Openstack 实战讲解之-----09-启动实例
Posted
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了Openstack 实战讲解之-----09-启动实例相关的知识，希望对你有一定的参考价值。
检查
在进行实例的启动的时候，我们要先确认各个服务是否都启动了，可以通过下面的命令来看端口和服务是否启动
1、ps aux|grep python 2、netstat -lntup
检查镜像服务
[[email protected] ~]# openstack image list ^L+--------------------------------------+--------+--------+ | ID | Name | Status | +--------------------------------------+--------+--------+ | 63d8947e-5224-40b6-92e5-8c939e75d45e | cirros | active | +--------------------------------------+--------+--------+
创建网络
[[email protected] ~]# openstack network create --share --provider-physical-network public --provider-network-type flat public +---------------------------+--------------------------------------+ | Field | Value | +---------------------------+--------------------------------------+ | admin_state_up | UP | | availability_zone_hints | | | availability_zones | | | created_at | 2017-01-02T21:19:16Z | | description | | | headers | | | id | 7f7b08e7-ea61-433f-bb3d-6195d893558e | | ipv4_address_scope | None | | ipv6_address_scope | None | | mtu | 1500 | | name | public | | port_security_enabled | True | | project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 | | project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 | | provider:network_type | flat | | provider:physical_network | public | | provider:segmentation_id | None | | revision_number | 3 | | router:external | Internal | | shared | True | | status | ACTIVE | | subnets | | | tags | [] | | updated_at | 2017-01-02T21:19:16Z | +---------------------------+--------------------------------------+
查看网络
[[email protected] ~]# openstack network list +--------------------------------------+--------+---------+ | ID | Name | Subnets | +--------------------------------------+--------+---------+ | 7f7b08e7-ea61-433f-bb3d-6195d893558e | public | | +--------------------------------------+--------+---------+
创建子网
[[email protected] ~]# openstack subnet create --network public --allocation-pool start=192.168.56.100,end=192.168.56.200 --dns-nameserver 192.168.56.2 --gateway 102.168.56.2 --subnet-range 192.168.56.0/24 public-subnet +-------------------+--------------------------------------+ | Field | Value | +-------------------+--------------------------------------+ | allocation_pools | 192.168.56.100-192.168.56.200 | | cidr | 192.168.56.0/24 | | created_at | 2017-01-02T21:26:06Z | | description | | | dns_nameservers | 192.168.56.2 | | enable_dhcp | True | | gateway_ip | 102.168.56.2 | | headers | | | host_routes | | | id | 422abca4-ac78-400f-aa7c-2296c69a1643 | | ip_version | 4 | | ipv6_address_mode | None | | ipv6_ra_mode | None | | name | public-subnet | | network_id | 7f7b08e7-ea61-433f-bb3d-6195d893558e | | project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 | | project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 | | revision_number | 2 | | service_types | [] | | subnetpool_id | None | | updated_at | 2017-01-02T21:26:06Z | +-------------------+--------------------------------------+
子网检查
[[email protected] ~]# neutron subnet-list +--------------------------------------+---------------+-----------------+------------------------------------------------------+ | id | name | cidr | allocation_pools | +--------------------------------------+---------------+-----------------+------------------------------------------------------+ | 422abca4-ac78-400f-aa7c-2296c69a1643 | public-subnet | 192.168.56.0/24 | {"start": "192.168.56.100", "end": "192.168.56.200"} | +--------------------------------------+---------------+-----------------+------------------------------------------------------+ [[email protected] ~]# openstack subnet list +--------------------------------------+---------------+--------------------------------------+-----------------+ | ID | Name | Network | Subnet | +--------------------------------------+---------------+--------------------------------------+-----------------+ | 422abca4-ac78-400f-aa7c-2296c69a1643 | public-subnet | 7f7b08e7-ea61-433f-bb3d-6195d893558e | 192.168.56.0/24 | +--------------------------------------+---------------+--------------------------------------+-----------------+
