检查
在进行实例的启动的时候，我们要先确认各个服务是否都启动了，可以通过下面的命令来看端口和服务是否启动
1、ps aux|grep python
2、netstat -lntup
检查镜像服务
[root@linux-node1 ~]# openstack image list^L+--------------------------------------+--------+--------+| ID | Name | Status |+--------------------------------------+--------+--------+| 63d8947e-5224-40b6-92e5-8c939e75d45e | cirros | active |+--------------------------------------+--------+--------+
创建网络
[root@linux-node1 ~]# openstack network create --share --provider-physical-network public --provider-network-type flat public+---------------------------+--------------------------------------+| Field | Value |+---------------------------+--------------------------------------+| admin_state_up | UP || availability_zone_hints | || availability_zones | || created_at | 2017-01-02T21:19:16Z || description | || headers | || id | 7f7b08e7-ea61-433f-bb3d-6195d893558e || ipv4_address_scope | None || ipv6_address_scope | None || mtu | 1500 || name | public || port_security_enabled | True || project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 || project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 || provider:network_type | flat || provider:physical_network | public || provider:segmentation_id | None || revision_number | 3 || router:external | Internal || shared | True || status | ACTIVE || subnets | || tags | [] || updated_at | 2017-01-02T21:19:16Z |+---------------------------+--------------------------------------+
查看网络
[root@linux-node1 ~]# openstack network list+--------------------------------------+--------+---------+| ID | Name | Subnets |+--------------------------------------+--------+---------+| 7f7b08e7-ea61-433f-bb3d-6195d893558e | public | |+--------------------------------------+--------+---------+
创建子网
[root@linux-node1 ~]# openstack subnet create --network public --allocation-pool start=192.168.56.100,end=192.168.56.200 --dns-nameserver 192.168.56.2 --gateway 102.168.56.2 --subnet-range 192.168.56.0/24 public-subnet+-------------------+--------------------------------------+| Field | Value |+-------------------+--------------------------------------+| allocation_pools | 192.168.56.100-192.168.56.200 || cidr | 192.168.56.0/24 || created_at | 2017-01-02T21:26:06Z || description | || dns_nameservers | 192.168.56.2 || enable_dhcp | True || gateway_ip | 102.168.56.2 || headers | || host_routes | || id | 422abca4-ac78-400f-aa7c-2296c69a1643 || ip_version | 4 || ipv6_address_mode | None || ipv6_ra_mode | None || name | public-subnet || network_id | 7f7b08e7-ea61-433f-bb3d-6195d893558e || project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 || project_id | 7ae0fb7deb5342d885a07c2c890a1ff4 || revision_number | 2 || service_types | [] || subnetpool_id | None || updated_at | 2017-01-02T21:26:06Z |+-------------------+--------------------------------------+
子网检查
[root@linux-node1 ~]# neutron subnet-list+--------------------------------------+---------------+-----------------+------------------------------------------------------+| id | name | cidr | allocation_pools |+--------------------------------------+---------------+-----------------+------------------------------------------------------+| 422abca4-ac78-400f-aa7c-2296c69a1643 | public-subnet | 192.168.56.0/24 | {"start": "192.168.56.100", "end": "192.168.56.200"} |+--------------------------------------+---------------+-----------------+------------------------------------------------------+[root@linux-node1 ~]# openstack subnet list+--------------------------------------+---------------+--------------------------------------+-----------------+| ID | Name | Network | Subnet |+--------------------------------------+---------------+--------------------------------------+-----------------+| 422abca4-ac78-400f-aa7c-2296c69a1643 | public-subnet | 7f7b08e7-ea61-433f-bb3d-6195d893558e | 192.168.56.0/24 |+--------------------------------------+---------------+--------------------------------------+-----------------+
创建虚拟类型、只能定义不能选
