{"id":35051,"date":"2024-10-29T11:09:43","date_gmt":"2024-10-29T04:09:43","guid":{"rendered":"http:\/\/jupitek.maudemo.vip\/index.php\/2024\/10\/29\/how-to-use-nomad-for-container-orchestration\/"},"modified":"2026-05-14T10:36:13","modified_gmt":"2026-05-14T09:36:13","slug":"how-to-use-nomad-for-container-orchestration","status":"publish","type":"post","link":"https:\/\/jupitek.maudemo.vip\/index.php\/2024\/10\/29\/how-to-use-nomad-for-container-orchestration\/","title":{"rendered":"S\u1eed d\u1ee5ng Nomad \u0111\u1ec3 \u0111i\u1ec1u ph\u1ed1i Containers"},"content":{"rendered":"

Nomad<\/a> l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng l\u1eadp l\u1ecbch v\u00e0 s\u1eafp x\u1ebfp kh\u1ed1i l\u01b0\u1ee3ng c\u00f4ng vi\u1ec7c ngu\u1ed3n m\u1edf cung c\u1ea5p m\u1ed9t gi\u1ea3i ph\u00e1p thay th\u1ebf \u0111\u01a1n gi\u1ea3n v\u00e0 linh ho\u1ea1t cho Kubernetes. Nomad c\u00f3 th\u1ec3 tri\u1ec3n khai v\u00e0 qu\u1ea3n l\u00fd c\u1ea3 \u1ee9ng d\u1ee5ng c\u00f3 ch\u1ee9a v\u00e0 kh\u00f4ng ch\u1ee9a tr\u00ean c\u00e1c c\u1ee5m hi\u1ec7u qu\u1ea3, c\u00f3 kh\u1ea3 n\u0103ng m\u1edf r\u1ed9ng cao. Nomad l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a h\u1ec7 sinh th\u00e1i HashiCorp, cung c\u1ea5p kh\u1ea3 n\u0103ng t\u00edch h\u1ee3p s\u1eb5n v\u1edbi c\u00e1c c\u00f4ng c\u1ee5 nh\u01b0 Consul, Terraform v\u00e0 Vault. T\u00ecm hi\u1ec3u th\u00eam v\u1ec1 Nomad v\u00e0 c\u00e1ch so s\u00e1nh v\u1edbi Kubernetes trong h\u01b0\u1edbng d\u1eabn Kubernetes so v\u1edbi Nomad: C\u00e1i n\u00e0o t\u1ed1t h\u01a1n?<\/a> c\u1ee7a ch\u00fang t\u00f4i .<\/p>\n

Trong h\u01b0\u1edbng d\u1eabn n\u00e0y, h\u00e3y t\u00ecm hi\u1ec3u c\u00e1ch b\u1eaft \u0111\u1ea7u hi\u1ec3u v\u00e0 s\u1eed d\u1ee5ng Nomad hi\u1ec7u qu\u1ea3. B\u1eaft \u0111\u1ea7u b\u1eb1ng c\u00e1ch c\u00e0i \u0111\u1eb7t m\u1ed9t phi\u00ean b\u1ea3n Nomad duy nh\u1ea5t \u0111\u1ec3 hi\u1ec3u giao di\u1ec7n v\u00e0 c\u1ea5u tr\u00fac c\u1ee5m c\u1ee7a n\u00f3. Sau \u0111\u00f3, h\u00e3y xem c\u00e1ch t\u1eadn d\u1ee5ng Terraform v\u00e0 Consul \u0111\u1ec3 tri\u1ec3n khai c\u1ee5m Nomad \u0111\u1ea7y \u0111\u1ee7 v\u1edbi Docker cho c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c ch\u1ee9a trong container.<\/p>\n

C\u00e1ch c\u00e0i \u0111\u1eb7t Nomad<\/a><\/h2>\n

Ph\u1ea7n n\u00e0y tr\u00ecnh b\u00e0y c\u00e1ch c\u00e0i \u0111\u1eb7t Nomad v\u00e0 c\u00e1ch truy c\u1eadp giao di\u1ec7n c\u1ee7a Nomad \u0111\u1ec3 b\u1ea1n l\u00e0m quen v\u1edbi ph\u01b0\u01a1ng ph\u00e1p x\u1eed l\u00fd c\u00f4ng vi\u1ec7c c\u1ee7a Nomad.<\/p>\n