创建虚拟类型、只能定义不能选
创建mi.nano类型
默认的最小规格的主机需要512 MB内存。对于环境中计算节点内存不足4 GB的，我们推荐创建只需要64 MB的``m1.nano``规格的主机。若单纯为了测试的目的，请使用``m1.nano``规格的主机来加载CirrOS镜像
[[email protected] ~]# openstack flavor create --id 0 --vcpus 1 --ram 64 --disk 1 m1.nano +----------------------------+---------+ | Field | Value | +----------------------------+---------+ | OS-FLV-DISABLED:disabled | False | | OS-FLV-EXT-DATA:ephemeral | 0 | | disk | 1 | | id | 0 | | name | m1.nano | | os-flavor-access:is_public | True | | properties | | | ram | 64 | | rxtx_factor | 1.0 | | swap | | | vcpus | 1 | +----------------------------+---------+
生成一个键值对
大部分云镜像支持 :term:`public key authentication`而不是传统的密码登陆。在启动实例前，你必须添加一个公共密钥到计算服务。
导入``demo``项目凭证
[[email protected] ~]# . demo-openstack [[email protected] ~]# cat demo-openstack export OS_PROJECT_DOMAIN_NAME=default export OS_USER_DOMAIN_NAME=default export OS_PROJECT_NAME=demo export OS_USERNAME=demo export OS_PASSWORD=demo export OS_AUTH_URL=http://192.168.56.11:5000/v3 export OS_IDENTITY_API_VERSION=3 export OS_IMAGE_API_VERSION=2
2. 生成和添加秘钥对：
[[email protected] ~]# ssh-keygen -q -N "" Enter file in which to save the key (/root/.ssh/id_rsa): [[email protected] ~]# [[email protected] ~]# openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey +-------------+-------------------------------------------------+ | Field | Value | +-------------+-------------------------------------------------+ | fingerprint | e9:a3:e6:4c:97:73:12:25:ea:8e:39:ea:a0:d5:d2:e6 | | name | mykey | | user_id | f0c69bad72b54e0daef92c2295425932 | +-------------+-------------------------------------------------+
另外，你可以跳过执行 ssh-keygen 命令而使用已存在的公钥。
3. 验证公钥的添加
[[email protected] ~]# openstack keypair list +-------+-------------------------------------------------+ | Name | Fingerprint | +-------+-------------------------------------------------+ | mykey | e9:a3:e6:4c:97:73:12:25:ea:8e:39:ea:a0:d5:d2:e6 | +-------+-------------------------------------------------+
增加安全组规则
默认情况下， ``default``安全组适用于所有实例并且包括拒绝远程访问实例的防火墙规则。对诸如CirrOS这样的Linux镜像，我们推荐至少允许ICMP (ping) 和安全shell(SSH)规则。
添加规则到
default安全组。Permit ICMP (ping):
[[email protected] ~]# openstack security group rule create --proto icmp default +-------------------+--------------------------------------+ | Field | Value | +-------------------+--------------------------------------+ | created_at | 2017-01-02T21:44:26Z | | description | | | direction | ingress | | ethertype | IPv4 | | headers | | | id | b4f7536d-86f1-491e-b167-069a09507e2b | | port_range_max | None | | port_range_min | None | | project_id | 9b913d25891849baa55b21d837e9b63d | | project_id | 9b913d25891849baa55b21d837e9b63d | | protocol | icmp | | remote_group_id | None | | remote_ip_prefix | 0.0.0.0/0 | | revision_number | 1 | | security_group_id | be5584d7-7e14-4bc9-a74c-109f216b09c4 | | updated_at | 2017-01-02T21:44:26Z | +-------------------+--------------------------------------+
允许安全 shell (SSH) 的访问：
[[email protected] ~]# openstack security group rule create --proto tcp --dst-port 22 default +-------------------+--------------------------------------+ | Field | Value | +-------------------+--------------------------------------+ | created_at | 2017-01-02T21:46:29Z | | description | | | direction | ingress | | ethertype | IPv4 | | headers | | | id | 4572dc39-6723-49f7-9556-c0f90ca7cc96 | | port_range_max | 22 | | port_range_min | 22 | | project_id | 9b913d25891849baa55b21d837e9b63d | | project_id | 9b913d25891849baa55b21d837e9b63d | | protocol | tcp | | remote_group_id | None | | remote_ip_prefix | 0.0.0.0/0 | | revision_number | 1 | | security_group_id | be5584d7-7e14-4bc9-a74c-109f216b09c4 | | updated_at | 2017-01-02T21:46:29Z | +-------------------+--------------------------------------+ [[email protected] ~]#
启动一个实例
如果选择网络选项1，你只能在公网创建实例。如果选择网络选项2，你可以在公网或私网创建实例。
确定实例选项
启动一台实例，您必须至少指定一个类型、镜像名称、网络、安全组、密钥和实例名称。
在控制节点上，获得
admin凭证来获取只有管理员能执行的命令的访问权限：
[email protected] ~]# . demo-openstack
2 .一个实例指定了虚拟机资源的大致分配，包括处理器、内存和存储。
列出可用类型：
