OpenStack鏡像服務是IaaS的核心服務，鏡像服務主要是由glance組件實作，它接受磁盤鏡像或服務器鏡像API請求，和來自終端用戶或OpenStack計算組件的元資料定義，它也支持包括OpenStack物件存盤在內的多種型別倉庫上的磁盤鏡像或服務器鏡像存盤，
鏡像服務就是用來管理鏡像的，讓用戶能夠發現，獲取和保存鏡像，在OpenStack中提供鏡像服務的是Glance，其主要功能如下：
查詢和獲取鏡像的元資料和鏡像本身
注冊和上傳虛擬機鏡像，包括鏡像的創建，上傳，下載和管理
維護鏡像資訊，包括元資料和鏡像本身
支持多種方式存盤鏡像，包括普通的檔案系統，Swift，Amazon S3等
對虛擬機實體創造快照命令來創建新的鏡像，或者備份虛擬機的狀態
因為OpenStack上創建虛擬機需要鏡像支持，所以先行進行部署部署思路
①創建資料庫、授權
②創建openstack用戶、授權、管理
③修改組態檔（glance-api.conf、glance-registry.conf）
④初始化資料庫、上傳實體鏡像
一、創建資料庫實體和資料庫用戶
[root@controller ~]# mysql -u root -p
MariaDB [(none)]> CREATE DATABASE glance;
Query OK, 1 row affected (0.001 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'GLANCE_DBPASS';
Query OK, 0 rows affected (0.001 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'GLANCE_DBPASS';
Query OK, 0 rows affected (0.000 sec)
MariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.000 sec)
MariaDB [(none)]> exit
Bye
二、創建用戶、修改組態檔
1.創建OpenStack的Glance用戶
注：先前已經部署過keystone，創建用戶前，需要首先執行管理員環境變數腳本（此處已經在~/.bashrc 中定義過了）
[root@controller ~]# openstack user create --domain default --password GLANCE_PASS glance
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| domain_id | default |
| enabled | True |
| id | edc8c773fa93466d8d17826ee88b15ae |
| name | glance |
| options | {} |
| password_expires_at | None |
+---------------------+----------------------------------+
將glance用戶添加到service專案中，并且針對這個專案擁有admin權限；注冊glance的API，需要對service專案有admin權限
[root@controller ~]# openstack role add --project service --user glance admin
創建一個service服務，service名稱為glance，型別為image；創建完成后可以通過 openstack service
list 查看
[root@controller ~]# openstack service create --name glance --description "OpenStack Image" image
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Image |
| enabled | True |
| id | 6752f5c5220840baaefa64fd1a900e22 |
| name | glance |
| type | image |
+-------------+----------------------------------+
2.創建鏡像服務 API 端點，OpenStack使用三種API端點代表三種服務：admin、internal、public
[root@controller ~]# openstack endpoint create --region RegionOne image public http://controller:9292
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | cd124667d3184eb88390a76aae44f6b0 |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 6752f5c5220840baaefa64fd1a900e22 |
| service_name | glance |
| service_type | image |
| url | http://controller:9292 |
+--------------+----------------------------------+
[root@controller ~]# openstack endpoint create --region RegionOne image internal http://controller:9292
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 7eaba6920ccf46afa47fb2c361ae61d2 |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 6752f5c5220840baaefa64fd1a900e22 |
| service_name | glance |
| service_type | image |
| url | http://controller:9292 |
+--------------+----------------------------------+
[root@controller ~]# openstack endpoint create --region RegionOne image admin http://controller:9292
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 7db4b64ebc634fbd805ecaf78aac4ff8 |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 6752f5c5220840baaefa64fd1a900e22 |
| service_name | glance |
| service_type | image |
| url | http://controller:9292 |
+--------------+----------------------------------+
3.安裝 openstack-glance 軟體包
[root@controller ~]# yum -y install openstack-glance
4.修改glance組態檔，glance有兩個組態檔，分別是/etc/glance/glance-api.conf /etc/glance/glance-registry.conf
glance-api.conf配置
[root@controller ~]# cp -a /etc/glance/glance-api.conf{,.bak}
[root@controller ~]# grep -Ev '^$|#' /etc/glance/glance-api.conf.bak > /etc/glance/glance-api.conf
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf database connection mysql+pymysql://glance:GLANCE_DBPASS@controller/glance
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken www_authenticate_uri http://controller:5000
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_url http://controller:5000
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken memcached_servers controller:11211
