OpenStack 安装和使用（二）

2018-03-14

建立服务和访问点：

建立keystone服务：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 service-create –name=keystone –type=identity –description=”Keystone Identity Service”

建立keystone服务的访问点：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 endpoint-create \

–region RegionHanborq \
–service_id=0ad1e477af5e4ef698b48cb9aec2ae61 \
–publicurl=http://10.24.1.47:5000/v2.0 \
–internalurl=http://10.24.1.47:5000/v2.0 \
–adminurl=http://10.24.1.47:35357/v2.0

建立nova服务：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 service-create –name=nova –type=compute –description=”Nova Compute Service”

建立nova服务的访问点：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 endpoint-create \

–region RegionHanborq \
–service_id=4eb163f3847144d094c003d9ae928908 \

–publicurl=’http://10.24.1.47:8774/v2/%(tenant_id)s’ \
–internalurl=’http://10.24.1.47:8774/v2/%(tenant_id)s’ \
–adminurl=’http://10.24.1.47:8774/v2/%(tenant_id)s’

+————-+—————————————–+

建立volume服务：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 service-create –name=volume –type=volume –description=”Nova Volume Service”

建立volume服务的访问点：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 endpoint-create \

–region RegionHanborq \
–service_id=9f19952076ae4613a6c4fbc05b53125d \

–publicurl=’http://10.24.1.47:8776/v1/%(tenant_id)s’ \
–internalurl=’http://10.24.1.47:8776/v1/%(tenant_id)s’ \
–adminurl=’http://10.24.1.47:8776/v1/%(tenant_id)s’

+————-+—————————————–+

建立glance服务：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 service-create –name=glance –type=image –description=”Glance Image Service”

建立glance服务的访问点：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 endpoint-create \

–region RegionHanborq \
–service_id=f827d479585f403f97e915edc4c636ed \

–publicurl=http://10.24.1.47:9292/v1 \
–internalurl=http://10.24.1.47:9292/v1 \
–adminurl=http://10.24.1.47:9292/v1

+————-+———————————-+

建立EC2服务：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 service-create –name=ec2 –type=ec2 –description=”EC2 Compatibility Layer”

+————-+———————————-+
|   Property |              Value               |
+————-+———————————-+
| description | EC2 Compatibility Layer          |
| id          | e6152edec1104429afa1de55ca7b7f32 |
| name        | ec2                              |
| type        | ec2                              |
+————-+———————————-+

建立EC2服务的访问点：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 endpoint-create \

–region RegionHanborq \
–service_id=e6152edec1104429afa1de55ca7b7f32 \

–publicurl=http://10.24.1.47:8773/services/Cloud \
–internalurl=http://10.24.1.47:8773/services/Cloud \
–adminurl=http://10.24.1.47:8773/services/Admin

+————-+—————————————+

建立对象存储的swift服务：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 service-create –name=swift –type=object-store –description=”Object Storage Service”

建立swift服务的访问点：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 endpoint-create \

–region RegionHanborq \
–service_id=7e2feb47c52648a98716ba3176c35dc5 \

–publicurl ‘http://10.24.1.47:8080/v1/AUTH_%(tenant_id)s’ \
–adminurl ‘http://10.24.1.47:8080/’ \

–internalurl ‘http://10.24.1.47:8080/v1/AUTH_%(tenant_id)s’

查看一下这些列表：

建立ec2-credentials：

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 ec2-credentials-create

# keystone –token c8701a128708a76161e3 –endpoint http://127.0.0.1:35357/v2.0 ec2-credentials-list

导入到.bash_profile里面，给Eucalyptus tools使用，不是必须的：

# echo “export EC2_URL=http://localhost:8773/services/Cloud” > ec2rc
# echo “export EC2_USER_ID=\$(keystone user-list | awk ‘/admin / {print \$2}’)” >> ec2rc
# echo “export EC2_ACCESS_KEY=\$(keystone ec2-credentials-list –user \$EC2_USER_ID | awk ‘/hanborq / {print \$4}’)” >> ec2rc
# echo “export EC2_SECRET_KEY=\$(keystone ec2-credentials-list –user \$EC2_USER_ID | awk ‘/hanborq / {print \$6}’)” >> ec2rc

