Learn how to - Installation of Three node OpenStack Queens Cluster

Learn how to – Installation of Three node OpenStack Queens Cluster – Part Two.

Part one of this series is Installation of Openstack three Node Cluster on CentOS 7

Installation of Glance

In this second session, we are going to install glance image service. The Image service (glance) project provides a service where users can upload and discover data assets that are meant to be used with other services. This currently includes images and metadata definitions. Glance image services include discovering, registering, and retrieving virtual machine (VM) images. Glance has a RESTful API that allows querying of VM image metadata as well as retrieval of the actual image. (Openstack.org, 2018)

The first step as you might guess is the addition of glance user to Keystone as already installed and add roles (A role is the level of authorization that a user has.) to it.

“The world as we have created it is a process of our thinking. It cannot be changed without changing our thinking.”
― Albert Einstein

Let us get started with adding glance user to keystone.

[root@controller ~(keystone)]# openstack user create --domain default --project service --password password glance
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | 76d124ff821e4db5ad792a113b54724e |
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 9feefa47a5414490ad16ac19201bac8f |
| name                | glance                           |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+
You can confirm the new glance user as shown below.

[root@controller ~(keystone)]

[root@controller ~(keystone)]

# openstack role add –project service –user glance admin

[root@controller ~(keystone)]

[root@controller ~(keystone)]

# export controller=192.168.122.130

We shall proceed to add endpoints. An endpoint in Keystone is just a URL that can be used to access a service within OpenStack. An endpoint is just like a point of contact for a given user to use an OpenStack service. The admin URL is for the admin users, the internal URL is what the other services use to talk to each other. And the public URL is what everyone else accessing the service endpoint uses.

[root@controller ~(keystone)]# openstack endpoint create --region RegionOne image public http://$controller:9292
+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 86e2ed91b42341d3b8edf1c829842192 |
| interface    | public                           |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 4145a8e51f9d4c0d81cf4f0f5d505ab8 |
| service_name | glance                           |
| service_type | image                            |
| url          | http://192.168.122.130:9292      |
+--------------+----------------------------------+

[root@controller ~(keystone)]

After we are done with the addition of glance user, assigning of roles and the creation of endpoints, glance needs a database to function and therefore let us go ahead and create a database for it before installing and configuring it. This must be exciting already.

[root@controller ~(keystone)]# mysql -u root -p 
Enter password: 
Welcome to the MariaDB monitor.  Commands end with ; or g.
Your MariaDB connection id is 7
Server version: 10.1.20-MariaDB MariaDB Server

Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.

No entry for terminal type "xterm-termite";
using dumb terminal settings.
Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

MariaDB [(none)]> create database glance;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> grant all privileges on glance.* to glance@'localhost' identified by 'password';   
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all privileges on glance.* to glance@'%' identified by 'password';   
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> exit;
Bye

Install glance

[root@controller ~(keystone)]#  yum --enablerepo=centos-openstack-queens,epel install openstack-glance -y
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: repos-jnb.psychz.net
 * epel: mirror.de.leaseweb.net
 * extras: repos-jnb.psychz.net
 * updates: repos-jnb.psychz.net
Resolving Dependencies
--> Running transaction check
---> Package openstack-glance.noarch 1:16.0.2-0.20180706180854.f676961.el7 will be installed
--> Processing Dependency: python-glance = 1:16.0.2-0.20180706180854.f676961.el7 for package: 1:openstack-glance-16.0.2-0.20180706180854.f676961.el7.noarch

Configure glance

First, create a back up of the default files and create new files with succinct parameters to match your environment.

sudo mv /etc/glance/glance-api.conf /etc/glance/glance-api.conf.bak
vim /etc/glance/glance-api.conf

Add:

###New##
[DEFAULT]
bind_host = 0.0.0.0

[glance_store]

stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/

[database]

# MariaDB connection informotation. Do not forget the password for glance database
connection = mysql+pymysql://glance:password@192.168.122.130/glance
# keystone authentication details

[keystone_authtoken]

www_authenticate_uri = http://192.168.122.130:5000
auth_url = http://192.168.122.130:5000
memcached_servers = 192.168.122.130:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = password ##the password for service

[paste_deploy]

flavor = keystone

Also set Glance registry:

mv /etc/glance/glance-registry.conf /etc/glance/glance-registry.conf.bak
vim /etc/glance/glance-registry.conf

Add content:

###New##
[DEFAULT]
bind_host = 0.0.0.0

[database]

# MariaDB connection information. Do not forget glance database password here.
connection = mysql+pymysql://glance:password@10.0.0.30/glance
# Keystone authentication details

[keystone_authtoken]

[paste_deploy]

flavor = keystone

Change the file permissions and file ownership of the configuration files as shown below

chmod 640 /etc/glance/glance-api.conf /etc/glance/glance-registry.conf
chown root:glance /etc/glance/glance-api.conf /etc/glance/glance-registry.conf

Do a database sync. In case you have errors here, please confirm your passwords are correct and the spacings of the file are also set well. You should see “Database is synced successfully” in the end.

[root@controller ~(keystone)]# su -s /bin/bash glance -c "glance-manage db_sync"
/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/enginefacade.py:1336: OsloDBDeprecationWarning: EngineFacade is deprecated; please use oslo_db.sqlalchemy.enginefacade
  expire_on_commit=expire_on_commit, _conf=conf)
INFO  [alembic.runtime.migration] Context impl MySQLImpl.
INFO  [alembic.runtime.migration] Will assume non-transactional DDL.
INFO  [alembic.runtime.migration] Running upgrade  -> liberty, liberty initial
INFO  [alembic.runtime.migration] Running upgrade liberty -> mitaka01, add index on created_at and updated_at columns of 'images' table
INFO  [alembic.runtime.migration] Running upgrade mitaka01 -> mitaka02, update metadef os_nova_server
INFO  [alembic.runtime.migration] Running upgrade mitaka02 -> ocata_expand01, add visibility to images
INFO  [alembic.runtime.migration] Running upgrade ocata_expand01 -> pike_expand01, empty expand for symmetry with pike_contract01

Start and enable openstack-glance-api and openstack-glance-registry as below and you are good to go with glance service. Do not forget to enable the ports in the firewall as well.

sudo systemctl start openstack-glance-api openstack-glance-registry
sudo systemctl enable openstack-glance-api openstack-glance-registry 
sudo firewall-cmd --add-port={9191/tcp,9292/tcp} --permanent
sudo firewall-cmd --reload

Next read: Installation of Three node OpenStack Queens Cluster – Part Three

Cart

Learn how to – Installation of Three node OpenStack Queens Cluster – Part Two

Installation of Glance

Configure glance

Written by Felix Williams

Leave a Reply Cancel reply

Cart