openstack安装（31）

验证操作

[root@controller ~]# source admin-openrc.sh #加载 admin 凭证来获取管理员能执行的命令访问权限

[root@controller ~]# ip netns #列出网络命名空间。你应该可以看到一个qrouter命名空间和两个qdhcp命名空间。

qrouter-649c8cfc-e117-4105-b55d-cd9214792ae3 (id: 2)

qdhcp-ce8a6c38-5a84-47c0-b058-9bdd8b67e179 (id: 1)

qdhcp-5fc60cce-0943-4844-b9e2-c768af2ea302 (id: 0)

[root@controller ~]# neutron router-port-list router #列出路由器上的端口来确定公网的网关IP 地址

+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+

| id | name | mac_address | fixed_ips |

+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+

| 65404353-b387-4243-81b8-a2cbeb5b6b4d | | fa:16:3e:a2:c5:29 | {"subnet_id": "91f26704-6ead-4d73-870e-115dd8377998", "ip_address": "172.16.1.1"} |

| d3d1023b-5cfc-473b-ace9-84e25a6cfdba | | fa:16:3e:15:19:d1 | {"subnet_id": "ac92ba15-daef-4bc3-a353-ed1325c85844", "ip_address": "192.168.1.201"} |

+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+

[root@controller ~]# ping -c 4 192.168.1.221 #从控制节点或任意公共物理网络上的主机Ping这个IP地址

PING 192.168.1.201 (192.168.1.221) 56(84) bytes of data.

64 bytes from 192.168.1.221: icmp_seq=1 ttl=64 time=0.293 ms

64 bytes from 192.168.1.221: icmp_seq=2 ttl=64 time=0.066 ms

64 bytes from 192.168.1.221: icmp_seq=3 ttl=64 time=0.120 ms

64 bytes from 192.168.1.221: icmp_seq=4 ttl=64 time=0.065 ms

--- 192.168.1.221 ping statistics ---

4 packets transmitted, 4 received, 0% packet loss, time 3000ms

rtt min/avg/max/mdev = 0.065/0.136/0.293/0.093 ms

生成一个密钥对

[root@controller ~]# source demo-openrc.sh

[root@controller ~]# ssh-keygen -q -N "" #可以跳过执行 ssh-keygen 命令而使用已存在的公钥

Enter file in which to save the key (/root/.ssh/id_rsa):

[root@controller ~]# nova keypair-add --pub-key ~/.ssh/id_rsa.pub mykey #生成和添加秘钥对

[root@controller ~]# nova keypair-list #验证公钥的添加

+-------+-------------------------------------------------+

| Name | Fingerprint |

+-------+-------------------------------------------------+

| mykey | 18:29:30:72:2d:e3:02:e5:a0:79:ea:09:8e:1b:a8:ae |

+-------+-------------------------------------------------+

添加安全组规则(默认情况下， default安全组适用于所有实例并且包括拒绝远程访问实例的防火墙规则。推荐至少允许ICMP (ping) 和安全shell(SSH))

[root@controller ~]# nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0 #允许 ICMP (ping)

+-------------+-----------+---------+-----------+--------------+

| IP Protocol | From Port | To Port | IP Range | Source Group |

+-------------+-----------+---------+-----------+--------------+

| icmp | -1 | -1 | 0.0.0.0/0 | |

+-------------+-----------+---------+-----------+--------------+

[root@controller ~]# nova secgroup-add-rule default tcp 22 22 0.0.0.0/0 #允许安全 shell (SSH) 的访问

+-------------+-----------+---------+-----------+--------------+

| IP Protocol | From Port | To Port | IP Range | Source Group |

+-------------+-----------+---------+-----------+--------------+

| tcp | 22 | 22 | 0.0.0.0/0 | |

+-------------+-----------+---------+-----------+--------------+

#一个实例指定了虚拟机资源的大致分配，包括处理器、内存和存储[root@controller ~]# source demo-openrc.sh[root@controller ~]# nova flavor-list #列出可用类型,实验使用m1.tiny方案。

