Openstack glance 镜像服务 (五)
引用: 官方文档glance安装 https://docs.openstack.org/ocata/zh_CN/install-guide-rdo/glance.html
介绍：
OpenStack镜像服务是IaaS的核心服务，如同 :ref:`get_started_conceptual_architecture`所示。它接受磁盘镜像或服务器镜像API请求，和来自终端用户或OpenStack计算组件的元数据定义。它也支持包括OpenStack对象存储在内的多种类型仓库上的磁盘镜像或服务器镜像存储。
大量周期性进程运行于OpenStack镜像服务上以支持缓存。同步复制（Replication）服务保证集群中的一致性和可用性。其它周期性进程包括auditors, updaters, 和 reapers。
OpenStack镜像服务包括以下组件：
glance-api
接收镜像API的调用，诸如镜像发现、恢复、存储。
glance-registry
存储、处理和恢复镜像的元数据，元数据包括项诸如大小和类型。
警告
glance-registry是私有内部服务，用于服务OpenStack Image服务。不要向用户暴露该服务
glance
# 先决条件：
[root@db1 ~]# mysql -u root -p
MariaDB [(none)]> CREATE DATABASE glance;
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456';
MariaDB [(none)]> flush privileges;
# 做一下账号登录测试：
[root@db1 ~]# mysql -u glance -p123456
MariaDB [(none)]> show databases;
+--------------------+
| Database |
+--------------------+
| glance |
| information_schema |
+--------------------+
2 rows in set (0.001 sec)
## 创建服务证书.完成这些步骤：
### 创建 glance 用户：
openstack user create --domain default --password-prompt glance
[root@cont-1 ~]# openstack user create --domain default --password-prompt glance
User Password: # 密码 就是 123456
Repeat User Password:
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| domain_id | 317ace63cb8f4562af682ca6c7bdf955 |
| enabled | True |
| id | afb631a3fbb243a98cea0a44241b13df |
| name | glance |
| options | {} |
| password_expires_at | None |
+---------------------+----------------------------------+
### 查看是否存在glance 账号：
[root@cont-1 ~]# openstack user list
+----------------------------------+--------+
| ID | Name |
+----------------------------------+--------+
| 00ff302f8c924bb1b171965c5d5aca92 | demo |
| 7e5fe95e8caa48f78e218919d05693d5 | admin |
| afb631a3fbb243a98cea0a44241b13df | glance |
+----------------------------------+--------+
### 添加admin 角色到glance用户和service项目上：
openstack role add --project service --user glance admin
*** 这个命令执行后没有输出。
### 注册``` glance ```服务实体：
openstack service create --name glance --description "OpenStack Image" image
[root@cont-1 ~]# openstack service create --name glance --description "OpenStack Image" image
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Image |
| enabled | True |
| id | ea21acd8e94641f888033dfe1d13ef36 |
| name | glance |
| type | image |
+-------------+----------------------------------+
[root@cont-1 ~]# openstack service list
+----------------------------------+----------+----------+
| ID | Name | Type |
+----------------------------------+----------+----------+
| 376d49d3d59147a49e5f5081cb04a2b1 | keystone | identity |
| ea21acd8e94641f888033dfe1d13ef36 | glance | image |
+----------------------------------+----------+----------+
### 创建镜像服务的 API 端点：
** 公共端点
openstack endpoint create --region RegionOne image public http://openstack-linux36-vip.magedu.net:9292
** 私有端点
openstack endpoint create --region RegionOne image internal http://openstack-linux36-vip.magedu.net:9292
** 管理端点
openstack endpoint create --region RegionOne image admin http://openstack-linux36-vip.magedu.net:9292
** 执行结果
[root@cont-1 ~]# openstack endpoint create --region RegionOne image public http://openstack-linux36-vip.magedu.net:9292
+--------------+----------------------------------------------+
| Field | Value |
+--------------+----------------------------------------------+
| enabled | True |
| id | b1c38d9b331043f0a625507514edb824 |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | ea21acd8e94641f888033dfe1d13ef36 |
| service_name | glance |
