooting the node"
Invoke-SshCommand -ComputerName $fqdn -Command "sudo reboot" 
write-host "Connection to $fqdn is now closed" 
}
Else
{
write-host -ForegroundColor Red "Unable to connect to $fqdn"
}
}

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

NAME: Stackato_Deploy_Cloud_from_Template.ps1

AUTHOR: Chris Danielewski

DATE : 11/23/2016

PURPOSE: This script is used to deploy Stackato Cloud.

This is done by deploying a VM from template and applying extra configuration.

OUTPUT: N/A

REQUIRED UTILITIES: PowerCLI, SSH-Sessions module

==========================================================================

CHANGE HISTORY:

v1.0 11/18/2016 CD New script!

if (!(Get-module | where {$_.Name -eq "SSH-Sessions"})) {

Import-Module SSH-Sessions

}

#Ask for VM Name

$cloudname = Read-Host "Please enter the desired name for the new Stackato cloud (eg. p4stackato_, do not append the role)"

#Ask for Odd / Even Cluster

$OddEven = Read-Host "Odd or even vAPP/Cluster? 1 - Odd , 2 - Even"

#Declere nodes to be built

Write-Host ""

if ($OddEven -eq "1") {

$nodestodeploy = @()

$nodestodeploy += $cloudname + "head01"

$nodestodeploy += $cloudname + "router01"

$nodestodeploy += $cloudname + "services01"

$nodestodeploy += $cloudname + "dea01"

$nodestodeploy += $cloudname + "dea03"

}

elseif ($OddEven -eq "2") {

$nodestodeploy = @()

$nodestodeploy += $cloudname + "head02"

$nodestodeploy += $cloudname + "router02"

$nodestodeploy += $cloudname + "services02"

$nodestodeploy += $cloudname + "dea02"

$nodestodeploy += $cloudname + "dea04"

}

else {Write-Host "Improper answer received."; Exit}

#Set some POD/DC variables

$search = "x.local"

if ($cloudname -like '*p1*'){

$pod = "1"

[int]$podOctet = x

$dns = "x"

$proxy = "x"

}

if ($cloudname -like '*p2*'){

$pod = "2"

[int]$podOctet = x

$dns = "x"

$proxy = "x"

}

if ($cloudname -like '*p3*'){

$pod = "3"

$dns = "x"

$proxy = "x"

[int]$podOctet = x

}

if ($cloudname -like '*p4*'){

$pod = "4"

[int]$podOctet = x

$dns = "x"

$proxy = "x"

}

if ($cloudname -eq $null) {Write-Host "No system name found."; Exit}

$InputvApp = $vApp = $Cluster = $NewVM = $RandHost = $RandDSC = $null

#Output the available vApps to choose from

Write-Host ""

$vapps = Get-vApp -server $DefaultVIServers[0] | sort Name

#Create Cluster Menu and Prompt user to Select Desired Cluster

if ($vapps -is [System.Array]) {

$vmenu = @{}

Write-Host "`nvApp selection for $($DefaultVIServers[0]):"

for ($i=1;$i -le $vapps.count; $i++) {

Write-Host "$i. $($vapps[$i-1].name)"

$vmenu.Add($i,($vapps[$i-1].name))

}

[int]$cans = Read-Host 'Enter desired vApp'

if ($cans -eq '0' -or $cans -gt $i) {Write-Host -ForegroundColor Red -Object "Invalid selection.`n";Exit}

#Set Cluster Variable to User's choice

$vApp = get-vApp ($vmenu.Item($cans))

}

#$InputvApp = Read-Host "What vApp should the new Stackato VM be placed in?"

$InputvApp = $vApp.name

Write-Host ""

Write-Host "Select one of the available Stackato versions to be installed:"

Write-Host ""

Write-Host "1) 3.4.2"

Write-Host "2) 3.6.2"

$InputVersion = Read-Host "Which version of Stackato should be installed?"

Write-Host ""

if ($InputVersion -eq "1") {$mySourceTemplate = Get-Template -Name "stackato-3.4.2-template-vm-tools"}

elseif ($InputVersion -eq "2") {$mySourceTemplate = Get-Template -Name "stackato-3.6.2-template-vm-tools"}

else {Write-Host "Improper answer received."; Exit}

#Prompt for production password to be set

$properpwd = Read-Host "Please enter stackato production password to be configured"

#Array to hold IPs

$SetLastOct = @()

#Loop through array and ask for last octet

for ($i=0; $i -lt $nodestodeploy.length; $i++) {

$SetLastOct += Read-Host "Please enter last IP address Octect for" $nodestodeploy[$i] "(172.$podOctet.x.x)"

}

for ($i=0; $i -lt $nodestodeploy.length; $i++) {

$svrname = $nodestodeploy[$i]

$lastOctet = $SetLastOct[$i]

$vApp = Get-VApp $vApp

$Cluster = Get-Cluster (Get-ResourcePool -Id $vApp.Parent.Id).Parent

$RandHost = $Cluster | Get-VMHost | where {$_.ConnectionState -eq "Connected"} | Get-Random

$StkPG = $RandHost | Get-VDSwitch | Get-VDPortgroup | where {$_.VlanConfiguration.VlanId -eq '<VLAN>'}

$RandDSC = Get-DatastoreCluster -Id ($RandHost | Get-Datastore | where {$_.ParentFolderId -like "StoragePod-group-*"} | Get-Random).ParentFolderId

###Deploying to Cluster with DVS Only###

$myDatastoreCluster = Get-DatastoreCluster -Name $RandDSC

$vmhost = Get-VMHost -Name $RandHost

Write-Host -foregroundcolor green "VMware-tools heartbeat detected"

New-VM -Name $svrname -Template $mySourceTemplate -Datastore $myDatastoreCluster -ResourcePool $vApp

###Deploy Advanced Configuration on New VM###

#Overwritte template settings if needed

$NewVM = $Cluster | Get-VM $svrname

$NewVM | Set-VM -MemoryGB 8 -NumCpu 2 -Confirm:$false | Out-Null

$NewVM | Get-NetworkAdapter | Set-NetworkAdapter -Portgroup $StkPG -Confirm:$false | Out-Null

New-AdvancedSetting -Entity $NewVM -Name keyboard.typematicMinDelay -Value '2000000' -Force:$true -Confirm:$false | Out-Null

