Object Storage(Swift)安装过程——Havana

　　自从看了Havana安装文档有关Swift的安装一节，发现H版的安装过程与以前还是有些差别的。不过大致过程还是那些。下面简单介绍下我们安装的过程吧，具体请参考官方文档http://docs.openstack.org/havana/install-guide/install/apt/content/ch_swift.html

　　原创博客：http://www.cnblogs.com/awy-blog/p/3507044.html

一、安装前准备

• 对于keystone的安装，请参照有关Havana的安装指南http://www.cnblogs.com/awy-blog/p/3447176.html
• 安装过程中都必须在root下进行

$ sudo su 

• 每个结点上都必须含有Havana Package:

# apt-get install python-software-properties
# add-apt-repository cloud-archive:havana

• 升级系统

#apt-get update
#apt-get upgrade
#apt-get dist-upgrade

二、统一安装

这一节的内容必须在每个结点上安装，无论是代理结点还是存储结点，这一步不能省，必须做到，每个结点上都一样。

2.1.安装核心Swift文件和OpenSSH

# apt-get install -y swift openssh-server rsync memcached python-netifaces python-xattr python-memcache

2.2.在所有结点上创建和填充配置目录

# mkdir -p /etc/swift
# chown -R swift:swift /etc/swift/

2.3.在所有结点上创建/etc/swift/swift.conf,内容如下：

[swift-hash]
# random unique string that can never change (DO NOT LOSE)
swift_hash_path_suffix = openstack

注：suffix的值在/etc/swift/swift.conf应该被设为随机字符串,且这个文件在集群中的所有结点都必须相同。

三、安装和配置存储结点

3.1.安装存储结点包：

# apt-get install swift-account swift-container swift-object xfsprogs

3.2.对于你想要用于存储结点上的每个设备，建立XFS卷，这里建设系统中有/dev/sdb1/(以这个为例，如果临时分出的空间，可以用fdisk新建分区，这里具体操作请查阅fdisk相关命令):

# mkdir -p /srv/node/sdb1
# mkfs.xfs /dev/sdb1
# echo "/dev/sdb1 /srv/node/sdb1 xfs noatime,nodiratime,nobarrier,logbufs=8 0 0" >> /etc/fstab
# mount /srv/node/sdb1
# chown -R swift:swift /srv/node

3.3.创建/etc/rsyncd.conf:

uid = swift
gid = swift
log file = /var/log/rsyncd.log
pid file = /var/run/rsyncd.pid
address = 10.10.10.54      #存储结点的IP地址
 
[account]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/account.lock
 
[container]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/container.lock
 
[object]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/object.lock

3.4.在/etc/default/rsync编辑下列行：

RSYNC_ENABLE = true

3.5.启动rsync守护进程：

# service rsync start

3.6.创建swift recon缓存目录并赋予它权限:

# mkdir -p /var/swift/recon
# chown -R swift:swift /var/swift/recon

四、安装和配置代理结点

4.1.安装swift-proxy服务：

# apt-get install -y swift-proxy memcached python-keystoneclient python-swiftclient python-webob python-pip

4.2.为SSL创建self-signed cert

# cd /etc/swift
# openssl req -new -x509 -nodes -out cert.crt -keyout cert.key

4.3.修改memcached以监听默认的接口在本地、非公共的网络。在/etc/memcached.conf文件中编辑这一行：

sed -i 's/-l 127.0.0.1/-l 10.10.10.51/g' > /etc/memcached.conf

4.4.重启memcached服务：

# service memcached restart

4.5.仅在ubuntu上使用:因为发布的包不包含keystoneauth中间件的拷贝，确保proxy服务包含他们：

# apt-get install -y git
# git clone https://github.com/openstack/swift.git
# cd swift
# python setup.py install
# swift-init proxy start

4.6.创建/etc/swift/proxy-server.conf

[DEFAULT]
bind_port = 8888
user = swift
 
[pipeline:main]
pipeline = healthcheck cache authtoken keystoneauth proxy-server
 
[app:proxy-server]
use = egg:swift#proxy
allow_account_management = true
account_autocreate = true
 
[filter:keystoneauth]
use = egg:swift#keystoneauth
operator_roles = Member,admin,swiftoperator
 
[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
 
# Delaying the auth decision is required to support token-less
# usage for anonymous referrers ('.r:*').
delay_auth_decision = true
 
# cache directory for signing certificate
signing_dir = /home/swift/keystone-signing
 
# auth_* settings refer to the Keystone server
auth_protocol = http
auth_host = 10.10.10.51
auth_port = 35357
 
# the same admin_token as provided in keystone.conf
admin_token = ADMIN
 
# the service tenant and swift userid and password created in Keystone
admin_tenant_name = service
admin_user = swift
admin_password = 111111
 
[filter:cache]
use = egg:swift#memcache
 
[filter:catch_errors]
use = egg:swift#catch_errors
 
[filter:healthcheck]
use = egg:swift#healthcheck

4.7.创建signing_dir并赋予它权限

# mkdir -p /home/swift/keystone-signing
# chown -R swift:swift /home/swift/keystone-signing

4.8.创建accout, container和object环(rings)。后面的数字第一个为存储分区数，第二个为备份次数，备份次数不能小于ZONE数目，第三个为延迟删除的时间。（红色部分可以修改，按照存储结点数修改）

# cd /etc/swift
# swift-ring-builder account.builder create 18  1
# swift-ring-builder container.builder create 18  1
# swift-ring-builder object.builder create 18  1

4.9.对每个存储结点设备在每个结点添加entries到每个环节中：

# swift-ring-builder account.builder add z1-10.10.10.54:6002R10.10.10.54:6005/sdb1 100
# swift-ring-builder container.builder add z1-10.10.10.54:6001R10.10.10.54:6005/sdb1 100
# swift-ring-builder object.builder add z1-10.10.10.54:6000R10.10.10.54:6005/sdb1 100

4.10.验证每个环的内容：

# swift-ring-builder account.builder
# swift-ring-builder container.builder
# swift-ring-builder object.builder

4.11.平衡环：

# swift-ring-builder accout.builder rebalance
# swift-ring-builder container.builder rebalance
# swift-ring-builder object.builder rebalance

4.12.复制account.ring.gz, container.ring.gz和object.ring.gz文件到每个proxy和storage结点的/etc/swift：

# cd /etc/swift
# scp account.ring.gz container.ring.gz object.ring.gz storage@10.10.10.54:/etc/swift/

4.13.确定所有的配置文件都被swift用户所拥有：

# chown -R swift:swift /etc/swift

4.14.启动proxy服务：

# swift-init proxy restart

4.15.在存储结点上，启动所有服务：

# swift-init all restart

五、验证安装：

5.1.在proxy结点上操作，首先导入环境变量：

$ export OS_PASSWORD=ADMIN_PASS
$ export OS_AUTH_URL=http://controller:5000/v2.0

5.2.运行下列swift命令并带上正确认证服务的URL

$ swift -V 2.0 -A $OS_AUTH_URL -U service:swift -K $ADMINPASS stat
 
Account: AUTH_16542d36818f480d94554438c1fc0761
Containers: 0
   Objects: 0
     Bytes: 0
Content-Type: text/plain; charset=utf-8
X-Timestamp: 1388986871.53485
X-Put-Timestamp: 1388986871.53485