openstack笔记 2-阿里云开发者社区

12、验证服务

tcp        0  0 192.168.75.52:3306  0.0.0.0:* LISTEN
3139/mysqld     
tcp        0  0 192.168.75.52:2379  0.0.0.0:* LISTEN
4269/etcd     
tcp        0  0 192.168.75.52:11211 0.0.0.0:* LISTEN
4085/memcached      
tcp        0  0 127.0.0.1:11211 0.0.0.0:* LISTEN
4085/memcached      
tcp        0  0 192.168.75.52:2380  0.0.0.0:* LISTEN
4269/etcd     
tcp        0  0 0.0.0.0:4369  0.0.0.0:* LISTEN
1/systemd     
tcp6       0  0 :::22 :::*  LISTEN
1041/sshd     
tcp6       0  0 ::1:25  :::*  LISTEN
1180/master     
tcp6       0  0 :::5672 :::*  LISTEN
3316/beam.smp     
tcp6       0  0 ::1:11211 :::*  LISTEN
4085/memcached

二、安装keystone服务(在controller执行)

创建keystone用户、数据库

[root@controller ~]# mysql

MariaDB [(none)]> CREATE DATABASE keystone;

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \ IDENTIFIED BY '000000';

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \ IDENTIFIED BY '000000';

2、安装keystone

[root@controller ~]# yum -y install openstack-keystone httpd mod_wsgi

3、安装openstack-utils

[root@controller ~]# yum install openstack-utils -y

4、配置keystone配置文件

[root@controller ~]# openstack-config --set /etc/keystone/keystone.conf database connection mysql+pymysql://keystone:000000@controller/keystone

[root@controller ~]# openstack-config --set /etc/keystone/keystone.conf token provider fernet

[root@controller ~]# grep "^"[a-Z] /etc/keystone/keystone.conf

connection = mysql+pymysql://keystone:000000@controller/keystone

provider = fernet

5、导入keystone数据库

[root@controller ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone

6、建立fernet

[root@controller ~]# keystone-manage fernet_setup --keystone-user keystone -- keystone-group keystone
[root@controller ~]# keystone-manage credential_setup --keystone-user keystone - -keystone-group keystone

7、建立bootstrap

[root@controller ~]# keystone-manage bootstrap --bootstrap-password 000000 \

--bootstrap-admin-url http://controller:5000/v3/ \

--bootstrap-internal-url http://controller:5000/v3/ \

--bootstrap-public-url http://controller:5000/v3/ \

--bootstrap-region-id RegionOne

8、配置httpd

# 修改httpd配置文件

[root@controller ~]# vi /etc/httpd/conf/httpd.conf

ServerName controller 95行

# 创建软连接

[root@controller ~]# ln -s /usr/share/keystone/wsgi-keystone.conf

/etc/httpd/conf.d/

# 启动服务

[root@controller ~]# systemctl enable httpd

[root@controller ~]# systemctl start httpd

9、配置认证环境

[root@controller ~]# cat > admin-openrc << 'EOF'

export OS_PROJECT_DOMAIN_NAME=Default

export OS_USER_DOMAIN_NAME=Default

export OS_PROJECT_NAME=admin

export OS_USERNAME=admin

export OS_PASSWORD=000000

export OS_AUTH_URL=http://controller:5000/v3

export OS_IDENTITY_API_VERSION=3

export OS_IMAGE_API_VERSION=2

EOF

10、创建service项目

# 加载认证文件

[root@controller ~]# source admin-openrc

# 创建service项目

[root@controller ~]# openstack project create --domain default --description "Service Project" service

+-------------+----------------------------------+

| Field | Value |

+-------------+----------------------------------+

| description | Service Project |

| domain_id | default |

| enabled | True |

| id | 94feafee3f074b81a05f86e11d8e2c32 |

| is_domain | False |

| name | service |

| options | {} |

| parent_id | default |

| tags | [] |

+-------------+----------------------------------+

# 列出项目列表

[root@controller ~]# openstack project list

+----------------------------------+---------+

| ID | Name |

+----------------------------------+---------+

| 94feafee3f074b81a05f86e11d8e2c32 | service |

| 97cc8982ba9640eb985ec1261da998dd | admin |

+----------------------------------+---------+

三、安装glance服务(在controller执行)

1、创建glance数据库

[root@controller ~]# mysql -u root -p
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 22
Server version: 10.3.20-MariaDB MariaDB Server
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]> CREATE DATABASE glance;
Query OK, 1 row affected (0.000 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '000000';
Query OK, 0 rows affected (0.001 sec)
MariaDB [(none)]>  GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%'  IDENTIFIED
BY '000000';
Query OK, 0 rows affected (0.000 sec)

2、获取admin凭证

[root@controller ~]# source admin-openrc

3、创建glance服务用户

# 创建一个名为glance的用户

[root@controller ~]# openstack user create --domain default --password-prompt glance

