5.4. Configure the Image Service

Procedure 5.2. Configuring the Image Service SQL Database Connection

1. Set the value of the sql_connection configuration key in the glance-api.conf file:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT sql_connection mysql://USER:PASS@IP/DB

   Copy to Clipboard Toggle word wrap
   Replace the following values:

   • Replace USER with the Image service database user name, usually glance.
   • Replace PASS with the password of the database user.
   • Replace IP with the IP address or host name of the server hosting the database service.
   • Replace DB with the name of the Image service database, usually glance.
2. Set the value of the sql_connection configuration key in the glance-registry.conf file:

   # openstack-config --set /etc/glance/glance-registry.conf \
      DEFAULT sql_connection mysql://USER:PASS@IP/DB

   Copy to Clipboard Toggle word wrap
   Replace USER, PASS, IP, and DB with the same values used in the previous step.

Procedure 5.3. Creating Identity Records for the Image Service

1. Set up the shell to access Keystone as the admin user:

   # source ~/keystonerc_admin

   Copy to Clipboard Toggle word wrap
2. Create the glance user:

   [(keystone_admin)]# openstack user create --password PASSWORD glance
   +----------+----------------------------------+
   | Field    | Value                            |
   +----------+----------------------------------+
   | email    | None                             |
   | enabled  | True                             |
   | id       | b1f665b15a7943ccb4668c9e78e98a7c |
   | name     | glance                           |
   | username | glance                           |
   +----------+----------------------------------+

   Copy to Clipboard Toggle word wrap
   Replace PASSWORD with a secure password that will be used by the Image Service when authenticating with the Identity service.
3. Link the glance user and the admin role together within the context of the services tenant:

   [(keystone_admin)]# openstack role add --project services --user glance admin

   Copy to Clipboard Toggle word wrap
4. Create the glance Image service entry:

   [(keystone_admin)]# openstack service create --name glance \
           --description "Glance Image Service" \
           image

   Copy to Clipboard Toggle word wrap
5. Create the glance endpoint entry:

   [(keystone_admin)]#openstack endpoint create \
           --publicurl 'http://IP:9292' \ 
           --adminurl 'http://IP:9292' \  
           --internalurl 'http://IP:9292' \
           --region RegionOne \
           glance

   Copy to Clipboard Toggle word wrap
   Replace IP with the IP address or host name of the server hosting the Image service.

Procedure 5.4. Configuring the Image Service to Authenticate through the Identity Service

1. Configure the glance-api service:

   # openstack-config --set /etc/glance/glance-api.conf \
      paste_deploy flavor keystone
   # openstack-config --set /etc/glance/glance-api.conf \
      keystone_authtoken auth_host IP
   # openstack-config --set /etc/glance/glance-api.conf \
      keystone_authtoken auth_port 35357
   # openstack-config --set /etc/glance/glance-api.conf \
      keystone_authtoken auth_protocol http
   # openstack-config --set /etc/glance/glance-api.conf \      
      keystone_authtoken admin_tenant_name services
   # openstack-config --set /etc/glance/glance-api.conf \
      keystone_authtoken admin_user glance
   # openstack-config --set /etc/glance/glance-api.conf \
      keystone_authtoken admin_password PASSWORD

   Copy to Clipboard Toggle word wrap
2. Configure the glance-registry service:

   # openstack-config --set /etc/glance/glance-registry.conf \
      paste_deploy flavor keystone
   # openstack-config --set /etc/glance/glance-registry.conf \
      keystone_authtoken auth_host IP
   # openstack-config --set /etc/glance/glance-registry.conf \
      keystone_authtoken auth_port 35357   
   # openstack-config --set /etc/glance/glance-registry.conf \
      keystone_authtoken auth_protocol http
   # openstack-config --set /etc/glance/glance-registry.conf \
      keystone_authtoken admin_tenant_name services
   # openstack-config --set /etc/glance/glance-registry.conf \
      keystone_authtoken admin_user glance
   # openstack-config --set /etc/glance/glance-registry.conf \
      keystone_authtoken admin_password PASSWORD

