openstack搭建--7--创建一台虚拟机

淡淡的烟草味﹌ 2022-06-10 00:27 570阅读 0赞

回顾下前几节用到的东西

MySQL：为各个服务提供数据存储  
RabbitmQ：为各个服务之间提供通信提供交通枢纽  
Keystone：为各个服务之间通信提供认证和服务注册  
Glance：为虚拟机提供镜像管理  
Nova：为虚拟机提供计算资源  
Neutron：为虚拟机提供网络

![Center][]

## **创建一个单一扁平网络和子网** ##

![Center 1][]

**1、创建单一扁平网络**

在控制节点上，加载 admin 凭证来获取管理员能执行的命令访问权限：  
source admin-openstack.sh ，提供者网络必须使用admin创建，如果source demo-openstack.sh ，不会创建成功

执行命令语法如下

下面命令把provider改成public，表示物理网卡是public这个，这个是映射的那个public，它对应eth0

`neutron net-create --shared --provider:physical_network provider` `` `--provider:network_type flat provider`

执行过程如下：

上面的tenant\_id 和下面的project的id一致。因为我们是admin创建的，属于admin的

**2、创建一个子网  
执行过如下：**

\[root@linux-node1 ~\]\# neutron subnet-create --name public-subnet --allocation-pool start=192.168.1.100,end=192.168.1.200 --dns-nameserver 8.8.8.8 --gateway 192.168.1.1 public-net 192.168.1.0/24  
Created a new subnet:  
\+-------------------+----------------------------------------------------+  
| Field             | Value                                              |  
\+-------------------+----------------------------------------------------+  
| allocation\_pools  | \{"start": "192.168.1.100", "end": "192.168.1.200"\} |  
| cidr              | 192.168.1.0/24                                     |  
| created\_at        | 2017-08-06T05:15:11                                |  
| description       |                                                    |  
| dns\_nameservers   | 8.8.8.8                                            |  
| enable\_dhcp       | True                                               |  
| gateway\_ip        | 192.168.1.1                                        |  
| host\_routes       |                                                    |  
| id                | a7bf2ec3-9b29-47c0-afa8-2497beb996d2               |  
| ip\_version        | 4                                                  |  
| ipv6\_address\_mode |                                                    |  
| ipv6\_ra\_mode      |                                                    |  
| name              | public-subnet                                      |  
| network\_id        | dc3a90b3-b3ca-4c3d-8d7a-24587907659e               |  
| subnetpool\_id     |                                                    |  
| tenant\_id         | fa594a6ca4b84c5b985628641dd751fe                   |  
| updated\_at        | 2017-08-06T05:15:11                                |  
\+-------------------+----------------------------------------------------+

再次执行下面命令，可以看到subnets这里列有值了

\[root@linux-node1 ~\]\# neutron net-list  
\+--------------------------------------+------------+-----------------------------------------------------+  
| id                                   | name       | subnets                                             |  
\+--------------------------------------+------------+-----------------------------------------------------+  
| dc3a90b3-b3ca-4c3d-8d7a-24587907659e | public-net | a7bf2ec3-9b29-47c0-afa8-2497beb996d2 192.168.1.0/24 |  
\+--------------------------------------+------------+-----------------------------------------------------+  
\[root@linux-node1 ~\]\# neutron subnet-list  
\+--------------------------------------+---------------+----------------+----------------------------------------------------+  
| id                                   | name          | cidr           | allocation\_pools                                   |  
\+--------------------------------------+---------------+----------------+----------------------------------------------------+  
| a7bf2ec3-9b29-47c0-afa8-2497beb996d2 | public-subnet | 192.168.1.0/24 | \{"start": "192.168.1.100", "end": "192.168.1.200"\} |  
\+--------------------------------------+---------------+----------------+----------------------------------------------------+

## **创建一个nano规格的实例** ##

**1、创建nano套餐类型**

网络创建完毕后，创建一个nano规格的主机

默认的最小规格的主机需要512 MB内存。对于环境中计算节点内存不足4 GB的，我们推荐创建只需要64 MB的m1.nano规格的主机。  
若单纯为了测试的目的，请使用m1.nano规格的主机来加载CirrOS镜像

硬盘是1GB，内存64MB，cpu是1个

\[root@linux-node1 ~\]\# openstack flavor create --id 0 --vcpus 1 --ram 64 --disk 1 m1.nano  
\+----------------------------+---------+  
| Field                      | Value   |  
\+----------------------------+---------+  
| OS-FLV-DISABLED:disabled   | False   |  
| OS-FLV-EXT-DATA:ephemeral  | 0       |  
| disk                       | 1       |  
| id                         | 0       |  
| name                       | m1.nano |  
| os-flavor-access:is\_public | True    |  
| ram                        | 64      |  
| rxtx\_factor                | 1.0     |  
| swap                       |         |  
| vcpus                      | 1       |  
\+----------------------------+---------+