[[email protected] ~]# openstack flavor list +----+---------+-----+------+-----------+-------+-----------+ | ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public | +----+---------+-----+------+-----------+-------+-----------+ | 0 | m1.nano | 64 | 1 | 0 | 1 | True | +----+---------+-----+------+-----------+-------+-----------+
您也可以以 ID 引用类型。
3. 列出可用镜像：(这个实例使用``cirros``镜像。)
[[email protected] ~]# openstack image list +--------------------------------------+--------+--------+ | ID | Name | Status | +--------------------------------------+--------+--------+ | 63d8947e-5224-40b6-92e5-8c939e75d45e | cirros | active | +--------------------------------------+--------+--------+
4.列出可用网络：
[[email protected] ~]# openstack network list +--------------------------------------+--------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+--------+--------------------------------------+ | 7f7b08e7-ea61-433f-bb3d-6195d893558e | public | 422abca4-ac78-400f-aa7c-2296c69a1643 | +--------------------------------------+--------+--------------------------------------+
这个实例使用 ``provider``公有网络。 你必须使用ID而不是名称才可以使用这个网络。如果你选择选项2，输出信息应该也包含私网``selfservice``的信息。
5. 列出可用的安全组：
[[email protected] ~]# openstack security group list +--------------------------------------+---------+------------------------+----------------------------------+ | ID | Name | Description | Project | +--------------------------------------+---------+------------------------+----------------------------------+ | be5584d7-7e14-4bc9-a74c-109f216b09c4 | default | Default security group | 9b913d25891849baa55b21d837e9
启动云主机
[[email protected] ~]# openstack server create --flavor m1.nano --image cirros > --nic net-id=7f7b08e7-ea61-433f-bb3d-6195d893558e --security-group default > --key-name mykey demo-instance +--------------------------------------+-----------------------------------------------+ | Field | Value | +--------------------------------------+-----------------------------------------------+ | OS-DCF:diskConfig | MANUAL | | OS-EXT-AZ:availability_zone | | | OS-EXT-STS:power_state | NOSTATE | | OS-EXT-STS:task_state | scheduling | | OS-EXT-STS:vm_state | building | | OS-SRV-USG:launched_at | None | | OS-SRV-USG:terminated_at | None | | accessIPv4 | | | accessIPv6 | | | addresses | | | adminPass | vLpymTa8sfzK | | config_drive | | | created | 2017-01-02T22:01:06Z | | flavor | m1.nano (0) | | hostId | | | id | f0778b83-e6f9-41f4-a514-dffe86aff6aa | | image | cirros (63d8947e-5224-40b6-92e5-8c939e75d45e) | | key_name | mykey | | name | demo-instance | | os-extended-volumes:volumes_attached | [] | | progress | 0 | | project_id | 9b913d25891849baa55b21d837e9b63d | | properties | | | security_groups | [{u‘name‘: u‘default‘}] | | status | BUILD | | updated | 2017-01-02T22:01:07Z | | user_id | f0c69bad72b54e0daef92c2295425932 | +--------------------------------------+-----------------------------------------------+
检查实例状态
[[email protected] ~]# openstack server list +--------------------------------------+---------------+--------+-----------------------+------------+ | ID | Name | Status | Networks | Image Name | +--------------------------------------+---------------+--------+-----------------------+------------+ | f0778b83-e6f9-41f4-a514-dffe86aff6aa | demo-instance | ACTIVE | public=192.168.56.104 | cirros | +--------------------------------------+---------------+--------+-----------------------+------------+
使用虚拟控制台访问实例
获取你势力的 Virtual Network Computing (VNC) 会话URL并从web浏览器访问它：
[[email protected] ~]# openstack console url show demo-instance +-------+------------------------------------------------------------------------------------+ | Field | Value | +-------+------------------------------------------------------------------------------------+ | type | novnc | | url | http://192.168.56.11:6080/vnc_auto.html?token=c88bb128-97de-4a48-bb96-3f97023b3e6e | +-------+------------------------------------------------------------------------------------+
验证能否ping通公有网络的网关：
验证ping外网
这里出现一个小bug，ping不同外网，
本文出自 “圈中一鸟” 博客，谢绝转载！
以上是关于Openstack 实战讲解之-----09-启动实例的主要内容，如果未能解决你的问题，请参考以下文章
Openstack 实战讲解之-----------02-控制节点服务配置
Openstack 实战讲解之-----------01-基础环境安装
Openstack 实战讲解之-----05-控制节点Nova服务安装配置
Openstack 实战讲解之-----10-图形界面管理安装配置（Dashboard）