OpenStack Epoxy : Configure Glance

Install and Configure OpenStack Image Service (Glance). This example is based on the environment like follows. eth0|10.0.0.30 +-----------+-----------+ | [ dlp.srv.world ] | | (Control Node) | | | | MariaDB RabbitMQ | | Memcached Nginx | | Keystone httpd | | Glance | +-----------------------+

[1]	Add users and others for Glance in Keystone.

# create [glance] user in [service] project root@dlp ~(keystone)#  openstack user create --domain default --project service --password servicepassword glance +---------------------+----------------------------------+ | Field | Value | +---------------------+----------------------------------+ | default_project_id | a60814a6c56241edbbdfae6c290f8abc | | domain_id | default | | email | None | | enabled | True | | id | 7df36a951e6b4e3eaa53f3c0c5c70f23 | | name | glance | | description | None | | password_expires_at | None | +---------------------+----------------------------------+ # add [glance] user in [admin] role root@dlp ~(keystone)#  openstack role add --project service --user glance admin # create service entry for [glance] root@dlp ~(keystone)#  openstack service create --name glance --description "OpenStack Image service" image +-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | id | 663a88c4a6ec47aabd73e7952fc24003 | | name | glance | | type | image | | enabled | True | | description | OpenStack Image service | +-------------+----------------------------------+ # define Glance API Host root@dlp ~(keystone)#  export controller=dlp.srv.world # create endpoint for [glance] (public) root@dlp ~(keystone)#  openstack endpoint create --region RegionOne image public https://$controller:9292 +--------------+----------------------------------+ | Field | Value | +--------------+----------------------------------+ | enabled | True | | id | b589efc1a0b447dd8288eab7fab617f3 | | interface | public | | region | RegionOne | | region_id | RegionOne | | service_id | 663a88c4a6ec47aabd73e7952fc24003 | | service_name | glance | | service_type | image | | url | https://dlp.srv.world:9292 | +--------------+----------------------------------+ # create endpoint for [glance] (internal) root@dlp ~(keystone)#  openstack endpoint create --region RegionOne image internal https://$controller:9292 +--------------+----------------------------------+ | Field | Value | +--------------+----------------------------------+ | enabled | True | | id | 6cedaf8aa92c4b9397d235acb84e66f7 | | interface | internal | | region | RegionOne | | region_id | RegionOne | | service_id | 663a88c4a6ec47aabd73e7952fc24003 | | service_name | glance | | service_type | image | | url | https://dlp.srv.world:9292 | +--------------+----------------------------------+ # create endpoint for [glance] (admin) root@dlp ~(keystone)#  openstack endpoint create --region RegionOne image admin https://$controller:9292 +--------------+----------------------------------+ | Field | Value | +--------------+----------------------------------+ | enabled | True | | id | 065853261d764fe4861105db34337549 | | interface | admin | | region | RegionOne | | region_id | RegionOne | | service_id | 663a88c4a6ec47aabd73e7952fc24003 | | service_name | glance | | service_type | image | | url | https://dlp.srv.world:9292 | +--------------+----------------------------------+

[2]	Add a User and Database on MariaDB for Glance.

root@dlp ~(keystone)#  mysql Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 50 Server version: 11.8.2-MariaDB-1 from Debian -- Please help get to 10k stars at https://github.com/MariaDB/Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> create database glance; Query OK, 1 row affected (0.00 sec) MariaDB [(none)]> grant all privileges on glance.* to glance@'localhost' identified by 'password'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> grant all privileges on glance.* to glance@'%' identified by 'password'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> exit Bye

[3]	Install Glance.

root@dlp ~(keystone)#  apt -y install glance

[4]	Configure Glance.

root@dlp ~(keystone)#  mv /etc/glance/glance-api.conf /etc/glance/glance-api.conf.org root@dlp ~(keystone)#  vi /etc/glance/glance-api.conf # create new [DEFAULT] bind_host = 127.0.0.1 # RabbitMQ connection info transport_url = rabbit://openstack:password@dlp.srv.world:5672 enabled_backends = fs:file [glance_store] default_backend = fs [fs] filesystem_store_datadir = /var/lib/glance/images/ [database] # MariaDB connection info connection = mysql+pymysql://glance:password@dlp.srv.world:3306/glance # keystone auth info [keystone_authtoken] www_authenticate_uri = https://dlp.srv.world:5000 auth_url = https://dlp.srv.world:5000 memcached_servers = dlp.srv.world:11211 auth_type = password project_domain_name = Default user_domain_name = Default project_name = service username = glance password = servicepassword # if using self-signed certs on Apache2 Keystone, turn to [true] insecure = false [paste_deploy] flavor = keystone [oslo_policy] enforce_new_defaults = true root@dlp ~(keystone)#  chmod 640 /etc/glance/glance-api.conf root@dlp ~(keystone)#  chown root:glance /etc/glance/glance-api.conf root@dlp ~(keystone)#  su -s /bin/bash glance -c "glance-manage db_sync" root@dlp ~(keystone)#  systemctl restart glance-api root@dlp ~(keystone)#  systemctl enable glance-api

[5]	Configure Nginx for proxy settings. For SSL/TLS certificate, it's OK to use the same one with Apache2 Keystone site.

root@dlp ~(keystone)#  vi /etc/nginx/nginx.conf # add to last line stream { upstream glance-api { server 127.0.0.1:9292; } server { listen 10.0.0.30:9292 ssl; proxy_pass glance-api; } ssl_certificate "/etc/letsencrypt/live/dlp.srv.world/fullchain.pem"; ssl_certificate_key "/etc/letsencrypt/live/dlp.srv.world/privkey.pem"; } root@dlp:~#  systemctl restart nginx

Matched Content