$NewVM | Start-VM | Out-Null

$fqdn = $svrname + ".x.local"

#Wait for VM to boot

$tools = Wait-Tools -VM $svrname -TimeoutSeconds 240

$tools.ScriptOutput

write-host -foregroundcolor yellow ""

Write-Host -foregroundcolor green "VMware-tools heartbeat detected"

Write-Host ""

write-host -foregroundcolor yellow "Waiting 60sec - Stackato boot process"

Start-Sleep 60

#configure static IP

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'auto eth0' > /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "Updating values for /etc/network/interfaces"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'iface eth0 inet static' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "IP value set to static"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'address 172.$podOctet.x.$lastOctet' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "IPv4 address set"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'netmask 255.255.255.0' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "Netmask set"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'network 172.$podOctet.x.0' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "Network address set"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'broadcast 172.$podOctet.x.255' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "Broadcast address set"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'gateway 172.$podOctet.x.x' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "Gateway address set"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'dns-nameservers $dns' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "DNS set"

$output = Invoke-VMScript -VM $svrname -ScriptText "echo 'dns-search x.local' >> /etc/network/interfaces" -GuestUser stackato -GuestPassword stackato123 -WarningAction SilentlyContinue

$output.ScriptOutput

write-host -foregroundcolor yellow "Search domain set"

write-host -foregroundcolor yellow ""

write-host -foregroundcolor yellow "Static IP values written to /etc/network/interfaces"

write-host -foregroundcolor yellow ""

write-host -foregroundcolor green "Rebooting guest OS"

Get-VM $NewVM | Restart-VMGuest

$tools = Wait-Tools -VM $svrname -TimeoutSeconds 600

$tools.ScriptOutput

write-host -foregroundcolor yellow ""

Write-Host -foregroundcolor green "VMware-tools heartbeat detected"

write-host -foregroundcolor yellow ""

write-host -foregroundcolor yellow "Waiting 90sec - Stackato post boot configs"

Start-Sleep 90

write-host -foregroundcolor yellow ""

write-host -foregroundcolor Green "Invoking SSH session"

$sessionVC0 = $(New-SshSession -ComputerName $fqdn -Username "stackato" -Password "stackato123")

#write-host "session - $session"

if ($sessionVC0 -match "Successfully connected") {

#Disable password expiry for root

write-host -foregroundcolor yellow ""

write-host -foregroundcolor yellow "Updating hostname using kato"

Invoke-SshCommand -ComputerName $fqdn -Command "kato node rename $fqdn"

write-host -foregroundcolor Yellow "Hostname updated"

write-host ""

write-host -foregroundcolor yellow "Updating timezone"

write-host ""

Invoke-SshCommand -ComputerName $fqdn -Command "echo 'Etc/GMT+6' | sudo tee /etc/timezone;sudo dpkg-reconfigure -f noninteractive tzdata"

write-host -foregroundcolor Yellow "Timezone updated"

write-host ""

write-host -foregroundcolor yellow "Updating NTP settings"

write-host ""

Invoke-SshCommand -ComputerName $fqdn -Command "echo 'server NTPX' >> /etc/ntp.conf"

write-host -foregroundcolor Yellow "NTP settings updated"

write-host ""

write-host -foregroundcolor yellow "Updating Proxy"

write-host ""

#Export proxy settings to user profile - more perm

Invoke-SshCommand -ComputerName $fqdn -Command "echo 'export http_proxy=http://$proxy' >> /home/stackato/.bashrc"

write-host -foregroundcolor Yellow "Proxy updated"

write-host ""

#write-host -foregroundcolor yellow "Running updates"

#write-host ""

#Invoke-SshCommand -ComputerName $fqdn -Command "sudo apt-get update"

#Invoke-SshCommand -ComputerName $fqdn -Command "sudo unattended-upgrades -d"

#write-host -foregroundcolor Yellow "Updates complete"

#write-host ""

write-host -foregroundcolor yellow "Updating password to prod"

write-host ""

Invoke-SshCommand -ComputerName $fqdn -Command "echo 'stackato:'$properpwd | sudo chpasswd" -Verbose

write-host -foregroundcolor Yellow "Password has been changed"

write-host ""

write-host -foregroundcolor yellow "Rebooting the node"

Invoke-SshCommand -ComputerName $fqdn -Command "sudo reboot"

write-host "Connection to $fqdn is now closed"

}

Else

{

write-host -ForegroundColor Red "Unable to connect to $fqdn"

}

Update all Host profiles from reference host script

Posted on 2016/12/01 by cann0nF0dder 2 Comments

################################################################
# NAME:     UpdateALLHostProfiles_from_ref_host.ps1
#
# AUTHOR:   Chris Danielewski
# DATE  :   10/27/2016
#
# PURPOSE:      This script is designed to update all host from reference host once we do mass changes
# 
# INPUT:     N/a
#                                                                                                    
# OUTPUT:    Onscreen
#                   
# REQUIRED UTILITIES: none
#                        
#==========================================================================
#CHANGE HISTORY:
#     Version                    DATE               Initials             Description of Change
#     v1.0                       10/27/2016          CD                  New Script
################################################################
#Define Functions
#########################################

#Get Existing Host Profile
$Profiles = @()
$Profiles = Get-VMHostProfile

foreach($Profile in $Profiles){
Write-Host -ForegroundColor Blue "Updating profile: $Profile"
#Create the update Spec
$Spec = New-Object VMware.Vim.HostProfileHostBasedConfigSpec
$Spec.Host = New-Object VMware.Vim.ManagedObjectReference
$Spec.Host = $Profile.ReferenceHost.ExtensionData.MoRef
$Spec.useHostProfileEngine = $true

#Update the host Profile
$Profile.ExtensionData.UpdateHostProfile($Spec)
}

################################################################

# NAME: UpdateALLHostProfiles_from_ref_host.ps1

# AUTHOR: Chris Danielewski

# DATE : 10/27/2016

# PURPOSE: This script is designed to update all host from reference host once we do mass changes

# INPUT: N/a

# OUTPUT: Onscreen

# REQUIRED UTILITIES: none

#==========================================================================

#CHANGE HISTORY:

