[Azure]使用Azure Powershell重新部署ASM虚拟机

重新部署虚拟机的主要思路是将原虚拟机以“保留磁盘”的方式删除，然后使用保留下来的磁盘重建虚拟机。

不过实际情况中，问题往往要比以上情况复杂许多，要考虑的因素例如：虚拟机的终结点，ACL，NSG，虚拟网络，子网，所在云服务的公网IP地址（如果未保留且这台虚拟机是该云服务下的唯一一台，则重建后云服务IP会发生变化），虚拟机内网IP地址，数据磁盘，实例级公网IP，可用性集等等。

这个脚本针对以上方面进行了恢复，对于实例级公网IP，由于不能固定，所以重建后该IP地址会发生变化。此外，对于云服务存在多VIP的情况，脚本中仅对默认IP进行了保留，如果添加了其他IP地址且云服务中仅有这一台虚拟机，这种情况下，未保留的其他云服务VIP会发生改变。

脚本如下：

param(
#Subscription Name
[Parameter(Mandatory = $true)]
[string]$SubscriptionName,

# Cloud Service Name
[Parameter(Mandatory = $true)]
[string]$ServiceName,

# Virtual Machine Name
[Parameter(Mandatory = $true)]
[string]$VmName
)

Function RebuildVirtualMachine()
{
# collect basic virtual machine information
Write-Host "Collecting virtual machine basic information...";
$vm = Get-AzureVM -ServiceName $ServiceName -Name $VmName;
$service = Get-AzureService -ServiceName DanEastCS;
$deployment = Get-AzureDeployment -ServiceName $ServiceName;
$vmSize = $vm.InstanceSize;
$vnetName = $vm.VirtualNetworkName;
$subnetName = $vm.VM.ConfigurationSets[0].SubnetNames[0];
$location = $service.Location;
$osType = $vm.VM.OSVirtualHardDisk.OS;
$availabilitySetName = $vm.AvailabilitySetName; # if not exist, $availabilitySetName -eq $null
Write-Host "VM Size:" $vmSize;
Write-Host "VNET:" $vnetName;
Write-Host "Subnet:" $subnetName;
Write-Host "Location:" $location;
Write-Host "OS Type:" $vm.VM.OSVirtualHardDisk.OS;
Write-Host "Availability Set:" $availabilitySetName;

# collect Disk information
Write-Host "Collecting disk information...";
$osDisk = $vm.VM.OSVirtualHardDisk; # use $osDisk.MediaLink.AbsoluteUri to get vhd url
Write-Host "OS Disk:" $osDisk.MediaLink.AbsoluteUri;
$dataDisks = $dataDisks = $vm.VM.DataVirtualHardDisks;
foreach ($dataDisk in $dataDisks)
{
Write-Host "Data Disk:" $dataDisk.MediaLink.AbsoluteUri;
}

# collect endpoint information and ACL
Write-Host "Collecting endpoint configuration...";
$endpoints = $vm | Get-AzureEndpoint; # use $endpoints[index].Acl.Rules to get acl rules
Write-Host $endpoints.Count "endpoint(s) collected";

# collect network security group to virtual machine
Write-Host "Collecting network security group information...";
$networkSecurityGroupName = $vm.VM.ConfigurationSets[0].NetworkSecurityGroup; # if not exist, $networkSecurityGroupName -eq $null
if ($networkSecurityGroupName -ne $null)
{
Write-Host "Network security group:" $networkSecurityGroupName;
}

# reservedIP (Cloud Service VIP)
$reservedIPName = $deployment.ReservedIPName;
if ($reservedIPName -eq $null)
{
Write-Host "CloudService VIP is not reserved, begin reserving...";
$reservedIPName = $ServiceName + "ReserveIP";
[void](New-AzureReservedIP -ReservedIPName $reservedIPName -ServiceName $ServiceName -Location $location);
Write-Host "CloudService VIP reserved, reservedIP name:" $reservedIPName;
}

# collect instance-level public ip address
Write-Host "Checking instance-level public ip configuration...";
$pipName = $null;
if ($vm.VM.ConfigurationSets[0].PublicIPs.Count -gt 0)
{
$pipName = $vm.VM.ConfigurationSets[0].PublicIPs[0].Name;
Write-Host "Instance-level public ip:" $pipName;
} else {
Write-Host "No instance-level public ip configured";
}

# collectstatic vnet ip
Write-Host "Collecting vnet ip configuration...";
$dip = $vm.IpAddress; # if not exist, $dip -eq $null
if ($dip -ne $null)
{
Write-Host "Vnet ip:" $dip;
}

