作用
1 glance 主要用于管理云主机镜像
2 glance 需要进行 keystone 验证
3 在第一次云主机创建时候, 把镜像从 glance server 传输至 compute 组件中
安装
yum install -y openstack-glance.noarch openstack-glance-doc.noarch python-glance.noarch python-glanceclient.noarch python-glanceclient-doc.noarch openstack-utils
glance 连接 db
数据库连接配置
# openstack-config --set /etc/glance/glance-api.conf DEFAULT sql_connection mysql://glance:glance@240.10.130.25/glance
# openstack-config --set /etc/glance/glance-api.conf DEFAULT sql_idle_timeout 3600
# openstack-config --set /etc/glance/glance-registry.conf DEFAULT sql_connection mysql://glance:glance@240.10.130.25/glance
# openstack-config --set /etc/glance/glance-registry.conf DEFAULT sql_idle_timeout 3600
glance 连接 keystone
配置 /etc/glance/glance-api.conf
# openstack-config --set /etc/glance/glance-api.conf paste_deploy flavor keystone
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_host 240.10.130.25
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_tenant_name services
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_user glance
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_password glance
配置 /etc/glance/glance-registry.conf
# openstack-config --set /etc/glance/glance-registry.conf paste_deploy flavor keystone
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_host 240.10.130.25
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_tenant_name services
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_user glance
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_password glance
# openstack-config --set /etc/glance/glance-registry.conf paste_deploy config_file /etc/glance/glance-api-paste.ini
# openstack-config --set /etc/glance/glance-registry.conf paste_deploy flavor keystone
配置 /etc/glance/glance-api-paste.ini
# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken paste.filter_factory keystoneclient.middleware.auth_token:filter_factory
# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken admin_tenant_name service
# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken admin_user glance
# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken admin_password glance
配置 /etc/glance/glance-registry-paste.ini
# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken paste.filter_factory keystoneclient.middleware.auth_token:filter_factory
# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken admin_tenant_name service
# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken admin_user glance
# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken admin_password glance
启动 glance
# service openstack-glance-registry restart
# service openstack-glance-api restart
初始化 glance 数据
# glance-manage version_control 0
# glance-manage db_sync
成功后, 自动在 mysql 数据库下创建 glance.* 表
mysql> use glance;
Database changed
mysql> show tables;
+------------------+
| Tables_in_glance |
+------------------+
| image_locations |
| image_members |
| image_properties |
| image_tags |
| images |
| migrate_version |
| task_info |
| tasks |
+------------------+
8 rows in set (0.00 sec)
glance 客户端安装
# yum install -y python-glanceclient.noarch python-glanceclient-doc.noarch
管理 glance
[root@hh-yun-compute-130025 ~(keystone_cookbook)]# cat keystonerc_cookbook
export OS_USERNAME=admin
export OS_TENANT_NAME=cookbook
export OS_PASSWORD=test123
export OS_NO_CACHE=1
export OS_AUTH_URL=http://240.10.130.25:35357/v2.0/
export PS1='[\u@\h \W(keystone_cookbook)]\$ '
镜像管理
获得 centos5.8_x86_64_2.9.4.qcow2, 并上传
[root@hh-yun-compute-130025 ~(keystone_cookbook)]# glance image-list
+----+------+-------------+------------------+------+--------+
| ID | Name | Disk Format | Container Format | Size | Status |
+----+------+-------------+------------------+------+--------+
+----+------+-------------+------------------+------+--------+
# glance image-create --name='centos5.8' --disk-format=qcow2 --container-format=bare --is-public=True --file=./centos5.8_x86_64_2.9.4.qcow2
+------------------+--------------------------------------+
| Property | Value |
+------------------+--------------------------------------+
| checksum | 1b957548077dc554915e82424d4c089a |
| container_format | bare |
| created_at | 2014-10-01T10:00:17 |
| deleted | False |
| deleted_at | None |
| disk_format | qcow2 |
| id | 438d5c5a-f595-45e5-8236-801b9da8f9ab |
| is_public | True |
| min_disk | 0 |
| min_ram | 0 |
| name | centos5.8 |
| owner | c74de0a2760343ac93f27095023be1cd |
| protected | False |
| size | 460841984 |
| status | active |
| updated_at | 2014-10-01T10:00:19 |
| virtual_size | None |
+------------------+--------------------------------------+
[root@hh-yun-compute-130025 ~(keystone_cookbook)]# glance image-list
+--------------------------------------+-----------+-------------+------------------+-----------+--------+
| ID | Name | Disk Format | Container Format | Size | Status |
+--------------------------------------+-----------+-------------+------------------+-----------+--------+
| 438d5c5a-f595-45e5-8236-801b9da8f9ab | centos5.8 | qcow2 | bare | 460841984 | active |
+--------------------------------------+-----------+-------------+------------------+-----------+--------+
利用下面命令能够把某些不公开的镜像分享至指定的 tenant 中
# glance [--can-share] member-create image-id tenant-id
