OpenStack 运维 - 部署cinder组件 [T版]

╰半橙微兮° 2022-10-16 03:00 140阅读 0赞

# 一、创建数据库实例和角色 #

mysql -uroot -p
    CREATE DATABASE cinder;
    GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'CINDER_DBPASS';
    GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'CINDER_DBPASS';
    flush privileges;
    exit

# 二、创建用户、修改配置文件 #

创建cinder用户,密码设置为CINDER_PASS
    openstack user create --domain default --password CINDER_PASS cinder

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70][]

把cinder用户添加到service服务中，并授予admin权限
    openstack role add --project service --user cinder admin

cinder有v2和v3两个并存版本的API，所以需要创建两个版本的service实例
    openstack service create --name cinderv2 --description "OpenStack Block Storage" volumev2
    openstack service create --name cinderv3 --description "OpenStack Block Storage" volumev3

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 1][]

给v2和v3版本的api创建endpoint
     openstack endpoint create --region RegionOne volumev2 public http://ct:8776/v2/%$project_id$s
     openstack endpoint create --region RegionOne volumev2 internal http://ct:8776/v2/%$project_id$s
     openstack endpoint create --region RegionOne volumev2 admin http://ct:8776/v2/%$project_id$s
     openstack endpoint create --region RegionOne volumev3 public http://ct:8776/v3/%$project_id$s
     openstack endpoint create --region RegionOne volumev3 internal http://ct:8776/v3/%$project_id$s
     openstack endpoint create --region RegionOne volumev3 admin http://ct:8776/v3/%$project_id$s

# 三、yum 安装cinder 服务 #

yum -y install openstack-cinder

## 修改cinder配置 ##

#修改配置文件
    cp /etc/cinder/cinder.conf{
        ,.bak}
    grep -Ev '#|^$' /etc/cinder/cinder.conf.bak>/etc/cinder/cinder.conf
    openstack-config --set /etc/cinder/cinder.conf database connection mysql+pymysql://cinder:CINDER_DBPASS@ct/cinder
    openstack-config --set /etc/cinder/cinder.conf DEFAULT transport_url rabbit://openstack:RABBIT_PASS@ct
    openstack-config --set /etc/cinder/cinder.conf DEFAULT auth_strategy keystone
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken www_authenticate_uri http://ct:5000
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken auth_url http://ct:5000
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken memcached_servers ct:11211
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken auth_type password
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken project_domain_name default
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken user_domain_name default
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken project_name service
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken username cinder
    openstack-config --set /etc/cinder/cinder.conf keystone_authtoken password CINDER_PASS
    openstack-config --set /etc/cinder/cinder.conf DEFAULT my_ip 192.168.100.11 			#修改为 ct_IP地址
    openstack-config --set /etc/cinder/cinder.conf oslo_concurrency lock_path /var/lib/cinder/tmp
    
    
    #查看配置文件
    [root@ct cinder]# cat cinder.conf
    
    [DEFAULT]
    transport_url = rabbit://openstack:RABBIT_PASS@ct			#配置rabbitmq连接
    auth_strategy = keystone						#认证方式
    my_ip = 192.168.100.11						#内网IP
    
    [backend]
    [backend_defaults]
    [barbican]
    [brcd_fabric_example]
    [cisco_fabric_example]
    [coordination]
    [cors]
    
    [database]							#对接数据库
    connection = mysql+pymysql://cinder:CINDER_DBPASS@ct/cinder
    
    [fc-zone-manager]
    [healthcheck]
    [key_manager]
    
    [keystone_authtoken]						#配置keystone认证信息
    www_authenticate_uri = http://ct:5000					#keystone地址
    auth_url = http://ct:5000
    memcached_servers = ct:11211
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    project_name = service
    username = cinder							#指定通过cinder账号到keystone做认证（用户名、密码）
    password = CINDER_PASS
    
    [nova]
    
    [oslo_concurrency]
    lock_path = /var/lib/cinder/tmp					#配置锁路径
    
    [oslo_messaging_amqp]
    [oslo_messaging_kafka]
    [oslo_messaging_notifications]
    [oslo_messaging_rabbit]
    [oslo_middleware]
    [oslo_policy]
    [oslo_reports]
    [oslo_versionedobjects]
    [privsep]
    [profiler]
    [sample_castellan_source]
    [sample_remote_file_source]
    [service_user]
    [ssl]
    [vault]