# Version DATE Initials Description of Change

# v1.0 10/27/2016 CD New Script

################################################################

#Define Functions

#########################################

#Get Existing Host Profile

$Profiles = @()

$Profiles = Get-VMHostProfile

foreach($Profile in $Profiles){

Write-Host -ForegroundColor Blue "Updating profile: $Profile"

#Create the update Spec

$Spec = New-Object VMware.Vim.HostProfileHostBasedConfigSpec

$Spec.Host = New-Object VMware.Vim.ManagedObjectReference

$Spec.Host = $Profile.ReferenceHost.ExtensionData.MoRef

$Spec.useHostProfileEngine = $true

#Update the host Profile

$Profile.ExtensionData.UpdateHostProfile($Spec)

}

Enable / Disable alerts on ESXi Cluster script

Posted on 2016/12/01 by cann0nF0dder Leave a comment

<#
NAME:      Cluster_and_ESXi_alerts_config.ps1

AUTHOR:       Chris Danielewski

DATE  :      08/31/2016

PURPOSE:     This script disables alerts

OUTPUT:      N/A
REQUIRED UTILITIES: PowerCLI

==========================================================================
CHANGE HISTORY:
Version                 DATE               Initials             Description of Change
    v1.0                    08/31/2016          CD                  New Script

#>

$mycluster = <CLUSTER NAME OR SELECTOR>
Write-Host -foregroundcolor Yellow  "  1" -nonewline; Write-Host ") Enable Alerts"
Write-Host -foregroundcolor Yellow  "  2" -nonewline; Write-Host ") Disable Alerts"
$enable = Read-host "Please enter (1-2):"
if ($enable -eq 1){
$alarmMgr = Get-View AlarmManager
$cluster = Get-Cluster $mycluster
$alarmMgr.EnableAlarmActions($cluster.Extensiondata.MoRef,$true)
$alarmMgr2 = Get-View AlarmManager
$esx = Get-Cluster $cluster | Get-VMHost
Foreach ($server in $esx)
{
$alarmMgr2.EnableAlarmActions($server.Extensiondata.MoRef,$true)
}
}
if ($enable -eq 2){
$alarmMgr = Get-View AlarmManager
$cluster = Get-Cluster $mycluster
$alarmMgr.EnableAlarmActions($cluster.Extensiondata.MoRef,$false)
$alarmMgr2 = Get-View AlarmManager
$esx = Get-Cluster $cluster | Get-VMHost
Foreach ($server in $esx)
{
$alarmMgr2.EnableAlarmActions($server.Extensiondata.MoRef,$false)
}
}
Write-Host -foregroundcolor Blue " DONE!"

NAME: Cluster_and_ESXi_alerts_config.ps1

AUTHOR: Chris Danielewski

DATE : 08/31/2016

PURPOSE: This script disables alerts

OUTPUT: N/A

REQUIRED UTILITIES: PowerCLI

==========================================================================

CHANGE HISTORY:

Version DATE Initials Description of Change

v1.0 08/31/2016 CD New Script

$mycluster = <CLUSTER NAME OR SELECTOR>

Write-Host -foregroundcolor Yellow " 1" -nonewline; Write-Host ") Enable Alerts"

Write-Host -foregroundcolor Yellow " 2" -nonewline; Write-Host ") Disable Alerts"

$enable = Read-host "Please enter (1-2):"

if ($enable -eq 1){

$alarmMgr = Get-View AlarmManager

$cluster = Get-Cluster $mycluster

$alarmMgr.EnableAlarmActions($cluster.Extensiondata.MoRef,$true)

$alarmMgr2 = Get-View AlarmManager

$esx = Get-Cluster $cluster | Get-VMHost

Foreach ($server in $esx)

{

$alarmMgr2.EnableAlarmActions($server.Extensiondata.MoRef,$true)

}

if ($enable -eq 2){

$alarmMgr = Get-View AlarmManager

$cluster = Get-Cluster $mycluster

$alarmMgr.EnableAlarmActions($cluster.Extensiondata.MoRef,$false)

$alarmMgr2 = Get-View AlarmManager

$esx = Get-Cluster $cluster | Get-VMHost

Foreach ($server in $esx)

{

$alarmMgr2.EnableAlarmActions($server.Extensiondata.MoRef,$false)

}

Write-Host -foregroundcolor Blue " DONE!"

Configure all vDS port groups as Elastic script – vSphere 6.0 (vds 5/5.5)

Posted on 2016/12/01 by cann0nF0dder Leave a comment

################################################################
# NAME:     Configure_ALL_vds_pgs_Elastic.ps1
#
# AUTHOR:   Source found on https://ict-freak.nl/2013/03/22/powercli-automatic-expand-the-available-ports-for-a-dvportgroup/
#
# DATE  :   11/07/2016
#
# PURPOSE:    This script is designed to reconfigure all distributed port groups to elastic, 
#             it ignores already elastic PGs and uplinks.
#               
# INPUT:     Provide VDS name as paramiter 
#                                                                                                    
# OUTPUT:    Onscreen
#                   
# REQUIRED UTILITIES: RUN to import vDS module: 
#                                               Import-Module VMware.VimAutomation.Vds
#                        
#==========================================================================
#CHANGE HISTORY:
#     Version                    DATE               Initials             Description of Change
#     v1.0                       10/27/2016          CD                  New Script
################################################################
#Define Functions


Param(
  [string]$dvSwitchName
)
if ($dvSwitchName -eq "") 
    {
    $dvSwitchName = Read-Host "Enter distributed switch name"
    }


$dvSwitch = Get-VirtualSwitch -Distributed -Name $dvSwitchName
if($dvSwitch.ExtensionData.Config.ProductInfo.Version –notmatch "4.*"){
    foreach($dvPG in (Get-View -ViewType DistributedVirtualPortgroup|?{!($_.Tag|?{$_.Key -eq "SYSTEM/DVS.UPLINKPG"}) -and !$_.Config.autoExpand})){
        $spec = New-Object VMware.Vim.DVPortgroupConfigSpec
        $spec.AutoExpand = "True"
        $spec.ConfigVersion = $dvPG.Config.ConfigVersion
        $dvPG.ReconfigureDVPortgroup_Task($spec)
        Write-Host "Enable auotExpand for dvPortgroup: $($dvPG.Name)" -ForegroundColor Yellow
        $dvPG.UpdateViewData() 
    }
}
else{
    Write-Host "dvSwitch: $($dvSwitch.Name) is not configured with version 5 or higher. Please upgrade.." -ForegroundColor Red
}