User Password:

Repeat User Password:

+---------------------+----------------------------------+

| Field | Value |

+---------------------+----------------------------------+

| domain_id | default |

| enabled | True |

| id | d027b9b9cf6f4ed6a4b461c96da6f8a1 |

| name | glance |

| options | {} |

| password_expires_at | None |

+---------------------+----------------------------------+

# 将角色添加到用户和项目

[root@controller ~]# openstack role add --project service --user glance admin # 创建glance服务实体：

[root@controller ~]# openstack service create --name glance --description "OpenStack Image" image

+-------------+----------------------------------+

| Field | Value |

+-------------+----------------------------------+

| description | OpenStack Image

| enabled | True

| id | ed76ac7295904d49a88005cae9793c94

| name | glance

| type | image

+-------------+----------------------------------+

4、创建影像服务 API 端点

[root@controller ~]# openstack endpoint create --region RegionOne image public http://controller:9292
+--------------+----------------------------------+
| Field        | Value                             |
+--------------+----------------------------------+
| enabled      | True                              |
| id           | bc5f7da48bdb48e38c9c1a0aec03e1f1 |
| interface    | public                            |
| region       | RegionOne                         |
| region_id    | RegionOne                         |
| service_id   | ed76ac7295904d49a88005cae9793c94 |
| service_name | glance                            |
| service_type | image
| url          | http://controller:9292 | |
+--------------+----------------------------------+
[root@controller ~]# openstack endpoint create --region RegionOne image internal http://controller:9292
+--------------+----------------------------------+
| Field        | Value                             |
+--------------+----------------------------------+
| enabled      |  True  |
| id           |  e277a601f202414a812f067cf7b318d6  |
| interface    |  internal  |
| region       |  RegionOne |
| region_id    |  RegionOne |
| service_id   |  ed76ac7295904d49a88005cae9793c94  |
| service_name |  glance  |
| service_type |  image |
| url          |  http://controller:9292  |
+--------------+----------------------------------+
[root@controller ~]# openstack endpoint create --region RegionOne image admin http://controller:9292
+--------------+----------------------------------+
| Field        | Value                             |
+--------------+----------------------------------+
| enabled      |  True  |
| id           |  0fb3857849e141cc9f1eae3a7cf5a049  |
| interface    |  admin |
| region       |  RegionOne |
| region_id    |  RegionOne |
| service_id   |  ed76ac7295904d49a88005cae9793c94  |
| service_name |  glance  |
| service_type |  image |
| url          |  http://controller:9292  |
+--------------+----------------------------------+

5、安装glance服务

[root@controller ~]# yum install openstack-glance -y

6、修改glance配置文件

# 编辑文件/etc/glance/glance-api.conf并完成以下操作：

在 [database]本节中，配置数据库访问：

[database]
connection = mysql+pymysql://glance:000000@controller/glance
# 使用下面的命令可直接修改
openstack-config --set /etc/glance/glance-api.conf database connection mysql+pymysql://glance:000000@controller/glance

在 [keystone_authtoken] 和``[paste_deploy]部分中，配置身份服务访问：

[keystone_authtoken]
www_authenticate_uri  = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = 000000
[paste_deploy]
flavor = keystone
# 使用下面的命令可直接修改
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken www_authenticate_uri http://controller:5000
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_url http://controller:5000
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken memcached_servers controller:11211
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_type password
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken project_domain_name Default
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken user_domain_name Default
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken project_name service
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken username glance
openstack-config --set /etc/glance/glance-api.conf keystone_authtoken password
000000
openstack-config --set /etc/glance/glance-api.conf paste_deploy flavor keystone

在 [glance_store]部分中，配置本地文件系统存储和映像文件的位置：

[glance_store]

stores = file,http

default_store = file

filesystem_store_datadir = /var/lib/glance/images/

# 使用下面的命令可直接修改

openstack-config --set /etc/glance/glance-api.conf glance_store stores file,http openstack-config --set /etc/glance/glance-api.conf glance_store default_store file

openstack-config --set /etc/glance/glance-api.conf glance_store

filesystem_store_datadir /var/lib/glance/images/

7、同步glance数据库

[root@controller ~]# su -s /bin/sh -c "glance-manage db_sync" glance
# 忽略输出的废弃消息

8、安装完成

# 启动服务和添加到开机自启

[root@controller ~]# systemctl [root@controller ~]# systemctl

start openstack-glance-api.service

enable openstack-glance-api.service

9、上传镜像

[root@controller ~]# glance image-create --name "cirros" \

--file cirros-0.4.0-x86_64-disk.img \

--disk-format qcow2 --container-format bare \

--visibility public

openstack笔记 2

热门文章

最新文章

相关课程

相关电子书