Write-Host "Rebuilding virtual machine...";
[void](Remove-AzureVM -ServiceName $ServiceName -Name $VmName);
Write-Host "Old virtual machine removed";

# wait some time for disks to be detached
sleep(120);

Write-Host "Configuring new virtual machine";
# build virtual machine configurations
$vmConfig = New-AzureVMConfig -Name $VmName -InstanceSize $vmSize -DiskName $osDisk.DiskName;
$vmConfig = $vmConfig | Set-AzureSubnet -SubnetNames $subnetName;

# attach data disks
foreach ($dataDisk in $dataDisks)
{
$vmConfig = $vmConfig | Add-AzureDataDisk -Import -DiskName $dataDisk.DiskName -LUN $dataDisk.Lun -HostCaching $dataDisk.HostCaching;
}

# configure endpoints and ACLs
foreach ($endpoint in $endpoints)
{
if ($endpoint.LBSetName -ne $null)
{
if ($endpoint.ProbePath -ne $null)
{
$vmConfig = $vmConfig | Add-AzureEndpoint -Name $endpoint.Name -Protocol $endpoint.Protocol `
-LocalPort $endpoint.LocalPort -PublicPort $endpoint.Port `
-LBSetName $endpoint.LBSetName -ProbePort $endpoint.ProbePort `
-ProbeProtocol $endpoint.ProbeProtocol -ProbePath $endpoint.ProbePath `
-ProbeIntervalInSeconds $endpoint.ProbeIntervalInSeconds `
-ProbeTimeoutInSeconds $endpoint.ProbeTimeoutInSeconds;
} else {
$vmConfig = $vmConfig | Add-AzureEndpoint -Name $endpoint.Name -Protocol $endpoint.Protocol `
-LocalPort $endpoint.LocalPort -PublicPort $endpoint.Port `
-LBSetName $endpoint.LBSetName -ProbePort $endpoint.ProbePort `
-ProbeProtocol $endpoint.ProbeProtocol `
-ProbeIntervalInSeconds $endpoint.ProbeIntervalInSeconds `
-ProbeTimeoutInSeconds $endpoint.ProbeTimeoutInSeconds;
}
} else {
$vmConfig = $vmConfig | Add-AzureEndpoint -Name $endpoint.Name -Protocol $endpoint.Protocol `
-LocalPort $endpoint.LocalPort -PublicPort $endpoint.Port;
}
if ($endpoint.InternalLoadBalancerName -ne $null)
{
$vmConfig = $vmConfig | Set-AzureEndpoint -Name $endpoint.Name -InternalLoadBalancerName $endpoint.InternalLoadBalancerName;
}
$vmConfig = $vmConfig | Set-AzureEndpoint -Name $endpoint.Name -DirectServerReturn $endpoint.EnableDirectServerReturn -ACL $endpoint.Acl;
if ($endpoint.IdleTimeoutInMinutes -ne $null)
{
$vmConfig = $vmConfig | Set-AzureEndpoint -Name $endpoint.Name -IdleTimeoutInMinutes $endpoint.IdleTimeoutInMinutes;
}
if ($endpoint.LoadBalancerDistribution -ne $null)
{
$vmConfig = $vmConfig | Set-AzureEndpoint -Name $endpoint.Name -LoadBalancerDistribution $endpoint.LoadBalancerDistribution;
}
if ($endpoint.VirtualIPName -ne $null)
{
$vmConfig = $vmConfig | Set-AzureEndpoint -Name $endpoint.Name -VirtualIPName $endpoint.VirtualIPName;
}
}

# configure instance-level public ip
if ($pipName -ne $null)
{
$vmConfig = $vmConfig | Set-AzurePublicIP -PublicIPName $pipName;
}

# configure vnet ip
if ($dip -ne $null)
{
$vmConfig = $vmConfig | Set-AzureStaticVNetIP -IPAddress $dip;
}

# configure availability set
if ($availabilitySetName -ne $null)
{
$vmConfig = $vmConfig | Set-AzureAvailabilitySet -AvailabilitySetName $availabilitySetName;
}

Write-Host "Finished configurations, creating virtual machine...";
[void]($vmConfig | New-AzureVM -ServiceName $ServiceName -VNetName $vnetName -Location $location -WaitForBoot -WarningAction Ignore);
Write-Host "Virtual machine created";