################################################################

# NAME: Configure_ALL_vds_pgs_Elastic.ps1

# AUTHOR: Source found on https://ict-freak.nl/2013/03/22/powercli-automatic-expand-the-available-ports-for-a-dvportgroup/

# DATE : 11/07/2016

# PURPOSE: This script is designed to reconfigure all distributed port groups to elastic,

# it ignores already elastic PGs and uplinks.

# INPUT: Provide VDS name as paramiter

# OUTPUT: Onscreen

# REQUIRED UTILITIES: RUN to import vDS module:

# Import-Module VMware.VimAutomation.Vds

#==========================================================================

#CHANGE HISTORY:

# Version DATE Initials Description of Change

# v1.0 10/27/2016 CD New Script

################################################################

#Define Functions

Param(

[string]$dvSwitchName

)

if ($dvSwitchName -eq "")

{

$dvSwitchName = Read-Host "Enter distributed switch name"

}

$dvSwitch = Get-VirtualSwitch -Distributed -Name $dvSwitchName

if($dvSwitch.ExtensionData.Config.ProductInfo.Version –notmatch "4.*"){

foreach($dvPG in (Get-View -ViewType DistributedVirtualPortgroup|?{!($_.Tag|?{$_.Key -eq "SYSTEM/DVS.UPLINKPG"}) -and !$_.Config.autoExpand})){

$spec = New-Object VMware.Vim.DVPortgroupConfigSpec

$spec.AutoExpand = "True"

$spec.ConfigVersion = $dvPG.Config.ConfigVersion

$dvPG.ReconfigureDVPortgroup_Task($spec)

Write-Host "Enable auotExpand for dvPortgroup: $($dvPG.Name)" -ForegroundColor Yellow

$dvPG.UpdateViewData()

}

else{

Write-Host "dvSwitch: $($dvSwitch.Name) is not configured with version 5 or higher. Please upgrade.." -ForegroundColor Red

}

Tested on vSphere 6.0u1 vDS 5 and 5.5, Nov 2016

vBlock upgrade: Cisco Nexus 1000v VSM upgrade guide – example target version 5.2(1)SV3(1.5a)

Posted on 2016/08/12 by cann0nF0dder Leave a comment

Cisco Nexus 1000v VSM upgrade

1.Download the necessary files from VCE portal based on your target RCM

2.Verify all the prerequisites on Cisco documentation:

(here’s the example for version we are upgrading to 5.2(1)SV3(1.5a)

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus1000/sw/5_2_1_s_v_3_1_5a/install_upgrade/guide/b_Cisco_N1KV_VMware_Install_and_Upgrade_Guide_521SV315a/b_Cisco_N1KV_VMware_Install_and_Upgrade_Guide_521SV314a_chapter_010.html#d8382e1765a1635

3.Make sure there is sufficient space on active and standby VSM:

Log into active VSM

check active VSM disk space:

dir bootflash://

1	dir bootflash://

check the standby VSM disk space

dir bootflash://sup-standby/

1	dir bootflash://sup-standby/

– If needed delete old files using ‘delete’ command (always leave the current VSM version files just in case for the restore)

delete bootflash:nexus-kickstart.x.x.x.SV2.1.a.bin

1	delete bootflash:nexus-kickstart.x.x.x.SV2.1.a.bin

– repeat the same for standby VSM:

delete bootflash://sup-standby/bootflash:nexus-kickstart.x.x.x.SV2.1.a.bin

1	delete bootflash://sup-standby/bootflash:nexus-kickstart.x.x.x.SV2.1.a.bin

4.Copy the files onto active VSM.

In order to transfer the files, log onto active VSM and run:

copy scp://root@<Hostwithfiles>/tmp/n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin
copy scp://root@<Hostwithfiles>/tmp/n1000v-dk9.5.2.1.SV3.1.5a.bin bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin

1 2	copy scp://root@<Hostwithfiles>/tmp/n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin copy scp://root@<Hostwithfiles>/tmp/n1000v-dk9.5.2.1.SV3.1.5a.bin bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin

– copy those onto the standby VSM

copy bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin bootflash://sup-standby/
copy bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin bootflash://sup-standby/n1000v-dk9.5.2.1.SV3.1.5a.bin

1 2	copy bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin bootflash://sup-standby/ copy bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin bootflash://sup-standby/n1000v-dk9.5.2.1.SV3.1.5a.bin

5.Copy running configuration to startup configuration

copy running-config startup-config

1	copy running-config startup-config

6.Power off standby VSM and clone to template:

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus1000/sw/4_2_1_s_v_1_4_a/system_management/configuration/guide/n1000v_system/n1000v_system_vsmbackup.html

After that power on the standby VSM and wait until it comes back up.

7.Backup and pre-checks

Log onto active VSM.

Copy running configuration to startup configuration:

copy running-config startup-config

1	copy running-config startup-config

Run pre-checks:

show install all impact kickstart bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin system bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin

1	show install all impact kickstart bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin system bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin

Looking above we can see that the impact state is non-disruptive, we can verify the current and new version as well as ESXi compatibility.

It’s crucial that ESX hosts are compatible at this stage as the VEMs are not upgraded yet.

8.Verify Cisco VSG is not present in configuration

show vnm-pa status
NSC Policy-Agent status is -Not Installed

1 2	show vnm-pa status NSC Policy-Agent status is -Not Installed

9.Begin the install

install all kickstart bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin system bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin

1	install all kickstart bootflash:n1000v-dk9-kickstart.5.2.1.SV3.1.5a.bin system bootflash:n1000v-dk9.5.2.1.SV3.1.5a.bin

This will show the pre-checks table again and will prompt if you would like to take a backup. Select N (if you select Y, the installer will quiet and the backups are to be taken manually via scp commands as done in step 7)

The installer will hang on “Switching over onto standby” : (SSH session may timeout here, it’s OK!)

