控制節點鏡像服務

離線下載

apt install --download-only glancemkdir /controller/glance
mv /var/cache/apt/archives/*.deb /controller/glance/
dpkg -i /controller/glance/*.deb

在一個控制節點操作

CREATE DATABASE glance;
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'GLANCE_DBPASS';
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'GLANCE_DBPASS';
FLUSH PRIVILEGES;

source ~/admin-openrcopenstack user create --domain default --password GLANCE_PASS glance
openstack role add --project service --user glance adminopenstack service create --name glance --description "OpenStack Image" imageopenstack endpoint create --region RegionOne image public http://<VIP>:9292
openstack endpoint create --region RegionOne image internal http://<VIP>:9292
openstack endpoint create --region RegionOne image admin http://<VIP>:9292

在三個控制節點操作

• 確保文件在節點可用：
• /etc/ceph/ceph.conf
• /etc/ceph/client.glance.keyring

chown glance:glance /etc/ceph/ceph.client.glance.keyring
chmod 640 /etc/ceph/ceph.client.glance.keyring

• 主要配置

vim /etc/glance/glance-api.conf[database]
connection = mysql+pymysql://glance:GLANCE_DBPASS@<VIP>/glance[keystone_authtoken]
www_authenticate_uri = http://<VIP>:5000
auth_url = http://<VIP>:5000
memcached_servers = ip1:11211,ip2:11211,ip3:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = GLANCE_PASS
service_token_roles_required = true
service_token_roles = admin
region_name = RegionOne[paste_deploy]
# 啟用keystone認證
flavor = keystone[glance_store]
# 指定后端類型：ceph塊設備、url導入
stores = rbd,http
default_store = rbdrbd_store_chunk_size = 8
# 存放鏡像的pool
rbd_store_pool = images
# ceph授權的用戶名
rbd_store_user = glance
# ceph的主配置文件路徑
rbd_store_ceph_conf = /etc/ceph/ceph.conf[DEFAULT]
# 本機IP，其余節點填對應IP
bind_host = ip1
bind_port = 9292
transport_url = rabbit://glance:GLANCE_PASS@ip1,ip2,ip3[oslo_concurrency]
lock_path = /var/lib/glance/tmp

在一個控制節點操作

# 數據庫同步
su -s /bin/sh -c "glance-manage db_sync" glance

在三個控制節點操作

systemctl start glance-api && systemctl enable glance-api
systemctl status glance-apisource ~/admin-openrc
openstack image list