openstack实践各种问题汇总

NOVA包打包
cd ~/rpmbuild/SPECS/
rpmbuild -bp op.spec
yum-builddep op.spec
cd BUILD
cp -r nova/ nova.ort/
修改代码
diff -aruN nova.org nova>xxx.patch
cp patch ../SOURCES/
vim op.spec 修改加patch，加LOG等
rpmbuild -ba op.spec

升级spec
rpmdev-bumpspec kernel.spec -u “Luo Fei < fei.luo@cs2c.com.cn >” -c “add user login wich password”

EXPECT的使用
http://scc.qibebt.cas.cn/docs/linux/script/TclTkall.pdf 语法说明
http://www.cnblogs.com/arlenhou/p/learn_expect.html
http://linux.chinaunix.net/techdoc/desktop/2007/02/14/950495.shtml

备份还原自动恢复
http://bbs.linuxtone.org/thread-19212-1-1.html
http://openstackoperationsguide.readthedocs.org/en/latest/Operations/Backup%20and%20Recovery.html

http://elastx.com/our-blog/backups-in-openstack-cloud#.VlbTypowjIU backup方案

http://www.cnblogs.com/sammyliu/p/4468757.html

nrpe root 权限：
http://blog.chinaunix.net/uid-1757778-id-3066418.html

网络不通
nova secgroup-create open open\ all

nova secgroup-add-rule open icmp -1 255 0.0.0.0/0
+————-+———–+———+———–+————–+
| IP Protocol | From Port | To Port | IP Range | Source Group |
+————-+———–+———+———–+————–+
| icmp | -1 | 255 | 0.0.0.0/0 | |
+————-+———–+———+———–+————–+
[root@vserver1 ~]# nova secgroup-add-rule open tcp 1 65535 0.0.0.0/0
+————-+———–+———+———–+————–+
| IP Protocol | From Port | To Port | IP Range | Source Group |
+————-+———–+———+———–+————–+
| tcp | 1 | 65535 | 0.0.0.0/0 | |
+————-+———–+———+———–+————–+
[root@vserver1 ~]# nova secgroup-add-rule open udp 1 65535 0.0.0.0/0
+————-+———–+———+———–+————–+
| IP Protocol | From Port | To Port | IP Range | Source Group |
+————-+———–+———+———–+————–+
| udp | 1 | 65535 | 0.0.0.0/0 | |
+————-+———–+———+———–+————–+
[root@vserver1 ~]# nova add-secgroup yongjun open
[root@vserver1 ~]# nova add-secgroup teacher open
[root@vserver1 ~]# nova add-secgroup shengping open
iptables -nvL 看到多了规则
Chain nova-compute-local (1 references)
pkts bytes target prot opt in out source destination
20 4552 nova-compute-inst-1 all – * * 0.0.0.0/0 10.1.80.127
20 5940 nova-compute-inst-2 all – * * 0.0.0.0/0 10.1.80.128
241 46182 nova-compute-inst-4 all – * * 0.0.0.0/0 10.1.80.129
从WINDOWS虚拟机里关闭防火墙，或者设置规则，之后就可以ping 通了

网络问题
https://github.com/cloudisopen/OpenStack/blob/master/source/Architecture/Network%20Design.rst

创建时候指定网络和IP
http://docs.ocselected.org/openstack-manuals/kilo/admin-guide-cloud/content/advanced_vm_creation.html

关于WEB
RESTFUL 规范
http://www.ruanyifeng.com/blog/2014/05/restful_api.html
http://novoland.github.io/%E8%AE%BE%E8%AE%A1/2015/08/17/Restful%20API%20%E7%9A%84%E8%AE%BE%E8%AE%A1%E8%A7%84%E8%8C%83.html

时间差8小时：
make sure that your compute nodes have theirs clocks synchronized with ntpd
add the ‘os_type’ propriety to your Windows image, it will fix the problem for your futures instances :
glance image-update –property os_type=windows image-id

change the ‘os_type’ propriety of your already existing instances, directly in the Nova database, table instance, then hard reboot the instances (you may want to shutdown your Windows before =)

启用HTTPS问题
http://www.marinamele.com/2014/09/security-on-django-app-https-everywhere.html

文件下载
http://www.jianshu.com/p/2ce715671340
联想
http://www.newsmth.net/nForum/#!article/Career_Upgrade/398899

rsa
http://my.oschina.net/kuaikuai/blog/208075?fromerr=QzhKmDkW
openssl rsa -in rsa_private_key.pem -pubout -out rsa_public_key.pem

839 openssl genrsa -out rsa_private_key.pem 1024
840 ls
841 cat rsa_private_key.pem
842 openssl pkcs8 -topk8 -inform PEM -in rsa_private_key.pem -outform PEM -nocrypt -out private_key.pem
843 ls
844 cat private_key.pem
845 openssl rsa -in rsa_private_key.pem -pubout -out rsa_public_key.pem

http://www.chenshake.com/openstack-created-virtual-machine-scheduling/
指定虚拟机启动

MYSQL连接数问题

管理平台所在机器上，修改/etc/my.cnf
增加：
max_connections=10000
open_files_limit=10000

结果如下：
[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock

Disabling symbolic-links is recommended to prevent assorted security risks

symbolic-links=0
max_connections=10000
open_files_limit=10000

Timed out waiting for a reply to message ID
nova-manage service list
看出来是nova network挂了
看日志，是IP被占用了

http://blog.sina.com.cn/s/blog_959491260101m2de.html 静态IP的方案

网桥问题：
http://blog.csdn.net/x_nazgul/article/details/20233237
IP注入问题：
OpenStack 的 metadata 服务机制 http://www.ibm.com/developerworks/cn/cloud/library/1509_liukg_openstackmeta/
metadata在OpenStack中的使用(1) http://lingxiankong.github.io/blog/2014/03/25/metadata/
Store metadata on a configuration drive http://docs.openstack.org/user-guide/cli_config_drive.html

OpenStack Networking without DHCP http://blog.oddbit.com/2015/06/26/openstack-networking-without-dhcp/

Openstack的网络 http://my.oschina.net/guol/blog/226973

解决Rabbitmq-server 启动失败

最近在使用devstack部署开发环境的时候，遇到了rabbitmq-server安装后运行启动脚本失败的情况：

                invoke-rc.d: initscript rabbitmq-server, action "start" failed.

原因在于rabbitmq会在启动前会解析主机名的地址是否可通。

需要在你的/etc/hosts添加上：

                127.0.0.1  hostname.domainname  hostname

直接编辑问题：
virt-install –virt-type kvm –name test –ram 1024 \
–disk path=/data/centos-6.4.qcow2,size=10,format=qcow2 \
–network network=default \
–graphics vnc,listen=0.0.0.0 –noautoconsole –os-type=windows –os-variant=win7

删除多余主机
https://thornelabs.net/2014/08/03/delete-duplicate-openstack-hypervisors-and-services.html

nova service-delete ID

镜像变化：
http://blog.chinaunix.net/uid-20940095-id-3504622.html
driver里查镜像下载过程

快照问题：
https://github.com/bohai/openstack-note/blob/master/OSF_snapshot.md
http://blog.csdn.net/duan101101/article/details/19424479

高可用方案：
https://www.cnblogs.com/sammyliu/category/724243.html
http://www.cnblogs.com/sammyliu/p/4995868.html

VPN推荐，目前一直再用shadowsocks用了几年了，免受坑人搜索的侵害，推荐给大家，下载地址：shadowsocks下载

openstack实践各种问题汇总

Disabling symbolic-links is recommended to prevent assorted security risks

相关阅读

相关文章

相关问答

相关文档