At this point wait few minutes and log-in to VSM (which is the standby VSM which has now became the active VSM)

Once logged in run:

show install all status

1	show install all status

10. Post-Installation checks

Run show version command on both active and standby VSM:

show version

1	show version

This should return the target version in our case 5.2(1)SV3(1.5a)

Copy running configuration to startup configuration (IMPORTANT)

copy running-config startup-config

1	copy running-config startup-config

Upgrade completed!

vSphere 6u2 permissions vs perl SDK API calls.

Posted on 2016/05/22 by cann0nF0dder Leave a comment

Prior to upgrading to vSphere 6 (running 5.5) my user account had a read-only privileges on the vSphere object, Datacenter object, as well as some grater rights on clusters, vDS and datastore.

Using Perl SDK to deploy new VM’s – vmcreate.pl worked fine.

PowerCLI C:\Program Files (x86)\VMware\VMware vSphere CLI\Perl\apps\vm> perl .\vmcreate.pl –url https://vCenterServer.local:443/sdk/webService –filename C:\Sc
ripts\XMLVM.xml –schema C:\Scripts\Schema.xsd –username ad\test
Enter password:

Successfully deployed the VM.

After the upgrade to vSphere 6u2 each time the script was run, it returned an error:

SOAP Fault:
-----------
Fault string: Permission to perform this operation was denied.
Fault detail: NoPermissionFault

SOAP Fault:

-----------

Fault string: Permission to perform this operation was denied.

Fault detail: NoPermissionFault

Moreover the VM could be easily created in that cluster / datastore etc using both Web Client and C#.

Solution:

After ripping permissions top to bottom and bottom to top it looks like for some reason it requires administrator privileges on the data center object.

I’ve tried to narrow it down and create the custom role (focusing on Inventory and Virtual machine privileges ) however there are some further issues.

C# client and API would work, but I was unable to deploy VM manually in the web client… ?!?

Leaving this permission as administrator on data center object non-propagating looks to do the job for now.

I’ll keep this post updated if I find time to drill down into it further.

vCloud Director RESTapi using powershell to disable org,orgvdc and poweroff vApps

Posted on 2016/03/10 by cann0nF0dder 2 Comments

Script written to automate vCD cancellation process using powershell and REST.

It takes vcd and organization as input and cancel that customer in multi tenant environments. By cancel I mean disable org,orgvcd and power off all existing vApps.

#*========================================================================
#* Script Function: Cancellation of the customer org/vdc.
# Author: Chris Danielewski
#*========================================================================
param(
[string]$vCDserver,
[string]$org
)
$vcd = $vCDserver+".test.lab.com"

$path = "Z:\LogDir"
If (Test-Path $path)
{
write-host -foregroundcolor Green "Log directory found: $path"
write-host ""
}
Else
{
write-host -foregroundcolor Red "Unable to access $path , Please double check if the share is mapped"
exit
}

$logdir = $path+$org+".txt"
if (Test-Path $logdir) 
{
write-host "Log file exist $logdir"
}
Else
{
write-host "Log file set to $logdir"
New-Item $logdir -type file 
}


#Get password function
<confidential>


#*===========================================================================
#* Script Function: Gets Auth String 
#* Thanks to Timothy Test for sharing those get/post functions!
#*===========================================================================
Function GetConinfo ($BaseURL,$password)
{
$url=$baseURL+"/sessions"
Write-Host "Trying to connect to " $url -ForegroundColor Green
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
$webRequest = [System.Net.WebRequest]::Create($url)
$webRequest.ServicePoint.Expect100Continue = $false
$webRequest.PreAuthenticate = $true
$webRequest.Method = "Post"
$webRequest.Accept = "application/*+xml;version=5.6";
$webRequest.Credentials = New-Object System.Net.NetworkCredential("admin@system",[Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($password)))
$resp = $webRequest.GetRequestStream();
$rs = $webRequest.GetResponse()
[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $rs.GetResponseStream();
[string]$results = $sr.ReadToEnd();
$rs.Close(); 
return New-Object PSObject -Property @{Auth=$rs ; HTTP=[xml]$results}
}
#*===========================================================================
#* Script Function: Execute GET
#*===========================================================================
Function Getvcd($URL,$auth)
{
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
$webRequest = [System.Net.WebRequest]::Create($url)
$webRequest.ContentType = "text/html"
$webRequest.ServicePoint.Expect100Continue = $false
$webRequest.Method = "Get"
$webRequest.Headers.Add("x-vcloud-authorization",$auth);
$webRequest.Accept = "application/*+xml;version=5.1";
[System.Net.WebResponse]$resp = $webRequest.GetResponse();
$rs = $resp.GetResponseStream();
[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $rs;
[string]$results = $sr.ReadToEnd();
$rs.Close(); 
return [xml]$results;
}
function vcdRestP($url,$auth,$method,$contentType,$body)
{
$postContent = [byte[]][char[]][string]$body
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
$webRequest = [System.Net.WebRequest]::Create($url)
$webRequest.ContentType = $contentType
$webRequest.ServicePoint.Expect100Continue = $false
$webRequest.Method = $method
$webRequest.Headers.Add("x-vcloud-authorization",$auth);
$webRequest.Accept = "application/*+xml;version=5.6";
$resp = $webRequest.GetRequestStream();
$resp.Write($postContent, 0, $postContent.length)
$rs = $webRequest.GetResponse();
[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $rs.GetResponseStream();
[string]$results = $sr.ReadToEnd();
$rs.Close(); 
return $results;
}

# Prep
#set password
$password = <confidential> -AsPlainText -force
#set base URL to vCD api 
$BaseURL="https://"+$vCDname+"/api"
#Get connection and authentication
$Coninfo=GetConinfo $BaseURL $password
$auth=$Coninfo.Auth.Headers["x-vcloud-authorization"]
#get org list URL
$OrgListURL = ($Coninfo.HTTP.Session.Link | where {$_.type -eq "application/vnd.vmware.vcloud.orglist+xml"}).href
#Use GET to retrieve org list
$OrgInfo= getvcd $OrgListURL $auth
#set Target Org URL
$TargetOrg = ($OrgInfo.OrgList.org | where {$_.name -eq $org}).href
#Use GET to retrieve Target Org XML
$TargetOrgXML = getvcd $TargetOrg $auth
#Set OrgID and cut the prefix to obtain just the ID
$orgID = $TargetOrgXML.Org.Id
$orgID = $orgID.replace("urn:vcloud:org:","")