| service_type | image |
| url | http://openstack-linux36-vip.magedu.net:9292 |
+--------------+----------------------------------------------+
[root@cont-1 ~]# openstack endpoint create --region RegionOne image internal http://openstack-linux36-vip.magedu.net:9292
+--------------+----------------------------------------------+
| Field | Value |
+--------------+----------------------------------------------+
| enabled | True |
| id | 01fcaa8287674f80afc2034f2a019016 |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | ea21acd8e94641f888033dfe1d13ef36 |
| service_name | glance |
| service_type | image |
| url | http://openstack-linux36-vip.magedu.net:9292 |
+--------------+----------------------------------------------+
[root@cont-1 ~]# openstack endpoint create --region RegionOne image admin http://openstack-linux36-vip.magedu.net:9292
+--------------+----------------------------------------------+
| Field | Value |
+--------------+----------------------------------------------+
| enabled | True |
| id | 2700c899c78f4503961ad21fed01960b |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | ea21acd8e94641f888033dfe1d13ef36 |
| service_name | glance |
| service_type | image |
| url | http://openstack-linux36-vip.magedu.net:9292 |
+--------------+----------------------------------------------+
[root@cont-1 ~]# openstack endpoint list
+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------------------------+
| ID | Region | Service Name | Service Type | Enabled | Interface | URL |
+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------------------------+
| 01fcaa8287674f80afc2034f2a019016 | RegionOne | glance | image | True | internal | http://openstack-linux36-vip.magedu.net:9292 |
| 2700c899c78f4503961ad21fed01960b | RegionOne | glance | image | True | admin | http://openstack-linux36-vip.magedu.net:9292 |
| 65605d57632a4c8ba0521b20f28bbcc2 | RegionOne | keystone | identity | True | public | http://openstack-linux36-vip.magedu.net:5000/v3 |
| 858dee6eafb54902826175be76954094 | RegionOne | keystone | identity | True | admin | http://openstack-linux36-vip.magedu.net:35357/v3 |
| b1c38d9b331043f0a625507514edb824 | RegionOne | glance | image | True | public | http://openstack-linux36-vip.magedu.net:9292 |
| ec3647ea42f347008d7e35b52324d995 | RegionOne | keystone | identity | True | internal | http://openstack-linux36-vip.magedu.net:5000/v3 |
+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------------------------+
安装并配置组件
yum install openstack-glance -y
编辑文件 /etc/glance/glance-api.conf 并完成如下动作：
在 [database] 部分，配置数据库访问：
[database]
# ...
connection = mysql+pymysql://glance:123456@openstack-linux36-vip.magedu.net/glance
[keystone_authtoken]
auth_uri = http://openstack-linux36-vip.magedu.net:5000
auth_url = http://openstack-linux36-vip.magedu.net:35357
memcached_servers = openstack-linux36-vip.magedu.net:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = 123456
[paste_deploy]
# ...
flavor = keystone
[glance_store]
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/
编辑文件 ``/etc/glance/glance-registry.conf``并完成如下动作：
在 [database] 部分，配置数据库访问：
[database]
# ...
connection = mysql+pymysql://glance:123456@openstack-linux36-vip.magedu.net/glance
[keystone_authtoken]
auth_uri = http://openstack-linux36-vip.magedu.net:5000
auth_url = http://openstack-linux36-vip.magedu.net:35357
memcached_servers = openstack-linux36-vip.magedu.net:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = 123456
[paste_deploy]