Ng\u01b0\u1ee3c l\u1ea1i, n\u1ebfu b\u1ea1n \u0111\u00e3 s\u1eb5n s\u00e0ng tri\u1ec3n khai c\u1ee5m Nomad ngay b\u00e2y gi\u1edd, h\u00e3y chuy\u1ec3n \u0111\u1ebfn ph\u1ea7n C\u00e1ch tri\u1ec3n khai c\u1ee5m b\u1eb1ng Nomad<\/a> .<\/p>\n

Tri\u1ec3n khai Nomad t\u1eeb Linode Marketplace<\/a><\/h3>\n

Gi\u1ea3i ph\u00e1p d\u1ec5 ti\u1ebfp c\u1eadn nh\u1ea5t \u0111\u1ec3 thi\u1ebft l\u1eadp phi\u00ean b\u1ea3n Nomad v\u1edbi Linode l\u00e0 th\u00f4ng qua Linode Marketplace. T\u1ea1i \u0111\u00f3, phi\u00ean b\u1ea3n Linode v\u1edbi Nomad \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t v\u00e0 c\u1ea5u h\u00ecnh c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp nhanh ch\u00f3ng. \u0110\u1ec3 th\u1ef1c hi\u1ec7n, h\u00e3y xem h\u01b0\u1edbng d\u1eabn c\u1ee7a ch\u00fang t\u00f4i v\u1ec1 Tri\u1ec3n khai HashiCorp Nomad th\u00f4ng qua Linode Marketplace<\/a> .<\/p>\n

Tr\u01b0\u1edbc ti\u00ean, h\u00e3y l\u00e0m theo h\u01b0\u1edbng d\u1eabn \u0111\u00f3 \u0111\u1ec3 chu\u1ea9n b\u1ecb m\u1ed9t phi\u00ean b\u1ea3n Nomad. Sau \u0111\u00f3 chuy\u1ec3n \u0111\u1ebfn ph\u1ea7n Nomad ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o<\/a> \u0111\u1ec3 l\u00e0m quen v\u1edbi phi\u00ean b\u1ea3n Nomad m\u1edbi.<\/p>\n

C\u00e0i \u0111\u1eb7t Nomad th\u1ee7 c\u00f4ng<\/a><\/h3>\n

Th\u1ef1c hi\u1ec7n theo c\u00e1c b\u01b0\u1edbc \u1edf \u0111\u00e2y \u0111\u1ec3 c\u00e0i \u0111\u1eb7t Nomad theo c\u00e1ch th\u1ee7 c\u00f4ng. C\u00e1c b\u01b0\u1edbc n\u00e0y h\u01b0\u1edbng d\u1eabn m\u1ecdi th\u1ee9 c\u1ea7n thi\u1ebft \u0111\u1ec3 c\u1ea5u h\u00ecnh phi\u00ean b\u1ea3n Nomad v\u00e0 c\u00f3 th\u1ec3 truy c\u1eadp giao di\u1ec7n Nomad.<\/p>\n