#Post variables , no body and content type needed for those requests.
$D_method="POST"
$D_body=""
$D_contentType=""

#PowerOff vAPPs
#set Target Org VDC URLs 
$TargetOrgVDC = ($TargetOrgXML.Org.Link | where {$_.type -eq "application/vnd.vmware.vcloud.vdc+xml"}).href
#Loop through each VDC to obtain VDC XML object and get all vAPPs.
ForEach ($vdc in $TargetOrgVDC)
{
$TargetOrgVDCXML = getvcd $vdc $auth
$vApps = $TargetOrgVDCXML.vdc.ResourceEntities.ResourceEntity.href
#Loop through all vAPPs, remove prefix to obtain vApp ID and get each vApp status and name
ForEach ($vApp in $vApps)
{
$Pattern = "https.*vApp/"
$New = ""
$vApp = [regex]::replace($vApp, $pattern, "")
$vAppURL = ($BaseURL+"/vApp/"+$vApp)
$vAppXML = getvcd $vAppURL $auth
$vAppstate = $vAppXML.vapp.status
$vAppname = $vAppXML.vapp.name
# shutdown vApps if powered on
if ($vAppstate -ne 8)
{
write-host -foregroundcolor Blue "Issued PowerOff to $vAppname"
$vAppPowerOffURL = ($BaseURL+"/vApp/"+$vApp+"/power/action/shutdown")
$date = get-date
#Save the output to log file
"vAPP name:"+$vAppname+" URL: "+$BaseURL+" ORG: "+$orgID+" DATE: "+$date | Out-File $logdir -Append
$poweroffPOST = vcdRestP $vAppPowerOffURL $auth $D_method
Start-Sleep 10
} 
}
}
#Disable VDCs
$TargetOrgVDC = ($TargetOrgXML.Org.Link | where {$_.type -eq "application/vnd.vmware.vcloud.vdc+xml"}).href
#Loop through each vcd, remove prefix and post disable action
ForEach ($vdc in $TargetOrgVDC)
{
$Pattern = "https.*c/"
$New = ""
$vdc = [regex]::replace($vdc, $pattern, "")
$vdctoDisable = ($BaseURL+"/admin/vdc/"+$vdc+"/action/disable")
Start-Sleep 10
write-host -foregroundcolor Blue "Disabling VDC"
$disablevdc = vcdRestP $vdctoDisable $auth $D_method
}

#Disable Org 
Start-Sleep -s 10
write-host -foregroundcolor Blue "Disabling the Organization"
$orgURLtoDisable = ($BaseURL+"/admin/org/"+$orgID+"/action/disable")
$disable = vcdRestP $orgURLtoDisable $auth $D_method

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

#*========================================================================

#* Script Function: Cancellation of the customer org/vdc.

# Author: Chris Danielewski

#*========================================================================

param(

[string]$vCDserver,

[string]$org

)

$vcd = $vCDserver+".test.lab.com"

$path = "Z:\LogDir"

If (Test-Path $path)

{

write-host -foregroundcolor Green "Log directory found: $path"

write-host ""

}

Else

{

write-host -foregroundcolor Red "Unable to access $path , Please double check if the share is mapped"

exit

}

$logdir = $path+$org+".txt"

if (Test-Path $logdir)

{

write-host "Log file exist $logdir"

}

Else

{

write-host "Log file set to $logdir"

New-Item $logdir -type file

}

#Get password function

#*===========================================================================

#* Script Function: Gets Auth String

#* Thanks to Timothy Test for sharing those get/post functions!

#*===========================================================================

Function GetConinfo ($BaseURL,$password)

{

$url=$baseURL+"/sessions"

Write-Host "Trying to connect to " $url -ForegroundColor Green

[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}

$webRequest = [System.Net.WebRequest]::Create($url)

$webRequest.ServicePoint.Expect100Continue = $false

$webRequest.PreAuthenticate = $true

$webRequest.Method = "Post"

$webRequest.Accept = "application/*+xml;version=5.6";

$webRequest.Credentials = New-Object System.Net.NetworkCredential("admin@system",[Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($password)))

$resp = $webRequest.GetRequestStream();

$rs = $webRequest.GetResponse()

[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $rs.GetResponseStream();

[string]$results = $sr.ReadToEnd();

$rs.Close();

return New-Object PSObject -Property @{Auth=$rs ; HTTP=[xml]$results}

}

#*===========================================================================

#* Script Function: Execute GET

#*===========================================================================

Function Getvcd($URL,$auth)

{

[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}

$webRequest = [System.Net.WebRequest]::Create($url)

$webRequest.ContentType = "text/html"

$webRequest.ServicePoint.Expect100Continue = $false

$webRequest.Method = "Get"

$webRequest.Headers.Add("x-vcloud-authorization",$auth);

$webRequest.Accept = "application/*+xml;version=5.1";

[System.Net.WebResponse]$resp = $webRequest.GetResponse();

$rs = $resp.GetResponseStream();

[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $rs;

[string]$results = $sr.ReadToEnd();

$rs.Close();

return [xml]$results;

}

function vcdRestP($url,$auth,$method,$contentType,$body)

{

$postContent = [byte[]][char[]][string]$body

[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}

$webRequest = [System.Net.WebRequest]::Create($url)

$webRequest.ContentType = $contentType

$webRequest.ServicePoint.Expect100Continue = $false

$webRequest.Method = $method

$webRequest.Headers.Add("x-vcloud-authorization",$auth);

$webRequest.Accept = "application/*+xml;version=5.6";

$resp = $webRequest.GetRequestStream();

$resp.Write($postContent, 0, $postContent.length)

$rs = $webRequest.GetResponse();

[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $rs.GetResponseStream();

[string]$results = $sr.ReadToEnd();

$rs.Close();

return $results;

}

# Prep

#set password

$password = <confidential> -AsPlainText -force

#set base URL to vCD api

$BaseURL="https://"+$vCDname+"/api"

#Get connection and authentication

$Coninfo=GetConinfo $BaseURL $password

$auth=$Coninfo.Auth.Headers["x-vcloud-authorization"]

#get org list URL

$OrgListURL = ($Coninfo.HTTP.Session.Link | where {$_.type -eq "application/vnd.vmware.vcloud.orglist+xml"}).href

#Use GET to retrieve org list

$OrgInfo= getvcd $OrgListURL $auth

#set Target Org URL

$TargetOrg = ($OrgInfo.OrgList.org | where {$_.name -eq $org}).href

#Use GET to retrieve Target Org XML

$TargetOrgXML = getvcd $TargetOrg $auth

#Set OrgID and cut the prefix to obtain just the ID

$orgID = $TargetOrgXML.Org.Id

$orgID = $orgID.replace("urn:vcloud:org:","")

#Post variables , no body and content type needed for those requests.