查看主机类型列表

1-5是默认的，0是我创建的

\[root@linux-node1 ~\]\# openstack flavor list  
\+----+-----------+-------+------+-----------+-------+-----------+  
| ID | Name      |   RAM | Disk | Ephemeral | VCPUs | Is Public |  
\+----+-----------+-------+------+-----------+-------+-----------+  
| 0  | m1.nano   |    64 |    1 |         0 |     1 | True      |  
| 1  | m1.tiny   |   512 |    1 |         0 |     1 | True      |  
| 2  | m1.small  |  2048 |   20 |         0 |     1 | True      |  
| 3  | m1.medium |  4096 |   40 |         0 |     2 | True      |  
| 4  | m1.large  |  8192 |   80 |         0 |     4 | True      |  
| 5  | m1.xlarge | 16384 |  160 |         0 |     8 | True      |  
\+----+-----------+-------+------+-----------+-------+-----------+

大部分云镜像支持公共密钥认证而不是传统的密码认证。在启动实例前，你必须添加一个公共密钥到计算服务。

创建一个密钥，并把这个密钥加到openstack上

\[root@linux-node1 ~\]\# source demo-openstack.sh  
\[root@linux-node1 ~\]\# ssh-keygen -q -N ""  
Enter file in which to save the key (/root/.ssh/id\_rsa):  
\[root@linux-node1 ~\]\# openstack keypair create --public-key ~/.ssh/id\_rsa.pub mykey  
\+-------------+-------------------------------------------------+  
| Field       | Value                                           |  
\+-------------+-------------------------------------------------+  
| fingerprint | 70:da:5c:31:9d:d8:2b:11:eb:ff:20:fa:c3:46:b6:ce |  
| name        | mykey                                           |  
| user\_id     | 4770f06c75bc40b8a4d2ce6fc0f24286                |  
\+-------------+-------------------------------------------------+  
验证公钥的添加

\[root@linux-node1 ~\]\# openstack keypair list  
\+-------+-------------------------------------------------+  
| Name  | Fingerprint                                     |  
\+-------+-------------------------------------------------+  
| mykey | 70:da:5c:31:9d:d8:2b:11:eb:ff:20:fa:c3:46:b6:ce |  
\+-------+-------------------------------------------------+  
**2、增加安全组规则**

默认情况下，它有一个default安全组，这个安全组阻止了所有访问，这里添加icmp和ssh

**3、列出可用镜像、网络、安全组等**

创建之前先列出可用类型和列出可用镜像：

\[root@linux-node1 ~\]\# source demo-openstack.sh  
\[root@linux-node1 ~\]\# openstack flavor list  
\+----+-----------+-------+------+-----------+-------+-----------+  
| ID | Name      |   RAM | Disk | Ephemeral | VCPUs | Is Public |  
\+----+-----------+-------+------+-----------+-------+-----------+  
| 0  | m1.nano   |    64 |    1 |         0 |     1 | True      |  
| 1  | m1.tiny   |   512 |    1 |         0 |     1 | True      |  
| 2  | m1.small  |  2048 |   20 |         0 |     1 | True      |  
| 3  | m1.medium |  4096 |   40 |         0 |     2 | True      |  
| 4  | m1.large  |  8192 |   80 |         0 |     4 | True      |  
| 5  | m1.xlarge | 16384 |  160 |         0 |     8 | True      |  
\+----+-----------+-------+------+-----------+-------+-----------+  
\[root@linux-node1 ~\]\# openstack image list  
\+--------------------------------------+--------+--------+  
| ID                                   | Name   | Status |  
\+--------------------------------------+--------+--------+  
| 11a785ae-509e-40cd-85c3-18af791ef66a | cirros | active |  
\+--------------------------------------+--------+--------+  
列出可用网络

\[root@linux-node1 ~\]\#  openstack network list  
\+--------------------------------------+------------+--------------------------------------+  
| ID                                   | Name       | Subnets                              |  
\+--------------------------------------+------------+--------------------------------------+  
| dc3a90b3-b3ca-4c3d-8d7a-24587907659e | public-net | a7bf2ec3-9b29-47c0-afa8-2497beb996d2 |  
\+--------------------------------------+------------+--------------------------------------+  
  
列出可用的安全组

\[root@linux-node1 ~\]\# openstack security group list  
\+--------------------------------------+---------+------------------------+----------------------------------+  
| ID                                   | Name    | Description            | Project                          |  
\+--------------------------------------+---------+------------------------+----------------------------------+  
| 8d7a8277-185b-4949-a8f8-ef6e87483138 | default | Default security group | 6c91006efd3e4424b5dc3cf302110a79 |  
\+--------------------------------------+---------+------------------------+----------------------------------+

**4、创建实例**

创建实例的语法如下

`openstack server create --flavor m1.tiny --image cirros \`

`  ` `--nic net-` `id` `=PROVIDER_NET_ID --security-group default \`

`  ` `--key-name mykey provider-instance 如果你选择选项1并且你的环境只有一个网络，你可以省去–nic 选项因为OpenStack会自动选择这个唯一可用的网络。 net-id就是openstack network list 显示的id， 不是subnet的id`

执行过程如下：

\[root@linux-node1 ~\]\# openstack server create --flavor m1.nano --image cirros --nic net-id=dc3a90b3-b3ca-4c3d-8d7a-24587907659e --security-group default --key-name mykey provider-instance  
\+--------------------------------------+-----------------------------------------------+  
| Field                                | Value                                         |  
\+--------------------------------------+-----------------------------------------------+  
| OS-DCF:diskConfig                    | MANUAL                                        |  
| OS-EXT-AZ:availability\_zone          |                                               |  
| OS-EXT-STS:power\_state               | 0                                             |  
| OS-EXT-STS:task\_state                | scheduling                                    |  
| OS-EXT-STS:vm\_state                  | building                                      |  
| OS-SRV-USG:launched\_at               | None                                          |  
| OS-SRV-USG:terminated\_at             | None                                          |  
| accessIPv4                           |                                               |  
| accessIPv6                           |                                               |  
| addresses                            |                                               |  
| adminPass                            | aoJ9NBmihaz7                                  |  
| config\_drive                         |                                               |  
| created                              | 2017-08-06T06:10:59Z                          |  
| flavor                               | m1.nano (0)                                   |  
| hostId                               |                                               |  
| id                                   | 3365c4b4-d487-4778-ad28-e2c675f085eb          |  
| image                                | cirros (11a785ae-509e-40cd-85c3-18af791ef66a) |  
| key\_name                             | mykey                                         |  
| name                                 | provider-instance                             |  
| os-extended-volumes:volumes\_attached | \[\]                                            |  
| progress                             | 0                                             |  
| project\_id                           | 6c91006efd3e4424b5dc3cf302110a79              |  
| properties                           |                                               |  
| security\_groups                      | \[\{u'name': u'default'\}\]                       |  
| status                               | BUILD                                         |  
| updated                              | 2017-08-06T06:11:52Z                          |  
| user\_id                              | 4770f06c75bc40b8a4d2ce6fc0f24286              |  
\+--------------------------------------+-----------------------------------------------+

**5、检查实例的状态和登录实例**

\[root@linux-node1 ~\]\# openstack server list  
\+--------------------------------------+-------------------+--------+--------------------------+  
| ID                                   | Name              | Status | Networks                 |  
\+--------------------------------------+-------------------+--------+--------------------------+  
| 3365c4b4-d487-4778-ad28-e2c675f085eb | provider-instance | ACTIVE | public-net=192.168.1.101 |  
\+--------------------------------------+-------------------+--------+--------------------------+  
  
计算节点可以看到kvm起来了

\[root@linux-node2 ~\]\#  virsh list  
 Id    Name                           State  
\----------------------------------------------------  
 1     instance-00000001              running

登录机器成功。因为密钥传进去了。不用密码  
  
创建过程中可以查看计算节点的日志，因为是计算节点创建的虚拟  
  
\[root@linux-node2 ~\]\# tail -f /var/log/nova/nova-compute.log  
2017-08-06 14:13:19.589 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Final resource view: name=linux-node2.shi.com phys\_ram=1023MB used\_ram=576MB phys\_disk=46GB used\_disk=1GB total\_vcpus=1 used\_vcpus=1 pci\_stats=\[\]  
2017-08-06 14:13:19.841 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Compute\_service record updated for linux-node2.shi.com:linux-node2.shi.com  
2017-08-06 14:14:14.270 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Auditing locally available compute resources for node linux-node2.shi.com  
2017-08-06 14:14:17.336 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Total usable vcpus: 1, total allocated vcpus: 1  
2017-08-06 14:14:17.338 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Final resource view: name=linux-node2.shi.com phys\_ram=1023MB used\_ram=576MB phys\_disk=46GB used\_disk=1GB total\_vcpus=1 used\_vcpus=1 pci\_stats=\[\]  
2017-08-06 14:14:17.539 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Compute\_service record updated for linux-node2.shi.com:linux-node2.shi.com  
2017-08-06 14:15:18.450 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Auditing locally available compute resources for node linux-node2.shi.com  
2017-08-06 14:15:19.397 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Total usable vcpus: 1, total allocated vcpus: 1  
2017-08-06 14:15:19.397 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Final resource view: name=linux-node2.shi.com phys\_ram=1023MB used\_ram=576MB phys\_disk=46GB used\_disk=1GB total\_vcpus=1 used\_vcpus=1 pci\_stats=\[\]  
2017-08-06 14:15:19.445 3221 INFO nova.compute.resource\_tracker \[req-740c7604-1350-4295-a10f-d75652b4642d - - - - -\] Compute\_service record updated for linux-node2.shi.com:linux-node2.shi.com