Tr\u01b0\u1edbc khi b\u1ea1n b\u1eaft \u0111\u1ea7u<\/a><\/h4>\n
    \n
  1. N\u1ebfu b\u1ea1n ch\u01b0a th\u1ef1c hi\u1ec7n, h\u00e3y t\u1ea1o m\u1ed9t t\u00e0i kho\u1ea3n Linode v\u00e0 Compute Instance. Xem h\u01b0\u1edbng d\u1eabn B\u1eaft \u0111\u1ea7u v\u1edbi Linode<\/a> v\u00e0 T\u1ea1o Compute Instance<\/a> c\u1ee7a ch\u00fang t\u00f4i .<\/li>\n
  2. L\u00e0m theo h\u01b0\u1edbng d\u1eabn Thi\u1ebft l\u1eadp v\u00e0 B\u1ea3o m\u1eadt Phi\u00ean b\u1ea3n Compute<\/a> c\u1ee7a ch\u00fang t\u00f4i \u0111\u1ec3 c\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng c\u1ee7a b\u1ea1n. B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 mu\u1ed1n \u0111\u1eb7t m\u00fai gi\u1edd, c\u1ea5u h\u00ecnh t\u00ean m\u00e1y ch\u1ee7, t\u1ea1o t\u00e0i kho\u1ea3n ng\u01b0\u1eddi d\u00f9ng gi\u1edbi h\u1ea1n v\u00e0 t\u0103ng c\u01b0\u1eddng quy\u1ec1n truy c\u1eadp SSH. C\u1ea7n c\u00f3 phi\u00ean b\u1ea3n Linode \u0111\u1ec3 ch\u1ea1y Nomad, v\u00ec v\u1eady h\u00e3y l\u00e0m theo h\u01b0\u1edbng d\u1eabn \u0111\u01b0\u1ee3c li\u00ean k\u1ebft t\u1ea1i \u0111\u00e2y \u0111\u1ec3 kh\u1edfi \u0111\u1ed9ng v\u00e0 c\u1ea5u h\u00ecnh phi\u00ean b\u1ea3n c\u1ee7a ri\u00eang b\u1ea1n:<\/li>\n<\/ol>\n

    Ghi ch\u00fa: H\u01b0\u1edbng d\u1eabn n\u00e0y \u0111\u01b0\u1ee3c vi\u1ebft cho ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng ph\u1ea3i root. C\u00e1c l\u1ec7nh y\u00eau c\u1ea7u quy\u1ec1n n\u00e2ng cao \u0111\u01b0\u1ee3c th\u00eam ti\u1ec1n t\u1ed1 sudo<\/code>. N\u1ebfu b\u1ea1n kh\u00f4ng quen v\u1edbi sudo<\/code>l\u1ec7nh n\u00e0y, h\u00e3y xem h\u01b0\u1edbng d\u1eabn Ng\u01b0\u1eddi d\u00f9ng v\u00e0 Nh\u00f3m<\/a> .<\/p>\n

    C\u00e0i \u0111\u1eb7t Nomad tr\u00ean Debian v\u00e0 Ubuntu<\/a><\/h4>\n

    \u0110\u1ec3 c\u00e0i \u0111\u1eb7t Nomad tr\u00ean Debian ho\u1eb7c Ubuntu, h\u00e3y l\u00e0m theo c\u00e1c b\u01b0\u1edbc d\u01b0\u1edbi \u0111\u00e2y:<\/p>\n

    1.C\u00e0i \u0111\u1eb7t c\u00e1c g\u00f3i ti\u00ean quy\u1ebft \u0111\u1ec3 th\u00eam kho l\u01b0u tr\u1eef HashiCorp v\u00e0o tr\u00ecnh qu\u1ea3n l\u00fd g\u00f3i APT:<\/p>\n