$D_method="POST"

$D_body=""

$D_contentType=""

#PowerOff vAPPs

#set Target Org VDC URLs

$TargetOrgVDC = ($TargetOrgXML.Org.Link | where {$_.type -eq "application/vnd.vmware.vcloud.vdc+xml"}).href

#Loop through each VDC to obtain VDC XML object and get all vAPPs.

ForEach ($vdc in $TargetOrgVDC)

{

$TargetOrgVDCXML = getvcd $vdc $auth

$vApps = $TargetOrgVDCXML.vdc.ResourceEntities.ResourceEntity.href

#Loop through all vAPPs, remove prefix to obtain vApp ID and get each vApp status and name

ForEach ($vApp in $vApps)

{

$Pattern = "https.*vApp/"

$New = ""

$vApp = [regex]::replace($vApp, $pattern, "")

$vAppURL = ($BaseURL+"/vApp/"+$vApp)

$vAppXML = getvcd $vAppURL $auth

$vAppstate = $vAppXML.vapp.status

$vAppname = $vAppXML.vapp.name

# shutdown vApps if powered on

if ($vAppstate -ne 8)

{

write-host -foregroundcolor Blue "Issued PowerOff to $vAppname"

$vAppPowerOffURL = ($BaseURL+"/vApp/"+$vApp+"/power/action/shutdown")

$date = get-date

#Save the output to log file

"vAPP name:"+$vAppname+" URL: "+$BaseURL+" ORG: "+$orgID+" DATE: "+$date | Out-File $logdir -Append

$poweroffPOST = vcdRestP $vAppPowerOffURL $auth $D_method

Start-Sleep 10

}

#Disable VDCs

$TargetOrgVDC = ($TargetOrgXML.Org.Link | where {$_.type -eq "application/vnd.vmware.vcloud.vdc+xml"}).href

#Loop through each vcd, remove prefix and post disable action

ForEach ($vdc in $TargetOrgVDC)

{

$Pattern = "https.*c/"

$New = ""

$vdc = [regex]::replace($vdc, $pattern, "")

$vdctoDisable = ($BaseURL+"/admin/vdc/"+$vdc+"/action/disable")

Start-Sleep 10

write-host -foregroundcolor Blue "Disabling VDC"

$disablevdc = vcdRestP $vdctoDisable $auth $D_method

}

#Disable Org

Start-Sleep -s 10

write-host -foregroundcolor Blue "Disabling the Organization"

$orgURLtoDisable = ($BaseURL+"/admin/org/"+$orgID+"/action/disable")

$disable = vcdRestP $orgURLtoDisable $auth $D_method

Any questions let me know!

Enjoy.

Powershell & SSH-Module – automated ssh/sshd configuration changes for multiple nodes

Posted on 2016/01/11 by cann0nF0dder Leave a comment

This script uses powershell ssh module and provides a quick way for global configuration changes if puppet/chef etc is not available in your environment. Below is an example of ssh/sshd changes. Moreover using invoke-sshcommand can perform any action / pass parameters to the shell.

#Define 2 arrays for host and credentials:
#Pull resources array from the file if needed or declare below.
$resources = @()
$creds =@()

#Obtaining credentials from password manager , alternatively those can be declared below.
write-host "Obtaining creds from password manager"
for ($i=0; $i -lt $resources.length; $i++) {
$creds+=get-password $resources[$i] root
}

#Loop through all elements in resource array and execute changes 
for ($y=0; $y -lt $resources.length; $y++) {
$sessionA = $(New-SshSession -ComputerName $resources[$y] -Username root -Password $creds[$y])
if ($sessionA -match "Successfully connected") {

#Backup config files
write-host "##################################################################"
write-host -foregroundcolor Yellow "Connected to $($resources[$y])"
write-host "##################################################################"
write-host "Backing up ssh_config and sshd_config to .bak"
Invoke-SshCommand -ComputerName $resources[$y] -Command "cp /etc/ssh/ssh_config /etc/ssh/ssh_config.bak; cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak && echo done " | Out-null
#Alter files
write-host "Altering lines in ssh configs"

#More syntax not shown due to confidentiality but Invoke-sshcommand can execute any action.
Invoke-SshCommand -ComputerName $resources[$y] -Command "sed -i 's/# ForwardAgent no/ForwardAgent yes/g' /etc/ssh/ssh_config; `
sed -i 's/# ForwardX11 no/ForwardX11 yes/g' /etc/ssh/ssh_config; `
sed -i 's/# RSAAuthentication yes/RSAAuthentication yes/g' /etc/ssh/ssh_config; `
sed -i 's/#LogLevel INFO/LogLevel VERBOSE/g' /etc/ssh/sshd_config; "| Out-null
write-host "##################################################################"

#Verify output for ssh and sshd
write-host "Verification - please make sure no comment signs # exist in the output below"
write-host "/etc/ssh/ssh_config checks"
Invoke-SshCommand -ComputerName $resources[$y] -Command "echo config; cat /etc/ssh/ssh_config | egrep -w '(ForwardAgent yes|ForwardX11 yes|RSAAuthentication yes)'" | Out-null 
write-host "/etc/ssh/sshd_config checks"
Invoke-SshCommand -ComputerName $resources[$y] -Command "echo config; cat /etc/ssh/sshd_config | egrep -x '(LogLevel)'" | Out-null 
#restart ssh
Invoke-SshCommand -ComputerName $resources[$y] -Command "service sshd restart" | Out-null 
Invoke-SshCommand -ComputerName $resources[$y] -Command "service sshd status" | Out-null
Remove-SshSession -ComputerName $resources[$y]
}
Else
{
write-host "Password doesnt match"
}
write-host "##################################################################" 
}
write-host -foregroundcolor Green "Configuration Completed"
}

#Define 2 arrays for host and credentials:

#Pull resources array from the file if needed or declare below.