## 同步cinder数据库(填充块存储数据库) ##

su -s /bin/sh -c "cinder-manage db sync" cinder

![20210526165152830.png][]

## 修改 Nova 配置文件，并重启服务。 ##

openstack-config --set /etc/nova/nova.conf cinder os_region_name RegionOne
    
    systemctl restart openstack-nova-api.service

## 配置Cinder服务 ##

systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service
    systemctl start openstack-cinder-api.service openstack-cinder-scheduler.service

## 配置控制节点验证 ##

cinder service-list

![20210526165509466.png][]

# 四、C2节点配置Cinder #

yum -y install openstack-cinder targetcli python-keystone
    yum -y install lvm2 device-mapper-persistent-data
    systemctl enable lvm2-lvmetad.service
    systemctl start lvm2-lvmetad.service

## 创建lvm物理卷和卷组 ##

pvcreate /dev/sdb
    vgcreate cinder-volumes /dev/sdb

**改lvm配置文件(指定使用sdb磁盘）**

vim /etc/lvm/lvm.conf
    141行，取消注释，修改filter规则，如下：
    filter = [ "a/sdb/","r/.*/" ]
    # a表示允许，r表示拒绝 
    # 只允许lvm服务访问sdb中的数据，不允许lvm服务访问其他磁盘，这也间接实现了openstack创建的虚拟机只能访问sdb中的数据，不能访问其他磁盘 
    # 设置只允许实例访问sdb逻辑卷中的数据；如果不配置的话，本机的其他服务也有可能会访问sdb逻辑卷中的数据

## 重启lvm服务 ##

systemctl restart lvm2-lvmetad.service

## 配置cinder模块 ##

vim /etc/cinder/cinder.conf
    
    cp /etc/cinder/cinder.conf{
        ,.bak}
    grep -Ev '#|^$' /etc/cinder/cinder.conf.bak>/etc/cinder/cinder.conf
    
    openstack-config --set /etc/cinder/cinder.conf  database  connection mysql+pymysql://cinder:CINDER_DBPASS@ct/cinder
    openstack-config --set /etc/cinder/cinder.conf  DEFAULT transport_url rabbit://openstack:RABBIT_PASS@ct
    openstack-config --set /etc/cinder/cinder.conf  DEFAULT auth_strategy keystone
    openstack-config --set /etc/cinder/cinder.conf  DEFAULT my_ip 192.168.1.250
    openstack-config --set /etc/cinder/cinder.conf  DEFAULT enabled_backends lvm
    openstack-config --set /etc/cinder/cinder.conf  DEFAULT glance_api_servers http://ct:9292
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken www_authenticate_uri http://ct:5000
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken auth_url http://ct:5000
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken memcached_servers ct:11211
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken auth_type password
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken project_domain_name default
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken user_domain_name default
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken project_name service
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken username cinder
    openstack-config --set /etc/cinder/cinder.conf  keystone_authtoken password CINDER_PASS
    openstack-config --set /etc/cinder/cinder.conf  lvm volume_driver cinder.volume.drivers.lvm.LVMVolumeDriver
    openstack-config --set /etc/cinder/cinder.conf  lvm volume_group cinder-volumes
    openstack-config --set /etc/cinder/cinder.conf  lvm target_protocol iscsi
    openstack-config --set /etc/cinder/cinder.conf  lvm target_helper lioadm
    openstack-config --set /etc/cinder/cinder.conf  oslo_concurrency lock_path /var/lib/cinder/tmp

## 开启cinder卷服务 ##

systemctl enable openstack-cinder-volume.service target.service
    systemctl start openstack-cinder-volume.service target.service

# 五、CT查看卷列表 #

openstack volume service list

![20210526172233876.png][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70]: /images/20221014/f13f4fd4c91247df9ef736e48c5ce169.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 1]: /images/20221014/0ad8d704217f494eaa31e888c5f14ff4.png
[20210526165152830.png]: /images/20221014/51591ad232e14339839790d5cd065900.png
[20210526165509466.png]: /images/20221014/8c521f8bdc7349869fa28d82ec83b9ff.png
[20210526172233876.png]: /images/20221014/7b226f7e81874c2682ff8fe895fde6d3.png