# if reservedIP is released, re-associate it to cloudservice
$deployment = Get-AzureDeployment -ServiceName $ServiceName;
$ripName = $deployment.ReservedIPName;
if ($ripName -eq $null)
{
Write-Host "Recovering cloudservice reserved ip...";
[void](Set-AzureReservedIPAssociation -ReservedIPName $reservedIPName -ServiceName $ServiceName);
Write-Host "CloudService reserved ip recovered";
}

# configure network security group
if ($networkSecurityGroupName -ne $null)
{
$vm = Get-AzureVM -ServiceName $ServiceName -Name $VmName;
$vm | Set-AzureNetworkSecurityGroupAssociation -Name $networkSecurityGroupName -Force;
}

Write-Host "Finished rebuilding virtual machine";
}

Function BreakLease($diskUrl, $context)
{
$storageAccountName = GetPropertyFromUrl $diskUrl "https://" ".";
$containerName = GetPropertyFromUrl $diskUrl ".blob.core.chinacloudapi.cn/" "/";
$blobName = $diskUrl.Substring($diskUrl.LastIndexOf("/") + 1);

$blob = Get-AzureStorageBlob -Context $context -Container $containerName -Blob $blobName -ErrorAction Ignore;
if ($blob.ICloudBlob.Properties.LeaseStatus -eq "Locked")
{
$blob.ICloudBlob.BreakLease();
}
}

Function ShowWarning() {
$yes = New-Object System.Management.Automation.Host.ChoiceDescription "&Yes","Description.";
$no = New-Object System.Management.Automation.Host.ChoiceDescription "&No","Description.";
$cancel = New-Object System.Management.Automation.Host.ChoiceDescription "&Cancel","Description.";
$options = [System.Management.Automation.Host.ChoiceDescription[]]($yes, $no, $cancel);

$title = "!!! Before rebuilding this virtual machine !!!";
$message = "WARNING: Data on temporary disk (Usually 'D:\' or '/dev/sdb') will be `
lost, Instance-Level Public IP Address could not be reserved (Will be `
changed), are you sure to continue?";
$result = $host.ui.PromptForChoice($title, $message, $options, 1); # 0 - YES / 1 - NO / 2 - Cancel

return $result;
}

$choice = ShowWarning;
if ($choice -eq 0)
{
$cred = Get-Credential;
[void](Add-AzureAccount -Environment AzureChinaCloud -Credential $cred);

[void](Select-AzureSubscription -SubscriptionName $SubscriptionName);
RebuildVirtualMachine;
}
执行过程：

PS C:\Users\DanielHX> &.\[ASM]rebuild_virtualmachine.ps1 -SubscriptionName XXXXXXXX -ServiceName DanEastCS -VmName DanCentOS65

!!! Before rebuilding this virtual machine !!!

WARNING: Data on temporary disk (Usually 'D:\' or '/dev/sdb') will be lost, Instance-Level Public IP Address could

 not be reserved (Will be changed), are you sure to continue?

[Y] Yes 
No  [C] Cancel  [?] Help (default is "N"): y

cmdlet Get-Credential at command pipeline position 1

Supply values for the following parameters:

Credential

Collecting virtual machine basic information...

VM Size: Large

VNET: DanEastVNET

Subnet: Subnet-1

Location: China East

OS Type: Linux

Availability Set:

Collecting disk information...

OS Disk: https://danieleaststorage.blob.core.chinacloudapi.cn/vhds/DanEastCS-DanCentOS65-2016-05-17.vhd
Data Disk: https://danieleaststorage.blob.core.chinacloudapi.cn/vhds/DanServerTest-DanCentOS65-0616-DataDisk1.vhd
Data Disk: https://danieleaststorage.blob.core.chinacloudapi.cn/vhds/DanServerTest-DanCentOS65-0616-DataDisk2.vhd
Data Disk: https://danieleaststorage.blob.core.chinacloudapi.cn/vhds/DanServerTest-DanCentOS65-0616-DataDisk3.vhd
Data Disk: https://danieleaststorage.blob.core.chinacloudapi.cn/vhds/DanServerTest-DanCentOS65-0616-DataDisk4.vhd
Collecting endpoint configuration...

4 endpoint(s) collected

Collecting network security group information...

Checking instance-level public ip configuration...

No instance-level public ip configured

Collecting vnet ip configuration...

Vnet ip: 10.0.0.4

Rebuilding virtual machine...

Old virtual machine removed

Configuring new virtual machine

Finished configurations, creating virtual machine...

Virtual machine created

Finished rebuilding virtual machine