$resources = @()

$creds =@()

#Obtaining credentials from password manager , alternatively those can be declared below.

write-host "Obtaining creds from password manager"

for ($i=0; $i -lt $resources.length; $i++) {

$creds+=get-password $resources[$i] root

}

#Loop through all elements in resource array and execute changes

for ($y=0; $y -lt $resources.length; $y++) {

$sessionA = $(New-SshSession -ComputerName $resources[$y] -Username root -Password $creds[$y])

if ($sessionA -match "Successfully connected") {

#Backup config files

write-host "##################################################################"

write-host -foregroundcolor Yellow "Connected to $($resources[$y])"

write-host "##################################################################"

write-host "Backing up ssh_config and sshd_config to .bak"

Invoke-SshCommand -ComputerName $resources[$y] -Command "cp /etc/ssh/ssh_config /etc/ssh/ssh_config.bak; cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak && echo done " | Out-null

#Alter files

write-host "Altering lines in ssh configs"

#More syntax not shown due to confidentiality but Invoke-sshcommand can execute any action.

Invoke-SshCommand -ComputerName $resources[$y] -Command "sed -i 's/# ForwardAgent no/ForwardAgent yes/g' /etc/ssh/ssh_config; `

sed -i 's/# ForwardX11 no/ForwardX11 yes/g' /etc/ssh/ssh_config; `

sed -i 's/# RSAAuthentication yes/RSAAuthentication yes/g' /etc/ssh/ssh_config; `

sed -i 's/#LogLevel INFO/LogLevel VERBOSE/g' /etc/ssh/sshd_config; "| Out-null

write-host "##################################################################"

#Verify output for ssh and sshd

write-host "Verification - please make sure no comment signs # exist in the output below"

write-host "/etc/ssh/ssh_config checks"

Invoke-SshCommand -ComputerName $resources[$y] -Command "echo config; cat /etc/ssh/ssh_config | egrep -w '(ForwardAgent yes|ForwardX11 yes|RSAAuthentication yes)'" | Out-null

write-host "/etc/ssh/sshd_config checks"

Invoke-SshCommand -ComputerName $resources[$y] -Command "echo config; cat /etc/ssh/sshd_config | egrep -x '(LogLevel)'" | Out-null

#restart ssh

Invoke-SshCommand -ComputerName $resources[$y] -Command "service sshd restart" | Out-null

Invoke-SshCommand -ComputerName $resources[$y] -Command "service sshd status" | Out-null

Remove-SshSession -ComputerName $resources[$y]

}

Else

{

write-host "Password doesnt match"

}

write-host "##################################################################"

}

write-host -foregroundcolor Green "Configuration Completed"

}

Enjoy.

Powershell,ovftool & powercli unattended deployment Tips

Posted on 2015/11/02 by cann0nF0dder Leave a comment

Typical vCC deployment command syntax is:

& 'C:\Program Files\VMware\VMware OVF Tool\ovftool.exe' 
--acceptAllEulas 
--noSSLVerify 
--powerOn 
--name=$name --computerName:$name=$name 
--diskMode=thick 
--datastore="$LargestDatastore" 
--network="$pgt" "$pathToOVF" 
" vi://${usernameparsed}:${passwordparsed}@${vc}/?dns=${node}"

& 'C:\Program Files\VMware\VMware OVF Tool\ovftool.exe'

--acceptAllEulas

--noSSLVerify

--powerOn

--name=$name --computerName:$name=$name

--diskMode=thick

--datastore="$LargestDatastore"

--network="$pgt" "$pathToOVF"

" vi://${usernameparsed}:${passwordparsed}@${vc}/?dns=${node}"

Here’s how to obtain some of those parameters (PowerCLI):

Get host from specific cluster:

$Cluster="Management"
$server = @()
$server = get-VMhost -Location "$Cluster" | select Name
$node = $server[1].Name.SubString(0)
echo "Esxi node has been selected - $node"

$Cluster="Management"

$server = @()

$server = get-VMhost -Location "$Cluster" | select Name

$node = $server[1].Name.SubString(0)

echo "Esxi node has been selected - $node"

Get datastore with most free space for specific cluster:

$datastores = get-datastore where {$_.name -like "*mgmt*"} | select Name,FreeSpaceMB
#Sets some static info
$LargestFreeSpace = "0"
$LargestDatastore = $null
#Performs the calculation of which datastore has most free space
foreach ($datastore in $datastores) {
if ($Datastore.FreeSpaceMB -gt $LargestFreeSpace) { 
$LargestFreeSpace = $Datastore.FreeSpaceMB
$LargestDatastore = $Datastore.name
}
}
#Writes out the result to the PowerShell Console 
write-host "$LargestDatastore has been selected as the largest datastore with $LargestFreeSpace MB Free Space"

$datastores = get-datastore where {$_.name -like "*mgmt*"} | select Name,FreeSpaceMB

#Sets some static info

$LargestFreeSpace = "0"

$LargestDatastore = $null

#Performs the calculation of which datastore has most free space

foreach ($datastore in $datastores) {

if ($Datastore.FreeSpaceMB -gt $LargestFreeSpace) {

$LargestFreeSpace = $Datastore.FreeSpaceMB

$LargestDatastore = $Datastore.name

}

#Writes out the result to the PowerShell Console

write-host "$LargestDatastore has been selected as the largest datastore with $LargestFreeSpace MB Free Space"

Get network with specific content/prefix:

$env = "*dmz-pg*"
#Lookup port group
write-host -foregroundcolor Green "Retrieving Port Groups"
$pg = get-VirtualPortgroup -Name $env | select Name
$pgt = $pg.Name.SubString(0)
echo "Port group selected is $pgt"

$env = "*dmz-pg*"

#Lookup port group

write-host -foregroundcolor Green "Retrieving Port Groups"

$pg = get-VirtualPortgroup -Name $env | select Name

$pgt = $pg.Name.SubString(0)

echo "Port group selected is $pgt"

Have fun!

Share This:

Share This:

Share This:

Share This:

Share This:

Share This:

Cisco Nexus 1000v VSM upgrade

Share This:

Share This:

Share This:

Share This: