linux及案例第三天

NSDOpenstack象存儲服務，GlanceOpenstackKeystone3A(Account,Authentication,Authorization)服務。除了3A之外，Keystone還對外提供服務目錄 部署安裝服務器1）將所有軟件包通過vsftpd共享[root@server~]#lsmanifestsrhel7.0[root@server~]#systemctlstart [root@server~]#systemctlenable[root@server~]#firewall-cmdset-default- [root@client~]#lftp54 步驟二：設置安裝環(huán)境[root@openstack~]#cat/etc/sysconfig/network-scripts/ifcfg-[root@openstack~]#systemctlstop[root@openstack~]#systemctldisable[root@openstack~]#systemctlrestartnetwork.service2）配置yum源[root@openstack~]#cat[root@openstack~]#yum..repo reponame repolist:[root@openstack~]#yumy [root@openstack~]#catSELINUX=..[root@openstack~]#setenforce的初始化openstack，可以安裝openstack-utils工具初始化數(shù)據(jù)庫。[root@openstack~]#yum-yinstallopenstack-keystoneopenstack-[root@openstack~]#yum-yinstallopenstack-keystone[root@openstack~]#openstack-db--init--servicemysql-serverisnotinstalled.WouldyouliketoinstallitIsthisokmysqldisnotrunning.WouldyouliketostartitEnterthepasswordforthe'root'MySQLCreate‘keystone’Initializingthekeystonedatabase,please[root@openstack~]#keystone-managepki-setup--keystone-userkeystone>--keystone-groupGeneratingRSAprivatekey,2048bitlong…Writeoutdatabasewith1newDataBase[root@openstack~]#exportSERVICE_TOKEN=$(opensslrandhex [root@openstack~]#export [root@openstack~]#echo$SERVICE_TOKEN>[root@openstack~]#crudini--set/etc/keystone/keystone.conf>DEFAULTadmin_token$SERVICE_TOKEN [root@openstack~]#systemctlstartopenstack- [root@openstack~]#systemctlenableopenstack-[root@openstack~]#systemctlstart [root@openstack~]#firewall-cmdadd-port=35357/tcp [root@openstack~]#firewall-cmd--add-port=5000/tcp--[root@openstack~]#firewall-cmd--服務器URL。[root@openstack~]#keystoneservice-create--name=keystone>--type=identitydescription="keystoneidentity …bc0d022e0ae440ae9cd4ce9c9df0083c|keystone|identity|[root@openstack~]#keystoneendpoint-create>--publicurl'http://servername:5000/v2.0'>--adminurl'http://servername:35357/v2.0'>--internalurl'http://servername:5000/v2.0' [root@openstack~]#source[root@openstack~]#keystoneuser-create>--nameuser2pass [root@openstack~]#keystoneuser- |id|enabled|email|name |96a6ebba0d4c441887aceaeced892585|True|...|user2 [root@openstack~keystonetenant-createname [root@openstack~]#keystonetenant- 12. 13.|id|name|enabled14. 15.|2395953419144b67955ac4bab96b8fd2|project2|True16. 17.[root@openstack~]#keystonerole- 18. 19.|id|name20. 21.|f8dd5a2e4dc64a41b96add562d9a764e|admin22. [root@openstack~]#keystoneuser-role-add>--user-id96a6ebba0d4c441887aceaeced892585>--role-idf8dd5a2e4dc64a41b96add562d9a764e>--tenant-id OpenStackObjectStorage（Swift）OpenStackRingSwiftAccount、Ring著OpenStack的不斷完善和發(fā)展，Swift將得到更廣泛的應用。TheRing（環(huán)）表示存儲在硬盤上的實體名稱和物理位置間的映射。帳號、容器、對象都有相應的swift和一些后臺程序使用（replication）。3步驟一：部署Swift服務器[root@openstack~]#source[root@openstack~]#crudini--set/etc/swift/swift.confswift-hashswift_hash_path_prefix$(opensslrandhex [root@openstack~]#crudini--set/etc/swift/swift.confswift-hashswift_hash_path_suffix$(opensslrandhex [root@openstack~]#crudini--set/etc/swift/proxy-server.conffilter:authtokenadmin_tenant_name [root@openstack~]#crudini--set/etc/swift/proxy-server.conf>filter:authtokenidentity_uri[root@openstack~]#crudini--set/etc/swift/proxy-server.conffilter:authtokenadmin_user [root@openstack~]#crudini--set/etc/swift/proxy-server.conffilter:authtokenadmin_password [root@openstack~]#crudini--set/etc/swift/account-server.confDEFAULTbind_ip [root@openstack~]#crudini--set/etc/swift/container-server.confDEFAULTbind_ip [root@openstack~]#crudini--set/etc/swift/object-server.confDEFAULTbind_ip [root@openstack~]#mkdir-p[root@openstack~]#cat… /dev/sdb1/srv/node/z1d100 /dev/sdb2/srv/node/z2d100[root@openstack~]#mount [root@openstack~]#chownRswift.swiftsrv/node/2）創(chuàng)建Rings[root@openstack~]#source[root@openstack~]#swift-ring-builder/etc/swift/account.builder>create122 [root@openstack~]#swift-ring-builder/etc/swift/container.builder>create122 [root@openstack~]#swift-ring-builder/etc/swift/object.builder>create122 [root@openstack~]#foriin1>swift-ring-builder>addz${i}-172.25.x.10:6001/z${i}d1 [root@openstack~]#foriin1>swift-ring-builder>addz${i}-172.25.x.10:6000/z${i}d1[root@openstack~]#foriin1>swift-ring-builder>addz${i}-172.25.x.10:6002/z${i}d1[root@openstack~]#swift-ring-builder/etc/swift/account.builder[root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#chownroot:swift[root@openstack~]#systemctlstart [root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlenable[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#source[root@openstack~]#swift[root@openstack~]#swiftpost [root@openstack~]#swiftpost[root@openstack~]#head-c1024/dev/urandom>test1.txt;>swiftuploadtest1[root@openstack~]#head-c1024/dev/urandom>text2.txt;>swiftuploadtest2[root@openstack~]#swift[root@openstack~]#swiftlisttest1;swiftlist儲服務，Cinder為虛擬機（VM）提供了持久塊存儲設備。PP，物理分區(qū)（physicalpartition）：硬盤的分區(qū)，如/dev/hda1，/dev/sda1，是存儲系統(tǒng)最底VG，卷組（volumegroup）：即LVM卷組，由一個或數(shù)個PV組成，相當于LVM的存儲池。PE，物理區(qū)域（physicalextend）：PV被劃分的最小單位，PE大小可配置，默認4MB。LE，logicextend：邏輯卷可以被劃分成為的可尋址基本單元，同一卷組，LEPE大小相同并一一步驟一：部署Cinder服務器[root@openstack~]#yum-yinstallopenstack-cinder2）[root@openstack~]#openstack-db--initservicecinderpasswordredhatrootpw [root@openstack~]#sourcekeystonerc_admin [root@openstack~]#keystoneuser-create--namecinder--pass[root@openstack~]#keystonerole-create--name[root@openstack~]#keystoneuser-role-addcinderroleadmintenantservices3）向keystone中注冊cinder服務[root@openstack~]#keystoneservice-create--name=cinder>--type=volume--description="openstackblock[root@openstack~]#keystoneserivce-createname=cinder2>--type=volume2--description="cindervolumeservice[root@openstack~]#keystoneendpoint-create>--service-idbc0d022e0ae440ae9cd4ce9c9df0083a>--publicurl'0:8776/v1/%(tenant_id)s'>--adminurl'0: