vCenter Appliance cheat sheet

SSL Build Partition

🇫🇷 Clavier

- Changer la langue de la console:

# localectl status
# localectl list-keymaps
# localectl set-keymap fr

ou

# loadkeys fr

ou

# setxkbmap fr

AD/LDAP

- Recuperer le certificat pour LDAPS

openssl s_client -connect dc.ludo.local:636 -showcerts

ou

openssl s_client -showcerts -verify 5 -connect dc.ludo.local:636  < /dev/null | awk '/BEGIN/,/END/{ if(/BEGIN/)    {a++}; out="AD"a".cer"; print >out}'

Base de donnée:

- Se connecter a la base de donnée:

# /opt/vmware/vpostgres/current/bin/psql -d VCDB -U postgres

- Verifier la taille des bases:

SELECT pg_database.datname, pg_size_pretty(pg_database_size(pg_database.datname)) AS size FROM pg_database;

- Verifier la taille de la base VCDB:

SELECT pg_size_pretty(pg_database_size('VCDB'));

- Trouver les plus grosses tables:

SELECT relname AS "relation", pg_size_pretty(pg_relation_size(C.oid)) AS "size" FROM pg_class C LEFT JOIN pg_namespace N ON (N.oid = C.relnamespace)WHERE nspname NOT IN ('pg_catalog', 'information_schema') ORDER BY pg_relation_size(C.oid) DESC LIMIT 15;

- Purge VPX_TEXT_ARRAY:

select count(*) FROM VPX_TEXT_ARRAY;

select count(*) FROM VPX_TEXT_ARRAY
WHERE  EXISTS(SELECT 1 FROM VPX_ENTITY WHERE ID=VPX_TEXT_ARRAY.MO_ID);

SELECT * into VPX_TEXT_ARRAY_BK FROM VPX_TEXT_ARRAY
WHERE  EXISTS(SELECT 1 FROM VPX_ENTITY WHERE ID=VPX_TEXT_ARRAY.MO_ID);

truncate table VPX_TEXT_ARRAY;

insert into VPX_TEXT_ARRAY (ARRAY_ID,TYPE_ID,VALUE,MO_TYPE,MO_ID,SURR_KEY)
select ARRAY_ID,TYPE_ID,VALUE,MO_TYPE,MO_ID,SURR_KEY from  VPX_TEXT_ARRAY_BK;

drop table VPX_TEXT_ARRAY_BK;

⚠️ Services a stopper avant d'interagir avec la DB:

# service-control --stop vmware-vpxd
# service-control --stop vmware-content-library

A demarrer:

# service-control --start vmware-vpxd
# service-control --start vmware-content-library
# service-control --start vmware-sps
# service-control --start vmware-updatemgr

PNID:

- Verifier le PNID

/usr/lib/vmware-vmafd/bin/vmafd-cli get-pnid --server-name localhost

VECS:

- Lister les Keystores

/usr/lib/vmware-vmafd/bin/vecs-cli store list

- Verifier le nombre d'entrées dans TRUSTED_ROOTS

/usr/lib/vmware-vmafd/bin/vecs-cli entry list --store TRUSTED_ROOTS | grep Number

SMB:

- Tester la creation de dossier pour les backups

/usr/bin/smbclient //DC/backup$/ -U Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser. -c 'cd VCSA/vCenter/; mkdir VCSA/vCenter/vc70.ludo.local/TEST/'

SMB Error Classes and Codes

Points de montage de vCenter Appliance:

Augmenter la taille d'une partition: (6.0)

vpxd_servicecfg storage lvm autogrow
df -h

Augmenter la taille d'une partition: (6.5 et 6.7)

df -h; lsblk; lsscsi
/usr/lib/applmgmt/support/scripts/autogrow.sh
df -h

vCenter Build:

============================ Full Clean flash ============================

service-control --stop vsphere-client
rm -f /etc/vmware/vsphere-client/cmCatalog/* 
rm -rf /usr/lib/vmware-virgo/server/pickup/*
rm -f /usr/lib/vmware-vsphere-client/server/work/*
rm -f /storage/vsphere-client/SerenityDB/serenity/*
rm -rf /etc/vmware/vsphere-client/vc-packages/vsphere-client-serenity/*
service-control --start vsphere-client

============================ Full clean H5 ============================

service-control --stop vsphere-ui
rm -f /etc/vmware/vsphere-client/cmCatalog/*vsphere-ui*
rm -rf /usr/lib/vmware-vsphere-ui/server/work/*
rm -rf /storage/vsphere-ui/SerenityDB/serenity/*
rm -rf /etc/vmware/vsphere-ui/vc-packages/vsphere-client-serenity/*
service-control --start vsphere-ui

======================== Reset Update Manager DB ========================

service-control --stop vmware-updatemgr

/usr/lib/vmware-updatemgr/bin/updatemgr-util reset-db

/usr/lib/vmware-updatemgr/bin/updatemgr-utility.py reset-db

rm -rf /storage/updatemgr/patch-store/*

service-control --start vmware-updatemgr

Source: KB2147284

Certificats 😱:
Checking Expiration of STS Certificate on vCenter Server checksts.py
Regenerating and replacing expired STS certificate on vCenter Server Appliance 6.5/6.7 fixsts.sh
How to regenerate vSphere 6.x certificates using self-signed VMCA /usr/lib/vmware-vmca/bin/certificate-manager
How to replace default vCenter VMCA certificate with Microsoft CA signed certificate

Scripts:

Sources:
https://kb.vmware.com/s/article/2143838
https://kb.vmware.com/s/article/70643
https://kb.vmware.com/s/article/70624
https://kb.vmware.com/s/article/70625
https://kb.vmware.com/s/article/2126276
https://kb.vmware.com/s/article/2145603
https://kb.vmware.com/s/article/79248
https://kb.vmware.com/s/article/76719
https://kb.vmware.com/s/article/2112283