作用

1 glance 主要用于管理云主机镜像
2 glance 需要进行 keystone 验证
3 在第一次云主机创建时候, 把镜像从 glance server 传输至 compute 组件中

安装

yum install -y openstack-glance.noarch openstack-glance-doc.noarch python-glance.noarch python-glanceclient.noarch python-glanceclient-doc.noarch openstack-utils

glance 连接 db

数据库连接配置

# openstack-config --set /etc/glance/glance-api.conf DEFAULT sql_connection mysql://glance:glance@240.10.130.25/glance
# openstack-config --set /etc/glance/glance-api.conf DEFAULT sql_idle_timeout 3600
# openstack-config --set /etc/glance/glance-registry.conf DEFAULT sql_connection mysql://glance:glance@240.10.130.25/glance
# openstack-config --set /etc/glance/glance-registry.conf DEFAULT sql_idle_timeout 3600

glance 连接 keystone

配置 /etc/glance/glance-api.conf

# openstack-config --set /etc/glance/glance-api.conf paste_deploy flavor keystone
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_host 240.10.130.25
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_tenant_name services
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_user glance
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_password glance

配置 /etc/glance/glance-registry.conf

# openstack-config --set /etc/glance/glance-registry.conf paste_deploy flavor keystone
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_host 240.10.130.25
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_tenant_name services
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_user glance
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_password glance
# openstack-config --set /etc/glance/glance-registry.conf paste_deploy config_file /etc/glance/glance-api-paste.ini
# openstack-config --set /etc/glance/glance-registry.conf paste_deploy flavor keystone

配置 /etc/glance/glance-api-paste.ini

# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken paste.filter_factory  keystoneclient.middleware.auth_token:filter_factory
# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken admin_tenant_name service
# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken admin_user glance
# openstack-config --set /etc/glance/glance-api-paste.ini filter:authtoken admin_password glance

配置 /etc/glance/glance-registry-paste.ini

# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken paste.filter_factory  keystoneclient.middleware.auth_token:filter_factory
# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken admin_tenant_name service
# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken admin_user glance
# openstack-config --set /etc/glance/glance-registry-paste.ini filter:authtoken admin_password glance

启动 glance

# service openstack-glance-registry restart
# service openstack-glance-api restart

初始化 glance 数据

# glance-manage version_control 0
# glance-manage db_sync

成功后, 自动在 mysql 数据库下创建 glance.* 表

mysql> use glance;
Database changed

mysql> show tables;
+------------------+
| Tables_in_glance |
+------------------+
| image_locations  |
| image_members    |
| image_properties |
| image_tags       |
| images           |
| migrate_version  |
| task_info        |
| tasks            |
+------------------+
8 rows in set (0.00 sec)

glance 客户端安装

# yum install -y python-glanceclient.noarch python-glanceclient-doc.noarch

管理 glance

[root@hh-yun-compute-130025 ~(keystone_cookbook)]# cat keystonerc_cookbook

export OS_USERNAME=admin
export OS_TENANT_NAME=cookbook
export OS_PASSWORD=test123
export OS_NO_CACHE=1
export OS_AUTH_URL=http://240.10.130.25:35357/v2.0/
export PS1='[\u@\h \W(keystone_cookbook)]\$ '

镜像管理

获得 centos5.8_x86_64_2.9.4.qcow2, 并上传

[root@hh-yun-compute-130025 ~(keystone_cookbook)]# glance image-list
+----+------+-------------+------------------+------+--------+
| ID | Name | Disk Format | Container Format | Size | Status |
+----+------+-------------+------------------+------+--------+
+----+------+-------------+------------------+------+--------+

# glance image-create --name='centos5.8' --disk-format=qcow2 --container-format=bare --is-public=True --file=./centos5.8_x86_64_2.9.4.qcow2

+------------------+--------------------------------------+
| Property         | Value                                |
+------------------+--------------------------------------+
| checksum         | 1b957548077dc554915e82424d4c089a     |
| container_format | bare                                 |
| created_at       | 2014-10-01T10:00:17                  |
| deleted          | False                                |
| deleted_at       | None                                 |
| disk_format      | qcow2                                |
| id               | 438d5c5a-f595-45e5-8236-801b9da8f9ab |
| is_public        | True                                 |
| min_disk         | 0                                    |
| min_ram          | 0                                    |
| name             | centos5.8                            |
| owner            | c74de0a2760343ac93f27095023be1cd     |
| protected        | False                                |
| size             | 460841984                            |
| status           | active                               |
| updated_at       | 2014-10-01T10:00:19                  |
| virtual_size     | None                                 |
+------------------+--------------------------------------+

[root@hh-yun-compute-130025 ~(keystone_cookbook)]# glance image-list
+--------------------------------------+-----------+-------------+------------------+-----------+--------+
| ID                                   | Name      | Disk Format | Container Format | Size      | Status |
+--------------------------------------+-----------+-------------+------------------+-----------+--------+
| 438d5c5a-f595-45e5-8236-801b9da8f9ab | centos5.8 | qcow2       | bare             | 460841984 | active |
+--------------------------------------+-----------+-------------+------------------+-----------+--------+

利用下面命令能够把某些不公开的镜像分享至指定的 tenant 中

# glance [--can-share] member-create image-id tenant-id