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_type password
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken project_domain_name Default
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken user_domain_name Default
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken project_name service
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken username glance
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken password GLANCE_PASS
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf paste_deploy flavor keystone
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf glance_store stores file,http
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf glance_store default_store file
[root@controller ~]# openstack-config --set /etc/glance/glance-api.conf glance_store filesystem_store_datadir /var/lib/glance/images/
glance-registry.conf 配置
[root@controller ~]# cp -a /etc/glance/glance-registry.conf{,.bak}
[root@controller ~]# grep -Ev '^$|#' /etc/glance/glance-registry.conf.bak > /etc/glance/glance-registry.conf
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf database connection mysql+pymysql://glance:GLANCE_DBPASS@controller/glance
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken www_authenticate_uri http://controller:5000
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_url http://controller:5000
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken memcached_servers controller:11211
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_type password
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken project_domain_name Default
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken user_domain_name Default
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken project_name service
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken username glance
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken password GLANCE_PASS
[root@controller ~]# openstack-config --set /etc/glance/glance-registry.conf paste_deploy flavor keystone
5.初始化glance資料庫，生成相關表結構
注：不管有多少個controler，只需要初始化一次即可
[root@controller ~]# su -s /bin/sh -c "glance-manage db_sync" glance
6.開啟glance服務
注：此處開啟之后會生成存放鏡像的目錄/var/lib/glance/image
[root@controller ~]# systemctl enable openstack-glance-api.service
[root@controller ~]# systemctl start openstack-glance-api.service
[root@controller ~]# netstat -natp | grep 9292
tcp 0 0 0.0.0.0:9292 0.0.0.0:* LISTEN 23002/python2
7.賦予openstack-glance-api.service服務對存盤設備的可寫權限
[root@controller ~]# chown -hR glance:glance /var/lib/glance/
8.鏡像匯入，先上傳cirros鏡像到控制節點的/root，然后匯入glance，最后查看是否創建成功
鏡像：cirros-0.3.5-x86_64-disk.img
[root@controller ~]# openstack image create --file cirros-0.3.5-x86_64-disk.img --disk-format qcow2 --container-format bare --public cirros
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| checksum | f8ab98ff5e73ebab884d80c9dc9c7290 |
| container_format | bare |
| created_at | 2021-02-21T10:25:38Z |
| disk_format | qcow2 |
| file | /v2/images/3324344d-8663-46f8-8c76-10b13ae6f490/file |
| id | 3324344d-8663-46f8-8c76-10b13ae6f490 |
| min_disk | 0 |
| min_ram | 0 |
| name | cirros |
| owner | f1538b259c2940e09ac65e5443ffc8d5 |
| properties | os_hash_algo='sha512', os_hash_value='f0fd1b50420dce4ca382ccfbb528eef3a38bbeff00b54e95e3876b9bafe7ed2d6f919ca35d9046d437c6d2d8698b1174a335fbd66035bb3edc525d2cdb187232', os_hidden='False' |
| protected | False |
| schema | /v2/schemas/image |
| size | 13267968 |
| status | active |
| tags | |
| updated_at | 2021-02-21T10:25:38Z |
| virtual_size | None |
| visibility | public |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
9.查看鏡像
[root@controller ~]# openstack image list
+--------------------------------------+--------+--------+
| ID | Name | Status |
+--------------------------------------+--------+--------+
| 3324344d-8663-46f8-8c76-10b13ae6f490 | cirros | active |
+--------------------------------------+--------+--------+
轉載請註明出處，本文鏈接：https://www.uj5u.com/qita/262171.html
標籤：其他
下一篇：我擁有的規劃行業和商業資料介紹