创建mi.nano类型
默认的最小规格的主机需要512 MB内存。对于环境中计算节点内存不足4 GB的，我们推荐创建只需要64 MB的``m1.nano``规格的主机。若单纯为了测试的目的，请使用``m1.nano``规格的主机来加载CirrOS镜像
[root@linux-node1 ~]# openstack flavor create --id 0 --vcpus 1 --ram 64 --disk 1 m1.nano+----------------------------+---------+| Field | Value |+----------------------------+---------+| OS-FLV-DISABLED:disabled | False || OS-FLV-EXT-DATA:ephemeral | 0 || disk | 1 || id | 0 || name | m1.nano || os-flavor-access:is_public | True || properties | || ram | 64 || rxtx_factor | 1.0 || swap | || vcpus | 1 |+----------------------------+---------+
生成一个键值对
大部分云镜像支持 :term:`public key authentication`而不是传统的密码登陆。在启动实例前，你必须添加一个公共密钥到计算服务。
导入``demo``项目凭证
[root@linux-node1 ~]# . demo-openstack [root@linux-node1 ~]# cat demo-openstack export OS_PROJECT_DOMAIN_NAME=defaultexport OS_USER_DOMAIN_NAME=defaultexport OS_PROJECT_NAME=demoexport OS_USERNAME=demoexport OS_PASSWORD=demoexport OS_AUTH_URL=http://192.168.56.11:5000/v3export OS_IDENTITY_API_VERSION=3export OS_IMAGE_API_VERSION=2
2. 生成和添加秘钥对：
[root@linux-node1 ~]# ssh-keygen -q -N ""Enter file in which to save the key (/root/.ssh/id_rsa): [root@linux-node1 ~]# [root@linux-node1 ~]# openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey+-------------+-------------------------------------------------+| Field | Value |+-------------+-------------------------------------------------+| fingerprint | e9:a3:e6:4c:97:73:12:25:ea:8e:39:ea:a0:d5:d2:e6 || name | mykey || user_id | f0c69bad72b54e0daef92c2295425932 |+-------------+-------------------------------------------------+
另外，你可以跳过执行 ssh-keygen 命令而使用已存在的公钥。
3. 验证公钥的添加
[root@linux-node1 ~]# openstack keypair list+-------+-------------------------------------------------+| Name | Fingerprint |+-------+-------------------------------------------------+| mykey | e9:a3:e6:4c:97:73:12:25:ea:8e:39:ea:a0:d5:d2:e6 |+-------+-------------------------------------------------+
增加安全组规则
默认情况下， ``default``安全组适用于所有实例并且包括拒绝远程访问实例的防火墙规则。对诸如CirrOS这样的Linux镜像，我们推荐至少允许ICMP (ping) 和安全shell(SSH)规则。
-
添加规则到
default安全组。Permit ICMP (ping):
[root@linux-node1 ~]# openstack security group rule create --proto icmp default+-------------------+--------------------------------------+| Field | Value |+-------------------+--------------------------------------+| created_at | 2017-01-02T21:44:26Z || description | || direction | ingress || ethertype | IPv4 || headers | || id | b4f7536d-86f1-491e-b167-069a09507e2b || port_range_max | None || port_range_min | None || project_id | 9b913d25891849baa55b21d837e9b63d || project_id | 9b913d25891849baa55b21d837e9b63d || protocol | icmp || remote_group_id | None || remote_ip_prefix | 0.0.0.0/0 || revision_number | 1 || security_group_id | be5584d7-7e14-4bc9-a74c-109f216b09c4 || updated_at | 2017-01-02T21:44:26Z |+-------------------+--------------------------------------+
允许安全 shell (SSH) 的访问：
[root@linux-node1 ~]# openstack security group rule create --proto tcp --dst-port 22 default+-------------------+--------------------------------------+| Field | Value |+-------------------+--------------------------------------+| created_at | 2017-01-02T21:46:29Z || description | || direction | ingress || ethertype | IPv4 || headers | || id | 4572dc39-6723-49f7-9556-c0f90ca7cc96 || port_range_max | 22 || port_range_min | 22 || project_id | 9b913d25891849baa55b21d837e9b63d || project_id | 9b913d25891849baa55b21d837e9b63d || protocol | tcp || remote_group_id | None || remote_ip_prefix | 0.0.0.0/0 || revision_number | 1 || security_group_id | be5584d7-7e14-4bc9-a74c-109f216b09c4 || updated_at | 2017-01-02T21:46:29Z |+-------------------+--------------------------------------+[root@linux-node1 ~]#
启动一个实例
如果选择网络选项1，你只能在公网创建实例。如果选择网络选项2，你可以在公网或私网创建实例。
确定实例选项
启动一台实例，您必须至少指定一个类型、镜像名称、网络、安全组、密钥和实例名称。
在控制节点上，获得
admin凭证来获取只有管理员能执行的命令的访问权限：
root@linux-node1 ~]# . demo-openstack
2 .一个实例指定了虚拟机资源的大致分配，包括处理器、内存和存储。
列出可用类型：
[root@linux-node1 ~]# openstack flavor list+----+---------+-----+------+-----------+-------+-----------+| ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public |+----+---------+-----+------+-----------+-------+-----------+| 0 | m1.nano | 64 | 1 | 0 | 1 | True |+----+---------+-----+------+-----------+-------+-----------+
您也可以以 ID 引用类型。
3. 列出可用镜像：(这个实例使用``cirros``镜像。)
[root@linux-node1 ~]# openstack image list+--------------------------------------+--------+--------+| ID | Name | Status |+--------------------------------------+--------+--------+| 63d8947e-5224-40b6-92e5-8c939e75d45e | cirros | active |+--------------------------------------+--------+--------+
4.列出可用网络：
[root@linux-node1 ~]# openstack network list+--------------------------------------+--------+--------------------------------------+| ID | Name | Subnets |+--------------------------------------+--------+--------------------------------------+| 7f7b08e7-ea61-433f-bb3d-6195d893558e | public | 422abca4-ac78-400f-aa7c-2296c69a1643 |+--------------------------------------+--------+--------------------------------------+
这个实例使用 ``provider``公有网络。 你必须使用ID而不是名称才可以使用这个网络。如果你选择选项2，输出信息应该也包含私网``selfservice``的信息。
5. 列出可用的安全组：
[root@linux-node1 ~]# openstack security group list +--------------------------------------+---------+------------------------+----------------------------------+| ID | Name | Description | Project |+--------------------------------------+---------+------------------------+----------------------------------+| be5584d7-7e14-4bc9-a74c-109f216b09c4 | default | Default security group | 9b913d25891849baa55b21d837e9
启动云主机
[root@linux-node1 ~]# openstack server create --flavor m1.nano --image cirros \> --nic net-id=7f7b08e7-ea61-433f-bb3d-6195d893558e --security-group default \> --key-name mykey demo-instance+--------------------------------------+-----------------------------------------------+| Field | Value |+--------------------------------------+-----------------------------------------------+| OS-DCF:diskConfig | MANUAL || OS-EXT-AZ:availability_zone | || OS-EXT-STS:power_state | NOSTATE || OS-EXT-STS:task_state | scheduling || OS-EXT-STS:vm_state | building || OS-SRV-USG:launched_at | None || OS-SRV-USG:terminated_at | None || accessIPv4 | || accessIPv6 | || addresses | || adminPass | vLpymTa8sfzK || config_drive | || created | 2017-01-02T22:01:06Z || flavor | m1.nano (0) || hostId | || id | f0778b83-e6f9-41f4-a514-dffe86aff6aa || image | cirros (63d8947e-5224-40b6-92e5-8c939e75d45e) || key_name | mykey || name | demo-instance || os-extended-volumes:volumes_attached | [] || progress | 0 || project_id | 9b913d25891849baa55b21d837e9b63d || properties | || security_groups | [{u'name': u'default'}] || status | BUILD || updated | 2017-01-02T22:01:07Z || user_id | f0c69bad72b54e0daef92c2295425932 |+--------------------------------------+-----------------------------------------------+
检查实例状态
[root@linux-node1 ~]# openstack server list+--------------------------------------+---------------+--------+-----------------------+------------+| ID | Name | Status | Networks | Image Name |+--------------------------------------+---------------+--------+-----------------------+------------+| f0778b83-e6f9-41f4-a514-dffe86aff6aa | demo-instance | ACTIVE | public=192.168.56.104 | cirros |+--------------------------------------+---------------+--------+-----------------------+------------+
使用虚拟控制台访问实例
获取你*的 Virtual Network Computing (VNC) 会话URL并从web浏览器访问它：
[root@linux-node1 ~]# openstack console url show demo-instance+-------+------------------------------------------------------------------------------------+| Field | Value |+-------+------------------------------------------------------------------------------------+| type | novnc || url | http://192.168.56.11:6080/vnc_auto.html?token=c88bb128-97de-4a48-bb96-3f97023b3e6e |+-------+------------------------------------------------------------------------------------+
验证能否ping通公有网络的网关：
验证ping外网
这里出现一个小bug，ping不同外网，
添加一条默认路由就可以了
route add default gw 192.168.56.2
本文出自 “Old-K” 博客，谢绝转载！