# ...
flavor = keystone
### 初始化数据库：
su -s /bin/sh -c "glance-manage db_sync" glance
启动glance并设置为开机自启动
systemctl enable openstack-glance-api.service openstack-glance-registry.service
systemctl start openstack-glance-api.service openstack-glance-registry.service
#######################################################################################
## 做一下 haproxy 的转发设置：
listen openstack_glance_port_9292
bind 0.0.0.0:9292
mode tcp
log global
server 10.10.5.138 10.10.5.138:9292 check inter 3000 fall 2 rise 5
/etc/init.d/haproxy restart
#######################################################################################
## 配置一个存储服务用来存放系统的镜像
# 配置一个nfs服务(存放image镜像)：
yum install nfs-utils -y
vim /etc/exports
/data/openstack/glance *(rw,no_root_squash)
mkdir -p /data/openstack/glance/
chown -R 161.161 glance #这个161是用户ID和用户组ID,从控制机上获取 id glance
exportfs -r # 相当于reload 重读配置文件
systemctl enable nfs
systemctl restart nfs
## 主控机上测试一下
[root@cont-1 ~]# showmount -e 10.10.5.150
Export list for 10.10.5.150:
/data/openstack/glance *
## 挂在nfs到本地：
systemctl stop openstack-glance-api.service openstack-glance-registry.service
mount -t nfs 10.10.5.150:/data/openstack/glance /var/lib/glance/images
systemctl enable openstack-glance-api.service openstack-glance-registry.service
*** 记得开机挂载(_netdev 挂在不上直接跳过)：
vim /etc/fstab
10.10.5.150:/data/openstack/glance /var/lib/glance/images nfs defaults,_netdev 0 0
[root@cont-1 ~]# mount -t nfs 10.10.5.150:/data/openstack/glance /var/lib/glance/images
[root@cont-1 ~]# df -Th
Filesystem Type Size Used Avail Use% Mounted on
devtmpfs devtmpfs 476M 0 476M 0% /dev
tmpfs tmpfs 487M 0 487M 0% /dev/shm
tmpfs tmpfs 487M 7.6M 479M 2% /run
tmpfs tmpfs 487M 0 487M 0% /sys/fs/cgroup
/dev/sda2 xfs 20G 2.1G 17G 11% /
tmpfs tmpfs 98M 0 98M 0% /run/user/0
10.10.5.150:/data/openstack/glance nfs4 20G 2.5G 17G 13% /var/lib/glance/images # 已经挂在上了
##上传和下载功能测试：
wget http://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-disk.img
openstack image create "cirros-0.3.5" --file cirros-0.3.5-x86_64-disk.img --disk-format qcow2 --container-format bare --public
## 上传结果(如果有错误,请看glance日志):
[root@cont-1 ~]# openstack image create "cirros-0.3.5" --file cirros-0.3.5-x86_64-disk.img --disk-format qcow2 --container-format bare --public
+------------------+------------------------------------------------------+
| Field | Value |
+------------------+------------------------------------------------------+
| checksum | f8ab98ff5e73ebab884d80c9dc9c7290 |
| container_format | bare |
| created_at | 2020-05-22T03:21:05Z |
| disk_format | qcow2 |
| file | /v2/images/1511da48-c7d3-4237-85fb-015a69d2134b/file |
| id | 1511da48-c7d3-4237-85fb-015a69d2134b |
| min_disk | 0 |
| min_ram | 0 |
| name | cirros-0.3.5 |
| owner | 7895c74b24e640498acb869a790f7092 |
| protected | False |
| schema | /v2/schemas/image |
| size | 13267968 |
| status | active |
| tags | |
| updated_at | 2020-05-22T03:21:06Z |
| virtual_size | None |
| visibility | public |
+------------------+------------------------------------------------------+
## 查看glance 上的镜像：
[root@cont-1 ~]# source admin.sh
[root@cont-1 ~]# openstack image list
+--------------------------------------+--------------+--------+
| ID | Name | Status |
+--------------------------------------+--------------+--------+
| 1511da48-c7d3-4237-85fb-015a69d2134b | cirros-0.3.5 | active |
+--------------------------------------+--------------+--------+
#######################################################################################