# chmod 600 ec2rc

# cat ec2rc >> ~/.bash_profile

# . ~/.bash_profile

校验Identity Service：

安装curl：

# yum install curl openssl

校验：

[root@cc ~]# curl -d ‘{“auth”: {“tenantName”: “adminTenant”, “passwordCredentials”:{“username”: “admin”, “password”: “123456”}}}’ -H “Content-type: application/json” http://10.24.1.47:35357/v2.0/tokens | python -mjson.tool
% Total    % Received % Xferd Average Speed   Time    Time     Time Current
Dload Upload   Total   Spent    Left Speed
100   350    0   244 100   106   2733   1187 –:–:– –:–:– –:–:– 2772
{
“access”: {
“serviceCatalog”: {},
“token”: {
“expires”: “2012-07-17T09:03:07Z”,
“id”: “878fafae0d5d4a239b3916bc5517fc7e”
},
“user”: {
“id”: “cd5e2e764fc7420dad016f9af7be7123”,
“name”: “admin”,
“roles”: [],
“roles_links”: [],
“username”: “admin”
}
}
}

[root@cc ~]#
[root@cc ~]# curl -d ‘{“auth”: {“tenantName”: “hanborq”, “passwordCredentials”:{“username”: “admin”, “password”: “123456”}}}’ -H “Content-type: application/json” http://10.24.1.47:35357/v2.0/tokens | python -mjson.tool

% Total % Received % Xferd Average Speed Time Time Time Current

Dload Upload Total Spent Left Speed
100 2296 0 2194 100 102 23032 1070 –:–:– –:–:– –:–:– 23340
{
“access”: {
“serviceCatalog”: [
{
“endpoints”: [
{
“adminURL”: “http://10.24.1.47:8774/v2/94d38db32a7d4107beeed36d9e98bf06”,
“internalURL”: “http://10.24.1.47:8774/v2/94d38db32a7d4107beeed36d9e98bf06”,
“publicURL”: “http://10.24.1.47:8774/v2/94d38db32a7d4107beeed36d9e98bf06”,
“region”: “RegionHanborq”
}
],
“endpoints_links”: [],
“name”: “nova”,
“type”: “compute”
},
{
“endpoints”: [
{
“adminURL”: “http://10.24.1.47:9292/v1”,
“internalURL”: “http://10.24.1.47:9292/v1”,
“publicURL”: “http://10.24.1.47:9292/v1”,
“region”: “RegionHanborq”
}
],
“endpoints_links”: [],
“name”: “glance”,
“type”: “image”
},
{
“endpoints”: [
{
“adminURL”: “http://10.24.1.47:8776/v1/94d38db32a7d4107beeed36d9e98bf06”,
“internalURL”: “http://10.24.1.47:8776/v1/94d38db32a7d4107beeed36d9e98bf06”,
“publicURL”: “http://10.24.1.47:8776/v1/94d38db32a7d4107beeed36d9e98bf06”,
“region”: “RegionHanborq”
}
],
“endpoints_links”: [],
“name”: “volume”,
“type”: “volume”
},
{
“endpoints”: [
{
“adminURL”: “http://10.24.1.47:8773/services/Admin”,
“internalURL”: “http://10.24.1.47:8773/services/Cloud”,
“publicURL”: “http://10.24.1.47:8773/services/Cloud”,
“region”: “RegionHanborq”
}
],
“endpoints_links”: [],
“name”: “ec2”,
“type”: “ec2”
},
{
“endpoints”: [
{
“adminURL”: “http://10.24.1.47:8080/”,
“internalURL”: “http://10.24.1.47:8080/v1/AUTH_94d38db32a7d4107beeed36d9e98bf06”,
“publicURL”: “http://10.24.1.47:8080/v1/AUTH_94d38db32a7d4107beeed36d9e98bf06”,
“region”: “RegionHanborq”
}
],
“endpoints_links”: [],
“name”: “swift”,
“type”: “object-store”
},
{
“endpoints”: [
{
“adminURL”: “http://10.24.1.47:35357/v2.0”,
“internalURL”: “http://10.24.1.47:5000/v2.0”,
“publicURL”: “http://10.24.1.47:5000/v2.0”,
“region”: “RegionHanborq”
}
],
“endpoints_links”: [],
“name”: “keystone”,
“type”: “identity”
}
],
“token”: {
“expires”: “2012-07-17T09:03:47Z”,
“id”: “6a8f81a63c7b4af895f43a52d2d744f0”,
“tenant”: {
“description”: “HanBorq Tenant”,
“enabled”: true,
“id”: “94d38db32a7d4107beeed36d9e98bf06”,
“name”: “hanborq”
}
},
“user”: {
“id”: “cd5e2e764fc7420dad016f9af7be7123”,
“name”: “admin”,
“roles”: [
{
“id”: “428438feb3eb4946907b519383f38ceb”,
“name”: “admin”
},
{
“id”: “aee579c6430c46d9861c5b684d42ebb7”,
“name”: “member”
}
],
“roles_links”: [],
“username”: “admin”
}
}
}

