linux及案例第三天

NSDOpenstack象存储服务，GlanceOpenstackKeystone3A(Account,Authentication,Authorization)服务。除了3A之外，Keystone还对外提供服务目录 部署安装服务器1）将所有软件包通过vsftpd共享[root@server~]#lsmanifestsrhel7.0[root@server~]#systemctlstart [root@server~]#systemctlenable[root@server~]#firewall-cmdset-default- [root@client~]#lftp54 步骤二：设置安装环境[root@openstack~]#cat/etc/sysconfig/network-scripts/ifcfg-[root@openstack~]#systemctlstop[root@openstack~]#systemctldisable[root@openstack~]#systemctlrestartnetwork.service2）配置yum源[root@openstack~]#cat[root@openstack~]#yum..repo reponame repolist:[root@openstack~]#yumy [root@openstack~]#catSELINUX=..[root@openstack~]#setenforce的初始化openstack，可以安装openstack-utils工具初始化数据库。[root@openstack~]#yum-yinstallopenstack-keystoneopenstack-[root@openstack~]#yum-yinstallopenstack-keystone[root@openstack~]#openstack-db--init--servicemysql-serverisnotinstalled.WouldyouliketoinstallitIsthisokmysqldisnotrunning.WouldyouliketostartitEnterthepasswordforthe'root'MySQLCreate‘keystone’Initializingthekeystonedatabase,please[root@openstack~]#keystone-managepki-setup--keystone-userkeystone>--keystone-groupGeneratingRSAprivatekey,2048bitlong…Writeoutdatabasewith1newDataBase[root@openstack~]#exportSERVICE_TOKEN=$(opensslrandhex [root@openstack~]#export [root@openstack~]#echo$SERVICE_TOKEN>[root@openstack~]#crudini--set/etc/keystone/keystone.conf>DEFAULTadmin_token$SERVICE_TOKEN [root@openstack~]#systemctlstartopenstack- [root@openstack~]#systemctlenableopenstack-[root@openstack~]#systemctlstart [root@openstack~]#firewall-cmdadd-port=35357/tcp [root@openstack~]#firewall-cmd--add-port=5000/tcp--[root@openstack~]#firewall-cmd--服务器URL。[root@openstack~]#keystoneservice-create--name=keystone>--type=identitydescription="keystoneidentity …bc0d022e0ae440ae9cd4ce9c9df0083c|keystone|identity|[root@openstack~]#keystoneendpoint-create>--publicurl'http://servername:5000/v2.0'>--adminurl'http://servername:35357/v2.0'>--internalurl'http://servername:5000/v2.0' [root@openstack~]#source[root@openstack~]#keystoneuser-create>--nameuser2pass [root@openstack~]#keystoneuser- |id|enabled|email|name |96a6ebba0d4c441887aceaeced892585|True|...|user2 [root@openstack~keystonetenant-createname [root@openstack~]#keystonetenant- 12. 13.|id|name|enabled14. 15.|2395953419144b67955ac4bab96b8fd2|project2|True16. 17.[root@openstack~]#keystonerole- 18. 19.|id|name20. 21.|f8dd5a2e4dc64a41b96add562d9a764e|admin22. [root@openstack~]#keystoneuser-role-add>--user-id96a6ebba0d4c441887aceaeced892585>--role-idf8dd5a2e4dc64a41b96add562d9a764e>--tenant-id OpenStackObjectStorage（Swift）OpenStackRingSwiftAccount、Ring着OpenStack的不断完善和发展，Swift将得到更广泛的应用。TheRing（环）表示存储在硬盘上的实体名称和物理位置间的映射。帐号、容器、对象都有相应的swift和一些后台程序使用（replication）。3步骤一：部署Swift服务器[root@openstack~]#source[root@openstack~]#crudini--set/etc/swift/swift.confswift-hashswift_hash_path_prefix$(opensslrandhex [root@openstack~]#crudini--set/etc/swift/swift.confswift-hashswift_hash_path_suffix$(opensslrandhex [root@openstack~]#crudini--set/etc/swift/proxy-server.conffilter:authtokenadmin_tenant_name [root@openstack~]#crudini--set/etc/swift/proxy-server.conf>filter:authtokenidentity_uri[root@openstack~]#crudini--set/etc/swift/proxy-server.conffilter:authtokenadmin_user [root@openstack~]#crudini--set/etc/swift/proxy-server.conffilter:authtokenadmin_password [root@openstack~]#crudini--set/etc/swift/account-server.confDEFAULTbind_ip [root@openstack~]#crudini--set/etc/swift/container-server.confDEFAULTbind_ip [root@openstack~]#crudini--set/etc/swift/object-server.confDEFAULTbind_ip [root@openstack~]#mkdir-p[root@openstack~]#cat… /dev/sdb1/srv/node/z1d100 /dev/sdb2/srv/node/z2d100[root@openstack~]#mount [root@openstack~]#chownRswift.swiftsrv/node/2）创建Rings[root@openstack~]#source[root@openstack~]#swift-ring-builder/etc/swift/account.builder>create122 [root@openstack~]#swift-ring-builder/etc/swift/container.builder>create122 [root@openstack~]#swift-ring-builder/etc/swift/object.builder>create122 [root@openstack~]#foriin1>swift-ring-builder>addz${i}-172.25.x.10:6001/z${i}d1 [root@openstack~]#foriin1>swift-ring-builder>addz${i}-172.25.x.10:6000/z${i}d1[root@openstack~]#foriin1>swift-ring-builder>addz${i}-172.25.x.10:6002/z${i}d1[root@openstack~]#swift-ring-builder/etc/swift/account.builder[root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#chownroot:swift[root@openstack~]#systemctlstart [root@openstack~]#systemctlstartopenstack-swift-[root@openstack~]#systemctlenable[root@openstack~]#systemctlenableopenstack-swift-[root@openstack~]#source[root@openstack~]#swift[root@openstack~]#swiftpost [root@openstack~]#swiftpost[root@openstack~]#head-c1024/dev/urandom>test1.txt;>swiftuploadtest1[root@openstack~]#head-c1024/dev/urandom>text2.txt;>swiftuploadtest2[root@openstack~]#swift[root@openstack~]#swiftlisttest1;swiftlist储服务，Cinder为虚拟机（VM）提供了持久块存储设备。PP，物理分区（physicalpartition）：硬盘的分区，如/dev/hda1，/dev/sda1，是存储系统最底VG，卷组（volumegroup）：即LVM卷组，由一个或数个PV组成，相当于LVM的存储池。PE，物理区域（physicalextend）：PV被划分的最小单位，PE大小可配置，默认4MB。LE，logicextend：逻辑卷可以被划分成为的可寻址基本单元，同一卷组，LEPE大小相同并一一步骤一：部署Cinder服务器[root@openstack~]#yum-yinstallopenstack-cinder2）[root@openstack~]#openstack-db--initservicecinderpasswordredhatrootpw [root@openstack~]#sourcekeystonerc_admin [root@openstack~]#keystoneuser-create--namecinder--pass[root@openstack~]#keystonerole-create--name[root@openstack~]#keystoneuser-role-addcinderroleadmintenantservices3）向keystone中注册cinder服务[root@openstack~]#keystoneservice-create--name=cinder>--type=volume--description="openstackblock[root@openstack~]#keystoneserivce-createname=cinder2>--type=volume2--description="cindervolumeservice[root@openstack~]#keystoneendpoint-create>--service-idbc0d022e0ae440ae9cd4ce9c9df0083a>--publicurl'0:8776/v1/%(tenant_id)s'>--adminurl'0: