controller:
keystone user-create --name=swift --pass=swift [email protected]
keystone user-role-add --user=swift --tenant=service --role=admin
创建Object Storage Service:
keystone service-create --name=swift --type=object-store --description="OpenStack Object Storage"
keystone endpoint-create \
--service-id=$(keystone service-list | awk '/ object-store / {print $2}') \
--publicurl='http://controller:8080/v1/AUTH_%(tenant_id)s' \
--internalurl='http://controller:8080/v1/AUTH_%(tenant_id)s' \
--adminurl=http://controller:8080
all node :
mkdir -p /etc/swift
vim /etc/swift/swift.conf
[swift-hash]
swift_hash_path_prefix = xrfuniounenqjnw
swift_hash_path_suffix = fLIbertYgibbitZ
swift0节点:
yum install openstack-swift-account openstack-swift-container \
openstack-swift-object xfsprogs xinetd
配置object,container ,account 的配置文件
openstack-config --set /etc/swift/account-server.conf DEFAULT bind_ip 10.0.0.51
openstack-config --set /etc/swift/container-server.conf DEFAULT bind_ip 10.0.0.51
openstack-config --set /etc/swift/object-server.conf DEFAULT bind_ip 10.0.0.51
新添加一块磁盘:
/dev/sdb
fdisk /dev/sdb
mkfs.xfs /dev/sdb1
echo "/dev/sdb1 /srv/node/sdb1 xfs noatime,nodiratime,nobarrier,logbufs=8 0 0" >> /etc/fstab
mkdir -p /srv/node/sdb1
mount /srv/node/sdb1
chown -R swift:swift /srv/node
vim /etc/rsyncd.conf
uid = swift
gid = swift
log file = /var/log/rsyncd.log
pid file = /var/run/rsyncd.pid
address = 10.0.1.51
[account]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/account.lock
[container]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/container.lock
[object]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/object.lock
vim /etc/xinetd.d/rsync
disable = no
service xinetd start
mkdir -p /var/swift/recon
chown -R swift:swift /var/swift/recon
配置 proxy-node(controller)
安装swift-proxy的相关包:
yum install openstack-swift-proxy memcached python-swiftclient python-keystone-auth-token
//按照官方的文档,没有python-keystone-auth-token,变成安装 python-keystoneclient
vim /etc/sysconfig/memcached
OPTIONS="-l 10.0.0.11"
启动memcached的服务,加入开机启动
service memcached restart
chkconfig memcached on
vim /etc/swift/proxy-server.conf
[DEFAULT]
bind_port = 8080
user = swift
[pipeline:main]
pipeline = healthcheck cache authtoken keystoneauth proxy-server
[app:proxy-server]
use = egg:swift#proxy
allow_account_management = true
account_autocreate = true
[filter:keystoneauth]
use = egg:swift#keystoneauth
operator_roles = Member,admin,swiftoperator
[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
# Delaying the auth decision is required to support token-less
# usage for anonymous referrers ('.r:*').
delay_auth_decision = true
# auth_* settings refer to the Keystone server
auth_protocol = http
auth_host = controller
auth_port = 35357
# the service tenant and swift username and password created in Keystone
admin_tenant_name = service
admin_user = swift
admin_password = swift
[filter:cache]
use = egg:swift#memcache
[filter:catch_errors]
use = egg:swift#catch_errors
[filter:healthcheck]
use = egg:swift#healthcheck
构建ring:
cd /etc/swift
swift-ring-builder account.builder create 18 3 1
swift-ring-builder container.builder create 18 3 1
swift-ring-builder object.builder create 18 3 1
swift-ring-builder account.builder add z1-10.0.0.51:6002R10.0.0.51:6005/sdb1 100
swift-ring-builder container.builder add z1-10.0.0.51:6001R10.0.0.51:6004/sdb1 100
swift-ring-builder object.builder add z1-10.0.0.51:6000R10.0.0.51:6003/sdb1 100
swift-ring-builder account.builder
swift-ring-builder container.builder
swift-ring-builder object.builder
swift-ring-builder account.builder rebalance
swift-ring-builder container.builder rebalance
swift-ring-builder object.builder rebalance
拷贝所有的ring.tar.gz文件到storage node
scp *ring.gz [email protected]:/etc/swift
若没有scp命令,执行:
yum install -y openssh-clients
chown -R swift:swift /etc/swift
service openstack-swift-proxy restart
chkconfig openstack-swift-proxy on
启动对象存储节点的服务,加入到开机启动
service openstack-swift-object restart
service openstack-swift-object-replicator restart
service openstack-swift-object-updater restart
service openstack-swift-object-auditor restart
service openstack-swift-container start
service openstack-swift-container-replicator restart
service openstack-swift-container-updater restart
service openstack-swift-container-auditor restart
service openstack-swift-account restart
service openstack-swift-account-replicator restart
service openstack-swift-account-reaper restart
service openstack-swift-account-auditor restart
chkconfig openstack-swift-object on
chkconfig openstack-swift-object-replicator on
chkconfig openstack-swift-object-updater on
chkconfig openstack-swift-object-auditor on
chkconfig openstack-swift-container on
chkconfig openstack-swift-container-replicator on
chkconfig openstack-swift-container-updater on
chkconfig openstack-swift-container-auditor on
chkconfig openstack-swift-account on
chkconfig openstack-swift-account-replicator on
chkconfig openstack-swift-account-reaper on
chkconfig openstack-swift-account-auditor on
或者是一次启动:
swift-init all start
controller节点验证swift服务
source admin-openrc.sh
swift stat
swift upload myfiles test.txt
swift upload myfiles test2.txt