Image Service
本文介绍在controller节点上安装、配置Image服务 glance，镜像存储在本地文件系统
安装准备
controller 节点 ip：192.168.81.11
1、首先创建数据库、service credentials和API endpoints
$ mysql -uroot -p
mysql> create database glance;
mysql> grant all privileges on glance.* to 'glance'@'localhost'
identified by '123456' with grant option;
mysql> grant all privileges on glance.* to 'glance'@'%'
identified by '123456' with grant option;
mysql> exit;2、切换到admin用户环境以使用admin-only CLI命令
$ source admin-openrc3、建立service credentials
- 创建
glance用户$ openstack user create --domain default --password-prompt glance User Password: Repeat User Password: +---------------------+----------------------------------+ | Field | Value | +---------------------+----------------------------------+ | domain_id | default | | enabled | True | | id | 3f4e777c4062483ab8d9edd7dff829df | | name | glance | | password_expires_at | None | +---------------------+----------------------------------+ -
为
glance用户和service项目添加admin角色$ openstack role add --project service --user glance admin此命令运行后无输出
-
创建
glance服务入口$ openstack service create --name glance --description "OpenStack Image" image +-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | OpenStack Image | | enabled | True | | id | 8c2c7f1b9b5049ea9e63757b5533e6d2 | | name | glance | | type | image | +-------------+----------------------------------+
4、创建image service API endpoints
$ openstack endpoint create --region RegionOne
image public http://192.168.81.11:9292
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 340be3625e9b4239a6415d034e98aace |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 |
| service_name | glance |
| service_type | image |
| url | http://192.168.81.11:9292 |
+--------------+----------------------------------+
$ openstack endpoint --region RegionOne
image internal http://192.168.81.11:9292
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | a6e4b153c2ae4c919eccfdbb7dceb5d2 |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 |
| service_name | glance |
| service_type | image |
| url | http://192.168.81.11:9292 |
+--------------+----------------------------------+
$ openstack endpoint create --region RegionOne
image admin http://192.168.81.11:9292
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 0c37ed58103f4300a84ff125a539032d |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 |
| service_name | glance |
| service_type | image |
| url | http://192.168.81.11:9292 |
+--------------+----------------------------------+安装及配置组件
1、安装
# yum install openstack-glance2、编辑/etc/glance/glance-api.conf，加如下内容：
[database]
...
connection = mysql+pymysql://glance:123456@192.168.81.11/glance
[keystone_authtoken]
...
auth_uri = http://192.168.81.11:5000
auth_url = http://192.168.81.11:35357
memcached_servers = 192.168.81.11:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = 123456
[paste_deploy]
...
flavor = keystone
[glance_store]
...
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/修改完成后，可用如下命令检查配置文件与上述内容相符：
$ cat /etc/glance/glance-api.conf | grep -v ^# | grep -v ^$
3、编辑/etc/glance/glance-registry.conf，加如下内容：
[database]
...
connection = mysql+pymysql://glance:123456@192.168.81.11/glance
[keystone_authtoken]
...
auth_uri = http://192.168.81.11:5000
auth_url = http://192.168.81.11:35357
memcached_servers = 192.168.81.11:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = 123456
[paste_deploy]
...
flavor = keystone修改完成后，可用如下命令检查配置文件与上述内容相符：
$ cat /etc/glance/glance-registry.conf | grep -v ^# | grep -v ^$
4、生成image service数据库
# su -s /bin/sh -c "glance-manage db_sync" glance此处可忽略该命令输出的deprecation messages
完成安装
- 设置开机自动运行并启动
image services# systemctl enable openstack-glance-api.service openstack-glance-registry.service # systemctl start openstack-glance-api.service openstack-glance-registry.service上述服务启动后，可如下验证：
$ ss -lnp|grep 9292
tcp LISTEN 0 128 :9292 :
users:(("glance-api",pid=10926,fd=4),("glance-api",pid=10878,fd=4))
$ ss -lnp|grep 9191
tcp LISTEN 0 128 :9191 :
users:(("glance-registry",pid=10914,fd=4),("glance-registry",pid=10874,
fd=4))
验证
在controller节点进行验证
1、切换到admin用户环境以使用admin-only CLI命令
$ source admin-openrc2、下载测试用image
$ wget http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img3、将cirros镜像上传到镜像服务，镜像文件指定QCOW2格式、bare容器格式，public可见让所有projects都可访问到
$ openstack image create "cirros" --file cirros-0.3.4-x86_64-disk.img
--disk-format qcow2 --container-format bare --public
+------------------+------------------------------------------------------+
| Field | Value |
+------------------+------------------------------------------------------+
| checksum | ee1eca47dc88f4879d8a229cc70a07c6 |
| container_format | bare |
| created_at | 2017-01-14T00:58:31Z |
| disk_format | qcow2 |
| file | /v2/images/583c1e1a-78bd-4030-8b09-84a29102123b/file |
| id | 583c1e1a-78bd-4030-8b09-84a29102123b |
| min_disk | 0 |
| min_ram | 0 |
| name | cirros |
| owner | a84ed1f6ae5d433ca1f84396424eae8c |
| protected | False |
| schema | /v2/schemas/image |
| size | 13287936 |
| status | active |
| tags | |
| updated_at | 2017-01-14T00:58:35Z |
| virtual_size | None |
| visibility | public |
+------------------+------------------------------------------------------+4、确认镜像上传成功
$ openstack image list
+--------------------------------------+--------+--------+
| ID | Name | Status |
+--------------------------------------+--------+--------+
| 583c1e1a-78bd-4030-8b09-84a29102123b | cirros | active |
+--------------------------------------+--------+--------+