+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+

| ID | Name | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public |

+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+

| 1 | m1.tiny | 512 | 1 | 0 | | 1 | 1.0 | True |

| 2 | m1.small | 2048 | 20 | 0 | | 1 | 1.0 | True |

| 3 | m1.medium | 4096 | 40 | 0 | | 2 | 1.0 | True |

| 4 | m1.large | 8192 | 80 | 0 | | 4 | 1.0 | True |

| 5 | m1.xlarge | 16384 | 160 | 0 | | 8 | 1.0 | True |

+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+

[root@controller ~]# nova image-list+--------------------------------------+--------+--------+--------+

| ID | Name | Status | Server |

+--------------------------------------+--------+--------+--------+

| 2df37e06-ed46-4399-b5d0-f643640b6a52 | cirros | ACTIVE | |

+--------------------------------------+--------+--------+--------+

[root@controller ~]# neutron net-list+--------------------------------------+---------+-----------------------------------------------------+

| id | name | subnets |

+--------------------------------------+---------+-----------------------------------------------------+

| 5fc60cce-0943-4844-b9e2-c768af2ea302 | public | ac92ba15-daef-4bc3-a353-ed1325c85844 192.168.1.0/24 |

| ce8a6c38-5a84-47c0-b058-9bdd8b67e179 | private | 91f26704-6ead-4d73-870e-115dd8377998 172.16.1.0/24 |

+--------------------------------------+---------+-----------------------------------------------------+

[root@controller ~]# nova secgroup-lsit +--------------------------------------+---------+------------------------+

| Id | Name | Description |

+--------------------------------------+---------+------------------------+

| 0771996c-9673-4ce0-b6c6-8a890a326295 | default | Default security group |

+--------------------------------------+---------+------------------------+

[root@controller ~]# nova boot --flavor m1.tiny --image cirros --nic net-id=ce8a6c38-5a84-47c0-b058-9bdd8b67e179 --security-group default --key-name mykey private-instance #启动实例

+--------------------------------------+-----------------------------------------------+

| Property | Value |

+--------------------------------------+-----------------------------------------------+

| OS-DCF:diskConfig | MANUAL |

| OS-EXT-AZ:availability_zone | |

| OS-EXT-STS:power_state | 0 |

| OS-EXT-STS:task_state | scheduling |

| OS-EXT-STS:vm_state | building |

| OS-SRV-USG:launched_at | - |

| OS-SRV-USG:terminated_at | - |

| accessIPv4 | |

| accessIPv6 | |

| adminPass | VLYaSAvPAE54 |

| config_drive | |

| created | 2018-02-05T12:43:27Z |

| flavor | m1.tiny (1) |

| hostId | |

| id | de88100a-47f1-4be5-b54d-e14d828e1150 |

| image | cirros (2df37e06-ed46-4399-b5d0-f643640b6a52) |

| key_name | mykey |

| metadata | {} |

| name | private-instance |

| os-extended-volumes:volumes_attached | [] |

| progress | 0 |

| security_groups | default |

| status | BUILD |

| tenant_id | a152b2b891a147dfa3068d66311ad0c3 |

| updated | 2018-02-05T12:43:27Z |

| user_id | 182ee839b7584748aedb1cbda6d55ce2 |

+--------------------------------------+-----------------------------------------------+

[root@controller ~]#nova list #检查实例的状态+--------------------------------------+------------------+--------+------------+-------------+--------------------+

| ID | Name | Status | Task State | Power State | Networks |

+--------------------------------------+------------------+--------+------------+-------------+--------------------+

| de88100a-47f1-4be5-b54d-e14d828e1150 | private-instance | ACTIVE | - | Running | private=172.16.1.3 |

+--------------------------------------+------------------+--------+------------+-------------+--------------------+

[root@controller ~]# nova get-vnc-console private-instance novnc #获取实例的 Virtual Network Computing (VNC) 会话URL并从web浏览器访问它+-------+---------------------------------------------------------------------------------+

| Type | Url |

+-------+---------------------------------------------------------------------------------+

| novnc | http://controller:6080/vnc_auto.html?token=ffec3792-a83a-4c2e-a138-bac3f8c7595d |

+-------+---------------------------------------------------------------------------------+