使用Image Service

配置glance：

# glance-manage db_sync

# openstack-config –set /etc/glance/glance-api.conf paste_deploy flavor keystone

# openstack-config –set /etc/glance/glance-api.conf DEFAULT filesystem_store_datadir /var/lib/glance/images/

# openstack-config –set /etc/glance/glance-registry.conf paste_deploy flavor keystone

# openstack-config –set /etc/glance/glance-api-paste.ini filter:authtoken admin_tenant_name service

# openstack-config –set /etc/glance/glance-api-paste.ini filter:authtoken admin_user glance

# openstack-config –set /etc/glance/glance-api-paste.ini filter:authtoken admin_password glance

# openstack-config –set /etc/glance/glance-registry-paste.ini filter:authtoken admin_tenant_name service

# openstack-config –set /etc/glance/glance-registry-paste.ini filter:authtoken admin_user glance

# openstack-config –set /etc/glance/glance-registry-paste.ini filter:authtoken admin_password glance

# openstack-config –set /etc/glance/glance-registry-paste.ini DEFAULT sql_connection mysql://glance:glance@localhost/glance

重启glance：

# systemctl restart openstack-glance-api.service

# systemctl restart openstack-glance-registry.service

# ps axf|grep glance

如果发现服务不能启动，可以使用以下命令试试：

# nohup /usr/bin/glance-registry –config-file /etc/glance/glance-registry.conf –debug –verbose &

关于glance服务log位置：

# vi /var/log/glance/registry.log 和 # vi /var/log/glance/api.log

关于glance cache，这里可以不配置，需要时请参考http://docs.openstack.org/developer/glance/cache.html进行配置。

关于img的保存位置：在# vi /etc/glance/glance-api.conf里面定义（可以本地文件系统、swift、s3、RBD(Ceph、RADOS)），默认为本地文件系统，位置在/var/lib/glance/images/目录。

校验Glance：

# glance –version
glance 2012.1

# glance –os_username=admin –os_password=123456 –os_tenant=hanborq –os_auth_url=http://127.0.0.1:5000/v2.0 index

# glance index 前面已经把鉴权信息放入了~/.bash_profile里面，所以这里可以不用os_xxx参数了。

制作一个操作系统内核、ramdisk和img：

# mkdir /tmp/images

# cd /tmp/images/

# wget http://smoser.brickies.net/ubuntu/ttylinux-uec/ttylinux-uec-amd64-12.1_2.6.35-22_1.tar.gz

# tar -zxvf ttylinux-uec-amd64-12.1_2.6.35-22_1.tar.gz

# glance add name=”tty-linux-kernel” disk_format=aki container_format=aki < ttylinux-uec-amd64-12.1_2.6.35-22_1-vmlinuz
Uploading image ‘tty-linux-kernel’
=====================================================================================================[100%] 41.7M/s, ETA 0h 0m 0s
Added new image with ID: 2eb1ed9e-b1f2-450a-8ce2-810580d09610

# glance add name=”tty-linux-ramdisk” disk_format=ari container_format=ari < ttylinux-uec-amd64-12.1_2.6.35-22_1-loader
Uploading image ‘tty-linux-ramdisk’
===============================================================================================[100%] 936.330177K/s, ETA 0h 0m 0s
Added new image with ID: e36a1d2d-7ae1-4496-b25c-3ee4be0a14d8

# glance add name=”tty-linux” disk_format=ami container_format=ami kernel_id=2eb1ed9e-b1f2-450a-8ce2-810580d09610 ramdisk_id=e36a1d2d-7ae1-4496-b25c-3ee4be0a14d8 < ttylinux-uec-amd64-12.1_2.6.35-22_1.img
Uploading image ‘tty-linux’
===============================================================================================[100%] 119.366753M/s, ETA 0h 0m 0s
Added new image with ID: e951ba9a-a5f1-40fb-916a-56fc2aeee429

# glance index
ID                                   Name                           Disk Format          Container Format     Size
———————————— —————————— ——————– ——————– ————–
e951ba9a-a5f1-40fb-916a-56fc2aeee429 tty-linux                      ami                  ami                        25165824
e36a1d2d-7ae1-4496-b25c-3ee4be0a14d8 tty-linux-ramdisk              ari                  ari                           96629
2eb1ed9e-b1f2-450a-8ce2-810580d09610 tty-linux-kernel               aki                  aki                         4404752

# glance delete <id>

# glance details

发表回复 取消回复

发表回复取消回复