虚拟机创建失败，需要看所有服务的所有日志，根据时间查看可疑的原因

\[root@linux-node1 ~\]\# `grep 'ERROR' /var/log/glance/*`  
\[root@linux-node1 ~\]\# `grep 'ERROR' /var/log/keystone/*`  
\[root@linux-node1 ~\]\# `grep 'ERROR' /var/log/nova/*` ``  
``\[root@linux-node1 ~\]\# `grep 'ERROR' /var/log/neutron/*`

要使用demo用户才能查看创建的主机,因为本来就是demo用户创建的

\[root@linux-node1 ~\]\# openstack server list  
  
\[root@linux-node1 ~\]\# source demo-openstack.sh

获取它控制台的地址  
\[root@linux-node1 ~\]\# openstack console url show provider-instance  
\+-------+----------------------------------------------------------------------------------+  
| Field | Value                                                                            |  
\+-------+----------------------------------------------------------------------------------+  
| type  | novnc                                                                            |  
| url   | http://192.168.1.2:6080/vnc\_auto.html?token=7f9daf00-54b3-4b9f-99eb-a3c30981de38 |  
\+-------+----------------------------------------------------------------------------------+

把上面这一串复制到浏览器。可以以网页方式打开一个vnc窗口,上面链接的token是有时间有效期的，会变的

上面的6080端口映射到了192.168.1.3的5900端口

浏览器页面可以登录

查看计算节点端口启动情况，有个5900端口，就是vnc的

\[root@linux-node2 ~\]\#  netstat -lntp  
Active Internet connections (only servers)  
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name      
tcp        0      0 0.0.0.0:5900            0.0.0.0:\*               LISTEN      3456/qemu-kvm         
tcp        0      0 0.0.0.0:111             0.0.0.0:\*               LISTEN      1/systemd             
tcp        0      0 0.0.0.0:22              0.0.0.0:\*               LISTEN      1041/sshd             
tcp        0      0 127.0.0.1:25            0.0.0.0:\*               LISTEN      1728/master           
tcp6       0      0 :::111                  :::\*                    LISTEN      1/systemd             
tcp6       0      0 :::22                   :::\*                    LISTEN      1041/sshd             
tcp6       0      0 ::1:25                  :::\*                    LISTEN      1728/master

查看下连接情况

计算节点的5900端口和控制节点的6080端口

\[root@linux-node2 ~\]\# lsof -i:5900  
COMMAND   PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME  
qemu-kvm 3456 qemu   21u  IPv4  54787      0t0  TCP \*:rfb (LISTEN)  
qemu-kvm 3456 qemu   24u  IPv4  56301      0t0  TCP linux-node2:rfb->linux-node1:53158 (ESTABLISHED)  
  
\[root@linux-node1 ~\]\# lsof -i:6080  
COMMAND    PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME  
nova-novn 3509 nova    4u  IPv4  26745      0t0  TCP \*:6080 (LISTEN)  
nova-novn 9627 nova    4u  IPv4  26745      0t0  TCP \*:6080 (LISTEN)  
nova-novn 9627 nova    5u  IPv4  74962      0t0  TCP linux-node1:6080->promote.cache-dns.local:52711 (ESTABLISHED)  
nova-novn 9629 nova    4u  IPv4  26745      0t0  TCP \*:6080 (LISTEN)  
nova-novn 9629 nova    5u  IPv4  74964      0t0  TCP linux-node1:6080->promote.cache-dns.local:52715 (ESTABLISHED)  
nova-novn 9630 nova    4u  IPv4  26745      0t0  TCP \*:6080 (LISTEN)  
nova-novn 9630 nova    5u  IPv4  74965      0t0  TCP linux-node1:6080->promote.cache-dns.local:52716 (ESTABLISHED)  
nova-novn 9631 nova    4u  IPv4  26745      0t0  TCP \*:6080 (LISTEN)  
nova-novn 9631 nova    5u  IPv4  74966      0t0  TCP linux-node1:6080->promote.cache-dns.local:52717 (ESTABLISHED)  
nova-novn 9633 nova    4u  IPv4  26745      0t0  TCP \*:6080 (LISTEN)  
nova-novn 9633 nova    5u  IPv4  74969      0t0  TCP linux-node1:6080->promote.cache-dns.local:52721 (ESTABLISHED)

[Center]: /images/20220610/865685bd136e4d27b0068fd3a087739d.png
[Center 1]: /images/20220610/78c1479570f647688ac3503dfe9f38b5.png
[Center 2]: /images/20220610/3ff37238189d4e95ac60a1e5b4bdd4bf.png