    sudo apt install wget gpg coreutils<\/code><\/pre>\n
    2.Th\u00eam kh\u00f3a GPG cho kho l\u01b0u tr\u1eef HashiCorp:<\/p>\n
    wget -O- https:\/\/apt.releases.hashicorp.com\/gpg | gpg --dearmor | sudo tee \/usr\/share\/keyrings\/hashicorp-archive-keyring.gpg<\/code><\/pre>\n
    3.Th\u00eam kho l\u01b0u tr\u1eef HashiCorp v\u00e0o tr\u00ecnh qu\u1ea3n l\u00fd g\u00f3i APT:<\/p>\n
    echo \"deb [signed-by=\/usr\/share\/keyrings\/hashicorp-archive-keyring.gpg] https:\/\/apt.releases.hashicorp.com $(lsb_release -cs) main\" | sudo tee \/etc\/apt\/sources.list.d\/hashicorp.list<\/code><\/pre>\n
    4.C\u1eadp nh\u1eadt ch\u1ec9 m\u1ee5c c\u1ee7a APT v\u00e0 c\u00e0i \u0111\u1eb7t Nomad:<\/p>\n
    sudo apt update\nsudo apt install nomad<\/code><\/pre>\n
    C\u00e0i \u0111\u1eb7t Nomad tr\u00ean Alma, CentOS, Fedora v\u00e0 Rocky<\/a><\/h4>\n
    \u0110\u1ec3 c\u00e0i \u0111\u1eb7t Nomad tr\u00ean AlmaLinux, CentOS Stream, Fedora ho\u1eb7c Rocky Linux, h\u00e3y l\u00e0m theo c\u00e1c b\u01b0\u1edbc d\u01b0\u1edbi \u0111\u00e2y:<\/p>\n
    1.C\u00e0i \u0111\u1eb7t tr\u00ecnh qu\u1ea3n l\u00fd c\u1ea5u h\u00ecnh cho tr\u00ecnh qu\u1ea3n l\u00fd g\u00f3i DNF:<\/p>\n
    sudo dnf install dnf-plugins-core<\/code><\/pre>\n
    2.S\u1eed d\u1ee5ng tr\u00ecnh qu\u1ea3n l\u00fd c\u1ea5u h\u00ecnh \u0111\u1ec3 th\u00eam kho l\u01b0u tr\u1eef HashiCorp v\u00e0o DNF:<\/p>\n
    Tr\u00ean AlmaLinux, CentOS Stream v\u00e0 Rocky Linux, h\u00e3y s\u1eed d\u1ee5ng URL RHEL:<\/p>\n
    sudo dnf config-manager --add-repo https:\/\/rpm.releases.hashicorp.com\/RHEL\/hashicorp.repo<\/code><\/pre>\n
    Tr\u00ean Fedora, h\u00e3y s\u1eed d\u1ee5ng URL Fedora:<\/p>\n
    sudo dnf config-manager --add-repo https:\/\/rpm.releases.hashicorp.com\/fedora\/hashicorp.repo<\/code><\/pre>\n
    3.C\u00e0i \u0111\u1eb7t Nomad:<\/p>\n
    sudo dnf install nomad<\/code><\/pre>\n
    X\u00e1c minh c\u00e0i \u0111\u1eb7t Nomad c\u1ee7a b\u1ea1n<\/a><\/h4>\n
    Sau khi ho\u00e0n t\u1ea5t c\u00e1c b\u01b0\u1edbc c\u00e0i \u0111\u1eb7t tr\u00ean, h\u00e3y x\u00e1c minh c\u00e0i \u0111\u1eb7t Nomad b\u1eb1ng l\u1ec7nh sau:<\/p>\n
    nomad --version<\/code><\/pre>\n
    Nomad v1.5.2<\/code><\/pre>\n
    C\u00e0i \u0111\u1eb7t CNI Plugins cho Nomad<\/a><\/h4>\n
    Nomad s\u1eed d\u1ee5ng plugin CNI \u0111\u1ec3 h\u1ed7 tr\u1ee3 m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng m\u1ea1ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 ch\u1ebf \u0111\u1ed9 c\u1ea7u n\u1ed1i. C\u00e1c plugin CNI l\u00e0 b\u1eaft bu\u1ed9c khi s\u1eed d\u1ee5ng kh\u00f4ng gian t\u00ean m\u1ea1ng trong c\u00e1c c\u1ee5m Nomad.<\/p>\n
    Vi\u1ec7c ho\u00e0n t\u1ea5t ph\u1ea7n thi\u1ebft l\u1eadp n\u00e0y l\u00e0 t\u00f9y ch\u1ecdn nh\u01b0ng nh\u00ecn chung l\u00e0 \u0111\u01b0\u1ee3c khuy\u1ebfn kh\u00edch.<\/p>\n