   Copy to Clipboard Toggle word wrap

Procedure 5.5. Configuring the Image Service to use the Object Storage Service

1. Set the default_store configuration key to swift:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT default_store swift

   Copy to Clipboard Toggle word wrap
2. Set the swift_store_auth_address configuration key to the public endpoint for the Identity service:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT swift_store_auth_address http://IP:5000/v2.0/

   Copy to Clipboard Toggle word wrap
3. Add the container for storing images in the Object Storage service:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT swift_store_create_container_on_put True

   Copy to Clipboard Toggle word wrap
4. Set the swift_store_user configuration key, in the format TENANT:USER, to contain the tenant and user to use for authentication:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT swift_store_user services:swift

   Copy to Clipboard Toggle word wrap

   • If you followed the instructions in this guide to deploy Object Storage, replace these values with the services tenant and the swift user respectively (as shown in the command example above).
   • If you did not follow the instructions in this guide to deploy Object Storage, replace these values with the appropriate Object Storage tenant and user for your environment.
5. Set the swift_store_key configuration key to the password that was set for the swift user when deploying the Object Storage service:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT swift_store_key PASSWORD

   Copy to Clipboard Toggle word wrap

Procedure 5.6. Configuring the Firewall to Allow Image Service Traffic

1. Open the /etc/glance/glance-api.conf file in a text editor, and remove any comment characters preceding the following parameters:

   bind_host = 0.0.0.0
   bind_port = 9292

   Copy to Clipboard Toggle word wrap
2. Open the /etc/sysconfig/iptables file in a text editor.
3. Add an INPUT rule allowing TCP traffic on port 9292. The new rule must appear before any INPUT rules that REJECT traffic:

   -A INPUT -p tcp -m multiport --dports 9292 -j ACCEPT

   Copy to Clipboard Toggle word wrap
4. Save the changes to the /etc/sysconfig/iptables file.
5. Restart the iptables service to ensure that the change takes effect:

   # systemctl restart iptables.service

   Copy to Clipboard Toggle word wrap

Procedure 5.7. Configuring the Image Service (glance) to Use the RabbitMQ Message Broker

1. Set RabbitMQ as the notifier:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT notification_driver messaging

   Copy to Clipboard Toggle word wrap
2. Set the name of the RabbitMQ host:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT rabbit_host RABBITMQ_HOST

   Copy to Clipboard Toggle word wrap
   Replace RABBITMQ_HOST with the IP address or host name of the message broker.
3. Set the message broker port to 5672:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT rabbit_port 5672

   Copy to Clipboard Toggle word wrap
4. Set the RabbitMQ user name and password created for the Image service when RabbitMQ was configured:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT rabbit_userid glance
   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT rabbit_password GLANCE_PASS

   Copy to Clipboard Toggle word wrap
   Replace glance and GLANCE_PASS with the RabbitMQ user name and password created for the Image service.
5. When RabbitMQ was launched, the glance user was granted read and write permissions to all resources: specifically, through the virtual host /. Configure the Image service to connect to this virtual host:

   # openstack-config --set /etc/glance/glance-api.conf \
      DEFAULT rabbit_virtual_host /

   Copy to Clipboard Toggle word wrap

Procedure 5.8. Populating the Image Service Database

1. Log in to the system hosting the Image service.
2. Switch to the glance user:

   # su glance -s /bin/sh

   Copy to Clipboard Toggle word wrap
3. Initialize and populate the database identified in /etc/glance/glance-api.conf and /etc/glance/glance-registry.conf:

   $ glance-manage db_sync

   Copy to Clipboard Toggle word wrap

Procedure 5.9. Configuring Image and Compute Services to Send and Receive Images through the Local File System

1. Create a JSON document that exposes the Image file system metadata required by openstack-nova-compute.
2. Configure the Image service to use the JSON document.
3. Configure openstack-nova-compute to use the file system metadata provided by the Image service.