OpenStack File Share Service(Manila) For Centos
Introduction：
Manila is the File Shareservice project for OpenStack. To administer the OpenStack File Share service,it is helpful to understand a number of concepts like share networks, shares,multi-tenancy and back ends that can be configured with Manila. Whenconfiguring the File Share service, it is required to declare at least one backend. Manila can be configured to run in a single-node configuration or acrossmultiple nodes. Manila can be configured to provision shares from one or moreback ends. The OpenStack File Share service allows you to offer file-shareservices to users of an OpenStack installation.
1.Create the database.
mysql -u root -p CREATE DATABASE manila; GRANT ALL PRIVILEGES ON manila.* TO ‘manila‘@‘localhost‘IDENTIFIED BY ‘password‘; GRANT ALL PRIVILEGES ON manila.* TO ‘manila‘@‘%‘IDENTIFIED BY ‘password‘;
2.Create users, roles，service and API endpoint.
openstack user create --password-prompt manila openstack role add --project service --user manila admin openstack service create --name manila --description"OpenStack Shared Filesystems" share openstack endpoint create --publicurlhttp://10.4.15.150:8786/v1/%\(tenant_id\)s --internalurlhttp://10.4.15.150:8786/v1/%\(tenant_id\)s --adminurlhttp://10.4.15.150:8786/v1/%\(tenant_id\)s --regionRegionOne share
3.Install required packages on controller node.openstack-manila-api and openstack-manila-scheduler services will run on thecontroller node.
yum install openstack-manila python-manilapython-manilaclient
4.Installed required packages on compute node.openstack-manila-share service will run on the compute node.
yum install openstack-mania-share python-manila
5. Edit the /etc/manila/manila.conf file andapi-paste.ini
[DEFAULT] osapi_share_listen=0.0.0.0 api_paste_config=/etc/manila/api-paste.ini state_path=/var/lib/manila glance_host=X.X.X.X storage_availability_zone=nova rootwrap_config=/etc/manila/rootwrap.conf auth_strategy=keystone enabled_share_backends=backend1 nova_catalog_info=compute:nova:publicURL nova_catalog_admin_info=compute:nova:adminURL nova_api_insecure=False nova_admin_username=nova nova_admin_password=password nova_admin_tenant_name=service nova_admin_auth_url=http://X.X.X.X:5000/v2.0 network_api_class=manila.network.neutron.neutron_network_plugin.NeutronNetworkPlugin debug=True verbose=True log_dir=/var/log/manila use_syslog=False rpc_backend=rabbit control_exchange=openstack amqp_durable_queues=False cinder_catalog_info=volume:cinder:publicURL neutron_api_insecure=False cinder_admin_username=cinder neutron_auth_strategy=keystone cinder_admin_password=password notification_driver=messaging neutron_admin_tenant_name=service cinder_cross_az_attach=True neutron_url=http://X.X.X.X:9696 cinder_api_insecure=False cinder_admin_auth_url=http://X.X.X.X:5000/v2.0 cinder_http_retries=3 cinder_admin_tenant_name=service neutron_admin_password=password neutron_admin_username=neutron neutron_admin_auth_url=http://X.X.X.X:5000/v2.0 neutron_url_timeout=30 default_share_type = default sql_connection = mysql://manila:[email protected]/manila [oslo_messaging_rabbit] rabbit_host = controller rabbit_userid = openstack rabbit_password = password [oslo_concurrency] lock_path=/var/lock/manila Warning!!! This Manila Share Backend is configure on Manila Share node,So Manila-api and Manila-scheduler not configure. [backend1] service_network_division_mask=28 volume_name_template=manila-share-%s service_instance_network_helper_type=neutron max_time_to_build_instance=300 share_mount_path=/shares manila_service_keypair_name=manila-service service_network_name=manila_service_network interface_driver=manila.network.linux.interface.OVSInterfaceDriver service_network_cidr=10.254.0.0/16 service_instance_flavor_id=100 service_instance_smb_config_path=$share_mount_path/smb.conf volume_snapshot_name_template=manila-snapshot-%s share_backend_name=backend1 smb_template_config_path=$state_path/smb.conf service_instance_name_template=manila_service_instance_%s driver_handles_share_servers = True service_instance_user = manila service_instance_password=manila service_image_name = manila-service-image path_to_private_key = /root/.ssh/id_rsa path_to_public_key = /root/.ssh/id_rsa.pub share_backend_name = GENERIC1 share_driver = manila.share.drivers.generic.GenericShareDriver share_helpers=CIFS=manila.share.drivers.generic.CIFSHelper,NFS=manila.share.drivers.generic.NFSHelper share_volume_fstype=ext4 max_time_to_attach=120 service_instance_security_group=manila-service connect_share_server_to_tenant_network=False Replace /etc/manila/api-paste.ini,Configure Keystone authtoken. service_protocol = http service_host = X.X.X.X service_port = 5000 auth_host = X.X.X.X auth_port = 35357 auth_protocol = http admin_tenant_name = service admin_user = manila admin_password = password signing_dir = /var/lib/manila auth_uri=http://X.X.X.X:5000/
6.Populate the Manila Database.
su -s /bin/sh -c "manila-manage db sync" manila
7.Start and enable manila services.
systemctl start openstack-manila-api systemctl start openstack-manila-scheduler systemctl enable openstack-manila-api systemctl enable openstack-manila-scheduler systemctl start openstack-manila-share systemctl enable openstack-manila-share
8.Upload manila service imageto glance.
wget https://github.com/uglide/manila-image-elements/releases/download/0.1.0/manila-service-image.qcow2 glance image-create --name "manila-service-image-new" --file manila-service-image.qcow2 --disk-format qcow2 --container-format bare --visibility public --progress
9.Create default share type.
manila type-create default True
10. Create Manila flavor type.
nova flavor-create manila-service-flavor 100 128 0 1
11. Create nova for manila Security Group.
nova secgroup-create manila-service ‘manila-service description‘ nova secgroup-add-rule manila-service icmp -1 -1 0.0.0.0/0 nova secgroup-add-rule manila-service tcp 22 22 0.0.0.0/0 nova secgroup-add-rule manila-service tcp 2049 2049 0.0.0.0/0 nova secgroup-add-rule manila-service udp 2049 2049 0.0.0.0/0 nova secgroup-add-rule manila-service udp 445 445 0.0.0.0/0 nova secgroup-add-rule manila-service tcp 445 445 0.0.0.0/0 nova secgroup-add-rule manila-service tcp 137 139 0.0.0.0/0 nova secgroup-add-rule manila-service udp 137 139 0.0.0.0/0
12. Create share network.
manila share-network-create --name devinshare --neutron-net-id XXXXXXX --neutron-subnet-id XXXXXXX
13. Create NFS share.
manila create NFS 1 --name devin --share-network devinshare
14. Configure Manila access.
manila access-allow devin ip XXX(instance_ip) --access-level rw
时间： 2024-11-03 21:06:17