    1.C\u00e0i \u0111\u1eb7t plugin CNI b\u1eb1ng b\u1ed9 l\u1ec7nh sau:<\/p>\n
    curl -L -o cni-plugins.tgz \"https:\/\/github.com\/containernetworking\/plugins\/releases\/download\/v1.0.0\/cni-plugins-linux-$( [ $(uname -m) = aarch64 ] && echo arm64 || echo amd64)\"-v1.0.0.tgz\nsudo mkdir -p \/opt\/cni\/bin\nsudo tar -C \/opt\/cni\/bin -xzf cni-plugins.tgz<\/code><\/pre>\n
    2.\u0110\u1ec3 h\u1ed7 tr\u1ee3 th\u00eam l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng qua k\u1ebft n\u1ed1i c\u1ea7u n\u1ed1i, h\u00e3y \u0111i\u1ec1u ch\u1ec9nh h\u1ec7 th\u1ed1ng c\u1ee7a b\u1ea1n iptables<\/code>. Nomad cung c\u1ea5p c\u00e1c c\u1ea5u h\u00ecnh \u0111\u01b0\u1ee3c tri\u1ec3n khai b\u00ean d\u01b0\u1edbi cho m\u1ee5c \u0111\u00edch n\u00e0y. C\u00e1c d\u00f2ng n\u00e0y \u0111\u1eb7t iptables<\/code>c\u00e1c gi\u00e1 tr\u1ecb c\u1ea7n thi\u1ebft v\u00e0 th\u00eam ch\u00fang v\u00e0o t\u1ec7p \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o ch\u00fang t\u1ed3n t\u1ea1i khi kh\u1edfi \u0111\u1ed9ng h\u1ec7 th\u1ed1ng. Ch\u1ea1y l\u1ec7nh sau \u0111\u1ec3 t\u1ea1o bridge.conf<\/code>t\u1ec7p trong \/etc\/sysctl.d\/<\/code>th\u01b0 m\u1ee5c:<\/p>\n
    sudo tee \/etc\/sysctl.d\/bridge.conf > \/dev\/null <<EOF\nnet.bridge.bridge-nf-call-arptables = 1\nnet.bridge.bridge-nf-call-ip6tables = 1\nnet.bridge.bridge-nf-call-iptables = 1\nEOF<\/code><\/pre>\n
    3.T\u1ea3i t\u1ec7p m\u1edbi v\u00e0o sysctl<\/code>c\u1ea5u h\u00ecnh hi\u1ec7n t\u1ea1i:<\/p>\n
    sudo modprobe br_netfilter\nsudo sysctl -p \/etc\/sysctl.d\/bridge.conf<\/code><\/pre>\n
    Nomad ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o<\/a><\/h2>\n
    V\u1edbi phi\u00ean b\u1ea3n Nomad \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng, \u0111\u00e3 \u0111\u1ebfn l\u00fac b\u1eaft \u0111\u1ea7u kh\u00e1m ph\u00e1 c\u00e1ch Nomad ho\u1ea1t \u0111\u1ed9ng. Ph\u1ea7n n\u00e0y cung c\u1ea5p nh\u1eefng \u0111i\u1ec1u c\u01a1 b\u1ea3n \u0111\u1ec3 \u0111i\u1ec1u h\u01b0\u1edbng c\u00e1c t\u00ednh n\u0103ng c\u1ee7a Nomad.<\/p>\n
    S\u1eed d\u1ee5ng Nomad<\/a><\/h3>\n
    1.\u0110\u1ea7u ti\u00ean, h\u00e3y kh\u1edfi \u0111\u1ed9ng m\u1ed9t t\u00e1c nh\u00e2n ph\u00e1t tri\u1ec3n Nomad:<\/p>\n
    nomad agent -dev<\/code><\/pre>\n
    Ghi ch\u00fa: C\u00e1c phi\u00ean b\u1ea3n Nomad \u0111\u01b0\u1ee3c t\u1ea1o th\u00f4ng qua Linode Marketplace \u0111\u00e3 ch\u1ea1y t\u00e1c nh\u00e2n Nomad khi kh\u1edfi \u0111\u1ed9ng, do \u0111\u00f3 kh\u00f4ng c\u1ea7n l\u1ec7nh tr\u00ean.<\/p>\n
    2.T\u00e1c nh\u00e2n t\u1ea1o ra m\u1ed9t giao di\u1ec7n web Nomad kh\u1ea3 d\u1ee5ng, ph\u1ee5c v\u1ee5 n\u00f3 tr\u00ean localhost:4646<\/code>. S\u1eed d\u1ee5ng \u0111\u01b0\u1eddng h\u1ea7m SSH \u0111\u1ec3 truy c\u1eadp giao di\u1ec7n n\u00e0y trong tr\u00ecnh duy\u1ec7t web t\u1eeb m\u1ed9t m\u00e1y t\u1eeb xa:<\/p>\n